{% extends "base.html" %}
{% block title %}Audit Log · SD RMM{% endblock %}
{% block content %}

<style>
  .au-head { display:flex; justify-content:space-between; align-items:baseline; flex-wrap:wrap; gap:10px; margin-bottom:10px; }
  .integ { display:inline-flex; align-items:center; gap:8px; padding:8px 14px; border-radius:var(--r-md); font-size:13px; font-weight:600; margin-bottom:14px; }
  .integ.ok { background:rgba(74,222,128,.12); border:1px solid rgba(74,222,128,.35); color:var(--ok); }
  .integ.bad { background:rgba(249,115,115,.12); border:1px solid rgba(249,115,115,.4); color:#fca5a5; }
  .card { background:var(--surface); border:1px solid var(--line); border-radius:var(--r-lg); padding:16px; box-shadow:var(--shadow-1); }
  .filters { display:flex; gap:8px; flex-wrap:wrap; margin-bottom:14px; align-items:center; }
  .filters input[type=text], .filters select { background:var(--surface-2); border:1px solid var(--line); color:var(--ink); border-radius:8px; padding:8px 12px; font:inherit; }
  .filters input[type=text]{ min-width:200px; }
  table.au { width:100%; border-collapse:collapse; font-size:12.5px; }
  table.au th { text-align:left; color:var(--muted); font-weight:600; font-size:10px; text-transform:uppercase; letter-spacing:.4px; padding:6px 8px; border-bottom:1px solid var(--line); position:sticky; top:0; background:var(--surface); }
  table.au td { padding:6px 8px; border-bottom:1px solid var(--line-soft); vertical-align:top; }
  .act { display:inline-block; padding:2px 8px; border-radius:999px; font:700 10.5px/1.5 var(--font-mono); background:var(--surface-3); border:1px solid var(--line); }
  .act.warn { color:var(--warn); } .act.bad { color:#fca5a5; } .act.ok { color:var(--ok); }
  .detail { color:var(--muted); font-family:var(--font-mono); font-size:11px; max-width:340px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
  .hash { color:var(--muted-2); font-family:var(--font-mono); font-size:10.5px; }
  .muted { color:var(--muted); }
</style>

<div class="au-head">
  <div>
    <h1 class="page-title" style="margin-bottom:2px;">Audit Log</h1>
    <p class="muted" style="margin:0;">Tamper-evident record of privileged actions &middot; {{ "{:,}".format(total) }} entries</p>
  </div>
  <a class="btn btn-ghost" href="/audit/export.csv{% if action %}?action={{ action|urlencode }}{% endif %}{% if q %}{{ '&' if action else '?' }}q={{ q|urlencode }}{% endif %}">Export CSV</a>
</div>

{% if integrity_ok %}
<div class="integ ok">&#128274; Chain verified &mdash; {{ "{:,}".format(integrity_checked) }} entries, hash chain intact.</div>
{% else %}
<div class="integ bad">&#9888; INTEGRITY FAILURE &mdash; chain breaks at entry #{{ integrity_bad_id }} (verified {{ integrity_checked }} before the break). Records may have been tampered with.</div>
{% endif %}

<div class="card">
  <form class="filters" method="get" action="/audit">
    <select name="action">
      <option value="">All actions</option>
      {% for a in actions %}<option value="{{ a }}" {% if action == a %}selected{% endif %}>{{ a }}</option>{% endfor %}
    </select>
    <input type="text" name="q" value="{{ q }}" placeholder="Search actor / target / detail…">
    <button class="btn btn-primary" type="submit">Filter</button>
    {% if q or action %}<a class="btn btn-ghost" href="/audit">Clear</a>{% endif %}
    <span class="muted" style="margin-left:auto; font-size:12px;">showing {{ rows|length }} (limit {{ limit }})</span>
  </form>

  {% if rows %}
  <div style="overflow:auto; max-height:72vh;">
  <table class="au">
    <thead><tr><th>When (PT)</th><th>Actor</th><th>Action</th><th>Target</th><th>Detail</th><th>IP</th><th>Hash</th></tr></thead>
    <tbody>
      {% for r in rows %}
      {% set cls = 'bad' if ('fail' in r.action or 'delete' in r.action or r.action in ('edr.action','agent.delete')) else ('warn' if ('toggle' in r.action or 'approve' in r.action or 'revoke' in r.action or r.action.startswith('patch.')) else 'ok') %}
      <tr>
        <td class="mono muted">{{ r.ts| pt('%Y-%m-%d %H:%M:%S') }}</td>
        <td>{{ r.actor_email }}</td>
        <td><span class="act {{ cls }}">{{ r.action }}</span></td>
        <td class="muted">{% if r.target_type %}{{ r.target_type }}{% if r.target_id %}:{{ r.target_id[:24] }}{% endif %}{% else %}—{% endif %}</td>
        <td class="detail" title="{{ r.detail or '' }}">{{ r.detail or '' }}</td>
        <td class="mono muted">{{ r.ip or '—' }}</td>
        <td class="hash" title="{{ r.hash }}">{{ r.hash[:12] }}…</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
  </div>
  {% else %}
  <p class="muted">No audit entries{% if q or action %} match this filter{% endif %} yet.</p>
  {% endif %}
</div>

{% endblock %}