{{/* person-access-modal is the htmx fragment swapped into the share page's shared
     #person-modal. It controls one shared person's steward flag and per-command
     grants; one Save applies both, and Revoke removes their access. The form lives
     inside .modal-body so the body scrolls with header/footer pinned; footer
     buttons reference their form via form=. No client JS. */}}
{{define "person-access-modal"}}
<div class="modal-header">
  <h2 class="modal-title">Manage access — {{.Target.Name}} <span class="text-secondary">@{{.Target.Username}}</span></h2>
  <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div>
<div class="modal-body">
  <form method="post" action="/repeaters/{{.Repeater.PublicID}}/share/{{.Target.ID}}/access" id="person-access-form">
    {{/* Steward supersedes the per-command grants (store.ListSendableCommandIDs
         gives a steward every command), so the two are not parallel choices and
         showing them side by side invited setting both. The switch collapses the
         grid via data-hide-target; the checkboxes keep submitting, so turning
         steward back off restores the selection rather than starting from none. */}}
    <div class="hr-text hr-text-left mt-0 mb-3">Access level</div>
    <label class="form-check form-switch">
      <input class="form-check-input" type="checkbox" name="steward" value="1"
             data-hide-target="#person-commands" {{if .Steward}}checked{{end}}>
      <span class="form-check-label"><strong>Steward — full access</strong></span>
    </label>
    <p class="form-hint mb-0">
      A steward can run <strong>every</strong> command (including risky ones), just like you, and is listed
      as a backup maintainer on this repeater's public page. Leave it off to grant individual commands
      instead.
    </p>

    <div id="person-commands">
      <div class="hr-text hr-text-left mt-4 mb-3">Commands</div>
      <p class="text-secondary">
        Choose which commands {{.Target.Name}} may send. Risky commands can take over or brick the node;
        grant them only with care.
      </p>
      {{template "command-grid" .}}
    </div>
  </form>
  <form method="post" action="/repeaters/{{.Repeater.PublicID}}/unshare" id="person-revoke-form">
    <input type="hidden" name="user_id" value="{{.Target.ID}}">
  </form>
</div>
<div class="modal-footer">
  <button type="submit" form="person-revoke-form" class="btn btn-link link-danger me-auto"
          data-confirm="Revoke {{.Target.Name}}'s access to this repeater?">Revoke access</button>
  <button type="button" class="btn btn-link link-secondary" data-bs-dismiss="modal">Cancel</button>
  <button type="submit" form="person-access-form" class="btn btn-primary">Save</button>
</div>
{{end}}