{% extends 'base.html' %}
{% block title %}User Management{% endblock %}
{% block content %}

<div class="page-header">
  <div class="page-title">User Management <small>Manage team access and roles</small></div>
  <a href="{{ url_for('admin_new_user') }}" class="btn btn-primary btn-sm">
    <i class="bi bi-person-plus me-1"></i> Add User
  </a>
</div>

<div class="card mb-4">
  <div class="table-wrap">
    <table>
      <thead><tr>
        <th>Username</th><th>Full Name</th><th>Role</th><th>Status</th>
        <th>Last Login</th><th>Created</th><th class="no-print"></th>
      </tr></thead>
      <tbody>
      {% for u in users %}
      <tr {% if not u.is_active %}style="opacity:.5"{% endif %}>
        <td>
          <code style="font-family:'IBM Plex Mono',monospace;font-size:12.5px;background:#f1f5f9;padding:2px 7px;border-radius:4px">{{ u.username }}</code>
          {% if u.id == g.user.id %}<span class="badge badge-open ms-1" style="font-size:10px">you</span>{% endif %}
        </td>
        <td style="font-weight:500">{{ u.full_name }}</td>
        <td><span class="role-badge role-{{ u.role }}">{{ ROLES.get(u.role, u.role) }}</span></td>
        <td>
          {% if u.is_active %}
            <span class="badge badge-open"><i class="bi bi-circle-fill me-1" style="font-size:7px"></i>Active</span>
          {% else %}
            <span class="badge badge-closed">Inactive</span>
          {% endif %}
        </td>
        <td class="text-muted text-sm">{{ u.last_login[:16] if u.last_login else 'Never' }}</td>
        <td class="text-muted text-sm">{{ u.created_at[:10] if u.created_at else '–' }}</td>
        <td class="no-print">
          <div class="d-flex gap-1">
            <a href="{{ url_for('admin_edit_user', uid=u.id) }}" class="btn btn-outline-secondary btn-sm">Edit</a>
            {% if u.id != g.user.id %}
            <form method="post" action="{{ url_for('admin_delete_user', uid=u.id) }}"
                  onsubmit="return confirm('Delete user {{ u.username }}? This cannot be undone.')">
              <button type="submit" class="btn btn-danger btn-sm">Delete</button>
            </form>
            {% endif %}
          </div>
        </td>
      </tr>
      {% endfor %}
      </tbody>
    </table>
  </div>
</div>

{% if can_admin() %}
<a href="{{ url_for('admin_audit') }}" class="btn btn-outline-secondary btn-sm">
  <i class="bi bi-journal-text me-1"></i> View Audit Log
</a>
{% endif %}

{% endblock %}