{% if held_uploads.is_empty() %}
<div class="text-center dimmed empty-state">
    No uploads pending review.
</div>
{% else %}
<div class="scroll-x">
<table class="compact-table minw-700" aria-label="Held Uploads">
    <thead>
        <tr>
            <th>Creator</th>
            <th>Item</th>
            <th>Type</th>
            <th>Held</th>
            <th>Layers</th>
            <th>Actions</th>
        </tr>
    </thead>
    <tbody>
    {% for upload in held_uploads %}
        <tr>
            <td>
                {{ upload.creator_username }}
                {% if upload.creator_trusted %}
                <span class="text-xs dimmed">(trusted)</span>
                {% endif %}
            </td>
            <td>
                {{ upload.item_title }}
                {% if let Some(vn) = upload.version_number %}
                <span class="text-xs dimmed">v{{ vn }}</span>
                {% endif %}
            </td>
            <td class="text-sm">{{ upload.upload_type }}</td>
            <td class="text-sm nowrap">
                {{ upload.held_at }}
                {% if let Some(la) = upload.last_action %}
                <div class="scan-row-meta" title="{{ la.action }} by {{ la.admin_username }} {{ la.when }}">
                    last: {{ la.action }} by {{ la.admin_username }} {{ la.when }}
                </div>
                {% endif %}
            </td>
            <td class="layer-chips-cell">
                {% if upload.layers.is_empty() %}
                <span class="dimmed text-xs">no scan record</span>
                {% else %}
                <div class="layer-chips">
                {% for chip in upload.layers %}
                <span class="layer-chip layer-chip-{{ chip.verdict }}"
                      title="{{ chip.layer }}: {{ chip.verdict }}{% if let Some(d) = chip.detail %} — {{ d }}{% endif %}">
                    {{ chip.layer }}
                </span>
                {% endfor %}
                </div>
                <details class="layer-detail-disclosure">
                    <summary class="text-xs dimmed">scan detail</summary>
                    <dl class="layer-detail-list">
                    {% for chip in upload.layers %}
                        <dt><code class="layer-chip layer-chip-{{ chip.verdict }}">{{ chip.layer }}</code> <span class="dimmed">— {{ chip.verdict }}</span></dt>
                        <dd>{% if let Some(d) = chip.detail %}{{ d }}{% else %}<span class="dimmed">no detail</span>{% endif %}</dd>
                    {% endfor %}
                    </dl>
                </details>
                {% endif %}
            </td>
            <td class="nowrap">
                {% if let Some(vid) = upload.version_id %}
                <button class="btn-primary small"
                        hx-post="/api/admin/uploads/versions/{{ vid }}/promote"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML">Promote</button>
                <button class="btn-secondary small"
                        hx-post="/api/admin/uploads/versions/{{ vid }}/rescan"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML"
                        title="Re-run pipeline (use after a layer fix)">Re-scan</button>
                <button class="btn-danger small"
                        hx-post="/api/admin/uploads/versions/{{ vid }}/quarantine"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML"
                        hx-confirm="Quarantine this upload? Quarantine is sticky — the file stays in DB for audit but is unavailable to fans.">Quarantine</button>
                {% else %}
                <button class="btn-primary small"
                        hx-post="/api/admin/uploads/items/{{ upload.item_id }}/promote"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML">Promote</button>
                <button class="btn-secondary small"
                        hx-post="/api/admin/uploads/items/{{ upload.item_id }}/rescan"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML"
                        title="Re-run pipeline (use after a layer fix)">Re-scan</button>
                <button class="btn-danger small"
                        hx-post="/api/admin/uploads/items/{{ upload.item_id }}/quarantine"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML"
                        hx-confirm="Quarantine this upload?">Quarantine</button>
                {% endif %}
                {% if !upload.creator_trusted %}
                <button class="btn-secondary small"
                        hx-post="/api/admin/users/{{ upload.creator_id }}/trust"
                        hx-target="#uploads-table"
                        hx-swap="innerHTML">Trust Creator</button>
                {% endif %}
            </td>
        </tr>
    {% endfor %}
    </tbody>
</table>
</div>
{% endif %}