{% extends "base.html" %}
{% block title %}Policy | Suvra{% endblock %}
{% block content %}
<section class="page-head">
  <h1>Policy Viewer</h1>
  <p class="muted">Read-only view of active policy configuration.</p>
</section>

<section class="panel">
  <dl class="kv">
    <dt>Environment</dt>
    <dd><code>{{ active_environment }}</code></dd>
    <dt>Policy Path</dt>
    <dd><code>{{ policy_path }}</code></dd>
    <dt>Last Modified</dt>
    <dd>{{ modified_at }}</dd>
    <dt>Workspace Root</dt>
    <dd><code>{{ workspace_dir }}</code> (prefix: <code>{{ workspace_prefix }}</code>)</dd>
    <dt>Workspace Absolute Path</dt>
    <dd><code>{{ workspace_root }}</code></dd>
  </dl>

  {% if not is_scoped_dir %}
  <p class="muted" style="margin-top:8px;">Single-file mode. To use the scoped policy browser, set <code>SUVRA_POLICY_PATH</code> to a directory of scoped policy files.</p>
  <h3 class="drawer-title">Policy Content</h3>
  <pre class="code-block">{{ policy_content }}</pre>
  {% endif %}
</section>

{% if is_scoped_dir %}
<section class="panel">
  <h3 class="drawer-title">Scoped Policy Files</h3>
  <p class="muted">Each file targets a specific scope level. Rules are evaluated in scope order: global → tenant → business_unit → domain → workspace → agent → environment.</p>
  <table class="data-table">
    <thead>
      <tr>
        <th>File</th>
        <th>Scope Level</th>
        <th>Scope Identity</th>
        <th>Default Mode</th>
        <th>Rules</th>
      </tr>
    </thead>
    <tbody>
      {% for sp in scoped_policies %}
      <tr>
        <td><code>{{ sp.file }}</code></td>
        <td><span class="badge status-{{ sp.scope_level }}">{{ sp.scope_level }}</span></td>
        <td><code>{{ sp.scope_identity }}</code></td>
        <td><span class="badge {{ 'allow' if sp.default_mode == 'allow' else 'deny' }}">{{ sp.default_mode }}</span></td>
        <td>{{ sp.rule_count }}</td>
      </tr>
      <tr class="details-row">
        <td colspan="5">
          <details>
            <summary>Rules ({{ sp.rule_count }})</summary>
            {% if sp.rules %}
            <table class="data-table">
              <thead>
                <tr>
                  <th>Rule ID</th>
                  <th>Effect</th>
                  <th>Action Type</th>
                  <th>Constraints</th>
                </tr>
              </thead>
              <tbody>
                {% for rule in sp.rules %}
                <tr>
                  <td><code>{{ rule.id }}</code></td>
                  <td><span class="badge {{ 'allow' if rule.effect == 'allow' else ('deny' if rule.effect == 'deny' else 'needs') }}">{{ rule.effect }}</span></td>
                  <td><code>{{ rule.type }}</code></td>
                  <td><code>{{ rule.constraints | tojson if rule.constraints else '—' }}</code></td>
                </tr>
                {% endfor %}
              </tbody>
            </table>
            {% else %}
            <p class="muted">No rules defined.</p>
            {% endif %}
          </details>
        </td>
      </tr>
      {% else %}
      <tr>
        <td colspan="5" class="muted">No scoped policy files found.</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</section>
{% endif %}

<section class="panel">
  <h3 class="drawer-title">Built-in Templates</h3>
  <p class="muted">Read-only templates available for onboarding and environment bootstrap.</p>
  <table class="data-table">
    <thead>
      <tr>
        <th>Template</th>
        <th>File Path</th>
      </tr>
    </thead>
    <tbody>
      {% for item in templates %}
      <tr>
        <td><code>{{ item.name }}</code></td>
        <td><code>{{ item.path }}</code></td>
      </tr>
      {% else %}
      <tr>
        <td colspan="2" class="muted">No templates found.</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</section>

<section class="panel">
  <h3 class="drawer-title">OpenClaw Starter Templates</h3>
  <p class="muted">Role-based starter profiles. Set <code>SUVRA_POLICY_PATH</code> to one of these files.</p>
  <table class="data-table">
    <thead>
      <tr>
        <th>Template</th>
        <th>File Path</th>
      </tr>
    </thead>
    <tbody>
      {% for item in openclaw_templates %}
      <tr>
        <td><code>{{ item.name }}</code></td>
        <td><code>{{ item.path }}</code></td>
      </tr>
      {% else %}
      <tr>
        <td colspan="2" class="muted">No OpenClaw starter templates found.</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</section>
{% endblock %}