{% import "partials/mcp_fields.html" as mcp %}
{% from "components.html" import closer, scrim with context %}
{% macro input(name, value, label="", placeholder="", mono=false, error="", inline=true) -%}
    <label class="field">
        {% if label %}<span class="field__label">{{ label }}</span>{% endif %}
        <span class="field__box">
            <input class="field__input{{ " run__mono" if mono }}"
                   type="text"
                   name="{{ name }}"
                   value="{{ value }}"
                   placeholder="{{ placeholder }}"
                   aria-label="{{ label or name }}"
                   {% if error %}required{% endif %}>
        </span>
        {% if error and inline %}<span class="field__error">{{ error }}</span>{% endif %}
    </label>
{%- endmacro %}
{% macro choose(name, value, options, label="", change="") -%}
    <label class="field">
        {% if label %}<span class="field__label">{{ label }}</span>{% endif %}
        <select class="field__box field__select"
                name="{{ name }}"
                {% if change %}hx-post="/policies/new" hx-trigger="change" hx-target="#overlay" hx-vals='{"step": "{{ change }}"}'{% endif %}
                aria-label="{{ label or name }}">
            {% for option in options %}
                <option value="{{ option }}" {% if option == value %}selected{% endif %}>{{ option }}</option>
            {% endfor %}
        </select>
    </label>
{%- endmacro %}
{% macro credential(name, value) -%}
    <label class="field">
        <span class="field__label">Credential</span>
        <select class="field__box field__select"
                name="{{ name }}"
                aria-label="Credential"
                required>
            {% if value not in secrets %}<option value="" selected>{{ "pick a secret" if secrets else "no secrets yet" }}</option>{% endif %}
            {% for secret, note in secrets.items() %}
                <option value="{{ secret }}"
                        {% if secret == value %}selected{% endif %}>{{ secret }} · {{ note }}</option>
            {% endfor %}
        </select>
        <span class="field__error">required · a secret from the list</span>
        {% if not secrets %}<a class="card__link" href="/secrets">Add a secret</a>{% endif %}
    </label>
{%- endmacro %}
{% macro step(value, label, klass="policy__add") -%}
    <button class="{{ klass }}"
            type="submit"
            name="step"
            value="{{ value }}"
            formnovalidate>{{ label }}</button>
{%- endmacro %}
{% macro rules(name, title) -%}
    {% set items = form.items(name) %}
    <h3 class="run__card-title profile__section">{{ title }} · {{ items | length }} OF {{ limits[name] }}</h3>
    {% if items %}
        <div class="policy__rule policy__rule--head">
            <span class="field__label">Protocol</span>
            <span class="field__label">Host</span>
            <span class="field__label">IP</span>
        </div>
    {% endif %}
    {% for item in items %}
        <div class="policy__rule">
            {{ choose(name ~ "." ~ loop.index0 ~ ".protocol", item.protocol, protocols) }}
            {{ input(name ~ "." ~ loop.index0 ~ ".host", item.host, placeholder="—") }}
            {{ input(name ~ "." ~ loop.index0 ~ ".ip", item.ip, placeholder="—", mono=true) }}
            {{ step("drop:" ~ name ~ ":" ~ loop.index0, "×", "policy__drop") }}
        </div>
    {% endfor %}
    {% if not form.full(name) %}{{ step("add:" ~ name, "+ Add " ~ name ~ " rule") }}{% endif %}
{%- endmacro %}
{{ scrim("/policies") }}
<section class="panel panel--dialog panel--register"
         role="dialog"
         aria-label="New policy">
    <header class="panel__header">
        <div class="panel__title">
            <h2 class="panel__name">New policy</h2>
            {{ closer("/policies") }}
        </div>
        <p class="panel__facts">{{ form_note }}</p>
    </header>
    <form class="dialog"
          method="post"
          action="/policies/new"
          hx-post="/policies/new"
          hx-target="#overlay">
        <input type="hidden" name="kind" value="{{ form.kind }}">
        <div class="dialog__body">
            <div class="dialog__fields">
                <div class="field">
                    <span class="field__label">Kind</span>
                    <div class="filters policy__kinds">
                        {% for key, label in kinds.items() %}
                            <a class="filter{{ " filter--active" if key == form.kind }}"
                               href="/policies/new?kind={{ key }}"
                               hx-get="/policies/new?kind={{ key }}"
                               hx-target="#overlay">{{ label }}</a>
                        {% endfor %}
                    </div>
                </div>
                {{ input("name", form.name, "Name", form.kind ~ "_alpha", mono=true, error="required · a policy name") }}
                <span class="field__hint">required · filled in as {{ form.kind }}_alpha, {{ form.kind }}_beta… · unique among {{ form.kind }} policies · shown in every list instead of the id</span>
                {% if form.kind == "mount" %}
                    <h3 class="run__card-title profile__section">WORKSPACE</h3>
                    <div class="policy__workspace">
                        {{ input("workspace", form.workspace, "Host path", "/srv/alpha", mono=true, error="required", inline=false) }}
                        {{ choose("workspace_mode", form.workspace_mode, modes, "Mode") }}
                    </div>
                    <span class="field__error">required · a host directory under an allowed root</span>
                    <span class="field__hint">{{ workspace_hint }}</span>
                    {% set items = form.items("home") %}
                    <h3 class="run__card-title profile__section">HOME · {{ items | length }} OF {{ limits.home }}</h3>
                    {% if items %}
                        <div class="policy__home policy__rule--head">
                            <span class="field__label">Host path</span>
                            <span class="field__label">Guest path under /home/naos</span>
                            <span class="field__label">Mode</span>
                        </div>
                    {% endif %}
                    {% for item in items %}
                        <div class="policy__home">
                            {{ input("home." ~ loop.index0 ~ ".host_path", item.host_path, mono=true) }}
                            {{ input("home." ~ loop.index0 ~ ".guest_path", item.guest_path, mono=true) }}
                            {{ choose("home." ~ loop.index0 ~ ".mode", item.mode, modes) }}
                            {{ step("drop:home:" ~ loop.index0, "×", "policy__drop") }}
                        </div>
                    {% endfor %}
                    {% if not form.full("home") %}{{ step('add:home', '+ Add home mount') }}{% endif %}
                {% elif form.kind == "network" %}
                    {{ rules('allow', 'ALLOW') }}
                    {{ rules('deny', 'DENY') }}
                {% elif form.kind == "shell" %}
                    <h3 class="run__card-title profile__section">CAPABILITIES · {{ form.allow | length }} SELECTED</h3>
                    <div class="policy__capabilities">
                        {% for name, note in capabilities.items() %}
                            <label class="policy__capability">
                                <input type="checkbox"
                                       name="cap.{{ name }}"
                                       {% if name in form.allow %}checked{% endif %}>
                                <code>{{ name }}</code>
                                <span class="table__secondary">{{ note }}</span>
                            </label>
                        {% endfor %}
                    </div>
                {% elif form.kind == "model" %}
                    <h3 class="run__card-title profile__section">BUDGET · PER RUN</h3>
                    <div class="dialog__grid">
                        {{ input("max_input", form.max_input, "Max input tokens", "2000000", mono=true) }}
                        {{ input("max_output", form.max_output, "Max output tokens", "200000", mono=true) }}
                    </div>
                    {% set items = form.items("providers") %}
                    <h3 class="run__card-title profile__section">PROVIDERS · {{ items | length }}</h3>
                    {% for item in items %}
                        {% set at = "providers." ~ loop.index0 ~ "." %}
                        <div class="policy__server-form">
                            <div class="policy__server-head">
                                <strong>Provider {{ item.name or loop.index }}</strong>
                                {{ step("drop:providers:" ~ loop.index0, "Remove", "policy__remove") }}
                            </div>
                            <div class="policy__server-row policy__server-row--name">
                                {{ input(at ~ "name", item.name, "Name", "alpha", mono=true, error="required") }}
                                {{ input(at ~ "url", item.url, "URL", "https://api.example.com", mono=true, error="required") }}
                            </div>
                            <div class="dialog__grid">
                                {{ choose(at ~ "api", item.api, dialects, "API", "dialect:providers:" ~ loop.index0) }}
                                {{ input(at ~ "models", item.models, "Models", "alpha-large, alpha-mini", mono=true, error="required · at least one model") }}
                            </div>
                            {% set offered = form.suggested(item) %}
                            {% set adding = "model:providers:" ~ loop.index0 ~ ":" %}
                            {% if offered %}
                                <div class="policy__suggest">
                                    <span class="field__hint">add a model</span>
                                    {% for model in offered %}
                                        {{ step(adding ~ model, model, "policy__model") }}
                                    {% endfor %}
                                </div>
                            {% endif %}
                            <div class="policy__server-row policy__server-row--limits">
                                {{ credential(at ~ "credential", item.credential) }}
                                {{ input(at ~ "timeout", item.timeout, "Timeout, s") }}
                                {{ input(at ~ "requests", item.requests, "Requests / min") }}
                            </div>
                        </div>
                    {% endfor %}
                    {% if not form.full("providers") %}{{ step('add:providers', '+ Add provider') }}{% endif %}
                {% else %}
                    {{ mcp.rules(form, servers, effects) }}
                    {{ mcp.grants(form, secrets) }}
                {% endif %}
                <span class="field__hint">{{ form_hint }}</span>
                <span class="dialog__invalid"></span>
            </div>
            {% if notice %}<p class="dialog__error">{{ notice }}</p>{% endif %}
        </div>
        <footer class="dialog__footer dialog__footer--end">
            <div class="dialog__actions">
                <a class="button button--outline"
                   href="/policies"
                   {% if not standalone %}hx-get="/overlay/close" hx-target="#overlay"{% endif %}>Cancel</a>
                <button class="button" type="submit">Create policy</button>
            </div>
        </footer>
    </form>
</section>