{% extends 'generic/object.html' %}
{% load static %}

{% block title %}{{ object }} — Secret engines{% endblock %}

{% block content %}
<div id="openbao-secret-engines" data-api-base="{{ api_base }}" data-cluster-slug="{{ object.slug }}">
  {% csrf_token %}
  <div class="alert alert-warning" role="alert">
    Explorer responses may contain secret material. They are never cached or persisted by this page; clear the result after copying it to approved custody.
  </div>
  <section class="card mb-4">
    <h2 class="card-header">Mounted engines</h2>
    <div class="card-body">
      <button class="btn btn-primary" id="openbao-engine-refresh" type="button">Refresh mounts</button>
      <form class="row g-2 mt-2 openbao-engine-read-form">
        <div class="col-md-6">
          <label class="form-label" for="openbao-inspect-mount">Mount to inspect</label>
          <select class="form-select openbao-mount-select" id="openbao-inspect-mount" name="mount_path" required disabled>
            <option value="">Refresh mounts first</option>
          </select>
        </div>
        <div class="col-md-6 d-flex align-items-end gap-2">
          <button class="btn btn-outline-primary" data-action="secret-engines/configuration/" type="submit">
            Read configuration
          </button>
          <button class="btn btn-outline-primary" data-action="secret-engines/tuning/" type="submit">
            Read tuning
          </button>
        </div>
      </form>
      <pre id="openbao-engine-details" class="border rounded p-3 mt-3">No mount metadata loaded.</pre>
    </div>
    <div class="table-responsive"><table class="table mb-0"><thead><tr><th>Path</th><th>Type</th><th>Description</th><th>TTL</th></tr></thead><tbody id="openbao-engine-mounts"><tr><td colspan="4">Load mounts to begin.</td></tr></tbody></table></div>
  </section>

  {% if perms.netbox_openbao.manage_secret_engines_openbaocluster or perms.netbox_openbao.disable_secret_engines_openbaocluster %}
  <section class="card mb-4">
    <h2 class="card-header">Lifecycle</h2>
    <div class="card-body row g-3">
      {% if perms.netbox_openbao.manage_secret_engines_openbaocluster %}
      <form class="col-lg-6 openbao-engine-form" data-action="secret-engines/enable/">
        <h3 class="h5">Enable</h3>
        <label class="form-label" for="openbao-enable-mount">Mount path</label>
        <input class="form-control mb-2" id="openbao-enable-mount" name="mount_path" required>
        <label class="form-label" for="openbao-enable-configuration">Configuration JSON</label>
        <textarea class="form-control mb-2 font-monospace" id="openbao-enable-configuration" name="configuration" rows="4">{"type":"kv","options":{"version":"2"}}</textarea>
        <label class="form-label" for="openbao-enable-reason">Reason</label>
        <input class="form-control mb-2" id="openbao-enable-reason" name="reason" required>
        <button class="btn btn-primary" type="submit">Enable engine</button>
      </form>
      <form class="col-lg-6 openbao-engine-form" data-action="secret-engines/tune/">
        <h3 class="h5">Tune</h3>
        <label class="form-label" for="openbao-tune-mount">Mount path</label>
        <select class="form-select mb-2 openbao-mount-select" id="openbao-tune-mount" name="mount_path" required disabled>
          <option value="">Refresh mounts first</option>
        </select>
        <label class="form-label" for="openbao-tune-configuration">Configuration JSON</label>
        <textarea class="form-control mb-2 font-monospace" id="openbao-tune-configuration" name="configuration" rows="4">{"description":""}</textarea>
        <label class="form-label" for="openbao-tune-reason">Reason</label>
        <input class="form-control mb-2" id="openbao-tune-reason" name="reason" required>
        <button class="btn btn-primary" type="submit">Tune engine</button>
      </form>
      <form class="col-lg-6 openbao-engine-form" data-action="secret-engines/remount/">
        <h3 class="h5">Remount</h3>
        <label class="form-label" for="openbao-remount-source">Source</label>
        <select class="form-select mb-2 openbao-mount-select" id="openbao-remount-source" name="source" required disabled>
          <option value="">Refresh mounts first</option>
        </select>
        <label class="form-label" for="openbao-remount-destination">Destination</label>
        <input class="form-control mb-2" id="openbao-remount-destination" name="destination" required>
        <label class="form-label" for="openbao-remount-reason">Reason</label>
        <input class="form-control mb-2" id="openbao-remount-reason" name="reason" required>
        <label class="form-label" for="openbao-remount-confirmation">Exact confirmation</label>
        <input class="form-control mb-2" id="openbao-remount-confirmation" name="confirmation" autocomplete="off" required>
        <div class="form-text mb-2">REMOUNT &lt;source&gt; TO &lt;destination&gt; ON {{ object.slug }}</div>
        <button class="btn btn-warning" type="submit">Start remount</button>
      </form>
      {% endif %}
      {% if perms.netbox_openbao.disable_secret_engines_openbaocluster %}
      <form class="col-lg-6 openbao-engine-form" data-action="secret-engines/disable/">
        <h3 class="h5 text-danger">Disable</h3>
        <label class="form-label" for="openbao-disable-mount">Mount path</label>
        <select class="form-select mb-2 openbao-mount-select" id="openbao-disable-mount" name="mount_path" required disabled>
          <option value="">Refresh mounts first</option>
        </select>
        <label class="form-label" for="openbao-disable-reason">Reason</label>
        <input class="form-control mb-2" id="openbao-disable-reason" name="reason" required>
        <label class="form-label" for="openbao-disable-confirmation">Exact confirmation</label>
        <input class="form-control mb-2" id="openbao-disable-confirmation" name="confirmation" autocomplete="off" required>
        <div class="form-text mb-2">DISABLE ENGINE &lt;mount&gt; ON {{ object.slug }}</div>
        <button class="btn btn-danger" type="submit">Disable engine</button>
      </form>
      {% endif %}
    </div>
  </section>
  {% endif %}

  <section class="card mb-4">
    <h2 class="card-header">First-class engine journeys</h2>
    <div class="card-body">
      <p class="text-secondary">
        Use task-oriented, mount-bound workflows for KV, transit, database, SSH, TOTP, PKI, and Kubernetes. Only journeys allowed by your dedicated permissions and advertised by this cluster are shown.
      </p>
      <button class="btn btn-primary mb-3" id="openbao-journey-refresh" type="button">
        Load available journeys
      </button>
      <div id="openbao-journey-catalog" class="alert alert-secondary" role="status">
        No journey catalog loaded.
      </div>
      <form id="openbao-journey-form" class="row g-3">
        <div class="col-12">
          <label class="form-label" for="openbao-journey-key">Engine task</label>
          <select class="form-select" id="openbao-journey-key" required disabled>
            <option value="">Load the journey catalog first</option>
          </select>
          <div class="form-text" id="openbao-journey-summary"></div>
        </div>
        <div class="col-md-6" id="openbao-journey-resource-field">
          <label class="form-label" for="openbao-journey-resource">Resource path</label>
          <input class="form-control" id="openbao-journey-resource" name="resource_path" autocomplete="off" spellcheck="false">
        </div>
        <div class="col-md-6" id="openbao-journey-path-field">
          <label class="form-label" for="openbao-journey-path">Named path parameters JSON</label>
          <textarea class="form-control font-monospace" id="openbao-journey-path" name="path_parameters" autocomplete="off" spellcheck="false">{}</textarea>
          <div class="form-text" id="openbao-journey-path-help"></div>
        </div>
        <div class="col-md-6" id="openbao-journey-query-field">
          <label class="form-label" for="openbao-journey-query">Query JSON</label>
          <textarea class="form-control font-monospace" id="openbao-journey-query" name="query" autocomplete="off" spellcheck="false">{}</textarea>
          <div class="form-text" id="openbao-journey-query-help"></div>
        </div>
        <div class="col-md-6" id="openbao-journey-body-field">
          <label class="form-label" for="openbao-journey-body">Body JSON</label>
          <textarea class="form-control font-monospace" id="openbao-journey-body" name="body" autocomplete="off" spellcheck="false">{}</textarea>
          <div class="form-text" id="openbao-journey-body-help"></div>
        </div>
        <div class="col-md-6">
          <label class="form-label" for="openbao-journey-reason">Reason</label>
          <input class="form-control" id="openbao-journey-reason" name="reason" required autocomplete="off">
        </div>
        <div class="col-md-6" id="openbao-journey-confirmation-field" hidden>
          <label class="form-label" for="openbao-journey-confirmation">Exact destructive confirmation</label>
          <input class="form-control" id="openbao-journey-confirmation" name="confirmation" autocomplete="off">
          <div class="form-text" id="openbao-journey-confirmation-help"></div>
        </div>
        <div class="col-12">
          <button class="btn btn-warning" type="submit">Run engine task</button>
          <button class="btn btn-outline-primary" id="openbao-journey-download" type="button" hidden>Download result</button>
          <button class="btn btn-secondary openbao-result-clear" type="button">Clear results</button>
        </div>
      </form>
      <pre id="openbao-journey-result" class="border rounded p-3 mt-3">No result.</pre>
    </div>
  </section>

  {% if perms.netbox_openbao.explore_secret_operations_openbaocluster %}
  <section class="card">
    <h2 class="card-header">Classified mounted-operation explorer</h2>
    <div class="card-body">
      <button class="btn btn-primary mb-3" id="openbao-operation-refresh" type="button">
        Load classified operations
      </button>
      <div id="openbao-operation-catalog" class="alert alert-secondary" role="status">
        No catalog loaded.
      </div>
      <form id="openbao-operation-form" class="row g-3">
        <div class="col-12">
          <label class="form-label" for="openbao-operation-key">Reviewed operation</label>
          <select class="form-select" id="openbao-operation-key" name="operation_key" required disabled>
            <option value="">Load the catalog first</option>
          </select>
          <div class="form-text" id="openbao-operation-summary"></div>
        </div>
        <div class="col-md-6">
          <label class="form-label" for="openbao-operation-mount">Mount</label>
          <select class="form-select" id="openbao-operation-mount" name="mount_path" required disabled>
            <option value="">Load mounted engines first</option>
          </select>
        </div>
        <div class="col-md-6" id="openbao-resource-path-field">
          <label class="form-label" for="openbao-operation-resource">Resource path</label>
          <input class="form-control" id="openbao-operation-resource" name="resource_path">
        </div>
        <div class="col-md-4" id="openbao-path-parameters-field">
          <label class="form-label" for="openbao-operation-path-parameters">Other path parameters JSON</label>
          <textarea class="form-control font-monospace" id="openbao-operation-path-parameters" name="path_parameters">{}</textarea>
        </div>
        <div class="col-md-4" id="openbao-query-field">
          <label class="form-label" for="openbao-operation-query">Query JSON</label>
          <textarea class="form-control font-monospace" id="openbao-operation-query" name="query">{}</textarea>
          <div class="form-text" id="openbao-query-help"></div>
        </div>
        <div class="col-md-4" id="openbao-body-field">
          <label class="form-label" for="openbao-operation-body">Body JSON</label>
          <textarea class="form-control font-monospace" id="openbao-operation-body" name="body">{}</textarea>
          <div class="form-text" id="openbao-body-help"></div>
        </div>
        <div class="col-md-6">
          <label class="form-label" for="openbao-operation-reason">Reason</label>
          <input class="form-control" id="openbao-operation-reason" name="reason" required>
        </div>
        <div class="col-md-6" id="openbao-confirmation-field">
          <label class="form-label" for="openbao-operation-confirmation">Destructive confirmation</label>
          <input class="form-control" id="openbao-operation-confirmation" name="confirmation" autocomplete="off">
          <div class="form-text" id="openbao-confirmation-help"></div>
        </div>
        <div class="col-12">
          <button class="btn btn-warning" type="submit">Execute reviewed operation</button>
          <button class="btn btn-secondary openbao-result-clear" id="openbao-result-clear" type="button">Clear results</button>
        </div>
      </form>
      <pre id="openbao-operation-result" class="border rounded p-3 mt-3">No result.</pre>
    </div>
  </section>
  {% endif %}
  <div id="openbao-engine-status" class="alert d-none mt-3" role="status"></div>
</div>
<script src="{% static 'netbox_openbao/secret_engine_administration.js' %}" type="module"></script>
{% endblock content %}