{% load i18n %}
{% if attention.expired or attention.review_due or attention.stale or attention.no_conduit or attention.outbound_only %}
  <div class="alert alert-warning">
    <div class="fw-bold mb-1">{% trans "Needs attention" %}</div>
    <ul class="mb-0">
      {% if attention.expired %}<li><a href="{% url 'plugins:netbox_ot:flow_list' %}?expired=true{% if site %}&site_id={{ site.pk }}{% endif %}">{% blocktrans count n=attention.expired %}{{ n }} allowed flow has expired{% plural %}{{ n }} allowed flows have expired{% endblocktrans %}</a></li>{% endif %}
      {% if attention.review_due %}<li><a href="{% url 'plugins:netbox_ot:flow_list' %}?review_due=true{% if site %}&site_id={{ site.pk }}{% endif %}">{% blocktrans count n=attention.review_due %}{{ n }} verdict is due for review{% plural %}{{ n }} verdicts are due for review{% endblocktrans %}</a></li>{% endif %}
      {% if attention.stale %}<li><a href="{% url 'plugins:netbox_ot:flow_list' %}?stale=true{% if site %}&site_id={{ site.pk }}{% endif %}">{% blocktrans count n=attention.stale with days=attention.stale_after_days %}{{ n }} flow not seen for {{ days }} days{% plural %}{{ n }} flows not seen for {{ days }} days{% endblocktrans %}</a></li>{% endif %}
      {% if attention.no_conduit %}<li><a href="{% url 'plugins:netbox_ot:flow_list' %}?has_conduit=false{% if site %}&site_id={{ site.pk }}{% endif %}">{% blocktrans count n=attention.no_conduit %}{{ n }} flow runs outside any documented conduit{% plural %}{{ n }} flows run outside any documented conduit{% endblocktrans %}</a></li>{% endif %}
      {% if attention.outbound_only %}<li><a href="{% url 'plugins:netbox_ot:flow_list' %}?outbound_only=true{% if site %}&site_id={{ site.pk }}{% endif %}">{% blocktrans count n=attention.outbound_only %}{{ n }} flow reaches its zone over a connection opened from inside (reverse connect or a broker): a firewall rule on inbound traffic does not stop it{% plural %}{{ n }} flows reach their zone over connections opened from inside (reverse connect or a broker): a firewall rule on inbound traffic does not stop them{% endblocktrans %}</a></li>{% endif %}
    </ul>
  </div>
{% endif %}
<div class="card">
  <h2 class="card-header">
    {% trans "Flows into zones at Purdue level" %} &le; {{ max_level }}
    <span class="badge text-bg-secondary ms-1">{{ flows|length }}</span>
  </h2>
  {% if flows %}
    <div class="table-responsive">
      <table class="table table-hover attr-table">
        <thead>
          <tr>
            <th>#</th>
            {% if show_site %}<th>{% trans "Site" %}</th>{% endif %}
            <th>{% trans "From zone" %}</th>
            <th>{% trans "To zone" %}</th>
            <th>{% trans "Protocol / ports" %}</th>
            <th>{% trans "Access" %}</th>
            <th>{% trans "Through" %}</th>
            <th>{% trans "Remote access" %}</th>
            <th>{% trans "Allowed" %}</th>
            <th>{% trans "Last seen" %}</th>
            <th>{% trans "Evidence" %}</th>
          </tr>
        </thead>
        <tbody>
          {% for f in flows %}
            <tr>
              <td><a href="{{ f.get_absolute_url }}">{{ forloop.counter }}</a></td>
              {% if show_site %}<td>{{ f.destination_zone.site|linkify|placeholder }}</td>{% endif %}
              <td>{{ f.source_zone|linkify }}{% if f.source_zone.purdue_level %} {% badge f.source_zone.purdue_level bg_color=f.source_zone.get_purdue_level_color %}{% endif %}</td>
              <td>{{ f.destination_zone|linkify }}{% if f.destination_zone.purdue_level %} {% badge f.destination_zone.purdue_level bg_color=f.destination_zone.get_purdue_level_color %}{% endif %}</td>
              <td>
                {{ f.get_protocol_display|placeholder }}{% if f.port_mappings %} <span class="text-muted small">{{ f.ports_display }}</span>{% endif %}
                {% if f.connection != 'client-server' %}
                  <div class="small">
                    {% badge f.get_connection_display bg_color=f.get_connection_color %}
                    {% if f.broker_zone %}{% trans "in" %} {{ f.broker_zone|linkify }}{% endif %}
                  </div>
                  {% if f.topics %}<div class="small text-muted text-break">{{ f.topics|join:", " }}</div>{% endif %}
                {% endif %}
              </td>
              <td>{% for value, label, color in f.get_access_display %}{% badge label bg_color=color %} {% empty %}{{ ''|placeholder }}{% endfor %}</td>
              <td>{% for hop in f.hops.all %}{{ hop.hop|linkify }}{% if not forloop.last %} &rarr; {% endif %}{% empty %}{{ ''|placeholder }}{% endfor %}</td>
              <td>{% checkmark f.remote_access %}</td>
              <td>
                {% badge f.get_allowed_display bg_color=f.get_allowed_color %}
                {% if f.is_expired %}<span class="badge text-bg-danger">{% trans "expired" %}</span>{% endif %}
                {% if f.is_review_due %}<span class="badge text-bg-warning">{% trans "review due" %}</span>{% endif %}
              </td>
              <td class="small">{{ f.last_seen|date:"Y-m-d"|placeholder }}</td>
              <td class="small">
                {% with lines=f.evidence_lines %}
                  {% if lines.1 %}
                    <details><summary>{{ lines.0 }}</summary>{{ lines.1|linebreaksbr }}</details>
                  {% else %}
                    {{ lines.0|placeholder }}
                  {% endif %}
                {% endwith %}
              </td>
            </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
  {% else %}
    <div class="card-body text-muted">{% trans "No flows into these zones." %}</div>
  {% endif %}
</div>
{% if svg %}
  <div class="card">
    <h2 class="card-header">{% trans "Diagram" %}</h2>
    <div class="card-body">
      {{ svg }}
      <div class="small text-muted mt-2">
        {% trans "One arrow per zone pair, from the side that acts to the side acted upon; the number is how many flows it carries. Red: not allowed or expired, amber: unknown, green: allowed. Dashed: remote access. Dotted: the destination opens the connection itself (reverse connect, or both ends meet at a broker)." %}
      </div>
    </div>
  </div>
{% endif %}