{% include "components/_scope_dropdowns.html" %}
<div class="prerun-panel" id="prerun-panel">
    <div class="prerun-header">
        <h2>{% if workflow_title %}{{ workflow_title }}{% else %}Run Recipes{% endif %}</h2>
        <p class="prerun-recipes">{{ recipe_names | join(', ') }}</p>
        <button class="btn-close prerun-close">&times;</button>
    </div>

    <!-- Inline error banner (hidden by default) -->
    <div id="prerun-error" class="prerun-error" style="display:none;"></div>

    <form id="prerun-submit-form" onsubmit="return false;">
        <input type="hidden" name="recipes" value="{{ recipe_names | join(',') }}">
        <input type="hidden" name="_csrf" value="{{ nonce }}">

        <!-- Scope (always visible, not collapsible) -->
        <div class="form-section-static">
            <div class="form-section-static-title">Scope</div>
            {% if show_cve and show_version_fields %}
            <div class="form-hint-info">CVE and Version Comparison recipes require the fields below. Leave empty to skip those recipes.</div>
            {% endif %}
            {# For comparison (meta-compare) runs, scope is baked into the axis.
               The L/R-override fields below are the real scope control.
               Hide the generic project/folder/version pickers to avoid confusion. #}
            {% if not show_left_right_override %}
            <div class="form-group">
                <label for="pre-folder">&#128193; Folder filter</label>
                <select id="pre-folder" name="folder_filter"
                        data-value="{{ state.get('folder_filter', '') }}">
                    <option value="">Any folder</option>
                </select>
            </div>
            <div class="form-group">
                <label for="pre-project">&#128196; Project filter</label>
                <select id="pre-project" name="project_filter"
                        data-value="{{ state.get('project_filter', '') }}">
                    <option value="">All projects</option>
                </select>
                {% if show_project_required %}
                <small class="form-hint-warning">Required for Remediation Package</small>
                {% endif %}
            </div>
            <div class="form-group">
                <label for="pre-version">&#127991; Version filter</label>
                <select id="pre-version" name="version_filter"
                        data-value="{{ state.get('version_filter', '') }}">
                    <option value="">(all versions)</option>
                </select>
            </div>
            {% if show_current_version_only %}
            <div class="form-group form-row">
                <label for="pre-cvo">Current version only</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-cvo" name="current_version_only"
                           {% if state.get('current_version_only', True) %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {% endif %}
            {# Products only FIRST: it picks the population, and Standalone then
               decides whether each row carries its dependencies. #}
            {% if show_product_only %}
            <div class="form-group form-row">
                <label for="pre-product-only">Products only (roll up dependencies)</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-product-only" name="product_only"
                           {% if state.get('product_only') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {# One engine config serves every recipe in the launch, so say that
               here — a batch containing a non-portfolio recipe is narrowed too. #}
            <small class="form-hint">Narrows the whole run{% if recipe_names | length > 1 %}, including the other {{ recipe_names | length - 1 }} report(s) in this launch{% endif %}.</small>
            {% endif %}
            {% if show_standalone %}
            <div class="form-group form-row">
                <label for="pre-standalone">Standalone (skip dependencies)</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-standalone" name="standalone"
                           {% if state.get('standalone') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {% endif %}
            {% endif %}
            {# Period + Custom date range — only operational recipes whose pipeline
               trims by date (show_period). This also hides them for meta-compare
               runs (comparisons aren't period recipes; the engine ignores --period
               for them — report_engine._process_axis_compound). #}
            {% if show_period %}
            <div class="form-group">
                <label for="pre-period">Period</label>
                <input type="text" id="pre-period" name="period"
                       value="{{ state.get('period', '30d') }}" placeholder="30d, 2m, 90d">
            </div>
            <div class="form-group">
                <label>Custom date range</label>
                <div class="prerun-range">
                    <input type="date" id="pre-start" name="start" value="{{ state.get('start', '') }}">
                    <span class="prerun-range-sep">to</span>
                    <input type="date" id="pre-end" name="end" value="{{ state.get('end', '') }}">
                </div>
                <small class="form-hint">Set both to use a custom range (overrides Period).</small>
            </div>
            {% endif %}

            {% if show_component %}
            <div class="form-group">
                <label for="pre-component">&#128230; Component name</label>
                <input type="text" id="pre-component" name="component_filter"
                       value="{{ state.get('component_filter', '') }}"
                       placeholder="e.g. openssl, busybox">
                <small class="form-hint">Contains match — partial names work</small>
                {# B11 #24: dropped the circular "Recommended for …" hint; those
                   recipes set requires_component (B4) so show the accurate
                   Required marker instead (mirrors the card-config back). #}
                {% if requires_component %}
                <small class="form-hint-warning">Required to run this report</small>
                {% endif %}
            </div>
            {% endif %}

            {% if show_cve %}
            <div class="form-group">
                <label for="pre-cve">CVE ID(s)</label>
                <input type="text" id="pre-cve" name="cve_filter"
                       value="{{ state.get('cve_filter', '') }}"
                       placeholder="CVE-2024-1234, CVE-2024-5678">
            </div>
            {% endif %}

            {% if show_finding_types %}
            <div class="form-group">
                <label>Finding types</label>
                <div class="finding-type-checkboxes">
                    {% set current_ft = state.get('finding_types', 'cve') %}
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="cve" {% if 'cve' in current_ft %}checked{% endif %}> CVE</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="sast" {% if 'sast' in current_ft %}checked{% endif %}> SAST</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="thirdparty" {% if 'thirdparty' in current_ft %}checked{% endif %}> 3rd Party</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="credentials" {% if 'credentials' in current_ft %}checked{% endif %}> Credentials</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="config_issues" {% if 'config_issues' in current_ft %}checked{% endif %}> Config</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ft_cb" value="crypto_material" {% if 'crypto_material' in current_ft %}checked{% endif %}> Crypto</label>
                </div>
                <input type="hidden" id="pre-ft" name="finding_types" value="{{ current_ft }}">
            </div>
            {% endif %}

            {# PR3.3a: Left/Right scope-ref override for comparison (meta-compare) runs.
               Rendered only when show_left_right_override is True (axis-bearing CompoundRecipe).
               Pre-filled with baked axis defaults; user may override for this run only.
               Submitted values are run-only and never persisted (Decision 11). #}
            {% if show_left_right_override %}
            <div class="form-group">
                <label for="pre-left-scope">&#8592; Left scope (override)</label>
                <input type="text" id="pre-left-scope" name="left_scope"
                       value="{{ axis_left_default }}"
                       placeholder="e.g. project:DeviceA@v1">
                <small class="form-hint">Overrides the saved Left scope for this run only. Leave as-is to use the saved default.</small>
            </div>
            <div class="form-group">
                <label for="pre-right-scope">&#8594; Right scope (override)</label>
                <input type="text" id="pre-right-scope" name="right_scope"
                       value="{{ axis_right_default }}"
                       placeholder="e.g. project:DeviceA@v2">
                <small class="form-hint">Overrides the saved Right scope for this run only. Leave as-is to use the saved default.</small>
            </div>
            {% endif %}

            {% if show_version_fields %}
            {# Comparison mode toggle — see _card_config.html for the rationale.
               Initial state derives from whether a saved pair exists; the toggle
               has no name= (pure UX over the empty-vs-set-pair semantics). #}
            {% set _vc_pair = state.get('baseline_version') and state.get('current_version') %}
            <div class="form-group form-row">
                <label for="pre-vc-all">All versions</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-vc-all" {% if not _vc_pair %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <small class="form-hint">On: compare <b>every</b> version of the scoped project (latest vs previous) — the pickers below stay inactive. Off: pick a specific baseline + current pair (works across projects too).</small>

            {# B11 #19a: pickers stay VISIBLE (dimmed + inert) when All-versions is
               on, so they're discoverable (was `hidden`). #}
            <div class="pre-vc-pair{% if not _vc_pair %} vc-pair-inert{% endif %}"{% if not _vc_pair %} inert{% endif %}>
            <div class="form-group">
                <label for="pre-bv">Baseline version</label>
                <div class="version-picker-row">
                    <select id="pre-bv-project" class="version-picker-select">
                        <option value="">(pick a project)</option>
                    </select>
                    <select id="pre-bv-version" class="version-picker-select" disabled>
                        <option value="">(select project first)</option>
                    </select>
                </div>
                <input type="text" id="pre-bv" name="baseline_version"
                       value="{{ state.get('baseline_version', '') }}"
                       placeholder="Or paste version ID directly">
            </div>
            <div class="form-group">
                <label for="pre-cv">Current version</label>
                <div class="version-picker-row">
                    <select id="pre-cv-project" class="version-picker-select">
                        <option value="">(pick a project)</option>
                    </select>
                    <select id="pre-cv-version" class="version-picker-select" disabled>
                        <option value="">(select project first)</option>
                    </select>
                </div>
                <input type="text" id="pre-cv" name="current_version"
                       value="{{ state.get('current_version', '') }}"
                       placeholder="Or paste version ID directly">
            </div>
            </div>
            {% endif %}

            {# Opens for a triage recipe OR any autotriage-capable one: the
               VEX-apply control below is inside this block, so gating on
               show_triage alone made show_vex_apply dead for Reachability VEX
               Coverage (in AUTOTRIAGE_RECIPES, not TRIAGE_TAB_RECIPES). #}
            {% if show_triage or show_vex_apply %}
            {# Top N / Triage N are TP + Config Analysis Triage only — RVC never
               truncates, so don't offer it a row cap it ignores. #}
            {% if show_triage %}
            <div class="form-group">
                <label for="pre-top">Top N findings</label>
                <input type="number" id="pre-top" name="top"
                       value="{{ state.get('top', '') }}" min="0" step="1"
                       placeholder="0 = show all">
                <small class="form-hint">Limit output to the top N findings by score. Leave empty or 0 to show all.</small>
            </div>
            <div class="form-group">
                <label for="pre-triage">Triage N findings</label>
                <input type="number" id="pre-triage" name="triage"
                       value="{{ state.get('triage', '') }}" min="0" step="1"
                       placeholder="0 = all eligible">
                <small class="form-hint">Generate VEX recommendations for only the top N findings. Full list is still shown.</small>
            </div>
            {% endif %}
            {# tp_gate is Triage-Prioritization-only (show_tp_gate); top / triage
               above are shared with Config Analysis Triage. vex_override is gated
               separately below — it is meaningful wherever autotriage is. #}
            {% if show_tp_gate %}
            <div class="form-group">
                <label for="pre-tp-gate">Triage gate</label>
                <select id="pre-tp-gate" name="tp_gate">
                    <option value="" {% if not state.get('tp_gate') %}selected{% endif %}>— none —</option>
                    <option value="GATE_1" {% if state.get('tp_gate') == 'GATE_1' %}selected{% endif %}>GATE_1</option>
                    <option value="GATE_2" {% if state.get('tp_gate') == 'GATE_2' %}selected{% endif %}>GATE_2</option>
                    <option value="NONE" {% if state.get('tp_gate') == 'NONE' %}selected{% endif %}>NONE</option>
                </select>
            </div>
            {% endif %}
            {# Reachable wherever autotriage is, not just for Triage Prioritization.
               For Reachability VEX Coverage this is the ONLY way to act on the
               needs-review class the report reports: those gaps carry a status a
               person set, so the applier skips them unless --vex-override. #}
            {% if show_tp_gate or show_vex_apply %}
            <div class="form-group form-row">
                <label for="pre-vex-override">VEX override</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-vex-override" name="vex_override"
                           {% if state.get('vex_override') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {% endif %}

            {# ── SP2: destructive VEX-write apply (autotriage) — every recipe in
                 AUTOTRIAGE_RECIPES (TP, False Positive Analysis, Reachability VEX
                 Coverage). Gate on show_vex_apply, never show_triage. ── #}
            {% if show_vex_apply %}
            <div class="form-group form-row">
                <label for="pre-autotriage">Auto-apply VEX to platform</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-autotriage" name="autotriage"
                           {% if state.get('autotriage') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <div class="form-group">
                <label>Limit to VEX statuses (optional)</label>
                {% set cur_as = state.get('autotriage_status', '') %}
                <div class="finding-type-checkboxes">
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="EXPLOITABLE" {% if 'EXPLOITABLE' in cur_as.split(',') %}checked{% endif %}> EXPLOITABLE</label>
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="IN_TRIAGE" {% if 'IN_TRIAGE' in cur_as.split(',') %}checked{% endif %}> IN_TRIAGE</label>
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="NOT_AFFECTED" {% if 'NOT_AFFECTED' in cur_as.split(',') %}checked{% endif %}> NOT_AFFECTED</label>
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="FALSE_POSITIVE" {% if 'FALSE_POSITIVE' in cur_as.split(',') %}checked{% endif %}> FALSE_POSITIVE</label>
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="RESOLVED" {% if 'RESOLVED' in cur_as.split(',') %}checked{% endif %}> RESOLVED</label>
                    <label class="finding-type-cb"><input type="checkbox" name="as_cb" value="RESOLVED_WITH_PEDIGREE" {% if 'RESOLVED_WITH_PEDIGREE' in cur_as.split(',') %}checked{% endif %}> RESOLVED_WITH_PEDIGREE</label>
                </div>
                <input type="hidden" id="pre-autotriage-status" name="autotriage_status"
                       value="{{ state.get('autotriage_status', '') }}">
                <small class="form-hint">Empty = apply all recommended statuses.</small>
            </div>
            <div class="form-group form-row">
                <label for="pre-dry-run">Dry run (preview only)</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-dry-run" name="dry_run">
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <small class="form-hint form-hint-warning">Auto-apply <b>writes VEX statuses to the platform</b> when this report runs. Use Dry run first to preview; you'll confirm before any real write. (VEX override, above, only affects in-report recommendations.)</small>
            {% endif %}
            {% endif %}

            {% if show_license %}
            <div class="form-group">
                <label for="pre-license">License filter</label>
                <input type="text" id="pre-license" name="license_filter"
                       value="{{ state.get('license_filter', '') }}"
                       placeholder="e.g. GPL, MIT">
            </div>
            {% endif %}

            {% if show_open_only %}
            <div class="form-group form-row">
                <label for="pre-open-only">Open findings only</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-open-only" name="open_only"
                           {% if state.get('open_only') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {% endif %}

            {% if show_baseline_date %}
            <div class="form-group">
                <label for="pre-baseline-date">Baseline date</label>
                <input type="date" id="pre-baseline-date" name="baseline_date"
                       value="{{ state.get('baseline_date', '') }}">
            </div>
            {% endif %}

            {% if show_detailed %}
            <div class="form-group form-row">
                <label for="pre-detailed">Detailed output</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-detailed" name="detailed"
                           {% if state.get('detailed') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            {% endif %}
        </div>

        {% if show_ai %}
        <!-- AI Settings -->
        <details open class="form-section">
            <summary class="form-section-title">AI Settings</summary>
            <div class="form-group form-row">
                <label for="pre-ai">Enable AI</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-ai" name="ai"
                           {% if state.get('ai') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <div class="form-group">
                <label for="pre-ai-depth">AI depth</label>
                <select id="pre-ai-depth" name="ai_depth">
                    <option value="summary" {% if state.get('ai_depth', 'summary') == 'summary' %}selected{% endif %}>Summary</option>
                    <option value="full" {% if state.get('ai_depth') == 'full' %}selected{% endif %}>Full</option>
                </select>
            </div>
            <div class="form-group form-row">
                <label for="pre-ai-prompts">Export AI prompts</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-ai-prompts" name="ai_prompts"
                           {% if state.get('ai_prompts') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>

            {# Deployment context reaches the LLM for 4 of the 5 AI recipes —
               NOT Component Remediation Package (show_deployment_context). #}
            {% if show_deployment_context %}
            <!-- Deployment Context (nested inside AI Settings) -->
            <details class="form-subsection">
                <summary class="form-subsection-title">Deployment Context</summary>
                <div class="form-group">
                    <label for="pre-product-type">Product type</label>
                    <select id="pre-product-type" name="product_type">
                        <option value="generic" {% if state.get('product_type', 'generic') == 'generic' %}selected{% endif %}>Generic</option>
                        <option value="firmware" {% if state.get('product_type') == 'firmware' %}selected{% endif %}>Firmware</option>
                        <option value="web_app" {% if state.get('product_type') == 'web_app' %}selected{% endif %}>Web App</option>
                        <option value="mobile_app" {% if state.get('product_type') == 'mobile_app' %}selected{% endif %}>Mobile App</option>
                        <option value="library" {% if state.get('product_type') == 'library' %}selected{% endif %}>Library</option>
                        <option value="device_driver" {% if state.get('product_type') == 'device_driver' %}selected{% endif %}>Device Driver</option>
                        <option value="container" {% if state.get('product_type') == 'container' %}selected{% endif %}>Container</option>
                        <option value="desktop_app" {% if state.get('product_type') == 'desktop_app' %}selected{% endif %}>Desktop App</option>
                    </select>
                </div>
                <div class="form-group">
                    <label for="pre-network-exposure">Network exposure</label>
                    <select id="pre-network-exposure" name="network_exposure">
                        <option value="unknown" {% if state.get('network_exposure', 'unknown') == 'unknown' %}selected{% endif %}>Unknown</option>
                        <option value="air_gapped" {% if state.get('network_exposure') == 'air_gapped' %}selected{% endif %}>Air-gapped</option>
                        <option value="internal_only" {% if state.get('network_exposure') == 'internal_only' %}selected{% endif %}>Internal Only</option>
                        <option value="internet_facing" {% if state.get('network_exposure') == 'internet_facing' %}selected{% endif %}>Internet-facing</option>
                        <option value="mixed" {% if state.get('network_exposure') == 'mixed' %}selected{% endif %}>Mixed</option>
                    </select>
                </div>
                <div class="form-group">
                    <label for="pre-regulatory">Regulatory frameworks</label>
                    <input type="text" id="pre-regulatory" name="regulatory"
                           value="{{ state.get('regulatory', '') }}"
                           placeholder="e.g. IEC-62443, FDA, NIST 800-53">
                </div>
                <div class="form-group">
                    <label for="pre-deploy-notes">Deployment notes</label>
                    <textarea id="pre-deploy-notes" name="deployment_notes"
                              maxlength="500" rows="3"
                              placeholder="Additional context about the deployment environment...">{{ state.get('deployment_notes', '') }}</textarea>
                    <small class="form-hint char-counter">
                        <span id="pre-deploy-notes-count">{{ state.get('deployment_notes', '') | length }}</span>/500
                    </small>
                </div>
                {# SP3: AI deployment context file #}
                <div class="form-group">
                    <label>AI deployment context (YAML)</label>
                    <div class="fs-upload" data-kind="context" data-target="pre-context-file">
                        <input type="file" class="fs-upload-input" accept=".yaml,.yml">
                        <span class="fs-upload-name">{{ state.get('context_file','').rsplit('/', 1)[-1] or 'none' }}</span>
                        <button type="button" class="fs-upload-clear" aria-label="Clear">&times;</button>
                    </div>
                    <input type="hidden" id="pre-context-file" name="context_file"
                           value="{{ state.get('context_file', '') }}">
                </div>
            </details>
            {% endif %}

            {# Threat context — Component-Remediation-Package-only (show_threat_context);
               relocated here from the Scope section to match the card AI tab. #}
            {% if show_threat_context %}
            <div class="form-group">
                <label for="pre-threat-context">Threat context</label>
                <textarea id="pre-threat-context" name="threat_context" rows="3">{{ state.get('threat_context', '') }}</textarea>
            </div>
            {% endif %}
        </details>
        {% endif %}

        {# SP3: scoring file — gated to its consumers (TP / Scan Quality / Config Analysis Triage) #}
        {% if show_scoring %}
        <details class="form-section">
            <summary class="form-section-title">Scoring file</summary>
            <div class="form-group">
                {# B11 #18: label/hint per consumer. #}
                {% if scoring_is_staleness %}<label>Custom staleness thresholds (YAML)</label>
                {% elif scoring_is_triage %}<label>Custom triage scoring weights (YAML)</label>
                {% else %}<label>Custom scoring file (YAML)</label>{% endif %}
                <div class="fs-upload" data-kind="scoring" data-target="pre-scoring-file">
                    <input type="file" class="fs-upload-input" accept=".yaml,.yml">
                    <span class="fs-upload-name">{{ state.get('scoring_file','').rsplit('/', 1)[-1] or 'none' }}</span>
                    <button type="button" class="fs-upload-clear" aria-label="Clear">&times;</button>
                </div>
                <input type="hidden" id="pre-scoring-file" name="scoring_file"
                       value="{{ state.get('scoring_file', '') }}">
                {% if scoring_is_staleness %}<small class="form-hint">Scan-age staleness thresholds (days), e.g. <code>staleness_thresholds: {fresh: 30, aging: 90, stale: 365}</code>.</small>
                {% elif scoring_is_triage %}<small class="form-hint">Triage scoring weights — reachability / exploitability / EPSS / CVSS and gate cutoffs.</small>
                {% else %}<small class="form-hint">Custom scoring weights / staleness thresholds.</small>{% endif %}
            </div>
        </details>
        {% endif %}

        {# Filters — hide the whole section when no child filter is consumed by
           the selected recipe(s) (Round-1 M1-11). #}
        {% if show_component_match or show_component_version or show_detected_after or show_min_severity or show_scan_filters %}
        <details class="form-section">
            <summary class="form-section-title">Filters</summary>
            {% if show_component_match %}
            <div class="form-group">
                <label for="pre-component-match">Component match</label>
                <select id="pre-component-match" name="component_match">
                    <option value="contains" {% if state.get('component_match', 'contains') == 'contains' %}selected{% endif %}>contains</option>
                    <option value="exact" {% if state.get('component_match') == 'exact' %}selected{% endif %}>exact</option>
                </select>
            </div>
            {% endif %}
            {% if show_component_version %}
            <div class="form-group">
                {# B11 #28: version RANGE, not a single version. #}
                <label for="pre-component-version">Component version range</label>
                <input type="text" id="pre-component-version" name="component_version"
                       value="{{ state.get('component_version', '') }}"
                       placeholder="e.g. 1.2.11, &lt;2.0, &gt;=1.0,&lt;2.0">
                <small class="form-hint">Exact version or a range — <code>1.2.11</code>, <code>&lt;2.0</code>, <code>&gt;=1.0,&lt;2.0</code>.</small>
            </div>
            {% endif %}
            {# Products only / Standalone moved up into Scope — they choose which
               projects the report covers, so they belong with the pickers. #}
            {% if show_detected_after %}
            <div class="form-group">
                <label for="pre-detected-after">Detected after</label>
                <input type="date" id="pre-detected-after" name="detected_after"
                       value="{{ state.get('detected_after', '') }}">
            </div>
            {% endif %}
            {% if show_min_severity %}
            <div class="form-group">
                <label for="pre-min-severity">Minimum severity</label>
                {% set cur_ms = state.get('min_severity', '')|lower %}
                <select id="pre-min-severity" name="min_severity">
                    <option value="" {% if not cur_ms %}selected{% endif %}>All severities</option>
                    <option value="critical" {% if cur_ms == 'critical' %}selected{% endif %}>Critical only</option>
                    <option value="high" {% if cur_ms == 'high' %}selected{% endif %}>High and above</option>
                    <option value="medium" {% if cur_ms == 'medium' %}selected{% endif %}>Medium and above</option>
                    <option value="low" {% if cur_ms == 'low' %}selected{% endif %}>Low and above</option>
                </select>
                <small class="form-hint">Audit only findings at or above this severity. Any floor excludes <code>none</code>/<code>info</code> — leave on <em>All severities</em> to cover everything.</small>
            </div>
            {% endif %}
            {% if show_scan_filters %}
            <div class="form-group">
                <label>Scan types</label>
                <div class="finding-type-checkboxes">
                    {% set cur_st = state.get('scan_types', '') %}
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="SCA" {% if 'SCA' in cur_st.split(',') %}checked{% endif %}> SCA</label>
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="SAST" {% if 'SAST' in cur_st.split(',') %}checked{% endif %}> SAST</label>
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="CONFIG" {% if 'CONFIG' in cur_st.split(',') %}checked{% endif %}> CONFIG</label>
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="SOURCE_SCA" {% if 'SOURCE_SCA' in cur_st.split(',') %}checked{% endif %}> SOURCE_SCA</label>
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="SBOM_IMPORT" {% if 'SBOM_IMPORT' in cur_st.split(',') %}checked{% endif %}> SBOM_IMPORT</label>
                    <label class="finding-type-cb"><input type="checkbox" name="st_cb" value="VULNERABILITY_ANALYSIS" {% if 'VULNERABILITY_ANALYSIS' in cur_st.split(',') %}checked{% endif %}> VULNERABILITY_ANALYSIS</label>
                </div>
                <input type="hidden" id="pre-scan-types" name="scan_types" value="{{ state.get('scan_types', '') }}">
            </div>
            <div class="form-group">
                <label>Scan statuses</label>
                <div class="finding-type-checkboxes">
                    {% set cur_ss = state.get('scan_statuses', '') %}
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="INITIAL" {% if 'INITIAL' in cur_ss.split(',') %}checked{% endif %}> INITIAL</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="PENDING_UPLOAD" {% if 'PENDING_UPLOAD' in cur_ss.split(',') %}checked{% endif %}> PENDING_UPLOAD</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="UPLOAD_FAILED" {% if 'UPLOAD_FAILED' in cur_ss.split(',') %}checked{% endif %}> UPLOAD_FAILED</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="COMPLETED" {% if 'COMPLETED' in cur_ss.split(',') %}checked{% endif %}> COMPLETED</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="ERROR" {% if 'ERROR' in cur_ss.split(',') %}checked{% endif %}> ERROR</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="STARTED" {% if 'STARTED' in cur_ss.split(',') %}checked{% endif %}> STARTED</label>
                    <label class="finding-type-cb"><input type="checkbox" name="ss_cb" value="NOT_APPLICABLE" {% if 'NOT_APPLICABLE' in cur_ss.split(',') %}checked{% endif %}> NOT_APPLICABLE</label>
                </div>
                <input type="hidden" id="pre-scan-statuses" name="scan_statuses" value="{{ state.get('scan_statuses', '') }}">
            </div>
            {% endif %}
        </details>
        {% endif %}

        {# Human Readable SBOM only (show_sbom_options / SBOM_OPTION_RECIPES).
           Its own section rather than a tail on Filters: two of the three
           toggle COLUMNS rather than filtering anything, and for this recipe
           the Filters section carries no other control, so its heading would
           have been the only label on the page for a group it does not
           describe. #}
        {% if show_sbom_options %}
        <details class="form-section" open>
            <summary class="form-section-title">SBOM options</summary>
            <div class="form-group form-row">
                <label for="pre-include-file-components">Include file components</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-include-file-components"
                           name="include_file_components"
                           {% if state.get('include_file_components') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <small class="form-hint">Off by default — file entries are SAST placeholders with no license or supplier data.</small>
            <div class="form-group form-row">
                <label for="pre-policy-status">Policy columns</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-policy-status" name="policy_status"
                           {% if state.get('policy_status', True) %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <small class="form-hint">Per-component violation and warning counts. On by default.</small>
            <div class="form-group form-row">
                <label for="pre-finding-counts">Finding counts</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-finding-counts" name="finding_counts"
                           {% if state.get('finding_counts', True) %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <small class="form-hint">Total findings plus the Critical/High/Medium/Low breakdown. On by default.</small>
        </details>
        {% endif %}

        <!-- Advanced Options (collapsed by default) -->
        <details class="form-section">
            <summary class="form-section-title">Advanced Options</summary>
            <div class="form-group">
                <label for="pre-output">Output directory</label>
                <div class="input-with-btn">
                    <input type="text" id="pre-output" name="output_dir"
                           value="{{ state.get('output_dir', './output') }}" placeholder="./output">
                    <button type="button" id="pre-output-browse" class="btn btn-sm btn-default">Browse</button>
                </div>
            </div>
            <div class="form-group form-row">
                <label for="pre-overwrite">Overwrite existing</label>
                <label class="toggle">
                    <input type="checkbox" id="pre-overwrite" name="overwrite"
                           {% if state.get('overwrite') %}checked{% endif %}>
                    <span class="toggle-slider"></span>
                </label>
            </div>
            <div class="form-group">
                <label for="pre-cache-ttl">Cache TTL (0=off)</label>
                <input type="text" id="pre-cache-ttl" name="cache_ttl"
                       value="{{ state.get('cache_ttl', '4') }}" placeholder="4h">
                <small class="form-hint">Examples: 4h, 2d, 30m, 1h30m, or bare number (hours)</small>
            </div>
        </details>

        {# "Save as this report's default" — single-recipe modals only.
           Persists the form via POST /api/cc/card-config so configuring a
           recipe off-card (run bar / palette) graduates it exactly like
           configuring it on the card.  Defaults checked when the recipe is
           needs-setup.  data-requires-cve lets the JS validate the required
           card input before launch.  Hidden for multi-recipe modals. #}
        {% if recipe_names | length == 1 %}
        <div class="form-group form-row prerun-save-default">
            <label for="pre-save-default">Save as this report's default</label>
            <label class="toggle">
                <input type="checkbox" id="pre-save-default" name="save_as_default"
                       data-requires-cve="{{ '1' if requires_cve else '0' }}"
                       data-requires-component="{{ '1' if requires_component else '0' }}"
                       {% if needs_setup %}checked{% endif %}>
                <span class="toggle-slider"></span>
            </label>
        </div>
        {% endif %}

        <div class="prerun-actions">
            <button type="button" class="btn btn-primary" id="btn-run-submit">{{ submit_label | default('Run ' ~ (recipe_names | length) ~ ' recipe' ~ ('s' if recipe_names | length != 1 else ''), true) }}</button>
            <button type="button" class="btn btn-default prerun-close">Cancel</button>
        </div>
    </form>
</div>