{% extends "base.html" %}
{% block title %}{{ title }}{% endblock %}

{% block content %}
<div class="d-flex align-items-center mb-3">
  <a href="{{ url_for('settings.users') }}" class="btn btn-sm btn-outline-secondary me-3">
    <i class="bi bi-arrow-left me-1"></i>Back
  </a>
  <h4 class="fw-bold mb-0">
    <i class="bi bi-person-fill me-2 text-primary"></i>{{ title }}
  </h4>
</div>

<div class="row">
  <div class="col-lg-5">
    <div class="card border-0 shadow-sm">
      <div class="card-body">
        <form method="POST" novalidate autocomplete="off">
          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">

          {% if action == 'new' %}
          <div class="mb-3">
            <label class="form-label fw-semibold">Role</label>
            <select name="role" class="form-select" id="role-select">
              <option value="domain_admin" selected>Domain admin</option>
              <option value="user">Mailbox user</option>
            </select>
            <div class="form-text">
              Domain admin: manages all quarantine for a domain.
              Mailbox user: only sees mail addressed to their own mailbox.
            </div>
          </div>
          {% else %}
          <div class="mb-3">
            <label class="form-label fw-semibold">Role</label>
            <p class="form-control-plaintext font-monospace">{{ user.role }}</p>
          </div>
          {% endif %}

          <div class="mb-3">
            <label class="form-label fw-semibold">Email / Username</label>
            <input type="text" name="username" class="form-control"
                   value="{{ user.username if user else '' }}"
                   placeholder="user@domain.com.au" required>
            <div class="form-text">
              Use the full email: <code>user@domain.com.au</code>.
              For a mailbox user this is also the mailbox address.
            </div>
          </div>

          <div class="mb-3">
            <label class="form-label fw-semibold">Managed Domain</label>
            <select name="domain_id" class="form-select" required>
              <option value="">-- Select domain --</option>
              {% for d in domains %}
                <option value="{{ d.id }}"
                  {% if user and user.domain_id == d.id %}selected{% endif %}>
                  {{ d.domain }}
                </option>
              {% endfor %}
            </select>
          </div>

          {% if action == 'new' or (user and user.is_mailbox_user) %}
          <div class="mb-3" id="aliases-block">
            <label class="form-label fw-semibold">
              Aliases <span class="text-muted fw-normal">(one per line, must be at @&lt;domain&gt;)</span>
            </label>
            <textarea name="aliases" class="form-control font-monospace"
                      rows="3"
                      placeholder="alias1@domain.com.au&#10;alias2@domain.com.au">{% if form_aliases is not none %}{{ form_aliases }}{% elif user %}{% for a in user.aliases %}{{ a.alias }}
{% endfor %}{% endif %}</textarea>
            <div class="form-text">
              Mail addressed to any alias appears in this user's
              quarantine view.  Applies to mailbox users only; ignored
              for domain admins.
            </div>
          </div>
          {% endif %}

          <div class="mb-3">
            <label class="form-label fw-semibold">
              Password{% if action == 'edit' %} <span class="text-muted fw-normal">(leave blank to keep current)</span>{% endif %}
            </label>
            <input type="password" name="password" class="form-control"
                   autocomplete="new-password"
                   {% if action == 'new' %}required{% endif %}>
          </div>

          <div class="mb-3">
            <label class="form-label fw-semibold">Confirm Password</label>
            <input type="password" name="password2" class="form-control"
                   autocomplete="new-password"
                   {% if action == 'new' %}required{% endif %}>
          </div>

          <div class="mb-4">
            <div class="form-check">
              <input class="form-check-input" type="checkbox" name="is_active"
                     id="is_active"
                     {% if action == 'new' or (user and user.is_active) %}checked{% endif %}>
              <label class="form-check-label fw-semibold" for="is_active">
                Active (can log in)
              </label>
            </div>
          </div>

          <button type="submit" class="btn btn-primary">
            <i class="bi bi-save me-1"></i>
            {% if action == 'new' %}Create Account{% else %}Save Changes{% endif %}
          </button>
        </form>
      </div>
    </div>
  </div>
</div>
{% endblock %}