{% extends "base.html" %}
{% block title %}{{ target.username }} — {{ library_name() }}{% endblock %}
{% block content %}
<nav aria-label="breadcrumb">
  <ul>
    <li><a href="/ui/users">Users</a></li>
    <li>{{ target.username }}</li>
  </ul>
</nav>

<hgroup>
  <h2>{{ target.username }}</h2>
  <p>{{ target.role.name }}{% if not target.is_active %} &mdash; <em>Inactive</em>{% endif %}</p>
</hgroup>

{% if message %}<p class="success-banner">{{ message }}</p>{% endif %}
{% if error %}<p class="error-banner">{{ error }}</p>{% endif %}

<dl>
  {% if target.email %}<dt>Email</dt><dd>{{ target.email }}</dd>{% endif %}
  <dt>Role</dt>
  <dd id="user-role">
    {% if target.is_active %}
    <form method="post" action="/ui/users/{{ target.username }}/change-role" style="display:flex; gap:0.5rem; align-items:center">
      <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
      <select name="role_name" style="margin:0; width:auto">
        {% for r in roles %}
        <option value="{{ r.name }}"{% if r.id == target.role_id %} selected{% endif %}>{{ r.name }}</option>
        {% endfor %}
        {# show current role even if actor can't assign it (e.g. Administrator viewing SystemAdmin user) #}
        {% if target.role.name not in roles|map(attribute='name')|list %}
        <option value="{{ target.role.name }}" selected disabled>{{ target.role.name }} (current, not changeable)</option>
        {% endif %}
      </select>
      <button type="submit" style="padding:0.2rem 0.6rem; margin:0">Change</button>
    </form>
    {% else %}
      {{ target.role.name }}
    {% endif %}
  </dd>
  <dt>Status</dt>
  <dd id="user-status">
    {% if target.is_active %}
      Active
      <form
        style="display:inline"
        hx-post="/ui/users/{{ target.username }}/deactivate"
        hx-target="#user-status"
        hx-swap="innerHTML"
        hx-include="[name='csrf_token']"
        hx-confirm="Deactivate this user? They will not be able to log in."
      >
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="outline contrast" style="padding:0.2rem 0.6rem; margin-left:1rem">Deactivate</button>
      </form>
    {% else %}
      <em>Inactive</em>
      <form method="post" action="/ui/users/{{ target.username }}/reactivate" style="display:inline">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="outline" style="padding:0.2rem 0.6rem; margin-left:1rem">Reactivate</button>
      </form>
    {% endif %}
  </dd>
  <dt>Patron record</dt>
  <dd>
    {% if patron %}
      <a href="/ui/patrons/{{ patron.library_card_number }}">{{ patron.full_name }}</a>
      <small>(<code>{{ patron.library_card_number }}</code>)</small>
      {% if target.is_active %}
      <form
        hx-post="/ui/users/{{ target.username }}/unlink-patron"
        hx-include="[name='csrf_token']"
        hx-confirm="Unlink this patron record from the user?"
        hx-target="body"
        hx-swap="outerHTML"
        style="display:inline"
      >
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="outline contrast" style="padding:0.2rem 0.6rem; margin-left:1rem">Unlink</button>
      </form>
      {% endif %}
    {% elif target.is_active and unlinked_patrons %}
      <div>
        <form method="post" action="/ui/users/{{ target.username }}/link-patron" style="display:flex; gap:0.5rem; align-items:center; margin-top:0.25rem">
          <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
          <select name="card_number" style="margin:0; width:auto">
            {% for p in unlinked_patrons %}
            <option value="{{ p.library_card_number }}">{{ p.full_name }} ({{ p.library_card_number }})</option>
            {% endfor %}
          </select>
          <button type="submit" style="padding:0.2rem 0.6rem; margin:0">Link</button>
        </form>
        <details style="margin-top:0.5rem">
          <summary class="outline secondary" role="button">Create a new patron record</summary>
          <form method="post" action="/ui/users/{{ target.username }}/create-patron" style="margin-top:0.5rem; max-width:24rem">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <label for="new_patron_name">Full name
              <input type="text" id="new_patron_name" name="full_name" required autocomplete="off">
            </label>
            <label for="new_patron_email">Email
              <input type="email" id="new_patron_email" name="contact_email" autocomplete="off">
            </label>
            <label for="new_patron_phone">Phone
              <input type="tel" id="new_patron_phone" name="contact_phone">
            </label>
            <label for="new_patron_expires">Card expires
              <input type="date" id="new_patron_expires" name="expires_at">
            </label>
            <button type="submit">Create patron</button>
          </form>
        </details>
      </div>
    {% elif target.is_active %}
      <details>
        <summary class="outline secondary" role="button">Create a patron record</summary>
        <form method="post" action="/ui/users/{{ target.username }}/create-patron" style="margin-top:0.5rem; max-width:24rem">
          <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
          <label for="solo_patron_name">Full name
            <input type="text" id="solo_patron_name" name="full_name" required autocomplete="off">
          </label>
          <label for="solo_patron_email">Email
            <input type="email" id="solo_patron_email" name="contact_email" autocomplete="off">
          </label>
          <label for="solo_patron_phone">Phone
            <input type="tel" id="solo_patron_phone" name="contact_phone">
          </label>
          <label for="solo_patron_expires">Card expires
            <input type="date" id="solo_patron_expires" name="expires_at">
          </label>
          <button type="submit">Create patron</button>
        </form>
      </details>
    {% else %}
      <em>None</em>
    {% endif %}
  </dd>
</dl>

{% if target.is_active and target.username != user.username %}
<details>
  <summary>Reset password</summary>
  <p>
    Set a new password for <strong>{{ target.username }}</strong>. Requires your
    own current password to authorize. Tell the user their new password out of
    band; they should change it themselves via <code>/ui/me/password</code>
    afterwards.
  </p>
  <form method="post" action="/ui/users/{{ target.username }}/reset-password" style="max-width:30rem">
    <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
    <label for="actor_current_password">Your current password
      <input type="password" id="actor_current_password" name="actor_current_password" autocomplete="current-password" required>
    </label>
    <label for="new_password">New password for {{ target.username }}
      <input type="password" id="new_password" name="new_password" autocomplete="new-password" required>
    </label>
    <label for="confirm_password">Confirm new password
      <input type="password" id="confirm_password" name="confirm_password" autocomplete="new-password" required>
    </label>
    <button type="submit" class="outline">Reset password</button>
  </form>
</details>
{% endif %}
{% endblock %}