{{define "admin_users"}}
<div class="admin-users">
  {{if .Data.Error}}<div class="alert alert-err"><strong>提示：</strong>{{.Data.Error}}</div>{{end}}
  {{if .Data.Notice}}<div class="alert alert-ok"><strong>成功 ✓</strong> {{.Data.Notice}}</div>{{end}}

  <div class="settings-tabs" id="userTabs">
    <a href="/admin/users/list" class="settings-tab {{if eq .Data.Tab "list"}}active{{end}}">用户列表</a>
    <a href="/admin/users/create" class="settings-tab {{if eq .Data.Tab "create"}}active{{end}}">新增用户</a>
    <a href="/admin/users/roles" class="settings-tab {{if eq .Data.Tab "roles"}}active{{end}}">角色管理</a>
  </div>

  {{if eq .Data.Tab "list"}}
  <div class="panel">
    <h2 class="panel-title">全部用户（{{len .Data.Users}}）</h2>
    <p class="settings-copy">角色的权限是<strong>真实生效</strong>的：站长（admin）拥有全部权限，作者可管理自己的内容，自定义角色按你勾选的权限放权。</p>
    <div class="table-wrap">
      <table class="table">
        <thead>
          <tr>
            <th>ID</th>
            <th>用户名</th>
            <th>昵称</th>
            <th>邮箱</th>
            <th>角色</th>
            <th>注册时间</th>
            <th class="th-ops">操作</th>
          </tr>
        </thead>
        <tbody>
          {{range .Data.Users}}
          {{$u := .}}
          <tr>
            <td>{{.ID}}</td>
            <td>{{.Username}}</td>
            <td>{{.Nickname}}</td>
            <td>{{if .Email}}{{.Email}}{{else}}<span class="muted-text">—</span>{{end}}</td>
            <td>
              {{if eq .Role "admin"}}<span class="badge badge-pub">站长</span>
              {{else}}<span class="badge badge-draft">{{.Role}}</span>{{end}}
            </td>
            <td>{{date .CreatedAt}}</td>
            <td class="th-ops">
              {{if ne .ID $.User.ID}}
              <div class="row-actions">
                <form method="post" action="/admin/users" class="app-act user-role-form">
                  <input type="hidden" name="csrf" value="{{$.CSRF}}">
                  <input type="hidden" name="action" value="role">
                  <input type="hidden" name="id" value="{{.ID}}">
                  <select name="role" class="select-sm">
                    {{range $.Data.Roles}}
                    <option value="{{.Name}}" {{if eq .Name $u.Role}}selected{{end}}>{{.Name}}{{if .BuiltIn}}（内置）{{end}}</option>
                    {{end}}
                  </select>
                  <button class="btn btn-ghost btn-sm" type="submit">改角色</button>
                </form>
                <form method="post" action="/admin/users" class="app-act"
                      onsubmit="return confirm('确定删除该用户？此操作不可恢复。');">
                  <input type="hidden" name="csrf" value="{{$.CSRF}}">
                  <input type="hidden" name="action" value="delete">
                  <input type="hidden" name="id" value="{{.ID}}">
                  <button class="btn btn-danger btn-sm" type="submit">删除</button>
                </form>
              </div>
              {{else}}
              <span class="badge">当前账号</span>
              {{end}}
            </td>
          </tr>
          {{end}}
        </tbody>
      </table>
    </div>
  </div>
  {{end}}

  {{if eq .Data.Tab "create"}}
  <div class="panel">
    <h2 class="panel-title">新增用户</h2>
    <p class="settings-copy">为新成员设置用户名、邮箱、初始密码与角色：角色决定他能做什么，权限会立即生效。</p>
    <form method="post" action="/admin/users" class="user-create-form">
      <input type="hidden" name="csrf" value="{{.CSRF}}">
      <input type="hidden" name="action" value="create">
      <div class="form-grid">
        <div class="form-row">
          <label>用户名</label>
          <input type="text" name="username" required minlength="2" maxlength="32" placeholder="2～32 个字符">
        </div>
        <div class="form-row">
          <label>昵称（选填）</label>
          <input type="text" name="nickname" maxlength="32" placeholder="不填则使用用户名">
        </div>
        <div class="form-row">
          <label>邮箱</label>
          <input type="email" name="email" required maxlength="128" placeholder="用于联系与找回">
        </div>
        <div class="form-row">
          <label>初始密码</label>
          <input type="password" name="password" required minlength="6" placeholder="至少 6 位">
        </div>
        <div class="form-row">
          <label>角色</label>
          <select name="role">
            {{range .Data.Roles}}
            <option value="{{.Name}}">{{.Name}}{{if .BuiltIn}}（内置）{{end}}</option>
            {{end}}
          </select>
        </div>
      </div>
      <div class="form-actions">
        <button class="btn btn-primary" type="submit">创建用户</button>
      </div>
    </form>
  </div>
  {{end}}

  {{if eq .Data.Tab "roles"}}
  <div class="panel">
    <h2 class="panel-title">角色管理（自定义角色）</h2>
    <p class="settings-copy">站长与作者是内置角色，不可删除；你可以按需创建自己的角色，勾选它拥有的权限，把合适的事交给合适的人。</p>
    <table class="table">
      <thead>
        <tr>
          <th>角色</th>
          <th>权限</th>
          <th class="th-ops">操作</th>
        </tr>
      </thead>
      <tbody>
        {{range .Data.Roles}}
        <tr>
          <td><strong>{{.Name}}</strong>{{if .BuiltIn}} <span class="badge">内置</span>{{end}}</td>
          <td class="role-perm-cell">
            {{range .Permissions}}
            <span class="perm-chip">{{permLabel .}}</span>
            {{else}}
            <span class="muted-text">无权限（仅可登录后台）</span>
            {{end}}
          </td>
          <td class="th-ops">
            {{if .BuiltIn}}
            <span class="muted-text">内置不可删</span>
            {{else}}
            <form method="post" action="/admin/users" class="app-act"
                  onsubmit="return confirm('确定删除该角色？');">
              <input type="hidden" name="csrf" value="{{$.CSRF}}">
              <input type="hidden" name="action" value="delete_role">
              <input type="hidden" name="role_id" value="{{.ID}}">
              <button class="btn btn-danger btn-sm" type="submit">删除</button>
            </form>
            {{end}}
          </td>
        </tr>
        {{end}}
      </tbody>
    </table>

    <form method="post" action="/admin/users" class="role-create-form">
      <input type="hidden" name="csrf" value="{{.CSRF}}">
      <input type="hidden" name="action" value="create_role">
      <div class="role-create-head">
        <input type="text" name="role_name" required placeholder="新角色名称，如：编辑 / 运营" maxlength="32">
        <div class="perm-checks">
          {{range .Data.PermLabels}}
          <label class="perm-check"><input type="checkbox" name="perm" value="{{.Key}}"> {{.Label}}</label>
          {{end}}
        </div>
      </div>
      <div class="form-actions">
        <button class="btn btn-primary" type="submit">创建角色</button>
      </div>
    </form>
  </div>
  {{end}}
</div>
{{end}}