{% extends "base.html" %}
{% block title %}SSH · {{ agent.hostname }}{% endblock %}
{% block content %}
<link rel="stylesheet" href="/static/vendor/xterm/xterm.css">
<style>
  .ssh-wrap { max-width: 1000px; }
  .ssh-head { display:flex; align-items:baseline; gap:12px; margin-bottom:10px; }
  .ssh-head h1 { margin:0; }
  .connbox { background:#11151c; border:1px solid #222a35; border-radius:11px; padding:16px; }
  .connbox .row { display:flex; gap:12px; flex-wrap:wrap; align-items:flex-end; }
  .connbox label { display:block; font-size:11px; text-transform:uppercase; letter-spacing:.4px; color:#8b93a1; margin-bottom:4px; }
  .connbox input, .connbox textarea, .connbox select { background:#0b0e14; border:1px solid #2a2f3a; border-radius:8px; color:#e6e8eb; padding:8px 10px; font-size:13px; box-sizing:border-box; }
  .connbox textarea { width:100%; min-height:92px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:12px; }
  #termwrap { display:none; margin-top:6px; }
  #term { height:64vh; background:#0b0e14; border:1px solid #222a35; border-radius:9px; padding:6px; }
  .ssh-note { color:#8b93a1; font-size:12px; margin:11px 0 0; line-height:1.5; }
  .authrow.pass { display:none; }
</style>

<div class="ssh-wrap">
  <div class="ssh-head">
    <h1>SSH &middot; {{ agent.hostname }}</h1>
    <a class="muted" href="/orgs/{{ org.id }}/agents/{{ agent.id }}">&larr; back to device</a>
  </div>

  <div class="connbox" id="connbox">
    <div class="row">
      <div><label>Host</label><input id="host" type="text" value="{{ default_host|e }}" size="20"{% if not is_super %} readonly title="Only a super-admin can target a different host"{% endif %}></div>
      <div><label>Port</label><input id="port" type="text" value="{{ default_port }}" size="5"></div>
      <div><label>Username</label><input id="username" type="text" placeholder="root" size="14" autofocus></div>
      <div><label>Auth</label>
        <select id="authtype" onchange="toggleAuth()">
          <option value="key" selected>Private key</option>
          <option value="password">Password</option>
        </select></div>
    </div>
    <div class="row authrow pass" style="margin-top:12px;">
      <div style="flex:1; min-width:240px;"><label>Password</label><input id="password" type="password" style="width:100%;" autocomplete="off"></div>
    </div>
    <div class="row authrow key" style="margin-top:12px; flex-direction:column; align-items:stretch;">
      <div><label>Private key (PEM / OpenSSH)</label><textarea id="pkey" spellcheck="false" autocomplete="off" placeholder="-----BEGIN OPENSSH PRIVATE KEY-----"></textarea></div>
      <div style="max-width:280px;"><label>Key passphrase (optional)</label><input id="passphrase" type="password" style="width:100%;" autocomplete="off"></div>
    </div>
    <div class="row" style="margin-top:14px;">
      <button class="btn btn-primary" type="button" onclick="connect()">Connect &rsaquo;</button>
    </div>
    <p class="ssh-note">Direct SSH from the RMM server to a host it can route to (LAN / WireGuard VPN). Credentials are used for this session only &mdash; never stored, never logged. The host key is not verified, so use this on trusted networks. Session open/close is audited.</p>
  </div>

  <div id="termwrap">
    <div id="term"></div>
    <p class="ssh-note">Session live &mdash; <button class="btn btn-ghost" type="button" onclick="location.reload()">Disconnect</button></p>
  </div>
</div>

<script src="/static/vendor/xterm/xterm.js"></script>
<script src="/static/vendor/xterm/xterm-fit.js"></script>
<script>
const WS_PATH = "/orgs/{{ org.id }}/agents/{{ agent.id }}/ssh/ws";
let term, fit, ws;
function toggleAuth(){
  const k = document.getElementById('authtype').value === 'key';
  document.querySelector('.authrow.key').style.display  = k ? 'flex' : 'none';
  document.querySelector('.authrow.pass').style.display = k ? 'none' : 'flex';
}
function connect(){
  const host = document.getElementById('host').value.trim();
  const username = document.getElementById('username').value.trim();
  if (!host || !username){ alert('Host and username are required.'); return; }
  term = new Terminal({cursorBlink:true, fontSize:13, fontFamily:'ui-monospace,Menlo,Consolas,monospace', theme:{background:'#0b0e14'}});
  fit = new FitAddon.FitAddon();
  term.loadAddon(fit);
  document.getElementById('connbox').style.display = 'none';
  document.getElementById('termwrap').style.display = 'block';
  term.open(document.getElementById('term'));
  try { fit.fit(); } catch(e){}
  const proto = location.protocol === 'https:' ? 'wss' : 'ws';
  ws = new WebSocket(proto + '://' + location.host + WS_PATH);
  ws.onopen = () => {
    const p = { host: host, port: parseInt(document.getElementById('port').value)||22,
                username: username, cols: term.cols, rows: term.rows };
    if (document.getElementById('authtype').value === 'key'){
      p.private_key = document.getElementById('pkey').value;
      p.passphrase  = document.getElementById('passphrase').value;
    } else {
      p.password = document.getElementById('password').value;
    }
    ws.send(JSON.stringify(p));
    term.focus();
  };
  ws.onmessage = (e) => term.write(e.data);
  ws.onclose = () => term.write('\r\n*** session closed ***\r\n');
  ws.onerror = () => term.write('\r\n*** connection error ***\r\n');
  term.onData(d => { if (ws && ws.readyState === 1) ws.send(JSON.stringify({d:d})); });
  term.onResize(s => { if (ws && ws.readyState === 1) ws.send(JSON.stringify({r:[s.cols,s.rows]})); });
  window.addEventListener('resize', () => { try { fit.fit(); } catch(e){} });
}
</script>
{% endblock %}