{% extends "base.html" %}
{% block title %}MCP Firewall - Agent Loop Guard{% endblock %}
{% block content %}
<header class="page-head">
  <div>
    <h1>MCP Permission Firewall</h1>
    <p class="muted">Policy: <code>{{ policy_path }}</code></p>
  </div>
  <a class="button secondary" href="/api/v1/mcp/export">Export Audit</a>
</header>

<section class="panel">
  <h2>Pending Approvals</h2>
  {% for approval in approvals if approval.status == "pending" %}
    <form class="approval-row" method="post" action="/mcp/approvals/{{ approval.id }}/decision">
      <div>
        <strong>{{ approval.id }}</strong>
        <div class="muted">Expires {{ approval.expires_at }}</div>
      </div>
      <select name="scope" aria-label="Approval scope">
        <option value="once">Allow once</option>
        <option value="session">Allow for session</option>
      </select>
      <button type="submit" name="action" value="allow">Allow</button>
      <button class="danger" type="submit" name="action" value="deny">Deny</button>
    </form>
  {% else %}
    <p class="muted">No tool calls are waiting for approval.</p>
  {% endfor %}
</section>

<section class="panel">
  <h2>Servers</h2>
  <table>
    <thead><tr><th>Name</th><th>Transport</th><th>Target</th><th>Status</th></tr></thead>
    <tbody>
    {% for server in servers %}
      <tr>
        <td>{{ server.name }}<br><span class="muted">{{ server.id }}</span></td>
        <td>{{ server.transport }}</td>
        <td><code>{{ server.target }}</code></td>
        <td><span class="status status-{{ 'ok' if server.enabled else 'ended' }}">{{ 'enabled' if server.enabled else 'disabled' }}</span></td>
      </tr>
    {% endfor %}
    </tbody>
  </table>
</section>

<section class="panel">
  <h2>Decision Audit</h2>
  <table>
    <thead><tr><th>Time</th><th>Server / Tool</th><th>Action</th><th>Rule</th><th>Reason</th><th>Trace</th></tr></thead>
    <tbody>
    {% for event in events %}
      <tr>
        <td>{{ event.created_at }}</td>
        <td>{{ event.server_id }}<br><code>{{ event.tool_name }}</code></td>
        <td><span class="status status-{{ 'blocked' if event.action == 'deny' else 'ok' }}">{{ event.action }}</span></td>
        <td>{{ event.rule_id or '-' }}<br><span class="muted">{{ event.policy_version }}</span></td>
        <td>{{ event.reason }}</td>
        <td>{% if event.trace_id %}<a href="/replay/{{ event.trace_id }}">Open</a>{% else %}-{% endif %}</td>
      </tr>
    {% else %}
      <tr><td colspan="6" class="muted">No MCP decisions recorded.</td></tr>
    {% endfor %}
    </tbody>
  </table>
</section>
{% endblock %}