{{define "token_delegates"}}
<div id="token-delegates-section">
  <h3 style="font-size:.9rem;font-weight:600;margin-bottom:.5rem">Token Issue Delegates</h3>
  <p class="text-muted text-small" style="margin-bottom:.75rem">
    Delegates can issue and rotate tokens for this service account without holding the admin role.
  </p>
  {{if .TokenDelegates}}
  <table class="table table-sm" style="font-size:.85rem;margin-bottom:.75rem">
    <thead>
      <tr><th>Account</th><th>Granted</th><th></th></tr>
    </thead>
    <tbody>
      {{range .TokenDelegates}}
      <tr>
        <td>{{.GranteeName}}</td>
        <td class="text-small text-muted">{{formatTime .GrantedAt}}</td>
        <td>
          <button class="btn btn-sm btn-danger"
                  hx-delete="/accounts/{{$.Account.UUID}}/token/delegates/{{.GranteeUUID}}"
                  hx-target="#token-delegates-section" hx-swap="outerHTML"
                  hx-confirm="Remove delegate access for {{.GranteeName}}?">Remove</button>
        </td>
      </tr>
      {{end}}
    </tbody>
  </table>
  {{else}}
  <p class="text-muted text-small" style="margin-bottom:.75rem">No delegates.</p>
  {{end}}

  {{if .DelegatableAccounts}}
  <form hx-post="/accounts/{{.Account.UUID}}/token/delegates"
        hx-target="#token-delegates-section" hx-swap="outerHTML"
        style="display:flex;gap:.5rem;align-items:center">
    <select class="form-control" name="grantee_uuid" required style="flex:1">
      <option value="">— select account to add as delegate —</option>
      {{range .DelegatableAccounts}}
      {{if eq (string .AccountType) "human"}}
      <option value="{{.UUID}}">{{.Username}}</option>
      {{end}}
      {{end}}
    </select>
    <button class="btn btn-sm btn-secondary" type="submit">Add Delegate</button>
  </form>
  {{end}}
</div>
{{end}}