@extends('admin.firewallplus.layout', ['fwpTab' => 'settings'])

@section('fwp_title')
    Firewall-Plus: Settings
@endsection

@section('fwp_subtitle')
    Global limits, SMART defaults & webhooks
@endsection

@section('fwp')
@if (session('success'))
    <div id="fwp-admin-success-alert" class="alert alert-success alert-dismissible">
        <button type="button" class="close" data-dismiss="alert"><span>&times;</span></button>
        {{ session('success') }}
    </div>
@endif

@if (session('warnings'))
    <div class="alert alert-warning alert-dismissible">
        <button type="button" class="close" data-dismiss="alert"><span>&times;</span></button>
        <strong>Saved with warnings:</strong>
        <ul style="margin-bottom:0;">
            @foreach ((array) session('warnings') as $message)<li>{{ $message }}</li>@endforeach
        </ul>
    </div>
@endif

@if ($errors->any())
    <div class="alert alert-danger">
        <strong>Could not save:</strong>
        <ul style="margin-bottom:0;">
            @foreach ($errors->all() as $message)<li>{{ $message }}</li>@endforeach
        </ul>
    </div>
@endif

@php
    $val    = fn (string $key, $default = null) => old($key, $settings[$key] ?? $default);
    $hasErr = fn (string $field) => $errors->has($field) ? ' has-error' : '';
    $webhookSelected = old('webhook_events', $settings['webhook_events'] ?? []);
    if (!is_array($webhookSelected)) $webhookSelected = [];
@endphp

<form method="POST" action="{{ route('admin.firewallplus.settings.update') }}">
@csrf

<div class="box box-primary fwp-tabs-box">
    <div class="box-header with-border clearfix">
        <ul class="nav nav-tabs fwp-sub-tabs pull-left" role="tablist">
            <li class="active">
                <a href="#fwp-cfg-general" data-toggle="tab" role="tab">
                    <i class="fa fa-cog"></i> General
                </a>
            </li>
            <li>
                <a href="#fwp-cfg-limits" data-toggle="tab" role="tab">
                    <i class="fa fa-sliders"></i> Limits
                </a>
            </li>
            <li>
                <a href="#fwp-cfg-smart" data-toggle="tab" role="tab">
                    <i class="fa fa-bolt"></i> SMART
                </a>
            </li>
            <li>
                <a href="#fwp-cfg-webhooks" data-toggle="tab" role="tab">
                    <i class="fa fa-send-o"></i> Webhooks
                </a>
            </li>
        </ul>
        <div class="pull-right fwp-cfg-header-actions">
            <button type="button" id="fwp-cfg-reset-btn" class="btn btn-default btn-sm fwp-reset-section"
                    data-section="general" title="Reset this tab to defaults">
                <i class="fa fa-undo"></i>
            </button>
        </div>
    </div>

    <div class="tab-content">

        {{-- ═══════════════ GENERAL ═══════════════ --}}
        <div role="tabpanel" class="tab-pane active" id="fwp-cfg-general">
            <div class="box-body">

                <div class="form-group{{ $hasErr('tos_text') }}">
                    <label>
                        Terms of Service
                        <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                           data-toggle="tooltip" data-placement="right"
                           title="Users must agree to this text before they can enable Firewall-Plus on any server. Leave blank to skip the TOS step."></i>
                    </label>
                    <textarea name="tos_text" class="form-control" rows="6"
                              placeholder="You agree to use Firewall-Plus responsibly and only for legitimate traffic management purposes…">{{ $val('tos_text', '') }}</textarea>
                    <p class="help-block">
                        Shown once, before a user activates Firewall-Plus on their first server.
                        Plain text only - no HTML. Leave empty to skip this step entirely.
                    </p>
                    @error('tos_text')<p class="help-block text-red">{{ $message }}</p>@enderror
                </div>

                <hr>

                {{-- AbuseIPDB feature toggle --}}
                <div class="row">
                    <div class="col-md-6 form-group">
                        <label>
                            AbuseIPDB Feature
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="When disabled, the AbuseDB tab is hidden from the user interface for all users (including server owners). API keys and saved lookups are preserved."></i>
                        </label>
                        <div>
                            <label class="checkbox-inline" style="font-weight:normal;cursor:pointer;">
                                <input type="hidden" name="abusedb_enabled" value="0">
                                <input type="checkbox" name="abusedb_enabled" value="1"
                                       {{ $val('abusedb_enabled', true) ? 'checked' : '' }}
                                       style="margin-right:6px;">
                                Enable AbuseIPDB lookups for users
                            </label>
                        </div>
                        <p class="help-block">
                            Uncheck to globally disable the AbuseDB tab in the user panel.
                            Users will not see the tab or be able to perform lookups until re-enabled.
                        </p>
                    </div>
                    <div class="col-md-6 form-group">
                        <label>
                            Reset Saved Lookups
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Permanently deletes all saved AbuseIPDB lookup records across every server. This cannot be undone. API keys are not affected."></i>
                        </label>
                        <div>
                            <p class="text-muted" style="margin-bottom:8px;">
                                Currently <strong>{{ number_format($abusedb_saved_count ?? 0) }}</strong> saved lookup record(s) stored.
                            </p>
                            <button type="button" class="btn btn-danger btn-sm" id="fwp-reset-lookups-btn">
                                <i class="fa fa-trash"></i> Reset all saved lookups
                            </button>
                        </div>
                        <p class="help-block text-danger">
                            Deletes all saved AbuseIPDB results from storage. Cannot be undone.
                        </p>
                    </div>
                </div>

                <hr>

                <div class="row">
                    <div class="col-md-4 form-group{{ $hasErr('audit_retention_days') }}">
                        <label>
                            Audit log retention
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Log entries older than this many days are deleted by the daily prune job. Minimum 7 days."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="audit_retention_days" class="form-control"
                                   value="{{ $val('audit_retention_days', 90) }}" min="7">
                            <span class="input-group-addon">days</span>
                        </div>
                        <p class="help-block">
                            Pruned daily by <code>firewall-plus:prune-audit-logs</code>.
                            90 days is a good default; lower this if your database grows too fast.
                        </p>
                        @error('audit_retention_days')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('log_level') }}">
                        <label>
                            Node log level
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Controls how verbose the firewall-plus service logs are. Use 'info' normally; switch to 'debug' only when diagnosing a problem."></i>
                        </label>
                        <select name="log_level" class="form-control">
                            @foreach (['debug' => 'Debug - very verbose, for troubleshooting only', 'info' => 'Info - normal operation (recommended)', 'warn' => 'Warn - only warnings and errors', 'error' => 'Error - only errors'] as $level => $desc)
                                <option value="{{ $level }}" {{ $val('log_level', 'info') === $level ? 'selected' : '' }}>
                                    {{ $desc }}
                                </option>
                            @endforeach
                        </select>
                        <p class="help-block">Changing this takes effect on the next node ping cycle.</p>
                        @error('log_level')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('node_ping_interval_seconds') }}">
                        <label>
                            Node health ping interval
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="How often each node is health-checked. The scheduler runs every minute; nodes are skipped until this interval elapses. Use 120+ to ignore brief 5–30s blips between checks."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="node_ping_interval_seconds" class="form-control"
                                   value="{{ $val('node_ping_interval_seconds', 60) }}" min="30" max="3600">
                            <span class="input-group-addon">seconds</span>
                        </div>
                        <p class="help-block">
                            Default: <code>60</code> (once per minute). Example: <code>120</code> for a 2-minute cadence.
                        </p>
                        @error('node_ping_interval_seconds')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                </div>
            </div>
        </div>

        {{-- ═══════════════ LIMITS ═══════════════ --}}
        <div role="tabpanel" class="tab-pane" id="fwp-cfg-limits">
            <div class="box-body">
                <p class="text-muted">
                    These caps are enforced on every save - users cannot exceed them.
                    The node also re-checks them on apply so direct API calls cannot bypass them.
                </p>

                <h4 style="margin-bottom:16px;"><i class="fa fa-list"></i> Maximums per server</h4>
                <div class="row">
                    <div class="col-md-4 form-group{{ $hasErr('max_rules_per_server') }}">
                        <label>
                            Max firewall rules
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Hard cap on how many rules a single server can have. Each rule becomes iptables entries; very high numbers can slow down rule apply."></i>
                        </label>
                        <input type="number" name="max_rules_per_server" class="form-control"
                               value="{{ $val('max_rules_per_server', 100) }}" min="1">
                        <p class="help-block">Example: <code>100</code>. Most servers need fewer than 20.</p>
                        @error('max_rules_per_server')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('max_whitelist_entries') }}">
                        <label>
                            Max whitelist entries
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="IPs in the whitelist always bypass all rules and always get through. Large lists use an ipset so performance impact is minimal."></i>
                        </label>
                        <input type="number" name="max_whitelist_entries" class="form-control"
                               value="{{ $val('max_whitelist_entries', 500) }}" min="1">
                        <p class="help-block">Example: <code>500</code>. Stored in an ipset - 10,000 entries is still fast.</p>
                        @error('max_whitelist_entries')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('max_blacklist_entries') }}">
                        <label>
                            Max blacklist entries
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Blacklisted IPs are dropped before any other rules run. Also stored in ipset."></i>
                        </label>
                        <input type="number" name="max_blacklist_entries" class="form-control"
                               value="{{ $val('max_blacklist_entries', 500) }}" min="1">
                        <p class="help-block">Example: <code>500</code>. Same ipset performance as whitelist.</p>
                        @error('max_blacklist_entries')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('max_abusedb_saved_lookups') }}">
                        <label>
                            Max AbuseIPDB saved lookups
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Per-server cap on saved AbuseIPDB lookup results in the Saved Lookups tab."></i>
                        </label>
                        <input type="number" name="max_abusedb_saved_lookups" class="form-control"
                               value="{{ $val('max_abusedb_saved_lookups', 100) }}" min="1" max="10000">
                        <p class="help-block">Example: <code>100</code>. Oldest entries must be deleted when full.</p>
                        @error('max_abusedb_saved_lookups')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                </div>

                <hr>
                <h4 style="margin-bottom:4px;">
                    <i class="fa fa-sliders"></i> Rule value bounds
                    <i class="fa fa-info-circle text-muted" style="cursor:pointer;font-size:14px;"
                       data-toggle="tooltip" data-placement="right"
                       title="Each rule type (rate limit, port block, etc.) has configurable fields. These min/max values constrain what users can enter. Click a rule type to expand it."></i>
                </h4>
                <p class="text-muted" style="margin-bottom:12px;">
                    These control the allowed range for each field inside a rule.
                    Example: a rate-limit rule's "packets/second" field can be capped to 1–10,000.
                </p>
                <div class="panel-group" id="fwp-rule-bounds-accordion">
                    @foreach ($rule_value_bounds as $ruleType => $block)
                        <div class="panel panel-default">
                            <div class="panel-heading" style="padding:0;">
                                <a class="fwp-bound-toggle {{ $loop->first ? '' : 'collapsed' }}"
                                   role="button" data-toggle="collapse"
                                   data-parent="#fwp-rule-bounds-accordion"
                                   href="#fwp-bound-{{ $ruleType }}"
                                   aria-expanded="{{ $loop->first ? 'true' : 'false' }}"
                                   style="display:block;padding:10px 14px;">
                                    <i class="fa fa-chevron-down fwp-bound-chevron pull-right" style="margin-top:2px;transition:transform .2s;"></i>
                                    <strong>{{ $block['label'] }}</strong>
                                    <small class="text-muted">({{ $ruleType }})</small>
                                </a>
                            </div>
                            <div id="fwp-bound-{{ $ruleType }}" class="panel-collapse collapse {{ $loop->first ? 'in' : '' }}">
                                <div class="panel-body">
                                    @foreach ($block['fields'] as $fieldKey => $spec)
                                        <div class="row" style="margin-bottom:12px;padding-bottom:12px;border-bottom:1px solid rgba(255,255,255,0.05);">
                                            <div class="col-xs-12" style="margin-bottom:6px;">
                                                <strong>{{ $spec['label'] }}</strong>
                                                @if (($spec['kind'] ?? 'int') === 'rate')
                                                    <small class="text-muted"> - rate string like <code>50/second</code>; min/max apply to the numeric part.</small>
                                                @endif
                                            </div>
                                            <div class="col-sm-6 form-group" style="margin-bottom:0;">
                                                <label class="small text-muted">Min value users can enter</label>
                                                <input type="number" class="form-control input-sm"
                                                       name="bounds[{{ $ruleType }}][{{ $fieldKey }}][min]"
                                                       value="{{ (int) $spec['min'] }}" required>
                                            </div>
                                            <div class="col-sm-6 form-group" style="margin-bottom:0;">
                                                <label class="small text-muted">Max value users can enter</label>
                                                <input type="number" class="form-control input-sm"
                                                       name="bounds[{{ $ruleType }}][{{ $fieldKey }}][max]"
                                                       value="{{ (int) $spec['max'] }}" required>
                                            </div>
                                        </div>
                                    @endforeach
                                </div>
                            </div>
                        </div>
                    @endforeach
                </div>
            </div>
        </div>

        {{-- ═══════════════ SMART ═══════════════ --}}
        <div role="tabpanel" class="tab-pane" id="fwp-cfg-smart">
            <div class="box-body">
                <div class="alert alert-info">
                    <strong>Leave these at defaults unless you know what you're doing.</strong>
                    Wrong values can trigger false mitigations or make SMART slow to react.
                    <a href="#" data-toggle="modal" data-target="#fwp-ewma-guide-modal" style="margin-left:8px;">
                        <i class="fa fa-info-circle"></i> Full guide
                    </a>
                </div>

                <h4 style="margin-bottom:16px;"><i class="fa fa-line-chart"></i> Traffic baseline (EWMA)</h4>
                <div class="row">
                    <div class="col-md-3 form-group{{ $hasErr('smart_alpha') }}">
                        <label>
                            EWMA alpha
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="How fast the baseline adjusts to new traffic. Higher = reacts faster but more sensitive. Lower = smoother, fewer false alarms. Range: 0.0–1.0"></i>
                        </label>
                        <input type="text" name="smart_alpha" class="form-control" value="{{ $val('smart_alpha', '0.3') }}">
                        <p class="help-block">Default: <code>0.3</code>. Try <code>0.2</code> for less sensitive, <code>0.5</code> for faster reaction.</p>
                        @error('smart_alpha')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-3 form-group{{ $hasErr('smart_anomaly_multiplier') }}">
                        <label>
                            Anomaly multiplier
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="How many times above normal traffic must be to trigger mitigation. E.g. multiplier=3 at 20/s baseline triggers at ~60/s."></i>
                        </label>
                        <input type="text" name="smart_anomaly_multiplier" class="form-control" value="{{ $val('smart_anomaly_multiplier', '3.0') }}">
                        <p class="help-block">Default: <code>3.0</code>. Lower = more sensitive. Higher = needs bigger spikes.</p>
                        @error('smart_anomaly_multiplier')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-3 form-group{{ $hasErr('smart_warmup_samples') }}">
                        <label>
                            Warmup samples
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="How many traffic readings to collect before SMART trusts the baseline. Lower = arms faster but may fire on startup. Higher = slower to arm."></i>
                        </label>
                        <input type="number" name="smart_warmup_samples" class="form-control" value="{{ $val('smart_warmup_samples', 10) }}">
                        <p class="help-block">Default: <code>10</code>. First 10 seconds after enable are ignored.</p>
                        @error('smart_warmup_samples')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-3 form-group{{ $hasErr('smart_rate_limit') }}">
                        <label>
                            Level 1 rate limit
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="The first automatic throttle applied when SMART detects an anomaly. Format: number/second. This is gentler than full mitigation."></i>
                        </label>
                        <input type="text" name="smart_rate_limit" class="form-control" value="{{ $val('smart_rate_limit', '50/second') }}">
                        <p class="help-block">Default: <code>50/second</code>. Example: <code>100/second</code> for busier servers.</p>
                        @error('smart_rate_limit')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                </div>

                <hr>
                <h4 style="margin-bottom:16px;"><i class="fa fa-clock-o"></i> Cooldown timers</h4>
                <p class="text-muted">
                    How long SMART waits after traffic calms down before lowering protection.
                    Think of L1 as a short timeout, L3 as a longer "penalty box" for repeat offenders.
                </p>
                <div class="row">
                    <div class="col-md-4 form-group{{ $hasErr('smart_cooldown_l1') }}">
                        <label>
                            Cooldown L1
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="Seconds to stay in Level 1 mitigation after traffic normalises. First-offence timeout."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="smart_cooldown_l1" class="form-control" value="{{ $val('smart_cooldown_l1', 30) }}">
                            <span class="input-group-addon">sec</span>
                        </div>
                        <p class="help-block">Default: <code>30s</code> - short relief period.</p>
                        @error('smart_cooldown_l1')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('smart_cooldown_l2') }}">
                        <label>
                            Cooldown L2
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="Longer cooldown for repeat spikes within the same session."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="smart_cooldown_l2" class="form-control" value="{{ $val('smart_cooldown_l2', 120) }}">
                            <span class="input-group-addon">sec</span>
                        </div>
                        <p class="help-block">Default: <code>120s</code> - escalation after repeated anomalies.</p>
                        @error('smart_cooldown_l2')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('smart_cooldown_l3') }}">
                        <label>
                            Cooldown L3
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="top"
                               title="Longest cooldown - penalty box for sustained or repeated attacks."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="smart_cooldown_l3" class="form-control" value="{{ $val('smart_cooldown_l3', 300) }}">
                            <span class="input-group-addon">sec</span>
                        </div>
                        <p class="help-block">Default: <code>300s</code> - 5-minute lockdown for persistent attacks.</p>
                        @error('smart_cooldown_l3')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                </div>

                <p class="text-muted">
                    Grant SMART to individual servers under <a href="{{ route('admin.firewallplus.servers') }}">Servers &amp; SMART</a>.
                </p>
            </div>
        </div>

        {{-- ═══════════════ WEBHOOKS ═══════════════ --}}
        <div role="tabpanel" class="tab-pane" id="fwp-cfg-webhooks">
            <div class="box-body">
                <p class="text-muted">
                    Firewall-Plus can POST a notification to a URL (e.g. a Discord webhook) whenever
                    something important happens - node goes offline, a limit is hit, emergency mode is toggled.
                    These are <strong>infrastructure</strong> events. Per-server attack/mitigation alerts
                    are configured by server owners under SMART in the client area.
                </p>

                <div class="form-group{{ $hasErr('webhook_url') }}">
                    <label>
                        Webhook URL
                        <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                           data-toggle="tooltip" data-placement="right"
                           title="Any URL that accepts a POST request with a JSON body. Discord, Slack, and custom HTTP endpoints all work. Leave blank to disable."></i>
                    </label>
                    <input type="url" name="webhook_url" class="form-control"
                           value="{{ $val('webhook_url', '') }}"
                           placeholder="https://discord.com/api/webhooks/…">
                    <p class="help-block">
                        Supports Discord webhooks, Slack incoming webhooks, or any custom endpoint.
                        Leave blank to disable all panel webhooks.
                    </p>
                    @error('webhook_url')<p class="help-block text-red">{{ $message }}</p>@enderror
                </div>

                <div class="form-group{{ $hasErr('webhook_events') }}">
                    <label>
                        Which events should trigger a notification?
                        <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                           data-toggle="tooltip" data-placement="right"
                           title="Uncheck events you don't care about to reduce noise. You can always come back and add more."></i>
                    </label>
                    <p class="help-block" style="margin-bottom:10px;">Uncheck events you don't want to receive notifications for.</p>
                    <div class="row">
                        @foreach ($admin_webhook_catalog as $evKey => $evLabel)
                            <div class="col-sm-6 col-md-4" style="margin-bottom:8px;">
                                <label style="font-weight:normal;cursor:pointer;display:flex;align-items:flex-start;gap:6px;">
                                    <input type="checkbox" name="webhook_events[]" value="{{ $evKey }}"
                                           style="margin-top:3px;flex-shrink:0;"
                                           {{ in_array($evKey, $webhookSelected, true) ? 'checked' : '' }}>
                                    <span>
                                        <code style="font-size:11px;">{{ $evKey }}</code><br>
                                        <small class="text-muted">{{ $evLabel }}</small>
                                    </span>
                                </label>
                            </div>
                        @endforeach
                    </div>
                    @error('webhook_events')<p class="help-block text-red">{{ $message }}</p>@enderror
                </div>

                <hr>
                <h4 style="margin-bottom:16px;"><i class="fa fa-heartbeat"></i> Node offline alerts</h4>
                <p class="text-muted">
                    Control how sensitive offline detection is and how many repeat alerts you receive during a long outage.
                </p>
                <div class="row">
                    <div class="col-md-4 form-group{{ $hasErr('node_offline_fail_threshold') }}">
                        <label>
                            Failed pings before offline
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="Consecutive failed health checks before marking a node offline. Higher values tolerate brief network blips (e.g. a 5-second restart)."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="node_offline_fail_threshold" class="form-control"
                                   value="{{ $val('node_offline_fail_threshold', 2) }}" min="1" max="20">
                            <span class="input-group-addon">pings</span>
                        </div>
                        <p class="help-block">
                            Default: <code>2</code>. At 60s interval, that is ~1 minute of failures. Try <code>3</code> for more tolerance.
                        </p>
                        @error('node_offline_fail_threshold')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                    <div class="col-md-4 form-group{{ $hasErr('node_offline_webhook_max') }}">
                        <label>
                            Max offline webhooks per outage
                            <i class="fa fa-info-circle text-muted" style="cursor:pointer;"
                               data-toggle="tooltip" data-placement="right"
                               title="After this many offline alerts for the same outage, no further offline webhooks are sent until the node recovers."></i>
                        </label>
                        <div class="input-group">
                            <input type="number" name="node_offline_webhook_max" class="form-control"
                                   value="{{ $val('node_offline_webhook_max', 3) }}" min="1" max="50">
                            <span class="input-group-addon">alerts</span>
                        </div>
                        <p class="help-block">
                            Default: <code>3</code>. Set to <code>1</code> for a single alert only. Counter resets when the node comes back online.
                        </p>
                        @error('node_offline_webhook_max')<p class="help-block text-red">{{ $message }}</p>@enderror
                    </div>
                </div>
            </div>
        </div>

    </div>{{-- /tab-content --}}
    <div class="box-footer">
        <button type="submit" class="btn btn-primary"><i class="fa fa-save"></i> Save settings</button>
    </div>
</div>{{-- /box --}}

</form>

@include('admin.firewallplus.partials.ewma-guide-modal')

<style>
    .fwp-admin-wrap .fwp-tabs-box > .box-header .fwp-cfg-header-actions {
        margin-top: 2px;
    }
</style>

<script>
(function () {
    const SECTION_DEFAULTS = @json($settings_section_defaults ?? []);

    // Auto-dismiss success alert
    const alert = document.getElementById('fwp-admin-success-alert');
    if (alert) setTimeout(() => { alert.classList.add('fade'); alert.classList.remove('in'); setTimeout(() => alert.remove(), 220); }, 4500);

    // Bootstrap tooltips
    if (window.jQuery) jQuery('[data-toggle="tooltip"]').tooltip({ container: 'body' });

    // Restore active tab from hash
    var h = window.location.hash;
    var map = { '#fwp-cfg-general': true, '#fwp-cfg-limits': true, '#fwp-cfg-smart': true, '#fwp-cfg-webhooks': true };
    if (h && map[h] && window.jQuery) jQuery('a[href="' + h + '"]').tab('show');

    // If there are validation errors, switch to the tab containing them
    if (window.jQuery && document.querySelector('.has-error')) {
        var errTab = document.querySelector('.has-error').closest('.tab-pane');
        if (errTab) jQuery('a[href="#' + errTab.id + '"]').tab('show');
    }

    function resetSection(section) {
        const defs = SECTION_DEFAULTS[section];
        if (!defs) return;
        const pane = document.getElementById('fwp-cfg-' + section);
        if (!pane) return;
        if (!window.confirm('Reset all fields in this tab to their default values? You still need to click Save settings.')) {
            return;
        }

        Object.keys(defs).forEach(function (key) {
            if (key === 'bounds') {
                const bounds = defs.bounds || {};
                Object.keys(bounds).forEach(function (ruleType) {
                    Object.keys(bounds[ruleType]).forEach(function (fieldKey) {
                        ['min', 'max'].forEach(function (edge) {
                            const input = pane.querySelector(
                                'input[name="bounds[' + ruleType + '][' + fieldKey + '][' + edge + ']"]'
                            );
                            if (input) input.value = bounds[ruleType][fieldKey][edge];
                        });
                    });
                });
                return;
            }

            if (key === 'webhook_events') {
                const selected = new Set(Array.isArray(defs.webhook_events) ? defs.webhook_events : []);
                pane.querySelectorAll('input[name="webhook_events[]"]').forEach(function (cb) {
                    cb.checked = selected.has(cb.value);
                });
                return;
            }

            const el = pane.querySelector('[name="' + key + '"]');
            if (!el) return;
            if (el.tagName === 'SELECT') {
                el.value = String(defs[key]);
            } else if (el.tagName === 'TEXTAREA') {
                el.value = defs[key] ?? '';
            } else {
                el.value = defs[key] ?? '';
            }
        });
    }

    function syncResetSectionFromTab(href) {
        var btn = document.getElementById('fwp-cfg-reset-btn');
        if (!btn || !href) return;
        var section = href.replace('#fwp-cfg-', '');
        if (section) btn.setAttribute('data-section', section);
    }

    if (window.jQuery) {
        jQuery('a[data-toggle="tab"][href^="#fwp-cfg-"]').on('shown.bs.tab', function (e) {
            syncResetSectionFromTab(e.target.getAttribute('href'));
        });
    }

    var activeTabLink = document.querySelector('.fwp-sub-tabs li.active > a[href^="#fwp-cfg-"]');
    if (activeTabLink) {
        syncResetSectionFromTab(activeTabLink.getAttribute('href'));
    }

    document.getElementById('fwp-cfg-reset-btn')?.addEventListener('click', function () {
        resetSection(this.getAttribute('data-section') || 'general');
    });

    // Reset saved lookups — fires a separate POST to the reset endpoint.
    document.getElementById('fwp-reset-lookups-btn')?.addEventListener('click', function () {
        if (!window.confirm('Delete ALL saved AbuseIPDB lookup records across every server? This cannot be undone.')) {
            return;
        }
        var form = document.createElement('form');
        form.method = 'POST';
        form.action = '{{ route('admin.firewallplus.settings.reset_saved_lookups') }}';

        var csrf = document.createElement('input');
        csrf.type = 'hidden';
        csrf.name = '_token';
        csrf.value = '{{ csrf_token() }}';
        form.appendChild(csrf);

        document.body.appendChild(form);
        form.submit();
    });
})();
</script>
@endsection