{# Sailfish Per-DAG Policy table — Airflow 2.x FAB-rendered.
   One form per row so saves are atomic and a malformed input on one
   row can't blow away other rows' settings. #}
{% extends "appbuilder/base.html" %}

{% block title %}Sailfish DAG Policies{% endblock %}

{% block content %}
<div class="container" style="margin-top: 1.5em;">
  <div style="display:flex; justify-content:space-between; align-items:center;">
    <h2 style="margin:0;">Sailfish DAG Policies</h2>
    {% if connection_status == "connected" %}
      <span class="label label-success" style="font-size:1em;">Connected</span>
    {% else %}
      <span class="label label-danger" style="font-size:1em;"
            title="{{ connection_error or 'no connection' }}">Offline</span>
    {% endif %}
  </div>

  {% if save_status == "saved" %}
    <div class="alert alert-success" style="margin-top:1em;">
      Policy saved{% if save_dag_id %} for <code>{{ save_dag_id }}</code>{% endif %}.
    </div>
  {% elif save_status == "reset" %}
    <div class="alert alert-info" style="margin-top:1em;">
      Policy reset{% if save_dag_id %} for <code>{{ save_dag_id }}</code>{% endif %}
      (now using global policy).
    </div>
  {% endif %}

  {% if connection_status != "connected" %}
    <div class="alert alert-warning" style="margin-top:1em;">
      Cannot reach Sailfish at <code>{{ sailfish_base_url }}</code>
      ({{ connection_error or "unknown error" }}). Editing is disabled.
    </div>
  {% endif %}

  {% if empty %}
    <div class="alert alert-info" style="margin-top:1.5em;">
      No DAGs registered in this Airflow deployment, and no policies on
      file in Sailfish. Once you add a DAG, it will appear here.
    </div>
  {% else %}

  <p style="margin-top:1em; color:#555;">
    Per-DAG override of the global capture policy.
    <strong>Blocked</strong> is a hard "never capture" — for PII-sensitive
    jobs. <strong>Use Global</strong> means the row inherits the global
    Debugger setting.
  </p>

  <table class="table table-striped table-hover"
         style="margin-top:1em;">
    <thead>
      <tr>
        <th>DAG</th>
        <th>Policy</th>
        <th>Scope</th>
        <th style="width:6em;">TTL (min)</th>
        <th>Redaction</th>
        <th style="width:11em;">Actions</th>
      </tr>
    </thead>
    <tbody>
      {% for row in rows %}
      <tr {% if row.has_override %}style="background:#fff9e6;"{% endif %}>
        <form method="POST"
              action="/sailfish/dag-policies/{{ row.dag_id }}/save"
              style="display:contents;">
          {% if csrf_token is defined %}
            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
          {% endif %}
          <td>
            <code>{{ row.dag_id }}</code>
          </td>
          <td>
            <select name="policy" class="form-control"
                    {% if connection_status != "connected" %}disabled{% endif %}>
              {% for value, label in policy_choices %}
                <option value="{{ value }}"
                        {% if row.policy == value %}selected{% endif %}>
                  {{ label }}
                </option>
              {% endfor %}
            </select>
          </td>
          <td>
            {% for value, label in scope_choices %}
              <label class="label label-default"
                     style="margin-right:0.25em; font-weight:normal;
                            background:#eee; color:#333; padding:0.25em 0.5em;
                            display:inline-block;">
                <input type="checkbox" name="scope" value="{{ value }}"
                       {% if value in row.capture_scope %}checked{% endif %}
                       {% if connection_status != "connected" %}disabled{% endif %}/>
                {{ label }}
              </label>
            {% endfor %}
          </td>
          <td>
            <input type="number" name="ttl_minutes"
                   class="form-control"
                   value="{{ row.ttl_minutes }}"
                   min="1" max="43200"
                   {% if connection_status != "connected" %}disabled{% endif %}/>
          </td>
          <td>
            <select name="redaction_profile" class="form-control"
                    {% if connection_status != "connected" %}disabled{% endif %}>
              {% for value, label in redaction_profiles %}
                <option value="{{ value }}"
                        {% if row.redaction_profile == value %}selected{% endif %}>
                  {{ label }}
                </option>
              {% endfor %}
            </select>
          </td>
          <td>
            <button type="submit" class="btn btn-primary btn-sm"
                    {% if connection_status != "connected" %}disabled{% endif %}>
              Save
            </button>
        </form>
        {# Reset is a separate form so it doesn't carry the row's
           Save-form fields. Both forms live in the same table cell. #}
        <form method="POST"
              action="/sailfish/dag-policies/{{ row.dag_id }}/reset"
              style="display:inline;">
          {% if csrf_token is defined %}
            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
          {% endif %}
          <button type="submit" class="btn btn-default btn-sm"
                  {% if connection_status != "connected" %}disabled{% endif %}
                  title="Reset to Use Global">
            Reset
          </button>
        </form>
          </td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
  {% endif %}
</div>
{% endblock %}