{% extends "base.html" %}
{% set active_nav = "admin" %}

{% block title %}User: {{ user.email }} - LSMC Hub{% endblock %}

{% block content %}
{% set user_euid = user.euid if user.euid is defined else user.id %}
<div class="page-header">
    <div>
        <h1 class="page-title">{{ user.name or user.email }}</h1>
        <p class="page-subtitle">User Profile</p>
    </div>
    <div class="flex gap-md">
        <a href="/admin/users/{{ user_euid }}/edit" class="btn btn-secondary">Edit</a>
        <a href="/admin/users" class="btn btn-ghost">← Back to Users</a>
    </div>
</div>

<div class="grid grid-2 gap-lg">
    <!-- User Information -->
    <div class="card">
        <h3 class="mb-md">User Information</h3>
        <dl class="detail-list">
            <div class="detail-row">
                <dt>Email</dt>
                <dd>{{ user.email }}</dd>
            </div>
            <div class="detail-row">
                <dt>Name</dt>
                <dd>{{ user.name or '—' }}</dd>
            </div>
            <div class="detail-row">
                <dt>Status</dt>
                <dd>
                    <span class="badge badge-{{ 'success' if user.is_active else 'danger' }}">
                        {{ 'Active' if user.is_active else 'Inactive' }}
                    </span>
                </dd>
            </div>
            <div class="detail-row">
                <dt>Organization</dt>
                <dd>{{ tenant_name or user.tenant_id }}</dd>
            </div>
        </dl>
    </div>

    <!-- Roles & Permissions -->
    <div class="card">
        <h3 class="mb-md">Roles & Permissions</h3>
        <div class="flex gap-sm flex-wrap">
            {% for role in user.roles %}
            <span class="badge badge-{{ 'primary' if role == 'ADMIN' else 'secondary' }}">
                {{ role }}
            </span>
            {% endfor %}
        </div>
        <div class="mt-lg">
            <h4 class="text-sm text-muted mb-sm">Permissions</h4>
            <ul class="text-sm">
                {% if 'ADMIN' in user.roles %}
                <li>✓ Full administrative access</li>
                <li>✓ Manage users and organizations</li>
                <li>✓ Access all tenants</li>
                {% endif %}
                {% if 'INTERNAL_USER' in user.roles %}
                <li>✓ Cross-tenant data access</li>
                <li>✓ Intake and processing</li>
                {% endif %}
                {% if 'EXTERNAL_USER' in user.roles %}
                <li>✓ Access own tenant data</li>
                <li>✓ Create and view orders</li>
                {% endif %}
            </ul>
        </div>
    </div>
</div>

<!-- System Information -->
<div class="card mt-lg">
    <h3 class="mb-md">System Information</h3>
    <dl class="detail-list">
        <div class="detail-row">
            <dt>EUID</dt>
            <dd class="text-mono text-sm"><a href="/tapdb/object/{{ user_euid }}">{{ user_euid }}</a></dd>
        </div>
        <div class="detail-row">
            <dt>Cognito Subject</dt>
            <dd class="text-mono text-sm">{{ user.cognito_sub }}</dd>
        </div>
        <div class="detail-row">
            <dt>Tenant ID</dt>
            <dd class="text-mono text-sm">{{ user.tenant_id }}</dd>
        </div>
        <div class="detail-row">
            <dt>Created</dt>
            <dd>{{ user.created_at | format_dt(user_preferences) if user.created_at else '—' }}</dd>
        </div>
        <div class="detail-row">
            <dt>Last Updated</dt>
            <dd>{{ user.updated_at | format_dt(user_preferences) if user.updated_at else '—' }}</dd>
        </div>
    </dl>
</div>

<!-- Actions -->
<div class="card mt-lg">
    <h3 class="mb-md">Actions</h3>
    <div class="flex gap-md">
        {% if user.is_active %}
        <form method="post" action="/admin/users/{{ user_euid }}/deactivate" style="display: inline;">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <button type="submit" class="btn btn-danger" 
                    onclick="return confirm('Are you sure you want to deactivate this user?')">
                Deactivate User
            </button>
        </form>
        {% else %}
        <form method="post" action="/admin/users/{{ user_euid }}/activate" style="display: inline;">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <button type="submit" class="btn btn-success">
                Activate User
            </button>
        </form>
        {% endif %}
    </div>
</div>
{% endblock %}