{% extends "base.html" %}
{% block title %}{{ t('系统配置') }} · {{ product_name }}{% endblock %}
{% block content %}
<div class="page-header">
  <div>
    <h1>{{ t('系统配置') }}</h1>
  </div>
</div>

{% if errors %}
<div class="alert alert--danger" role="alert">
  <span class="alert__icon" aria-hidden="true">
    <svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="1.8"><circle cx="12" cy="12" r="9"/><path d="M12 7v6M12 16.5v.5"/></svg>
  </span>
  <div class="alert__body">
    <strong>{{ t('保存失败') }}</strong>
    <ul class="settings-error-list">
      {% for key, message in errors.items() %}
      <li>
        {% if key == "_form" %}{{ t(message) }}
        {% else %}<a href="#setting-{{ key }}">{{ t(message) }}</a>{% endif %}
      </li>
      {% endfor %}
    </ul>
  </div>
</div>
{% endif %}

<div class="settings-shell">
  <aside class="settings-nav" aria-label="{{ t('系统配置') }}">
    <p class="settings-nav__eyebrow">{{ t('配置分组') }}</p>
    <nav class="settings-nav__list">
      {% for section in sections %}
      <a class="settings-nav__item{% if section.key == active_section %} is-active{% endif %}"
         href="/settings?section={{ section.key }}"
         {% if section.key == active_section %}aria-current="page"{% endif %}>
        <span class="settings-nav__title">{{ t(section.title) }}</span>
        <span class="settings-nav__meta">{{ t(section.meta) }}</span>
      </a>
      {% endfor %}
    </nav>
    <div class="settings-nav__footer">
      <a class="btn btn--secondary btn--block" href="/settings/reset" data-dialog-open="reset-all-settings">{{ t('恢复全部默认值') }}</a>
    </div>
  </aside>

  <section class="settings-main">
    {% if active_group %}
    <form class="card settings-form" method="post" action="/settings"
          data-submit-loading data-async-form data-settings-form data-leave-guard>
      <input type="hidden" name="_csrf" value="{{ csrf_token }}">
      <input type="hidden" name="section" value="{{ active_section }}">
      <div class="settings-panel-head">
        <div>
          <h2 class="settings-panel-title">{{ t(active_group.title) }}</h2>
          <p class="settings-panel-desc">{{ t(active_group.description) }}</p>
        </div>
      </div>

      {% for subgroup in active_group.subgroups %}
      {% if subgroup.title %}<h3 class="settings-subtitle">{{ t(subgroup.title) }}</h3>{% endif %}
      <div class="settings-rows">
        {% for row in subgroup.rows %}
        <div class="settings-field-row">
          <div class="settings-field-copy">
            <div class="settings-field-title">
              <label class="field__label" for="setting-{{ row.key }}">{{ t(row.label) }}</label>
              <span class="settings-effect">{{ t(row.effect) }}</span>
            </div>
            <p class="field__hint" id="hint-setting-{{ row.key }}">
              {{ t('默认') }} {{ row.default }}，{{ t('范围') }} {{ row.low }}–{{ row.high }}。{{ t(row.help) }}
            </p>
            {% if row.error %}
            <p class="field__error" id="err-setting-{{ row.key }}" role="alert">{{ t(row.error) }}</p>
            {% endif %}
          </div>
          <div class="settings-field-control">
            {% if row.key == "backup_keep_count" and not sqlite_config %}
            <p class="field__hint">{{ t('仅在 SQLite 配置库上生效，当前配置库不会使用这项。') }}</p>
            {% else %}
            <div class="input-group input-group--narrow">
              <input class="input" type="number" inputmode="numeric"
                     id="setting-{{ row.key }}" name="{{ row.key }}"
                     value="{{ row.value }}" min="{{ row.low }}" max="{{ row.high }}"
                     aria-describedby="hint-setting-{{ row.key }}{% if row.error %} err-setting-{{ row.key }}{% endif %}"
                     {% if row.error %}aria-invalid="true"{% endif %}>
              <span class="input-group__suffix">{{ t(row.unit) }}</span>
            </div>
            <a class="settings-field__reset" href="/settings/reset?key={{ row.key }}&section={{ active_section }}" data-dialog-open="reset-setting-{{ row.key }}">{{ t('恢复本项默认') }}</a>
            {% endif %}
          </div>
        </div>
        {% endfor %}
      </div>
      {% endfor %}

      <div class="settings-actions">
        <div class="alert alert--success" data-settings-notice role="status" hidden>
          <span class="alert__icon" aria-hidden="true">
            <svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="1.8"><circle cx="12" cy="12" r="9"/><path d="m8 12 3 3 5-6"/></svg>
          </span>
          <div class="alert__body"><strong data-notice-text></strong></div>
        </div>
        <span class="settings-actions__hint">{{ t('保存本组会写入审计；切换分组前请先保存。') }}</span>
        <span class="settings-actions__buttons">
          <button class="btn btn--primary" type="submit" data-loading-label="{{ t('保存中…') }}">{{ t('保存本组配置') }}</button>
        </span>
      </div>
    </form>
    {% elif active_section == "security" %}
    <section class="card settings-panel">
      <div class="settings-panel-head">
        <div>
          <h2 class="settings-panel-title">{{ t('安全边界') }}</h2>
          <p class="settings-panel-desc">{{ t('这些规则是硬边界，不通过系统配置放宽。') }}</p>
        </div>
      </div>
      <div class="settings-prose">
        <p>{{ t('只读白名单、危险命令、目标范围、密钥与 TLS 校验不受系统配置影响。') }}</p>
        <p>{{ t('本页只调整默认值和运行节奏，不改变“能查什么、能连哪里”。') }}</p>
        <ul>
          <li>{{ t('行数、字节、超时和并发只影响资源消耗，不绕过目标授权范围。') }}</li>
          <li>{{ t('危险与高开销规则、目标级 CA/mTLS、密钥加密始终生效。') }}</li>
        </ul>
      </div>
    </section>
    {% elif active_section == "startup" %}
    <section class="card settings-panel">
      <div class="settings-panel-head">
        <div>
          <h2 class="settings-panel-title">{{ t('启动配置') }}</h2>
          <p class="settings-panel-desc">{{ t('由环境变量/启动参数控制，修改需要重启；这里只读展示。') }}</p>
        </div>
      </div>
      <dl class="settings-readonly">
        {% for row in startup_rows %}
        <div class="settings-readonly__row">
          <dt>{{ t(row.label) }}</dt>
          <dd><span class="mono">{{ t(row.value) }}</span><span class="badge badge--quiet">{{ t(row.note) }}</span></dd>
        </div>
        {% endfor %}
      </dl>
    </section>
    {% elif active_section == "history" %}
    <section class="card settings-panel">
      <div class="settings-panel-head">
        <div>
          <h2 class="settings-panel-title">{{ t('最近变更') }}</h2>
          <p class="settings-panel-desc">{{ t('最近 5 条系统配置审计摘要。') }}</p>
        </div>
      </div>
      {% if history %}
      <ol class="settings-history">
        {% for change in history %}
        <li>
          <span class="settings-history__time">{{ local_time(change.at) }}</span>
          <span class="settings-history__summary">{{ change.summary }}</span>
          <span class="settings-history__actor">{{ change.actor }}</span>
        </li>
        {% endfor %}
      </ol>
      {% else %}
      <p class="muted small">{{ t('还没有系统配置变更记录。') }}</p>
      {% endif %}
    </section>
    {% endif %}
  </section>
</div>

<dialog id="reset-all-settings" class="modal" aria-labelledby="reset-all-settings-title">
  <div class="modal__panel">
    <button class="modal__close" type="button" data-dialog-close aria-label="{{ t('关闭') }}">×</button>
    <h2 id="reset-all-settings-title">{{ t('恢复默认配置') }}</h2>
    <p class="field__hint">{{ t('这会把所有系统配置恢复为代码默认值，并写入审计。目标、密钥和安全边界不受影响。') }}</p>
    <dl class="summary">
      {% for group in groups %}
      {% for row in group.rows %}
      <div><dt>{{ t(row.label) }}</dt><dd>{{ row.value }} → {{ row.default }}</dd></div>
      {% endfor %}
      {% endfor %}
    </dl>
    <form method="post" action="/settings/reset" class="form-actions form-actions--inline">
      <input type="hidden" name="_csrf" value="{{ csrf_token }}">
      <input type="hidden" name="key" value="">
      <button class="btn btn--secondary" type="button" data-dialog-close>{{ t('取消') }}</button>
      <button class="btn btn--danger" type="submit">{{ t('确认恢复默认值') }}</button>
    </form>
  </div>
</dialog>
{% if active_group %}
{% for row in active_group.rows %}
<dialog id="reset-setting-{{ row.key }}" class="modal" aria-labelledby="reset-setting-title-{{ row.key }}">
  <div class="modal__panel">
    <button class="modal__close" type="button" data-dialog-close aria-label="{{ t('关闭') }}">×</button>
    <h2 id="reset-setting-title-{{ row.key }}">{{ t('恢复单项默认值') }}</h2>
    <p class="field__hint">{{ t('这会把该项恢复为代码默认值，并写入审计。之后仍可再改。') }}</p>
    <dl class="summary">
      <div><dt>{{ t('当前') }}</dt><dd>{{ row.value }}</dd></div>
      <div><dt>{{ t('默认') }}</dt><dd>{{ row.default }}</dd></div>
    </dl>
    <form method="post" action="/settings/reset" class="form-actions form-actions--inline">
      <input type="hidden" name="_csrf" value="{{ csrf_token }}">
      <input type="hidden" name="key" value="{{ row.key }}">
      <button class="btn btn--secondary" type="button" data-dialog-close>{{ t('取消') }}</button>
      <button class="btn btn--danger" type="submit">{{ t('确认恢复该项默认值') }}</button>
    </form>
  </div>
</dialog>
{% endfor %}
{% endif %}
{% endblock %}