{% extends 'base.html' %}
{% block content %}
<h2>Manage User Detail</h2>
<div class="detail-layout">
  <section>
    <article>
      <h3>User detail: {{ selected_user.username }} (#{{ selected_user.id }})</h3>
      <p>
        Type: <strong>{{ selected_user.account_type }}</strong>
        · Status: <strong>{{ approval_status_label(current_approval_status) }}</strong>
        · Balance: <strong>{{ '%.6f'|format(selected_user.wallet_balance) }} XMR</strong>
      </p>
      <form method="post" action="{{ url_for('admin_users') }}">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="update_profile">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <label>Username <input name="username" value="{{ selected_user.username }}" required></label>
        <label>Type
          <select name="account_type">
            <option value="buyer" {% if selected_user.account_type == 'buyer' %}selected{% endif %}>buyer</option>
            <option value="seller" {% if selected_user.account_type == 'seller' %}selected{% endif %}>seller</option>
            <option value="admin" {% if selected_user.account_type == 'admin' %}selected{% endif %}>admin</option>
          </select>
        </label>
        <p><strong>Active PGP key</strong></p>
        <textarea name="pgp_public_key" rows="8" placeholder="Optional armored public key">{{ selected_user.pgp_public_key or '' }}</textarea>
        <button type="submit">Save profile</button>
      </form>
    </article>
  </section>

  <aside class="right-rail">
    <article class="action-card">
      <h3>Approval</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="set_approval">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <select name="approval_status">
          <option value="approved" {% if current_approval_status == 'approved' %}selected{% endif %}>approved</option>
          <option value="not_approved" {% if current_approval_status == 'not_approved' %}selected{% endif %}>not approved</option>
          <option value="on_review" {% if current_approval_status == 'on_review' %}selected{% endif %}>on review</option>
        </select>
        <button>Set approval</button>
      </form>
    </article>

    {% if selected_user.account_type == 'seller' %}
    <article class="action-card">
      <h3>Seller fee</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="set_seller_fee">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <label>Fee percent <input type="number" name="seller_fee_percent" min="0" max="100" step="0.01" value="{{ selected_user.seller_fee_percent or 3 }}" required></label>
        <button>Update seller fee</button>
      </form>
    </article>
    {% endif %}

    {% if has_admin_permission('can_manage_wallet') %}
    <article class="action-card">
      <h3>Wallet controls</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="wallet_adjust">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <input type="number" step="0.000001" name="amount" placeholder="XMR amount" required>
        <input name="note" placeholder="Reason / note">
        <button>Adjust wallet balance</button>
      </form>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="refresh_wallet_address">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <button type="submit" class="secondary">Refresh wallet address</button>
      </form>
    </article>
    {% endif %}

    {% if has_admin_permission('can_manage_wallet') %}
    <article class="action-card">
      <h3>Withdrawals</h3>
      {% for withdrawal in pending_withdrawals %}
      <div style="margin-bottom:1rem;">
        <p><strong>Request #{{ withdrawal.id }}</strong> · total {{ '%.6f'|format(withdrawal.amount_xmr) }} XMR · {{ withdrawal.status }}</p>
        <p><small>{{ withdrawal.created_at }} → {{ withdrawal.updated_at }}</small></p>
        <p><small>Fee tier {{ withdrawal.fee_priority or 2 }}{% if withdrawal.network_fee_xmr is not none %} · fee {{ '%.6f'|format(withdrawal.network_fee_xmr) }} XMR · payout {{ '%.6f'|format(withdrawal.amount_xmr - withdrawal.network_fee_xmr) }} XMR{% endif %}</small></p>
        <p><code>{{ withdrawal.destination_address }}</code></p>
        {% if withdrawal.txid %}<p><small>TXID: <code>{{ withdrawal.txid }}</code></small></p>{% endif %}
        {% if withdrawal.admin_note %}<p><small>Admin note: {{ withdrawal.admin_note }}</small></p>{% endif %}
        {% if withdrawal.status == 'pending' and ((withdrawal.requires_admin_approval and can_review_sellers) or has_admin_permission('can_manage_wallet')) %}
        <form method="post" action="{{ url_for('admin_users') }}" class="grid">
          <input type="hidden" name="next" value="manage_user_detail">
          <input type="hidden" name="user_id" value="{{ selected_user.id }}">
          <input type="hidden" name="withdrawal_id" value="{{ withdrawal.id }}">
          <input name="admin_note" placeholder="Optional review note">
          <button name="action" value="approve_withdrawal" type="submit">Approve withdrawal</button>
          <button name="action" value="reject_withdrawal" type="submit" class="secondary">Reject withdrawal</button>
        </form>
        {% endif %}
      </div>
      {% else %}
      <p><small>No withdrawal requests yet.</small></p>
      {% endfor %}
    </article>
    {% endif %}

    {% if selected_user.account_type == 'seller' and can_review_sellers %}
    <article class="action-card">
      <h3>Pending seller review items</h3>
      {% for req in pending_pgp_requests %}
      <p><strong>PGP request #{{ req.id }}</strong><br><small>{{ req.created_at }}</small></p>
      <pre style="white-space:pre-wrap">{{ req.requested_pgp_public_key }}</pre>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <input type="hidden" name="pgp_request_id" value="{{ req.id }}">
        <button name="action" value="approve_pgp_request" type="submit">Approve PGP key</button>
        <button name="action" value="reject_pgp_request" type="submit" class="secondary">Reject PGP key</button>
      </form>
      {% else %}
      <p><small>No pending PGP key changes.</small></p>
      {% endfor %}
      {% if review_listings %}
      <h4>Listings awaiting review</h4>
      <ul>
        {% for listing in review_listings %}
        <li><a href="{{ url_for('listing_detail', listing_id=listing.id) }}">#{{ listing.id }} · {{ listing.title }}</a></li>
        {% endfor %}
      </ul>
      {% endif %}
    </article>
    {% endif %}

    {% if can_manage_user_rights %}
    <article class="action-card">
      <h3>Admin group</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="set_admin_role">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <select name="role_id">{% for r in admin_roles %}<option value="{{ r.id }}" {% if selected_admin_role_id == r.id %}selected{% endif %}>{{ r.name }} (w={{ r.weight }})</option>{% endfor %}</select>
        <button>Set admin group</button>
      </form>
    </article>
    {% endif %}
    {% if has_admin_permission('can_impersonate_users') and current_user.id != selected_user.id %}
    <article class="action-card">
      <h3>Impersonation</h3>
      <form method="post" action="{{ url_for('admin_impersonate', user_id=selected_user.id) }}" class="grid">
        <button type="submit">Impersonate {{ selected_user.username }}</button>
      </form>
    </article>
    {% endif %}

    <article class="action-card">
      <h3>Admin change password</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="reset_password">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <input type="password" name="new_password" placeholder="New password (min 8 chars)" required>
        <button>Change password</button>
      </form>
    </article>

    <article class="action-card">
      <h3>Danger zone</h3>
      <form method="post" action="{{ url_for('admin_users') }}" class="grid">
        <input type="hidden" name="next" value="manage_user_detail">
        <input type="hidden" name="action" value="delete_user">
        <input type="hidden" name="user_id" value="{{ selected_user.id }}">
        <button>Delete user</button>
      </form>
    </article>
  </aside>
</div>
{% endblock %}