{% extends "base.html" %}

{% block title %}User Management{% endblock %}

{% block content %}
<div class="row mb-4">
    <div class="col-md-6">
        <h2><i class="bi bi-people-fill"></i> Internal User Management</h2>
    </div>
    <div class="col-md-6 text-end">
        <a href="{{ url_for('auth.create_user') }}" class="btn btn-primary">
            <i class="bi bi-plus-circle"></i> Add User
        </a>
    </div>
</div>

<div class="card shadow-sm">
    <div class="card-body">
        <div class="table-responsive">
            <table class="table table-hover">
                <thead class="table-light">
                    <tr>
                        <th>Username</th>
                        <th>Full Name</th>
                        <th>Email</th>
                        <th>Role</th>
                        <th>Contracts</th>
                        <th>Created</th>
                        <th>Status</th>
                        <th width="220">Actions</th>
                    </tr>
                </thead>
                <tbody>
                    {% for user in users %}
                    <tr class="{{ 'table-secondary text-muted' if not user.active else '' }}">
                        <td><strong>{{ user.username }}</strong></td>
                        <td>{{ user.full_name or '—' }}</td>
                        <td>{{ user.email }}</td>
                        <td>
                            <span class="badge bg-{% if user.role == 'admin' %}danger{% elif user.role == 'director' %}warning{% elif user.role == 'project_manager' %}primary{% elif user.role == 'auditor' %}secondary{% elif user.role == 'customer' %}success{% elif user.role == 'external_inspector' %}dark{% else %}info{% endif %}">
                                {{ user.role_label }}
                            </span>
                        </td>
                        <td>
                            {% if user.is_inspector %}
                            {% set cnt = inspector_contract_counts.get(user.id, 0) %}
                            {% if cnt > 0 %}
                            <span class="badge bg-success">{{ cnt }} contract{{ 's' if cnt != 1 else '' }}</span>
                            {% else %}
                            <span class="badge bg-warning text-dark" title="No contracts assigned — inspector sees nothing">None</span>
                            {% endif %}
                            {% else %}
                            <span class="text-muted small">—</span>
                            {% endif %}
                        </td>
                        <td>{{ user.created_at.strftime('%Y-%m-%d') }}</td>
                        <td>
                            {% if not user.active %}
                            <span class="badge bg-secondary">Disabled</span>
                            {% elif not user.password_set %}
                            {# phase51 — invited but has not chosen a password yet;
                               the login route refuses them until they do. #}
                            <span class="badge bg-warning text-dark"
                                  title="Invitation sent — this person has not set their password yet">
                              <i class="bi bi-envelope"></i> Invite pending
                            </span>
                            {% else %}
                            <span class="badge bg-success">Active</span>
                            {% endif %}
                        </td>
                        <td>
                            <a href="{{ url_for('auth.edit_user', user_id=user.id) }}" class="btn btn-sm btn-outline-primary" title="Edit">
                                <i class="bi bi-pencil"></i>
                            </a>
                            {% if user.is_inspector %}
                            <a href="{{ url_for('auth.assign_inspector_contracts', user_id=user.id) }}"
                               class="btn btn-sm btn-outline-secondary" title="Assign contracts">
                                <i class="bi bi-briefcase"></i>
                            </a>
                            {% endif %}
                            {% if not user.password_set %}
                            <form method="POST" action="{{ url_for('auth.resend_invite', user_id=user.id) }}"
                                  class="d-inline"
                                  onsubmit="return confirm('Resend the invitation email to {{ user.email }}? The previous link will stop working.');">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="btn btn-sm btn-outline-warning"
                                        title="Resend invitation email">
                                    <i class="bi bi-envelope-arrow-up"></i>
                                </button>
                            </form>
                            {% endif %}
                            {% if user.id != current_user.id %}
                            <form method="POST" action="{{ url_for('auth.toggle_active', user_id=user.id) }}" class="d-inline">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                <button type="submit"
                                        class="btn btn-sm {{ 'btn-outline-secondary' if user.active else 'btn-outline-success' }}"
                                        title="{{ 'Disable' if user.active else 'Enable' }}"
                                        onclick="return confirm('{{ 'Disable' if user.active else 'Enable' }} user {{ user.username }}?')">
                                    <i class="bi bi-{{ 'person-slash' if user.active else 'person-check' }}"></i>
                                </button>
                            </form>
                            <form method="POST" action="{{ url_for('auth.delete_user', user_id=user.id) }}" class="d-inline" onsubmit="return confirm('Delete this user?');">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="btn btn-sm btn-outline-danger" title="Delete">
                                    <i class="bi bi-trash"></i>
                                </button>
                            </form>
                            {% endif %}
                        </td>
                    </tr>
                    {% endfor %}
                </tbody>
            </table>
        </div>
    </div>
</div>
{% endblock %}