{% extends 'core/base.html' %}
{% block title %}Manage Users | Killian{% endblock %}

{% block content %}
<div class="page-head">
    <div>
        <h1>Manage Users</h1>
        <p>Permanently remove Killian user accounts. This action cannot be undone.</p>
    </div>
    <div class="page-head-actions">
        <a class="button secondary" href="{% url 'user_list' %}">Back to Users</a>
        <a class="button" href="{% url 'user_create' %}">New user</a>
    </div>
</div>

<div class="danger-notice">
    <strong>Permanent deletion</strong>
    <span>
        Deleting a user removes the account, role assignment, organization memberships, MFA enrollment,
        and other records that are configured to cascade with the user. Historical audit
        and documentation records configured to retain attribution will remain with the
        user reference cleared where appropriate.
    </span>
</div>

<div class="table user-table js-sortable-list">
    <div class="user-row manage-user-row user-row-head">
        <span><button type="button" class="module-table-sort js-list-sort" data-sort-key="user" data-sort-direction="none">User <span class="module-table-sort-indicator" aria-hidden="true">↕</span></button></span>
        <span><button type="button" class="module-table-sort js-list-sort" data-sort-key="role" data-sort-direction="none">Role <span class="module-table-sort-indicator" aria-hidden="true">↕</span></button></span>
        <span><button type="button" class="module-table-sort js-list-sort" data-sort-key="organizations" data-sort-direction="none">Organizations <span class="module-table-sort-indicator" aria-hidden="true">↕</span></button></span>
        <span><button type="button" class="module-table-sort js-list-sort" data-sort-key="status" data-sort-direction="none">Status <span class="module-table-sort-indicator" aria-hidden="true">↕</span></button></span>
        <span>Delete</span>
    </div>

    {% for row in user_rows %}
        <div
            class="user-row manage-user-row js-list-sort-row"
            data-sort-user="{{ row.user.username|escape }}"
            data-sort-role="{{ row.role|escape }}"
            data-sort-organizations="{% if row.all_organizations %}All organizations{% else %}{% for membership in row.organizations %}{{ membership.organization.name|escape }} {% endfor %}{% endif %}"
            data-sort-status="{% if row.user.is_active %}Active{% else %}Disabled{% endif %}"
        >
            <div>
                <strong>{{ row.user.username }}</strong>
                <small>
                    {% if row.user.get_full_name %}
                        {{ row.user.get_full_name }}
                    {% elif row.user.email %}
                        {{ row.user.email }}
                    {% else %}
                        No profile details
                    {% endif %}
                </small>
            </div>

            <div>
                <span class="role-badge">{{ row.role }}</span>
            </div>

            <div>
                {% if row.all_organizations %}
                    <span class="muted">All organizations</span>
                {% else %}
                    {% for membership in row.organizations %}
                        <span class="org-pill">{{ membership.organization.name }}</span>
                    {% empty %}
                        <span class="muted">No organizations assigned</span>
                    {% endfor %}
                {% endif %}
            </div>

            <div>
                {% if row.user.is_active %}
                    <span class="status-good">Active</span>
                {% else %}
                    <span class="status-muted">Disabled</span>
                {% endif %}
            </div>

            <div class="user-actions">
                {% if row.deletable %}
                    <form
                        method="post"
                        action="{% url 'user_delete' row.user.pk %}"
                        data-confirm="Permanently delete user {{ row.user.username }}? This cannot be undone."
                    >
                        {% csrf_token %}
                        <button class="button danger small-button" type="submit">
                            Delete
                        </button>
                    </form>
                {% else %}
                    <span
                        class="protected-user"
                        tabindex="0"
                        aria-describedby="protected-user-reason-{{ row.user.pk }}"
                    >
                        Protected

                        <span
                            id="protected-user-reason-{{ row.user.pk }}"
                            class="protected-user-tooltip"
                            role="tooltip"
                        >
                            {{ row.delete_reason }}
                        </span>
                    </span>
                {% endif %}
            </div>
        </div>
    {% empty %}
        <div class="empty-state">No users found.</div>
    {% endfor %}
</div>
{% endblock %}