{% extends "base.html" %}
{% block title %}Manage services · auth-ingress{% endblock %}
{% block content %}
<div class="page-header"><div><p class="eyebrow">Administration</p><h1>Service entries</h1><p class="muted">Map internal services to protected entry points and group-based access rules.</p></div><a class="button secondary" href="/admin/audit">Audit events</a></div>
{% if error %}<div class="alert" role="alert" tabindex="-1">{{ error }}</div>{% endif %}
{% if summary %}<section class="summary-grid" aria-label="Service management summary">{% for item in summary %}<article class="metric-card metric-{{ item.status }}"><span class="metric-label">{{ item.label }}</span><span class="metric-value">{{ item.value }}</span><p class="metric-hint">{{ item.hint }}</p></article>{% endfor %}</section>{% endif %}

{% set create_state = form_state if form_state.applies_to('service_create') else none %}
<section class="panel">
  <h2>Add service</h2>
  <p class="muted">If validation fails, safe entered values remain here so you only need to fix highlighted fields.</p>
  <form method="post" action="/admin/services" class="form-grid">
    <input type="hidden" name="csrf" value="{{ csrf_token }}">
    <label>Slug
      <input name="slug" pattern="[a-z0-9-]+" value="{{ create_state.value('slug') if create_state else '' }}" required>
      {% if create_state and create_state.error_text('slug') %}<span class="field-error">{{ create_state.error_text('slug') }}</span>{% endif %}
    </label>
    <label>Display name
      <input name="display_name" value="{{ create_state.value('display_name') if create_state else '' }}" required>
      {% if create_state and create_state.error_text('display_name') %}<span class="field-error">{{ create_state.error_text('display_name') }}</span>{% endif %}
    </label>
    <label class="wide">Description
      <input name="description" value="{{ create_state.value('description') if create_state else '' }}">
    </label>
    <label class="wide">Internal destination
      <input name="destination" placeholder="https://app.internal" value="{{ create_state.value('destination') if create_state else '' }}" required>
      {% if create_state and create_state.error_text('destination') %}<span class="field-error">{{ create_state.error_text('destination') }}</span>{% endif %}
    </label>
    <label>Status
      {% set create_status = create_state.value('status', 'enabled') if create_state else 'enabled' %}
      <select name="status">
        <option value="enabled" {% if create_status == 'enabled' %}selected{% endif %}>enabled</option>
        <option value="disabled" {% if create_status == 'disabled' %}selected{% endif %}>disabled</option>
      </select>
      {% if create_state and create_state.error_text('status') %}<span class="field-error">{{ create_state.error_text('status') }}</span>{% endif %}
    </label>
    <label>Groups (comma separated)
      <input name="group_names" value="{{ create_state.value('group_names') if create_state else '' }}" required>
      {% if create_state and create_state.error_text('group_names') %}<span class="field-error">{{ create_state.error_text('group_names') }}</span>{% endif %}
    </label>
    <label><input type="checkbox" name="proxy_enabled" value="true" {% if create_state and create_state.checked('proxy_enabled') %}checked{% endif %}> Full web-app proxy</label>
    <label><input type="checkbox" name="websocket_enabled" value="true" {% if create_state and create_state.checked('websocket_enabled') %}checked{% endif %}> WebSockets
      {% if create_state and create_state.error_text('websocket_enabled') %}<span class="field-error">{{ create_state.error_text('websocket_enabled') }}</span>{% endif %}
    </label>
    <button type="submit">Add service</button>
  </form>
</section>

<div class="stack">
  {% for service in services %}
  {% set edit_state = form_state if form_state.applies_to('service_edit', service.slug) else none %}
  <section class="panel">
    <div class="page-header"><div><p class="eyebrow">Service rule</p><h2>{{ service.display_name }}</h2><p><span class="status status-{{ service.status }}">{{ service.status }}</span> · Groups: {{ service_group_names.get(service.id, 'None') }}</p></div></div>
    <section class="summary-grid" aria-label="{{ service.display_name }} dependency summary">
      <article class="metric-card"><span class="metric-label">Proxy</span><span class="metric-value">{{ 'On' if service.proxy_enabled else 'Off' }}</span><p class="metric-hint">Full web-app proxy capability.</p></article>
      <article class="metric-card"><span class="metric-label">WebSockets</span><span class="metric-value">{{ 'On' if service.websocket_enabled else 'Off' }}</span><p class="metric-hint">Realtime transport setting.</p></article>
      <article class="metric-card"><span class="metric-label">Groups</span><span class="metric-value">{{ service_group_lists.get(service.id, [])|length }}</span><p class="metric-hint">Linked access-control groups.</p></article>
    </section>
    <form method="post" action="/admin/services/{{ service.slug }}" class="form-grid">
      <input type="hidden" name="csrf" value="{{ csrf_token }}">
      <label>Slug
        <input name="slug" value="{{ edit_state.value('slug', service.slug) if edit_state else service.slug }}" required>
        {% if edit_state and edit_state.error_text('slug') %}<span class="field-error">{{ edit_state.error_text('slug') }}</span>{% endif %}
      </label>
      <label>Display name
        <input name="display_name" value="{{ edit_state.value('display_name', service.display_name) if edit_state else service.display_name }}" required>
        {% if edit_state and edit_state.error_text('display_name') %}<span class="field-error">{{ edit_state.error_text('display_name') }}</span>{% endif %}
      </label>
      <label class="wide">Description
        <input name="description" value="{{ edit_state.value('description', service.description or '') if edit_state else service.description or '' }}">
      </label>
      <label class="wide">Internal destination
        <input name="destination" value="{{ edit_state.value('destination', service.destination) if edit_state else service.destination }}" required>
        {% if edit_state and edit_state.error_text('destination') %}<span class="field-error">{{ edit_state.error_text('destination') }}</span>{% endif %}
      </label>
      <label>Status
        {% set edit_status = edit_state.value('status', service.status) if edit_state else service.status %}
        <select name="status">
          <option value="enabled" {% if edit_status == 'enabled' %}selected{% endif %}>enabled</option>
          <option value="disabled" {% if edit_status == 'disabled' %}selected{% endif %}>disabled</option>
        </select>
        {% if edit_state and edit_state.error_text('status') %}<span class="field-error">{{ edit_state.error_text('status') }}</span>{% endif %}
      </label>
      <label>Groups (comma separated)
        <input name="group_names" value="{{ edit_state.value('group_names', service_group_names.get(service.id, '')) if edit_state else service_group_names.get(service.id, '') }}" required>
        {% if edit_state and edit_state.error_text('group_names') %}<span class="field-error">{{ edit_state.error_text('group_names') }}</span>{% endif %}
      </label>
      <label><input type="checkbox" name="proxy_enabled" value="true" {% if (edit_state and edit_state.checked('proxy_enabled')) or (not edit_state and service.proxy_enabled) %}checked{% endif %}> Full web-app proxy</label>
      <label><input type="checkbox" name="websocket_enabled" value="true" {% if (edit_state and edit_state.checked('websocket_enabled')) or (not edit_state and service.websocket_enabled) %}checked{% endif %}> WebSockets
        {% if edit_state and edit_state.error_text('websocket_enabled') %}<span class="field-error">{{ edit_state.error_text('websocket_enabled') }}</span>{% endif %}
      </label>
      <p class="wide">Service host: <code>{{ service_origins.get(service.id) }}</code><br>Compatibility: <span class="status status-{{ service.compatibility_status }}">{{ service.compatibility_status }}</span>{% if service.compatibility_summary %} — {{ service.compatibility_summary }}{% endif %}</p>
      <button type="submit">Save changes</button>
    </form>
    <form method="post" action="/admin/services/{{ service.slug }}/compatibility"><input type="hidden" name="csrf" value="{{ csrf_token }}"><button class="secondary" type="submit">Check compatibility</button></form>
  </section>
  {% endfor %}
</div>
{% endblock %}