{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}Audit Logs - Pychestrate Configuration{% endblock %}

{% block extra_css %}
<style>
    .pyc-audit-filters {
        display: flex;
        flex-wrap: wrap;
        gap: 0.75rem 1rem;
        align-items: flex-end;
    }
    .pyc-audit-filters .form-group {
        margin: 0;
    }
    /* One height for the select and the inputs, so the labels above them share a line (ADM-42). */
    .pyc-audit-filters .form-control {
        box-sizing: border-box;
        height: 2.625rem;
    }
    .pyc-audit-paging {
        display: flex;
        flex-wrap: wrap;
        gap: 0.5rem;
        align-items: center;
        margin-top: 0.75rem;
    }
    .pyc-audit-when {
        white-space: nowrap;
    }
    .pyc-audit-summary {
        max-width: 32rem;
        overflow-wrap: anywhere;
    }
</style>
{% endblock %}

{% block content %}
<div class="page-header">
    <h1>Audit Logs</h1>
    <p>Who did what, when: sign-ins, account and role changes, secrets, and every change made to projects, resources and settings.</p>
</div>

<div class="card mb">
    <form method="get" class="pyc-audit-filters" aria-label="Filter the audit log">
        <div class="form-group">
            <label class="field-label" for="audit-action">Action</label>
            <select id="audit-action" name="action" class="form-control w-md">
                <option value="">All actions</option>
                {% for group in action_groups %}
                <optgroup label="{{ group.label }}">
                    {% for action in group.actions %}
                    <option value="{{ action.kind }}" title="{{ action.description }}" {% if audit_filters.action == action.kind %}selected{% endif %}>{{ action.label }}</option>
                    {% endfor %}
                </optgroup>
                {% endfor %}
            </select>
        </div>

        <div class="form-group">
            <label class="field-label" for="audit-actor">User</label>
            <input type="text" id="audit-actor" name="actor" class="form-control w-sm" placeholder="Username"
                   value="{{ audit_filters.actor }}" autocomplete="off" spellcheck="false">
        </div>

        <div class="form-group">
            <label class="field-label" for="audit-target">Target</label>
            <input type="text" id="audit-target" name="target" class="form-control w-sm" placeholder="e.g. projects:12"
                   value="{{ audit_filters.target }}" autocomplete="off" spellcheck="false">
        </div>

        <div class="form-group">
            <label class="field-label" for="audit-since">From (UTC)</label>
            <input type="datetime-local" id="audit-since" name="since" class="form-control w-md"
                   value="{{ audit_filters.since }}">
        </div>

        <div class="form-group">
            <label class="field-label" for="audit-until">To (UTC)</label>
            <input type="datetime-local" id="audit-until" name="until" class="form-control w-md"
                   value="{{ audit_filters.until }}">
        </div>

        <div class="form-group actions-row">
            <button type="submit" class="btn btn-secondary">
                {{ ui.icon("filter_list") }} Filter
            </button>
            <a href="{{ url_for('config.audit_log_list') }}" class="btn btn-secondary">Clear</a>
        </div>
    </form>
</div>

{% for notice in audit_notices %}
<div class="alert alert-warning" role="status">{{ notice }} Showing no entries.</div>
{% endfor %}

<div class="actions-row mb">
    <span class="muted">{{ audit_total }} matching event{{ '' if audit_total == 1 else 's' }}</span>
    <a href="{{ export_csv_url }}" class="btn btn-sm btn-secondary">Export CSV</a>
    <a href="{{ export_jsonl_url }}" class="btn btn-sm btn-secondary">Export JSON Lines</a>
</div>

<div class="table-scroll" tabindex="0"><table class="data-table">
    <thead>
        <tr>
            <th scope="col">When (UTC)</th>
            <th scope="col">User</th>
            <th scope="col">Action</th>
            <th scope="col">Details</th>
            <th scope="col">Client</th>
        </tr>
    </thead>
    <tbody>
        {% for row in audit_rows %}
        <tr>
            <td class="pyc-audit-when">{% if row.written_at %}{{ row.written_at | format_datetime('%Y-%m-%d %H:%M:%S') }}{% else %}&mdash;{% endif %}</td>
            <td>{{ row.actor_label }}</td>
            <td>{{ row.action }}</td>
            <td class="pyc-audit-summary">
                {% if row.summary %}{{ row.summary }}{% else %}<span class="muted">&mdash;</span>{% endif %}
                <details>
                    <summary class="muted small">Record #{{ row.sequence_number }}{% if row.target_ref %} &middot; {{ row.target_ref }}{% endif %}</summary>
                    <pre class="pre-block small">{{ row.payload_text }}</pre>
                </details>
            </td>
            <td>{% if row.client_address %}{{ row.client_address }}{% else %}<span class="muted">&mdash;</span>{% endif %}</td>
        </tr>
        {% else %}
            {{ ui.empty_state("No audit events match these filters" if audit_total == 0 else "No audit events on this page", colspan=5) }}
        {% endfor %}
    </tbody>
</table></div>

<nav class="pyc-audit-paging" aria-label="Audit log pages">
    {% if newest_url %}<a href="{{ newest_url }}" class="btn btn-sm btn-secondary">&laquo; Newest</a>{% endif %}
    {% if newer_url %}<a href="{{ newer_url }}" class="btn btn-sm btn-secondary" rel="prev">&lsaquo; Newer</a>{% endif %}
    {% if older_url %}<a href="{{ older_url }}" class="btn btn-sm btn-secondary" rel="next">Older &rsaquo;</a>{% endif %}
</nav>
{% endblock %}