{% extends 'layouts/base.html' %}
{% block subtitle %}<p class="text-secondary">Choose a customer, review explicit hosts and validate optional catalog inputs.</p>{% endblock %}
{% block content %}{% if reused %}<div class="note mb-3">Loaded a saved plan as a reusable preset. Hosts no longer compatible are not selected. Validate again before saving a new snapshot or submitting a job.</div>{% endif %}
<section class="card mb-4">
  <div class="card-body p-4">
    <form action="/plan" method="get" class="row g-3 align-items-end">
      <div class="col-md-5">
        <label class="form-label" for="customer">Customer</label>
        <select id="customer" name="customer" class="form-select" required>
          <option value="">Select customer</option>
          {% for c in customers %}<option value="{{ c.name }}" {% if c.name == customer %}selected{% endif %}>{{ c.name }}</option>{% endfor %}
        </select>
      </div>
      <div class="col-md-5">
        <label class="form-label" for="playbook">Catalog operation</label>
        <select id="playbook" name="playbook" class="form-select" required>
          <option value="">Select operation</option>
          {% for p in playbooks %}<option value="{{ p.key }}" {% if p.key == playbook %}selected{% endif %}>{{ p.category }} / {{ p.name }}</option>{% endfor %}
        </select>
      </div>
      <div class="col-md-2"><button class="btn btn-primary w-100" type="submit">Load selection</button></div>
    </form>
  </div>
</section>
{% if spec %}
<form action="/preflight" method="post" hx-post="/_partials/preflight" hx-target="#preflight-result" hx-disabled-elt="find button[type='submit']">
<input type="hidden" name="_csrf" value="{{ csrf }}"><input type="hidden" name="customer" value="{{ customer }}"><input type="hidden" name="playbook" value="{{ playbook }}">
<section class="card mb-4 host-selection-card">
  <div class="card-header selection-card-header">
    <div>
      <h3 class="h6 mb-1">01 / Explicit targets</h3>
      <span class="text-secondary small">{{ hosts|length }} compatible host(s) · <span data-selected-count>0 selected</span></span>
    </div>
    <span class="selection-limit">Maximum 500 explicit targets</span>
  </div>
  {% if groups %}
  <div class="group-selector" aria-label="Select hosts by inventory group">
    <div class="group-selector-heading"><span class="group-selector-label">Inventory groups</span><span class="group-selector-help">Core hierarchy; parent groups include descendant subgroups</span></div>
    <div class="group-selector-items">
      {% for group in groups %}
      <label class="group-choice">
        <input class="form-check-input" type="checkbox" value="{{ group.name }}" data-group-select>
        <span class="group-name">{% if group.depth %}{{ "↳ " * group.depth }}{% endif %}{{ group.name }}</span><span class="group-count">{{ group.count }}</span>
      </label>
      {% endfor %}
    </div>
  </div>
  {% endif %}
  <div class="filter-toolbar">
<label for="host-search">Find hosts<input id="host-search" type="search" class="form-control" data-host-search placeholder="Hostname, address or group"></label>
<label for="host-group-filter">Filter group<select id="host-group-filter" class="form-select" data-host-group-filter><option value="">All groups</option>{% for g in groups %}<option>{{ g.name }}</option>{% endfor %}</select></label>
<label for="host-sort">Sort<select id="host-sort" class="form-select" data-host-sort><option value="name">Hostname</option><option value="address">Address</option><option value="group">Group</option></select></label>
<button class="btn btn-outline-secondary" type="button" data-clear-hosts>Clear selection</button></div>
<p class="selection-help form-text"><span data-visible-count></span> Select-all affects visible rows; group buttons affect all compatible hosts in that group. <span data-selection-saved aria-live="polite">Selections are saved privately for seven days.</span></p>
<div class="table-responsive">
    <table class="table align-middle mb-0">
      <thead><tr>
        <th scope="col" class="selection-column">
          <input class="form-check-input" id="select-all-hosts" type="checkbox" data-select-all-hosts aria-label="Select all compatible hosts" title="Select all compatible hosts">
        </th>
        <th scope="col">Host</th><th scope="col">Address</th><th scope="col">Groups</th>
      </tr></thead>
      <tbody>
      {% for h in hosts %}
        <tr data-host-row data-name="{{ h.name }}" data-address="{{ h.address or '' }}" data-group="{{ h.groups|join(' ') }}">
          <td class="selection-column"><input class="form-check-input" type="checkbox" name="targets" value="{{ h.name }}" id="host-{{ loop.index }}" data-host-target {% if h.name in selected %}checked{% endif %} data-groups='{{ h.groups|tojson|forceescape }}'></td>
          <td><label class="entity-name" for="host-{{ loop.index }}">{{ h.name }}</label></td>
          <td><code>{{ h.address or '-' }}</code></td>
          <td>{% for group in h.groups %}<span class="badge badge-neutral me-1">{{ group }}</span>{% else %}<span class="text-secondary">No group membership</span>{% endfor %}</td>
        </tr>
      {% else %}
        <tr><td colspan="4" class="empty-state">No compatible hosts. Check the customer inventory in AIM.</td></tr>
      {% endfor %}
      </tbody>
    </table>
  </div>
</section>
{% if spec.result is defined and spec.result and spec.result.schema=='patch_summary_v1' %}
<section class="note mb-4" aria-label="Patch-wave policy"><strong>Reboot and continuation are separate decisions</strong>
<p class="mb-0 mt-1">Core installs Windows updates sequentially. An update-triggered reboot ends the wave unless post-reboot continuation is deliberately enabled. Review the catalog's continuation hint below; blank inputs remain inherited, not forced values. Reboot delay and message apply only to an AIM-initiated reboot. Linux keeps its native package-manager policy.</p></section>
{% endif %}
{% if spec.inputs %}
<section class="card mb-4"><div class="card-header"><h3 class="h6 mb-0">02 / Optional inputs</h3><span class="text-secondary small">Blank values inherit inventory / role defaults; catalog hints are not resolved inventory values.</span></div><div class="card-body p-4"><div class="row g-3">
{% for field in spec.inputs %}<div class="col-md-6"><label class="form-label" for="option-{{ loop.index }}">{{ field.label }}{% if field.platforms %} <span class="badge badge-neutral">{{ field.platforms|join(', ') }}</span>{% endif %}</label>
{% if field.type in ['bool','choice'] %}<select class="form-select" id="option-{{ loop.index }}" name="option.{{ field.name }}" aria-describedby="option-help-{{ loop.index }}"><option value="">Inherit{% if field.default_hint %} (catalog hint: {{ field.default_hint }}){% endif %}</option>{% for choice in (['true','false'] if field.type == 'bool' else field.choices) %}<option value="{{ choice }}" {% if option_values.get(field.name) == choice %}selected{% endif %}>{{ choice }}</option>{% endfor %}</select>
{% elif field.type in ['list','sequence'] %}<textarea class="form-control" id="option-{{ loop.index }}" name="option.{{ field.name }}" aria-describedby="option-help-{{ loop.index }}" rows="3" placeholder="Inherit default; or a JSON list">{{ option_values.get(field.name,'') }}</textarea>
{% else %}<input class="form-control" id="option-{{ loop.index }}" name="option.{{ field.name }}" aria-describedby="option-help-{{ loop.index }}" value="{{ option_values.get(field.name,'') }}" {% if field.type == 'int' %}type="number" step="1" {% if field.minimum is not none %}min="{{ field.minimum }}"{% endif %} {% if field.maximum is not none %}max="{{ field.maximum }}"{% endif %}{% elif field.type == 'url' %}type="url"{% endif %} placeholder="{{ 'Vault variable name only, never its value' if field.type == 'secret_ref' else 'Inherit AIM default' }}" autocomplete="off">{% endif %}
<div class="form-text" id="option-help-{{ loop.index }}">{{ field.help or field.name }}{% if field.default_hint %} Default hint: {{ field.default_hint }}.{% endif %}{% if field.choices %} Choices: {{ field.choices|join(', ') }}.{% endif %}</div></div>{% endfor %}
</div></div></section>
{% endif %}
<section class="card mb-4"><div class="card-body p-4"><h3 class="h5">03 / Run settings</h3>
<div class="workflow-grid"><label for="run-mode">Execution mode<select id="run-mode" name="mode" class="form-select"><option value="check" {% if run_mode == 'check' %}selected{% endif %}>Check mode</option><option value="apply" {% if run_mode == 'apply' %}selected{% endif %}>Apply</option></select></label>
<label for="run-key-mode">SSH key handling<select id="run-key-mode" name="key_mode" class="form-select"><option value="none" {% if key_mode == 'none' %}selected{% endif %}>Native inventory (no added agent)</option><option value="customer" {% if key_mode == 'customer' %}selected{% endif %}>Load customer SSH key (Linux)</option></select></label></div>
<p class="form-text">Usernames and password references come from AIM inventory. Customer key mode loads the canonical owner-only key under the core executor account. Custom username/password override is not supported by AIM 3.3.0rc8. Check mode is not a guarantee of zero changes.</p></div></section>
<div class="toolbar"><p class="text-secondary mb-0">Review next, then run once. Saving a reusable plan is optional. No execution or credential collection occurs on review.</p><button type="submit" class="btn btn-primary">Review one-run job &rarr;</button></div>
</form><section id="preflight-result" class="mt-4" aria-live="polite"></section>
{% endif %}
{% endblock %}