{% from "_macros.html" import th %}
{#- five-state badge coloring: warn=needs action, green=healthy, info=paused,
    red=dead, gray=retired -#}
{% set status_badge = {'login_required': 'refused', 'active': 'success',
                       'cooldown': 'running', 'banned': 'failed',
                       'retired': 'cancelled'} %}
{% set kind_badge = {'login': 'success', 'probe': 'running',
                     'small_batch': 'running', 'lease_acquired': 'running',
                     'lease_released': 'no_op', 'lease_expired': 'refused',
                     'auth_failed': 'failed', 'suspect_yield': 'zero_yield',
                     'banned': 'failed', 'note': 'no_op'} %}

{#- The standing banner rides as an OUT-OF-BAND update of the page slot
    #auth-alert (spec 警告不重复堆叠): htmx pulls this top-level element out
    of the swap and refreshes the page-level banner in place, so the warning
    is never re-rendered inline among the cards below. Rendered unconditionally
    so a resolved alert clears the slot on the next poll. -#}
<div id="auth-alert" hx-swap-oob="true">
{% include "_auth_alert.html" %}
</div>

<p>
  <span class="badge">{{ t('身份') }} {{ summary.total }}</span>
  <span class="badge success">{{ t('活跃') }} {{ summary.active }}</span>
  <span class="badge refused">{{ t('需登录') }} {{ summary.login_required }}</span>
  <span class="badge running">{{ t('租借中') }} {{ summary.leased }}</span>
</p>

{#- 任务分区 (spec: 需登录队列与新建账号表单分属独立分区/卡片): one task
    per card. The queue comes FIRST — the page banner's 「点下方『登录』」
    points at it, so the actionable rows (now carrying their own visible
    拉起登录站 buttons, spec 队列行内登录入口可见) sit directly under the
    warning instead of under the occasional-use registration form. -#}
<section class="card auth-card" data-auth-section="login-queue">
  <h3>{{ t('需登录队列') }}</h3>
  <ul class="auth-brief">
    <li>{{ t('失败次数多者先处理，从未登录过的（新登记）排最前。') }}</li>
    <li>{{ t('每行可直接拉起登录站，行内按钮即对该身份发起登录任务。') }}</li>
  </ul>
  <table>
    <thead>
    <tr>{{ th(t('源')) }}{{ th(t('账号')) }}{{ th(t('自动化')) }}{{ th(t('最近登录')) }}{{ th(t('失败次数')) }}{{ th(t('操作')) }}</tr>
    </thead>
    {% for i in queue %}
    <tr>
      <td><a href="/panel/sources/{{ i.source | urlencode }}">{{ i.source }}</a></td>
      <td>{{ i.account_alias }}</td>
      <td class="muted">{{ i.automation }}</td>
      <td class="muted">{{ i.last_login_at or t('从未登录') }}</td>
      <td>{{ i.failure_count }}</td>
      <td>
        {#- fields aligned with POST /panel/auth/station/launch:
            source / account_alias / optional egress_ref -#}
        <form class="inline-form station-launch" hx-post="/panel/auth/station/launch" hx-target="#station-view" hx-swap="innerHTML">
          <input type="hidden" name="source" value="{{ i.source }}">
          <input type="hidden" name="account_alias" value="{{ i.account_alias }}">
          {% if egresses %}
          <select name="egress_ref" aria-label="{{ t('出口') }}" title="{{ t('登录与爬取的出口') }}">
            <option value="">{{ t('出口：沿用当前') }} ({{ i.egress_ref or t('未绑定') }})</option>
            {% for e in egresses %}
            <option value="{{ e.egress_ref }}">{{ e.label }}（{{ e.url_masked }}）</option>
            {% endfor %}
          </select>
          {% endif %}
          <button class="btn btn-primary" type="submit">{{ t('拉起登录站') }}</button>
        </form>
      </td>
    </tr>
    {% else %}
    <tr><td colspan="6" class="muted">{{ t('队列为空，没有需要登录的身份') }}</td></tr>
    {% endfor %}
  </table>
</section>

<section class="card auth-card" data-auth-section="new-account">
  <h3>{{ t('新建账号') }}</h3>
  <ul class="auth-brief">
    <li>{{ t('选源 + 起别名即登记身份，登记后进入上方队列等待登录。') }}</li>
    <li>{{ t('出口可留自动分配，或自选一个固定出口（该账号的登录与后续爬取都走它）。') }}</li>
  </ul>
  <form class="inline-form" hx-post="/panel/auth/identities" hx-target="#identity-created" hx-swap="innerHTML">
    <select name="source" required aria-label="{{ t('数据源') }}">
      {% for src in station_sources %}
      {#- identities ARE keyed by auth_profile (the login unit), not the crawl
          source name: registering under 'rmfyalk-case-crawl' created a row the
          dispatcher could never lease (it looks up auth_profile='rmfyalk').
          Post the profile; show the crawl source as context only. -#}
      <option value="{{ src.auth_profile }}">{{ src.auth_profile }}{% if src.source != src.auth_profile %}（{{ src.source }}）{% endif %}</option>
      {% else %}
      <option value="">— {{ t('无认证源') }} —</option>
      {% endfor %}
    </select>
    <input name="account_alias" placeholder="{{ t('账号别名') }}" aria-label="{{ t('账号别名') }}" required>
    <select name="egress_ref" aria-label="{{ t('出口') }}">
      <option value="">{{ t('自动分配出口') }}</option>
      {% for e in egresses %}
      <option value="{{ e.egress_ref }}">{{ e.label }}（{{ e.url_masked }}）</option>
      {% endfor %}
    </select>
    <button type="submit">{{ t('登记') }}</button>
  </form>
  <div id="identity-created"></div>
</section>

<section class="card auth-card" data-auth-section="identity-matrix">
  <h3>{{ t('身份矩阵') }}</h3>
  <ul class="auth-brief">
    <li>{{ t('按源分组：账号 / 五态状态 / 自动化程度 / 最近登录 / 最近成功 / 连续零产出 / 租借。') }}</li>
    <li>{{ t('login_required 行内可直接拉起登录站（可换出口）。') }}</li>
  </ul>
  <table>
    <thead>
    <tr>{{ th(t('账号')) }}{{ th(t('状态')) }}{{ th(t('自动化')) }}{{ th(t('最近登录')) }}{{ th(t('最近成功')) }}{{ th(t('连续零产出')) }}{{ th(t('租借')) }}</tr>
    </thead>
    {% for g in groups %}
    <tr>
      <td colspan="7">
        <strong>{{ g.source }}</strong>
        {% if g.auth_profile %}<span class="badge running">{{ t('认证源') }}</span>{% endif %}
        <span class="muted">{{ g.identities | length }} {{ t('身份') }}</span>
      </td>
    </tr>
    {% for i in g.identities %}
    <tr>
      <td>{{ i.account_alias }}</td>
      <td><span class="badge {{ status_badge.get(i.status, 'no_op') }}">{{ i.status }}</span>
          {% if i.status == 'login_required' %}
          <form class="inline-form station-launch" hx-post="/panel/auth/station/launch" hx-target="#station-view" hx-swap="innerHTML">
            <input type="hidden" name="source" value="{{ i.source }}">
            <input type="hidden" name="account_alias" value="{{ i.account_alias }}">
            <select name="egress_ref" aria-label="{{ t('出口') }}" title="{{ t('登录与爬取的出口') }}">
              <option value="">{{ t('出口：沿用当前') }} ({{ i.egress_ref or t('未绑定') }})</option>
              {% for e in egresses %}
              <option value="{{ e.egress_ref }}">{{ e.label }}（{{ e.url_masked }}）</option>
              {% endfor %}
            </select>
            <button class="link" type="submit">{{ t('登录') }}</button>
          </form>
          {% endif %}</td>
      <td class="muted">{{ i.automation }}</td>
      <td class="muted">{{ i.last_login_at or '—' }}</td>
      <td class="muted">{{ i.last_success_at or '—' }}</td>
      <td>{% if i.consecutive_zero_runs %}<span class="warn-text">{{ i.consecutive_zero_runs }}</span>{% else %}<span class="muted">0</span>{% endif %}</td>
      <td>{% if i.leased %}<span class="badge running">{{ t('租借中') }}</span> <span class="muted">{{ i.lease_owner }}</span>
          {% elif i.lease_expired %}<span class="badge refused">{{ t('租约过期') }}</span>
          {% else %}<span class="muted">—</span>{% endif %}</td>
    </tr>
    {% endfor %}
    {% else %}
    <tr><td colspan="7" class="muted">{{ t('尚无身份') }}</td></tr>
    {% endfor %}
  </table>
</section>

<section class="card auth-card" data-auth-section="event-stream">
  <h3>{{ t('事件流') }} <span class="muted">{{ t('最近 20 条') }}</span></h3>
  <ul class="auth-brief">
    <li>{{ t('login / probe / small_batch / lease / 失效与封禁留痕。') }}</li>
    <li>{{ t('可按身份回放。') }}</li>
  </ul>
  <table>
    <thead>
    <tr>{{ th(t('时间')) }}{{ th(t('类型')) }}{{ th(t('身份')) }}{{ th(t('详情')) }}{{ th(t('租借令牌')) }}</tr>
    </thead>
    {% for ev in events %}
    <tr>
      <td class="muted">{{ ev.created_at or '—' }}</td>
      <td><span class="badge {{ kind_badge.get(ev.kind, 'no_op') }}">{{ ev.kind }}</span></td>
      <td><a href="/panel/sources/{{ ev.source | urlencode }}">{{ ev.source }}</a> / {{ ev.account_alias }}</td>
      <td class="muted wrap">{{ ev.detail or '—' }}</td>
      <td class="muted">{{ (ev.lease_token or '')[:8] or '—' }}</td>
    </tr>
    {% else %}
    <tr><td colspan="5" class="muted">{{ t('尚无事件') }}</td></tr>
    {% endfor %}
  </table>
</section>

<section class="card auth-card" data-auth-section="login-stations">
  <h3>{{ t('登录站') }}</h3>
  <ul class="auth-brief">
    <li>{{ t('进行中/最近的登录站：状态、期限与观察窗入口。') }}</li>
    <li>{{ t('超期未完成的站会被标记超时并可回收；已结束的站可一键重新拉起。') }}</li>
  </ul>
  <table>
    <thead>
    <tr>{{ th(t('站')) }}{{ th(t('身份')) }}{{ th(t('状态')) }}{{ th(t('出口')) }}{{ th(t('期限')) }}{{ th(t('操作')) }}</tr>
    </thead>
    {% for stn in stations %}
    {% include "_station_row.html" %}
    {% else %}
    <tr><td colspan="6" class="muted">{{ t('暂无登录站') }}</td></tr>
    {% endfor %}
  </table>
</section>