Admin Dashboard

const [pagination, setPagination] = useState<AdminPagination>({
  page: 1,
  perPage: PAGE_SIZE,
  total: 0,
  totalPages: 1,
});

function getUserRiskProfile(user: AdminUserRecord): { label: string; detail: string; tone: string } {
  const daysSinceSignIn = getDaysSince(user.lastSignInAt);

  if (user.userType === 'admin' && !user.emailConfirmedAt) {
    return {
      label: 'Elevated',
      detail: 'Admin without confirmed email.',
      tone: 'border-[#EF4444]/30 bg-[#EF4444]/10 text-[#FCA5A5]',
    };
  }

  if (daysSinceSignIn === null) {
    return {
      label: 'Dormant',
      detail: 'No sign-in history.',
      tone: 'border-[#F59E0B]/30 bg-[#F59E0B]/10 text-[#FCD34D]',
    };
  }

  if (daysSinceSignIn >= 120) {
    return {
      label: 'Stale',
      detail: `No activity for ${daysSinceSignIn} days.`,
      tone: 'border-[#F59E0B]/30 bg-[#F59E0B]/10 text-[#FCD34D]',
    };
  }

  return {
    label: 'Healthy',
    detail: 'Recently active account.',
    tone: 'border-[#34D399]/30 bg-[#34D399]/10 text-[#6EE7B7]',
  };
}

const handleUserTypeChange = async (user: AdminUserRecord, nextUserType: AdminUserType) => {
  if (user.userType === nextUserType) {
    return;
  }

  if (user.id === currentUserId && nextUserType !== 'admin') {
    toast.error('You cannot remove your own admin access from this session.');
    return;
  }

  const previousUserType = user.userType;
  setUsers((prev) => prev.map((item) => (item.id === user.id ? { ...item, userType: nextUserType } : item)));
  markPending(user.id, 'role');

  try {
    const updatedUser = await updateAdminUserType(user.id, nextUserType);
    setUsers((prev) => prev.map((item) => (item.id === user.id ? updatedUser : item)));
    setRefreshTick((prev) => prev + 1);
    toast.success(`Updated ${user.email || 'user'} to ${nextUserType}.`);
  } catch (err) {
    setUsers((prev) => prev.map((item) => (item.id === user.id ? { ...item, userType: previousUserType } : item)));
    toast.error(toUserFacingError(err, 'Failed to update user type.'));
  } finally {
    clearPending(user.id);
  }
};

const handleSendReset = async (user: AdminUserRecord) => {
  markPending(user.id, 'reset');

  try {
    await sendAdminPasswordReset(user.id);
    toast.success(`Password reset email sent to ${user.email || 'user'}.`);
  } catch (err) {
    toast.error(toUserFacingError(err, 'Failed to send password reset email.'));
  } finally {
    clearPending(user.id);
  }
};

const handleDelete = async (user: AdminUserRecord) => {
  if (user.id === currentUserId) {
    toast.error('You cannot delete your own account from this panel.');
    return;
  }

  const confirmed = window.confirm(`Delete user ${user.email || user.id}? This cannot be undone.`);
  if (!confirmed) {
    return;
  }

  markPending(user.id, 'delete');

  try {
    await deleteAdminUser(user.id);
    toast.success(`Deleted ${user.email || 'user'} successfully.`);
    setRefreshTick((prev) => prev + 1);
  } catch (err) {
    toast.error(toUserFacingError(err, 'Failed to delete user.'));
  } finally {
    clearPending(user.id);
  }
};

const handleThemeToggle = async () => {
  const next: AccentTheme = accentTheme === 'gold' ? 'green' : 'gold';
  setAccentTheme(next);
  applyTheme(next);
  setThemeSaving(true);
  try {
    await setTheme(next);
    toast.success(`Accent theme switched to ${next}.`);
  } catch (err) {
    // revert on failure
    setAccentTheme(accentTheme);
    applyTheme(accentTheme);
    toast.error(toUserFacingError(err, 'Failed to save theme. Make sure the app_settings table exists.'));
  } finally {
    setThemeSaving(false);
  }
};