{% extends "group_admin/base.html" %}
{% block title %}Members{% endblock %}
{% block content %}
<h2 class="mb-4"><i class="bi bi-people-fill me-2"></i>Members</h2>

<div class="row g-3">
    <!-- Member list -->
    <div class="col-md-8">
        <div class="card border-secondary">
            <div class="card-header">Current Members ({{ members|length }})</div>
            <div class="card-body p-0">
                <table class="table table-hover mb-0">
                    <thead><tr><th>User</th><th>Role</th><th class="text-end">Actions</th></tr></thead>
                    <tbody>
                    {% for m in members %}
                    <tr>
                        <td>{{ m.username }}</td>
                        <td>
                            {% if m.role in ['group_owner', 'group_admin', 'admin'] %}
                            <span class="badge bg-warning text-dark"><i class="bi bi-star-fill me-1"></i>{{ role_label(m.role) }}</span>
                            {% else %}
                            <span class="badge bg-secondary">{{ role_label(m.role) }}</span>
                            {% endif %}
                        </td>
                        <td class="text-end">
                            {% if m.id != session.get('user_id') %}
                            <a href="{{ url_for('group_admin.member_edit', user_id=m.id) }}" class="btn btn-sm btn-outline-warning" title="Permissions">
                                <i class="bi bi-shield-lock"></i>
                            </a>
                            <form method="post" action="{{ url_for('group_admin.member_remove', user_id=m.id) }}" class="d-inline"
                                  onsubmit="return confirm('Remove {{ m.username }}?')">
                                <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="btn btn-sm btn-outline-danger" title="Remove">
                                    <i class="bi bi-person-dash"></i>
                                </button>
                            </form>
                            {% else %}
                            <span class="text-muted small">You</span>
                            {% endif %}
                        </td>
                    </tr>
                    {% else %}
                    <tr><td colspan="3" class="text-muted text-center py-3">No members</td></tr>
                    {% endfor %}
                    </tbody>
                </table>
            </div>
        </div>

        <div class="card border-secondary mt-3">
            <div class="card-header"><i class="bi bi-envelope-paper-fill me-2"></i>Pending Invitations ({{ pending_invites|length }})</div>
            <div class="card-body p-0">
                <table class="table table-hover mb-0">
                    <thead><tr><th>User</th><th>Role</th><th>Expires</th><th class="text-end">Actions</th></tr></thead>
                    <tbody>
                    {% for invite in pending_invites %}
                    {% set invite_url = url_for('auth.accept_invite', token=invite.token, _external=True) %}
                    <tr>
                        <td>
                            <div>{{ invite.invited_username }}</div>
                            <div class="small text-muted" id="invite-link-{{ invite.id }}">{{ invite.invited_email }}</div>
                        </td>
                        <td>
                            {% if invite.role in ['group_owner', 'group_admin', 'admin'] %}
                            <span class="badge bg-warning text-dark"><i class="bi bi-star-fill me-1"></i>{{ role_label(invite.role) }}</span>
                            {% else %}
                            <span class="badge bg-secondary">{{ role_label(invite.role) }}</span>
                            {% endif %}
                            <div class="small text-muted mt-1">Sent: {{ invite.send_count or 0 }}</div>
                        </td>
                        <td class="small text-muted">{{ invite.expires_at | fmt_dt }}</td>
                        <td class="text-end">
                            <button type="button" class="btn btn-sm btn-outline-primary copy-btn" data-target="#invite-url-{{ invite.id }}" title="Copy invite link">
                                <i class="bi bi-clipboard"></i>
                            </button>
                            <form method="post" action="{{ url_for('group_admin.resend_invite', invite_id=invite.id) }}" class="d-inline">
                                <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="btn btn-sm btn-outline-info" title="Resend">
                                    <i class="bi bi-send"></i>
                                </button>
                            </form>
                            <form method="post" action="{{ url_for('group_admin.revoke_invite', invite_id=invite.id) }}" class="d-inline"
                                  onsubmit="return confirm('Revoke invitation for {{ invite.invited_username }}?')">
                                <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="btn btn-sm btn-outline-danger" title="Revoke">
                                    <i class="bi bi-x-lg"></i>
                                </button>
                            </form>
                            <div class="d-none" id="invite-url-{{ invite.id }}">{{ invite_url }}</div>
                        </td>
                    </tr>
                    {% else %}
                    <tr><td colspan="4" class="text-muted text-center py-3">No pending invitations</td></tr>
                    {% endfor %}
                    </tbody>
                </table>
            </div>
        </div>
    </div>

    <!-- Group management actions -->
    <div class="col-md-4">
        <div class="card border-secondary mb-3">
            <div class="card-header"><i class="bi bi-person-plus-fill me-2"></i>Add Existing User</div>
            <div class="card-body">
                {% if non_members %}
                <form method="post" action="{{ url_for('group_admin.member_add') }}">
                    <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
                    <div class="mb-3">
                        <label class="form-label">User</label>
                        <select name="user_id" class="form-select" required>
                            {% for user in non_members %}
                            <option value="{{ user.id }}">{{ user.username }} ({{ user.email }})</option>
                            {% endfor %}
                        </select>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Role</label>
                        <select name="role" class="form-select">
                            {% for role, label in role_options %}
                            <option value="{{ role }}" {{ 'selected' if role == 'viewer' }}>{{ label }}</option>
                            {% endfor %}
                        </select>
                    </div>
                    <button type="submit" class="btn btn-outline-success w-100">
                        <i class="bi bi-person-plus-fill me-1"></i>Add to Group
                    </button>
                </form>
                {% else %}
                <p class="text-muted small mb-0">No existing users are available to add.</p>
                {% endif %}
            </div>
        </div>

        <div class="card border-secondary">
            <div class="card-header"><i class="bi bi-envelope-plus-fill me-2"></i>Invite New User</div>
            <div class="card-body">
                <form method="post" action="{{ url_for('group_admin.member_invite') }}">
                    <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
                    <div class="mb-3">
                        <label class="form-label">Username</label>
                        <input type="text" name="username" class="form-control" maxlength="50" required>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Email</label>
                        <input type="email" name="email" class="form-control" maxlength="255" required>
                        <div class="form-text">The user will receive an invite link and set their own password.</div>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Role</label>
                        <select name="role" class="form-select">
                            {% for role, label in role_options %}
                            <option value="{{ role }}" {{ 'selected' if role == 'viewer' }}>{{ label }}</option>
                            {% endfor %}
                        </select>
                    </div>
                    <button type="submit" class="btn btn-success w-100">
                        <i class="bi bi-envelope-plus-fill me-1"></i>Create Invitation
                    </button>
                </form>
            </div>
        </div>
    </div>
</div>
{% endblock %}