<%# Destructive-action confirm body (todo §5), captured into the shell content slot. Zero-JS: the delete is a deliberate second step (a POST form), with a cancel link back. Config: message string confirm { action, label } the danger POST endpoint + button label cancelHref string csrfToken %>

<%= locals.message %>

Cancel