{{/* The owner's Reader roster. Rendered only for the owner (listView.Owner),
     and re-rendered whole as the response to a revocation so the session
     counts cannot describe the state before the tap. Revocation is
     confirm-gated: it signs someone out of every device at once. */}}
{{define "readers"}}
<details class="setup" id="readers">
  <summary>Readers</summary>
  <p class="setup-copy">Everyone who has signed in through Discord. Revoking
    signs a Reader out of every device; their library and bookmarks are
    untouched, and they can sign in again.</p>
  <ul class="readerlist">
    {{range .Readers}}
    <li>
      <span class="reader-id">{{.DiscordID}}</span>
      <span class="reader-sessions">{{.Sessions}} session{{if ne .Sessions 1}}s{{end}}</span>
      {{/* The owner's own row never offers Revoke: it is the one row where the
           button would sign the tapping browser out, and the endpoint refuses
           it anyway. Logout is the deliberate way to do that. */}}
      {{if and .Sessions (ne .ID $.OwnerID)}}
      <form hx-post="/readers/{{.ID}}/revoke" hx-target="#readers" hx-swap="outerHTML"
            hx-confirm="Revoking signs this Reader out on every device immediately. Revoke?">
        <button type="submit" class="ghost danger">Revoke sessions</button>
      </form>
      {{end}}
    </li>
    {{end}}
  </ul>
</details>
{{end}}