{% extends "base.html" %}
{% block title %}Administration – AAZ Accounting{% endblock %}
{% block page_title %}Administration{% endblock %}

{% block content %}
<div style="display:grid;grid-template-columns:1fr 1fr;gap:1.5rem;margin-bottom:1.5rem">

  <!-- Gestion utilisateurs -->
  <div class="card">
    <div class="card-header">Utilisateurs</div>
    <div class="card-body" style="padding:0">
      <table>
        <thead><tr><th>Nom</th><th>Email</th><th>Rôle</th><th>Statut</th><th>Dernière connexion</th></tr></thead>
        <tbody>
          {% for u in users %}
          <tr>
            <td>{{ u.full_name }}</td>
            <td>{{ u.email }}</td>
            <td><span class="tag {% if u.is_admin %}tag-info{% else %}tag-muted{% endif %}">
              {{ 'Admin' if u.is_admin else 'Expert-compta' }}</span></td>
            <td><span class="tag {% if u.is_active %}tag-success{% else %}tag-danger{% endif %}">
              {{ 'Actif' if u.is_active else 'Inactif' }}</span></td>
            <td style="font-size:.8rem">{{ u.last_login_at.strftime('%d/%m/%Y %H:%M') if u.last_login_at else '–' }}</td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>

    <!-- Créer un utilisateur -->
    <div class="card-header" style="margin-top:.5rem">Créer un utilisateur</div>
    <div class="card-body">
      <form method="POST" action="{{ url_for('admin.create_user') }}">
        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
        <div style="display:grid;grid-template-columns:1fr 1fr;gap:.75rem">
          <div class="form-group"><label>Prénom</label><input type="text" name="first_name" required></div>
          <div class="form-group"><label>Nom</label><input type="text" name="last_name" required></div>
        </div>
        <div class="form-group"><label>Email</label><input type="email" name="email" required></div>
        <div class="form-group">
          <label>Rôle</label>
          <select name="role">
            <option value="accountant">Expert-comptable (lecture / export)</option>
            <option value="admin">Administrateur (accès complet)</option>
          </select>
        </div>
        <div class="form-group">
          <label>Mot de passe (min. 12 car., maj., chiffre, spécial)</label>
          <input type="password" name="password" required minlength="12">
        </div>
        <button type="submit" class="btn btn-primary">Créer</button>
      </form>
    </div>
  </div>

  <!-- Référentiel fournisseurs -->
  <div class="card">
    <div class="card-header">
      Règles fournisseurs ({{ rules|length }})
      <button class="btn btn-outline btn-sm" onclick="document.getElementById('addRule').style.display='block'">+ Ajouter</button>
    </div>

    <!-- Formulaire ajout règle -->
    <div id="addRule" style="display:none;padding:1rem;background:var(--bg);border-bottom:1px solid var(--border)">
      <div style="display:grid;grid-template-columns:2fr 1fr 1fr auto;gap:.5rem;align-items:end">
        <div><label style="font-size:.75rem">Mot-clé libellé</label><input type="text" id="ruleKw" placeholder="BOIVIN"></div>
        <div><label style="font-size:.75rem">Compte</label><input type="text" id="ruleAcc" placeholder="625100"></div>
        <div>
          <label style="font-size:.75rem">TVA</label>
          <select id="ruleTva">
            <option value="20">20%</option><option value="10">10%</option>
            <option value="5.5">5,5%</option><option value="0">0%</option>
            <option value="formation">Formation</option>
          </select>
        </div>
        <button class="btn btn-success btn-sm" onclick="addRule()">Ajouter</button>
      </div>
      <label style="font-size:.75rem;margin-top:.5rem;display:flex;align-items:center;gap:.5rem">
        <input type="checkbox" id="ruleForm"> Repas formation (TTC, TVA non récupérable)
      </label>
    </div>

    <div style="max-height:400px;overflow-y:auto">
      <table>
        <thead><tr><th>Mot-clé</th><th>Compte</th><th>TVA</th><th>Source</th><th>Récurrent</th><th></th></tr></thead>
        <tbody id="rulesBody">
          {% for r in rules %}
          <tr id="rule-{{ r.id }}">
            <td class="font-mono" style="font-size:.82rem">{{ r.keyword }}</td>
            <td class="font-mono">{{ r.account_number }}</td>
            <td>{{ r.tva_rate }}{% if r.tva_rate not in ('formation','0') %}%{% endif %}</td>
            <td><span class="tag tag-muted" style="font-size:.7rem">{{ r.source }}</span></td>
            <td>{% if r.is_recurring %}<span class="tag tag-info" style="font-size:.7rem">{{ r.recurrence_month_count }}m</span>{% endif %}</td>
            <td><button class="btn btn-danger btn-sm" onclick="deleteRule({{ r.id }})">✕</button></td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
  </div>
</div>

<!-- Audit log -->
<div class="card">
  <div class="card-header">Journal d'audit (50 dernières actions)</div>
  <div class="table-wrapper" style="max-height:300px;overflow-y:auto">
    <table>
      <thead><tr><th>Date/heure</th><th>Utilisateur</th><th>Action</th><th>IP</th><th>Détails</th></tr></thead>
      <tbody>
        {% for al in audit_entries %}
        <tr>
          <td style="white-space:nowrap;font-size:.8rem">{{ al.created_at.strftime('%d/%m/%Y %H:%M:%S') }}</td>
          <td>{{ al.user.email if al.user else '–' }}</td>
          <td class="font-mono" style="font-size:.8rem">
            <span class="tag {% if 'success' in al.action %}tag-success{% elif 'fail' in al.action or 'error' in al.action %}tag-danger{% else %}tag-muted{% endif %}">
              {{ al.action }}
            </span>
          </td>
          <td class="font-mono" style="font-size:.78rem">{{ al.ip_address or '–' }}</td>
          <td style="font-size:.78rem;color:var(--text-muted)">{{ al.details | tojson if al.details else '' }}</td>
        </tr>
        {% endfor %}
      </tbody>
    </table>
  </div>
</div>
{% endblock %}

{% block extra_js %}
<script>
const CSRF = document.cookie.match(/csrf_token=([^;]+)/)?.[1] || '';

async function deleteRule(id) {
  if (!confirm('Supprimer cette règle ?')) return;
  const r = await fetch(`/admin/rules/${id}`, { method:'DELETE', headers:{'X-CSRFToken':CSRF} });
  if (r.ok) document.getElementById(`rule-${id}`).remove();
}

async function addRule() {
  const kw = document.getElementById('ruleKw').value.trim();
  const acc = document.getElementById('ruleAcc').value.trim();
  const tva = document.getElementById('ruleTva').value;
  const form = document.getElementById('ruleForm').checked;
  if (!kw || !acc) { alert('Mot-clé et compte requis.'); return; }
  const r = await fetch('/admin/rules/create', {
    method:'POST',
    headers:{'Content-Type':'application/json','X-CSRFToken':CSRF},
    body: JSON.stringify({keyword:kw, account_number:acc, tva_rate:tva, is_formation:form})
  });
  if (r.ok) { const d = await r.json(); location.reload(); }
}
</script>
{% endblock %}