{% extends "base.html" %}
{% set active_nav = "my-organization" %}

{% block title %}My Organization - LSMC Atlas{% endblock %}

{% block content %}
<div class="page-header">
    <div>
        <h1 class="page-title">{{ revision.name }}</h1>
        <p class="page-subtitle">My Organization</p>
    </div>
</div>

<!-- Organization Info Card -->
<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Information</h2>
        <span class="badge badge-{{ 'success' if revision.is_active else 'danger' }}">
            {{ 'Active' if revision.is_active else 'Inactive' }}
        </span>
    </div>
    <div class="card-body">
        <div class="flex gap-xl">
            <div class="flex-1">
                <dl class="definition-list">
                    <dt>Name</dt>
                    <dd>{{ revision.name }}</dd>
                    <dt>Display Name</dt>
                    <dd>{{ revision.display_name or '—' }}</dd>
                    <dt>Type</dt>
                    <dd><span class="badge badge-secondary">{{ revision.org_type or 'clinic' }}</span></dd>
                </dl>
            </div>
            <div class="flex-1">
                <dl class="definition-list">
                    <dt>Contact Email</dt>
                    <dd>{{ revision.contact_email or '—' }}</dd>
                    <dt>Contact Phone</dt>
                    <dd>{{ revision.contact_phone or '—' }}</dd>
                </dl>
            </div>
        </div>
    </div>
</div>

<!-- Quick Links -->
<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Manage</h2>
    </div>
    <div class="card-body">
        <div class="flex gap-md">
            <a href="/my-organization/users" class="btn btn-secondary">
                👥 Manage Users ({{ users|length }})
            </a>
            <a href="/my-organization/sites" class="btn btn-secondary">
                🏢 Manage Sites ({{ sites|length }})
            </a>
        </div>
    </div>
</div>

<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Bloom Integration</h2>
    </div>
    <div class="card-body">
        <div id="bloom-connection-status" data-bloom-connection-status="{{ bloom_connection_status.state }}" class="mb-md">
            <p class="mb-sm">
                <strong>Connection Status:</strong>
                <span class="badge badge-{{ bloom_connection_status.badge }}">{{ bloom_connection_status.label }}</span>
            </p>
            <p class="text-sm text-muted">{{ bloom_connection_status.detail }}</p>
        </div>
        <p class="text-muted">
            Organization settings are the default. A site-level setting overrides them when a TRF Test
            requests Bloom material for that site.
        </p>
        <p class="text-sm text-muted mb-md">
            Required Atlas fields for Bloom API access:
            <code>bloom_base_url</code>,
            <code>bloom_api_key_secret_ref</code>,
            <code>bloom_webhook_secret_ref</code>.
        </p>
        <form method="POST" action="/my-organization/integrations/bloom">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <div class="grid grid-cols-2 gap-lg">
                <div class="form-group">
                    <label class="form-label" for="org-bloom-enabled">Enabled</label>
                    <select id="org-bloom-enabled" name="enabled" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="true" {% if org_bloom_config and org_bloom_config.enabled %}selected{% endif %}>Enabled</option>
                        <option value="false" {% if not org_bloom_config or not org_bloom_config.enabled %}selected{% endif %}>Disabled</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-bloom-service-user">Service User</label>
                    <input id="org-bloom-service-user" name="bloom_service_user" class="form-input" value="{{ org_bloom_config.bloom_service_user if org_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Optional service account/user label used for Bloom-side audit context.</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-bloom-base-url">Bloom Base URL</label>
                    <input id="org-bloom-base-url" name="bloom_base_url" class="form-input" value="{{ org_bloom_config.bloom_base_url if org_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Bloom API host Atlas will call (example: <code>https://bloom.example.org</code>).</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-bloom-key-ref">API Key Secret Ref / Token</label>
                    <input id="org-bloom-key-ref" name="bloom_api_key_secret_ref" class="form-input" value="{{ org_bloom_config.bloom_api_key_secret_ref if org_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Per-tenant Bloom token source. Supported values: direct <code>blm_...</code> token, <code>env:MY_BLOOM_KEY</code>, or <code>file:/path/to/secret</code>.</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-bloom-webhook-ref">Webhook Secret Ref</label>
                    <input id="org-bloom-webhook-ref" name="bloom_webhook_secret_ref" class="form-input" value="{{ org_bloom_config.bloom_webhook_secret_ref if org_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Secret reference used to verify Bloom webhook signatures in Atlas.</p>
                </div>
            </div>
            {% if user.is_org_admin %}
            <div class="flex gap-sm">
                <button type="submit" name="action" value="validate" class="btn btn-secondary">Validate Credentials</button>
                <button type="submit" name="action" value="save" class="btn btn-primary">Save Organization Bloom Config</button>
            </div>
            {% endif %}
        </form>
    </div>
</div>

<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Storage Policy</h2>
    </div>
    <div class="card-body">
        {% if effective_org_storage_policy %}
        <p class="text-sm mb-md">
            Effective policy source:
            <strong>{{ 'site override' if effective_org_storage_policy.scope == 'site' else 'organization policy' }}</strong>
            · bucket <code>{{ effective_org_storage_policy.policy.bucket }}</code>
            · region <code>{{ effective_org_storage_policy.policy.region }}</code>
        </p>
        {% else %}
        <p class="text-sm text-muted mb-md">No enabled storage policy is configured yet.</p>
        {% endif %}
        <p class="text-sm text-muted mb-md">
            Atlas storage policy is authoritative for Dewey upload placement and Ursa return targeting.
        </p>
        <form method="POST" action="/my-organization/storage-policy">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <div class="grid grid-cols-2 gap-lg">
                <div class="form-group">
                    <label class="form-label" for="org-storage-enabled">Enabled</label>
                    <select id="org-storage-enabled" name="enabled" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="true" {% if not org_storage_policy or org_storage_policy.enabled %}selected{% endif %}>Enabled</option>
                        <option value="false" {% if org_storage_policy and not org_storage_policy.enabled %}selected{% endif %}>Disabled</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-access-mode">Access Mode</label>
                    <select id="org-storage-access-mode" name="access_mode" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="lsmc_managed" {% if not org_storage_policy or org_storage_policy.access_mode == 'lsmc_managed' %}selected{% endif %}>lsmc_managed</option>
                        <option value="customer_bucket" {% if org_storage_policy and org_storage_policy.access_mode == 'customer_bucket' %}selected{% endif %}>customer_bucket</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-bucket">Bucket</label>
                    <input id="org-storage-bucket" name="bucket" class="form-input" value="{{ org_storage_policy.bucket if org_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-region">Region</label>
                    <input id="org-storage-region" name="region" class="form-input" value="{{ org_storage_policy.region if org_storage_policy else 'us-west-2' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-base-prefix">Base Prefix (optional)</label>
                    <input id="org-storage-base-prefix" name="base_prefix" class="form-input" value="{{ org_storage_policy.base_prefix if org_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-classes">Allowed Artifact Classes (comma-separated)</label>
                    <input id="org-storage-classes" name="allowed_artifact_classes" class="form-input" value="{{ (org_storage_policy.allowed_artifact_classes | join(', ')) if org_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-assume-role">Assume Role ARN (optional)</label>
                    <input id="org-storage-assume-role" name="assume_role_arn" class="form-input" value="{{ org_storage_policy.assume_role_arn if org_storage_policy and org_storage_policy.assume_role_arn else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="org-storage-kms">KMS Key ARN (optional)</label>
                    <input id="org-storage-kms" name="kms_key_arn" class="form-input" value="{{ org_storage_policy.kms_key_arn if org_storage_policy and org_storage_policy.kms_key_arn else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
            </div>
            {% if user.is_org_admin %}
            <button type="submit" class="btn btn-primary">Save Organization Storage Policy</button>
            {% endif %}
        </form>
    </div>
</div>

<!-- Sites Summary -->
<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Sites</h2>
        {% if user.is_org_admin %}
        <a href="/my-organization/sites/new" class="btn btn-sm btn-secondary">+ Add Site</a>
        {% endif %}
    </div>
    {% if sites %}
    <div class="table-container">
        <table class="table">
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Site Code</th>
                    <th>Location</th>
                    <th>Bloom Config</th>
                    <th>Status</th>
                    <th></th>
                </tr>
            </thead>
            <tbody>
                {% for site in sites[:5] %}
                <tr>
                    <td>{{ site.name }}</td>
                    <td class="text-mono">{{ site.site_code or '—' }}</td>
                    <td>
                        {% if site.city and site.state %}
                        {{ site.city }}, {{ site.state }}
                        {% else %}
                        —
                        {% endif %}
                    </td>
                    <td>
                        {% if site.bloom_config_enabled %}
                        <span class="badge badge-success">Site Override</span>
                        {% else %}
                        <span class="badge badge-secondary">Org Default</span>
                        {% endif %}
                    </td>
                    <td>
                        <span class="badge badge-{{ 'success' if site.is_active else 'danger' }}">
                            {{ 'Active' if site.is_active else 'Inactive' }}
                        </span>
                    </td>
                    <td><a href="/my-organization/sites/{{ site.id }}" class="btn btn-sm btn-ghost">View</a></td>
                </tr>
                {% endfor %}
            </tbody>
        </table>
    </div>
    {% if sites|length > 5 %}
    <div class="card-footer">
        <a href="/my-organization/sites">View all {{ sites|length }} sites →</a>
    </div>
    {% endif %}
    {% else %}
    <div class="card-body text-muted">No sites found.</div>
    {% endif %}
</div>

<!-- Users Summary -->
<div class="card">
    <div class="card-header">
        <h2 class="card-title">Users</h2>
        {% if user.is_org_admin %}
        <a href="/my-organization/users/new" class="btn btn-sm btn-secondary">+ Add User</a>
        {% endif %}
    </div>
    {% if users %}
    <div class="table-container">
        <table class="table">
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Email</th>
                    <th>Roles</th>
                    <th>Status</th>
                </tr>
            </thead>
            <tbody>
                {% for user in users[:5] %}
                <tr>
                    <td>{{ user.name or '—' }}</td>
                    <td>{{ user.email }}</td>
                    <td>
                        {% for role in user.roles %}
                        <span class="badge badge-secondary">{{ role }}</span>
                        {% endfor %}
                    </td>
                    <td>
                        <span class="badge badge-{{ 'success' if user.is_active else 'danger' }}">
                            {{ 'Active' if user.is_active else 'Inactive' }}
                        </span>
                    </td>
                </tr>
                {% endfor %}
            </tbody>
        </table>
    </div>
    {% if users|length > 5 %}
    <div class="card-footer">
        <a href="/my-organization/users">View all {{ users|length }} users →</a>
    </div>
    {% endif %}
    {% else %}
    <div class="card-body text-muted">No users found.</div>
    {% endif %}
</div>
{% endblock %}