{% extends "base.html" %}

{% block title %}User Management - LSMC Hub{% endblock %}

{% block content %}
<div class="page-header">
    <div>
        <h1>User Management</h1>
        <p class="text-muted">Manage user accounts, roles, and permissions</p>
    </div>
    <div>
        <a href="/admin/users/create" class="btn btn-primary">+ Create User</a>
    </div>
</div>

<!-- Filters -->
<div class="filters-bar">
    <form method="get" action="/admin/users" class="filter-form">
        <div class="filter-group">
            <label for="tenant_id">Organization:</label>
            <select name="tenant_id" id="tenant_id" onchange="this.form.submit()">
                <option value="">All Organizations</option>
                {% for org in organizations %}
                <option value="{{ org.euid }}" {% if tenant_filter == org.euid %}selected{% endif %}>
                    {{ org.display_name or org.name }}
                </option>
                {% endfor %}
            </select>
        </div>
        
        <div class="filter-group">
            <label for="is_active">Status:</label>
            <select name="is_active" id="is_active" onchange="this.form.submit()">
                <option value="">All</option>
                <option value="true" {% if is_active_filter == 'true' %}selected{% endif %}>Active</option>
                <option value="false" {% if is_active_filter == 'false' %}selected{% endif %}>Inactive</option>
            </select>
        </div>
    </form>
</div>

<!-- Users Table -->
<div class="card">
    <table class="data-table">
        <thead>
            <tr>
                <th>Name</th>
                <th>Email</th>
                <th>EUID</th>
                <th>Organization</th>
                <th>Roles</th>
                <th>Status</th>
                <th>Last Login</th>
                <th>Created</th>
                <th>Actions</th>
            </tr>
        </thead>
        <tbody>
            {% if users %}
                {% for user in users %}
                {% set user_euid = user.euid if user.euid is defined else user.id %}
                <tr>
                    <td>
                        <a href="/admin/users/{{ user_euid }}"><strong>{{ user.name or 'N/A' }}</strong></a>
                    </td>
                    <td>{{ user.email }}</td>
                    <td><a class="text-mono text-sm" href="/tapdb/object/{{ user_euid }}">{{ user_euid }}</a></td>
                    <td>{{ user.tenant_name }}</td>
                    <td>
                        {% for role in user.roles %}
                        <span class="badge badge-{{ 'primary' if role == 'ADMIN' else 'secondary' if role == 'INTERNAL_USER' else 'default' }}">
                            {{ role.replace('_', ' ') }}
                        </span>
                        {% endfor %}
                    </td>
                    <td>
                        <span class="badge badge-{{ 'success' if user.is_active else 'danger' }}">
                            {{ 'Active' if user.is_active else 'Inactive' }}
                        </span>
                    </td>
                    <td>
                        {% if user.last_login_at %}
                        {{ user.last_login_at | format_dt(user_preferences) }}
                        {% else %}
                        <span class="text-muted">Never</span>
                        {% endif %}
                    </td>
                    <td>{{ user.created_at.strftime('%Y-%m-%d') }}</td>
                    <td>
                        <div class="btn-group">
                            <a href="/admin/users/{{ user_euid }}/edit" class="btn btn-sm btn-secondary">Edit</a>
                            {% if user.is_active %}
                            <form method="post" action="/admin/users/{{ user_euid }}/deactivate" style="display: inline;">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                                <button type="submit" class="btn btn-sm btn-danger"
                                        onclick="return confirm('Deactivate this user?')">
                                    Deactivate
                                </button>
                            </form>
                            {% else %}
                            <form method="post" action="/admin/users/{{ user_euid }}/activate" style="display: inline;">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                                <button type="submit" class="btn btn-sm btn-success">
                                    Activate
                                </button>
                            </form>
                            {% endif %}
                        </div>
                    </td>
                </tr>
                {% endfor %}
            {% else %}
                <tr>
                    <td colspan="9" class="text-center text-muted">
                        No users found
                    </td>
                </tr>
            {% endif %}
        </tbody>
    </table>
</div>

<div class="mt-md">
    <a href="/admin" class="btn btn-secondary">← Back to Admin</a>
</div>
{% endblock %}