{% extends "base.html" %}

{% block title %}My Profile{% endblock %}

{% block content %}
<div class="row mb-4">
    <div class="col">
        <h2><i class="bi bi-person-circle"></i> My Profile</h2>
        <p class="text-muted mb-0">Manage your account information and review your activity.</p>
    </div>
</div>

<div class="row g-4">

    <!-- ── Left column: account card + stats ─────────────────────────── -->
    <div class="col-lg-4">

        <!-- Account Info Card -->
        <div class="card shadow-sm mb-4">
            <div class="card-body text-center py-4">
                <div class="mb-3">
                    <span class="display-1 text-primary">
                        <i class="bi bi-person-circle"></i>
                    </span>
                </div>
                <h4 class="mb-1 fw-bold">{{ current_user.display_name }}</h4>
                {% if current_user.full_name %}
                <p class="text-muted mb-1" style="font-size:.85rem;">@{{ current_user.username }}</p>
                {% endif %}
                <p class="text-muted mb-2">{{ current_user.email }}</p>
                <span class="badge fs-6 bg-{% if current_user.role == 'admin' %}danger{% elif current_user.role == 'director' %}warning{% else %}info{% endif %}">
                    <i class="bi bi-{% if current_user.role == 'admin' %}shield-fill{% elif current_user.role == 'director' %}star-fill{% else %}person-badge-fill{% endif %} me-1"></i>
                    {{ current_user.role | title }}
                </span>
                <hr>
                <small class="text-muted">
                    <i class="bi bi-calendar3 me-1"></i>
                    Member since {{ current_user.created_at.strftime('%B %d, %Y') }}
                </small>
            </div>
        </div>

        <!-- Activity Stats Card -->
        <div class="card shadow-sm">
            <div class="card-header bg-light">
                <h6 class="mb-0 fw-semibold"><i class="bi bi-bar-chart-fill me-1"></i>Activity Summary</h6>
            </div>
            <div class="card-body">
                <div class="row text-center g-3">
                    <div class="col-6">
                        <div class="p-2 rounded bg-primary bg-opacity-10">
                            <div class="fs-3 fw-bold text-primary">{{ total_inspections }}</div>
                            <small class="text-muted">Total Inspections</small>
                        </div>
                    </div>
                    <div class="col-6">
                        <div class="p-2 rounded bg-success bg-opacity-10">
                            <div class="fs-3 fw-bold text-success">{{ completed_inspections }}</div>
                            <small class="text-muted">Completed</small>
                        </div>
                    </div>
                    <div class="col-6">
                        <div class="p-2 rounded bg-warning bg-opacity-10">
                            <div class="fs-3 fw-bold text-warning">{{ open_issues }}</div>
                            <small class="text-muted">Open Issues</small>
                        </div>
                    </div>
                    <div class="col-6">
                        <div class="p-2 rounded bg-info bg-opacity-10">
                            {% if total_inspections > 0 %}
                                <div class="fs-3 fw-bold text-info">
                                    {{ ((completed_inspections / total_inspections) * 100) | int }}%
                                </div>
                            {% else %}
                                <div class="fs-3 fw-bold text-info">—</div>
                            {% endif %}
                            <small class="text-muted">Completion Rate</small>
                        </div>
                    </div>
                </div>
            </div>
        </div>

        <!-- ── My Data & Privacy (phase51) ───────────────────────────── -->
        <div class="card shadow-sm mt-4">
            <div class="card-header bg-light">
                <h6 class="mb-0 fw-semibold"><i class="bi bi-shield-lock me-1"></i>My Data &amp; Privacy</h6>
            </div>
            <div class="card-body">
                <p class="text-muted small mb-3">
                    Download a copy of the data tied to your account, or request its
                    erasure.
                </p>
                <a href="{{ url_for('auth.export_my_data') }}"
                   class="btn btn-outline-secondary btn-sm w-100 mb-2">
                    <i class="bi bi-download me-1"></i>Export My Data
                </a>
                <button type="button" class="btn btn-outline-danger btn-sm w-100"
                        data-bs-toggle="modal" data-bs-target="#deleteMyDataModal">
                    <i class="bi bi-trash me-1"></i>Delete My Account &amp; Data
                </button>
            </div>
        </div>

    </div>

    <!-- ── Right column: edit form + recent inspections ──────────────── -->
    <div class="col-lg-8">

        <!-- Edit Profile Form -->
        <div class="card shadow-sm mb-4">
            <div class="card-header bg-light">
                <h6 class="mb-0 fw-semibold"><i class="bi bi-pencil-square me-1"></i>Edit Profile</h6>
            </div>
            <div class="card-body">
                <form method="POST" action="{{ url_for('auth.profile') }}">
                    {{ form.hidden_tag() }}

                    <!-- Full Name -->
                    <div class="mb-3">
                        {{ form.full_name.label(class="form-label fw-semibold") }}
                        {{ form.full_name(class="form-control", placeholder="e.g. Jane Smith") }}
                        {% for error in form.full_name.errors %}
                            <div class="invalid-feedback d-block">{{ error }}</div>
                        {% endfor %}
                    </div>

                    <!-- Email -->
                    <div class="mb-3">
                        {{ form.email.label(class="form-label fw-semibold") }}
                        {{ form.email(class="form-control" + (" is-invalid" if form.email.errors else ""),
                                      placeholder="your@email.com") }}
                        {% for error in form.email.errors %}
                            <div class="invalid-feedback">{{ error }}</div>
                        {% endfor %}
                    </div>

                    <hr class="my-3">
                    <p class="text-muted small mb-3">
                        <i class="bi bi-lock me-1"></i>Leave the password fields blank to keep your current password.
                    </p>

                    <!-- Current Password -->
                    <div class="mb-3">
                        {{ form.current_password.label(class="form-label fw-semibold") }}
                        {{ form.current_password(class="form-control" + (" is-invalid" if form.current_password.errors else ""),
                                                  autocomplete="current-password") }}
                        {% for error in form.current_password.errors %}
                            <div class="invalid-feedback">{{ error }}</div>
                        {% endfor %}
                    </div>

                    <!-- New Password -->
                    <div class="mb-3">
                        {{ form.new_password.label(class="form-label fw-semibold") }}
                        {{ form.new_password(class="form-control" + (" is-invalid" if form.new_password.errors else ""),
                                             autocomplete="new-password") }}
                        {% for error in form.new_password.errors %}
                            <div class="invalid-feedback">{{ error }}</div>
                        {% endfor %}
                        <div class="form-text">Minimum 6 characters.</div>
                    </div>

                    <!-- Confirm New Password -->
                    <div class="mb-4">
                        {{ form.confirm_password.label(class="form-label fw-semibold") }}
                        {{ form.confirm_password(class="form-control" + (" is-invalid" if form.confirm_password.errors else ""),
                                                  autocomplete="new-password") }}
                        {% for error in form.confirm_password.errors %}
                            <div class="invalid-feedback">{{ error }}</div>
                        {% endfor %}
                    </div>

                    <button type="submit" class="btn btn-primary">
                        <i class="bi bi-check-circle me-1"></i>Save Changes
                    </button>
                </form>
            </div>
        </div>

        {% if current_user.role in ['admin', 'director'] %}
        <!-- Two-factor authentication (phase35) -->
        <div class="card shadow-sm mb-4">
            <div class="card-header bg-light d-flex justify-content-between align-items-center">
                <h6 class="mb-0 fw-semibold"><i class="bi bi-shield-lock me-1"></i>Two-Factor Authentication</h6>
                {% if current_user.mfa_enabled %}
                <span class="badge bg-success">Enabled</span>
                {% else %}
                <span class="badge bg-secondary">Disabled</span>
                {% endif %}
            </div>
            <div class="card-body">
                {% if current_user.mfa_enabled %}
                <p class="text-muted small mb-3">
                    Your account is protected with an authenticator app. You'll be asked
                    for a 6-digit code each time you sign in.
                </p>
                <form method="POST" action="{{ url_for('auth.mfa_disable') }}"
                      onsubmit="return confirm('Disable two-factor authentication? Your account will be less secure.');">
                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                    <label class="form-label small">Enter a current code or your password to disable:</label>
                    <div class="input-group">
                        <input type="text" name="code" class="form-control" placeholder="6-digit code"
                               inputmode="numeric" autocomplete="off">
                        <input type="password" name="password" class="form-control" placeholder="…or password"
                               autocomplete="off">
                        <button type="submit" class="btn btn-outline-danger">Disable 2FA</button>
                    </div>
                </form>
                {% else %}
                <p class="text-muted small mb-3">
                    Add a second layer of security. After entering your password you'll
                    confirm a one-time code from an authenticator app.
                </p>
                <a href="{{ url_for('auth.mfa_setup') }}" class="btn btn-primary">
                    <i class="bi bi-shield-plus me-1"></i>Enable Two-Factor
                </a>
                {% endif %}
            </div>
        </div>
        {% endif %}

        <!-- Recent Inspections -->
        <div class="card shadow-sm">
            <div class="card-header bg-light d-flex justify-content-between align-items-center">
                <h6 class="mb-0 fw-semibold"><i class="bi bi-clipboard-check me-1"></i>Recent Inspections</h6>
                <a href="{{ url_for('inspections.index') }}" class="btn btn-sm btn-outline-primary">
                    View All
                </a>
            </div>
            <div class="card-body p-0">
                {% if recent_inspections %}
                <div class="table-responsive">
                    <table class="table table-hover mb-0">
                        <thead class="table-light">
                            <tr>
                                <th>Date</th>
                                <th>Facility</th>
                                <th>Template</th>
                                <th>Score</th>
                                <th>Status</th>
                                <th></th>
                            </tr>
                        </thead>
                        <tbody>
                            {% for insp in recent_inspections %}
                            <tr>
                                <td>{{ insp.inspection_date.strftime('%Y-%m-%d') }}</td>
                                <td>{{ insp.facility.name if insp.facility else '—' }}</td>
                                <td>{{ insp.template.name if insp.template else '—' }}</td>
                                <td>
                                    {% if insp.overall_score is not none %}
                                        <span class="badge bg-{% if insp.overall_score >= 80 %}success{% elif insp.overall_score >= 60 %}warning{% else %}danger{% endif %}">
                                            {{ "%.1f"|format(insp.overall_score) }}%
                                        </span>
                                    {% else %}
                                        <span class="text-muted">—</span>
                                    {% endif %}
                                </td>
                                <td>
                                    <span class="badge bg-{% if insp.status == 'completed' %}success{% elif insp.status == 'in_progress' %}primary{% else %}warning{% endif %}">
                                        {{ insp.status | replace('_', ' ') | title }}
                                    </span>
                                </td>
                                <td>
                                    <a href="{{ url_for('inspections.view', inspection_id=insp.id) }}"
                                       class="btn btn-sm btn-outline-secondary">
                                        <i class="bi bi-eye"></i>
                                    </a>
                                </td>
                            </tr>
                            {% endfor %}
                        </tbody>
                    </table>
                </div>
                {% else %}
                <div class="text-center py-4 text-muted">
                    <i class="bi bi-clipboard-x fs-3 d-block mb-2"></i>
                    No inspections recorded yet.
                </div>
                {% endif %}
            </div>
        </div>

    </div>
</div>

<!-- ── Delete My Data Modal (phase51) ──────────────────────────────────── -->
<div class="modal fade" id="deleteMyDataModal" tabindex="-1" aria-hidden="true">
  <div class="modal-dialog">
    <div class="modal-content">
      <div class="modal-header bg-danger text-white">
        <h5 class="modal-title"><i class="bi bi-exclamation-triangle me-2"></i>Delete My Account &amp; Data</h5>
        <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal"></button>
      </div>
      <form method="POST" action="{{ url_for('auth.request_my_data_deletion') }}">
        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
        <div class="modal-body">
          <div class="alert alert-warning mb-3">
            <i class="bi bi-exclamation-triangle-fill me-1"></i>
            This action is <strong>permanent</strong> and logs you out immediately.
          </div>
          <p class="mb-0">
            If you have no inspection or issue history tied to your account, it will be
            <strong>permanently deleted</strong>. If you do have history (common for staff
            accounts), your name, username, and email will be replaced with a
            non-identifying placeholder and the account deactivated — historical records
            stay intact for audit continuity but will no longer identify you.
          </p>
        </div>
        <div class="modal-footer">
          <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Cancel</button>
          <button type="submit" class="btn btn-danger">
            <i class="bi bi-trash me-1"></i>Confirm Deletion
          </button>
        </div>
      </form>
    </div>
  </div>
</div>
{% endblock %}