{% extends "base.html" %}
{% block title %}Admin — Users{% endblock %}
{% block content %}
<h1>User Management</h1>

<div class="card">
<table>
    <thead>
        <tr>
            <th>Email</th>
            <th>Role</th>
            <th>TOTP</th>
            <th>Status</th>
            <th>Joined</th>
            <th>Actions</th>
        </tr>
    </thead>
    <tbody>
    {% for u in users %}
        <tr>
            <td data-label="Email">
                <strong>{{ u.email }}</strong>
                {% if u.id == user.id %} <span class="text-dim">(you)</span>{% endif %}
            </td>
            <td data-label="Role">
                {% if u.is_admin %}<span class="badge badge-admin">admin</span>{% else %}<span class="text-dim">user</span>{% endif %}
            </td>
            <td data-label="TOTP">
                {% if u.totp_secret %}<span class="badge badge-totp">enabled</span>{% else %}<span class="badge badge-no-totp">not set</span>{% endif %}
            </td>
            <td data-label="Status">
                {% if u.suspended %}<span class="badge badge-suspended">suspended</span>{% else %}<span class="badge badge-active">active</span>{% endif %}
            </td>
            <td data-label="Joined">{{ u.created_at.strftime('%Y-%m-%d') }}</td>
            <td data-label="Actions">
                {% if u.id != user.id %}
                <div class="btn-group">
                    <form method="POST" action="/admin/users/{{ u.id }}/toggle-admin">
                        <button type="submit" class="btn btn-outline btn-sm">{% if u.is_admin %}Demote{% else %}Promote{% endif %}</button>
                    </form>
                    <form method="POST" action="/admin/users/{{ u.id }}/suspend">
                        <button type="submit" class="btn btn-outline btn-sm">{% if u.suspended %}Unsuspend{% else %}Suspend{% endif %}</button>
                    </form>
                    <form method="POST" action="/admin/users/{{ u.id }}/delete"
                          onsubmit="return confirm('Delete {{ u.email }}? Their packages transfer to you.')">
                        <button type="submit" class="btn btn-danger btn-sm">Delete</button>
                    </form>
                </div>
                {% endif %}
            </td>
        </tr>
    {% endfor %}
    </tbody>
</table>
</div>
{% endblock %}