{% extends "base.html" %}
{% from "_macros.html" import crumbs %}
{% block title %}Agent fleet — Steward{% endblock %}
{% block breadcrumb %}{{ crumbs([("Hosts", "/hosts/"), ("Agent fleet", "")]) }}{% endblock %}
{% block content %}
<div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:1rem;gap:1rem;flex-wrap:wrap;">
  <h1 class="page-title" style="margin-bottom:0;">Agent fleet</h1>
  <a href="/hosts/" class="btn btn-ghost btn-sm">← Hosts</a>
</div>
<p style="color:var(--text-muted);font-size:0.84rem;margin:-0.4rem 0 1.25rem;">
  Bulk agent operations across your inventory. For a single host, use its
  <a href="/hosts/">host page</a> — provisioning and metrics live there.
</p>

{% if new_token %}
<div class="card" style="background:var(--accent-bg);">
  <h3>New token — copy this install command now</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);">
    This is the only time the raw token is shown. Rotate if you lose it.
  </p>
  <pre style="user-select:all;word-break:break-all;">curl -sSL '{{ install_url }}' | sudo sh</pre>
</div>
{% endif %}

<div class="card">
  <form method="post" action="/plugins/host_agent/fleet/add-host"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">
    <div class="form-group" style="margin-bottom:0;">
      <label>Host name</label>
      <input type="text" name="name" required>
    </div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Address (optional)</label>
      <input type="text" name="address">
    </div>
    <button type="submit" class="btn">Add host</button>
  </form>
</div>

{% if ansible_available %}
{% set scope_select %}
        <label>Target</label>
        <select name="inventory_scope" required>
          {% for g in deploy_groups %}<option value="steward:group:{{ g.id }}">Group: {{ g.name }}</option>{% endfor %}
          {% for t in deploy_targets %}<option value="steward:target:{{ t.id }}">Target: {{ t.name }}</option>{% endfor %}
        </select>
{% endset %}

<div class="card">
  <h3 style="margin-bottom:0.4rem;">Agent lifecycle via Ansible</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.6rem;">
    These actions run bundled <strong>Ansible playbooks</strong> to deploy and maintain the
    Steward monitoring agent on your <a href="/ansible/inventory/targets">inventory hosts</a>.
    Steward generates each host's API token automatically and connects over SSH as the managed
    <code>steward</code> account — you'll be dropped into the live Ansible run to watch it.
  </p>

  {% if not managed_key_set %}
  <div style="background:color-mix(in srgb,var(--yellow) 12%,var(--bg-elevated));
              border:1px solid color-mix(in srgb,var(--yellow) 35%,var(--border));
              border-radius:6px;padding:0.7rem 0.9rem;display:flex;align-items:center;
              gap:0.8rem;flex-wrap:wrap;">
    <span style="color:var(--yellow);">⚠</span>
    <span style="font-size:0.84rem;flex:1;min-width:14rem;">
      No managed SSH key yet — Steward needs one to log into hosts as <code>steward</code>.
    </span>
    <form method="post" action="/settings/ansible/generate-key" style="margin:0;">
      <input type="hidden" name="next" value="/plugins/host_agent/fleet/">
      <button type="submit" class="btn btn-sm">Generate managed key</button>
    </form>
  </div>
  {% elif not (deploy_targets or deploy_groups) %}
  <p style="font-size:0.85rem;color:var(--text-dim);margin:0;">
    No Ansible inventory targets yet. Add some under <a href="/ansible/inventory/targets">Ansible → Inventory</a>.
  </p>
  {% endif %}
</div>

{% if managed_key_set and (deploy_targets or deploy_groups) %}
<div class="card">
  <h3 style="margin-bottom:0.4rem;">1 · Provision a fresh host</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    First contact for a brand-new host. Connects with a one-time <strong>bootstrap</strong>
    user + password (used for this run only, never stored), creates the <code>steward</code>
    login account with passwordless sudo, installs the managed SSH key, then installs the
    agent. Run this once per host.
  </p>
  <form method="post" action="/plugins/host_agent/provision"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Bootstrap user</label>
      <input type="text" name="bootstrap_user" required placeholder="root" style="width:9rem;" autocomplete="off">
    </div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Bootstrap password</label>
      <input type="password" name="bootstrap_password" required style="width:11rem;" autocomplete="new-password">
    </div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Report interval (s)</label>
      <input type="number" name="agent_interval" value="30" min="5" style="width:7rem;">
    </div>
    <button type="submit" class="btn">Provision</button>
  </form>
</div>

<div class="card">
  <h3 style="margin-bottom:0.4rem;">2 · Install / enroll agent</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    For a host that's already provisioned (has the <code>steward</code> account) but has no
    agent yet — or to re-enroll one. Connects as <code>steward</code> with the managed key,
    mints a fresh token, and installs the agent. No <code>curl | sh</code> needed.
  </p>
  <form method="post" action="/plugins/host_agent/deploy"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Report interval (s)</label>
      <input type="number" name="agent_interval" value="30" min="5" style="width:7rem;">
    </div>
    <button type="submit" class="btn">Install</button>
  </form>
</div>

<div class="card">
  <h3 style="margin-bottom:0.4rem;">3 · Update agents</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    Refresh the agent binary on hosts already running it. Connects as <code>steward</code>
    with the managed key and restarts the service — the token and config are left untouched,
    so identity is preserved.
  </p>
  <form method="post" action="/plugins/host_agent/update"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <button type="submit" class="btn">Update</button>
  </form>
</div>
{% endif %}
{% endif %}

<div class="card-flush">
  <table class="table">
    <thead>
      <tr>
        <th>Host</th><th>Reported IP</th><th>Agent version</th><th>Distro</th>
        <th>Last seen</th><th class="td-actions">Actions</th>
      </tr>
    </thead>
    <tbody>
      {% for item in registrations %}
      <tr>
        <td>{{ item.host.name if item.host else item.reg.host_id }}</td>
        <td>{{ item.reg.host_ip or "—" }}</td>
        <td>{{ item.reg.agent_version or "—" }}</td>
        <td>{{ item.reg.distro or "—" }}</td>
        <td>{{ item.reg.last_seen_at.strftime("%Y-%m-%d %H:%M:%S") if item.reg.last_seen_at else "never" }}</td>
        <td class="td-actions">
          <form method="post" action="/plugins/host_agent/fleet/{{ item.reg.host_id }}/rotate-token"
                style="display:inline;"
                onsubmit="return confirm('Rotate the token for this host? The existing agent will stop working until reinstalled with the new token.');">
            <button type="submit" class="btn btn-ghost btn-sm">Rotate token</button>
          </form>
          <form method="post" action="/plugins/host_agent/fleet/{{ item.reg.host_id }}/delete"
                style="display:inline;"
                onsubmit="return confirm('Delete this host registration? The agent will be unable to report metrics until re-registered.');">
            <button type="submit" class="btn btn-danger btn-sm">Delete</button>
          </form>
        </td>
      </tr>
      {% else %}
      <tr><td colspan="6" class="empty">No hosts registered. Add one above.</td></tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% endblock %}