{% extends "base.html" %}
{% block title %}Email Gateway · SD RMM{% endblock %}
{% block content %}
{% include "_email_nav.html" %}

<style>
  .gw-head { display:flex; justify-content:space-between; align-items:baseline; flex-wrap:wrap; gap:10px; margin-bottom:10px; }
  .kpis { display:grid; grid-template-columns:repeat(3,1fr); gap:12px; margin-bottom:14px; }
  @media (max-width:680px){ .kpis { grid-template-columns:1fr; } }
  .kpi { background:var(--surface-2); border:1px solid var(--line); border-radius:var(--r-md); padding:12px 14px; }
  .kpi .v { font:700 22px/1 var(--font-sans); font-variant-numeric:tabular-nums; } .kpi .v.bad { color:#fca5a5; } .kpi .v.ok { color:var(--ok); }
  .kpi .k { font-size:10px; text-transform:uppercase; letter-spacing:.5px; color:var(--muted); font-weight:700; margin-top:6px; }
  .card { background:var(--surface); border:1px solid var(--line); border-radius:var(--r-lg); padding:16px; box-shadow:var(--shadow-1); }
  .stage { background:rgba(96,165,250,.08); border:1px solid rgba(96,165,250,.3); border-radius:var(--r-md); padding:10px 14px; font-size:12.5px; margin-bottom:14px; }
  table.gw { width:100%; border-collapse:collapse; font-size:12.5px; }
  table.gw th { text-align:left; color:var(--muted); font-weight:600; font-size:10px; text-transform:uppercase; letter-spacing:.4px; padding:6px 8px; border-bottom:1px solid var(--line); }
  table.gw td { padding:7px 8px; border-bottom:1px solid var(--line-soft); vertical-align:top; }
  .act { display:inline-block; padding:1px 8px; border-radius:999px; font:700 10px/1.5 var(--font-sans); }
  .act.delivered { background:rgba(74,222,128,.14); color:var(--ok); } .act.quarantined { background:rgba(249,115,115,.16); color:#fca5a5; }
  .act.deferred { background:rgba(251,191,36,.16); color:#fbbf24; }
  .sev { display:inline-block; padding:1px 6px; border-radius:999px; font:700 9.5px/1.5 var(--font-sans); }
  .sev-crit { background:rgba(249,115,115,.16); color:#fca5a5; } .sev-warn { background:rgba(251,191,36,.16); color:#fbbf24; } .sev-low { background:rgba(96,165,250,.15); color:#93c5fd; }
  .reasons { color:var(--muted); font-size:11px; margin:3px 0 0; padding-left:15px; }
  .muted { color:var(--muted); } .trunc { max-width:260px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
</style>

<div class="gw-head">
  <div>
    <h1 class="page-title" style="margin-bottom:2px;">Email Gateway &mdash; Mail Flow</h1>
    <p class="muted" style="margin:0;">Every message that flows through the inline SMTP gateway, with the verdict applied at the door.</p>
  </div>
  <a class="btn btn-ghost" href="/email">&lsaquo; Email Security</a>
</div>

<div class="stage"><strong>Phase A — staging.</strong> The gateway listens on <code>127.0.0.1:10025</code> and filters mail inline (analyzer + ClamAV + policies) → clean is <em>delivered</em> (relayed downstream), threats are <em>quarantined</em>. Public MX comes in Phase B (needs IPv4 + rDNS).</div>

<div class="card" style="display:flex; gap:18px; flex-wrap:wrap; align-items:center; justify-content:space-between;">
  <div>
    <strong>Active protection</strong>
    <div class="muted" style="font-size:12px; margin-top:3px;">Applied to delivered mail as it's relayed.</div>
  </div>
  <div style="display:flex; gap:20px; flex-wrap:wrap;">
    <div style="display:flex; gap:10px; align-items:center;">
      <span>Safe-Links <span class="act {{ 'delivered' if safelink_on else 'quarantined' }}">{{ 'ON' if safelink_on else 'OFF' }}</span></span>
      <form method="post" action="/email/gateway/toggle/email_safelink_enabled"><button class="btn btn-ghost" type="submit">{{ 'Disable' if safelink_on else 'Enable' }}</button></form>
    </div>
    <div style="display:flex; gap:10px; align-items:center;">
      <span>Caution banner <span class="act {{ 'delivered' if banner_on else 'quarantined' }}">{{ 'ON' if banner_on else 'OFF' }}</span></span>
      <form method="post" action="/email/gateway/toggle/email_banner_enabled"><button class="btn btn-ghost" type="submit">{{ 'Disable' if banner_on else 'Enable' }}</button></form>
    </div>
  </div>
</div>

<div class="kpis">
  <div class="kpi"><div class="v">{{ "{:,}".format(total) }}</div><div class="k">Messages processed</div></div>
  <div class="kpi"><div class="v bad">{{ quarantined }}</div><div class="k">Quarantined</div></div>
  <div class="kpi"><div class="v ok">{{ delivered }}</div><div class="k">Delivered (clean)</div></div>
</div>

<div class="card">
  {% if items %}
  <table class="gw">
    <thead><tr><th>Time (PT)</th><th>From</th><th>To</th><th>Subject</th><th>Verdict</th><th>Action</th></tr></thead>
    <tbody>
      {% for it in items %}
      {% set g = it.g %}
      <tr>
        <td class="mono muted"><a href="/email/gateway/{{ g.id }}" style="color:inherit; text-decoration:underline;">{{ g.ts| pt('%m-%d %H:%M:%S') }}</a></td>
        <td class="mono trunc" title="{{ g.mail_from }}">{{ g.mail_from or '—' }}</td>
        <td class="mono trunc" title="{{ g.rcpt_to }}">{{ g.rcpt_to or '—' }}</td>
        <td class="trunc" title="{{ g.subject }}">{{ g.subject or '—' }}
          {% if it.reasons %}<ul class="reasons">{% for r in it.reasons[:2] %}<li>{{ r }}</li>{% endfor %}</ul>{% endif %}</td>
        <td>{% if g.severity %}<span class="sev sev-{{ g.severity }}">{{ g.severity }}</span> <span class="muted">{{ g.threat_type }} ({{ g.score }})</span>{% else %}<span class="muted">clean</span>{% endif %}
          {% if g.clam %}<div class="muted" style="font-size:10px;">ClamAV: {{ g.clam }}</div>{% endif %}</td>
        <td><span class="act {{ g.action }}">{{ g.action }}</span>{% if g.relay %}<div class="muted" style="font-size:10px;">{{ g.relay }}</div>{% endif %}</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
  {% else %}
  <p class="muted">No mail has flowed through the gateway yet. Send a test message to <code>127.0.0.1:10025</code> to see it filtered here.</p>
  {% endif %}
</div>

{% endblock %}