{% extends 'generic/object.html' %}
{% load buttons %}
{% load custom_links %}
{% load helpers %}
{% load i18n %}
{% load plugins %}

{% block content %}
{% include "netbox_security/inc/hierarchy_warning.html" %}
<div class="card mb-3">
    <div class="card-body">
        <strong>{% trans "IP" %}:</strong> {{ object.address }}
        · <strong>{% trans "Zone context" %}:</strong>
        {% for zone in policy_context.member_zones %}{{ zone|linkify }}{% if not forloop.last %}, {% endif %}{% empty %}{% trans "Unknown" %}{% endfor %}
        {% if policy_context.zone_device %} · <strong>{% trans "Device" %}:</strong> {{ policy_context.zone_device|linkify }}{% endif %}
        {% if policy_context.zone_interface and policy_context.zone_context_known %}
            <div class="text-muted">{% trans "Zone membership determined from interface" %} {{ policy_context.zone_interface|linkify }}.</div>
        {% endif %}
    </div>
</div>
{% if not policy_context.zone_context_known %}
<div class="alert alert-info" role="alert">
    {% trans "Zone membership is unknown. These policies match the IP address, but their zone applicability has not been confirmed." %}
</div>
{% endif %}
<div class="row">
    <div class="col-md-6">
        <div class="card">
            <h5 class="card-header">
                {% trans "NAT Pool Members" %}
                <div class="card-actions">
                    {% if perms.netbox_security.add_natpoolmember %}
                        <a href="{% url 'plugins:netbox_security:natpoolmember_add' %}?return_url={{ object.get_absolute_url }}&address={{ object.pk }}" class="btn btn-ghost-primary btn-sm">
                          <span class="mdi mdi-plus-thick" aria-hidden="true"></span> {% trans "Create NAT Pool Member" %}
                        </a>
                    {% endif %}
                </div>
            </h5>
            {% htmx_table 'plugins:netbox_security:natpoolmember_list' address_id=object.pk %}
        </div>
    </div>
    <div class="col-md-6">
        <div class="card">
            <h5 class="card-header">
                {% trans "NAT Rules" %}
                <div class="card-actions">
                    {% if perms.netbox_security.add_natrule %}
                        <a href="{% url 'plugins:netbox_security:natrule_add' %}?return_url={{ object.get_absolute_url }}&source_addresses={{ object.pk }}" class="btn btn-ghost-primary btn-sm">
                          <span class="mdi mdi-plus-thick" aria-hidden="true"></span> {% trans "Create NAT Rule (Source)" %}
                        </a>
                        <a href="{% url 'plugins:netbox_security:natrule_add' %}?return_url={{ object.get_absolute_url }}&destination_addresses={{ object.pk }}" class="btn btn-ghost-primary btn-sm">
                          <span class="mdi mdi-plus-thick" aria-hidden="true"></span> {% trans "Create NAT Rule (Destination)" %}
                        </a>
                    {% endif %}
                </div>
            </h5>
            {% htmx_table 'plugins:netbox_security:natrule_list' ip_address_id=object.pk %}
        </div>
    </div>
</div>
<div class="row">
    <div class="col-md-6">
        <div class="card">
            <h5 class="card-header">
                {% trans "Addresses" %}
                <div class="card-actions">
                    {% if perms.netbox_security.add_address %}
                        <a href="{% url 'plugins:netbox_security:address_add' %}?ipam_ipaddress={{ object.pk }}&return_url={{ object.get_absolute_url }}" class="btn btn-ghost-primary btn-sm">
                          <span class="mdi mdi-plus-thick" aria-hidden="true"></span> {% trans "Create Address" %}
                        </a>
                    {% endif %}
                </div>
            </h5>
            {% htmx_table 'plugins:netbox_security:address_list' ip_address_id=object.pk %}
        </div>
    </div>
    <div class="col-md-6">
        <div class="card">
            <h5 class="card-header">
                {% trans "Security Zones" %}
                <div class="card-actions">
                    {% if perms.netbox_security.add_securityzone %}
                        <a href="{% url 'plugins:netbox_security:securityzone_add' %}?return_url={{ object.get_absolute_url }}" class="btn btn-ghost-primary btn-sm">
                          <span class="mdi mdi-plus-thick" aria-hidden="true"></span> {% trans "Create Security Zone" %}
                        </a>
                    {% endif %}
                </div>
            </h5>
            {% htmx_table 'plugins:netbox_security:securityzone_list' ip_address_id=object.pk %}
        </div>
    </div>
</div>
<div class="row">
    <div class="col-md-12">
        <div class="card">
            <h5 class="card-header">{% trans "Policy candidates" %}</h5>
            <div class="card-body">
                <p class="text-muted">{% trans "These results describe this IP's side of each policy, not a connectivity verdict. The other endpoint, applications, and policy order also affect the outcome. Details include only visible criteria and may be incomplete." %}</p>
                {% if policy_context.policy_candidates %}
                    {% include "netbox_security/inc/policy_candidates_table.html" with rows=policy_context.policy_candidates %}
                {% else %}
                    <p class="text-muted">{% trans "No policy candidates found within the displayed address relationships and zone context." %}</p>
                {% endif %}
                {% if policy_context.excluded_policy_candidates %}
                    <details class="mt-3 mb-3">
                        <summary>{% trans "Other address matches — excluded for this context" %} ({{ policy_context.excluded_policy_candidates|length }})</summary>
                        <p class="text-muted mt-2">{% trans "These policies match the address, but their zone or address-book scope does not match this context." %}</p>
                        {% include "netbox_security/inc/policy_candidates_table.html" with rows=policy_context.excluded_policy_candidates %}
                    </details>
                {% endif %}
                {% if policy_context.inherited_address_objects %}
                    <p class="text-muted mb-1 mt-2">{% trans "Inherited Addresses (from parent prefixes)" %}</p>
                    <ul class="mb-0 ps-3">
                        {% for address in policy_context.inherited_address_objects %}
                            <li class="mb-1">{{ address|linkify }}</li>
                        {% endfor %}
                    </ul>
                {% endif %}
                {% if policy_context.address_set_hierarchy_rows %}
                    <p class="text-muted mb-1 mt-2">{% trans "Address Set Hierarchy" %}</p>
                    <ul class="mb-0 ps-3">
                        {% for row in policy_context.address_set_hierarchy_rows %}
                            <li class="mb-1">
                                {% for address_set in row.path %}
                                    {% if not forloop.first %} &rarr; {% endif %}
                                    {{ address_set|linkify }}
                                {% endfor %}
                                {% if row.address %}
                                    {% if row.path %} &rarr; {% endif %}[{{ row.address|linkify }}]
                                {% endif %}
                            </li>
                        {% endfor %}
                    </ul>
                {% elif policy_context.address_objects %}
                    <p class="text-muted mb-1 mt-2">{% trans "Direct Addresses" %}</p>
                    <ul class="mb-0 ps-3">
                        {% for address in policy_context.address_objects %}
                            <li class="mb-1">{{ address|linkify }}</li>
                        {% endfor %}
                    </ul>
                {% endif %}
            </div>
        </div>
    </div>
</div>
{% endblock %}