{% extends "paxalia/base.html" %}
{% load static i18n %}

{% block title %}{% trans "Compliance" %} – Paxalia Analytics{% endblock %}
{% block page_title %}{% trans "Compliance" %}{% endblock %}
{% block page_subtitle %}{% trans "Consent mode, data retention, and visitor deletion" %}{% endblock %}

{% block extra_css %}
    <link rel="stylesheet" href="{% static 'paxalia/styles/components/security.css' %}">
{% endblock %}

{% block dashboard_content %}
<div class="security-page">

    <div class="table-card">
        <h2 class="card-title">{% trans "Consent Mode" %}</h2>
        {% if consent_enabled %}
            <span class="security-status-badge security-status-ok">{% trans "Enabled" %}</span>
            <p class="form-hint">
                {% blocktrans with cookie=consent_cookie_name value=consent_granted_value %}Nothing is tracked until a cookie named "{{ cookie }}" is present with value "{{ value }}" — set that cookie from your own consent-banner JS once a visitor accepts.{% endblocktrans %}
            </p>
        {% else %}
            <span class="security-status-badge security-status-warn">{% trans "Disabled" %}</span>
            <p class="form-hint">
                {% trans "Every visit is tracked immediately, same as before Phase 14. Set CONSENT_MODE_ENABLED = True in your PAXALIA_DASHBOARD settings dict to require consent first — see the README's Consent Mode section." %}
            </p>
        {% endif %}
    </div>

    <div class="table-card">
        <h2 class="card-title">{% trans "Data Retention" %}</h2>
        <p class="form-hint">
            {% trans "Configured via DATA_RETENTION_DAYS in your PAXALIA_DASHBOARD settings dict, applied by manage.py prune_analytics_data (schedule it via cron/Celery beat like the other maintenance commands)." %}
        </p>
        <table class="analytics-table">
            <thead><tr><th>{% trans "Data type" %}</th><th>{% trans "Retention" %}</th></tr></thead>
            <tbody>
                <tr><td>PageView</td><td>{{ data_retention_days.pageview|default:_("Kept forever") }}{% if data_retention_days.pageview %} {% trans "days" %}{% endif %}</td></tr>
                <tr><td>AnalyticsEvent</td><td>{{ data_retention_days.analytics_event|default:_("Kept forever") }}{% if data_retention_days.analytics_event %} {% trans "days" %}{% endif %}</td></tr>
                <tr><td>JSError</td><td>{{ data_retention_days.js_error|default:_("Kept forever") }}{% if data_retention_days.js_error %} {% trans "days" %}{% endif %}</td></tr>
                <tr><td>UptimeCheck</td><td>{{ data_retention_days.uptime_check|default:_("Kept forever") }}{% if data_retention_days.uptime_check %} {% trans "days" %}{% endif %}</td></tr>
                <tr><td>SlowQuery</td><td>{{ data_retention_days.slow_query|default:_("Kept forever") }}{% if data_retention_days.slow_query %} {% trans "days" %}{% endif %}</td></tr>
                <tr><td>LoginEvent / SecurityAuditLog</td><td>{{ security_log_retention_days }} {% trans "days (SECURITY_LOG_RETENTION_DAYS, separate setting)" %}</td></tr>
                <tr><td>ServerMetricSnapshot</td><td>{{ server_metric_retention_days }} {% trans "days (SERVER_METRIC_RETENTION_DAYS, pruned inline by record_server_metrics)" %}</td></tr>
            </tbody>
        </table>
    </div>

    <div class="table-card">
        <h2 class="card-title">{% trans "Forget This Visitor" %}</h2>
        <p class="form-hint">
            {% trans "Deletes every stored row for a given session ID or IP address. This is real, immediate deletion — there is no undo." %}
            {% trans "Note: JS errors can only be deleted by session ID (they don't store an IP)." %}
        </p>
        <form method="post" class="security-inline-form">
            {% csrf_token %}
            <input type="hidden" name="forget_visitor" value="1">
            <select name="identifier_type">
                <option value="session">{% trans "Session ID" %}</option>
                <option value="ip">{% trans "IP address" %}</option>
            </select>
            <input type="text" name="identifier" placeholder="{% trans 'Session ID or IP address' %}" required>
            <button type="submit" class="btn btn-danger" data-confirm="{% trans 'Permanently delete all stored data for this visitor? This cannot be undone.' %}">
                {% trans "Delete" %}
            </button>
        </form>
    </div>

</div>
{% endblock %}

{% block page_scripts %}
    <script nonce="{{ request.csp_nonce }}" src="{% static 'paxalia/scripts/security.js' %}"></script>
{% endblock %}