{% extends 'generic/object.html' %}
{% load helpers %}
{% load i18n %}

{% block title %}{{ object }} - {% trans "Scope Reconciliation" %}{% endblock %}

{% block extra_controls %}
  <a class="btn btn-outline-secondary" href="{{ object.get_absolute_url }}">
    <i class="mdi mdi-arrow-left" aria-hidden="true"></i>&nbsp;{% trans "Sync" %}
  </a>
{% endblock extra_controls %}

{% block content %}
<div class="row mb-3">
  <div class="col col-12">
    <div class="card">
      <div class="card-body d-flex align-items-center justify-content-between">
        <div>
          {% if report_error %}
            <span class="badge text-bg-danger">{% trans "Failed" %}</span>
            <span class="ms-2">{{ report_error }}</span>
          {% elif report_pending %}
            <span class="badge text-bg-secondary">{% trans "Not run" %}</span>
            <span class="ms-2 text-muted">
              {% trans "This report queries Forward for every device and endpoint, so it runs in the background rather than on page load." %}
            </span>
          {% else %}
            <span class="badge text-bg-success">{% trans "Report ready" %}</span>
            <span class="ms-2 text-muted">
              {% trans "Generated" %} {{ report_generated_at }}
            </span>
          {% endif %}
        </div>
        <form method="post" action="{{ refresh_report_url }}">
          {% csrf_token %}
          <button type="submit" class="btn btn-primary">
            <i class="mdi mdi-refresh" aria-hidden="true"></i>&nbsp;{% trans "Refresh report" %}
          </button>
        </form>
      </div>
    </div>
  </div>
</div>
<div class="row mb-3">
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Device Scope Reconciliation" %}</h5>
      <div class="card-body">
        <table class="table table-hover attr-table">
          <tr>
            <th scope="row">{% trans "Include tags" %}</th>
            <td>{{ payload.include_tags|join:", "|placeholder }}</td>
          </tr>
          <tr>
            <th scope="row">{% trans "NetBox devices" %}</th>
            <td>{{ payload.netbox_device_count }}</td>
          </tr>
          <tr>
            <th scope="row">{% trans "In scope (collected)" %}</th>
            <td>{{ payload.forward_in_scope_completed }}</td>
          </tr>
          {% if payload.forward_in_scope_endpoints %}
            <tr>
              <th scope="row">{% trans "In scope (SNMP endpoints)" %}</th>
              <td>{{ payload.forward_in_scope_endpoints }}</td>
            </tr>
          {% endif %}
          <tr>
            <th scope="row">{% trans "Tagged but backfilled" %}</th>
            <td>
              {{ payload.forward_tagged_backfilled }}
              {% if payload.netbox_present_backfilled %}
                &nbsp;<a href="{{ backfilled_tag_url }}" class="text-decoration-none">{% blocktrans with count=payload.netbox_present_backfilled %}view {{ count }} tagged{% endblocktrans %}</a>
              {% endif %}
            </td>
          </tr>
          <tr>
            <th scope="row">{% trans "Out of scope (orphans)" %}</th>
            <td>
              {% if payload.netbox_out_of_scope %}
                <span class="badge text-bg-warning">{{ payload.netbox_out_of_scope }}</span>
              {% else %}
                <span class="badge text-bg-success">0</span>
              {% endif %}
            </td>
          </tr>
          <tr>
            <th scope="row">{% trans "Empty orphan sites" %}</th>
            <td>
              {% if payload.netbox_empty_orphan_site_count %}
                <span class="badge text-bg-warning">{{ payload.netbox_empty_orphan_site_count }}</span>
              {% else %}
                <span class="badge text-bg-success">0</span>
              {% endif %}
            </td>
          </tr>
          <tr>
            <th scope="row">{% trans "In scope, missing from NetBox" %}</th>
            <td>{{ payload.forward_missing_in_netbox }}</td>
          </tr>
        </table>
      </div>
      <div class="card-footer text-end">
        <form method="post" action="{{ tag_backfilled_url }}" class="d-inline">
          {% csrf_token %}
          <button type="submit" class="btn btn-outline-warning"{% if not payload.netbox_present_backfilled and not payload.netbox_out_of_scope %} disabled{% endif %}>
            <i class="mdi mdi-tag-outline" aria-hidden="true"></i>&nbsp;{% trans "Reconcile device scope tags" %}
          </button>
        </form>
        <form method="post" action="{{ tag_delete_eligible_ipam_url }}" class="d-inline"
              title="{% trans 'Audits global IPAM (prefixes/VLANs/VRFs) against the latest Forward fetch and tags stale objects forward-delete-eligible for manual review. Never deletes.' %}">
          {% csrf_token %}
          <button type="submit" class="btn btn-outline-danger">
            <i class="mdi mdi-tag-remove-outline" aria-hidden="true"></i>&nbsp;{% trans "Tag delete-eligible IPAM" %}
          </button>
        </form>
        <form method="post" class="d-inline"
              action="{% url 'plugins:forward_netbox:forwardsync_prune_orphans' pk=object.pk %}"
              onsubmit="return confirm('{% blocktrans with dev_count=payload.netbox_out_of_scope site_count=payload.netbox_empty_orphan_site_count %}Delete {{ dev_count }} out-of-scope device(s) and {{ site_count }} empty site(s)? This also removes their interfaces and IP addresses.{% endblocktrans %}');">
          {% csrf_token %}
          <button type="submit" class="btn btn-danger"{% if not payload.netbox_out_of_scope and not payload.netbox_empty_orphan_site_count %} disabled{% endif %}>
            <i class="mdi mdi-trash-can-outline" aria-hidden="true"></i>&nbsp;{% trans "Prune orphans" %}
          </button>
        </form>
      </div>
    </div>
  </div>
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Out-of-Scope Sample" %}</h5>
      <div class="card-body">
        {% if payload.out_of_scope_sample %}
          {% if payload.out_of_scope_absence.available %}
            {# Which kind of absence, because all three look identical here and
               only one of them means the device really left. #}
            <p class="mb-2">
              {% if payload.out_of_scope_absence.absent_from_snapshot %}
                <span class="badge text-bg-secondary">{% blocktrans count counter=payload.out_of_scope_absence.absent_from_snapshot %}{{ counter }} gone from Forward{% plural %}{{ counter }} gone from Forward{% endblocktrans %}</span>
              {% endif %}
              {% if payload.out_of_scope_absence.present_untagged %}
                <span class="badge text-bg-warning">{% blocktrans count counter=payload.out_of_scope_absence.present_untagged %}{{ counter }} in Forward but untagged{% plural %}{{ counter }} in Forward but untagged{% endblocktrans %}</span>
              {% endif %}
              {% if payload.out_of_scope_absence.vendor_excluded %}
                <span class="badge text-bg-info">{% blocktrans count counter=payload.out_of_scope_absence.vendor_excluded %}{{ counter }} custom-command source{% plural %}{{ counter }} custom-command source{% endblocktrans %}</span>
              {% endif %}
            </p>
            {% if payload.out_of_scope_absence.present_untagged %}
              <p class="text-muted small mb-2">{% trans "Devices Forward still has but no longer reports under these tags. A Forward-side tag edit and a narrowed query look identical here — confirm in Forward before pruning." %}</p>
            {% endif %}
          {% endif %}
          <ul class="mb-0">
            {% for name in payload.out_of_scope_sample %}<li><code>{{ name }}</code></li>{% endfor %}
          </ul>
          {% if payload.netbox_out_of_scope > payload.out_of_scope_sample|length %}
            <p class="text-muted mt-2 mb-0">{% blocktrans with shown=payload.out_of_scope_sample|length total=payload.netbox_out_of_scope %}Showing {{ shown }} of {{ total }}.{% endblocktrans %}</p>
          {% endif %}
        {% else %}
          <p class="text-muted mb-0">{% trans "No out-of-scope devices." %}</p>
        {% endif %}
      </div>
    </div>
  </div>
</div>
<div class="row mt-3">
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Post-Upgrade Catalog Reconciliation" %}</h5>
      <div class="card-body">
        <table class="table table-hover attr-table mb-0">
          <tr>
            <th scope="row">{% trans "Mode" %}</th>
            <td><span class="badge text-bg-info">{% trans "Read only" %}</span></td>
          </tr>
          <tr>
            <th scope="row">{% trans "Platforms with manufacturer" %}</th>
            <td>{{ upgrade_reconciliation.platforms.with_manufacturer }} / {{ upgrade_reconciliation.platforms.total }}</td>
          </tr>
          <tr>
            <th scope="row">{% trans "Platforms without manufacturer" %}</th>
            <td>{{ upgrade_reconciliation.platforms.without_manufacturer }}</td>
          </tr>
          <tr>
            <th scope="row">{% trans "Stale endpoint DeviceTypes" %}</th>
            <td>
              {% if upgrade_reconciliation.stale_endpoint_device_types.candidate_count %}
                <span class="badge text-bg-warning">{{ upgrade_reconciliation.stale_endpoint_device_types.candidate_count }}</span>
              {% else %}
                <span class="badge text-bg-success">0</span>
              {% endif %}
            </td>
          </tr>
          <tr>
            <th scope="row">{% trans "DLM status" %}</th>
            <td><code>{{ upgrade_reconciliation.dlm.status }}</code></td>
          </tr>
          {% if upgrade_reconciliation.dlm.available %}
            <tr>
              <th scope="row">{% trans "Software versions" %}</th>
              <td>{{ upgrade_reconciliation.dlm.software_versions.total }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "Versions without devices" %}</th>
              <td>{{ upgrade_reconciliation.dlm.software_versions.without_devices }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "Protected versions without devices" %}</th>
              <td>{{ upgrade_reconciliation.dlm.software_versions.protected_without_devices }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "Unreferenced version candidates" %}</th>
              <td>
                {% if upgrade_reconciliation.dlm.software_versions.unreferenced_without_devices %}
                  <span class="badge text-bg-warning">{{ upgrade_reconciliation.dlm.software_versions.unreferenced_without_devices }}</span>
                {% else %}
                  <span class="badge text-bg-success">0</span>
                {% endif %}
              </td>
            </tr>
            <tr>
              <th scope="row">{% trans "CVEs" %}</th>
              <td>{{ upgrade_reconciliation.dlm.cves.total }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "CVEs with vulnerabilities" %}</th>
              <td>{{ upgrade_reconciliation.dlm.cves.with_vulnerabilities }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "CVEs with affected software" %}</th>
              <td>{{ upgrade_reconciliation.dlm.cves.with_affected_software }}</td>
            </tr>
            <tr>
              <th scope="row">{% trans "Unlinked CVEs" %}</th>
              <td>{{ upgrade_reconciliation.dlm.cves.unlinked }}</td>
            </tr>
          {% endif %}
        </table>
      </div>
    </div>
  </div>
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Review Candidates" %}</h5>
      <div class="card-body">
        {% if upgrade_reconciliation.stale_endpoint_device_types.sample %}
          <h6>{% trans "Stale endpoint DeviceTypes" %}</h6>
          <ul>
            {% for item in upgrade_reconciliation.stale_endpoint_device_types.sample %}
              <li><code>{{ item.manufacturer__name }} / {{ item.model }}</code></li>
            {% endfor %}
          </ul>
        {% endif %}
        {% if upgrade_reconciliation.dlm.software_versions.unreferenced_sample %}
          <h6>{% trans "Unreferenced software versions" %}</h6>
          <ul>
            {% for item in upgrade_reconciliation.dlm.software_versions.unreferenced_sample %}
              <li><code>{{ item.platform__name }} / {{ item.version }}</code></li>
            {% endfor %}
          </ul>
        {% endif %}
        {% if upgrade_reconciliation.dlm.software_versions.protected_sample %}
          <h6>{% trans "Protected software versions without devices" %}</h6>
          <ul>
            {% for item in upgrade_reconciliation.dlm.software_versions.protected_sample %}
              <li><code>{{ item.platform__name }} / {{ item.version }}</code> <span class="text-muted">({{ item.protected_by }})</span></li>
            {% endfor %}
          </ul>
        {% endif %}
        {% if not upgrade_reconciliation.stale_endpoint_device_types.sample and not upgrade_reconciliation.dlm.software_versions.unreferenced_sample and not upgrade_reconciliation.dlm.software_versions.protected_sample %}
          <p class="text-muted mb-0">{% trans "No post-upgrade review candidates." %}</p>
        {% endif %}
      </div>
    </div>
  </div>
</div>
<div class="row mt-3">
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Backfill Reason Breakdown" %}</h5>
      <div class="card-body">
        {% if payload.backfilled_reason_breakdown %}
          <p class="text-muted mt-0">{% trans "Why these in-scope devices were not freshly collected by Forward. This is a Forward collection-health signal, not a sync error — fix collection in Forward (rotate credentials for AUTHENTICATION_FAILED, check reachability for CONNECTION_TIMEOUT, finish onboarding for INCOMPLETE_SETUP)." %}</p>
          <table class="table table-hover attr-table mb-0">
            {% for reason, count in payload.backfilled_reason_breakdown.items %}
              <tr>
                <th scope="row"><code>{{ reason }}</code></th>
                <td><span class="badge text-bg-warning">{{ count }}</span></td>
              </tr>
            {% endfor %}
          </table>
        {% else %}
          <p class="text-muted mb-0">{% trans "No backfilled devices in the latest snapshot." %}</p>
        {% endif %}
      </div>
    </div>
  </div>
  <div class="col col-md-6">
    <div class="card">
      <h5 class="card-header">{% trans "Tagged-but-Backfilled Sample" %}</h5>
      <div class="card-body">
        {% if payload.present_backfilled_detail_sample %}
          <p class="text-muted mt-0">{% trans "In NetBox but not freshly collected in the latest snapshot (serving last-known-good data). Days = how stale the served data is." %}</p>
          <table class="table table-hover attr-table mb-0">
            <thead>
              <tr><th>{% trans "Device" %}</th><th>{% trans "Reason" %}</th><th>{% trans "Stale" %}</th></tr>
            </thead>
            <tbody>
              {% for item in payload.present_backfilled_detail_sample %}
                <tr>
                  <td><code>{{ item.name }}</code></td>
                  <td><code>{{ item.reason }}</code></td>
                  <td>{% if item.stale_days is not None %}{% blocktrans count days=item.stale_days %}{{ days }} day{% plural %}{{ days }} days{% endblocktrans %}{% else %}<span class="text-muted">&mdash;</span>{% endif %}</td>
                </tr>
              {% endfor %}
            </tbody>
          </table>
          {% if payload.netbox_present_backfilled > payload.present_backfilled_detail_sample|length %}
            <p class="text-muted mt-2 mb-0">{% blocktrans with shown=payload.present_backfilled_detail_sample|length total=payload.netbox_present_backfilled %}Showing {{ shown }} of {{ total }}.{% endblocktrans %}</p>
          {% endif %}
        {% else %}
          <p class="text-muted mb-0">{% trans "No backfilled devices in NetBox." %}</p>
        {% endif %}
      </div>
    </div>
  </div>
</div>
{% endblock content %}