use axum::{
    extract::{Path, Query, State},
    http::StatusCode,
    response::{Html, Json},
    routing::{get, post},
    Router,
};
use chrono::{DateTime, Utc};
use diesel::prelude::*;
use diesel::sql_types::{Nullable, Text, Timestamptz, Uuid as DieselUuid, Varchar};
use lettre::{Message, SmtpTransport, Transport};
use lettre::transport::smtp::authentication::Credentials;
use log::{info, warn};
use serde::{Deserialize, Serialize};
use std::sync::Arc;
use uuid::Uuid;

// ============================================================================
// Invitation Email Functions
// ============================================================================

/// Send invitation email via SMTP
async fn send_invitation_email(
    to_email: &str,
    role: &str,
    custom_message: Option<&str>,
    invitation_id: Uuid,
) -> Result<(), String> {
    let smtp_host = std::env::var("SMTP_HOST").unwrap_or_else(|_| "localhost".to_string());
    let smtp_user = std::env::var("SMTP_USER").ok();
    let smtp_pass = std::env::var("SMTP_PASS").ok();
    let smtp_from = std::env::var("SMTP_FROM").unwrap_or_else(|_| "noreply@generalbots.com".to_string());
    let app_url = std::env::var("APP_URL").unwrap_or_else(|_| "https://app.generalbots.com".to_string());

    let accept_url = format!("{}/accept-invitation?token={}", app_url, invitation_id);

    let body = format!(
        r#"You have been invited to join our organization as a {role}.

{custom_msg}

Click the link below to accept the invitation:
{accept_url}

This invitation will expire in 7 days.

If you did not expect this invitation, you can safely ignore this email.

Best regards,
The General Bots Team"#,
        role = role,
        custom_msg = custom_message.unwrap_or(""),
        accept_url = accept_url
    );

    let email = Message::builder()
        .from(smtp_from.parse().map_err(|e| format!("Invalid from address: {}", e))?)
        .to(to_email.parse().map_err(|e| format!("Invalid to address: {}", e))?)
        .subject("You've been invited to join our organization")
        .body(body)
        .map_err(|e| format!("Failed to build email: {}", e))?;

    let mailer = if let (Some(user), Some(pass)) = (smtp_user, smtp_pass) {
        let creds = Credentials::new(user, pass);
        SmtpTransport::relay(&smtp_host)
            .map_err(|e| format!("SMTP relay error: {}", e))?
            .credentials(creds)
            .build()
    } else {
        SmtpTransport::builder_dangerous(&smtp_host).build()
    };

    mailer.send(&email).map_err(|e| format!("Failed to send email: {}", e))?;

    info!("Invitation email sent successfully to {}", to_email);
    Ok(())
}

/// Send invitation email by fetching details from database
async fn send_invitation_email_by_id(invitation_id: Uuid) -> Result<(), String> {
    let smtp_host = std::env::var("SMTP_HOST").unwrap_or_else(|_| "localhost".to_string());
    let smtp_user = std::env::var("SMTP_USER").ok();
    let smtp_pass = std::env::var("SMTP_PASS").ok();
    let smtp_from = std::env::var("SMTP_FROM").unwrap_or_else(|_| "noreply@generalbots.com".to_string());
    let app_url = std::env::var("APP_URL").unwrap_or_else(|_| "https://app.generalbots.com".to_string());

    // Get database URL and connect
    let database_url = std::env::var("DATABASE_URL")
        .map_err(|_| "DATABASE_URL not configured".to_string())?;

    let mut conn = diesel::PgConnection::establish(&database_url)
        .map_err(|e| format!("Database connection failed: {}", e))?;

    // Fetch invitation details
    #[derive(QueryableByName)]
    struct InvitationDetails {
        #[diesel(sql_type = Varchar)]
        email: String,
        #[diesel(sql_type = Varchar)]
        role: String,
        #[diesel(sql_type = Nullable<Text>)]
        message: Option<String>,
    }

    let invitation: InvitationDetails = diesel::sql_query(
        "SELECT email, role, message FROM organization_invitations WHERE id = $1 AND status = 'pending'"
    )
    .bind::<DieselUuid, _>(invitation_id)
    .get_result(&mut conn)
    .map_err(|e| format!("Failed to fetch invitation: {}", e))?;

    let accept_url = format!("{}/accept-invitation?token={}", app_url, invitation_id);

    let body = format!(
        r#"You have been invited to join our organization as a {role}.

{custom_msg}

Click the link below to accept the invitation:
{accept_url}

This invitation will expire in 7 days.

If you did not expect this invitation, you can safely ignore this email.

Best regards,
The General Bots Team"#,
        role = invitation.role,
        custom_msg = invitation.message.as_deref().unwrap_or(""),
        accept_url = accept_url
    );

    let email = Message::builder()
        .from(smtp_from.parse().map_err(|e| format!("Invalid from address: {}", e))?)
        .to(invitation.email.parse().map_err(|e| format!("Invalid to address: {}", e))?)
        .subject("Reminder: You've been invited to join our organization")
        .body(body)
        .map_err(|e| format!("Failed to build email: {}", e))?;

    let mailer = if let (Some(user), Some(pass)) = (smtp_user, smtp_pass) {
        let creds = Credentials::new(user, pass);
        SmtpTransport::relay(&smtp_host)
            .map_err(|e| format!("SMTP relay error: {}", e))?
            .credentials(creds)
            .build()
    } else {
        SmtpTransport::builder_dangerous(&smtp_host).build()
    };

    mailer.send(&email).map_err(|e| format!("Failed to send email: {}", e))?;

    info!("Invitation resend email sent successfully to {}", invitation.email);
    Ok(())
}

use crate::core::urls::ApiUrls;
use crate::core::middleware::AuthenticatedUser;
use crate::shared::state::AppState;

#[derive(Debug, Deserialize)]
pub struct ConfigUpdateRequest {
    pub config_key: String,
    pub config_value: serde_json::Value,
}

#[derive(Debug, Deserialize)]
pub struct MaintenanceScheduleRequest {
    pub scheduled_at: DateTime<Utc>,
    pub duration_minutes: u32,
    pub reason: String,
    pub notify_users: bool,
}

#[derive(Debug, Deserialize)]
pub struct BackupRequest {
    pub backup_type: String,
    pub include_files: bool,
    pub include_database: bool,
    pub compression: Option<String>,
}

#[derive(Debug, Deserialize)]
pub struct RestoreRequest {
    pub backup_id: String,
    pub restore_point: DateTime<Utc>,
    pub verify_before_restore: bool,
}

#[derive(Debug, Deserialize)]
pub struct UserManagementRequest {
    pub user_id: Uuid,
    pub action: String,
    pub reason: Option<String>,
}

#[derive(Debug, Deserialize)]
pub struct RoleManagementRequest {
    pub role_name: String,
    pub permissions: Vec<String>,
    pub description: Option<String>,
}

#[derive(Debug, Deserialize)]
pub struct QuotaManagementRequest {
    pub user_id: Option<Uuid>,
    pub group_id: Option<Uuid>,
    pub quota_type: String,
    pub limit_value: u64,
}

#[derive(Debug, Deserialize)]
pub struct LicenseManagementRequest {
    pub license_key: String,
    pub license_type: String,
}

#[derive(Debug, Deserialize)]
pub struct LogQuery {
    pub start_date: Option<String>,
    pub end_date: Option<String>,
    pub level: Option<String>,
    pub service: Option<String>,
    pub limit: Option<u32>,
}

#[derive(Debug, Serialize)]
pub struct SystemStatusResponse {
    pub status: String,
    pub uptime_seconds: u64,
    pub version: String,
    pub services: Vec<ServiceStatus>,
    pub health_checks: Vec<HealthCheck>,
    pub last_restart: DateTime<Utc>,
}

#[derive(Debug, Serialize)]
pub struct ServiceStatus {
    pub name: String,
    pub status: String,
    pub uptime_seconds: u64,
    pub memory_mb: f64,
    pub cpu_percent: f64,
}

#[derive(Debug, Serialize)]
pub struct HealthCheck {
    pub name: String,
    pub status: String,
    pub message: Option<String>,
    pub last_check: DateTime<Utc>,
}

#[derive(Debug, Serialize)]
pub struct SystemMetricsResponse {
    pub cpu_usage: f64,
    pub memory_total_mb: u64,
    pub memory_used_mb: u64,
    pub memory_percent: f64,
    pub disk_total_gb: u64,
    pub disk_used_gb: u64,
    pub disk_percent: f64,
    pub network_in_mbps: f64,
    pub network_out_mbps: f64,
    pub active_connections: u32,
    pub request_rate_per_minute: u32,
    pub error_rate_percent: f64,
}

#[derive(Debug, Serialize)]
pub struct LogEntry {
    pub id: Uuid,
    pub timestamp: DateTime<Utc>,
    pub level: String,
    pub service: String,
    pub message: String,
    pub metadata: Option<serde_json::Value>,
}

// =============================================================================
// INVITATION MANAGEMENT TYPES
// =============================================================================

#[derive(Debug, Deserialize)]
pub struct CreateInvitationRequest {
    pub email: String,
    #[serde(default = "default_role")]
    pub role: String,
    pub message: Option<String>,
}

fn default_role() -> String {
    "member".to_string()
}

#[derive(Debug, Deserialize)]
pub struct BulkInvitationRequest {
    pub emails: Vec<String>,
    #[serde(default = "default_role")]
    pub role: String,
    pub message: Option<String>,
}

#[derive(Debug, Serialize, QueryableByName)]
pub struct InvitationRow {
    #[diesel(sql_type = DieselUuid)]
    pub id: Uuid,
    #[diesel(sql_type = DieselUuid)]
    pub org_id: Uuid,
    #[diesel(sql_type = Varchar)]
    pub email: String,
    #[diesel(sql_type = Varchar)]
    pub role: String,
    #[diesel(sql_type = Varchar)]
    pub status: String,
    #[diesel(sql_type = Nullable<Text>)]
    pub message: Option<String>,
    #[diesel(sql_type = DieselUuid)]
    pub invited_by: Uuid,
    #[diesel(sql_type = Timestamptz)]
    pub created_at: DateTime<Utc>,
    #[diesel(sql_type = Nullable<Timestamptz>)]
    pub expires_at: Option<DateTime<Utc>>,
    #[diesel(sql_type = Nullable<Timestamptz>)]
    pub accepted_at: Option<DateTime<Utc>>,
}

#[derive(Debug, Serialize)]
pub struct InvitationResponse {
    pub success: bool,
    pub id: Option<Uuid>,
    pub email: Option<String>,
    pub error: Option<String>,
}

#[derive(Debug, Serialize)]
pub struct BulkInvitationResponse {
    pub success: bool,
    pub sent: i32,
    pub failed: i32,
    pub errors: Vec<String>,
}

#[derive(Debug, Serialize)]
pub struct ConfigResponse {
    pub configs: Vec<ConfigItem>,
    pub last_updated: DateTime<Utc>,
}

#[derive(Debug, Serialize)]
pub struct ConfigItem {
    pub key: String,
    pub value: serde_json::Value,
    pub description: Option<String>,
    pub editable: bool,
    pub requires_restart: bool,
}

#[derive(Debug, Serialize)]
pub struct MaintenanceResponse {
    pub id: Uuid,
    pub scheduled_at: DateTime<Utc>,
    pub duration_minutes: u32,
    pub reason: String,
    pub status: String,
    pub created_by: String,
}

#[derive(Debug, Serialize)]
pub struct BackupResponse {
    pub id: Uuid,
    pub backup_type: String,
    pub size_bytes: u64,
    pub created_at: DateTime<Utc>,
    pub status: String,
    pub download_url: Option<String>,
    pub expires_at: Option<DateTime<Utc>>,
}

#[derive(Debug, Serialize)]
pub struct QuotaResponse {
    pub id: Uuid,
    pub entity_type: String,
    pub entity_id: Uuid,
    pub quota_type: String,
    pub limit_value: u64,
    pub current_value: u64,
    pub percent_used: f64,
}

#[derive(Debug, Serialize)]
pub struct LicenseResponse {
    pub id: Uuid,
    pub license_type: String,
    pub status: String,
    pub max_users: u32,
    pub current_users: u32,
    pub features: Vec<String>,
    pub issued_at: DateTime<Utc>,
    pub expires_at: Option<DateTime<Utc>>,
}

#[derive(Debug, Serialize)]
pub struct SuccessResponse {
    pub success: bool,
    pub message: Option<String>,
}

#[derive(Debug, Serialize)]
pub struct AdminDashboardData {
    pub total_users: i64,
    pub active_groups: i64,
    pub running_bots: i64,
    pub storage_used_gb: f64,
    pub storage_total_gb: f64,
    pub recent_activity: Vec<ActivityItem>,
    pub system_health: SystemHealth,
}

#[derive(Debug, Serialize)]
pub struct ActivityItem {
    pub id: String,
    pub action: String,
    pub user: String,
    pub timestamp: DateTime<Utc>,
    pub details: Option<String>,
}

#[derive(Debug, Serialize)]
pub struct SystemHealth {
    pub status: String,
    pub cpu_percent: f64,
    pub memory_percent: f64,
    pub services_healthy: i32,
    pub services_total: i32,
}

#[derive(Debug, Serialize)]
pub struct StatValue {
    pub value: String,
    pub label: String,
    pub trend: Option<String>,
}

pub fn configure() -> Router<Arc<AppState>> {
    Router::new()
        .route(ApiUrls::ADMIN_DASHBOARD, get(get_admin_dashboard))
        .route(ApiUrls::ADMIN_STATS_USERS, get(get_stats_users))
        .route(ApiUrls::ADMIN_STATS_GROUPS, get(get_stats_groups))
        .route(ApiUrls::ADMIN_STATS_BOTS, get(get_stats_bots))
        .route(ApiUrls::ADMIN_STATS_STORAGE, get(get_stats_storage))
        .route(ApiUrls::ADMIN_USERS, get(get_admin_users))
        .route(ApiUrls::ADMIN_GROUPS, get(get_admin_groups).post(create_group))
        .route(ApiUrls::ADMIN_BOTS, get(get_admin_bots))
        .route(ApiUrls::ADMIN_DNS, get(get_admin_dns))
        .route(ApiUrls::ADMIN_BILLING, get(get_admin_billing))
        .route(ApiUrls::ADMIN_AUDIT, get(get_admin_audit))
        .route(ApiUrls::ADMIN_SYSTEM, get(get_system_status))
        .route("/api/admin/export-report", get(export_admin_report))
        .route("/api/admin/dashboard/stats", get(get_dashboard_stats))
        .route("/api/admin/dashboard/health", get(get_dashboard_health))
        .route("/api/admin/dashboard/activity", get(get_dashboard_activity))
        .route("/api/admin/dashboard/members", get(get_dashboard_members))
        .route("/api/admin/dashboard/roles", get(get_dashboard_roles))
        .route("/api/admin/dashboard/bots", get(get_dashboard_bots))
        .route("/api/admin/dashboard/invitations", get(get_dashboard_invitations))
        .route("/api/admin/invitations", get(list_invitations).post(create_invitation))
        .route("/api/admin/invitations/bulk", post(create_bulk_invitations))
        .route("/api/admin/invitations/:id", get(get_invitation).delete(cancel_invitation))
        .route("/api/admin/invitations/:id/resend", post(resend_invitation))
}

pub async fn get_admin_dashboard(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="dashboard-view">
    <div class="page-header">
        <h1 data-i18n="admin-dashboard-title">Dashboard</h1>
        <p class="subtitle" data-i18n="admin-dashboard-subtitle">System overview and quick statistics</p>
    </div>

    <div class="stats-grid">
        <div class="stat-card"
             hx-get="/api/admin/stats/users"
             hx-trigger="load, every 30s"
             hx-swap="innerHTML">
            <div class="loading-state"><div class="spinner"></div></div>
        </div>
        <div class="stat-card"
             hx-get="/api/admin/stats/groups"
             hx-trigger="load, every 30s"
             hx-swap="innerHTML">
            <div class="loading-state"><div class="spinner"></div></div>
        </div>
        <div class="stat-card"
             hx-get="/api/admin/stats/bots"
             hx-trigger="load, every 30s"
             hx-swap="innerHTML">
            <div class="loading-state"><div class="spinner"></div></div>
        </div>
        <div class="stat-card"
             hx-get="/api/admin/stats/storage"
             hx-trigger="load, every 30s"
             hx-swap="innerHTML">
            <div class="loading-state"><div class="spinner"></div></div>
        </div>
    </div>

    <div class="section">
        <h2 data-i18n="admin-quick-actions">Quick Actions</h2>
        <div class="quick-actions-grid">
            <button class="action-card" onclick="document.getElementById('create-user-modal').showModal()">
                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                    <path d="M16 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
                    <circle cx="8.5" cy="7" r="4"></circle>
                    <line x1="20" y1="8" x2="20" y2="14"></line>
                    <line x1="23" y1="11" x2="17" y2="11"></line>
                </svg>
                <span data-i18n="admin-add-user">Add User</span>
            </button>
            <button class="action-card" onclick="document.getElementById('create-group-modal').showModal()">
                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                    <path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
                    <circle cx="9" cy="7" r="4"></circle>
                    <line x1="23" y1="11" x2="17" y2="11"></line>
                    <line x1="20" y1="8" x2="20" y2="14"></line>
                </svg>
                <span data-i18n="admin-add-group">Add Group</span>
            </button>
            <button class="action-card" hx-get="/api/admin/audit" hx-target="#admin-content" hx-swap="innerHTML">
                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                    <circle cx="12" cy="12" r="10"></circle>
                    <line x1="12" y1="8" x2="12" y2="12"></line>
                    <line x1="12" y1="16" x2="12.01" y2="16"></line>
                </svg>
                <span data-i18n="admin-view-audit">View Audit Log</span>
            </button>
            <button class="action-card" hx-get="/api/admin/billing" hx-target="#admin-content" hx-swap="innerHTML">
                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                    <rect x="1" y="4" width="22" height="16" rx="2" ry="2"></rect>
                    <line x1="1" y1="10" x2="23" y2="10"></line>
                </svg>
                <span data-i18n="admin-billing">Billing</span>
            </button>
        </div>
    </div>

    <div class="section">
        <h2 data-i18n="admin-system-health">System Health</h2>
        <div class="health-grid">
            <div class="health-card">
                <div class="health-card-header">
                    <span class="health-card-title">API Server</span>
                    <span class="health-status healthy">Healthy</span>
                </div>
                <div class="health-value">99.9%</div>
                <div class="health-label">Uptime</div>
            </div>
            <div class="health-card">
                <div class="health-card-header">
                    <span class="health-card-title">Database</span>
                    <span class="health-status healthy">Healthy</span>
                </div>
                <div class="health-value">12ms</div>
                <div class="health-label">Avg Response</div>
            </div>
            <div class="health-card">
                <div class="health-card-header">
                    <span class="health-card-title">Storage</span>
                    <span class="health-status healthy">Healthy</span>
                </div>
                <div class="health-value">45%</div>
                <div class="health-label">Capacity Used</div>
            </div>
        </div>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_stats_users(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="stat-icon users">
    <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
        <path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
        <circle cx="9" cy="7" r="4"></circle>
        <path d="M23 21v-2a4 4 0 0 0-3-3.87"></path>
        <path d="M16 3.13a4 4 0 0 1 0 7.75"></path>
    </svg>
</div>
<div class="stat-content">
    <span class="stat-value">127</span>
    <span class="stat-label" data-i18n="admin-total-users">Total Users</span>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_stats_groups(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="stat-icon groups">
    <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
        <path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
        <circle cx="9" cy="7" r="4"></circle>
        <circle cx="19" cy="11" r="2"></circle>
    </svg>
</div>
<div class="stat-content">
    <span class="stat-value">12</span>
    <span class="stat-label" data-i18n="admin-active-groups">Active Groups</span>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_stats_bots(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="stat-icon bots">
    <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
        <rect x="3" y="11" width="18" height="10" rx="2"></rect>
        <circle cx="12" cy="5" r="2"></circle>
        <path d="M12 7v4"></path>
    </svg>
</div>
<div class="stat-content">
    <span class="stat-value">8</span>
    <span class="stat-label" data-i18n="admin-running-bots">Running Bots</span>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_stats_storage(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="stat-icon storage">
    <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
        <ellipse cx="12" cy="5" rx="9" ry="3"></ellipse>
        <path d="M21 12c0 1.66-4 3-9 3s-9-1.34-9-3"></path>
        <path d="M3 5v14c0 1.66 4 3 9 3s9-1.34 9-3V5"></path>
    </svg>
</div>
<div class="stat-content">
    <span class="stat-value">45.2 GB</span>
    <span class="stat-label" data-i18n="admin-storage-used">Storage Used</span>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_users(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-users">Users</h1>
        <p class="subtitle" data-i18n="admin-users-subtitle">Manage user accounts and permissions</p>
    </div>
    <div class="toolbar">
        <button class="btn-primary" onclick="document.getElementById('create-user-modal').showModal()">
            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <line x1="12" y1="5" x2="12" y2="19"></line>
                <line x1="5" y1="12" x2="19" y2="12"></line>
            </svg>
            Add User
        </button>
    </div>
    <div class="data-table">
        <table>
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Email</th>
                    <th>Role</th>
                    <th>Status</th>
                    <th>Actions</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td>John Doe</td>
                    <td>john@example.com</td>
                    <td><span class="badge badge-admin">Admin</span></td>
                    <td><span class="status status-active">Active</span></td>
                    <td><button class="btn-icon">Edit</button></td>
                </tr>
                <tr>
                    <td>Jane Smith</td>
                    <td>jane@example.com</td>
                    <td><span class="badge badge-user">User</span></td>
                    <td><span class="status status-active">Active</span></td>
                    <td><button class="btn-icon">Edit</button></td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_groups(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-groups">Groups</h1>
        <p class="subtitle" data-i18n="admin-groups-subtitle">Manage groups and team permissions</p>
    </div>
    <div class="toolbar">
        <button class="btn-primary" onclick="document.getElementById('create-group-modal').showModal()">
            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <line x1="12" y1="5" x2="12" y2="19"></line>
                <line x1="5" y1="12" x2="19" y2="12"></line>
            </svg>
            Add Group
        </button>
    </div>
    <div class="data-table">
        <table>
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Members</th>
                    <th>Created</th>
                    <th>Actions</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td>Engineering</td>
                    <td>15</td>
                    <td>2024-01-15</td>
                    <td><button class="btn-icon">Manage</button></td>
                </tr>
                <tr>
                    <td>Marketing</td>
                    <td>8</td>
                    <td>2024-02-20</td>
                    <td><button class="btn-icon">Manage</button></td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_bots(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-bots">Bots</h1>
        <p class="subtitle" data-i18n="admin-bots-subtitle">Manage bot instances and deployments</p>
    </div>
    <div class="data-table">
        <table>
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Status</th>
                    <th>Messages</th>
                    <th>Last Active</th>
                    <th>Actions</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td>Support Bot</td>
                    <td><span class="status status-active">Running</span></td>
                    <td>1,234</td>
                    <td>Just now</td>
                    <td><button class="btn-icon">Configure</button></td>
                </tr>
                <tr>
                    <td>Sales Assistant</td>
                    <td><span class="status status-active">Running</span></td>
                    <td>567</td>
                    <td>5 min ago</td>
                    <td><button class="btn-icon">Configure</button></td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_dns(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-dns">DNS Management</h1>
        <p class="subtitle" data-i18n="admin-dns-subtitle">Configure custom domains and DNS settings</p>
    </div>
    <div class="toolbar">
        <button class="btn-primary" onclick="document.getElementById('add-dns-modal').showModal()">
            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <line x1="12" y1="5" x2="12" y2="19"></line>
                <line x1="5" y1="12" x2="19" y2="12"></line>
            </svg>
            Add Domain
        </button>
    </div>
    <div class="data-table">
        <table>
            <thead>
                <tr>
                    <th>Domain</th>
                    <th>Type</th>
                    <th>Status</th>
                    <th>SSL</th>
                    <th>Actions</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td>bot.example.com</td>
                    <td>CNAME</td>
                    <td><span class="status status-active">Active</span></td>
                    <td><span class="status status-active">Valid</span></td>
                    <td><button class="btn-icon">Edit</button></td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_billing(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let html = r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-billing">Billing</h1>
        <p class="subtitle" data-i18n="admin-billing-subtitle">Manage subscription and payment settings</p>
    </div>
    <div class="billing-overview">
        <div class="billing-card">
            <h3>Current Plan</h3>
            <div class="plan-name">Enterprise</div>
            <div class="plan-price">$499/month</div>
        </div>
        <div class="billing-card">
            <h3>Next Billing Date</h3>
            <div class="billing-date">January 15, 2025</div>
        </div>
        <div class="billing-card">
            <h3>Payment Method</h3>
            <div class="payment-method">**** **** **** 4242</div>
        </div>
    </div>
</div>
"##;
    Html(html.to_string())
}

pub async fn get_admin_audit(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    let now = Utc::now();
    let html = format!(r##"
<div class="admin-page">
    <div class="page-header">
        <h1 data-i18n="admin-audit">Audit Log</h1>
        <p class="subtitle" data-i18n="admin-audit-subtitle">Track system events and user actions</p>
    </div>
    <div class="data-table">
        <table>
            <thead>
                <tr>
                    <th>Time</th>
                    <th>User</th>
                    <th>Action</th>
                    <th>Details</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td>{}</td>
                    <td>admin@example.com</td>
                    <td>User Login</td>
                    <td>Successful login from 192.168.1.1</td>
                </tr>
                <tr>
                    <td>{}</td>
                    <td>admin@example.com</td>
                    <td>Settings Changed</td>
                    <td>Updated system configuration</td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
"##, now.format("%Y-%m-%d %H:%M"), now.format("%Y-%m-%d %H:%M"));
    Html(html)
}

pub async fn get_system_status(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<SystemStatusResponse>, (StatusCode, Json<serde_json::Value>)> {
    let now = Utc::now();

    let status = SystemStatusResponse {
        status: "healthy".to_string(),
        uptime_seconds: 3600 * 24 * 7,
        version: "1.0.0".to_string(),
        services: vec![
            ServiceStatus {
                name: "ui_server".to_string(),
                status: "running".to_string(),
                uptime_seconds: 3600 * 24 * 7,
                memory_mb: 256.5,
                cpu_percent: 12.3,
            },
            ServiceStatus {
                name: "database".to_string(),
                status: "running".to_string(),
                uptime_seconds: 3600 * 24 * 7,
                memory_mb: 512.8,
                cpu_percent: 8.5,
            },
            ServiceStatus {
                name: "cache".to_string(),
                status: "running".to_string(),
                uptime_seconds: 3600 * 24 * 7,
                memory_mb: 128.2,
                cpu_percent: 3.2,
            },
            ServiceStatus {
                name: "storage".to_string(),
                status: "running".to_string(),
                uptime_seconds: 3600 * 24 * 7,
                memory_mb: 64.1,
                cpu_percent: 5.8,
            },
        ],
        health_checks: vec![
            HealthCheck {
                name: "database_connection".to_string(),
                status: "passed".to_string(),
                message: Some("Connected successfully".to_string()),
                last_check: now,
            },
            HealthCheck {
                name: "storage_access".to_string(),
                status: "passed".to_string(),
                message: Some("Storage accessible".to_string()),
                last_check: now,
            },
            HealthCheck {
                name: "api_endpoints".to_string(),
                status: "passed".to_string(),
                message: Some("All endpoints responding".to_string()),
                last_check: now,
            },
        ],
        last_restart: now.checked_sub_signed(chrono::Duration::days(7)).unwrap_or(now),
    };

    Ok(Json(status))
}

pub async fn get_system_metrics(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<SystemMetricsResponse>, (StatusCode, Json<serde_json::Value>)> {
    let metrics = SystemMetricsResponse {
        cpu_usage: 23.5,
        memory_total_mb: 8192,
        memory_used_mb: 4096,
        memory_percent: 50.0,
        disk_total_gb: 500,
        disk_used_gb: 350,
        disk_percent: 70.0,
        network_in_mbps: 12.5,
        network_out_mbps: 8.3,
        active_connections: 256,
        request_rate_per_minute: 1250,
        error_rate_percent: 0.5,
    };

    Ok(Json(metrics))
}

pub fn view_logs(
    State(_state): State<Arc<AppState>>,
    Query(_params): Query<LogQuery>,
) -> Result<Json<Vec<LogEntry>>, (StatusCode, Json<serde_json::Value>)> {
    let now = Utc::now();

    let logs = vec![
        LogEntry {
            id: Uuid::new_v4(),
            timestamp: now,
            level: "info".to_string(),
            service: "ui_server".to_string(),
            message: "Request processed successfully".to_string(),
            metadata: Some(serde_json::json!({
                "endpoint": "/api/files/list",
                "duration_ms": 45,
                "status_code": 200
            })),
        },
        LogEntry {
            id: Uuid::new_v4(),
            timestamp: now
                .checked_sub_signed(chrono::Duration::minutes(5))
                .unwrap_or(now),
            level: "warning".to_string(),
            service: "database".to_string(),
            message: "Slow query detected".to_string(),
            metadata: Some(serde_json::json!({
                "query": "SELECT * FROM users WHERE...",
                "duration_ms": 1250
            })),
        },
        LogEntry {
            id: Uuid::new_v4(),
            timestamp: now
                .checked_sub_signed(chrono::Duration::minutes(10))
                .unwrap_or(now),
            level: "error".to_string(),
            service: "storage".to_string(),
            message: "Failed to upload file".to_string(),
            metadata: Some(serde_json::json!({
                "file": "document.pdf",
                "error": "Connection timeout"
            })),
        },
    ];

    Ok(Json(logs))
}

pub fn export_logs(
    State(_state): State<Arc<AppState>>,
    Query(_params): Query<LogQuery>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some("Logs exported successfully".to_string()),
    }))
}

pub fn get_config(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<ConfigResponse>, (StatusCode, Json<serde_json::Value>)> {
    let now = Utc::now();

    let config = ConfigResponse {
        configs: vec![
            ConfigItem {
                key: "max_upload_size_mb".to_string(),
                value: serde_json::json!(100),
                description: Some("Maximum file upload size in MB".to_string()),
                editable: true,
                requires_restart: false,
            },
            ConfigItem {
                key: "session_timeout_minutes".to_string(),
                value: serde_json::json!(30),
                description: Some("User session timeout in minutes".to_string()),
                editable: true,
                requires_restart: false,
            },
            ConfigItem {
                key: "enable_2fa".to_string(),
                value: serde_json::json!(true),
                description: Some("Enable two-factor authentication".to_string()),
                editable: true,
                requires_restart: false,
            },
            ConfigItem {
                key: "database_pool_size".to_string(),
                value: serde_json::json!(20),
                description: Some("Database connection pool size".to_string()),
                editable: true,
                requires_restart: true,
            },
        ],
        last_updated: now,
    };

    Ok(Json(config))
}

pub fn update_config(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<ConfigUpdateRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some(format!(
            "Configuration '{}' updated successfully",
            req.config_key
        )),
    }))
}

pub fn schedule_maintenance(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<MaintenanceScheduleRequest>,
) -> Result<Json<MaintenanceResponse>, (StatusCode, Json<serde_json::Value>)> {
    let maintenance_id = Uuid::new_v4();

    let maintenance = MaintenanceResponse {
        id: maintenance_id,
        scheduled_at: req.scheduled_at,
        duration_minutes: req.duration_minutes,
        reason: req.reason,
        status: "scheduled".to_string(),
        created_by: "admin".to_string(),
    };

    Ok(Json(maintenance))
}

pub fn create_backup(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<BackupRequest>,
) -> Result<Json<BackupResponse>, (StatusCode, Json<serde_json::Value>)> {
    let backup_id = Uuid::new_v4();
    let now = Utc::now();

    let backup = BackupResponse {
        id: backup_id,
        backup_type: req.backup_type,
        size_bytes: 1024 * 1024 * 500,
        created_at: now,
        status: "completed".to_string(),
        download_url: Some(format!("/admin/backups/{}/download", backup_id)),
        expires_at: Some(now.checked_add_signed(chrono::Duration::days(30)).unwrap_or(now)),
    };

    Ok(Json(backup))
}

pub fn restore_backup(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<RestoreRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some(format!("Restore from backup {} initiated", req.backup_id)),
    }))
}

pub fn list_backups(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<Vec<BackupResponse>>, (StatusCode, Json<serde_json::Value>)> {
    let now = Utc::now();

    let backups = vec![
        BackupResponse {
            id: Uuid::new_v4(),
            backup_type: "full".to_string(),
            size_bytes: 1024 * 1024 * 500,
            created_at: now.checked_sub_signed(chrono::Duration::days(1)).unwrap_or(now),
            status: "completed".to_string(),
            download_url: Some("/admin/backups/1/download".to_string()),
            expires_at: Some(now.checked_add_signed(chrono::Duration::days(29)).unwrap_or(now)),
        },
        BackupResponse {
            id: Uuid::new_v4(),
            backup_type: "incremental".to_string(),
            size_bytes: 1024 * 1024 * 50,
            created_at: now.checked_sub_signed(chrono::Duration::hours(12)).unwrap_or(now),
            status: "completed".to_string(),
            download_url: Some("/admin/backups/2/download".to_string()),
            expires_at: Some(now.checked_add_signed(chrono::Duration::days(29)).unwrap_or(now)),
        },
    ];

    Ok(Json(backups))
}

pub fn manage_users(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<UserManagementRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    let message = match req.action.as_str() {
        "suspend" => format!("User {} suspended", req.user_id),
        "activate" => format!("User {} activated", req.user_id),
        "delete" => format!("User {} deleted", req.user_id),
        "reset_password" => format!("Password reset for user {}", req.user_id),
        _ => format!("Action {} performed on user {}", req.action, req.user_id),
    };

    Ok(Json(SuccessResponse {
        success: true,
        message: Some(message),
    }))
}

pub fn get_roles(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<Vec<serde_json::Value>>, (StatusCode, Json<serde_json::Value>)> {
    let roles = vec![
        serde_json::json!({
            "id": Uuid::new_v4(),
            "name": "admin",
            "description": "Full system access",
            "permissions": ["*"],
            "user_count": 5
        }),
        serde_json::json!({
            "id": Uuid::new_v4(),
            "name": "user",
            "description": "Standard user access",
            "permissions": ["read:own", "write:own"],
            "user_count": 1245
        }),
        serde_json::json!({
            "id": Uuid::new_v4(),
            "name": "guest",
            "description": "Limited read-only access",
            "permissions": ["read:public"],
            "user_count": 328
        }),
    ];

    Ok(Json(roles))
}

pub fn manage_roles(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<RoleManagementRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some(format!("Role '{}' managed successfully", req.role_name)),
    }))
}

pub fn get_quotas(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<Vec<QuotaResponse>>, (StatusCode, Json<serde_json::Value>)> {
    let quotas = vec![
        QuotaResponse {
            id: Uuid::new_v4(),
            entity_type: "user".to_string(),
            entity_id: Uuid::new_v4(),
            quota_type: "storage".to_string(),
            limit_value: 10 * 1024 * 1024 * 1024,
            current_value: 7 * 1024 * 1024 * 1024,
            percent_used: 70.0,
        },
        QuotaResponse {
            id: Uuid::new_v4(),
            entity_type: "user".to_string(),
            entity_id: Uuid::new_v4(),
            quota_type: "api_calls".to_string(),
            limit_value: 10000,
            current_value: 3500,
            percent_used: 35.0,
        },
    ];

    Ok(Json(quotas))
}

pub fn manage_quotas(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<QuotaManagementRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some(format!("Quota '{}' set successfully", req.quota_type)),
    }))
}

pub fn get_licenses(
    State(_state): State<Arc<AppState>>,
) -> Result<Json<Vec<LicenseResponse>>, (StatusCode, Json<serde_json::Value>)> {
    let now = Utc::now();

    let licenses = vec![LicenseResponse {
        id: Uuid::new_v4(),
        license_type: "enterprise".to_string(),
        status: "active".to_string(),
        max_users: 1000,
        current_users: 850,
        features: vec![
            "unlimited_storage".to_string(),
            "advanced_analytics".to_string(),
            "priority_support".to_string(),
            "custom_integrations".to_string(),
        ],
        issued_at: now.checked_sub_signed(chrono::Duration::days(180)).unwrap_or(now),
        expires_at: Some(now.checked_add_signed(chrono::Duration::days(185)).unwrap_or(now)),
    }];

    Ok(Json(licenses))
}

pub fn manage_licenses(
    State(_state): State<Arc<AppState>>,
    Json(req): Json<LicenseManagementRequest>,
) -> Result<Json<SuccessResponse>, (StatusCode, Json<serde_json::Value>)> {
    Ok(Json(SuccessResponse {
        success: true,
        message: Some(format!(
            "License '{}' activated successfully",
            req.license_type
        )),
    }))
}

// =============================================================================
// INVITATION MANAGEMENT HANDLERS
// =============================================================================

/// List all invitations for the organization
pub async fn list_invitations(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
) -> impl axum::response::IntoResponse {
    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return Json(serde_json::json!({
                "success": false,
                "error": format!("Database connection error: {}", e),
                "invitations": []
            }));
        }
    };

    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let result: Result<Vec<InvitationRow>, _> = diesel::sql_query(
        "SELECT id, org_id, email, role, status, message, invited_by, created_at, expires_at, accepted_at
         FROM organization_invitations
         WHERE org_id = $1
         ORDER BY created_at DESC
         LIMIT 100"
    )
    .bind::<DieselUuid, _>(org_id)
    .load(&mut conn);

    match result {
        Ok(invitations) => Json(serde_json::json!({
            "success": true,
            "invitations": invitations
        })),
        Err(e) => {
            warn!("Failed to list invitations: {}", e);
            // Return empty list on database error
            Json(serde_json::json!({
                "success": false,
                "error": format!("Failed to fetch invitations: {}", e),
                "invitations": []
            }))
        }
    }
}

/// Create a single invitation
pub async fn create_invitation(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
    Json(payload): Json<CreateInvitationRequest>,
) -> impl axum::response::IntoResponse {
    // Validate email format
    if !payload.email.contains('@') {
        return (StatusCode::BAD_REQUEST, Json(InvitationResponse {
            success: false,
            id: None,
            email: Some(payload.email),
            error: Some("Invalid email format".to_string()),
        }));
    }

    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return (StatusCode::INTERNAL_SERVER_ERROR, Json(InvitationResponse {
                success: false,
                id: None,
                email: Some(payload.email),
                error: Some(format!("Database connection error: {}", e)),
            }));
        }
    };

    let new_id = Uuid::new_v4();
    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let invited_by = user.user_id;
    let expires_at = Utc::now() + chrono::Duration::days(7);

    let result = diesel::sql_query(
        "INSERT INTO organization_invitations (id, org_id, email, role, status, message, invited_by, created_at, expires_at)
         VALUES ($1, $2, $3, $4, 'pending', $5, $6, NOW(), $7)
         ON CONFLICT (org_id, email) WHERE status = 'pending' DO UPDATE SET
             role = EXCLUDED.role,
             message = EXCLUDED.message,
             expires_at = EXCLUDED.expires_at,
             updated_at = NOW()
         RETURNING id"
    )
    .bind::<DieselUuid, _>(new_id)
    .bind::<DieselUuid, _>(org_id)
    .bind::<Varchar, _>(&payload.email)
    .bind::<Varchar, _>(&payload.role)
    .bind::<Nullable<Text>, _>(payload.message.as_deref())
    .bind::<DieselUuid, _>(invited_by)
    .bind::<Timestamptz, _>(expires_at)
    .execute(&mut conn);

    match result {
        Ok(_) => {
            // Send invitation email
            let email_to = payload.email.clone();
            let invite_role = payload.role.clone();
            let invite_message = payload.message.clone();
            let invite_id = new_id;

            tokio::spawn(async move {
                if let Err(e) = send_invitation_email(&email_to, &invite_role, invite_message.as_deref(), invite_id).await {
                    warn!("Failed to send invitation email to {}: {}", email_to, e);
                }
            });

            (StatusCode::OK, Json(InvitationResponse {
                success: true,
                id: Some(new_id),
                email: Some(payload.email),
                error: None,
            }))
        }
        Err(e) => {
            warn!("Failed to create invitation: {}", e);
            (StatusCode::INTERNAL_SERVER_ERROR, Json(InvitationResponse {
                success: false,
                id: None,
                email: Some(payload.email),
                error: Some(format!("Failed to create invitation: {}", e)),
            }))
        }
    }
}

/// Create bulk invitations
pub async fn create_bulk_invitations(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
    Json(payload): Json<BulkInvitationRequest>,
) -> impl axum::response::IntoResponse {
    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return Json(BulkInvitationResponse {
                success: false,
                sent: 0,
                failed: payload.emails.len() as i32,
                errors: vec![format!("Database connection error: {}", e)],
            });
        }
    };

    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let invited_by = user.user_id;
    let expires_at = Utc::now() + chrono::Duration::days(7);

    let mut sent = 0;
    let mut failed = 0;
    let mut errors = Vec::new();

    for email in &payload.emails {
        // Validate email
        if !email.contains('@') {
            failed += 1;
            errors.push(format!("Invalid email: {}", email));
            continue;
        }

        let new_id = Uuid::new_v4();
        let result = diesel::sql_query(
            "INSERT INTO organization_invitations (id, org_id, email, role, status, message, invited_by, created_at, expires_at)
             VALUES ($1, $2, $3, $4, 'pending', $5, $6, NOW(), $7)
             ON CONFLICT (org_id, email) WHERE status = 'pending' DO NOTHING"
        )
        .bind::<DieselUuid, _>(new_id)
        .bind::<DieselUuid, _>(org_id)
        .bind::<Varchar, _>(email)
        .bind::<Varchar, _>(&payload.role)
        .bind::<Nullable<Text>, _>(payload.message.as_deref())
        .bind::<DieselUuid, _>(invited_by)
        .bind::<Timestamptz, _>(expires_at)
        .execute(&mut conn);

        match result {
            Ok(_) => sent += 1,
            Err(e) => {
                failed += 1;
                errors.push(format!("Failed for {}: {}", email, e));
            }
        }
    }

    Json(BulkInvitationResponse {
        success: failed == 0,
        sent,
        failed,
        errors,
    })
}

/// Get a specific invitation
pub async fn get_invitation(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
    Path(id): Path<Uuid>,
) -> impl axum::response::IntoResponse {
    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Database connection error: {}", e)
            })));
        }
    };

    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let result: Result<InvitationRow, _> = diesel::sql_query(
        "SELECT id, org_id, email, role, status, message, invited_by, created_at, expires_at, accepted_at
         FROM organization_invitations
         WHERE id = $1 AND org_id = $2"
    )
    .bind::<DieselUuid, _>(id)
    .bind::<DieselUuid, _>(org_id)
    .get_result(&mut conn);

    match result {
        Ok(invitation) => (StatusCode::OK, Json(serde_json::json!({
            "success": true,
            "invitation": invitation
        }))),
        Err(_) => (StatusCode::NOT_FOUND, Json(serde_json::json!({
            "success": false,
            "error": "Invitation not found"
        })))
    }
}

/// Cancel/delete an invitation
pub async fn cancel_invitation(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
    Path(id): Path<Uuid>,
) -> impl axum::response::IntoResponse {
    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Database connection error: {}", e)
            })));
        }
    };

    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let result = diesel::sql_query(
        "UPDATE organization_invitations
         SET status = 'cancelled', updated_at = NOW()
         WHERE id = $1 AND org_id = $2 AND status = 'pending'"
    )
    .bind::<DieselUuid, _>(id)
    .bind::<DieselUuid, _>(org_id)
    .execute(&mut conn);

    match result {
        Ok(rows) if rows > 0 => (StatusCode::OK, Json(serde_json::json!({
            "success": true,
            "id": id
        }))),
        Ok(_) => (StatusCode::NOT_FOUND, Json(serde_json::json!({
            "success": false,
            "error": "Invitation not found or already processed"
        }))),
        Err(e) => {
            warn!("Failed to cancel invitation: {}", e);
            (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Failed to cancel invitation: {}", e)
            })))
        }
    }
}

/// Resend an invitation email
pub async fn resend_invitation(
    State(state): State<Arc<AppState>>,
    user: AuthenticatedUser,
    Path(id): Path<Uuid>,
) -> impl axum::response::IntoResponse {
    let mut conn = match state.conn.get() {
        Ok(c) => c,
        Err(e) => {
            return (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Database connection error: {}", e)
            })));
        }
    };

    let org_id = user.organization_id.unwrap_or_else(Uuid::nil);
    let new_expires_at = Utc::now() + chrono::Duration::days(7);

    // Update expiration and resend
    let result = diesel::sql_query(
        "UPDATE organization_invitations
         SET expires_at = $3, updated_at = NOW()
         WHERE id = $1 AND org_id = $2 AND status = 'pending'
         RETURNING email"
    )
    .bind::<DieselUuid, _>(id)
    .bind::<DieselUuid, _>(org_id)
    .bind::<Timestamptz, _>(new_expires_at)
    .execute(&mut conn);

    match result {
        Ok(rows) if rows > 0 => {
            // Trigger email resend
            let resend_id = id;
            tokio::spawn(async move {
                if let Err(e) = send_invitation_email_by_id(resend_id).await {
                    warn!("Failed to resend invitation email for {}: {}", resend_id, e);
                }
            });

            (StatusCode::OK, Json(serde_json::json!({
                "success": true,
                "id": id,
                "message": "Invitation resent successfully"
            })))
        }
        Ok(_) => (StatusCode::NOT_FOUND, Json(serde_json::json!({
            "success": false,
            "error": "Invitation not found or not in pending status"
        }))),
        Err(e) => {
            warn!("Failed to resend invitation: {}", e);
            (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Failed to resend invitation: {}", e)
            })))
        }
    }
}

#[derive(Deserialize)]
pub struct CreateGroupRequest {
    pub name: String,
    pub description: Option<String>,
}

pub async fn create_group(
    State(state): State<Arc<AppState>>,
    Json(req): Json<CreateGroupRequest>,
) -> (StatusCode, Json<serde_json::Value>) {
    let pool = &state.conn;
    let mut conn = match pool.get() {
        Ok(c) => c,
        Err(e) => {
            return (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
                "success": false,
                "error": format!("Database connection error: {}", e)
            })));
        }
    };

    let group_id = Uuid::new_v4();
    let result = diesel::sql_query(
        "INSERT INTO groups (id, name, description, created_at, updated_at)
         VALUES ($1, $2, $3, NOW(), NOW())
         RETURNING id"
    )
    .bind::<DieselUuid, _>(group_id)
    .bind::<Text, _>(&req.name)
    .bind::<Nullable<Text>, _>(req.description.as_deref())
    .execute(&mut conn);

    match result {
        Ok(_) => (StatusCode::CREATED, Json(serde_json::json!({
            "success": true,
            "id": group_id,
            "name": req.name
        }))),
        Err(e) => (StatusCode::INTERNAL_SERVER_ERROR, Json(serde_json::json!({
            "success": false,
            "error": format!("Failed to create group: {}", e)
        })))
    }
}

pub async fn export_admin_report(
    State(_state): State<Arc<AppState>>,
) -> (StatusCode, Json<serde_json::Value>) {
    (StatusCode::OK, Json(serde_json::json!({
        "success": true,
        "report_url": "/api/admin/reports/latest.pdf",
        "generated_at": Utc::now().to_rfc3339()
    })))
}

pub async fn get_dashboard_stats(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="stat-card members">
    <div class="stat-icon"><svg viewBox="0 0 24 24" width="24" height="24" stroke="currentColor" stroke-width="2" fill="none"><path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path><circle cx="9" cy="7" r="4"></circle><path d="M23 21v-2a4 4 0 0 0-3-3.87"></path><path d="M16 3.13a4 4 0 0 1 0 7.75"></path></svg></div>
    <div class="stat-content"><span class="stat-value">24</span><span class="stat-label">Team Members</span></div>
    <span class="stat-trend positive">+3 this month</span>
</div>
<div class="stat-card bots">
    <div class="stat-icon"><svg viewBox="0 0 24 24" width="24" height="24" stroke="currentColor" stroke-width="2" fill="none"><rect x="3" y="11" width="18" height="10" rx="2"></rect><circle cx="12" cy="5" r="2"></circle><path d="M12 7v4"></path><line x1="8" y1="16" x2="8" y2="16"></line><line x1="16" y1="16" x2="16" y2="16"></line></svg></div>
    <div class="stat-content"><span class="stat-value">5</span><span class="stat-label">Active Bots</span></div>
    <span class="stat-trend">All operational</span>
</div>
<div class="stat-card messages">
    <div class="stat-icon"><svg viewBox="0 0 24 24" width="24" height="24" stroke="currentColor" stroke-width="2" fill="none"><path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"></path></svg></div>
    <div class="stat-content"><span class="stat-value">12.4K</span><span class="stat-label">Messages Today</span></div>
    <span class="stat-trend positive">+18% vs yesterday</span>
</div>
<div class="stat-card storage">
    <div class="stat-icon"><svg viewBox="0 0 24 24" width="24" height="24" stroke="currentColor" stroke-width="2" fill="none"><path d="M22 12H2"></path><path d="M5.45 5.11L2 12v6a2 2 0 0 0 2 2h16a2 2 0 0 0 2-2v-6l-3.45-6.89A2 2 0 0 0 16.76 4H7.24a2 2 0 0 0-1.79 1.11z"></path></svg></div>
    <div class="stat-content"><span class="stat-value">45.2 GB</span><span class="stat-label">Storage Used</span></div>
    <span class="stat-trend">of 100 GB</span>
</div>
"##.to_string())
}

pub async fn get_dashboard_health(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="health-item">
    <div class="health-indicator healthy"></div>
    <div class="health-info"><span class="health-name">API Server</span><span class="health-status">Operational</span></div>
</div>
<div class="health-item">
    <div class="health-indicator healthy"></div>
    <div class="health-info"><span class="health-name">Database</span><span class="health-status">Operational</span></div>
</div>
<div class="health-item">
    <div class="health-indicator healthy"></div>
    <div class="health-info"><span class="health-name">Bot Engine</span><span class="health-status">Operational</span></div>
</div>
<div class="health-item">
    <div class="health-indicator healthy"></div>
    <div class="health-info"><span class="health-name">File Storage</span><span class="health-status">Operational</span></div>
</div>
"##.to_string())
}

pub async fn get_dashboard_activity(
    State(_state): State<Arc<AppState>>,
    Query(params): Query<std::collections::HashMap<String, String>>,
) -> Html<String> {
    let _page = params.get("page").and_then(|p| p.parse::<i32>().ok()).unwrap_or(1);
    Html(r##"
<div class="activity-item">
    <div class="activity-icon member"><svg viewBox="0 0 24 24" width="16" height="16" stroke="currentColor" stroke-width="2" fill="none"><path d="M16 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path><circle cx="8.5" cy="7" r="4"></circle><line x1="20" y1="8" x2="20" y2="14"></line><line x1="23" y1="11" x2="17" y2="11"></line></svg></div>
    <div class="activity-content"><span class="activity-user">John Doe</span> joined the organization</div>
    <span class="activity-time">2 hours ago</span>
</div>
<div class="activity-item">
    <div class="activity-icon bot"><svg viewBox="0 0 24 24" width="16" height="16" stroke="currentColor" stroke-width="2" fill="none"><rect x="3" y="11" width="18" height="10" rx="2"></rect><circle cx="12" cy="5" r="2"></circle></svg></div>
    <div class="activity-content"><span class="activity-user">Support Bot</span> processed 150 messages</div>
    <span class="activity-time">3 hours ago</span>
</div>
<div class="activity-item">
    <div class="activity-icon security"><svg viewBox="0 0 24 24" width="16" height="16" stroke="currentColor" stroke-width="2" fill="none"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path></svg></div>
    <div class="activity-content"><span class="activity-user">System</span> security scan completed</div>
    <span class="activity-time">5 hours ago</span>
</div>
"##.to_string())
}

pub async fn get_dashboard_members(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="member-item">
    <div class="member-avatar"><img src="/api/avatar/1" alt="JD" onerror="this.outerHTML='<div class=member-avatar-fallback>JD</div>'"></div>
    <div class="member-info"><span class="member-name">John Doe</span><span class="member-role">Admin</span></div>
    <span class="member-status online">Online</span>
</div>
<div class="member-item">
    <div class="member-avatar"><img src="/api/avatar/2" alt="JS" onerror="this.outerHTML='<div class=member-avatar-fallback>JS</div>'"></div>
    <div class="member-info"><span class="member-name">Jane Smith</span><span class="member-role">Member</span></div>
    <span class="member-status online">Online</span>
</div>
<div class="member-item">
    <div class="member-avatar"><img src="/api/avatar/3" alt="BW" onerror="this.outerHTML='<div class=member-avatar-fallback>BW</div>'"></div>
    <div class="member-info"><span class="member-name">Bob Wilson</span><span class="member-role">Member</span></div>
    <span class="member-status offline">Offline</span>
</div>
"##.to_string())
}

pub async fn get_dashboard_roles(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="role-bars">
    <div class="role-bar-item">
        <div class="role-bar-label"><span class="role-name">Owner</span><span class="role-count">1</span></div>
        <div class="role-bar"><div class="role-bar-fill" style="width: 4%"></div></div>
    </div>
    <div class="role-bar-item">
        <div class="role-bar-label"><span class="role-name">Admin</span><span class="role-count">3</span></div>
        <div class="role-bar"><div class="role-bar-fill" style="width: 12%"></div></div>
    </div>
    <div class="role-bar-item">
        <div class="role-bar-label"><span class="role-name">Member</span><span class="role-count">18</span></div>
        <div class="role-bar"><div class="role-bar-fill" style="width: 75%"></div></div>
    </div>
    <div class="role-bar-item">
        <div class="role-bar-label"><span class="role-name">Guest</span><span class="role-count">2</span></div>
        <div class="role-bar"><div class="role-bar-fill" style="width: 8%"></div></div>
    </div>
</div>
"##.to_string())
}

pub async fn get_dashboard_bots(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="bot-item">
    <div class="bot-avatar">CS</div>
    <div class="bot-info"><span class="bot-name">Customer Support Bot</span><span class="bot-desc">Handles customer inquiries</span></div>
    <span class="bot-status active">Active</span>
</div>
<div class="bot-item">
    <div class="bot-avatar">SA</div>
    <div class="bot-info"><span class="bot-name">Sales Assistant</span><span class="bot-desc">Lead qualification</span></div>
    <span class="bot-status active">Active</span>
</div>
<div class="bot-item">
    <div class="bot-avatar">HR</div>
    <div class="bot-info"><span class="bot-name">HR Helper</span><span class="bot-desc">Employee onboarding</span></div>
    <span class="bot-status inactive">Paused</span>
</div>
"##.to_string())
}

pub async fn get_dashboard_invitations(
    State(_state): State<Arc<AppState>>,
) -> Html<String> {
    Html(r##"
<div class="invitation-item">
    <div class="invitation-info"><span class="invitation-email">alice@example.com</span><span class="invitation-role">Member</span></div>
    <span class="invitation-status pending">Pending</span>
    <span class="invitation-expires">Expires in 5 days</span>
</div>
<div class="invitation-item">
    <div class="invitation-info"><span class="invitation-email">bob@example.com</span><span class="invitation-role">Admin</span></div>
    <span class="invitation-status pending">Pending</span>
    <span class="invitation-expires">Expires in 3 days</span>
</div>
"##.to_string())
}