{% extends "base.html" %}
{% block title %}Violations — vmware-harden{% endblock %}
{% block content %}
<h2 class="text-2xl font-semibold mb-4">Violations</h2>

{% if coverage_note %}
  <div class="bg-amber-50 border border-amber-300 text-amber-900 p-4 rounded mb-4">
    <p class="font-medium">Partial coverage — this is not a clean bill of health.</p>
    <p class="text-sm">{{ coverage_note }}</p>
    {# Guarded: coverage can be partial for node reasons alone, and an empty
       "Rules that were not evaluated (0)" disclosure reads as a broken page. #}
    {% if coverage.undetermined %}
    <details class="mt-2 text-sm">
      <summary class="cursor-pointer">Rules that were not evaluated
        ({{ coverage.undetermined }})</summary>
      <ul class="mt-2 space-y-1">
        {% for r in coverage.undetermined_rules %}
        <li><code>{{ r.rule }}</code> — {{ r.reason }}</li>
        {% endfor %}
        {% if coverage.undetermined_rules_truncated %}
        <li class="italic">… showing {{ coverage.undetermined_rules|length }}
          of {{ coverage.undetermined }}; the rest are not listed.</li>
        {% endif %}
      </ul>
    </details>
    {% endif %}
    {# A separate disclosure, not more rows in the one above: these rules ran.
       What to do about them is different — check the node's reachability and
       the scanning account's privileges, rather than wait for a collector. #}
    {% if coverage.undetermined_node_checks %}
    <details class="mt-2 text-sm">
      <summary class="cursor-pointer">Nodes a rule could not judge, for want of
        data ({{ coverage.node_checks_undetermined }})</summary>
      <ul class="mt-2 space-y-1">
        {% for c in coverage.undetermined_node_checks %}
        <li><code>{{ c.rule }}</code> on <code>{{ c.node }}</code> — missing
          {{ c.missing }}</li>
        {% endfor %}
        {% if coverage.undetermined_node_checks_truncated %}
        <li class="italic">… showing {{ coverage.undetermined_node_checks|length }}
          of {{ coverage.node_checks_undetermined }}; the rest are not listed.</li>
        {% endif %}
      </ul>
    </details>
    {% endif %}
  </div>
{% endif %}

{% if not has_data or violations|length == 0 %}
  <div class="bg-yellow-50 border border-yellow-200 text-yellow-800 p-4 rounded">
    {# Never claim compliance on an incomplete scan: "no violations" only means
       "nothing found among the rules that ran". #}
    {% if coverage and not coverage.complete %}
      <p class="font-medium">No violations among the checks that could be made.</p>
      {# Each figure only when it exists. An unmeasured snapshot has neither,
         and printing "0 of 0 rules were not evaluated" beside a warning banner
         states a fact where the truth is that nothing is known. #}
      {% if coverage.undetermined %}
      <p class="text-sm">{{ coverage.undetermined }} of {{ coverage.total }}
        rules were not evaluated.</p>
      {% endif %}
      {% if coverage.node_checks_undetermined %}
      <p class="text-sm">{{ coverage.node_checks_undetermined }} of
        {{ coverage.node_checks_total }} per-node checks could not be made,
        across {{ coverage.nodes_affected }} node(s).</p>
      {% endif %}
      <p class="text-sm">See above. Compliance is unknown, not confirmed.</p>
    {% else %}
      <p class="font-medium">No violations.</p>
      <p class="text-sm">Either no scans have run, or the estate is compliant
        against every rule in this baseline.</p>
    {% endif %}
  </div>
{% else %}
  <div class="text-sm text-slate-500 mb-3">
    Showing {{ violations|length }} of {{ total }} violations
    (page {{ page }}) from latest snapshot.
  </div>
  <div class="bg-white rounded-lg shadow overflow-hidden">
    <table class="min-w-full text-sm">
      <thead class="bg-slate-100 text-slate-600">
        <tr>
          <th class="px-4 py-2 text-left">Severity</th>
          <th class="px-4 py-2 text-left">Rule</th>
          <th class="px-4 py-2 text-left">Node</th>
          <th class="px-4 py-2 text-left">Baseline</th>
          <th class="px-4 py-2 text-left">Evidence</th>
        </tr>
      </thead>
      <tbody>
        {% for v in violations %}
        <tr class="border-t hover:bg-slate-50">
          <td class="px-4 py-2">
            <span class="inline-block px-2 py-1 text-xs rounded font-medium
              {% if v.severity == 'critical' %}bg-red-100 text-red-800{% endif %}
              {% if v.severity == 'high' %}bg-orange-100 text-orange-800{% endif %}
              {% if v.severity == 'medium' %}bg-yellow-100 text-yellow-800{% endif %}
              {% if v.severity == 'low' %}bg-blue-100 text-blue-800{% endif %}
              {% if v.severity == 'info' %}bg-slate-100 text-slate-700{% endif %}">
              {{ v.severity|upper }}
            </span>
          </td>
          <td class="px-4 py-2 font-mono">{{ v.rule_id }}</td>
          <td class="px-4 py-2">
            <div class="font-mono text-xs">{{ v.node_id }}</div>
            {% if v.node_name %}<div class="text-slate-500">{{ v.node_name }}</div>{% endif %}
          </td>
          <td class="px-4 py-2 text-xs text-slate-600">{{ v.baseline_id }}</td>
          <td class="px-4 py-2">
            <button class="text-blue-600 text-xs hover:underline mr-2"
                    hx-get="/violations/{{ v.id }}/evidence"
                    hx-target="#evidence-{{ v.id }}"
                    hx-swap="innerHTML">
              Show evidence
            </button>
            <button class="text-emerald-700 text-xs hover:underline"
                    hx-get="/violations/{{ v.id }}/remediation"
                    hx-target="#remediation-{{ v.id }}"
                    hx-swap="innerHTML">
              Remediation
            </button>
            <div id="evidence-{{ v.id }}" class="mt-2"></div>
            <div id="remediation-{{ v.id }}" class="mt-2"></div>
          </td>
        </tr>
        {% endfor %}
      </tbody>
    </table>
  </div>
  {% if has_prev or has_next %}
  <div class="flex justify-between items-center mt-4 text-sm">
    {% if has_prev %}
      <a href="/violations?page={{ page - 1 }}"
         class="text-blue-600 hover:underline">&larr; Previous</a>
    {% else %}<span></span>{% endif %}
    <span class="text-slate-500">Page {{ page }}</span>
    {% if has_next %}
      <a href="/violations?page={{ page + 1 }}"
         class="text-blue-600 hover:underline">Next &rarr;</a>
    {% else %}<span></span>{% endif %}
  </div>
  {% endif %}
{% endif %}
{% endblock %}