@php
    $providerOptions = $provider ? ($provider->options ?? []) : [];
    $currentEngine = old('engine', $provider->engine ?? $providerDefaults['engine']);
    $currentNode = old('node_id', $provider->node_id ?? $providerDefaults['node_id']);
    $currentEnabled = filter_var(old('enabled', $provider->enabled ?? $providerDefaults['enabled']), FILTER_VALIDATE_BOOLEAN);
    $currentTls = filter_var(old('use_tls', array_get($providerOptions, 'tls')), FILTER_VALIDATE_BOOLEAN);
    $portId = $modalId . 'Port';
    $enabledId = $modalId . 'Enabled';
    $tlsId = $modalId . 'Tls';
    $testConnectionId = $modalId . 'TestConnection';
    $redisStart = old('redis_port_start', array_get($providerOptions, 'redis_port_start'));
    $redisEnd = old('redis_port_end', array_get($providerOptions, 'redis_port_end'));
    $redisMaxInstances = old('redis_max_instances', array_get($providerOptions, 'redis_max_instances'));
    $redisMemoryMb = old('redis_memory_mb', array_get($providerOptions, 'redis_memory_mb'));
    $redisPolicy = old('redis_maxmemory_policy', array_get($providerOptions, 'redis_maxmemory_policy', 'noeviction'));
    $redisAllocationsEnabled = filter_var(old('redis_enable_allocations', array_get($providerOptions, 'redis_enable_allocations', false)), FILTER_VALIDATE_BOOLEAN);
    $redisPersistence = filter_var(old('redis_persistence', array_get($providerOptions, 'redis_persistence', false)), FILTER_VALIDATE_BOOLEAN);
    $redisRuntimeUser = old('redis_runtime_user', array_get($providerOptions, 'redis_runtime_user', 'www-data'));
    $postgresRevokePublicConnect = filter_var(old('postgres_revoke_public_connect', array_get($providerOptions, 'postgres_revoke_public_connect', false)), FILTER_VALIDATE_BOOLEAN);
    $postgresRevokePublicTemporary = filter_var(old('postgres_revoke_public_temporary', array_get($providerOptions, 'postgres_revoke_public_temporary', false)), FILTER_VALIDATE_BOOLEAN);
    $redisGloballyEnabled = app(\Pterodactyl\BlueprintFramework\Extensions\betterdatabases\Services\Databases\Providers\DatabaseDashboardSettingsService::class)->redisAllocationsEnabled();
@endphp

<div class="modal fade bd-provider-modal" id="{{ $modalId }}" tabindex="-1" role="dialog" data-provider-wizard>
    <div class="modal-dialog modal-lg" role="document">
        <div class="modal-content">
            <form action="{{ $action }}" method="POST">
                <div class="modal-header">
                    <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
                    <h4 class="modal-title">{{ $title }}</h4>
                </div>

                <div class="modal-body">
                    <div class="bd-wizard-steps">
                        <button type="button" class="active" data-wizard-nav="1"><span>1</span>Basics</button>
                        <button type="button" data-wizard-nav="2"><span>2</span>Connection</button>
                        <button type="button" data-wizard-nav="3"><span>3</span>Engine</button>
                        <button type="button" data-wizard-nav="4"><span>4</span>Review</button>
                    </div>

                    <section data-wizard-step="1">
                        <div class="row">
                            <div class="col-md-7">
                                <div class="form-group">
                                    <label class="form-label">Provider Name</label>
                                    <input type="text" name="name" class="form-control" value="{{ old('name', $provider->name ?? '') }}" placeholder="Production MySQL Pool" data-review-field="name" />
                                    <p class="text-muted small">Shown to admins and users when choosing where to create a database.</p>
                                </div>
                            </div>
                            <div class="col-md-5">
                                <div class="form-group">
                                    <label class="form-label">Engine</label>
                                    <select name="engine" class="form-control" data-provider-engine data-port-target="#{{ $portId }}" data-review-field="engine">
                                        @foreach($providerEngines as $engine => $label)
                                            <option
                                                value="{{ $engine }}"
                                                data-port="{{ \Pterodactyl\BlueprintFramework\Extensions\betterdatabases\Models\DatabaseProvider::defaultPort($engine) }}"
                                                {{ $currentEngine === $engine ? 'selected' : '' }}
                                            >{{ $label }}</option>
                                        @endforeach
                                    </select>
                                </div>
                            </div>
                        </div>

                        <div class="form-group">
                            <label class="form-label">Linked Node</label>
                            <select name="node_id" class="form-control pProviderNodeId" data-review-field="node">
                                <option value="">Global</option>
                                @foreach($locations as $location)
                                    <optgroup label="{{ $location->short }}">
                                        @foreach($location->nodes as $node)
                                            <option value="{{ $node->id }}" {{ (int) $currentNode === (int) $node->id ? 'selected' : '' }}>{{ $node->name }}</option>
                                        @endforeach
                                    </optgroup>
                                @endforeach
                            </select>
                            <p class="text-muted small">Global providers are available to every server. Node-linked providers only appear on matching servers.</p>
                        </div>

                        <div class="row">
                            <div class="col-sm-6">
                                <input type="hidden" name="enabled" value="0" />
                                <label class="bd-wizard-check" for="{{ $enabledId }}">
                                    <input id="{{ $enabledId }}" type="checkbox" name="enabled" value="1" {{ $currentEnabled ? 'checked' : '' }} data-review-field="enabled" />
                                    <span>Enabled</span>
                                    <small>Users can create new allocations on this provider.</small>
                                </label>
                            </div>
                            <div class="col-sm-6">
                                <label class="bd-wizard-check" for="{{ $tlsId }}">
                                    <input id="{{ $tlsId }}" type="checkbox" name="use_tls" value="1" {{ $currentTls ? 'checked' : '' }} data-review-field="tls" />
                                    <span>Use TLS</span>
                                    <small>Use encrypted transport when the selected driver supports it.</small>
                                </label>
                            </div>
                        </div>
                    </section>

                    <section data-wizard-step="2" style="display: none;">
                        <div class="row">
                            <div class="col-md-8">
                                <div class="form-group">
                                    <label class="form-label">Host</label>
                                    <input type="text" name="host" class="form-control" value="{{ old('host', $provider->host ?? '') }}" placeholder="127.0.0.1" data-review-field="host" />
                                    <p class="text-muted small" data-engine-copy="mysql postgresql mongodb">Use a private address reachable by the panel and any node that connects directly to databases.</p>
                                    <p class="text-muted small" data-engine-copy="redis">Use localhost or a local interface on the panel/queue-worker host. Redis allocations start local processes.</p>
                                </div>
                            </div>
                            <div class="col-md-4">
                                <div class="form-group">
                                    <label class="form-label">Port</label>
                                    <input id="{{ $portId }}" type="number" min="1" max="65535" name="port" class="form-control" value="{{ old('port', $provider->port ?? $providerDefaults['port']) }}" data-review-field="port" />
                                </div>
                            </div>
                        </div>

                        <input type="hidden" name="database" value="" />

                        <div class="form-group">
                            <label class="form-label">Provider Username</label>
                            <input type="text" name="username" class="form-control" value="{{ old('username', $provider->username ?? '') }}" autocomplete="off" data-review-field="username" />
                            <p class="text-muted small">Use the database-host provisioning account, never the panel application account.</p>
                        </div>

                        <div class="form-group">
                            <label class="form-label">Provider Password</label>
                            <input type="password" name="password" class="form-control" autocomplete="new-password" data-review-field="password" />
                            <p class="text-muted small">
                                @if($provider)
                                    Leave blank to keep the existing encrypted secret.
                                @else
                                    Stored encrypted using the panel application key.
                                @endif
                            </p>
                        </div>

                        <div class="bd-engine-note" data-engine-copy="mysql postgresql mongodb">
                            <strong>Provider account only</strong>
                            <p>No provider database needs to be created here. Better Databases connects with this account and creates server databases/users on demand.</p>
                        </div>

                        <div class="bd-engine-note" data-engine-copy="redis">
                            <strong>Provider connection only</strong>
                            <p>Redis allocation mode uses this host as the local bind/check target, then starts per-allocation Redis processes from the engine settings.</p>
                        </div>
                    </section>

                    <section data-wizard-step="3" style="display: none;">
                        <div data-engine-options="mysql" style="display: none;">
                            <div class="bd-engine-note">
                                <strong>MySQL / MariaDB</strong>
                                <p>The provider account must create databases and users, grant native Pterodactyl-compatible privileges, and drop tenant databases/users during cleanup.</p>
                            </div>
                            <div class="bd-engine-grid">
                                <div>
                                    <span class="text-muted small">Provisioned tenant permissions</span>
                                    <p class="no-margin">Native Pterodactyl MySQL grant set, scoped to each generated database.</p>
                                </div>
                                <div>
                                    <span class="text-muted small">Provider account warning</span>
                                    <p class="no-margin">Avoid <code>root</code>, public access, passwordless users, or sharing the panel database user.</p>
                                </div>
                            </div>
                        </div>

                        <div data-engine-options="postgresql" style="display: none;">
                            <div class="bd-engine-note">
                                <strong>PostgreSQL</strong>
                                <p>The provider role should be dedicated to provisioning and allowed to create tenant roles/databases. Tenant users own only their generated database.</p>
                            </div>
                            <div class="bd-engine-grid">
                                <div>
                                    <span class="text-muted small">Recommended provider role</span>
                                    <p class="no-margin"><code>CREATEDB</code> and <code>CREATEROLE</code>, not superuser.</p>
                                </div>
	                                <div>
	                                    <span class="text-muted small">Tenant isolation</span>
	                                    <p class="no-margin">The addon blocks public schema creation and can optionally revoke public database connect or temporary-table access.</p>
	                                </div>
	                            </div>
	                            <div class="row" style="margin-top: 15px;">
	                                <div class="col-md-6">
	                                    <input type="hidden" name="postgres_revoke_public_connect" value="0" />
	                                    <label class="bd-wizard-check" for="{{ $modalId }}PostgresRevokePublicConnect">
	                                        <input id="{{ $modalId }}PostgresRevokePublicConnect" type="checkbox" name="postgres_revoke_public_connect" value="1" {{ $postgresRevokePublicConnect ? 'checked' : '' }} data-review-field="postgres_revoke_public_connect" />
	                                        <span>Revoke public connect</span>
	                                        <small>Stops other PostgreSQL roles from connecting to newly created tenant databases.</small>
	                                    </label>
	                                </div>
	                                <div class="col-md-6">
	                                    <input type="hidden" name="postgres_revoke_public_temporary" value="0" />
	                                    <label class="bd-wizard-check" for="{{ $modalId }}PostgresRevokePublicTemporary">
	                                        <input id="{{ $modalId }}PostgresRevokePublicTemporary" type="checkbox" name="postgres_revoke_public_temporary" value="1" {{ $postgresRevokePublicTemporary ? 'checked' : '' }} data-review-field="postgres_revoke_public_temporary" />
	                                        <span>Revoke public temporary tables</span>
	                                        <small>Stops other PostgreSQL roles from creating temp tables in newly created tenant databases.</small>
	                                    </label>
	                                </div>
	                            </div>
	                            <p class="text-muted small" style="margin-top: 8px;">Leave these unchecked for normal PostgreSQL compatibility. The tenant owner is granted access back when either option is enabled.</p>
	                        </div>

                        <div data-engine-options="mongodb" style="display: none;">
                            <div class="bd-engine-note">
                                <strong>MongoDB</strong>
                                <p>Enable authorization and use a provider account that can provision databases and users. Tenant users receive <code>readWrite</code> only on their own database.</p>
                            </div>
                            <div class="row">
                                <div class="col-md-6">
                                    <label class="form-label">Auth Database</label>
                                    <input type="text" name="auth_database" class="form-control" value="{{ old('auth_database', array_get($providerOptions, 'auth_database')) }}" placeholder="admin" data-review-field="auth_database" />
                                    <p class="text-muted small">Usually <code>admin</code> for provider users.</p>
                                </div>
                                <div class="col-md-6">
                                    <label class="form-label">Replica Set</label>
                                    <input type="text" name="replica_set" class="form-control" value="{{ old('replica_set', array_get($providerOptions, 'replica_set')) }}" data-review-field="replica_set" />
                                    <p class="text-muted small">Optional. Leave blank for standalone MongoDB.</p>
                                </div>
                            </div>
                        </div>

                        <div data-engine-options="redis" style="display: none;">
                            <div class="bd-engine-note bd-engine-note-danger">
                                <strong>Redis allocations are local-process based</strong>
                                <p>This starts one dedicated <code>redis-server</code> process per allocation on the panel queue-worker host. Do not point this at an external Redis server expecting remote provisioning.</p>
                            </div>
                            @if(!$redisGloballyEnabled)
                                <div class="alert alert-info">
                                    Global Redis allocations are disabled. This provider can be saved, but users cannot create Redis allocations yet.
                                </div>
                            @endif

                            <div class="row">
                                <div class="col-md-6">
                                    <input type="hidden" name="redis_enable_allocations" value="0" />
                                    <label class="bd-wizard-check" for="{{ $modalId }}RedisEnableAllocations">
                                        <input id="{{ $modalId }}RedisEnableAllocations" type="checkbox" name="redis_enable_allocations" value="1" {{ $redisAllocationsEnabled ? 'checked' : '' }} data-review-field="redis_enable_allocations" />
                                        <span>Enable Redis allocation creation</span>
                                        <small>Requires global Redis allocations and a safe local port range.</small>
                                    </label>
                                </div>
                                <div class="col-md-6">
                                    <input type="hidden" name="redis_persistence" value="0" />
                                    <label class="bd-wizard-check" for="{{ $modalId }}RedisPersistence">
                                        <input id="{{ $modalId }}RedisPersistence" type="checkbox" name="redis_persistence" value="1" {{ $redisPersistence ? 'checked' : '' }} data-review-field="redis_persistence" />
                                        <span>Controlled persistence</span>
                                        <small>Stores RDB/AOF files inside the allocation directory.</small>
                                    </label>
                                </div>
                            </div>

                            <div class="row">
                                <div class="col-md-4">
                                    <label class="form-label">Redis DB Index</label>
                                    <input type="number" min="0" max="15" name="redis_database" class="form-control" value="{{ old('redis_database', array_get($providerOptions, 'redis_database')) }}" placeholder="0" data-review-field="redis_database" />
                                </div>
                                <div class="col-md-4">
                                    <label class="form-label">Port Start</label>
                                    <input type="number" min="1" max="65535" name="redis_port_start" class="form-control" value="{{ $redisStart }}" placeholder="6380" data-review-field="redis_port_start" />
                                </div>
                                <div class="col-md-4">
                                    <label class="form-label">Port End</label>
                                    <input type="number" min="1" max="65535" name="redis_port_end" class="form-control" value="{{ $redisEnd }}" placeholder="6480" data-review-field="redis_port_end" />
                                </div>
                            </div>

                            <div class="row" style="margin-top: 15px;">
                                <div class="col-md-4">
                                    <label class="form-label">Max Instances</label>
                                    <input type="number" min="1" max="10000" name="redis_max_instances" class="form-control" value="{{ $redisMaxInstances }}" placeholder="Auto" data-review-field="redis_max_instances" />
                                </div>
                                <div class="col-md-4">
                                    <label class="form-label">Memory MB</label>
                                    <input type="number" min="1" max="1048576" name="redis_memory_mb" class="form-control" value="{{ $redisMemoryMb }}" placeholder="256" data-review-field="redis_memory_mb" />
                                </div>
                                <div class="col-md-4">
                                    <label class="form-label">Runtime User</label>
                                    <input type="text" name="redis_runtime_user" class="form-control" value="{{ $redisRuntimeUser }}" placeholder="www-data" data-review-field="redis_runtime_user" />
                                </div>
                            </div>

                            <div class="form-group" style="margin-top: 15px;">
                                <label class="form-label">Maxmemory Policy</label>
                                <select name="redis_maxmemory_policy" class="form-control" data-review-field="redis_maxmemory_policy">
                                    @foreach([
                                        'noeviction' => 'No eviction (recommended for databases)',
                                        'allkeys-lru' => 'All keys LRU',
                                        'volatile-lru' => 'Volatile keys LRU',
                                        'allkeys-lfu' => 'All keys LFU',
                                        'volatile-lfu' => 'Volatile keys LFU',
                                        'allkeys-random' => 'All keys random',
                                        'volatile-random' => 'Volatile keys random',
                                        'volatile-ttl' => 'Volatile keys TTL',
                                    ] as $policy => $label)
                                        <option value="{{ $policy }}" {{ $redisPolicy === $policy ? 'selected' : '' }}>{{ $label }}</option>
                                    @endforeach
                                </select>
                                <p class="text-muted small">Use noeviction when Redis is treated as a real database. Eviction policies can silently remove user data.</p>
                            </div>

                            <div class="form-group">
                                <input type="hidden" name="redis_accept_risk" value="0" />
                                <label class="bd-wizard-check" for="{{ $modalId }}RedisAcceptRisk">
                                    <input id="{{ $modalId }}RedisAcceptRisk" type="checkbox" name="redis_accept_risk" value="1" />
                                    <span>I understand the Redis hosting risk</span>
                                    <small>Required before enabling Redis allocation creation.</small>
                                </label>
                            </div>
                        </div>
                    </section>

                    <section data-wizard-step="4" style="display: none;">
                        <div class="bd-review">
                            <div><span>Name</span><strong data-review-value="name">-</strong></div>
                            <div><span>Engine</span><strong data-review-value="engine">-</strong></div>
                            <div><span>Scope</span><strong data-review-value="node">-</strong></div>
                            <div><span>Endpoint</span><strong><span data-review-value="host">-</span>:<span data-review-value="port">-</span></strong></div>
                            <div><span>Username</span><strong data-review-value="username">-</strong></div>
                            <div><span>Enabled</span><strong data-review-value="enabled">-</strong></div>
                            <div><span>TLS</span><strong data-review-value="tls">-</strong></div>
                        </div>

	                        <div class="bd-review-engine" data-review-engine="mongodb" style="display: none;">
                            <div><span>Auth DB</span><strong data-review-value="auth_database">-</strong></div>
                            <div><span>Replica Set</span><strong data-review-value="replica_set">-</strong></div>
	                        </div>

	                        <div class="bd-review-engine" data-review-engine="postgresql" style="display: none;">
	                            <div><span>Revoke Public Connect</span><strong data-review-value="postgres_revoke_public_connect">-</strong></div>
	                            <div><span>Revoke Public Temp</span><strong data-review-value="postgres_revoke_public_temporary">-</strong></div>
	                        </div>

                        <div class="bd-review-engine" data-review-engine="redis" style="display: none;">
                            <div><span>Port Range</span><strong><span data-review-value="redis_port_start">-</span> - <span data-review-value="redis_port_end">-</span></strong></div>
                            <div><span>Memory</span><strong><span data-review-value="redis_memory_mb">-</span> MB</strong></div>
                            <div><span>Runtime User</span><strong data-review-value="redis_runtime_user">-</strong></div>
                            <div><span>Maxmemory</span><strong data-review-value="redis_maxmemory_policy">-</strong></div>
                        </div>

                        <div class="form-group" style="margin-top: 16px;">
                            <label class="bd-wizard-check" for="{{ $testConnectionId }}">
                                <input id="{{ $testConnectionId }}" type="checkbox" name="test_connection" value="1" />
                                <span>Test connection before saving</span>
                                <small>Recommended. The provider is saved only if the connection and permissions pass.</small>
                            </label>
                        </div>

                        <p class="text-muted small no-margin">
                            Provider credentials are panel-level secrets. Tenant users are generated separately and scoped to their own database/allocation.
                        </p>
                    </section>
                </div>

                <div class="modal-footer">
                    {!! csrf_field() !!}
                    @if($method !== 'POST')
                        <input type="hidden" name="_method" value="{{ $method }}" />
                    @endif
                    @if($provider)
                        <input type="hidden" name="provider_id" value="{{ $provider->id }}" />
                    @endif
                    <button type="button" class="btn btn-default btn-sm" data-dismiss="modal">Cancel</button>
                    <button type="button" class="btn btn-default btn-sm" data-wizard-prev style="display: none;">Back</button>
                    <button type="button" class="btn btn-primary btn-sm" data-wizard-next>Continue</button>
                    <button type="submit" class="btn btn-success btn-sm" data-wizard-submit style="display: none;">Save Provider</button>
                </div>
            </form>
        </div>
    </div>
</div>