{% extends "base.html" %}
{% block title %}Standalone host — {{ plugin.package }}{% endblock %}

{# trust-1: the mutation forms' header bag. The operator action token rides
   ONLY an armed page view (one whose query carried it); the token values
   are per-launch urlsafe secrets, so nothing here can break out of the
   attribute. #}
{% macro action_headers(csrf_token, operator_token) -%}
{"X-CSRF-Token": "{{ csrf_token }}"{% if operator_token %}, "X-Operator-Action-Token": "{{ operator_token }}"{% endif %}}
{%- endmacro %}

{% block content %}
<h1>Standalone host</h1>
<p class="lede">
  One adapter session over one device. No gateway stands behind this host:
  no {{ absent | join(", ") }}.
</p>
{% for device in devices %}
<section class="panel">
  <h2>{{ device.manufacturer }} {{ device.model }}</h2>
  <dl class="device-summary">
    <dt>device</dt><dd><code>{{ device.id }}</code></dd>
    <dt>transport</dt><dd>{{ device.transport }}</dd>
    <dt>connection key</dt><dd><code>{{ device.connection_key }}</code></dd>
    {%- if scan_available and device.port_path %}
    {# The endpoint fields (#385 §1.2): the physical candidate this row names. #}
    <dt>port</dt><dd><code>{{ device.port_path }}</code></dd>
    <dt>USB serial</dt><dd>{{ device.usb_serial or "—" }}</dd>
    {%- endif %}
    <dt>state</dt>
    <dd>
      {%- if connected %}<span class="state state-connected">connected</span>
      {%- else %}<span class="state state-disconnected">disconnected</span>{% endif -%}
    </dd>
  </dl>
  {%- if scan_available and device.port_path %}
  {# The pick flow (#385 §1.5): each confirmed candidate carries its Bind
     action; the bound candidate carries the marker instead. #}
  {%- if binding and binding.port_path == device.port_path %}
  <p><span class="state state-connected">bound endpoint</span></p>
  {%- else %}
  <form method="post" action="/devices/{{ device.id }}/bind"
        hx-post="/devices/{{ device.id }}/bind"
        hx-headers='{{ action_headers(csrf_token, operator_token) }}'>
    <input type="hidden" name="port_path" value="{{ device.port_path }}">
    <button type="submit">Bind this port</button>
  </form>
  {%- endif %}
  {%- endif %}
  <p><a class="action" href="/devices/{{ device.id }}">Open device page</a></p>
  {% if has_presentation %}
  <h3>Presentation pages</h3>
  <ul class="page-links">
    {%- for page in pages %}
    <li><a href="/pages/{{ page.id }}">{{ page.title }}</a></li>
    {%- endfor %}
  </ul>
  {% else %}
  <p class="hint">This plugin declares no presentation documents; the device page serves its readings.</p>
  {% endif %}
</section>
{% endfor %}

{% if scan_available %}
<section class="panel">
  <h2>Discovery</h2>
  {# NFR-O3: serial hosts scan explicitly; loading this page never transmits. #}
  {% if scan_error %}
  <div class="notice notice-refused" role="alert">
    <p><strong>Scan refused</strong> — {{ scan_error.code }}: {{ scan_error.message }}</p>
  </div>
  {% endif %}
  {% if binding_error %}
  <div class="notice notice-refused" role="alert">
    <p><strong>Bind refused</strong> — {{ binding_error.code }}: {{ binding_error.message }}</p>
  </div>
  {% endif %}
  {# trust-1: the per-launch operator action token. Only a page view whose
     query carried the token renders it into the forms' headers — a page
     GET without the credential never yields it. The unarmed view says so
     and names where the token lives, never a silent refusal. #}
  {% if not operator_token %}
  <p class="hint">
    This page view carries no operator action token. Bind and unbind are
    refused without it. Open the URL that the serve command printed. That
    URL carries the token. Or append
    <code>?operator_action=&lt;token&gt;</code> to this page. The token is
    printed at serve start. It is also written to the
    <code>operator-action-token.json</code> file under the capture root.
  </p>
  {% endif %}
  {% if binding %}
  <div class="notice">
    <p><strong>Bound endpoint</strong> — {{ binding.endpoint_kind }}:
      <code>{{ binding.port_path }}</code>{% if binding.usb_serial %} (USB serial <code>{{ binding.usb_serial }}</code>){% endif %},
      bound {{ binding.bound_at }}.</p>
    <form method="post" action="/devices/{{ plugin.device_id }}/unbind"
          hx-post="/devices/{{ plugin.device_id }}/unbind"
          hx-headers='{{ action_headers(csrf_token, operator_token) }}'>
      <button type="submit">Unbind</button>
    </form>
  </div>
  {% else %}
  <p class="hint">
    No endpoint is bound yet. A scan opens candidate ports and asks each for
    its identity; nothing else is transmitted, and loading this page
    transmits nothing. Pick a listed port to bind it to this host.
  </p>
  {% endif %}
  <form method="post" action="/discover"
        hx-post="/discover"
        hx-headers='{{ action_headers(csrf_token, operator_token) }}'>
    <button type="submit">Scan for devices</button>
  </form>
</section>
{% endif %}
{% endblock %}