@extends('layouts.app')

@section('title', 'Scan erstellen')

@section('content')
    @if ($emergencyStop)
        <div class="alert alert-critical">Der Not-Aus ist aktiv. Es können keine Scans angelegt werden.</div>
    @endif

    <ol class="wizard-steps">
        <li class="current">1 Projekt</li>
        <li>2 Geräte</li>
        <li>3 Autorisierung</li>
        <li>4 Scanprofil</li>
        <li>5 Wartungsfenster</li>
        <li>6 Konfiguration dokumentiert</li>
        <li>7 Health-Monitoring</li>
        <li>8 Risiko</li>
        <li>9 Freigabe</li>
        <li>10 Start</li>
    </ol>

    {{-- Schritt 1: Projektwahl laedt die passenden Geraete und Fenster nach. --}}
    <section class="panel">
        <div class="panel-head"><h2>Schritt 1 – Projekt auswählen</h2></div>
        <div class="panel-body">
            <form method="GET" action="{{ route('scans.create') }}" class="filters">
                <div class="field">
                    <label for="project_select">Projekt</label>
                    <select id="project_select" name="project_id" data-autosubmit>
                        <option value="">– bitte wählen –</option>
                        @foreach ($projects as $project)
                            <option value="{{ $project->id }}" @selected($selectedProject?->id === $project->id)>
                                {{ $project->customer->name }} – {{ $project->name }}
                                @if (! $project->hasValidAuthorization()) (keine gültige Autorisierung) @endif
                            </option>
                        @endforeach
                    </select>
                </div>
                <noscript><button class="btn btn-secondary btn-sm" type="submit">Übernehmen</button></noscript>
            </form>

            @if ($selectedProject)
                @if ($problem = $selectedProject->authorizationProblem())
                    <div class="alert alert-error" style="margin-top:14px;">
                        <strong>Scan nicht möglich:</strong> {{ $problem }}
                        <br><a href="{{ route('projects.show', $selectedProject) }}">Scanberechtigung im Projekt hinterlegen</a>
                    </div>
                @else
                    <dl class="kv" style="margin-top:14px;">
                        <dt>Kunde</dt><dd>{{ $selectedProject->customer->name }}</dd>
                        <dt>Autorisierung</dt>
                        <dd>
                            <span class="badge badge-ok">Bestätigt</span>
                            Referenz {{ $selectedProject->authorization_reference }},
                            gültig bis {{ $selectedProject->authorization_valid_until?->format('d.m.Y') }}
                        </dd>
                        <dt>Umfang</dt><dd class="small">{{ $selectedProject->scope_description }}</dd>
                    </dl>
                @endif
            @endif
        </div>
    </section>

    @if ($selectedProject && $selectedProject->hasValidAuthorization())
        <form method="POST" action="{{ route('scans.store') }}" id="scan-form">
            @csrf
            <input type="hidden" name="project_id" value="{{ $selectedProject->id }}">

            <section class="grid grid-2">
                {{-- ------------------------------------------ Schritt 2: Ziele --}}
                <div class="panel">
                    <div class="panel-head"><h2>Schritt 2 – Switch oder Gruppe wählen</h2></div>
                    <div class="panel-body">
                        @if ($switches->isEmpty())
                            <p class="muted">Für diesen Kunden ist kein aktives Gerät erfasst.</p>
                        @else
                            <div class="table-wrap" style="max-height:340px;overflow-y:auto;">
                                <table class="data">
                                    <thead>
                                    <tr><th></th><th>Hostname</th><th>IP</th><th>Modell</th><th>Firmware</th><th>Umgebung</th></tr>
                                    </thead>
                                    <tbody>
                                    @foreach ($switches as $switch)
                                        <tr>
                                            <td><input type="checkbox" name="switch_ids[]" value="{{ $switch->id }}"
                                                       class="target-checkbox" @checked(in_array($switch->id, (array) old('switch_ids', [])))></td>
                                            <td>{{ $switch->hostname }}</td>
                                            <td class="mono">{{ $switch->management_ip }}</td>
                                            <td class="small">{{ $switch->modelLabel() }}</td>
                                            <td class="small mono">{{ $switch->firmware_version ?: '–' }}</td>
                                            <td>
                                                <span class="badge {{ $switch->is_production ? 'badge-warning' : 'badge-neutral' }}">
                                                    {{ $switch->is_production ? 'Produktiv' : 'Labor' }}
                                                </span>
                                            </td>
                                        </tr>
                                    @endforeach
                                    </tbody>
                                </table>
                            </div>
                            <p class="help">Höchstens {{ config('barox.targets.max_targets_per_job') }} Ziele je Auftrag.
                                Jede Adresse wird beim Start erneut gegen die Allowlist geprüft.</p>
                        @endif
                    </div>
                </div>

                {{-- ---------------------------------------- Schritt 4: Profil --}}
                <div class="panel">
                    <div class="panel-head"><h2>Schritt 4 – Scanprofil</h2></div>
                    <div class="panel-body">
                        @foreach ($profiles as $profile)
                            <label class="check" style="align-items:flex-start;padding:8px 0;border-bottom:1px solid var(--border);">
                                <input type="radio" name="scan_profile_id" value="{{ $profile->id }}"
                                       class="profile-radio" @checked((int) old('scan_profile_id') === $profile->id)
                                       data-intensity="{{ $profile->intensity }}"
                                       data-approval="{{ $profile->requires_approval || $profile->isAggressive() ? '1' : '0' }}"
                                       data-window="{{ $profile->requires_maintenance_window ? '1' : '0' }}">
                                <span>
                                    <strong>{{ $profile->name }}</strong>
                                    <span class="badge badge-{{ $profile->intensity >= 4 ? 'critical' : ($profile->intensity >= 3 ? 'warning' : 'neutral') }}">
                                        {{ $profile->intensityLabel() }}
                                    </span>
                                    <br><span class="muted small">{{ $profile->description }}</span>
                                    @if ($profile->risk_notice)
                                        <br><span class="small" style="color:var(--warning);">{{ $profile->risk_notice }}</span>
                                    @endif
                                </span>
                            </label>
                        @endforeach
                        <p class="help">
                            Scanparameter sind fest im Profil hinterlegt. Es gibt bewusst kein Feld für eigene
                            Nmap-Optionen, Skripte oder Nessus-Parameter.
                        </p>
                    </div>
                </div>
            </section>

            <section class="grid grid-2">
                {{-- ------------------------------- Schritt 3, 5, 6: Rahmen ----}}
                <div class="panel">
                    <div class="panel-head"><h2>Schritte 3, 5 und 6 – Rahmenbedingungen</h2></div>
                    <div class="panel-body">
                        <div class="field">
                            <label for="name">Bezeichnung des Scans</label>
                            <input id="name" name="name" type="text" value="{{ old('name') }}"
                                   placeholder="z. B. Vorabprüfung Ringsegment A">
                        </div>

                        <div class="field">
                            <label for="purpose">Zweck / Fragestellung</label>
                            <textarea id="purpose" name="purpose" placeholder="Was soll untersucht werden?">{{ old('purpose') }}</textarea>
                        </div>

                        <div class="field">
                            <label for="maintenance_window_id">Wartungsfenster</label>
                            <select id="maintenance_window_id" name="maintenance_window_id">
                                <option value="">– keines –</option>
                                @foreach ($windows as $window)
                                    <option value="{{ $window->id }}" @selected((int) old('maintenance_window_id') === $window->id)>
                                        {{ $window->name }} ({{ $window->starts_at->format('d.m. H:i') }} – {{ $window->ends_at->format('H:i') }})
                                        @unless ($window->confirmed) – nicht bestätigt @endunless
                                    </option>
                                @endforeach
                            </select>
                            <div class="help" id="window-hint">Ab Intensitätsstufe
                                {{ config('barox.maintenance_windows.required_from_intensity') }} verpflichtend.</div>
                        </div>

                        <div class="field">
                            <label for="authorization_reference">Referenz der Scanberechtigung</label>
                            <input id="authorization_reference" name="authorization_reference" type="text"
                                   value="{{ old('authorization_reference', $selectedProject->authorization_reference) }}">
                        </div>

                        <label class="check">
                            <input type="checkbox" name="authorization_confirmed" value="1" required
                                   @checked(old('authorization_confirmed'))>
                            <span><strong>Schritt 3:</strong> Ich bestätige, dass für alle gewählten Ziele eine
                                schriftliche Scanberechtigung des Eigentümers vorliegt und der Test im vereinbarten
                                Umfang stattfindet.</span>
                        </label>

                        <label class="check">
                            <input type="checkbox" name="configuration_documented" value="1" required
                                   @checked(old('configuration_documented'))>
                            <span><strong>Schritt 6:</strong> Die aktuelle Gerätekonfiguration ist gesichert und
                                dokumentiert, sodass der Zustand nach dem Test überprüft werden kann.</span>
                        </label>
                    </div>
                </div>

                {{-- ----------------------- Schritt 7 und 8: Schutz und Risiko --}}
                <div class="panel">
                    <div class="panel-head">
                        <h2>Schritte 7 und 8 – Schutzmechanismen und Risiko</h2>
                        <div class="actions">
                            <button type="button" class="btn btn-ghost btn-sm" id="check-targets">Ziele prüfen</button>
                        </div>
                    </div>
                    <div class="panel-body">
                        <dl class="kv">
                            <dt>Health-Monitoring</dt>
                            <dd>ICMP, HTTPS und SNMP alle {{ config('barox.health.interval_seconds') }} s</dd>
                            <dt>CPU-Abbruch</dt>
                            <dd>&gt; {{ config('barox.health.thresholds.cpu_percent') }} % über
                                {{ config('barox.health.thresholds.cpu_duration_seconds') }} s</dd>
                            <dt>Paketverlust</dt>
                            <dd>&gt; {{ config('barox.health.thresholds.packet_loss_percent') }} %</dd>
                            <dt>Latenz</dt>
                            <dd>&gt; {{ config('barox.health.thresholds.latency_ms') }} ms über
                                {{ config('barox.health.thresholds.latency_duration_seconds') }} s</dd>
                            <dt>Webinterface</dt>
                            <dd>{{ config('barox.health.thresholds.http_consecutive_failures') }} Ausfälle in Folge</dd>
                            <dt>Reboot-Erkennung</dt><dd>Uptime-Rücksprung führt zum sofortigen Abbruch</dd>
                            <dt>Nachbeobachtung</dt><dd>{{ config('barox.health.post_observation_minutes') }} Minuten</dd>
                        </dl>

                        <div id="preview-result" style="margin-top:14px;"></div>
                    </div>
                </div>
            </section>

            <section class="panel">
                <div class="panel-body form-actions">
                    <button type="submit" class="btn btn-secondary">Auftrag anlegen</button>
                    <label class="check" style="margin:0;">
                        <input type="checkbox" name="start_now" value="1">
                        <span>Sofort starten (nur ohne Freigabepflicht möglich)</span>
                    </label>
                    <span class="spacer"></span>
                    <span class="muted small" id="approval-hint"></span>
                </div>
            </section>
        </form>
    @endif
@endsection

@push('scripts')
    <script nonce="{{ request()->attributes->get('csp_nonce') }}">
        (function () {
            var form = document.getElementById('scan-form');
            if (!form) return;

            var hint = document.getElementById('approval-hint');
            var result = document.getElementById('preview-result');

            function selectedProfile() {
                return form.querySelector('.profile-radio:checked');
            }

            function updateHint() {
                var profile = selectedProfile();
                if (!profile) { hint.textContent = ''; return; }
                var parts = [];
                if (profile.dataset.approval === '1') parts.push('Dieses Profil erfordert eine Freigabe durch einen Approver.');
                if (profile.dataset.window === '1') parts.push('Ein bestätigtes Wartungsfenster ist erforderlich.');
                hint.textContent = parts.join(' ');
            }

            form.addEventListener('change', updateHint);
            updateHint();

            document.getElementById('check-targets').addEventListener('click', function () {
                var profile = selectedProfile();
                var targets = Array.prototype.slice
                    .call(form.querySelectorAll('.target-checkbox:checked'))
                    .map(function (el) { return el.value; });

                if (!profile || targets.length === 0) {
                    result.innerHTML = '<div class="alert alert-error">Bitte Ziele und ein Scanprofil wählen.</div>';
                    return;
                }

                var payload = new FormData();
                payload.append('project_id', form.querySelector('[name=project_id]').value);
                payload.append('scan_profile_id', profile.value);
                targets.forEach(function (id) { payload.append('switch_ids[]', id); });

                fetch('{{ route('scans.preview') }}', {
                    method: 'POST',
                    credentials: 'same-origin',
                    headers: {
                        'X-CSRF-TOKEN': document.querySelector('meta[name=csrf-token]').content,
                        'Accept': 'application/json'
                    },
                    body: payload
                })
                    .then(function (r) { return r.json(); })
                    .then(function (data) {
                        var rows = data.targets.map(function (t) {
                            var badge = t.allowed
                                ? '<span class="badge badge-ok">freigegeben</span>'
                                : '<span class="badge badge-critical">gesperrt</span>';
                            var detail = t.allowed
                                ? (t.entry || '')
                                : (t.reason || '');
                            return '<tr><td>' + t.hostname + '</td><td class="mono">' + t.ip + '</td><td>' +
                                badge + '</td><td class="small">' + detail + '</td></tr>';
                        }).join('');

                        var warning = data.blocked > 0
                            ? '<div class="alert alert-error">' + data.blocked +
                              ' Ziel(e) sind nicht freigegeben und werden abgewiesen.</div>'
                            : '<div class="alert alert-success">Alle Ziele sind in der Allowlist enthalten.</div>';

                        result.innerHTML = warning +
                            '<div class="table-wrap"><table class="data"><thead><tr><th>Gerät</th><th>IP</th>' +
                            '<th>Prüfung</th><th>Hinweis</th></tr></thead><tbody>' + rows + '</tbody></table></div>';
                    })
                    .catch(function () {
                        result.innerHTML = '<div class="alert alert-error">Die Prüfung konnte nicht ausgeführt werden.</div>';
                    });
            });
        })();
    </script>
@endpush