{% extends 'base.html' %}
{% block content %}
<h2>Admin Panel</h2>
<p>Rights → Categories={{ role.can_manage_categories }}, Listings={{ role.can_manage_listings }}, Disputes={{ role.can_manage_disputes }}, Forum={{ role.can_manage_forum }}, Users={{ role.can_manage_users }}, Wallet={{ role.can_manage_wallet }}, EscrowDecider={{ role.can_release_escrow }}, SellerReviewer={{ role.can_review_sellers }}, Overview={{ role.can_see_marketplace_overview }}, UserRights={{ role.can_manage_user_rights }}, Impersonate={{ role.can_impersonate_users }}, Weight={{ role.weight }}</p>

<section class="detail-layout">
  <div>
    {% if role.can_see_marketplace_overview %}
    <article>
      <h3>Marketplace overview</h3>
      <table>
        <tr><th>Metric</th><th>Value</th></tr>
        <tr><td>Total users</td><td>{{ stats.total_users }}</td></tr>
        <tr><td>Buyers</td><td>{{ stats.total_buyers }}</td></tr>
        <tr><td>Sellers</td><td>{{ stats.total_sellers }}</td></tr>
        <tr><td>Admins</td><td>{{ stats.total_admins }}</td></tr>
        <tr><td>Total listings</td><td>{{ stats.total_listings }}</td></tr>
        <tr><td>Active listings</td><td>{{ stats.active_listings }}</td></tr>
        <tr><td>Total orders</td><td>{{ stats.total_orders }}</td></tr>
        <tr><td>Currently in Escrow (XMR)</td><td>{{ '%.6f'|format(stats.currently_in_escrow) }}</td></tr>
        <tr><td>Current hot wallet (XMR)</td><td>{{ '%.6f'|format(hot_wallet_balance_xmr) }}{% if hot_wallet_balance_source == 'tracked' %} <small>(tracked fallback)</small>{% else %} <small>(live unlocked balance)</small>{% endif %}</td></tr>
        <tr><td>GM volume (XMR)</td><td>{{ '%.6f'|format(stats.gm_volume) }}</td></tr>
      </table>
      {% if hot_wallet_balance_error %}<p><small>Live wallet RPC unavailable: {{ hot_wallet_balance_error }}</small></p>{% endif %}
    </article>
    {% endif %}

    {% if role.can_manage_categories %}
    <article>
      <h3>Category management</h3>
      <form method="post" action="{{ url_for('admin_categories') }}" class="grid">
        <input type="hidden" name="action" value="create">
        <input name="name" placeholder="New category name" required>
        <button type="submit">Create category</button>
      </form>
      <table>
      <tr><th>Name</th><th>Position</th><th>Actions</th></tr>
      {% for c in categories %}
      <tr>
        <td>{{ c.name }}</td><td>{{ c.position }}</td>
        <td>
          <form method="post" action="{{ url_for('admin_categories') }}" style="display:inline"><input type="hidden" name="category_id" value="{{ c.id }}"><input type="hidden" name="action" value="move_up"><button>↑</button></form>
          <form method="post" action="{{ url_for('admin_categories') }}" style="display:inline"><input type="hidden" name="category_id" value="{{ c.id }}"><input type="hidden" name="action" value="move_down"><button>↓</button></form>
          <form method="post" action="{{ url_for('admin_categories') }}" style="display:inline"><input type="hidden" name="category_id" value="{{ c.id }}"><input type="hidden" name="action" value="delete"><button>Delete</button></form>
        </td>
      </tr>
      {% endfor %}
      </table>
    </article>
    {% endif %}
  </div>

  <aside style="display:flex; flex-direction:column; gap:1rem;">
    {% if can_manage_settings %}
    <article>
      <h3>Settings</h3>
      <form method="post" action="{{ url_for('admin_settings') }}" enctype="multipart/form-data">
        <fieldset>
          <legend>Shop customization</legend>
          <label>Shop name <input type="text" name="site_name" maxlength="80" value="{{ settings.site_name or '' }}" required></label>
          <label>Tagline <input type="text" name="site_tagline" maxlength="160" value="{{ settings.site_tagline or '' }}"></label>
          <label>Header icon <input type="text" name="site_header_icon" maxlength="8" value="{{ settings.site_header_icon or '' }}" placeholder="🖥️"></label>
          <label>Meta description<textarea name="site_meta_description" rows="3">{{ settings.site_meta_description or '' }}</textarea></label>
          <label>Favicon image <input type="file" name="site_favicon" accept="image/png,image/jpeg,image/webp,image/x-icon,image/vnd.microsoft.icon,image/gif"></label>
          {% if settings.site_favicon_path %}
          <p><small>Current favicon: <a href="{{ url_for('static', filename=settings.site_favicon_path) }}" target="_blank" rel="noreferrer">{{ settings.site_favicon_path }}</a></small></p>
          <label><input type="checkbox" name="remove_site_favicon" value="1"> Remove favicon</label>
          {% endif %}
        </fieldset>
        <fieldset>
          <legend>Runtime configuration</legend>
          <p><small>Environment variables still override these values. Restart the app after saving changes in this section.</small></p>
          <label>Secret key <input type="text" name="SECRET_KEY" maxlength="255" value="{{ runtime_settings.SECRET_KEY or '' }}" required></label>
          <label>Database URL <input type="text" name="DATABASE_URL" maxlength="1000" value="{{ runtime_settings.DATABASE_URL or '' }}" required></label>
          <label>Monero wallet RPC URL <input type="text" name="MONERO_WALLET_RPC_URL" maxlength="500" value="{{ runtime_settings.MONERO_WALLET_RPC_URL or '' }}" required></label>
          <label>Monero wallet RPC username <input type="text" name="MONERO_WALLET_RPC_USERNAME" maxlength="255" value="{{ runtime_settings.MONERO_WALLET_RPC_USERNAME or '' }}"></label>
          <label>Monero wallet RPC password <input type="password" name="MONERO_WALLET_RPC_PASSWORD" maxlength="255" value="{{ runtime_settings.MONERO_WALLET_RPC_PASSWORD or '' }}"></label>
          <label>Gunicorn bind port <input type="text" name="PORT" maxlength="16" value="{{ runtime_settings.PORT or '' }}" required></label>
          <label>Gunicorn workers <input type="text" name="GUNICORN_WORKERS" maxlength="16" value="{{ runtime_settings.GUNICORN_WORKERS or '' }}" required></label>
          <label>Gunicorn threads <input type="text" name="GUNICORN_THREADS" maxlength="16" value="{{ runtime_settings.GUNICORN_THREADS or '' }}" required></label>
          <label>Gunicorn extra args <input type="text" name="GUNICORN_EXTRA_ARGS" maxlength="500" value="{{ runtime_settings.GUNICORN_EXTRA_ARGS or '' }}" placeholder="--timeout 120"></label>
        </fieldset>
        <label><input type="checkbox" name="require_pgp_for_purchase" value="1" {% if settings.require_pgp_for_purchase in ['1','true','yes','on'] %}checked{% endif %}> Require buyer/admin PGP key to purchase</label>
        <label><input type="checkbox" name="allow_admin_purchases" value="1" {% if settings.allow_admin_purchases in ['1','true','yes','on'] %}checked{% endif %}> Allow admins to purchase</label>
        <label><input type="checkbox" name="enable_cart" value="1" {% if settings.enable_cart in ['1','true','yes','on'] %}checked{% endif %}> Enable cart</label>
        <label><input type="checkbox" name="enable_order_messaging" value="1" {% if settings.enable_order_messaging in ['1','true','yes','on'] %}checked{% endif %}> Enable order messaging</label>
        <label><input type="checkbox" name="show_seller_pgp_in_checkout" value="1" {% if settings.show_seller_pgp_in_checkout in ['1','true','yes','on'] %}checked{% endif %}> Show seller PGP in checkout/order window</label>
        <label><input type="checkbox" name="validate_monero_address_prefix" value="1" {% if settings.validate_monero_address_prefix in ['1','true','yes','on'] %}checked{% endif %}> Enforce Monero withdrawal address prefix (4 or 8)</label>
        <label>Onboarding message<textarea name="buyer_welcome_message" rows="5">{{ settings.buyer_welcome_message or '' }}</textarea></label>
        <label>Monero min confirmations <input type="number" name="monero_min_confirmations" min="1" value="{{ settings.monero_min_confirmations or 10 }}" required></label>
        <label>Default seller fee (%) <input type="number" name="seller_default_fee_percent" min="0" max="100" step="0.01" value="{{ settings.seller_default_fee_percent or 3 }}" required></label>
        <label>Hot wallet escrow reserve (%) <input type="number" name="hot_wallet_sweep_percent" min="0" max="100" step="0.01" value="{{ settings.hot_wallet_sweep_percent or 50 }}" required></label>
        <button type="submit">Save settings</button>
      </form>
    </article>

    {% if can_manage_wallet %}
    <article>
      <h3>Pending withdrawal queue</h3>
      <ul>
        {% for withdrawal in queued_withdrawals %}
        <li>
          <strong>#{{ withdrawal.id }}</strong> · <a href="{{ url_for('admin_manage_user_by_id', user_id=withdrawal.user_id) }}">{{ withdrawal.username }}</a>
          · total {{ '%.6f'|format(withdrawal.amount_xmr) }} XMR
          {% if withdrawal.network_fee_xmr is not none %}· fee {{ '%.6f'|format(withdrawal.network_fee_xmr) }} XMR · payout {{ '%.6f'|format(withdrawal.amount_xmr - withdrawal.network_fee_xmr) }} XMR{% endif %}
          · {{ withdrawal.status }}
          {% if withdrawal.requires_admin_approval %}· seller review{% else %}· hot-wallet queue{% endif %}
          {% if withdrawal.admin_note %}<br><small>{{ withdrawal.admin_note }}</small>{% endif %}
        </li>
        {% else %}
        <li><small>No pending withdrawals.</small></li>
        {% endfor %}
      </ul>
    </article>

    <article>
      <h3>Wallet maintenance</h3>
      <form method="post" action="{{ url_for('admin_wallet_maintenance') }}">
        <button type="submit">Run daily wallet maintenance now</button>
      </form>
      <form method="post" action="{{ url_for('admin_refresh_all_wallet_addresses') }}">
        <button type="submit" class="secondary">Refresh all user wallet addresses</button>
      </form>
      <ul>
        {% for run in recent_wallet_maintenance %}
        <li><small>{{ run.created_at }} · {{ run.run_type }} · {{ run.details }}</small></li>
        {% else %}
        <li><small>No maintenance runs yet.</small></li>
        {% endfor %}
      </ul>
    </article>
    {% endif %}

    <article>
      <h3>Seller fee overview</h3>
      <ul>
        {% for s in sellers %}
        <li><a href="{{ url_for('admin_manage_user_by_id', user_id=s.id) }}">{{ s.username }}</a>: {{ '%.2f'|format(s.seller_fee_percent or 0) }}%</li>
        {% else %}
        <li>No sellers yet.</li>
        {% endfor %}
      </ul>
    </article>
    {% endif %}

    {% if can_manage_user_rights %}
    <article>
      <h3>Admin rights management</h3>
      <form method="post" action="{{ url_for('admin_roles') }}">
        <input type="hidden" name="action" value="create">
        <label>Role name <input name="name" required></label>
        <label>Weight <input type="number" name="weight" min="0" value="100" required></label>
        <label><input type="checkbox" name="can_manage_categories"> manage categories</label>
        <label><input type="checkbox" name="can_manage_listings"> manage listings</label>
        <label><input type="checkbox" name="can_manage_disputes"> manage disputes</label>
        <label><input type="checkbox" name="can_manage_forum"> manage forum</label>
        <label><input type="checkbox" name="can_manage_users"> manage users</label>
        <label><input type="checkbox" name="can_manage_wallet"> manage wallet</label>
        <label><input type="checkbox" name="can_release_escrow"> escrow decider (release escrow)</label>
        <label><input type="checkbox" name="can_review_sellers"> seller reviewer</label>
        <label><input type="checkbox" name="can_see_marketplace_overview"> see marketplace overview</label>
        <label><input type="checkbox" name="can_manage_user_rights"> manage user rights</label>
        <label><input type="checkbox" name="can_impersonate_users"> impersonate users</label>
        <button type="submit">Create role</button>
      </form>
      <a href="{{ url_for('admin_existing_roles') }}" role="button" class="secondary">Manage existing roles</a>

      <form method="post" action="{{ url_for('admin_roles') }}" class="grid">
        <input type="hidden" name="action" value="assign">
        <select name="admin_user_id">{% for a in admins %}<option value="{{ a.id }}">{{ a.username }} ({{ a.role_name or 'none' }})</option>{% endfor %}</select>
        <select name="role_id">{% for r in roles %}<option value="{{ r.id }}">{{ r.name }} (w={{ r.weight }})</option>{% endfor %}</select>
        <button type="submit">Assign role</button>
      </form>
    </article>

    <article>
      <h3>Report rights (user + group based)</h3>
      <form method="post" action="{{ url_for('admin_report_roles') }}">
        <input type="hidden" name="action" value="create">
        <input name="name" placeholder="Role name" required>
        <select name="account_type"><option value="">No group binding</option><option value="buyer">buyer group</option><option value="seller">seller group</option><option value="admin">admin group</option></select>
        <label><input type="checkbox" name="can_report_users" checked> allow reporting users</label>
        <button>Create report role</button>
      </form>
      <form method="post" action="{{ url_for('admin_report_roles') }}" class="grid">
        <input type="hidden" name="action" value="assign_user">
        <select name="user_id">{% for ru in report_role_assignments %}<option value="{{ ru.user_id }}">{{ ru.username }} ({{ ru.role_name or 'group default' }})</option>{% endfor %}</select>
        <select name="role_id">{% for rr in report_roles %}<option value="{{ rr.id }}">{{ rr.name }} {% if rr.can_report_users %}(can report){% else %}(cannot report){% endif %}</option>{% endfor %}</select>
        <button>Assign user report role</button>
      </form>
    </article>
    {% endif %}
  </aside>
</section>
{% endblock %}