{% load i18n %}
{# Why a device the plugin created refuses a manual delete, and where the #}
{# supported delete lives. NetBox's own delete dialog renders the raw     #}
{# ProtectedError - our table names and nothing else - so the explanation #}
{# has to be on the page the operator is already looking at.              #}
<div class="card">
  <h5 class="card-header">{% trans "Forward Ownership" %}</h5>
  <div class="card-body">
    <table class="table table-hover attr-table">
      <tr>
        <th scope="row">{% trans "Owned by sync" %}</th>
        <td>
          {% for sync in ownership.syncs %}
            <a href="{{ sync.url }}">{{ sync.name }}</a>{% if not forloop.last %}, {% endif %}
          {% empty %}
            &mdash;
          {% endfor %}
        </td>
      </tr>
      <tr>
        <th scope="row">{% trans "Scope status" %}</th>
        <td>
          {% if ownership.uncovered %}
            <span class="badge text-bg-warning">{% trans "Uncovered" %}</span>
          {% endif %}
          {% if ownership.out_of_scope %}
            <span class="badge text-bg-warning">{% trans "Out of scope" %}</span>
          {% endif %}
          {% if ownership.backfilled %}
            <span class="badge text-bg-info">{% trans "Backfilled" %}</span>
          {% endif %}
          {% if not ownership.uncovered and not ownership.out_of_scope and not ownership.backfilled %}
            <span class="badge text-bg-success">{% trans "In scope" %}</span>
          {% endif %}
        </td>
      </tr>
      {% if ownership.absence %}
      <tr>
        <th scope="row">{% trans "Absent from Forward for" %}</th>
        <td>
          {% blocktrans count runs=ownership.absence.consecutive_absent_runs trimmed %}
            {{ runs }} consecutive run
          {% plural %}
            {{ runs }} consecutive runs
          {% endblocktrans %}
          <span class="text-muted">({% trans "since" %} {{ ownership.absence.first_absent_at }})</span>
        </td>
      </tr>
      {% endif %}
      <tr>
        <th scope="row">{% trans "Records held" %}</th>
        <td>
          {% for label, count in ownership.holders %}
            {{ label }}: {{ count }}{% if not forloop.last %}<br>{% endif %}
          {% empty %}
            {% trans "None" %}
          {% endfor %}
        </td>
      </tr>
      {% if ownership.delete_blockers %}
      <tr>
        <th scope="row">{% trans "Would refuse a delete" %}</th>
        <td>
          {# The database's own verdict, so it includes rows from other        #}
          {# plugins reached through the cascade - BGP peers attached to this  #}
          {# device's IP addresses, for instance - not only our records.       #}
          {% for label, count in ownership.delete_blockers %}
            <code>{{ label }}</code>&nbsp;&times;&nbsp;{{ count }}{% if not forloop.last %}<br>{% endif %}
          {% endfor %}
        </td>
      </tr>
      {% endif %}
    </table>
    {# The remedy for this one device, when the whole-set prune would take it   #}
    {# anyway. The button narrows that prune rather than deleting directly, so  #}
    {# every gate still applies and the job records a reason if it declines.    #}
    {% if ownership.prune.offered and perms.dcim.delete_device %}
      <form method="post" action="{{ ownership.prune.url }}" class="mt-2"
            onsubmit="return confirm('{% blocktrans %}Remove this device from NetBox via {{ ownership.prune.sync_name }}? This also removes its interfaces and IP addresses.{% endblocktrans %}');">
        {% csrf_token %}
        <input type="hidden" name="device" value="{{ object.pk }}">
        {% if ownership.prune.held %}
          <div class="form-check d-inline-block me-2 align-middle">
            <input class="form-check-input" type="checkbox" name="include_quarantined" id="include_quarantined_device" value="1">
            <label class="form-check-label small" for="include_quarantined_device">
              {% blocktrans with runs=ownership.prune.required_runs hours=ownership.prune.required_hours %}Delete now, before the absence has persisted for {{ runs }} syncs and {{ hours }} hours{% endblocktrans %}
            </label>
          </div>
        {% endif %}
        <button type="submit" class="btn btn-sm btn-danger">
          <i class="mdi mdi-trash-can-outline" aria-hidden="true"></i>&nbsp;{% blocktrans with sync=ownership.prune.sync_name %}Remove from NetBox via {{ sync }}{% endblocktrans %}
        </button>
        {% if ownership.prune.held %}
          <p class="text-muted small mb-0 mt-1">
            {% blocktrans with runs=ownership.prune.required_runs hours=ownership.prune.required_hours %}Forward no longer reports this device, but a device disabled in Forward looks exactly the same, so the absence must persist for {{ runs }} consecutive syncs and {{ hours }} hours before the prune will delete it.{% endblocktrans %}
          </p>
        {% endif %}
      </form>
    {% elif ownership.prune.still_reported and ownership.prune.endpoint_detail %}
      <p class="text-muted small mt-2 mb-0">
        {% blocktrans trimmed with reason=ownership.prune.endpoint_detail_label %}
          Forward still reports this device as an SNMP endpoint, but the
          endpoint scope excludes it: {{ reason }}. That is a scoping decision,
          not a removal, so the uncovered cleanup will never delete it.
        {% endblocktrans %}
        {% if ownership.prune.endpoint_detail == "endpoint_untagged" %}
          {% trans "Add one of the endpoint's Forward tags to the sync's include tags, or tag the endpoint in Forward, to cover it again." %}
        {% elif ownership.prune.endpoint_detail == "endpoint_generic" %}
          {% trans "Enable generic endpoint import on the source to cover it again, or delete it by hand if it should not have been imported." %}
        {% elif ownership.prune.endpoint_detail == "endpoint_scope_off" %}
          {% trans "Enable endpoint import on the source to cover it again." %}
        {% elif ownership.prune.endpoint_detail == "endpoint_cimc" %}
          {% trans "CIMC controllers are imported as inventory items of their server; this standalone device predates that and can be deleted by hand." %}
        {% elif ownership.prune.endpoint_detail == "endpoint_no_snmp" %}
          {% trans "Restore SNMP collection for the endpoint in Forward to cover it again." %}
        {% endif %}
      </p>
    {% elif ownership.prune.still_reported %}
      <p class="text-muted small mt-2 mb-0">
        {% blocktrans trimmed %}
          Forward still reports this device; it carries none of this sync's
          include tags. That is a scoping decision, not a removal, so the
          uncovered cleanup will never delete it. Change the tags in Forward or
          the sync's include tags to bring it back into scope.
        {% endblocktrans %}
      </p>
    {% endif %}
    {% if ownership.prune.absent_detail %}
      {# The snapshot has no such device, but Forward's configuration still  #}
      {# lists it under an include tag - which is what the Forward UI shows, #}
      {# and why an operator reads this as "tagged in Forward, not synced".  #}
      <p class="text-muted small mb-0 mt-1">
        {% blocktrans trimmed with reason=ownership.prune.absent_detail_label %}
          Forward's device configuration still shows it: {{ reason }}. The
          sync reads the snapshot, so a device the snapshot does not carry
          cannot be tagged or updated in NetBox however it is tagged in
          Forward.
        {% endblocktrans %}
        {% if ownership.prune.absent_detail == "absent_configured_disabled" %}
          {% trans "Re-enable collection for the device in Forward to cover it again, or remove it here if the disable is permanent." %}
        {% elif ownership.prune.absent_detail == "absent_configured_uncollected" %}
          {% trans "Check the device's collection status in Forward; once a snapshot carries it again the sync covers it automatically." %}
        {% elif ownership.prune.absent_detail == "absent_tag_only" %}
          {% trans "The tag entry outlived the device: a vsys or vdom child the snapshot no longer models, or a device removed from collection without clearing its tags." %}
        {% endif %}
      </p>
    {% endif %}
    {% if ownership.holders %}
      <p class="text-muted mb-0">
        {% blocktrans trimmed %}
          Deleting this device from NetBox, here or from the device list, also
          removes these Forward records; the next sync will not look for it.
          The scope reconciliation panel on the owning sync is the gated way:
          it deletes only devices Forward no longer reports, applies the
          absence quarantine and the shrink refusal, and records what it
          removed.
        {% endblocktrans %}
      </p>
    {% endif %}
    {% if ownership.foreign_delete_blockers %}
      {# Be exact about the limit: the prune releases OUR rows and then asks   #}
      {# the database to delete the device. A row another plugin holds it with #}
      {# is reported, not removed, so the prune refuses this device too until  #}
      {# that row is gone. Promising otherwise would send an operator to a     #}
      {# button that cannot help them, so this says what to do instead.        #}
      <div class="alert alert-warning mt-2 mb-0" role="alert">
        <p class="mb-2">
          {% blocktrans trimmed %}
            Some of the records holding this device belong to another plugin,
            not to Forward. Scope reconciliation releases only its own, so it
            will refuse this device too and report which model refused it.
          {% endblocktrans %}
        </p>
        {% if ownership.release_blockers.offered and perms.dcim.delete_device %}
          <p class="mb-2">
            {% blocktrans trimmed %}
              These are all rows this plugin's own routing integration
              re-syncs from Forward, so releasing them costs nothing the next
              sync does not restore. Releasing deletes exactly the rows named
              below - nothing else, and never the device itself.
            {% endblocktrans %}
          </p>
          <form method="post" action="{{ ownership.release_blockers.url }}" class="mb-2"
                onsubmit="return confirm('{% blocktrans %}Release the delete-blocking rows named below? This deletes them, not the device.{% endblocktrans %}');">
            {% csrf_token %}
            <input type="hidden" name="device" value="{{ ownership.device_pk }}">
            <input type="hidden" name="expected_blockers_json" value="{{ ownership.release_blockers.expected_blockers_json }}">
            <p class="mb-2">
              {% for label, count in ownership.release_blockers.releasable %}<code>{{ label }}</code>&nbsp;&times;&nbsp;{{ count }}{% if not forloop.last %}, {% endif %}{% endfor %}
            </p>
            <button type="submit" class="btn btn-sm btn-warning">
              <i class="mdi mdi-lock-open-variant-outline" aria-hidden="true"></i>&nbsp;{% trans "Release these rows" %}
            </button>
          </form>
          <p class="mb-0 small">
            {% trans "Once released, delete the device here or from Prune uncovered devices on the owning sync." %}
          </p>
        {% else %}
          <p class="mb-1">{% trans "To delete this device:" %}</p>
          <ol class="mb-2">
            <li>
              {% blocktrans trimmed %}
                Delete these records first, from the pages their own plugin
                provides:
              {% endblocktrans %}
              {% for label, count in ownership.foreign_delete_blockers %}<code>{{ label }}</code>&nbsp;&times;&nbsp;{{ count }}{% if not forloop.last %}, {% endif %}{% endfor %}
            </li>
            <li>{% trans "Then delete the device, here or from Prune uncovered devices on the owning sync; either releases the Forward records." %}</li>
          </ol>
          <p class="mb-0 small">
            {% blocktrans trimmed %}
              Records derived from Forward data are recreated by the next sync,
              so deleting them is not a permanent loss. Anything you created by
              hand is not — check before deleting. If you would rather we
              confirm which is which, download the support bundle from the sync
              page and send it: it carries these blockers and the counts behind
              them.
            {% endblocktrans %}
          </p>
        {% endif %}
      </div>
    {% endif %}
  </div>
  {% if ownership.primary_sync_url %}
  <div class="card-footer text-end">
    <a class="btn btn-sm btn-outline-secondary" href="{{ ownership.primary_sync_url }}">
      <i class="mdi mdi-broom" aria-hidden="true"></i>&nbsp;{% trans "Scope reconciliation (supported delete)" %}
    </a>
  </div>
  {% endif %}
</div>