{% extends "base.html" %}
{% from "_macros.html" import crumbs, status_badge %}
{% block title %}Agent fleet — Steward{% endblock %}
{% block breadcrumb %}{{ crumbs([("Hosts", "/hosts/"), ("Agent fleet", "")]) }}{% endblock %}
{% block content %}
<div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:1rem;gap:1rem;flex-wrap:wrap;">
  <h1 class="page-title" style="margin-bottom:0;">Agent fleet</h1>
</div>
<p style="color:var(--text-muted);font-size:0.84rem;margin:-0.4rem 0 1.25rem;">
  Bulk agent operations across your inventory. For a single host, use its
  <a href="/hosts/">host page</a>: provisioning, a manual install command and
  metrics live there. New hosts are added with <a href="/hosts/?add=1">Add host</a>.
</p>

{% if new_token %}
<div class="card" style="background:var(--fs-accent-faint);">
  <h3>New token — copy this install command now</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);">
    This is the only time the raw token is shown. Rotate if you lose it.
  </p>
  <pre style="user-select:all;word-break:break-all;">curl -sSL '{{ install_url }}' | sudo sh</pre>
</div>
{% endif %}

<div class="card-flush" style="margin-bottom:1.5rem;">
  <div class="table-wrap">
  <table class="table">
    <thead>
      <tr>
        <th>Status</th><th>Host</th><th>Last seen</th><th>Agent version</th><th>Reported IP</th><th>Distro</th>
        <th class="td-actions">Actions</th>
      </tr>
    </thead>
    <tbody>
      {% for item in registrations %}
      <tr>
        <td>{{ status_badge(item.state, {'up': 'Reporting', 'stale': 'Silent', 'pending': 'Never reported'}[item.state]) }}</td>
        <td>{% if item.host %}<a href="/hosts/{{ item.host.id }}">{{ item.host.name }}</a>{% else %}<span class="mono">{{ item.reg.host_id }}</span>{% endif %}</td>
        <td>{% if item.reg.last_seen_at %}<span title="{{ item.reg.last_seen_at.strftime('%Y-%m-%d %H:%M:%S UTC') }}">{{ item.reg.last_seen_at|ago }}</span>{% else %}never{% endif %}</td>
        <td>{{ item.reg.agent_version or "—" }}</td>
        <td class="mono">{{ item.reg.host_ip or "—" }}</td>
        <td>{{ item.reg.distro or "—" }}</td>
        <td class="td-actions">
          <form method="post" action="/plugins/host_agent/fleet/{{ item.reg.host_id }}/rotate-token"
                style="display:inline;"
                data-confirm="Rotate the token for {{ item.name }}? The existing agent will stop working until reinstalled with the new token.">{{ csrf_field() }}
            <button type="submit" class="btn btn-ghost btn-sm">Rotate token</button>
          </form>
          <form method="post" action="/plugins/host_agent/fleet/{{ item.reg.host_id }}/delete"
                style="display:inline;"
                data-confirm="Unregister the agent for {{ item.name }}? Its token stops working and metrics stop until it is registered again. The agent itself stays installed on the host.">{{ csrf_field() }}
            <button type="submit" class="btn btn-danger btn-sm">Unregister</button>
          </form>
        </td>
      </tr>
      {% else %}
      <tr><td colspan="7" class="empty">No agents registered yet. <a href="/hosts/?add=1">Add a host</a>, then install its agent from the host's page.</td></tr>
      {% endfor %}
    </tbody>
  </table>
  </div>
</div>

{% if ansible_available %}
{% set scope_select %}
        <label>Target</label>
        <select name="inventory_scope" required>
          {% for g in deploy_groups %}<option value="steward:group:{{ g.id }}">Group: {{ g.name }}</option>{% endfor %}
          {% for t in deploy_targets %}<option value="steward:target:{{ t.id }}">Target: {{ t.name }}</option>{% endfor %}
        </select>
{% endset %}

<div class="card">
  <h3 style="margin-bottom:0.4rem;">Agent lifecycle via Ansible</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.6rem;">
    These actions run bundled <strong>Ansible playbooks</strong> to deploy and maintain the
    Steward monitoring agent on your <a href="/ansible/inventory/">inventory hosts</a>.
    Steward generates each host's API token automatically and connects over SSH as the managed
    <code>steward</code> account — you'll be dropped into the live Ansible run to watch it.
  </p>

  {% if not managed_key_set %}
  <div style="background:color-mix(in srgb,var(--yellow) 12%,var(--bg-elevated));
              border:1px solid color-mix(in srgb,var(--yellow) 35%,var(--border));
              border-radius:6px;padding:0.7rem 0.9rem;display:flex;align-items:center;
              gap:0.8rem;flex-wrap:wrap;">
    <span style="color:var(--yellow);">⚠</span>
    <span style="font-size:0.84rem;flex:1;min-width:14rem;">
      No managed SSH key yet — Steward needs one to log into hosts as <code>steward</code>.
    </span>
    <form method="post" action="/settings/ansible/generate-key" style="margin:0;">{{ csrf_field() }}
      <input type="hidden" name="next" value="/plugins/host_agent/fleet/">
      <button type="submit" class="btn btn-sm">Generate managed key</button>
    </form>
  </div>
  {% elif not (deploy_targets or deploy_groups) %}
  <p style="font-size:0.85rem;color:var(--text-dim);margin:0;">
    No Ansible inventory targets yet. Add some under <a href="/ansible/inventory/">Ansible → Inventory</a>.
  </p>
  {% endif %}
</div>

{% if managed_key_set and (deploy_targets or deploy_groups) %}
<div class="card">
  <h3 style="margin-bottom:0.4rem;">1 · Provision a fresh host</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    First contact for a brand-new host. Connects with a one-time <strong>bootstrap</strong>
    user + password (used for this run only, never stored), creates the <code>steward</code>
    login account with passwordless sudo, installs the managed SSH key, then installs the
    agent. Run this once per host.
  </p>
  <form method="post" action="/plugins/host_agent/provision"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">{{ csrf_field() }}
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Bootstrap user</label>
      <input type="text" name="bootstrap_user" required placeholder="root" style="width:9rem;" autocomplete="off">
    </div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Bootstrap password</label>
      <input type="password" name="bootstrap_password" required style="width:11rem;" autocomplete="new-password">
    </div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Report interval (s)</label>
      <input type="number" name="agent_interval" value="30" min="5" style="width:7rem;">
    </div>
    <button type="submit" class="btn">Provision</button>
  </form>
</div>

<div class="card">
  <h3 style="margin-bottom:0.4rem;">2 · Install / enroll agent</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    For a host that's already provisioned (has the <code>steward</code> account) but has no
    agent yet — or to re-enroll one. Connects as <code>steward</code> with the managed key,
    mints a fresh token, and installs the agent. No <code>curl | sh</code> needed.
  </p>
  <form method="post" action="/plugins/host_agent/deploy"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">{{ csrf_field() }}
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <div class="form-group" style="margin-bottom:0;">
      <label>Report interval (s)</label>
      <input type="number" name="agent_interval" value="30" min="5" style="width:7rem;">
    </div>
    <button type="submit" class="btn">Install</button>
  </form>
</div>

<div class="card">
  <h3 style="margin-bottom:0.4rem;">3 · Update agents</h3>
  <p style="font-size:0.82rem;color:var(--text-muted);margin-bottom:0.75rem;">
    Refresh the agent binary on hosts already running it. Connects as <code>steward</code>
    with the managed key and restarts the service — the token and config are left untouched,
    so identity is preserved.
  </p>
  <form method="post" action="/plugins/host_agent/update"
        style="display:flex;gap:0.75rem;align-items:flex-end;flex-wrap:wrap;">{{ csrf_field() }}
    <div class="form-group" style="margin-bottom:0;">{{ scope_select }}</div>
    <button type="submit" class="btn">Update</button>
  </form>
</div>
{% endif %}
{% endif %}

{% endblock %}