{% extends "ui/_layout.html" %}
{% block title %}Settings - withcache{% endblock %}

{% block subnav %}
<nav class="navbar subnav-strip" aria-label="Section sub-navigation">
    <div class="container">
        <span class="subnav-jumps d-flex align-items-center flex-wrap">
            <a href="#identity">Identity</a>
            <span class="vr"></span>
            <a href="#paths">Storage paths</a>
            <span class="vr"></span>
            <a href="#catalog">Catalog</a>
            <span class="vr"></span>
            <a href="#logging">Logging</a>
            <span class="vr"></span>
            <a href="#auth">Auth</a>
        </span>
    </div>
</nav>
{% endblock %}

{% block intro %}
<div class="alert alert-secondary small mb-3">
    Effective configuration for this withcache instance. The
    Catalog source + Logging cards below are form-editable; each
    write goes through a persistent on-disk override so the daemon
    reads the same value across restarts.
</div>
{% if flash %}
<div class="alert alert-{{ flash_kind or 'secondary' }} small mb-3">
    {{ flash }}
</div>
{% endif %}
{% endblock %}

{% block content %}
<div class="card mb-3" id="identity">
    <div class="card-header bg-light fw-semibold py-2">
        <i class="bi bi-info-circle me-1"></i>Identity
    </div>
    <div class="table-responsive">
        <table class="table mb-0 align-middle">
            <thead class="table-light">
                <tr>
                    <th>Setting</th>
                    <th>Effective</th>
                    <th>Source</th>
                    <th>Notes</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td><i class="bi bi-tag me-1"></i>withcache version</td>
                    <td><code>{{ version }}</code></td>
                    <td><span class="badge bg-light text-dark border">package</span></td>
                    <td class="text-muted small">Container image tag / PyPI release.</td>
                </tr>
                <tr>
                    <td><i class="bi bi-github me-1"></i>Project</td>
                    <td>
                        <a href="https://github.com/safl/withcache"
                           class="text-decoration-none font-monospace">
                            github.com/safl/withcache
                        </a>
                    </td>
                    <td><span class="badge bg-light text-dark border">static</span></td>
                    <td class="text-muted small">Release notes + wire-format docs.</td>
                </tr>
            </tbody>
        </table>
    </div>
</div>

<div class="card mb-3" id="paths">
    <div class="card-header bg-light fw-semibold py-2">
        <i class="bi bi-hdd me-1"></i>Storage paths
    </div>
    <div class="table-responsive">
        <table class="table mb-0 align-middle">
            <thead class="table-light">
                <tr>
                    <th>Setting</th>
                    <th>Effective</th>
                    <th>Source</th>
                    <th>Notes</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td><i class="bi bi-folder me-1"></i>Data directory</td>
                    <td class="font-monospace">{{ data_dir }}</td>
                    <td><span class="badge bg-light text-dark border">CLI --data-dir</span></td>
                    <td class="text-muted small">
                        Holds <code>cache.db</code>, <code>blobs/</code>,
                        <code>catalog.toml</code>, <code>session-secret</code>.
                    </td>
                </tr>
                <tr>
                    <td><i class="bi bi-hdd-stack me-1"></i>Max cache size</td>
                    <td>
                        {% if max_bytes and max_bytes > 0 %}
                        <code>{{ max_bytes }}</code> bytes
                        {% else %}
                        <span class="badge bg-light text-dark border">unlimited</span>
                        {% endif %}
                    </td>
                    <td><span class="badge bg-light text-dark border">CLI --max-bytes</span></td>
                    <td class="text-muted small">
                        Cap on total cached bytes. 0 = unlimited. When
                        full, new fills refuse (delete is manual).
                    </td>
                </tr>
            </tbody>
        </table>
    </div>
</div>

<div class="card mb-3" id="catalog">
    <div class="card-header bg-light fw-semibold py-2">
        <i class="bi bi-book me-1"></i>Catalog source
    </div>
    <div class="card-body small">
        <p class="text-muted mb-2">
            URL withcache fetches <code>catalog.toml</code> bytes
            from. Env pin (<code>WITHCACHE_CATALOG_URL</code>) wins
            over on-disk override; override wins over the shipping
            default. Empty submit clears the override and reverts to
            the shipping default. The
            <em>Fetch default catalog</em> button re-parses the
            currently-effective source and merges its entries into
            <code>catalog.toml</code>.
        </p>
        <div class="row g-2 mb-2">
            <div class="col-md-3 text-muted">Effective URL</div>
            <div class="col-md-9 font-monospace">{{ catalog_url }}</div>
        </div>
        <div class="row g-2 mb-2">
            <div class="col-md-3 text-muted">Env pin</div>
            <div class="col-md-9 font-monospace">
                {% if catalog_env_url %}
                {{ catalog_env_url }}
                {% else %}
                <span class="text-muted">(unset)</span>
                {% endif %}
            </div>
        </div>
        {% if catalog_fetched_at %}
        <div class="row g-2 mb-2">
            <div class="col-md-3 text-muted">Last fetched</div>
            <div class="col-md-9">{{ catalog_fetched_at }}</div>
        </div>
        {% endif %}
        {% if catalog_last_error %}
        <div class="alert alert-danger small mt-2 mb-0">
            <i class="bi bi-exclamation-triangle me-1"></i>{{ catalog_last_error }}
        </div>
        {% endif %}
        {% if catalog_last_info %}
        <div class="alert alert-info small mt-2 mb-0">{{ catalog_last_info }}</div>
        {% endif %}
        <form method="post" action="/admin/catalog_set_url" class="mt-3 mb-2">
            <label for="settings-catalog-url" class="form-label small mb-1">
                Override catalog URL
            </label>
            <div class="d-flex gap-2">
                <input type="url" class="form-control form-control-sm font-monospace"
                       id="settings-catalog-url" name="url"
                       placeholder="https://... or oras://owner/repo:tag"
                       value="{% if not catalog_env_url %}{{ catalog_url }}{% endif %}"
                       {% if catalog_env_url %}disabled{% endif %}>
                <button type="submit" class="btn btn-sm btn-outline-primary text-nowrap"
                        {% if catalog_env_url %}disabled{% endif %}>
                    <i class="bi bi-save me-1"></i>Set URL
                </button>
            </div>
            <div class="form-text small">
                {% if catalog_env_url %}
                Env pin is set; override is refused while
                <code>WITHCACHE_CATALOG_URL</code> is present in the
                environment.
                {% else %}
                Empty submit clears the override and reverts to the
                shipping default.
                {% endif %}
            </div>
        </form>
        <form method="post" action="/admin/catalog_refresh" class="mb-0">
            <input type="hidden" name="next" value="settings">
            <button type="submit" class="btn btn-sm btn-outline-primary text-nowrap"
                    title="GET the catalog URL and merge its entries into catalog.toml">
                <i class="bi bi-arrow-clockwise me-1"></i>Fetch default catalog
            </button>
        </form>
    </div>
</div>

<div class="card mb-3" id="logging">
    <div class="card-header bg-light fw-semibold py-2">
        <i class="bi bi-terminal me-1"></i>Logging
    </div>
    <div class="card-body small">
        <p class="text-muted mb-3">
            Persistent operator override for the uvicorn log level.
            Empty override falls through to the env var; empty env
            falls through to the shipping default. Set a value here
            to pin it across restarts.
        </p>
        {% if log_level_error %}
        <div class="alert alert-danger small py-2 mb-3">
            <i class="bi bi-exclamation-triangle me-1"></i>{{ log_level_error }}
        </div>
        {% endif %}
        <form method="post" action="/admin/settings/logging" class="mb-0">
            <div class="row g-2 align-items-center">
                <label for="logging-log-level" class="col-md-3 col-form-label col-form-label-sm">
                    Log level
                </label>
                <div class="col-md-3">
                    <select id="logging-log-level" name="log_level"
                            class="form-select form-select-sm">
                        <option value="">(clear override)</option>
                        {% for lvl in log_levels %}
                        <option value="{{ lvl }}"
                                {% if log_level_override == lvl %}selected{% endif %}>
                            {{ lvl }}
                        </option>
                        {% endfor %}
                    </select>
                </div>
                <div class="col-md-2">
                    <button type="submit" class="btn btn-sm btn-outline-primary">
                        <i class="bi bi-save me-1"></i>Save
                    </button>
                </div>
                <div class="col-md-4">
                    <div class="small text-muted">
                        Effective: <code>{{ log_level_effective }}</code>
                        <span class="badge bg-light text-dark border ms-1">
                            {% if log_level_override %}override
                            {% elif log_level_env %}env
                            {% else %}default{% endif %}
                        </span>
                        <div class="mt-1">
                            Env:
                            {% if log_level_env %}
                            <code>{{ log_level_env }}</code>
                            {% else %}
                            <span class="text-muted">(unset)</span>
                            {% endif %}
                            &middot; Default: <code>{{ log_level_default }}</code>
                        </div>
                    </div>
                </div>
            </div>
        </form>
    </div>
</div>

<div class="card mb-3" id="auth">
    <div class="card-header bg-light fw-semibold py-2">
        <i class="bi bi-shield-lock me-1"></i>Authentication
    </div>
    <div class="table-responsive">
        <table class="table mb-0 align-middle">
            <thead class="table-light">
                <tr>
                    <th>Setting</th>
                    <th>Effective</th>
                    <th>Source</th>
                    <th>Notes</th>
                </tr>
            </thead>
            <tbody>
                <tr>
                    <td><i class="bi bi-key me-1"></i>Admin password</td>
                    <td>
                        {% if auth_enabled %}
                        <span class="badge bg-success"><i class="bi bi-check-lg me-1"></i>configured</span>
                        {% else %}
                        <span class="badge bg-warning text-dark">
                            <i class="bi bi-unlock me-1"></i>open mode
                        </span>
                        {% endif %}
                    </td>
                    <td><span class="badge bg-light text-dark border">env WITHCACHE_ADMIN_PASSWORD</span></td>
                    <td class="text-muted small">
                        When set, POST admin routes + UI gate on a session
                        cookie. When unset, the control plane is open
                        (LAN-only deploy). Byte-serving stays open
                        regardless so bty can pull from a sibling
                        container.
                    </td>
                </tr>
                <tr>
                    <td><i class="bi bi-fingerprint me-1"></i>Session secret</td>
                    <td>
                        {% if session_secret_from_env %}
                        <span class="badge bg-info text-dark">from env</span>
                        {% else %}
                        <code>&lt;data-dir&gt;/session-secret</code>
                        {% endif %}
                    </td>
                    <td><span class="badge bg-light text-dark border">env WITHCACHE_SESSION_SECRET</span></td>
                    <td class="text-muted small">
                        HMAC key signing the <code>withcache-token</code>
                        cookie. Persisted to disk when env unset so
                        cookies survive restarts.
                    </td>
                </tr>
            </tbody>
        </table>
    </div>
</div>
{% endblock %}