{% extends "base.html" %}
{% set page_title = "Fleet" %}
{% block title %}Fleet | Suvra{% endblock %}
{% block content %}
<style>
  .fleet-id { display: flex; flex-direction: column; gap: 2px; }
  .fleet-user { font-weight: 600; font-size: 0.9rem; }
  .fleet-machine { font-size: 0.78rem; color: var(--color-text-muted); }
  .fleet-num { text-align: right; font-variant-numeric: tabular-nums; }
  .fleet-num-strong { text-align: right; font-variant-numeric: tabular-nums; font-weight: 600; }
  .fleet-danger { color: var(--color-danger); font-weight: 700; }
  .fleet-muted { color: var(--color-text-muted); }
  .fleet-runtime {
    display: inline-block;
    font-size: 0.72rem;
    font-weight: 600;
    padding: 2px 8px;
    border-radius: 100px;
    background: var(--color-surface-raised);
    border: 1px solid var(--color-border);
    color: var(--color-text-secondary);
  }
  .fleet-mode-warn {
    display: inline-block;
    font-size: 0.7rem;
    font-weight: 600;
    padding: 2px 7px;
    border-radius: 100px;
    color: var(--color-danger);
    background: var(--color-danger-bg);
    margin-left: 6px;
  }
  .fleet-table-wrap { overflow-x: auto; }
  .override-row { padding: 12px 0; border-bottom: 1px solid var(--color-border-subtle); }
  .override-row:last-child { border-bottom: none; }
  .override-reason { font-size: 0.85rem; margin-top: 3px; }
  .override-meta { font-size: 0.76rem; color: var(--color-text-muted); margin-top: 3px; }
</style>

<section class="page-head">
  <div class="page-head-text">
    <h1>Fleet</h1>
    <p class="muted">Every developer install reporting to this control plane — who they are, what machine they're on, what Suvra stopped, and what they let through anyway.</p>
  </div>
</section>

<div class="kpi-grid">
  <div class="kpi-card">
    <h2>Developers</h2>
    <div class="kpi-main">
      <p class="kpi-value">{{ summary.developers }}</p>
      <div class="kpi-meta"><span class="fleet-muted">{{ summary.agents }} installs · {{ summary.machines }} machines</span></div>
    </div>
  </div>
  <div class="kpi-card">
    <h2>Blocked / Gated</h2>
    <div class="kpi-main">
      <p class="kpi-value">{{ summary.blocked }} <span class="fleet-muted" style="font-size:1rem;">/ {{ summary.gated }}</span></p>
      <div class="kpi-meta"><span class="fleet-muted">of {{ summary.total_decisions }} decisions</span></div>
    </div>
  </div>
  <div class="kpi-card">
    <h2>Overrides</h2>
    <div class="kpi-main">
      <p class="kpi-value {% if summary.overrides %}fleet-danger{% endif %}">{{ summary.overrides }}</p>
      <div class="kpi-meta"><span class="fleet-muted">gated actions run anyway</span></div>
    </div>
  </div>
  <div class="kpi-card">
    <h2>Tokens</h2>
    <div class="kpi-main">
      <p class="kpi-value">{{ "{:,}".format(summary.total_tokens) }}</p>
      <div class="kpi-meta"><span class="fleet-muted">across {{ summary.sessions }} sessions</span></div>
    </div>
  </div>
</div>

<section class="panel">
  <div class="panel-head"><h2>Developer installs</h2></div>
  {% if rows %}
  <div class="fleet-table-wrap">
    <table class="data-table">
      <thead>
        <tr>
          <th>Developer / machine</th>
          <th>Runtime</th>
          <th class="fleet-num">Decisions</th>
          <th class="fleet-num">Blocked</th>
          <th class="fleet-num">Gated</th>
          <th class="fleet-num">Overrides</th>
          <th class="fleet-num">Sessions</th>
          <th class="fleet-num">Tokens</th>
          {% if cost_enabled %}<th class="fleet-num">Est. cost</th>{% endif %}
          <th>Last seen</th>
        </tr>
      </thead>
      <tbody>
        {% for row in rows %}
        <tr>
          <td>
            <div class="fleet-id">
              <span class="fleet-user">{{ row.os_user or "unknown" }}</span>
              <span class="fleet-machine">
                {{ row.hostname or "unknown machine" }}
                {% if row.unsafe_permission_modes %}
                <span class="fleet-mode-warn" title="Ran {{ row.unsafe_mode_events }} action(s) with the runtime's own confirmation prompts disabled — Suvra's gate is the only check left">
                  {{ row.unsafe_permission_modes | join(", ") }}
                </span>
                {% endif %}
              </span>
              <a class="fleet-machine" href="/dashboard/agents?agent_id={{ row.agent_id }}">{{ row.agent_id }}</a>
            </div>
          </td>
          <td><span class="fleet-runtime">{{ row.runtime_type or "—" }}</span></td>
          <td class="fleet-num">{{ "{:,}".format(row.total_decisions) }}</td>
          <td class="fleet-num">{% if row.blocked %}<span class="badge badge-deny">{{ row.blocked }}</span>{% else %}<span class="fleet-muted">0</span>{% endif %}</td>
          <td class="fleet-num">{% if row.gated %}<span class="badge badge-approval">{{ row.gated }}</span>{% else %}<span class="fleet-muted">0</span>{% endif %}</td>
          <td class="fleet-num">{% if row.overrides %}<span class="fleet-danger">{{ row.overrides }}</span>{% else %}<span class="fleet-muted">0</span>{% endif %}</td>
          <td class="fleet-num">{{ row.sessions }}</td>
          <td class="fleet-num-strong" title="in {{ '{:,}'.format(row.input_tokens) }} · out {{ '{:,}'.format(row.output_tokens) }} · cache read {{ '{:,}'.format(row.cache_read_tokens) }}">
            {{ "{:,}".format(row.total_tokens) }}
          </td>
          {% if cost_enabled %}
          <td class="fleet-num">{% if row.estimated_cost is not none %}${{ "%.2f"|format(row.estimated_cost) }}{% else %}<span class="fleet-muted">—</span>{% endif %}</td>
          {% endif %}
          <td class="fleet-muted">{{ (row.last_seen_at or "—")[:19] | replace("T", " ") }}</td>
        </tr>
        {% endfor %}
      </tbody>
    </table>
  </div>
  {% else %}
  <div class="empty-state">
    <p>No developer installs reporting yet.</p>
    <p class="muted">Each developer runs <code>suvra init claude-code</code> (or <code>suvra init codex</code>) and points <code>SUVRA_DB_PATH</code>/<code>SUVRA_DATABASE_URL</code> at this control plane. Every install registers itself automatically — no agent IDs to hand out.</p>
  </div>
  {% endif %}
</section>

<section class="panel">
  <div class="panel-head">
    <h2>Critical actions allowed anyway</h2>
  </div>
  <p class="muted" style="margin-bottom:14px;">
    Actions Suvra blocked or held for approval that the developer ran regardless. Detected by correlating the pre-call gate with whether the tool actually executed.
  </p>
  {% if overrides %}
  <div>
    {% for event in overrides %}
    <div class="override-row">
      <div>
        <span class="fleet-user">{{ event.user or event.agent or "unknown" }}</span>
        <span class="badge badge-category" style="margin-left:8px;">{{ event.action_type }}</span>
        {% if event.permission_mode in ("bypassPermissions", "acceptEdits") %}
        <span class="fleet-mode-warn">{{ event.permission_mode }}</span>
        {% endif %}
      </div>
      <div class="override-reason">{{ event.result_summary }}</div>
      <div class="override-meta">
        {{ (event.created_at or "")[:19] | replace("T", " ") }}
        {% if event.agent %} · {{ event.agent }}{% endif %}
        {% if event.session_id %} · session {{ event.session_id[:8] }}{% endif %}
      </div>
    </div>
    {% endfor %}
  </div>
  {% else %}
  <div class="empty-state">
    <p>No overrides recorded.</p>
    <p class="muted">Nobody has run an action Suvra blocked or gated. This populates once the <code>PostToolUse</code> hook is installed (it is, by default).</p>
  </div>
  {% endif %}
</section>
{% endblock %}