{% extends "base.html" %}
{% set active_nav = "my-organization" %}

{% block title %}{{ site_revision.name if site_revision else site.euid }} - My Organization - LSMC Atlas{% endblock %}

{% block content %}
<div class="page-header">
    <div>
        <h1 class="page-title">{{ site_revision.name if site_revision else site.euid }}</h1>
        <p class="page-subtitle">{{ revision.name }}</p>
    </div>
    <div>
        <a href="/my-organization/sites" class="btn btn-ghost">← Back to Sites</a>
    </div>
</div>

<div class="card mb-lg">
    <h3 class="mb-md">Site Information</h3>
    <dl class="detail-list">
        <div class="detail-row">
            <dt>EUID</dt>
            <dd class="text-mono">{{ site.euid }}</dd>
        </div>
        <div class="detail-row">
            <dt>Site Code</dt>
            <dd class="text-mono">{{ site_revision.site_code if site_revision and site_revision.site_code else '—' }}</dd>
        </div>
        <div class="detail-row">
            <dt>Contact Email</dt>
            <dd>{{ site_revision.contact_email if site_revision and site_revision.contact_email else '—' }}</dd>
        </div>
        <div class="detail-row">
            <dt>Contact Phone</dt>
            <dd>{{ site_revision.contact_phone if site_revision and site_revision.contact_phone else '—' }}</dd>
        </div>
    </dl>
</div>

<div class="card mb-lg">
    <div class="card-header">
        <h2 class="card-title">Site Storage Policy Override</h2>
    </div>
    <div class="card-body">
        {% if effective_site_storage_policy %}
        <p class="text-sm mb-md">
            Effective policy source:
            <strong>{{ 'site override' if effective_site_storage_policy.scope == 'site' else 'organization policy' }}</strong>
            · bucket <code>{{ effective_site_storage_policy.policy.bucket }}</code>
            · region <code>{{ effective_site_storage_policy.policy.region }}</code>
        </p>
        {% else %}
        <p class="text-sm text-muted mb-md">No enabled storage policy is configured for this organization.</p>
        {% endif %}
        <form method="POST" action="/my-organization/sites/{{ site.euid }}/storage-policy">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <div class="grid grid-cols-2 gap-lg">
                <div class="form-group">
                    <label class="form-label" for="site-storage-enabled">Enabled</label>
                    <select id="site-storage-enabled" name="enabled" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="true" {% if not site_storage_policy or site_storage_policy.enabled %}selected{% endif %}>Enabled</option>
                        <option value="false" {% if site_storage_policy and not site_storage_policy.enabled %}selected{% endif %}>Disabled</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-access-mode">Access Mode</label>
                    <select id="site-storage-access-mode" name="access_mode" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="lsmc_managed" {% if not site_storage_policy or site_storage_policy.access_mode == 'lsmc_managed' %}selected{% endif %}>lsmc_managed</option>
                        <option value="customer_bucket" {% if site_storage_policy and site_storage_policy.access_mode == 'customer_bucket' %}selected{% endif %}>customer_bucket</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-bucket">Bucket</label>
                    <input id="site-storage-bucket" name="bucket" class="form-input" value="{{ site_storage_policy.bucket if site_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-region">Region</label>
                    <input id="site-storage-region" name="region" class="form-input" value="{{ site_storage_policy.region if site_storage_policy else 'us-west-2' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-base-prefix">Base Prefix (optional)</label>
                    <input id="site-storage-base-prefix" name="base_prefix" class="form-input" value="{{ site_storage_policy.base_prefix if site_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-classes">Allowed Artifact Classes (comma-separated)</label>
                    <input id="site-storage-classes" name="allowed_artifact_classes" class="form-input" value="{{ (site_storage_policy.allowed_artifact_classes | join(', ')) if site_storage_policy else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-assume-role">Assume Role ARN (optional)</label>
                    <input id="site-storage-assume-role" name="assume_role_arn" class="form-input" value="{{ site_storage_policy.assume_role_arn if site_storage_policy and site_storage_policy.assume_role_arn else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-storage-kms">KMS Key ARN (optional)</label>
                    <input id="site-storage-kms" name="kms_key_arn" class="form-input" value="{{ site_storage_policy.kms_key_arn if site_storage_policy and site_storage_policy.kms_key_arn else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                </div>
            </div>
            {% if user.is_org_admin %}
            <div class="flex gap-sm">
                <button type="submit" name="action" value="save" class="btn btn-primary">Save Site Storage Policy</button>
                <button type="submit" name="action" value="clear" class="btn btn-secondary">Clear Site Override</button>
            </div>
            {% endif %}
        </form>
    </div>
</div>

<div class="card">
    <div class="card-header">
        <h2 class="card-title">Bloom Integration</h2>
    </div>
    <div class="card-body">
        {% if effective_bloom_config %}
        <p class="text-sm mb-md">
            Effective config source:
            <strong>{{ 'site override' if effective_bloom_config.scope == 'site' else 'organization default' }}</strong>
        </p>
        {% endif %}
        <p class="text-sm text-muted mb-md">
            Use this site as the origin site when requesting Bloom material from a Test page at
            <code>/trfs/tests/&lt;test_euid&gt;</code>.
        </p>
        <p class="text-sm text-muted mb-md">
            Required Atlas fields for Bloom API access:
            <code>bloom_base_url</code>,
            <code>bloom_api_key_secret_ref</code>,
            <code>bloom_webhook_secret_ref</code>.
        </p>
        <form method="POST" action="/my-organization/sites/{{ site.euid }}/integrations/bloom">
            <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
            <div class="grid grid-cols-2 gap-lg">
                <div class="form-group">
                    <label class="form-label" for="site-bloom-enabled">Enabled</label>
                    <select id="site-bloom-enabled" name="enabled" class="form-input" {% if not user.is_org_admin %}disabled{% endif %}>
                        <option value="true" {% if site_bloom_config and site_bloom_config.enabled %}selected{% endif %}>Enabled</option>
                        <option value="false" {% if not site_bloom_config or not site_bloom_config.enabled %}selected{% endif %}>Disabled</option>
                    </select>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-bloom-service-user">Service User</label>
                    <input id="site-bloom-service-user" name="bloom_service_user" class="form-input" value="{{ site_bloom_config.bloom_service_user if site_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Optional service account/user label used for Bloom-side audit context.</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-bloom-base-url">Bloom Base URL</label>
                    <input id="site-bloom-base-url" name="bloom_base_url" class="form-input" value="{{ site_bloom_config.bloom_base_url if site_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Bloom API host Atlas will call for this site override.</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-bloom-key-ref">API Key Secret Ref / Token</label>
                    <input id="site-bloom-key-ref" name="bloom_api_key_secret_ref" class="form-input" value="{{ site_bloom_config.bloom_api_key_secret_ref if site_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Per-tenant Bloom token source. Supported values: direct <code>blm_...</code> token, <code>env:MY_BLOOM_KEY</code>, or <code>file:/path/to/secret</code>.</p>
                </div>
                <div class="form-group">
                    <label class="form-label" for="site-bloom-webhook-ref">Webhook Secret Ref</label>
                    <input id="site-bloom-webhook-ref" name="bloom_webhook_secret_ref" class="form-input" value="{{ site_bloom_config.bloom_webhook_secret_ref if site_bloom_config else '' }}" {% if not user.is_org_admin %}readonly{% endif %}>
                    <p class="form-hint">Secret reference used to verify Bloom webhook signatures in Atlas.</p>
                </div>
            </div>
            {% if user.is_org_admin %}
            <div class="flex gap-sm">
                <button type="submit" name="action" value="validate" class="btn btn-secondary">Validate Credentials</button>
                <button type="submit" name="action" value="save" class="btn btn-primary">Save Site Bloom Config</button>
            </div>
            {% endif %}
        </form>
    </div>
</div>

{% include "partials/tube_panel.html" %}
{% endblock %}