{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}Users - Pychestrate Configuration{% endblock %}

{% block content %}
<div class="page-header">
    <h1>Users</h1>
    <p>Manage user accounts and their access</p>
</div>

<div class="toolbar">
    <form method="get" class="actions-row">
        <input type="text" name="search" class="form-control w-lg" placeholder="Search users..." aria-label="Search users" 
               value="{{ search }}">
        {% if show_deleted %}<input type="hidden" name="show_deleted" value="1">{% endif %}
        <button type="submit" class="btn btn-secondary">
            {{ ui.icon("search") }} Search
        </button>
        <a href="{{ url_for(request_endpoint) }}" class="btn btn-secondary">Clear</a>
        {% if show_deleted %}
        <a href="{{ url_for(request_endpoint) }}{% if search %}?search={{ search | urlencode }}{% endif %}" class="btn btn-secondary" data-role="hide-deleted">Hide deleted accounts</a>
        {% else %}
        <a href="{{ url_for(request_endpoint) }}?show_deleted=1{% if search %}&amp;search={{ search | urlencode }}{% endif %}" class="btn btn-secondary" data-role="show-deleted">Show deleted accounts</a>
        {% endif %}
    </form>

    <a href="{{ url_for(request_endpoint) }}?format=csv{% if search %}&amp;search={{ search | urlencode }}{% endif %}{% if show_deleted %}&amp;show_deleted=1{% endif %}" class="btn btn-secondary" data-role="download-csv" title="Every {{ 'matching ' if search else '' }}user with the roles they hold everywhere, as a spreadsheet">
        {{ ui.icon("download") }} Download CSV
    </a>
    
    <a href="{{ url_for('config.user_create') }}" class="btn btn-primary">
        {{ ui.icon("add") }} Create User
    </a>
</div>

<div class="table-scroll" tabindex="0"><table class="data-table">
    <thead>
        <tr>
            <th scope="col">Username</th>
            <th scope="col">Email</th>
            <th scope="col">Display Name</th>
            <th scope="col">Status</th>
            <th scope="col">Roles</th>
            <th scope="col">Actions</th>
        </tr>
    </thead>
    <tbody>
        {% for user in users %}
        <tr>
            <td class="min-name"><a href="{{ url_for('config.user_detail', user_id=user.id) }}">{{ user.username }}</a></td>
            <td>{{ user.email }}</td>
            <td>{{ user.display_name }}</td>
            <td>
                {% if user.status == 'anonymised' %}
                <span class="badge badge-secondary">Deleted</span>
                {% elif user.status == 'invited' %}
                <span class="badge badge-secondary">Invited</span>
                {% elif user.is_active %}
                <span class="badge badge-success">Active</span>
                {% else %}
                <span class="badge badge-secondary">Inactive</span>
                {% endif %}
            </td>
            <td>{{ user.roles | join(', ') }}</td>
            <td>
                <div class="row-actions">
                    {% if user.status != 'anonymised' %}
                    <a href="{{ url_for('config.user_edit', user_id=user.id) }}" class="btn btn-sm btn-secondary">Edit</a>
                    {% endif %}
                    {% if user.status == 'anonymised' %}
                    <span class="muted">Erased</span>
                    {% elif user.id == current_user_id %}
                    <span class="muted">(you)</span>
                    {% elif user.is_active %}
                    <form action="{{ url_for('config.user_deactivate', user_id=user.id) }}" method="post" data-confirm="Deactivate {{ user.username }}? They are signed out everywhere and cannot sign in until reactivated.">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                        <button type="submit" class="btn btn-sm btn-quiet-danger">Deactivate</button>
                    </form>
                    {% elif user.status == 'inactive' %}
                    <form action="{{ url_for('config.user_reactivate', user_id=user.id) }}" method="post">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                        <button type="submit" class="btn btn-sm btn-secondary">Reactivate</button>
                    </form>
                    <form action="{{ url_for('config.user_delete', user_id=user.id) }}" method="post" data-role="delete-form" data-confirm="Delete {{ user.username }}? Their name, email address, password, sign-in history, API tokens and memberships are erased permanently, and the account leaves this list. Only an id with no name stays, so the audit log still makes sense. This cannot be undone." data-confirm-type="{{ user.username }}">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                        <button type="submit" class="btn btn-sm btn-quiet-danger">Delete</button>
                    </form>
                    {% endif %}
                </div>
            </td>
        </tr>
        {% else %}
        {{ ui.empty_state("No users found", colspan=6) }}
        {% endfor %}
    </tbody>
</table></div>

{{ ui.pagination('config.user_list', page, total_pages, {'search': search, 'show_deleted': '1' if show_deleted else ''}) }}

<p class="muted mt">Total: {{ total }} user{{ '' if total == 1 else 's' }}</p>
{% endblock %}