{% extends "base.html" %}
{% block title %}Manage Users - {{ config.APP_NAME }}{% endblock %}
{% block content %}
<h1>Manage Users</h1>
<p><a href="{{ url_for('admin.add_user') }}" class="btn-primary">+ Add User</a></p>

{% if users %}
<div class="table-responsive">
<table class="data-table">
    <thead>
        <tr><th>Username</th><th>Email</th><th>Verified</th><th>Created</th><th>Actions</th></tr>
    </thead>
    <tbody>
        {% for user in users %}
        <tr>
            <td>{{ user.username }}</td>
            <td>{{ user.email }}</td>
            <td>{{ "✅" if user.is_verified else "⏳ Pending" }}</td>
            <td>{{ user.created_at }}</td>
            <td>
                <a href="{{ url_for('admin.edit_user', user_id=user.id) }}">Edit</a>
                <form method="POST" action="{{ url_for('admin.delete_user', user_id=user.id) }}"
                      style="display:inline"
                      onsubmit="return confirm('Delete user {{ user.username }}? This cannot be undone.');">
    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                    <button type="submit" class="btn-danger-link">Delete</button>
                </form>
            </td>
        </tr>
        {% endfor %}
    </tbody>
</table>
</div>
{% else %}
<p>No non-admin users yet.</p>
{% endif %}
{% endblock %}