@extends('layouts.app')
@section('title', 'Netzbereiche')
@section('content')
    @if ($result = session('check_result'))
        <div class="alert {{ $result['allowed'] ? 'alert-success' : 'alert-error' }}">
            <strong>{{ session('check_ip') }}:</strong>
            {{ $result['allowed'] ? 'freigegeben über '.$result['entry'].' ('.$result['label'].')' : $result['reason'] }}
        </div>
    @endif

    <section class="grid grid-2">
        <div class="panel"><div class="panel-head"><h2>Allowlist-Eintrag hinzufügen</h2></div><div class="panel-body">
            @can(\App\Enums\Permission::ALLOWLIST_MANAGE)
                <form method="POST" action="{{ route('admin.allowlist.store') }}">
                    @csrf
                    <div class="form-row">
                        <div class="field"><label for="label">Bezeichnung *</label>
                            <input id="label" name="label" type="text" required value="{{ old('label') }}"></div>
                        <div class="field"><label for="cidr">Netz / IP *</label>
                            <input id="cidr" name="cidr" type="text" required value="{{ old('cidr') }}" placeholder="192.168.10.0/24">
                            <div class="help">Höchstens /{{ $maxPrefixV4 }}. Öffentliche Adressen sind gesperrt.</div></div>
                    </div>
                    <div class="form-row">
                        <div class="field"><label for="customer_id">Kunde</label>
                            <select id="customer_id" name="customer_id"><option value="">alle</option>
                                @foreach ($customers as $customer)<option value="{{ $customer->id }}">{{ $customer->name }}</option>@endforeach
                            </select></div>
                        <div class="field"><label for="project_id">Projekt</label>
                            <select id="project_id" name="project_id"><option value="">alle</option>
                                @foreach ($projects as $project)<option value="{{ $project->id }}">{{ $project->customer->name }} – {{ $project->name }}</option>@endforeach
                            </select></div>
                        <div class="field"><label for="valid_until">Gültig bis</label>
                            <input id="valid_until" name="valid_until" type="date" value="{{ old('valid_until') }}"></div>
                    </div>
                    <div class="field"><label for="authorization_reference">Referenz der Freigabe *</label>
                        <input id="authorization_reference" name="authorization_reference" type="text" required value="{{ old('authorization_reference') }}"></div>
                    <div class="field"><label for="justification">Begründung *</label>
                        <textarea id="justification" name="justification" required>{{ old('justification') }}</textarea></div>
                    <button class="btn btn-primary" type="submit">Eintrag anlegen</button>
                </form>
            @else
                <p class="muted">Nur Administratoren dürfen die Allowlist ändern.</p>
            @endcan
        </div></div>

        <div class="panel"><div class="panel-head"><h2>Zielprüfung</h2></div><div class="panel-body">
            <form method="POST" action="{{ route('admin.allowlist.check') }}">
                @csrf
                <div class="field"><label for="test_ip">IP-Adresse</label>
                    <input id="test_ip" name="test_ip" type="text" required placeholder="192.168.10.11"></div>
                <div class="field"><label for="test_project_id">Im Kontext des Projekts</label>
                    <select id="test_project_id" name="test_project_id"><option value="">– ohne Projekt –</option>
                        @foreach ($projects as $project)<option value="{{ $project->id }}">{{ $project->customer->name }} – {{ $project->name }}</option>@endforeach
                    </select></div>
                <button class="btn btn-secondary btn-sm" type="submit">Prüfen</button>
            </form>
            <p class="help">Die Prüfung durchläuft dieselbe Logik wie ein echter Scanstart:
                Adressklasse, harte Blocklist, Blocklist der Datenbank, öffentliche Adressen, Allowlist.</p>
        </div></div>
    </section>

    <section class="panel"><div class="panel-head"><h2>Allowlist</h2></div>
        <div class="table-wrap"><table class="data">
            <thead><tr><th>Netz</th><th>Bezeichnung</th><th>Kunde</th><th>Projekt</th><th>Gültig bis</th><th>Referenz</th><th>Status</th><th></th></tr></thead>
            <tbody>@forelse ($entries as $entry)
                <tr>
                    <td class="mono">{{ $entry->cidr }}</td>
                    <td>{{ $entry->label }}</td>
                    <td class="small">{{ $entry->customer?->name ?? 'alle' }}</td>
                    <td class="small">{{ $entry->project?->name ?? 'alle' }}</td>
                    <td class="small">{{ $entry->valid_until?->format('d.m.Y') ?? 'unbefristet' }}</td>
                    <td class="small">{{ $entry->authorization_reference }}</td>
                    <td><span class="badge {{ $entry->isCurrentlyValid() ? 'badge-ok' : 'badge-neutral' }}">
                        {{ $entry->isCurrentlyValid() ? 'aktiv' : 'inaktiv' }}</span></td>
                    <td class="right">
                        @can(\App\Enums\Permission::ALLOWLIST_MANAGE)
                            <form method="POST" action="{{ route('admin.allowlist.toggle', $entry) }}" style="display:inline;">
                                @csrf<button class="btn btn-ghost btn-sm" type="submit">{{ $entry->is_active ? 'Deaktivieren' : 'Aktivieren' }}</button>
                            </form>
                        @endcan
                    </td>
                </tr>
            @empty
                <tr><td colspan="8"><div class="empty">Keine Einträge – ohne Allowlist ist kein Scan möglich.</div></td></tr>
            @endforelse</tbody></table></div>
    </section>

    <section class="panel"><div class="panel-head"><h2>Blocklist (gewinnt immer)</h2></div>
        <div class="table-wrap"><table class="data">
            <thead><tr><th>Netz</th><th>Bezeichnung</th><th>Grund</th><th>Typ</th></tr></thead>
            <tbody>@foreach ($blocklist as $entry)
                <tr><td class="mono">{{ $entry->cidr }}</td><td>{{ $entry->label }}</td>
                    <td class="small">{{ $entry->reason }}</td>
                    <td>@if ($entry->is_system)<span class="badge badge-info">System</span>@else<span class="badge badge-neutral">manuell</span>@endif</td></tr>
            @endforeach</tbody></table></div>
    </section>
@endsection