{% extends "base.html" %}
{% block title %}{{ ltext('Users / المستخدمون') }} | {{ app_name }}{% endblock %}
{% block content %}
    <section class="panel">
        <div class="panel-header panel-header-inline">
            <div>
                <h1>{{ ltext('Users / المستخدمون') }}</h1>
                <p>{{ ltext('Manage internal staff, external accounts, department access, Telegram routing, and security posture. / إدارة المستخدمين والوصول للأقسام وربط تلغرام وحالة الحماية.') }}</p>
            </div>
            <div class="button-row">
                {% if can_manage_mfa %}
                    <form method="post" action="{{ url_for('admin.toggle_all_users_mfa') }}">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                        <input type="hidden" name="mfa_action" value="enable">
                        <button type="submit" class="button button-secondary">{{ ltext('Enable MFA For All / تفعيل MFA للجميع') }}</button>
                    </form>
                    <form method="post" action="{{ url_for('admin.toggle_all_users_mfa') }}">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                        <input type="hidden" name="mfa_action" value="disable">
                        <button type="submit" class="button button-secondary">{{ ltext('Disable MFA For All / إلغاء MFA للجميع') }}</button>
                    </form>
                {% endif %}
                <a class="button button-secondary" href="{{ xlsx_export_url }}">{{ ltext('Export Excel / تصدير Excel') }}</a>
                <a class="button" href="{{ url_for('admin.create_user') }}">{{ ltext('New User / مستخدم جديد') }}</a>
            </div>
        </div>
        <div class="table-wrap">
            <table class="data-table">
                <thead>
                <tr>
                    <th>{{ ltext('Name / الاسم') }}</th>
                    <th>{{ ltext('Email / البريد') }}</th>
                    <th>{{ ltext('Mobile / الموبايل') }}</th>
                    <th>{{ ltext('Type / النوع') }}</th>
                    <th>{{ ltext('Company / الشركة') }}</th>
                    <th>{{ ltext('Department / القسم') }}</th>
                    <th>{{ ltext('Status / الحالة') }}</th>
                    <th></th>
                </tr>
                </thead>
                <tbody>
                {% for user in users.items %}
                    <tr>
                        <td>
                            {{ user.full_name }}
                            {% if user.telegram_chat_id %}
                                <br><small>{{ ltext('Telegram Linked / تلغرام مربوط') }}</small>
                            {% endif %}
                        </td>
                        <td>{{ user.email }}</td>
                        <td>{{ user.phone or '-' }}</td>
                        <td>{{ user.user_type.value|ltext }}</td>
                        <td>{{ user.company.name if user.company else t('internal') }}</td>
                        <td>
                            {{ user.department.name if user.department else t('unassigned') }}
                            {% if user.allowed_departments %}
                                <br>
                                <small>
                                    {% for department in user.allowed_departments %}
                                        {{ department.name }}{% if not loop.last %}, {% endif %}
                                    {% endfor %}
                                </small>
                            {% endif %}
                        </td>
                        <td>
                            {% if user.is_enabled %}
                                {{ t('active') }}
                            {% else %}
                                {{ 'Disabled'|ltext }}
                            {% endif %}
                            {% if user.is_currently_locked %} / {{ t('locked') }}{% endif %}
                            <br><small>{{ ltext('Email OTP MFA Enabled / تفعيل MFA عبر البريد') if user.two_factor_enabled else ltext('Email OTP MFA Disabled / تعطيل MFA عبر البريد') }}</small>
                        </td>
                        <td class="actions-cell">
                            <a href="{{ url_for('admin.edit_user', user_id=user.id) }}">{{ t('edit') }}</a>
                            <form method="post" action="{{ url_for('admin.toggle_user_active', user_id=user.id) }}">
                                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                <button type="submit" class="link-button">{{ ltext('Deactivate / تعطيل') if user.is_enabled else ltext('Activate / تفعيل') }}</button>
                            </form>
                            {% if user.is_currently_locked %}
                                <form method="post" action="{{ url_for('admin.unlock_user', user_id=user.id) }}">
                                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                    <button type="submit" class="link-button">{{ ltext('Unlock / فتح') }}</button>
                                </form>
                            {% else %}
                                <form method="post" action="{{ url_for('admin.lock_user', user_id=user.id) }}">
                                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                    <button type="submit" class="link-button">{{ ltext('Lock / قفل') }}</button>
                                </form>
                            {% endif %}
                            {% if can_manage_mfa %}
                                <form method="post" action="{{ url_for('admin.toggle_user_mfa', user_id=user.id) }}">
                                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                    <button type="submit" class="link-button">{{ ltext('Disable MFA / إلغاء MFA') if user.two_factor_enabled else ltext('Enable MFA / تفعيل MFA') }}</button>
                                </form>
                            {% endif %}
                        </td>
                    </tr>
                {% else %}
                    <tr><td colspan="8">{{ ltext('No users found. / لا يوجد مستخدمون.') }}</td></tr>
                {% endfor %}
                </tbody>
            </table>
        </div>
        {% set pagination = users %}
        {% include "partials/pagination.html" %}
    </section>
{% endblock %}