{% extends "base.html" %}
{% set active = 'admin' %}
{% block title %}{{ org.name }} · Admin{% endblock %}
{% block content %}
<style>
  .cmd { background:var(--surface-2); border:1px solid var(--line); border-radius:8px; padding:10px 12px;
         overflow-x:auto; margin:.3rem 0 .8rem; }
  .cmd code { background:none; padding:0; white-space:pre; font-size:.85rem; }
  .plat-h { font-size:.8rem; text-transform:uppercase; letter-spacing:.4px; color:var(--muted); margin:.9rem 0 .1rem; font-weight:700; }
  .row-actions { display:flex; gap:6px; justify-content:flex-end; flex-wrap:wrap; }
  .st-pill { font:700 10.5px/1 var(--font-mono); padding:3px 8px; border-radius:999px; border:1px solid var(--line); }
  .st-online { color:var(--ok); border-color:rgba(74,222,128,.35); }
  .st-offline { color:var(--warn); border-color:rgba(251,191,36,.3); }
  .st-off { color:var(--muted); }
</style>

<div class="page-header">
  <div>
    <p class="crumb"><a href="/admin/">Admin</a> &rsaquo;</p>
    <h1 class="page-title">{{ org.name }}</h1>
    <p class="muted">slug: <code>{{ org.slug }}</code> &middot; created {{ org.created_at| pt('%Y-%m-%d') }}</p>
  </div>
  <a class="btn btn-ghost" href="/orgs/{{ org.id }}">Open org view &rsaquo;</a>
</div>

<!-- ===== Add a device ===== -->
<section class="card-section">
  <header><h2>Add a device</h2></header>
  {% if active_tokens %}
  {% set tok = active_tokens[0].token %}
  <p class="muted">Run the matching command on the device (Administrator / root). It downloads the agent, enrolls it into
    <strong>{{ org.name }}</strong>, and installs it as a background service. The install token is embedded for you.</p>

  <div class="plat-h">Windows &mdash; PowerShell (Administrator)</div>
  <div class="cmd"><code class="copy-code">powershell -ExecutionPolicy Bypass -Command "& { $env:RMM_TOKEN='{{ tok }}'; irm https://rmm.example.com/static/downloads/install.ps1 | iex }"</code></div>

  <div class="plat-h">macOS &amp; Linux &mdash; Terminal</div>
  <div class="cmd"><code class="copy-code">curl -fsSL https://rmm.example.com/static/downloads/install.sh | sudo sh -s -- {{ tok }}</code></div>

  <details class="muted" style="margin-top:8px">
    <summary>Manual install &amp; direct downloads</summary>
    <ul style="line-height:1.95; margin:.5rem 0;">
      <li><strong>Windows:</strong> <a href="/static/downloads/sd-rmm-agent-windows-amd64.exe">x64</a> &middot; <a href="/static/downloads/sd-rmm-agent-windows-arm64.exe">ARM64</a></li>
      <li><strong>macOS:</strong> <a href="/static/downloads/sd-rmm-agent-macos-arm64">Apple Silicon</a> &middot; <a href="/static/downloads/sd-rmm-agent-macos-intel">Intel</a></li>
      <li><strong>Linux:</strong> <a href="/static/downloads/sd-rmm-agent-linux-amd64">x64</a> &middot; <a href="/static/downloads/sd-rmm-agent-linux-arm64">ARM64</a></li>
    </ul>
    <p>Enroll: <code class="copy-code">sd-rmm-agent enroll --server https://rmm.example.com --token {{ tok }}</code><br>
       Remove from a device: <code class="copy-code">sudo sd-rmm-agent uninstall</code></p>
  </details>
  {% else %}
  <p class="muted">Generate an install token below, then copy-paste install commands will appear here.</p>
  {% endif %}
</section>

<!-- ===== Install tokens ===== -->
<section class="card-section">
  <header><h2>Install tokens</h2></header>
  <p class="muted">Each token enrolls ONE device into this org, then is marked used. 14-day expiry.</p>
  {% if active_tokens %}
  <table class="datatable">
    <thead><tr><th>Token</th><th>Expires</th><th></th></tr></thead>
    <tbody>
    {% for t in active_tokens %}
      <tr>
        <td><code class="copy-code">{{ t.token }}</code></td>
        <td>{{ t.expires_at| pt('%Y-%m-%d %H:%M') }}</td>
        <td><form method="post" action="/admin/orgs/{{ org.id }}/tokens/{{ t.id }}/revoke" class="inline">
          <button class="btn btn-danger" type="submit">Revoke</button></form></td>
      </tr>
    {% endfor %}
    </tbody>
  </table>
  {% else %}<p class="muted">No active tokens.</p>{% endif %}
  <form method="post" action="/admin/orgs/{{ org.id }}/tokens" class="form form-inline">
    <button type="submit" class="btn btn-primary">Generate token</button>
  </form>
</section>

<!-- ===== Agents ===== -->
<section class="card-section">
  <header><h2>Devices <span class="muted">({{ agents|length }})</span></h2></header>
  {% if not agents %}<p class="muted">No devices enrolled yet.</p>{% else %}
  <table class="datatable">
    <thead><tr><th>Hostname</th><th>OS</th><th>Status</th><th>Last seen</th><th></th></tr></thead>
    <tbody>
    {% for a in agents %}
      <tr>
        <td><a href="/orgs/{{ org.id }}/agents/{{ a.id }}">{{ a.hostname }}</a></td>
        <td><span class="muted">{{ a.os }} {{ a.os_version or '' }}</span></td>
        <td>
          {% if a.disabled %}<span class="st-pill st-off">disconnected</span>
          {% elif a.last_seen_at and (now - a.last_seen_at).total_seconds() <= 90 %}<span class="st-pill st-online">online</span>
          {% else %}<span class="st-pill st-offline">offline</span>{% endif %}
        </td>
        <td>{% if a.last_seen_at %}{{ a.last_seen_at| pt('%m-%d %H:%M') }}{% else %}<span class="muted">never</span>{% endif %}</td>
        <td>
          <div class="row-actions">
          {% if a.disabled %}
            <form method="post" action="/admin/orgs/{{ org.id }}/agents/{{ a.id }}/reconnect" class="inline"><button class="btn btn-ghost" type="submit">Reconnect</button></form>
          {% else %}
            <form method="post" action="/admin/orgs/{{ org.id }}/agents/{{ a.id }}/disconnect" class="inline"><button class="btn btn-ghost" type="submit">Disconnect</button></form>
          {% endif %}
            <form method="post" action="/admin/orgs/{{ org.id }}/agents/{{ a.id }}/delete" class="inline"
                  onsubmit="return confirm('Remove {{ a.hostname }} and all its history? This cannot be undone.');">
              <button class="btn btn-danger" type="submit">Delete</button></form>
          </div>
        </td>
      </tr>
    {% endfor %}
    </tbody>
  </table>
  {% endif %}
</section>

<!-- ===== Members ===== -->
<section class="card-section">
  <header><h2>Members</h2></header>
  {% if not members %}<p class="muted">No members assigned yet.</p>{% else %}
  <table class="datatable">
    <thead><tr><th>Email</th><th>Role</th></tr></thead>
    <tbody>
    {% for m in members %}<tr><td>{{ m.user.email }}</td><td>{{ m.role }}</td></tr>{% endfor %}
    </tbody>
  </table>
  {% endif %}
  <form method="post" action="/admin/orgs/{{ org.id }}/members" class="form form-inline">
    <input type="email" name="email" placeholder="existing user's email" required>
    <select name="role"><option value="admin">admin</option><option value="viewer">viewer</option></select>
    <button type="submit" class="btn btn-primary">Add member</button>
  </form>
</section>

{% endblock %}