{% extends "base.html" %}

{% block title %}Аудиторская вселенная - DataAudit Platform{% endblock %}

{% block content %}
<link rel="stylesheet" href="{{ url_for('static', path='/css/grc.css') }}">

<div class="page-content">
    <div class="grc-toolbar">
        <a href="/workflows" class="btn-back">
            <i data-lucide="arrow-left"></i> GRC Процессы
        </a>
        <div class="toolbar-actions">
            <button class="btn btn-primary" id="btn-create" style="display:none;" onclick="openCreateModal()">
                <i data-lucide="plus"></i> Новый объект
            </button>
        </div>
    </div>

    <!-- Stats -->
    <div class="grc-stats" id="universe-stats">
        <div class="stats-loading">Загрузка...</div>
    </div>

    <!-- Filters -->
    <div class="grc-filters">
        <div class="filter-group">
            <label>Отдел ДВА</label>
            <select id="filter-division" onchange="loadObjects()">
                <option value="">Все</option>
                <option value="ОСА">ОСА</option>
                <option value="ОАКБ">ОАКБ</option>
                <option value="ОАРБ">ОАРБ</option>
                <option value="ОАИБ">ОАИБ</option>
                <option value="ОВЦБ">ОВЦБ</option>
            </select>
        </div>
        <div class="filter-group">
            <label>Уровень риска</label>
            <select id="filter-risk" onchange="loadObjects()">
                <option value="">Все</option>
                <option value="high">Высокий</option>
                <option value="medium">Средний</option>
                <option value="low">Низкий</option>
            </select>
        </div>
        <div class="filter-group">
            <label>Категория</label>
            <select id="filter-category" onchange="loadObjects()">
                <option value="">Все</option>
                <option value="business_process">Бизнес-процесс</option>
                <option value="regulatory">Регуляторное направление</option>
            </select>
        </div>
        <div class="filter-group">
            <label>Поиск</label>
            <input type="text" id="filter-search" placeholder="Название..." oninput="debounceLoad()">
        </div>
    </div>

    <!-- Table -->
    <div class="grc-table-wrap">
        <table class="grc-table">
            <thead>
                <tr>
                    <th>Объект аудита</th>
                    <th>Отдел</th>
                    <th>Оценка риска</th>
                    <th>Уровень</th>
                    <th>Цикл</th>
                    <th>Вывод</th>
                </tr>
            </thead>
            <tbody id="objects-tbody">
                <tr><td colspan="6" class="loading-cell">Загрузка...</td></tr>
            </tbody>
        </table>
    </div>
</div>

<!-- ═══ Create/Edit Object Modal ═══ -->
<div class="modal-overlay" id="modal-object" style="display:none;" onclick="if(event.target===this)closeModal('modal-object')">
    <div class="modal modal-lg">
        <div class="modal-header">
            <h3 id="modal-object-title">Новый объект аудита</h3>
            <button class="modal-close" onclick="closeModal('modal-object')">&times;</button>
        </div>
        <div class="modal-body">
            <input type="hidden" id="obj-edit-id">
            <div class="form-group">
                <label>Название *</label>
                <input type="text" class="form-input" id="obj-name" placeholder="Название объекта аудита">
            </div>
            <div class="form-group">
                <label>Описание</label>
                <textarea class="form-input" id="obj-description" rows="2"></textarea>
            </div>
            <div class="form-row">
                <div class="form-group">
                    <label>Категория</label>
                    <select class="form-input" id="obj-category">
                        <option value="business_process">Бизнес-процесс</option>
                        <option value="regulatory">Регуляторное направление</option>
                        <option value="it_system">ИТ-система</option>
                        <option value="department">Подразделение</option>
                    </select>
                </div>
                <div class="form-group">
                    <label>Подразделение-владелец</label>
                    <select class="form-input" id="obj-owner-unit">
                        <option value="">— Не указано —</option>
                    </select>
                </div>
            </div>
            <div class="form-row">
                <div class="form-group">
                    <label>Отдел ДВА</label>
                    <select class="form-input" id="obj-division">
                        <option value="">— Не указан —</option>
                        <option value="ОСА">ОСА</option>
                        <option value="ОАКБ">ОАКБ</option>
                        <option value="ОАРБ">ОАРБ</option>
                        <option value="ОАИБ">ОАИБ</option>
                        <option value="ОВЦБ">ОВЦБ</option>
                    </select>
                </div>
                <div class="form-group">
                    <label>Дата последней проверки</label>
                    <input type="date" class="form-input" id="obj-last-audit-date">
                </div>
            </div>
        </div>
        <div class="modal-footer">
            <button class="btn btn-secondary" onclick="closeModal('modal-object')">Отмена</button>
            <button class="btn btn-primary" onclick="saveObject()">Сохранить</button>
        </div>
    </div>
</div>

<!-- ═══ Object Detail + 4-Block Scoring Modal ═══ -->
<div class="modal-overlay" id="modal-detail" style="display:none;" onclick="if(event.target===this)closeModal('modal-detail')">
    <div class="modal modal-xl">
        <div class="modal-header">
            <h3 id="detail-title">Объект аудита</h3>
            <button class="modal-close" onclick="closeModal('modal-detail')">&times;</button>
        </div>
        <div class="modal-body">
            <!-- Risk Summary -->
            <div class="risk-summary" id="detail-risk-summary"></div>

            <!-- Object Info -->
            <div class="grc-section">
                <div class="section-header"><h3>Информация</h3></div>
                <div id="detail-info"></div>
            </div>

            <!-- Risk Flags -->
            <div class="grc-section">
                <div class="section-header"><h3>Неотъемлемые риски процесса</h3></div>
                <div class="risk-flags-grid" id="detail-risk-flags"></div>
            </div>

            <!-- 4-Block Scoring -->
            <div class="grc-section" id="scoring-section">
                <div class="section-header">
                    <h3>Оценка рисков (4-блочная модель)</h3>
                </div>
                <div id="scoring-blocks"></div>

                <!-- Regulatory block -->
                <div class="scoring-block" id="regulatory-block">
                    <div class="scoring-block-header">Регуляторные требования</div>
                    <div class="scoring-block-body" id="regulatory-body"></div>
                </div>

                <!-- Final score -->
                <div class="final-score-bar" id="final-score-bar"></div>

                <div style="margin-top:1rem; text-align:right;" id="scoring-actions" style="display:none;">
                    <button class="btn btn-primary" onclick="saveScores()">
                        <i data-lucide="save"></i> Сохранить оценку
                    </button>
                </div>
            </div>

            <!-- Strategic Plan References -->
            <div class="grc-section" id="strat-refs-section" style="display:none;">
                <div class="section-header"><h3>В стратегических планах</h3></div>
                <div id="strat-refs"></div>
            </div>
        </div>
    </div>
</div>

<script src="{{ url_for('static', path='/js/grc.js') }}"></script>
<script>
let allObjects = [];
let userRole = 'viewer';
let currentDetailId = null;
let currentDetailData = null;
let debounceTimer = null;

document.addEventListener('DOMContentLoaded', async function() {
    try {
        const me = await fetch('/api/me').then(r => r.json());
        userRole = me.role;
        if (['admin', 'manager'].includes(userRole)) {
            document.getElementById('btn-create').style.display = '';
        }
    } catch(e) {}

    // Load org units for form
    try {
        const units = await fetch('/api/grc/org-units').then(r => r.json());
        const sel = document.getElementById('obj-owner-unit');
        units.forEach(u => {
            sel.innerHTML += `<option value="${u.id}">${escHtml(u.name)}</option>`;
        });
    } catch(e) {}

    await loadObjects();
    lucide.createIcons();
});

function debounceLoad() {
    clearTimeout(debounceTimer);
    debounceTimer = setTimeout(loadObjects, 300);
}

async function loadObjects() {
    const params = new URLSearchParams();
    const div = document.getElementById('filter-division').value;
    const cat = document.getElementById('filter-category').value;
    const risk = document.getElementById('filter-risk').value;
    const search = document.getElementById('filter-search').value.trim();

    if (div) params.set('division', div);
    if (cat) params.set('category', cat);
    if (risk) params.set('risk_level', risk);
    if (search) params.set('search', search);

    try {
        const resp = await fetch('/api/grc/audit-objects?' + params.toString());
        allObjects = await resp.json();
        renderTable();
        renderStats();
    } catch(e) {
        console.error('Load error:', e);
    }
}

function renderStats() {
    const container = document.getElementById('universe-stats');
    const total = allObjects.length;
    const high = allObjects.filter(o => o.risk_level === 'high').length;
    const medium = allObjects.filter(o => o.risk_level === 'medium').length;
    const low = allObjects.filter(o => o.risk_level === 'low').length;
    const cbr = allObjects.filter(o => o.regulatory_required).length;

    container.innerHTML = `
        <div class="stat-card">
            <div class="stat-value">${total}</div>
            <div class="stat-label">Объектов аудита</div>
        </div>
        <div class="stat-card ${high > 0 ? 'stat-warning' : ''}">
            <div class="stat-value">${high}</div>
            <div class="stat-label">Высокий</div>
        </div>
        <div class="stat-card">
            <div class="stat-value">${medium}</div>
            <div class="stat-label">Средний</div>
        </div>
        <div class="stat-card">
            <div class="stat-value">${low}</div>
            <div class="stat-label">Низкий</div>
        </div>
        <div class="stat-card ${cbr > 0 ? 'stat-danger' : ''}">
            <div class="stat-value">${cbr}</div>
            <div class="stat-label">Требует ЦБ</div>
        </div>
    `;
}

function renderTable() {
    const tbody = document.getElementById('objects-tbody');
    if (!allObjects.length) {
        tbody.innerHTML = '<tr><td colspan="6" class="empty-state">Объекты аудита не найдены</td></tr>';
        return;
    }

    tbody.innerHTML = allObjects.map(o => `
        <tr class="clickable-row" onclick="openDetail(${o.id})">
            <td>
                <strong>${escHtml(o.name)}</strong>
                ${o.regulatory_required ? ' <span class="cbr-badge" title="Проверка по ЦБ">ЦБ</span>' : ''}
                ${o.owner_unit_name ? `<br><span style="font-size:0.75rem;color:#94a3b8">${escHtml(o.owner_unit_name)}</span>` : ''}
            </td>
            <td>${renderDivisionBadge(o.audit_division)}</td>
            <td>${renderScoreBar(parseFloat(o.composite_score) || 0, o.risk_level)}</td>
            <td>${renderRiskBadge(o.risk_level)}</td>
            <td>${renderFrequency(o.audit_frequency)}</td>
            <td>${renderConclusionBadge(o.conclusion)}</td>
        </tr>
    `).join('');
}

// ── Create / Edit ────────────────────────────────

function openCreateModal() {
    document.getElementById('modal-object-title').textContent = 'Новый объект аудита';
    document.getElementById('obj-edit-id').value = '';
    document.getElementById('obj-name').value = '';
    document.getElementById('obj-description').value = '';
    document.getElementById('obj-category').value = 'business_process';
    document.getElementById('obj-owner-unit').value = '';
    document.getElementById('obj-division').value = '';
    document.getElementById('obj-last-audit-date').value = '';
    openModal('modal-object');
}

function openEditModal(obj) {
    document.getElementById('modal-object-title').textContent = 'Редактировать объект';
    document.getElementById('obj-edit-id').value = obj.id;
    document.getElementById('obj-name').value = obj.name || '';
    document.getElementById('obj-description').value = obj.description || '';
    document.getElementById('obj-category').value = obj.category || 'business_process';
    document.getElementById('obj-owner-unit').value = obj.owner_unit_id || '';
    document.getElementById('obj-division').value = obj.audit_division || '';
    if (obj.last_audit_date && obj.last_audit_date.includes('.')) {
        const parts = obj.last_audit_date.split('.');
        document.getElementById('obj-last-audit-date').value = `${parts[2]}-${parts[1]}-${parts[0]}`;
    } else {
        document.getElementById('obj-last-audit-date').value = obj.last_audit_date || '';
    }
    openModal('modal-object');
}

async function saveObject() {
    const editId = document.getElementById('obj-edit-id').value;
    const name = document.getElementById('obj-name').value.trim();
    if (!name) { alert('Укажите название'); return; }

    const body = {
        name: name,
        description: document.getElementById('obj-description').value.trim(),
        category: document.getElementById('obj-category').value,
        owner_unit_id: document.getElementById('obj-owner-unit').value || null,
        audit_division: document.getElementById('obj-division').value || null,
        last_audit_date: document.getElementById('obj-last-audit-date').value || null,
    };

    try {
        const url = editId ? `/api/grc/audit-objects/${editId}` : '/api/grc/audit-objects';
        const method = editId ? 'PUT' : 'POST';
        const resp = await fetch(url, {
            method: method,
            headers: {'Content-Type': 'application/json'},
            body: JSON.stringify(body)
        });
        if (resp.ok) {
            closeModal('modal-object');
            await loadObjects();
        } else {
            const r = await resp.json();
            alert(r.detail || 'Ошибка сохранения');
        }
    } catch(e) { alert('Ошибка сети'); }
}

// ── Detail + 4-Block Scoring ─────────────────────

async function openDetail(objectId) {
    currentDetailId = objectId;
    try {
        const resp = await fetch(`/api/grc/audit-objects/${objectId}`);
        if (!resp.ok) { alert('Объект не найден'); return; }
        currentDetailData = await resp.json();
        renderDetail();
        openModal('modal-detail');
    } catch(e) {
        alert('Ошибка загрузки');
        console.error(e);
    }
}

function renderDetail() {
    const d = currentDetailData;
    const composite = parseFloat(d.composite_score) || 0;
    const level = d.risk_level || 'low';
    const canEdit = ['admin', 'manager'].includes(userRole);

    document.getElementById('detail-title').textContent = d.name;

    // Risk summary bar
    document.getElementById('detail-risk-summary').innerHTML = `
        <div>
            <div class="risk-summary-score level-${level}">${composite.toFixed(2)}</div>
            <div class="risk-summary-label">Итоговый балл</div>
        </div>
        <div>
            ${renderRiskBadge(level)}
            <div class="risk-summary-label" style="margin-top:4px">${renderFrequency(d.audit_frequency)}</div>
        </div>
        <div>
            ${renderDivisionBadge(d.audit_division)}
            ${d.regulatory_required ? '<span class="cbr-badge" style="margin-left:8px">ЦБ</span>' : ''}
        </div>
        <div style="flex:1"></div>
        ${canEdit ? `
            <button class="btn btn-sm btn-outline" onclick="closeModal('modal-detail');openEditModal(currentDetailData)">
                <i data-lucide="edit-2"></i> Редактировать
            </button>
        ` : ''}
    `;

    // Info grid
    document.getElementById('detail-info').innerHTML = `
        <div class="detail-grid-v2">
            <div class="detail-block">
                <h4>Описание</h4>
                <p>${escHtml(d.description || '—')}</p>
                <h4>Категория</h4>
                <p>${renderCategoryBadge(d.category)}</p>
            </div>
            <div class="detail-block">
                <h4>Подразделение-владелец</h4>
                <p>${escHtml(d.owner_unit_name || '—')}</p>
                <h4>Вывод для планирования</h4>
                <p>${renderConclusionBadge(d.conclusion)}</p>
            </div>
            <div class="detail-block">
                <h4>Последняя проверка</h4>
                <p>${d.last_audit_date_str || '—'}</p>
                <h4>Создан / Обновлён</h4>
                <p>${escHtml(d.created_by || '—')} · ${d.created_at_str || ''}<br>${d.updated_at_str || '—'}</p>
            </div>
        </div>
    `;

    // Risk flags
    renderRiskFlagsSection(d);

    // 4-block scoring
    renderScoringBlocks(d);

    // Regulatory block
    renderRegulatoryBlock(d);

    // Final score
    renderFinalScore(d);

    // Strategic refs
    const refs = d.strategic_refs || [];
    if (refs.length > 0) {
        document.getElementById('strat-refs-section').style.display = '';
        document.getElementById('strat-refs').innerHTML = refs.map(r =>
            `<span class="badge badge-info" style="margin-right:0.5rem;margin-bottom:0.25rem">
                <a href="/workflows/strategic-plans/${r.plan_id}" style="color:inherit;text-decoration:none">
                    ${escHtml(r.plan_title)} — ${r.planned_year}${r.quarter ? ' ' + r.quarter : ''}
                </a>
            </span>`
        ).join('');
    } else {
        document.getElementById('strat-refs-section').style.display = 'none';
    }

    // Show scoring actions for managers
    const actionsEl = document.getElementById('scoring-actions');
    actionsEl.style.display = canEdit ? '' : 'none';

    lucide.createIcons();
}

function renderRiskFlagsSection(d) {
    const container = document.getElementById('detail-risk-flags');
    const flags = d.risk_flags || {};
    const canEdit = ['admin', 'manager'].includes(userRole);

    container.innerHTML = Object.entries(RISK_FLAG_LABELS).map(([key, label]) => {
        const active = !!flags[key];
        return `
            <div class="risk-flag-toggle ${active ? 'active' : ''} ${canEdit ? 'editable' : ''}"
                 ${canEdit ? `onclick="toggleRiskFlag('${key}')"` : ''}
                 id="rf-${key}">
                <span class="risk-flag-dot"></span>
                ${label}
            </div>
        `;
    }).join('');
}

function toggleRiskFlag(key) {
    if (!currentDetailData) return;
    const flags = currentDetailData.risk_flags || {};
    flags[key] = !flags[key];
    currentDetailData.risk_flags = flags;

    const el = document.getElementById(`rf-${key}`);
    if (el) el.classList.toggle('active');
}

function renderScoringBlocks(d) {
    const container = document.getElementById('scoring-blocks');
    const scores = d.risk_scores || {};
    const canEdit = ['admin', 'manager'].includes(userRole);
    let html = '';

    for (const [blockKey, block] of Object.entries(SCORING_BLOCKS)) {
        const blockComposite = parseFloat(d[blockKey + '_composite']) || calcBlockComposite(
            Object.fromEntries(Object.keys(block.dimensions).map(k => [k, (scores[k] || {}).score || 1])),
            blockKey
        );
        const compLevel = blockComposite >= 2.0 ? 'high' : blockComposite >= 1.5 ? 'medium' : 'low';

        let rows = '';
        for (const [dimKey, dim] of Object.entries(block.dimensions)) {
            const existing = scores[dimKey];
            const score = existing ? existing.score : 1;
            const labels = SCORE_LABELS[dimKey] || [];
            const weightPct = Math.round(dim.weight * 100);

            if (canEdit) {
                let options = '';
                for (let i = 1; i <= 3; i++) {
                    const lbl = labels[i-1] ? `${i} — ${labels[i-1]}` : i;
                    options += `<option value="${i}" ${score === i ? 'selected' : ''}>${lbl}</option>`;
                }
                rows += `
                    <div class="scoring-row">
                        <div class="scoring-row-label">${dim.label}</div>
                        <div class="scoring-row-weight">${weightPct}%</div>
                        <div class="scoring-row-select">
                            <select id="score-${dimKey}" onchange="updateLiveScores()">
                                ${options}
                            </select>
                        </div>
                        <div class="scoring-row-value sv-${score}" id="sv-${dimKey}">${score}</div>
                    </div>
                `;
            } else {
                rows += `
                    <div class="scoring-row">
                        <div class="scoring-row-label">${dim.label}</div>
                        <div class="scoring-row-weight">${weightPct}%</div>
                        <div style="width:200px;font-size:0.8125rem;color:#64748b;text-align:right">
                            ${labels[score-1] || '—'}
                        </div>
                        <div class="scoring-row-value sv-${score}">${score}</div>
                    </div>
                `;
            }
        }

        html += `
            <div class="scoring-block">
                <div class="scoring-block-header">
                    <span>${block.label}</span>
                    <span class="scoring-block-composite composite-${compLevel}" id="bc-${blockKey}">
                        ${blockComposite.toFixed(2)}
                    </span>
                </div>
                <div class="scoring-block-body">${rows}</div>
            </div>
        `;
    }

    container.innerHTML = html;
}

function renderRegulatoryBlock(d) {
    const container = document.getElementById('regulatory-body');
    const canEdit = ['admin', 'manager'].includes(userRole);

    const items = [
        { key: 'regulatory_required', label: 'Требуется проверка по ЦБ', value: !!d.regulatory_required },
        { key: 'kar_request',         label: 'Запрос КАР / руководства', value: !!d.kar_request },
        { key: 'other_factors',       label: 'Другие факторы',           value: !!d.other_factors },
    ];

    container.innerHTML = items.map(item => {
        if (canEdit) {
            return `
                <div class="reg-toggle-row">
                    <span class="reg-toggle-label">${item.label}</span>
                    <label style="display:flex;align-items:center;gap:6px;cursor:pointer">
                        <input type="checkbox" id="reg-${item.key}" ${item.value ? 'checked' : ''}
                               onchange="updateLiveScores()">
                        <span style="font-size:0.8125rem;color:#334155">${item.value ? 'ДА' : 'НЕТ'}</span>
                    </label>
                </div>
            `;
        } else {
            return `
                <div class="reg-toggle-row">
                    <span class="reg-toggle-label">${item.label}</span>
                    <span style="font-weight:600;color:${item.value ? '#dc2626' : '#16a34a'}">${item.value ? 'ДА' : 'НЕТ'}</span>
                </div>
            `;
        }
    }).join('');
}

function renderFinalScore(d) {
    const composite = parseFloat(d.composite_score) || 0;
    const level = d.risk_level || 'low';
    const process = parseFloat(d.process_composite) || 0;
    const svk = parseFloat(d.svk_composite) || 0;
    const importance = parseFloat(d.importance_composite) || 0;
    const residual = d.residual_risk || 1;

    const levelColor = { high: '#dc2626', medium: '#d97706', low: '#16a34a' }[level] || '#64748b';

    document.getElementById('final-score-bar').innerHTML = `
        <div>
            <div class="final-score-value" id="fs-value" style="color:${levelColor}">${composite.toFixed(2)}</div>
            <div class="final-score-label">Итого</div>
        </div>
        <div>
            ${renderRiskBadge(level)}
        </div>
        <div class="final-score-breakdown">
            <span><span class="fsb-val" id="fs-process">${process.toFixed(2)}</span>Процесс</span>
            <span><span class="fsb-val" id="fs-svk">${svk.toFixed(2)}</span>СВК</span>
            <span><span class="fsb-val" id="fs-residual">${residual}</span>Ост. риск</span>
            <span><span class="fsb-val" id="fs-importance">${importance.toFixed(2)}</span>Важность</span>
        </div>
    `;
}

function updateLiveScores() {
    // Gather all scores from dropdowns
    const scores = {};
    for (const dim of Object.keys(RISK_DIMENSIONS)) {
        const el = document.getElementById(`score-${dim}`);
        if (el) {
            scores[dim] = parseInt(el.value) || 1;
            // Update value badge
            const sv = document.getElementById(`sv-${dim}`);
            if (sv) {
                sv.textContent = scores[dim];
                sv.className = `scoring-row-value sv-${scores[dim]}`;
            }
        }
    }

    // Recalculate block composites
    for (const blockKey of Object.keys(SCORING_BLOCKS)) {
        const comp = calcBlockComposite(scores, blockKey);
        const compLevel = comp >= 2.0 ? 'high' : comp >= 1.5 ? 'medium' : 'low';
        const el = document.getElementById(`bc-${blockKey}`);
        if (el) {
            el.textContent = comp.toFixed(2);
            el.className = `scoring-block-composite composite-${compLevel}`;
        }
    }

    // Recalculate final
    const process = calcBlockComposite(scores, 'process');
    const svk = calcBlockComposite(scores, 'svk');
    const importance = calcBlockComposite(scores, 'importance');
    const residual = calcResidualRisk(process, svk);
    const composite = Math.round(((residual + importance) / 2) * 100) / 100;
    const level = getRiskLevel(composite);
    const levelColor = { high: '#dc2626', medium: '#d97706', low: '#16a34a' }[level] || '#64748b';

    // Update final score display
    const fsVal = document.getElementById('fs-value');
    if (fsVal) { fsVal.textContent = composite.toFixed(2); fsVal.style.color = levelColor; }

    const fsProcess = document.getElementById('fs-process');
    if (fsProcess) fsProcess.textContent = process.toFixed(2);
    const fsSvk = document.getElementById('fs-svk');
    if (fsSvk) fsSvk.textContent = svk.toFixed(2);
    const fsResidual = document.getElementById('fs-residual');
    if (fsResidual) fsResidual.textContent = residual;
    const fsImportance = document.getElementById('fs-importance');
    if (fsImportance) fsImportance.textContent = importance.toFixed(2);

    // Update summary score
    const summary = document.getElementById('detail-risk-summary');
    const scoreEl = summary ? summary.querySelector('.risk-summary-score') : null;
    if (scoreEl) {
        scoreEl.textContent = composite.toFixed(2);
        scoreEl.className = `risk-summary-score level-${level}`;
    }
}

async function saveScores() {
    const scores = {};
    for (const dim of Object.keys(RISK_DIMENSIONS)) {
        const el = document.getElementById(`score-${dim}`);
        if (el) scores[dim] = parseInt(el.value) || 1;
    }

    // Collect risk flags from toggles
    const risk_flags = {};
    for (const key of Object.keys(RISK_FLAG_LABELS)) {
        const el = document.getElementById(`rf-${key}`);
        risk_flags[key] = el ? el.classList.contains('active') : false;
    }

    // Collect regulatory toggles
    const regulatory_required = document.getElementById('reg-regulatory_required')?.checked || false;
    const kar_request = document.getElementById('reg-kar_request')?.checked || false;
    const other_factors = document.getElementById('reg-other_factors')?.checked || false;

    try {
        const resp = await fetch(`/api/grc/audit-objects/${currentDetailId}/score`, {
            method: 'POST',
            headers: {'Content-Type': 'application/json'},
            body: JSON.stringify({
                scores,
                risk_flags,
                regulatory_required,
                kar_request,
                other_factors
            })
        });
        if (resp.ok) {
            await openDetail(currentDetailId);
            await loadObjects();
        } else {
            const r = await resp.json();
            alert(r.detail || 'Ошибка сохранения');
        }
    } catch(e) { alert('Ошибка сети'); }
}
</script>
{% endblock %}