{% from "_serial_port_select.html" import device_field %}
{% macro serial_fields(s, prefix, ports) %}
  {{ device_field(s.port, prefix, ports, not remote, links) }}
  {% if 'usb_match' not in hide %}
  <input type="hidden" name="{{ prefix }}usb_match_shown" value="1">
  <label class="chk"><input type="checkbox" name="{{ prefix }}usb_match" {% if s.identity %}checked{% endif %}> {{ _("Find this device by its USB identity if its name changes") }} <span class="muted">({{ _("COMx / ttyUSBx renumbering after re-plugging · VID:PID + serial number") }}{% if s.identity %} · {{ _("bound to") }} <span class="mono">{{ identity_text(s.match) }}</span>{% endif %})</span></label>
  {% endif %}
  <div class="grid3">
    <label>{{ _("Baud rate") }}
      <select name="{{ prefix }}baudrate" data-custom="{{ prefix }}custom_baud">
        {% for b in baudrates %}<option value="{{ b }}" {% if b == s.baudrate %}selected{% endif %}>{{ b }}</option>{% endfor %}
        <option value="custom" {% if s.baudrate not in baudrates %}selected{% endif %}>{{ _("Custom…") }}</option>
      </select>
      <input type="number" required name="{{ prefix }}custom_baud" class="custom-input" min="1"
             value="{{ s.baudrate if s.baudrate not in baudrates else '' }}"
             placeholder="{{ _('e.g. %(example)s', example='250000') }}" {% if s.baudrate in baudrates %}hidden disabled{% endif %}>
    </label>
    <label>{{ _("Data bits") }}
      <select name="{{ prefix }}bytesize">{% for n in bytesizes %}<option value="{{ n }}" {% if n == s.bytesize %}selected{% endif %}>{{ n }}</option>{% endfor %}</select>
    </label>
    <label>{{ _("Parity") }}
      <select name="{{ prefix }}parity">{% for p in parities %}<option value="{{ p }}" {% if p == s.parity %}selected{% endif %}>{{ {"N": _("None"), "E": _("Even"), "O": _("Odd"), "M": _("Mark"), "S": _("Space")}[p] }}</option>{% endfor %}</select>
    </label>
  </div>
  <div class="grid3">
    <label>{{ _("Stop bits") }}
      <select name="{{ prefix }}stopbits">{% for st in stopbits %}<option value="{{ st }}" {% if st == s.stopbits %}selected{% endif %}>{{ st }}</option>{% endfor %}</select>
    </label>
    <label>{{ _("Flow control") }}
      <select name="{{ prefix }}flowcontrol">{% for f in flowcontrols %}<option value="{{ f }}" {% if f == s.flowcontrol %}selected{% endif %}>{{ {"none": _("None"), "rtscts": _("RTS/CTS (hardware)"), "xonxoff": _("XON/XOFF (software)"), "dsrdtr": _("DSR/DTR (hardware)")}.get(f, f) }}</option>{% endfor %}</select>
    </label>
    <label class="chk chk-pad" title="{{ _('Keeps out other ser2netweb mappings and programs that lock a port the same way (picocom, tio, miniterm); not minicom, a login prompt or ModemManager. Windows: a port is always open in one program only.') }}"><input type="checkbox" name="{{ prefix }}exclusive" {% if s.exclusive %}checked{% endif %}> {{ _("Lock the port (flock)") }}</label>
  </div>
  <div class="grid2">
    <label>{{ _("RTS on open") }}
      <select name="{{ prefix }}rts_on_open">{% for x in line_states %}<option value="{{ x }}" {% if x == s.rts_on_open %}selected{% endif %}>{{ {"on": _("On"), "off": _("Off"), "keep": _("Leave as is")}.get(x, x) }}</option>{% endfor %}</select>
    </label>
    <label>{{ _("DTR on open") }}
      <select name="{{ prefix }}dtr_on_open">{% for x in line_states %}<option value="{{ x }}" {% if x == s.dtr_on_open %}selected{% endif %}>{{ {"on": _("On"), "off": _("Off"), "keep": _("Leave as is")}.get(x, x) }}</option>{% endfor %}</select>
    </label>
  </div>
  {% if 'port_lock' not in hide %}
  <details class="port-lock"{% if s.advanced.tiocexcl or s.advanced.respect_uucp_locks %} open{% endif %}>
    <summary>{{ _("Keeping other programs off the port (Linux, macOS)") }}</summary>
    <p class="muted">{{ _("“Lock the port” (flock) keeps out other ser2netweb mappings and programs that lock a port the same way (picocom, tio, miniterm), but not minicom, programs that use no lock, a login prompt or ModemManager. On Windows a port is always open in one program only, and these options do nothing.") }}</p>
    <input type="hidden" name="{{ prefix }}port_lock_shown" value="1">
    <label class="chk"><input type="checkbox" name="{{ prefix }}tiocexcl" {% if s.advanced.tiocexcl %}checked{% endif %}> {{ _("Keep other programs out while the port is open") }} <span class="muted">({{ _('<span class="mono">TIOCEXCL</span>: their open fails as busy; services running as root are not kept out') }})</span></label>
    <label class="chk"><input type="checkbox" name="{{ prefix }}respect_uucp_locks" {% if s.advanced.respect_uucp_locks %}checked{% endif %}> {{ _("Don't open a port another program has locked with a UUCP lock file") }} <span class="muted">({{ _('minicom, cu: <span class="mono">LCK..</span> files in /run/lock or /var/lock; ser2netweb makes none') }})</span></label>
  </details>
  {% endif %}
  <details class="rs485"{% if s.advanced.rs485_enabled %} open{% endif %}>
    <summary>{{ _("RS-485 (half-duplex, hardware auto-RTS)") }}</summary>
    <label class="chk"><input type="checkbox" name="{{ prefix }}rs485_enabled" {% if s.advanced.rs485_enabled %}checked{% endif %}> {{ _("Enable RS-485 mode") }} <span class="muted">({{ _('Linux <span class="mono">TIOCSRS485</span>; the driver must support it') }})</span></label>
    <div class="grid3">
      <label>{{ _("RTS delay before TX (ms)") }}
        <input type="number" step="any" min="0" name="{{ prefix }}rs485_delay_before_tx_ms" value="{{ s.advanced.rs485_delay_before_tx_ms }}"></label>
      <label>{{ _("RTS delay after TX (ms)") }}
        <input type="number" step="any" min="0" name="{{ prefix }}rs485_delay_after_tx_ms" value="{{ s.advanced.rs485_delay_after_tx_ms }}"></label>
      <label class="chk chk-pad"><input type="checkbox" name="{{ prefix }}rs485_rts_level_for_tx" {% if s.advanced.rs485_rts_level_for_tx %}checked{% endif %}> {{ _("RTS high during TX") }}</label>
    </div>
  </details>
{% endmacro %}

{% set ip_values = ips | map(attribute='value') | list %}
{% set bind_choice = '*' if mapping.network.both_families else mapping.network.bind_ip %}
{% set bind_is_custom = bind_choice not in ip_values %}
<form class="mform" hx-post="{{ base }}{{ '/api/cluster/peer-save' if remote else '/api/mappings/save' }}" hx-target="#form-panel" hx-swap="innerHTML show:top"
      hx-disabled-elt="find button[type=submit]"{% if error %} data-dirty="1"{% endif %}>
  <input type="hidden" name="_csrf" value="{{ request.state.csrf_token }}">
  {% if remote %}
  <input type="hidden" name="host" value="{{ remote.host }}">
  <input type="hidden" name="port" value="{{ remote.port }}">
  {% endif %}
  {% if not is_new %}<input type="hidden" name="id" value="{{ remote.id if remote else mapping.id }}">{% endif %}
  {% if rev and not is_new %}<input type="hidden" name="rev" value="{{ rev }}">{% endif %}

  <div class="form-head">
    <h3 id="panel-title" tabindex="-1">{{ _("New mapping") if is_new else _("Edit mapping") }}{% if remote %} <span class="tag">{{ _("on %(host)s", host=remote.addr) }}</span>{% endif %}</h3>
    <button type="button" class="btn sm" id="form-cancel" data-cancel>{{ _("Cancel") }}</button>
  </div>
  {% if remote and remote.version_note %}<div class="banner warn">{{ remote.version_note }}</div>{% endif %}
  {% if error %}<div class="banner error" role="alert" tabindex="-1">{{ error }}</div>{% endif %}
  {% for note in mapping.ignored_settings() %}<div class="banner warn">{{ note }}</div>{% endfor %}

  <div class="grid3">
    <label>{{ _("Name") }} <input type="text" name="name" value="{{ mapping.name }}" placeholder="{{ _('e.g. %(example)s', example='PLC-1') }}" required></label>
    <label>{{ _("Type") }}
      <select name="kind">
        <option value="net" {% if mapping.kind == 'net' %}selected{% endif %}>{{ _("Serial ↔ Network") }}</option>
        <option value="serialbridge" {% if mapping.kind == 'serialbridge' %}selected{% endif %}>{{ _("Serial ↔ Serial") }}</option>
      </select>
    </label>
    <label class="chk chk-pad"><input type="checkbox" name="enabled" {% if mapping.enabled %}checked{% endif %}> {{ _("Enabled") }}</label>
  </div>

  <fieldset>
    <legend>{{ _("Serial port") }}{% if mapping.kind == 'serialbridge' %} A{% endif %}</legend>
    {{ serial_fields(mapping.serial, "serial_", ports) }}
  </fieldset>

  <fieldset data-show-when="kind=serialbridge">
    <legend>{{ _("Serial port") }} B</legend>
    {{ serial_fields(mapping.serial_b, "serial_b_", ports) }}
  </fieldset>

  <fieldset data-show-when="kind=net">
    <legend>{{ _("Network") }}</legend>
    <div class="grid3">
      <label>{{ _("Mode") }}
        <select name="network_mode">
          <option value="server" {% if mapping.network.mode == 'server' %}selected{% endif %}>{{ _("TCP server (listen)") }}</option>
          <option value="client" {% if mapping.network.mode == 'client' %}selected{% endif %}>{{ _("TCP client (connect out)") }}</option>
          <option value="udp" {% if mapping.network.mode == 'udp' %}selected{% endif %}>UDP</option>
        </select>
      </label>
      <label>{{ _("Protocol") }}
        <select name="network_protocol">{% for pr in protocols %}<option value="{{ pr }}" {% if pr == mapping.network.protocol %}selected{% endif %}{% if pr != 'raw' %} data-show-when="network_mode=server,client"{% endif %}>{{ pr }}</option>{% endfor %}</select>
      </label>
      <label class="chk chk-pad"><input type="checkbox" name="network_read_only" {% if mapping.network.read_only %}checked{% endif %}> {{ _("Read-only") }}</label>
    </div>

    <div class="grid2" data-show-when="network_mode=server,udp">
      {% if 'dual_stack' not in hide %}<input type="hidden" name="network_dual_stack_shown" value="1">{% endif %}
      <label>{{ _("Bind IP") }}{% if 'dual_stack' not in hide %} <span class="muted">({{ _("0.0.0.0 takes IPv4 clients only, :: IPv6 clients only") }})</span>{% endif %}
        <select name="network_bind_ip" data-custom="network_bind_ip_custom">
          {% for ip in ips %}<option value="{{ ip.value }}" {% if ip.value == bind_choice %}selected{% endif %}>{{ ip.label }}</option>{% endfor %}
          <option value="custom" {% if bind_is_custom %}selected{% endif %}>{{ _("Custom…") }}</option>
        </select>
        <input type="text" name="network_bind_ip_custom" class="custom-input"
               value="{{ mapping.network.bind_ip if bind_is_custom else '' }}"
               placeholder="{{ _('e.g. %(example)s', example='10.0.0.5') }}" {% if not bind_is_custom %}hidden disabled{% endif %}>
      </label>
      <label>{{ _("Listen port") }} <input type="number" required name="network_port" min="1" max="65535" value="{{ mapping.network.port }}"></label>
    </div>

    <div class="grid3" data-show-when="network_mode=client">
      <label>{{ _("Remote host") }} <input type="text" name="network_remote_host" value="{{ mapping.network.remote_host }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.20') }}"></label>
      <label>{{ _("Remote port") }} <input type="number" required name="network_remote_port" min="1" max="65535" value="{{ mapping.network.remote_port or '' }}"></label>
      <label>{{ _("Connect timeout (s)") }} <span class="muted">({{ _("0 = OS default") }})</span>
        <input type="number" required name="network_connect_timeout_s" min="0" max="3600" step="any" value="{{ '%g'|format(mapping.network.connect_timeout_s) }}"></label>
    </div>
    {% if 'failover' not in hide %}
    <div class="grid2" data-show-when="network_mode=client">
      <label>{{ _("Other targets") }} <span class="muted">({{ _("host:port, tried in this order when the remote host can’t be reached; several separated by spaces") }})</span>
        <input type="text" name="network_remote_targets" value="{{ mapping.network.remote_targets | join(' ') }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.21:4001') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      <label>{{ _("Back to the first target (s)") }} <span class="muted">({{ _("0 = only when the link in use fails; else the remote host is tried again this often, and the link moves back once it answers") }})</span>
        <input type="number" name="network_failover_return_s" min="0" max="86400" value="{{ mapping.network.failover_return_s }}"></label>
    </div>
    {% endif %}

    <div data-show-when="network_mode=server">
      <div class="grid3">
        <label>{{ _("Max connections") }} <input type="number" required name="network_max_connections" min="1" value="{{ mapping.network.max_connections }}"></label>
        <label class="chk chk-pad"><input type="checkbox" name="network_kick_old_user" {% if mapping.network.kick_old_user %}checked{% endif %}> {{ _("Kick old client") }}</label>
      </div>
      <label>{{ _("High-priority client IPs / CIDRs") }} <span class="muted">({{ _("kick an existing client when full") }})</span>
        <input type="text" name="network_priority_client_ips" value="{{ mapping.network.priority_client_ips | join(' ') }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.10') }}">
      </label>
      {% if 'open_on_connect' not in hide %}
      <div class="grid2" data-show-when="network_protocol=raw,telnet,rfc2217">
        <input type="hidden" name="network_open_on_connect_shown" value="1">
        <label class="chk chk-pad"><input type="checkbox" name="network_open_on_connect" {% if mapping.network.open_on_connect %}checked{% endif %}> {{ _("Open the serial port only while a client is connected") }} <span class="muted">({{ _("another program can use the port in between; a client is taken once the port is open. The web console counts as a client") }})</span></label>
        <label>{{ _("Keep the port open after the last client (s)") }}
          <input type="number" name="network_port_linger_s" min="0" max="3600" step="any" value="{{ '%g'|format(mapping.network.port_linger_s) }}"></label>
      </div>
      {% endif %}
      {% if 'pool' not in hide %}
      <label data-show-when="network_protocol=raw,telnet,rfc2217">{{ _("Port pool") }} <span class="muted">({{ _("optional: the name of a pool from Settings → Port pools, whose port hands each new client to the first mapping of the pool with a free connection; not with TLS") }})</span>
        <input type="text" name="network_pool" maxlength="64" value="{{ mapping.network.pool }}" placeholder="{{ _('optional') }}" autocapitalize="none" autocorrect="off" spellcheck="false">
      </label>
      {% endif %}
      {% if mapping.network.kick_old_user and not mapping.network.allowed_client_ips %}
      <p class="sub mb-sm" data-kick-hint>{{ _("“Kick old client” is on and no allowed client IPs are set: any host that can reach this port can take the connection over from the client using it.") }}</p>
      {% endif %}
    </div>

    <div class="grid3" data-show-when="network_mode=server,client">
      <label data-show-when="network_protocol=raw,telnet,rfc2217">{{ _("Client buffer (chunks)") }} <input type="number" required name="network_client_queue_max" min="16" value="{{ mapping.network.client_queue_max }}"></label>
    </div>

    <div data-show-when="network_mode=server,udp">
      <label>{{ _("Allowed client IPs / CIDRs") }} <span class="muted">({{ _("blank = any; enforced for TCP server and UDP") }})</span>
        <input type="text" name="network_allowed_client_ips" value="{{ mapping.network.allowed_client_ips | join(' ') }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.0/24') }}">
      </label>
      {% if 'writer_ips' not in hide %}
      <label data-show-when="network_protocol=raw,telnet,rfc2217">{{ _("Writer client IPs / CIDRs") }} <span class="muted">({{ _("blank = every client may send; set: only these may send to the device, the others only receive its output") }})</span>
        <input type="text" name="network_writer_client_ips" value="{{ mapping.network.writer_client_ips | join(' ') }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.10') }}">
      </label>
      {% endif %}
    </div>

    {% if 'udp_reply' not in hide %}
    <div data-show-when="network_mode=udp">
      <div class="grid3">
        <label>{{ _("Reply to IP") }} <span class="muted">({{ _("blank = the last sender") }})</span>
          <input type="text" name="network_udp_peer_host" value="{{ mapping.network.udp_peer_host }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.20') }}"></label>
        <label>{{ _("Reply to port") }} <input type="number" name="network_udp_peer_port" min="1" max="65535" value="{{ mapping.network.udp_peer_port or '' }}"></label>
        <label>{{ _("Peer timeout (s)") }} <span class="muted">({{ _("forget the last sender after this long without a datagram · 0 = never") }})</span>
          <input type="number" name="network_udp_peer_timeout_s" min="0" value="{{ mapping.network.udp_peer_timeout_s }}"></label>
      </div>
      {% if 'udp_targets' not in hide %}
      <input type="hidden" name="network_udp_targets_shown" value="1">
      <div class="grid2">
        <label>{{ _("Also send the device’s output to") }} <span class="muted">({{ _("IP:port, always, whoever sends; several separated by spaces; e.g. an NMEA feed to a broadcast address") }})</span>
          <input type="text" name="network_udp_targets" value="{{ mapping.network.udp_targets | join(' ') }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.255:10110') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
        <label class="chk chk-pad"><input type="checkbox" name="network_udp_broadcast" {% if mapping.network.udp_broadcast %}checked{% endif %}> {{ _("Allow broadcast") }} <span class="muted">({{ _("needed to send to a broadcast address") }})</span></label>
      </div>
      {% endif %}
      <p class="sub mb-sm">{{ _("The device’s output goes to the sender of the last datagram from an allowed IP, so any of them can take it over; with a reply address it always goes there. The allow-list checks a datagram’s source address, which can be forged: on an untrusted network use TCP with TLS, or a firewall.") }}</p>
    </div>
    {% endif %}

    <div data-show-when="network_mode=server,client">
      <label class="chk"><input type="checkbox" name="network_tls" {% if mapping.network.tls %}checked{% endif %}> {{ _("TLS (encrypt the data bridge)") }}</label>
      <div class="grid2">
        <label>{{ _("TLS certificate path") }}{% if 'tls_checks' not in hide %} <span class="muted" data-show-when="network_mode=client">({{ _("optional: for a server that asks for a client certificate") }})</span>{% endif %}
          <input type="text" name="network_tls_cert" value="{{ mapping.network.tls_cert }}" placeholder="/path/cert.pem"></label>
        <label>{{ _("TLS key path") }} <input type="text" name="network_tls_key" value="{{ mapping.network.tls_key }}" placeholder="/path/key.pem"></label>
      </div>
      {% if 'tls_checks' not in hide %}
      <div data-show-when="network_mode=server">
        <label>{{ _("Client CA certificate file") }} <span class="muted">({{ _("blank = no client certificate asked for; set: every client needs a certificate from it") }})</span>
          <input type="text" name="network_tls_client_ca" value="{{ mapping.network.tls_client_ca }}" placeholder="/path/clients-ca.pem" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      </div>
      <div data-show-when="network_mode=client">
        <div class="grid2">
          <label>{{ _("CA certificate file") }} <span class="muted">({{ _("the server’s certificate must come from it and name the remote host") }})</span>
            <input type="text" name="network_tls_ca" value="{{ mapping.network.tls_ca }}" placeholder="/path/ca.pem" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
          <label>{{ _("Server certificate fingerprint (SHA-256)") }} <span class="muted">({{ _("blank = not checked; several: separate with commas") }})</span>
            <input type="text" name="network_tls_fingerprint" value="{{ mapping.network.tls_fingerprint }}" placeholder="AB:CD:EF:…" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
        </div>
        <p class="sub mb-sm">{{ _("Without a CA file or a fingerprint the link is encrypted, but the server’s certificate is not checked: anyone on the network path could pose as the server. The mapping’s log shows the fingerprint of the certificate at each connection.") }}</p>
      </div>
      {% endif %}
      {% if not remote and request.state.user and request.state.user.role == 'admin' %}
      <details class="mb-sm" id="tls-upload-box">
        <summary>{{ _("Upload TLS files from this computer…") }}</summary>
        <p class="muted mb-sm">{{ _('PEM files, up to %(kb)s KB each. They are checked (the key must be the certificate’s; an encrypted key needs its password in the field below), kept in the data folder’s <span class="mono">tls/</span> and their paths are put into the fields above: save the form to use them.', kb=tls_upload_kb) }}</p>
        <div class="grid2">
          <label>{{ _("Certificate file") }} <input type="file" name="cert" form="tls-upload" accept=".pem,.crt,.cer,.cert,.txt"></label>
          <label>{{ _("Key file") }} <input type="file" name="key" form="tls-upload" accept=".pem,.key,.txt"></label>
        </div>
        {% if 'tls_checks' not in hide %}
        <label data-show-when="network_mode=server">{{ _("Client CA certificate file") }} <input type="file" name="client_ca" form="tls-upload" accept=".pem,.crt,.cer,.cert,.der,.txt"></label>
        <label data-show-when="network_mode=client">{{ _("CA certificate file") }} <input type="file" name="ca" form="tls-upload" accept=".pem,.crt,.cer,.cert,.der,.txt"></label>
        {% endif %}
        <button class="btn sm" type="button" data-submit-form="tls-upload" id="tls-upload-send">{{ _("Upload and check") }}</button>
      </details>
      {% endif %}
      {% if 'tls_key_password' not in hide %}
      {% set tls_pw_kept = tls_pw_stored if tls_pw_stored is defined else mapping.network.tls_key_password %}
      <div class="grid2">
        <label>{{ _("TLS key password") }} <span class="muted">({{ _("only for an encrypted key") }})</span>
          <input type="password" name="network_tls_key_password" value="{{ tls_pw_typed | default('') }}" placeholder="{{ _('•••••• (unchanged)') if tls_pw_kept else _('optional') }}" autocomplete="new-password" data-1p-ignore data-lpignore="true" data-bwignore></label>
        {% if tls_pw_kept %}<label class="chk chk-pad"><input type="checkbox" name="network_tls_key_password_clear" {% if tls_pw_clear | default(false) %}checked{% endif %}> {{ _("Remove the stored password") }}</label>{% endif %}
      </div>
      {% endif %}
    </div>

    <div data-show-when="network_mode=server,client">
      {% if 'disconnect_without_device' not in hide %}
      <div data-show-when="network_protocol=raw,telnet,rfc2217">
        <input type="hidden" name="network_disconnect_without_device_shown" value="1">
        <label class="chk"><input type="checkbox" name="network_disconnect_without_device" {% if mapping.network.disconnect_without_device %}checked{% endif %}> {{ _("Disconnect clients while the serial device is unavailable") }} <span class="muted">({{ _("and refuse new ones until it is back; connect-out connects only while the port is open. Off: clients stay connected and what they send meanwhile is dropped") }})</span></label>
      </div>
      {% endif %}
      <label class="chk"><input type="checkbox" name="network_tcp_keepalive" {% if mapping.network.tcp_keepalive %}checked{% endif %}> TCP keepalive <span class="muted">({{ _("detect a peer that vanished without closing — power loss, cable pull, VPN/NAT drop — and free its slot after ≈ idle + interval × count") }})</span></label>
      <div class="grid3">
        <label>{{ _("Keepalive idle (s)") }} <input type="number" required name="network_keepalive_idle_s" min="1" max="32767" value="{{ mapping.network.keepalive_idle_s }}"></label>
        <label>{{ _("Probe interval (s)") }} <input type="number" required name="network_keepalive_interval_s" min="1" max="32767" value="{{ mapping.network.keepalive_interval_s }}"></label>
        <label>{{ _("Probe count") }} <input type="number" required name="network_keepalive_count" min="1" max="127" value="{{ mapping.network.keepalive_count }}"></label>
      </div>
    </div>
  </fieldset>

  <fieldset>
    <legend>{{ _("Options") }}</legend>
    {%- set hidden_chars = _("It holds control characters (NUL, CR or LF) that this box can’t show; they are kept unless you change the text.") %}
    <div class="grid2" data-show-when="network_protocol=raw,telnet,rfc2217">
      <label>{{ _("Connect banner") }} <span class="muted">(\d {{ _("device") }}, \I IP, \N {{ _("name") }}, \p {{ _("port") }})</span>
        <input type="text" name="opt_banner" value="{{ mapping.options.banner }}" placeholder="{{ _('optional') }}">
        {%- if mapping.options.banner|in_text_box != mapping.options.banner %}<span class="muted">{{ hidden_chars }}</span>{% endif %}
      </label>
      <label>{{ _("Close-on string") }} <span class="muted">({{ _("disconnect clients when the device sends this") }})</span>
        <input type="text" name="opt_closeon" value="{{ mapping.options.closeon }}" placeholder="{{ _('optional') }}">
        {%- if mapping.options.closeon|in_text_box != mapping.options.closeon %}<span class="muted">{{ hidden_chars }}</span>{% endif %}
      </label>
    </div>
    {% if 'modbus_gateway' not in hide %}
    <div class="grid2" data-show-when="network_protocol=modbus">
      <label>{{ _("Response timeout (s)") }} <span class="muted">({{ _("how long an RTU slave gets to begin its reply once the request is out; then exception 0x0B") }})</span>
        <input type="number" name="opt_modbus_response_timeout_s" min="0.01" max="60" step="any" value="{{ mapping.options.modbus_response_timeout_s }}"></label>
      <label>{{ _("Unit map") }} <span class="muted">({{ _("optional: the unit id a master sends = the RTU unit it goes to, such as 255=1, 0=1; blank = as sent") }})</span>
        <input type="text" name="opt_modbus_unit_map" value="{{ mapping.options.modbus_unit_map_text }}" placeholder="255=1" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
    </div>
    {% endif %}
    {% if 'rfc2217_restore' not in hide %}
    <div data-show-when="network_protocol=rfc2217">
      <input type="hidden" name="opt_rfc2217_restore_on_disconnect_shown" value="1">
      <label class="chk"><input type="checkbox" name="opt_rfc2217_restore_on_disconnect" {% if mapping.options.rfc2217_restore_on_disconnect %}checked{% endif %}> {{ _("Restore the serial settings when the RFC 2217 client leaves") }} <span class="muted">({{ _("baud rate, data bits, parity, stop bits and flow control go back to this mapping’s; RTS/DTR stay as they are") }})</span></label>
      {% if 'rfc2217_signature' not in hide %}
      <label>{{ _("RFC 2217 signature") }} <span class="muted">({{ _("the answer to a client that asks for the server’s signature · blank = ser2net") }})</span>
        <input type="text" name="opt_rfc2217_signature" maxlength="128" value="{{ mapping.options.rfc2217_signature }}" placeholder="ser2net"></label>
      {% endif %}
    </div>
    {% endif %}
    {% if 'packing' not in hide %}
    <div class="grid3" data-show-when="network_protocol=raw">
      <label>{{ _("Packing gap (ms)") }} <span class="muted">({{ _("forward the device’s output as one frame once it has sent nothing for this long; one datagram per frame over UDP · 0 = off") }})</span>
        <input type="number" name="opt_pack_gap_ms" min="0" max="60000" value="{{ mapping.options.pack_gap_ms }}"></label>
      <label>{{ _("Packing delimiter") }} <span class="muted">({{ _("a frame ends with these bytes:") }} <span class="mono">\r \n \t \\ \xHH</span> · {{ _("blank = none") }})</span>
        <input type="text" name="opt_pack_delimiter" value="{{ mapping.options.pack_delimiter | escaped_text }}" placeholder="{{ _('e.g. %(example)s', example='\\r\\n') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      <label>{{ _("Packing frame size (bytes)") }} <span class="muted">({{ _("a frame is sent once it has this many bytes · 0 = 4096 while packing is on") }})</span>
        <input type="number" name="opt_pack_max_bytes" min="0" max="65507" value="{{ mapping.options.pack_max_bytes }}"></label>
    </div>
    {% endif %}
    {% if 'poll_string' not in hide %}
    <div data-show-when="network_protocol=raw,telnet,rfc2217">
      <div class="grid3">
        <label>{{ _("Poll string") }} <span class="muted">({{ _("sent to the device on an interval; these stand for bytes:") }} <span class="mono">\r \n \t \\ \xHH</span>)</span>
          <input type="text" name="opt_poll_string" value="{{ mapping.options.poll_string }}" placeholder="{{ _('e.g. %(example)s', example='P\\r\\n') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
        <label>{{ _("Poll interval (s)") }} <span class="muted">({{ _("0 = off") }})</span>
          <input type="number" name="opt_poll_interval_s" min="0" max="86400" step="any" value="{{ '%g'|format(mapping.options.poll_interval_s) }}"></label>
        <label class="chk chk-pad"><input type="checkbox" name="opt_poll_with_clients" {% if mapping.options.poll_with_clients %}checked{% endif %}> {{ _("Also while a TCP client is connected") }}</label>
      </div>
    </div>
    {% endif %}
    <div class="grid2">
      <label>{{ _("Idle timeout (s)") }} <span class="muted">({{ _("TCP; no traffic either way · 0 = off") }})</span>
        <input type="number" required name="opt_idle_timeout_s" min="0" value="{{ mapping.options.idle_timeout_s }}"></label>
      <label>{{ _("Max connection time (s)") }} <span class="muted">({{ _("TCP; 0 = unlimited · 86400 = 24 h") }})</span>
        <input type="number" required name="opt_max_connection_time_s" min="0" value="{{ mapping.options.max_connection_time_s }}"></label>
    </div>
    {% if 'no_data_alarm' not in hide %}
    <div class="grid2">
      <label>{{ _("No-data alarm (s)") }} <span class="muted">({{ _("the device sends nothing this long while its port is open: dashboard, log, notification · 0 = off, else 10 to 604800") }})</span>
        <input type="number" required name="opt_no_data_alarm_s" min="0" max="604800" value="{{ mapping.options.no_data_alarm_s }}"></label>
      <label class="chk chk-pad"><input type="checkbox" name="opt_no_data_reply_only" {% if mapping.options.no_data_reply_only %}checked{% endif %}> {{ _("Only while it doesn’t answer what is sent to it") }} <span class="muted">({{ _("a device that speaks only when asked, e.g. Modbus RTU") }})</span></label>
    </div>
    {% endif %}
    <div class="grid2">
      <label>{{ _("Trace file name") }} <span class="muted">({{ _('record the traffic; kept in the data folder’s <span class="mono">traces/</span> · empty = off') }})</span>
        <input type="text" name="opt_trace_both" value="{{ mapping.options.trace_both }}" placeholder="{{ _('optional, e.g. %(example)s', example='plc1.trace') }}">
      </label>
      <label class="chk chk-pad"><input type="checkbox" name="opt_trace_hexdump" {% if mapping.options.trace_hexdump %}checked{% endif %}> {{ _("Trace as hex dump") }}</label>
    </div>
    <p class="muted mb-sm">{{ _("Traces hold the raw traffic in both directions, personal data and passwords typed to the device included: delete them once they are no longer needed.") }}</p>
    {% if 'trace_rotation' not in hide %}
    <div class="grid2">
      <label>{{ _("Trace file size (MB)") }} <span class="muted">({{ _("then it is rotated") }})</span>
        <input type="number" required name="opt_trace_max_mb" min="0.1" max="1024" step="any" value="{{ '%g'|format(mapping.options.trace_max_mb) }}"></label>
      <label>{{ _("Rotated trace files kept") }} <span class="muted">({{ _("0 = start over") }})</span>
        <input type="number" required name="opt_trace_keep" min="0" max="50" value="{{ mapping.options.trace_keep }}"></label>
    </div>
    {% endif %}
    {% if 'console_encoding' not in hide %}
    <div class="grid2">
      <label>{{ _("Console text encoding") }} <span class="muted">({{ _("how the web console and the hex view show the device’s text, and send what is typed; the bridge passes bytes unchanged") }})</span>
        <select name="opt_console_encoding">{% for value, label in [
          ("utf-8", _("UTF-8 (default)")),
          ("iso-8859-9", _("ISO-8859-9 (Latin-5, Turkish)")),
          ("cp1254", _("Windows-1254 (Turkish)")),
          ("cp857", _("CP857 (DOS, Turkish)")),
          ("iso-8859-1", _("ISO-8859-1 (Latin-1, Western European)")),
          ("cp1252", _("Windows-1252 (Western European)")),
          ("cp437", _("CP437 (DOS, US)"))] %}<option value="{{ value }}" {% if value == mapping.options.console_encoding %}selected{% endif %}>{{ label }}</option>{% endfor %}</select>
      </label>
    </div>
    {% endif %}
  </fieldset>

  <fieldset data-show-when="kind=net">
    <legend>{{ _("MQTT publishing") }} <span class="muted" data-show-when="network_protocol=raw,telnet,rfc2217">({{ _("serial lines → broker; needs paho-mqtt") }})</span><span class="muted" data-show-when="network_protocol=modbus">({{ _("Modbus points → broker, commands → writable points; needs paho-mqtt") }})</span></legend>
    <label class="chk"><input type="checkbox" name="mqtt_enabled" {% if mapping.mqtt.enabled %}checked{% endif %}> <span data-show-when="network_protocol=raw,telnet,rfc2217">{{ _("Publish serial lines to MQTT") }}</span><span data-show-when="network_protocol=modbus">{{ _("Publish the Modbus poll points to MQTT (add them below)") }}</span></label>
    <div class="grid3">
      <label>{{ _("Broker host") }} <input type="text" name="mqtt_host" value="{{ mapping.mqtt.host }}" placeholder="{{ _('e.g. %(example)s', example='192.168.1.5') }}"></label>
      <label>{{ _("Port") }} <input type="number" required name="mqtt_port" min="1" max="65535" value="{{ mapping.mqtt.port }}"></label>
      <label>QoS
        <select name="mqtt_qos">{% for q in [0, 1, 2] %}<option value="{{ q }}" {% if q == mapping.mqtt.qos %}selected{% endif %}>{{ q }}</option>{% endfor %}</select>
      </label>
    </div>
    <div class="grid2">
      <label>{{ _("Base topic") }} <span class="muted" data-show-when="network_protocol=raw,telnet,rfc2217">({{ _("lines publish here; status at &lt;topic&gt;/status") }})</span><span class="muted" data-show-when="network_protocol=modbus"><span data-show-when="mqtt_payload_format=plain">({{ _("points publish to &lt;topic&gt;/&lt;point&gt;; status at &lt;topic&gt;/status") }})</span>{% if 'payload_format' not in hide %}<span data-show-when="mqtt_payload_format=sparkplug_b">({{ _("required, but Sparkplug B doesn’t use it: its topics are spBv1.0/&lt;group ID&gt;/…") }})</span>{% endif %}</span>
        <input type="text" name="mqtt_base_topic" value="{{ mapping.mqtt.base_topic }}" placeholder="{{ _('e.g. %(example)s', example='ser2net/plc1') }}">
      </label>
      <label>{{ _("Client ID") }} <span class="muted">({{ _("blank = auto") }})</span>
        <input type="text" name="mqtt_client_id" value="{{ mapping.mqtt.client_id }}" placeholder="{{ _('e.g. %(example)s', example='s2n-plc1') }}" autocapitalize="none" autocorrect="off" spellcheck="false">
      </label>
    </div>
    {% if 'mqtt5' not in hide %}
    <div class="grid3">
      <label>{{ _("MQTT version") }}
        <select name="mqtt_protocol">
          <option value="3.1.1" {% if mapping.mqtt.protocol != '5' %}selected{% endif %}>3.1.1</option>
          <option value="5" {% if mapping.mqtt.protocol == '5' %}selected{% endif %}>5</option>
        </select></label>
    </div>
    <div data-show-when="mqtt_protocol=5">
      <input type="hidden" name="mqtt_v5_shown" value="1">
      <label class="chk"><input type="checkbox" name="mqtt_clean_start" {% if mapping.mqtt.clean_start is not sameas false %}checked{% endif %}> {{ _("Clean start") }} <span class="muted">({{ _("a new session at every connect. Off, with a client ID and a session expiry: the broker keeps the subscriptions, and delivers the QoS 1 commands that came while the connection was away; Sparkplug B always starts clean") }})</span></label>
      <div class="grid2">
        <label>{{ _("Session expiry (s)") }} <span class="muted">({{ _("how long the broker keeps the session after the connection ends · 0 = not at all") }})</span>
          <input type="number" required name="mqtt_session_expiry_s" min="0" max="4294967295" step="1" value="{{ mapping.mqtt.session_expiry_s }}"></label>
        <label>{{ _("Message expiry of retained data (s)") }} <span class="muted">({{ _("the broker stops handing out a retained line or value this long after it was published · 0 = never") }})</span>
          <input type="number" required name="mqtt_message_expiry_s" min="0" max="4294967295" step="1" value="{{ mapping.mqtt.message_expiry_s }}"></label>
      </div>
    </div>
    {% endif %}
    {% if 'mqtt_retain' not in hide %}
    <div data-show-when="mqtt_payload_format=plain">
      <input type="hidden" name="mqtt_retain_shown" value="1">
      <label class="chk"><input type="checkbox" name="mqtt_retain" {% if mapping.mqtt.retain %}checked{% endif %}> {{ _("Retain the data") }} <span class="muted">({{ _("serial lines, Modbus values: a subscriber that connects later gets the last one at once") }})</span></label>
    </div>
    {% endif %}
    <div class="grid3">
      <label>{{ _("Username") }} <input type="text" name="mqtt_username" value="{{ mapping.mqtt.username }}" placeholder="{{ _('optional') }}" autocomplete="off" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      {# write-only: the stored password is never in the page; blank keeps it #}
      {% set pw_stored = mqtt_password_stored | default(false) %}
      <label>{{ _("Password") }}{% if pw_stored %} <span class="muted">({{ _("blank = unchanged") }})</span>{% endif %}
        <input type="hidden" name="mqtt_password_write_only" value="1">
        <input type="password" name="mqtt_password" value="{{ mqtt_password_typed | default('') }}" placeholder="{{ _('•••••• (unchanged)') if pw_stored else _('optional') }}" autocomplete="new-password" data-1p-ignore data-lpignore="true" data-bwignore></label>
      <label class="chk chk-pad"><input type="checkbox" name="mqtt_tls" {% if mapping.mqtt.tls %}checked{% endif %}> TLS</label>
    </div>
    {% if pw_stored %}<label class="chk"><input type="checkbox" name="mqtt_password_clear" {% if mqtt_password_clear | default(false) %}checked{% endif %}> {{ _("Remove the stored password") }}</label>{% endif %}
    {% if 'serial_mqtt' not in hide %}
    <div data-show-when="network_protocol=raw,telnet,rfc2217">
      <div class="grid2">
        <label>{{ _("Line end") }} <span class="muted">({{ _("what ends a serial line that is published") }})</span>
          <select name="mqtt_line_end">
            {% for value, label in (("lf", "LF"), ("cr", "CR"), ("any", _("CR or LF"))) %}<option value="{{ value }}" {% if mapping.mqtt.line_end == value %}selected{% endif %}>{{ label }}</option>{% endfor %}
          </select></label>
        <div>
          <input type="hidden" name="mqtt_tx_shown" value="1">
          <label class="chk chk-pad"><input type="checkbox" name="mqtt_tx_enabled" {% if mapping.mqtt.tx_enabled %}checked{% endif %}> {{ _("Write messages on &lt;topic&gt;/tx to the device") }} <span class="muted">({{ _("as they are; the answer goes to &lt;topic&gt;/tx/result; read-only refuses them, a retained one is ignored") }})</span></label>
        </div>
      </div>
      {% if mapping.accepts_mqtt_tx and not (mapping.mqtt.tls and mapping.mqtt.username) %}<div class="banner warn">{{ _("MQTT messages are written to the device over a broker connection without TLS or a username: any client the broker lets publish to &lt;topic&gt;/tx can write to it. Restrict that topic with the broker’s ACLs, and use TLS and credentials.") }}</div>{% endif %}
    </div>
    {% endif %}
    {% if 'mqtt_tls_files' not in hide %}
    <div class="grid3" data-mqtt-tls>
      <label>{{ _("CA certificate file") }} <span class="muted">({{ _("TLS; blank = the system’s CAs") }})</span>
        <input type="text" name="mqtt_ca_file" value="{{ mapping.mqtt.ca_file }}" placeholder="{{ _('e.g. %(example)s', example='/data/certs/broker-ca.pem') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      <label>{{ _("Client certificate file") }} <span class="muted">({{ _("optional: for a broker that asks for one") }})</span>
        <input type="text" name="mqtt_client_cert" value="{{ mapping.mqtt.client_cert }}" placeholder="{{ _('e.g. %(example)s', example='/data/certs/gateway.pem') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
      <label>{{ _("Client key file") }} <span class="muted">({{ _("blank = in the certificate file") }})</span>
        <input type="text" name="mqtt_client_key" value="{{ mapping.mqtt.client_key }}" placeholder="{{ _('e.g. %(example)s', example='/data/certs/gateway.key') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
    </div>
    {# write-only, as the TLS key password: the stored one is never in the page; blank keeps it #}
    {% set mqtt_key_pw_kept = mqtt_key_pw_stored if mqtt_key_pw_stored is defined else mapping.mqtt.client_key_password %}
    <div class="grid3">
      <label>{{ _("Client key password") }}{% if mqtt_key_pw_kept %} <span class="muted">({{ _("blank = unchanged") }})</span>{% endif %}
        <input type="password" name="mqtt_client_key_password" value="{{ mqtt_key_pw_typed | default('') }}" placeholder="{{ _('•••••• (unchanged)') if mqtt_key_pw_kept else _('optional') }}" autocomplete="new-password" data-1p-ignore data-lpignore="true" data-bwignore></label>
      {% if mqtt_key_pw_kept %}<label class="chk chk-pad"><input type="checkbox" name="mqtt_client_key_password_clear" {% if mqtt_key_pw_clear | default(false) %}checked{% endif %}> {{ _("Remove the stored password") }}</label>{% endif %}
      <label class="chk chk-pad" title="{{ _('off: a certificate that does not name the broker host is accepted too (it must still come from a trusted CA)') }}"><input type="checkbox" name="mqtt_tls_check_hostname" {% if mapping.mqtt.tls_check_hostname %}checked{% endif %}> {{ _("Check the broker’s host name") }}</label>
    </div>
    {% endif %}
    {% if 'payload_format' not in hide %}
    <div class="grid3" data-show-when="network_protocol=modbus">
      <label>{{ _("Payload format") }} <span class="muted">({{ _("Modbus points") }})</span>
        <select name="mqtt_payload_format">
          <option value="plain" {% if mapping.mqtt.payload_format == 'plain' %}selected{% endif %}>{{ _("Plain: &lt;topic&gt;/&lt;point&gt;") }}</option>
          <option value="sparkplug_b" {% if mapping.mqtt.payload_format == 'sparkplug_b' %}selected{% endif %}>{{ _("Sparkplug B (edge node)") }}</option>
        </select></label>
      <label>{{ _("Sparkplug group ID") }} <input type="text" name="mqtt_sparkplug_group_id" value="{{ mapping.mqtt.sparkplug_group_id }}" placeholder="ser2net"></label>
      <label>{{ _("Sparkplug edge node ID") }} <span class="muted">({{ _("blank = mapping name") }})</span>
        <input type="text" name="mqtt_sparkplug_node_id" value="{{ mapping.mqtt.sparkplug_node_id }}" placeholder="{{ _('e.g. %(example)s', example='line-3-plc') }}"></label>
    </div>
    {% if 'primary_host' not in hide %}
    <div data-show-when="network_protocol=modbus"><div class="grid3" data-show-when="mqtt_payload_format=sparkplug_b">
      <label>{{ _("Sparkplug primary host ID") }} <span class="muted">({{ _("optional: births only while this host application’s STATE says online") }})</span>
        <input type="text" name="mqtt_sparkplug_primary_host_id" value="{{ mapping.mqtt.sparkplug_primary_host_id }}" placeholder="{{ _('e.g. %(example)s', example='scada-1') }}" autocapitalize="none" autocorrect="off" spellcheck="false"></label>
    </div></div>
    {% endif %}
    {% endif %}
  </fieldset>

  <fieldset data-show-when="network_protocol=modbus">
    <legend>{{ _("Modbus register polling → MQTT") }} <span class="muted">({{ _("edge mode; also enable MQTT above") }})</span></legend>
    <p class="muted mb-sm">{{ _('Every topic, payload and write, and the Sparkplug B model: <span class="mono">docs/MODBUS-MQTT.md</span>.') }}</p>
    <label>{{ _("Poll interval (s)") }} <input type="number" name="modbus_poll_interval_s" min="0.1" step="any" value="{{ mapping.modbus_poll.interval_s }}"></label>
    {% if 'block_reads' not in hide %}
    <input type="hidden" name="modbus_block_reads_shown" value="1">
    <div class="grid2">
      <label class="chk chk-pad"><input type="checkbox" name="modbus_block_reads" {% if mapping.modbus_poll.block_reads is sameas true %}checked{% endif %}> {{ _("Read neighbouring points with one request") }} <span class="muted">({{ _("per unit and function, up to 125 registers or 2000 coils; a block the slave refuses is read point by point") }})</span></label>
      <label>{{ _("Unused registers a block may span") }} <span class="muted">({{ _("between two points; 0 = only adjacent ones") }})</span>
        <input type="number" name="modbus_block_gap" min="0" max="124" step="1" value="{{ mapping.modbus_poll.block_gap }}"></label>
    </div>
    {% endif %}
    <label>{{ _("Points — JSON array") }}
      <span class="muted">[{"name","unit","fn":1 coils|2 discrete inputs|3 holding|4 input,"address","dtype":"uint16|int16|uint32|int32|float32|{% if 'point_options' not in hide %}int64|uint64|float64|string|{% endif %}bool","scale","writable":true}] — {{ _('writable points (coils, holding registers) take values from MQTT <span class="mono">&lt;topic&gt;/&lt;point&gt;/set</span> or a Sparkplug DCMD to their unit’s device (<span class="mono">unit&lt;N&gt;</span>)') }}{% if 'point_options' not in hide %}; {{ _('optional: <span class="mono">"min"</span>, <span class="mono">"max"</span> and <span class="mono">"allowed": [ … ]</span> limit what MQTT may write to a point, <span class="mono">"poll": false</span> makes a writable point write-only (never read)') }}; {{ _('<span class="mono">"word_order"</span>: <span class="mono">"CDAB"</span> (low register first), <span class="mono">"BADC"</span> (bytes swapped) or <span class="mono">"DCBA"</span> for a device that does not send ABCD; <span class="mono">"bit": 0–15</span> with <span class="mono">"dtype": "bool"</span> reads one bit of a register; a <span class="mono">"string"</span> takes <span class="mono">"length"</span> registers') }}{% endif %}{% if 'point_safety' not in hide %}; {{ _('<span class="mono">"pulse_ms"</span> on a writable coil: a write of true is followed by false after that many milliseconds; <span class="mono">"safe_value"</span> with <span class="mono">"safe_after_s"</span> on a writable point: written once the broker (Sparkplug B with a primary host: that host) has been away for that many seconds') }}{% endif %}</span>
      {% if 'point_options' not in hide %}<input type="hidden" name="modbus_point_options_shown" value="1">{% endif %}
      {% if 'point_safety' not in hide %}<input type="hidden" name="modbus_point_safety_shown" value="1">{% endif %}
      <textarea name="modbus_points" rows="5" spellcheck="false"
                placeholder='[{"name":"temp","unit":1,"fn":4,"address":0,"dtype":"float32","scale":0.1}, {"name":"setpoint","unit":1,"fn":3,"address":10,"dtype":"int16","writable":true}]'>{{ modbus_points_json }}</textarea>
    </label>
    {% if 'point_options' not in hide %}
    <div class="points-editor" data-points-editor data-texts="{{ {
      'as_table': _('Edit the points as fields'), 'as_json': _('Edit the points as JSON'),
      'add': _('Add a point'), 'remove': _('Remove'),
      'more': _('also %(keys)s: edit them as JSON', keys='{0}'),
      'bad_json': _('The points can’t be shown as fields: %(why)s. Fix the JSON first.', why='{0}'),
      'long_number': _('a number has more than 15 digits, which the browser would change'),
      'not_list': _('the JSON is not a list of points'),
      'not_object': _('point #%(n)s is not an object', n='{0}'),
      'name': _('Name'), 'unit': _('Unit'), 'fn': _('Function'), 'address': _('Address'),
      'dtype': _('Type'), 'bit': _('Bit'), 'length': _('Length (registers)'),
      'word_order': _('Word order'), 'scale': _('Scale'), 'writable': _('Writable'),
      'fn1': _('1 coils'), 'fn2': _('2 discrete inputs'), 'fn3': _('3 holding registers'),
      'fn4': _('4 input registers'),
      'pulse_ms': _('Pulse (ms)') if 'point_safety' not in hide else '',
      'safe_value': _('Safe value') if 'point_safety' not in hide else '',
      'safe_after_s': _('Safe after (s)') if 'point_safety' not in hide else '',
    } | tojson | forceescape }}">
      <button type="button" class="btn sm" data-points-mode>{{ _("Edit the points as fields") }}</button>
      <div class="points-msg" data-points-msg hidden></div>
      <div class="points-rows" data-points-rows hidden></div>
    </div>
    {% endif %}
    {% if not is_new and not remote %}
    <div class="mb-sm">
      <button type="button" class="btn sm" hx-post="{{ base }}/api/mappings/{{ mapping.id }}/modbus-read" hx-disabled-elt="this" hx-include="[name='modbus_points']" hx-target="#modbus-read" hx-swap="innerHTML">{{ _("Read these points now") }}</button>
      <span class="muted">{{ _("through the running gateway, as typed above; nothing is saved or published") }}</span>
      <div id="modbus-read" aria-live="polite"></div>
    </div>
    {% endif %}
    <p class="sub mb-sm">{{ _('Who may write is up to the broker: let only trusted clients publish to <span class="mono">&lt;topic&gt;/+/set</span> (Sparkplug: the node’s NCMD and DCMD topics), and use TLS and a username. Read-only refuses every write.') }}</p>
    {% if mapping.modbus_poll.broadcast_points %}<div class="banner warn" data-unit-warning>{{ _('Points on unit 0, the broadcast address: %(names)s. They are never read (no slave answers a broadcast); a write to one goes to every slave on the line and is not read back.', names=mapping.modbus_poll.broadcast_points|join(', ')) }}</div>{% endif %}
    {% if mapping.modbus_poll.reserved_unit_points %}<div class="banner warn" data-unit-warning>{{ _('Points on units 248–255, which a Modbus serial line reserves (slave addresses are 1–247): %(names)s.', names=mapping.modbus_poll.reserved_unit_points|join(', ')) }}</div>{% endif %}
    {% if mapping.accepts_mqtt_writes and not (mapping.mqtt.tls and mapping.mqtt.username) %}<div class="banner warn">{{ _('Writable points take MQTT commands over a broker connection without TLS or a username: any client the broker lets publish to the command topics can write them. Restrict those topics with the broker’s ACLs, and use TLS and credentials.') }}</div>{% endif %}
    {% if 'retained_set' not in hide %}
    <div data-show-when="mqtt_payload_format=plain">
      <input type="hidden" name="mqtt_apply_retained_set_shown" value="1">
      <label class="chk"><input type="checkbox" name="mqtt_apply_retained_set" {% if mapping.mqtt.apply_retained_set %}checked{% endif %}> {{ _("Re-apply a retained /set after every connect") }} <span class="muted">({{ _("off: a command is written when it is published; the retained copy the broker sends again after a reconnect, restart or save is ignored") }})</span></label>
      {% if 'value_format' not in hide %}
      <label>{{ _("Value format") }}
        <select name="mqtt_value_format">
          <option value="text" {% if mapping.mqtt.value_format != 'json' %}selected{% endif %}>{{ _("Text: the value alone") }}</option>
          <option value="json" {% if mapping.mqtt.value_format == 'json' %}selected{% endif %}>{{ _('JSON: {"value", "ts", "quality"}') }}</option>
        </select></label>
      {% endif %}
      {% if 'unit_status' not in hide %}
      <input type="hidden" name="mqtt_unit_status_shown" value="1">
      <label class="chk"><input type="checkbox" name="mqtt_unit_status" {% if mapping.mqtt.unit_status %}checked{% endif %}> {{ _('Publish each unit’s state to <span class="mono">&lt;topic&gt;/unit&lt;N&gt;/status</span>') }} <span class="muted">({{ _("retained online / offline; offline once a unit gave no reply to any of its points in 3 polls in a row. It keeps the last state while the mapping is stopped: read it together with &lt;topic&gt;/status") }})</span></label>
      {% endif %}
    </div>
    {% endif %}
  </fieldset>

  <button class="btn primary" type="submit">{{ _("Create mapping") if is_new else _("Save changes") }}</button>
</form>
{% if not remote and request.state.user and request.state.user.role == 'admin' %}
{# the upload's own form: its file inputs sit in the form above (form="tls-upload") and are no part of that one #}
<form id="tls-upload" hx-post="{{ base }}/api/mappings/tls-upload" hx-encoding="multipart/form-data" hx-swap="none"
      hx-include="[name='network_tls_key_password']" hx-disabled-elt="#tls-upload-send">
  <input type="hidden" name="mid" value="{{ '' if is_new else mapping.id }}">
</form>
{% endif %}