{% extends "base.html" %}
{% block title %}Admin — CCL Expense Reporter{% endblock %}
{% block content %}
<h1>Administration</h1>

<section class="card">
  <h2>Mileage rates</h2>
  <p class="muted">Corporate/federal rates. These apply immediately to every
  calculation and Excel export; employees can never edit them on a report.</p>
  <form method="post" action="{{ url_for('admin.rates') }}" class="inline-form">
    <input type="hidden" name="_csrf" value="{{ csrf_token }}">
    {% for site, meta in SITES.items() %}
    <label>{{ meta['label'] }}
      <input name="rate_{{ site }}" value="{{ '%.3f'|format(rates[site]) }}" inputmode="decimal">
    </label>
    {% endfor %}
    <button class="btn primary" type="submit">Save rates</button>
  </form>
</section>

<section class="card">
  <h2>Create an account</h2>
  <form method="post" action="{{ url_for('admin.create_user') }}" class="fields">
    <input type="hidden" name="_csrf" value="{{ csrf_token }}">
    <label>Name <input name="name" required></label>
    <label>Email <input type="email" name="email" required></label>
    <label>Starting password (8+) <input name="password" required minlength="8"></label>
    <label>Site
      <select name="site">
        {% for key, meta in SITES.items() %}<option value="{{ key }}">{{ meta['label'] }}</option>{% endfor %}
      </select></label>
    <label>Department <input name="department" placeholder="IT"></label>
    <label>Approver name <input name="approver" placeholder="Informational only"></label>
    <label class="check"><input type="checkbox" name="is_admin"> Administrator</label>
    <button class="btn primary" type="submit">Create account</button>
  </form>
</section>

<section class="card">
  <h2>Accounts</h2>
  <table class="table">
    <thead><tr><th>Name</th><th>Email</th><th>Site</th><th>Dept</th><th>Role</th><th>Status</th><th></th></tr></thead>
    <tbody>
    {% for u in users %}
      <tr>
        <td>{{ u.name }}</td><td>{{ u.email }}</td>
        <td>{{ SITES[u.site]['label'] }}</td><td>{{ u.department }}</td>
        <td>{{ 'Admin' if u.is_admin else 'Employee' }}</td>
        <td><span class="pill {{ 'draft' if u.active else 'submitted' }}">{{ 'active' if u.active else 'inactive' }}</span></td>
        <td class="row-actions">
          <form method="post" action="{{ url_for('admin.toggle_user', user_id=u.id) }}">
            <input type="hidden" name="_csrf" value="{{ csrf_token }}">
            <button class="btn small" type="submit">{{ 'Deactivate' if u.active else 'Reactivate' }}</button>
          </form>
          <form method="post" action="{{ url_for('admin.reset_password', user_id=u.id) }}">
            <input type="hidden" name="_csrf" value="{{ csrf_token }}">
            <input name="password" placeholder="New password" minlength="8">
            <button class="btn small" type="submit">Reset</button>
          </form>
        </td>
      </tr>
    {% endfor %}
    </tbody>
  </table>
</section>
{% endblock %}