{% extends "base.html" %}
{% import "_macros.html" as m %}
{% set editing = original_name is not none %}
{% block title %}{{ "Edit" if editing else "New" }} group — rosbackup-ng{% endblock %}
{% block page_title %}{{ "Edit group" if editing else "New group" }}{% endblock %}
{% block head_actions %}<a class="btn" href="/groups">← Groups</a>{% endblock %}
{% block content %}
<div class="card">
  {% if error %}<div class="banner banner-warn">{{ error }}</div>{% endif %}
  <p class="muted">A device belongs to this group if it is an explicit member <em>or</em> its tags
    match. Capability overrides can only <strong>restrict</strong> a member (deny-wins) — they never
    re-grant what the global settings forbid.</p>
  <form class="run-form" method="post"
        action="{% if editing %}/ui/groups/{{ original_name|urlencode }}{% else %}/ui/groups{% endif %}">
    <input type="hidden" name="csrf_token" value="{{ request.state.session.csrf_token }}">

    <div class="form-rows">
      <label for="name">Name</label>
      <input type="text" id="name" name="name" value="{{ group.name if group else '' }}"
             autocomplete="off" required>
    </div>

    <fieldset>
      <legend>👥 Membership</legend>
      <div class="form-rows">
        <label for="members">Explicit members <span class="muted">(device names)</span></label>
        {{ m.tag_input('members', members_text, all_targets, 'add a device…') }}
        <label for="match_tags">Match tags</label>
        {{ m.tag_input('match_tags', match_tags_text, all_tags, 'add a tag…') }}
        <label class="radio full"><input type="radio" name="match" value="any"
               {{ 'checked' if not (group and group.get('match') == 'all') }}> Match <strong>any</strong> tag</label>
        <label class="radio full"><input type="radio" name="match" value="all"
               {{ 'checked' if group and group.get('match') == 'all' }}> Match <strong>all</strong> tags</label>
      </div>
    </fieldset>

    <fieldset>
      <legend>🔐 Web capabilities</legend>
      <div class="form-rows">
        {% for cap, label in [('allow_download', 'Download backups'), ('allow_restore', 'Push-restore')] %}
        {% set cur = group.get(cap) if group else none %}
        <label for="{{ cap }}">{{ label }}</label>
        <select id="{{ cap }}" name="{{ cap }}">
          <option value="inherit" {{ 'selected' if cur is none }}>Inherit global</option>
          <option value="allow" {{ 'selected' if cur is true }}>Allow</option>
          <option value="deny" {{ 'selected' if cur is false }}>Deny for this group</option>
        </select>
        {% endfor %}
      </div>
    </fieldset>

    <fieldset>
      <legend>🗂️ Storage override</legend>
      <div class="form-rows">
        {% set sel = (group.get('storage') or []) if group else [] %}
        <p class="muted full">Remote destinations for this group's devices. Leave unchecked to inherit
          the global default. A device's own storage override takes precedence over the group.</p>
        {% if storage_destinations %}
        {% for d in storage_destinations %}
        <label class="check full"><input type="checkbox" name="storage" value="{{ d }}"
               {{ 'checked' if d in sel }}> {{ d }}{% if d == default_storage %} <span class="muted">(default)</span>{% endif %}</label>
        {% endfor %}
        {% else %}
        <p class="muted full">No remote destinations defined yet. <a href="/storage/new">Add one →</a></p>
        {% endif %}
      </div>
    </fieldset>

    <button type="submit" class="btn primary">{{ "Save changes" if editing else "Add group" }}</button>
  </form>
</div>
{% if editing %}
<div class="card">
  <h2>Danger zone</h2>
  <p class="muted">Removing a group only edits <span class="mono">global.yaml</span> — devices and
    their backups are untouched.</p>
  <button type="button" class="btn danger-btn"
          hx-post="/ui/groups/{{ original_name|urlencode }}/delete"
          hx-confirm="Delete group “{{ original_name }}”? Devices and backups are untouched.">
    Delete {{ original_name }}
  </button>
</div>
{% endif %}
{% endblock %}