{% extends "base.html" %}
{% block title %}Users — Admin{% endblock %}
{% block content %}
<h1>User Management</h1>

<details class="form-card" open>
    <summary><strong>+ Create a new user</strong></summary>
    <form method="POST" action="{{ url_for('admin_users_create') }}" class="inline-form">
        <input type="text" name="username" placeholder="Username" required>
        <input type="email" name="email" placeholder="Email (optional)">
        <input type="password" name="password" placeholder="Password" required>
        <select name="role">
            <option value="user">user</option>
            <option value="admin">admin</option>
        </select>
        <button type="submit" class="btn btn-primary">Create</button>
    </form>
</details>

<table class="data-table">
    <thead>
        <tr>
            <th>Username</th>
            <th>Email</th>
            <th>Role</th>
            <th>Status</th>
            <th>Created</th>
            <th>Last login</th>
            <th>Actions</th>
        </tr>
    </thead>
    <tbody>
        {% for u in users %}
        <tr>
            <td><strong>{{ u.username }}</strong></td>
            <td>{{ u.email or '—' }}</td>
            <td>
                {% if u.role == 'admin' %}
                    <span class="badge badge-blue">admin</span>
                {% else %}
                    <span class="badge badge-gray">user</span>
                {% endif %}
            </td>
            <td>
                {% if u.is_active %}
                    <span class="badge badge-green">Active</span>
                {% else %}
                    <span class="badge badge-red">Disabled</span>
                {% endif %}
            </td>
            <td>{{ u.created_at.strftime('%Y-%m-%d') if u.created_at else '—' }}</td>
            <td>{{ u.last_login.strftime('%Y-%m-%d %H:%M') if u.last_login else 'Never' }}</td>
            <td class="actions-cell">
                <form method="POST" action="{{ url_for('admin_users_toggle', user_id=u.id) }}" style="display:inline;">
                    <button class="btn btn-xs" type="submit">
                        {{ 'Disable' if u.is_active else 'Enable' }}
                    </button>
                </form>
                <form method="POST" action="{{ url_for('admin_users_reset', user_id=u.id) }}" style="display:inline;">
                    <input type="password" name="new_password" placeholder="New password" required minlength="6">
                    <button class="btn btn-xs" type="submit">Reset PWD</button>
                </form>
                <form method="POST" action="{{ url_for('admin_users_delete', user_id=u.id) }}"
                      style="display:inline;" onsubmit="return confirm('Delete user {{ u.username }}? This cannot be undone.');">
                    <button class="btn btn-xs btn-danger" type="submit">Delete</button>
                </form>
            </td>
        </tr>
        {% endfor %}
    </tbody>
</table>
{% endblock %}