{{define "title"}}Email Security{{end}}
{{define "page"}}email{{end}}
{{define "content"}}
    <div class="csm-page-header mb-3">
        <div class="csm-page-header__main">
            <h1 class="csm-page-header__title"><i class="ti ti-mail"></i>&nbsp;Email Security</h1>
            <div class="csm-page-header__subtitle" id="email-subtitle">Loading mail surface...</div>
        </div>
        <div class="csm-page-header__actions">
            <button type="button" class="btn btn-ghost-secondary btn-sm" id="email-refresh" title="Refresh email surface" aria-label="Refresh email surface">
                <i class="ti ti-refresh"></i>
            </button>
        </div>
    </div>

    <div class="csm-status-strip mb-3" id="email-status-strip"></div>

    <!-- First viewport: action groups (left) + mail protection state (right) -->
    <div class="row row-cards mb-3">
        <div class="col-lg-7">
            <div class="card">
                <div class="card-header">
                    <h3 class="card-title"><i class="ti ti-target"></i>&nbsp;Email action groups</h3>
                    <div class="card-actions">
                        <span class="text-muted small" id="email-groups-count"></span>
                    </div>
                </div>
                <div class="csm-summary-list csm-summary-list--scroll" id="email-action-groups" aria-live="polite">
                    <div class="csm-empty">
                        <div class="csm-empty__icon"><i class="ti ti-loader-2"></i></div>
                        <div class="csm-empty__reason">Loading action groups...</div>
                    </div>
                </div>
            </div>
        </div>
        <div class="col-lg-5">
            <div class="card">
                <div class="card-header">
                    <h3 class="card-title"><i class="ti ti-shield-lock"></i>&nbsp;Mail protection state</h3>
                </div>
                <div class="card-body" id="email-protection-state">
                    <div class="mb-3" id="protection-queue">
                        <div class="text-muted text-center py-3"><span class="spinner-border spinner-border-sm"></span> Loading queue...</div>
                    </div>
                    <hr class="my-2">
                    <div class="subheader mb-2">SMTP firewall</div>
                    <div class="mb-3" id="smtp-firewall">
                        <div class="text-muted small">Loading...</div>
                    </div>
                    <hr class="my-2">
                    <div class="subheader mb-2">AV engines</div>
                    <div class="mb-1">
                        <span class="status-dot" id="clamd-dot"></span>
                        ClamAV: <span id="clamd-status">--</span>
                    </div>
                    <div class="mb-1">
                        <span class="status-dot" id="yarax-dot"></span>
                        YARA-X: <span id="yarax-status">--</span>
                        (<span id="yarax-rules">0</span> rules)
                    </div>
                    <div class="mb-1">
                        Watcher: <span id="watcher-mode">--</span>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <!-- Tabs: Findings, Auth failures, Queue, Quarantine, Senders -->
    <div class="card">
        <ul class="nav nav-tabs" role="tablist">
            <li class="nav-item" role="presentation">
                <button class="nav-link active" id="email-tab-findings" data-bs-toggle="tab" data-bs-target="#email-pane-findings" type="button" role="tab" aria-controls="email-pane-findings" aria-selected="true">
                    <i class="ti ti-list"></i>&nbsp;Findings
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-auth" data-bs-toggle="tab" data-bs-target="#email-pane-auth" type="button" role="tab" aria-controls="email-pane-auth" aria-selected="false">
                    <i class="ti ti-lock-access"></i>&nbsp;Auth failures
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-queue" data-bs-toggle="tab" data-bs-target="#email-pane-queue" type="button" role="tab" aria-controls="email-pane-queue" aria-selected="false">
                    <i class="ti ti-mailbox"></i>&nbsp;Queue
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-quarantine" data-bs-toggle="tab" data-bs-target="#email-pane-quarantine" type="button" role="tab" aria-controls="email-pane-quarantine" aria-selected="false">
                    <i class="ti ti-lock"></i>&nbsp;Quarantine
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-senders" data-bs-toggle="tab" data-bs-target="#email-pane-senders" type="button" role="tab" aria-controls="email-pane-senders" aria-selected="false">
                    <i class="ti ti-send"></i>&nbsp;Senders
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-forwarders" data-bs-toggle="tab" data-bs-target="#email-pane-forwarders" type="button" role="tab" aria-controls="email-pane-forwarders" aria-selected="false">
                    <i class="ti ti-mail-forward"></i>&nbsp;Forwarders
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-deliverability" data-bs-toggle="tab" data-bs-target="#email-pane-deliverability" type="button" role="tab" aria-controls="email-pane-deliverability" aria-selected="false">
                    <i class="ti ti-gauge"></i>&nbsp;Deliverability
                </button>
            </li>
            <li class="nav-item" role="presentation">
                <button class="nav-link" id="email-tab-outbound-abuse" data-bs-toggle="tab" data-bs-target="#email-pane-outbound-abuse" type="button" role="tab" aria-controls="email-pane-outbound-abuse" aria-selected="false">
                    <i class="ti ti-mail-exclamation"></i>&nbsp;Outbound abuse
                </button>
            </li>
        </ul>

        <div class="tab-content">
            <!-- Findings tab -->
            <div class="tab-pane fade show active" id="email-pane-findings" role="tabpanel" aria-labelledby="email-tab-findings" tabindex="0">
                <div class="csm-toolbar">
                    <input type="text" id="email-search" class="form-control form-control-sm csm-toolbar__search" placeholder="Search findings..." aria-label="Search findings">
                    <input type="date" id="filter-from" class="form-control form-control-sm csm-input-sm" aria-label="From date">
                    <input type="date" id="filter-to" class="form-control form-control-sm csm-input-sm" aria-label="To date">
                    <select id="filter-severity" class="form-select form-select-sm csm-auto-width" aria-label="Severity">
                        <option value="">All</option>
                        <option value="2">Critical</option>
                        <option value="1">High</option>
                        <option value="0">Warning</option>
                    </select>
                    <select id="filter-check" class="form-select form-select-sm csm-auto-width" aria-label="Check">
                        <option value="">All</option>
                        <option value="email_phishing_content">Phishing</option>
                        <option value="email_malware">Malware</option>
                        <option value="email_av_degraded">AV Degraded</option>
                        <option value="email_av_timeout">AV Timeout</option>
                        <option value="email_av_parse_error">AV Parse Error</option>
                        <option value="email_av_quarantine_error">AV Quarantine Error</option>
                        <option value="email_compromised_account">Compromised</option>
                        <option value="email_spam_outbreak">Spam Outbreak</option>
                        <option value="email_rate_critical">Rate Critical</option>
                        <option value="email_rate_warning">Rate Warning</option>
                        <option value="email_credential_leak">Credential Leak</option>
                        <option value="email_weak_password">Weak Password</option>
                        <option value="email_auth_failure_realtime">Auth Failure</option>
                        <option value="email_suspicious_geo">Suspicious Geo</option>
                        <option value="email_php_relay_abuse">PHP Relay Abuse</option>
                        <option value="email_cloud_relay_abuse">Cloud Relay Abuse</option>
                        <option value="mail_bruteforce">Mail Brute Force</option>
                        <option value="mail_subnet_spray">Mail Subnet Spray</option>
                        <option value="mail_account_spray">Mail Account Spray</option>
                        <option value="mail_account_compromised">Mail Account Compromised</option>
                        <option value="smtp_bruteforce">SMTP Brute Force</option>
                        <option value="smtp_subnet_spray">SMTP Subnet Spray</option>
                        <option value="smtp_account_spray">SMTP Account Spray</option>
                        <option value="smtp_probe_abuse">SMTP Probe Abuse</option>
                        <option value="email_dkim_failure">DKIM Failure</option>
                        <option value="email_spf_rejection">SPF Rejection</option>
                        <option value="email_pipe_forwarder">Pipe Forwarder</option>
                        <option value="email_suspicious_forwarder">Suspicious Forwarder</option>
                        <option value="mail_per_account">Volume</option>
                        <option value="mail_queue">Queue</option>
                        <option value="exim_frozen_realtime">Frozen Queue</option>
                    </select>
                    <span class="csm-toolbar__spacer"></span>
                    <span class="csm-toolbar__count" id="email-total-label"></span>
                    <div class="dropdown csm-toolbar__actions">
                        <button class="btn btn-ghost-secondary btn-sm dropdown-toggle" data-bs-toggle="dropdown" aria-label="Export current view">
                            <i class="ti ti-download"></i>
                        </button>
                        <div class="dropdown-menu dropdown-menu-end">
                            <a class="dropdown-item" href="#" data-export="csv"><i class="ti ti-file-spreadsheet me-2"></i>CSV</a>
                            <a class="dropdown-item" href="#" data-export="json"><i class="ti ti-braces me-2"></i>JSON</a>
                        </div>
                    </div>
                </div>
                <div class="table-responsive">
                    <table class="table table-vcenter card-table table-sm" id="email-table">
                        <thead>
                            <tr>
                                <th>Severity</th>
                                <th>Type</th>
                                <th>Account</th>
                                <th>IP</th>
                                <th>Details</th>
                                <th>Time</th>
                            </tr>
                        </thead>
                        <tbody id="email-tbody">
                            <tr><td colspan="6" class="text-center text-muted py-4"><span class="spinner-border spinner-border-sm"></span> Loading...</td></tr>
                        </tbody>
                    </table>
                </div>
            </div>

            <!-- Auth failures tab: grouped by mailbox / IP -->
            <div class="tab-pane fade" id="email-pane-auth" role="tabpanel" aria-labelledby="email-tab-auth" tabindex="0">
                <div class="csm-summary-list" id="email-auth-groups" aria-live="polite">
                    <div class="csm-empty">
                        <div class="csm-empty__icon"><i class="ti ti-loader-2"></i></div>
                        <div class="csm-empty__reason">Auth-failure clusters load when this tab is opened.</div>
                    </div>
                </div>
            </div>

            <!-- Queue tab -->
            <div class="tab-pane fade" id="email-pane-queue" role="tabpanel" aria-labelledby="email-tab-queue" tabindex="0">
                <div class="card-body" id="queue-health">
                    <div class="text-muted text-center py-3"><span class="spinner-border spinner-border-sm"></span> Loading...</div>
                </div>
                <hr class="my-0">
                <div class="card-body">
                    <div class="subheader mb-2"><i class="ti ti-chart-pie"></i>&nbsp;Queue composition</div>
                    <div id="queue-composition">
                        <div class="text-muted small">Composition loads when this tab is opened.</div>
                    </div>
                </div>
            </div>

            <!-- Quarantine tab (full width) -->
            <div class="tab-pane fade" id="email-pane-quarantine" role="tabpanel" aria-labelledby="email-tab-quarantine" tabindex="0">
                <div class="csm-toolbar">
                    <input type="text" id="email-quar-search" class="form-control form-control-sm csm-toolbar__search" placeholder="Search sender / recipient / subject..." aria-label="Search email quarantine">
                    <select id="email-quar-dir" class="form-select form-select-sm csm-toolbar__filter" aria-label="Filter by direction">
                        <option value="">All directions</option>
                        <option value="inbound">Inbound</option>
                        <option value="outbound">Outbound</option>
                    </select>
                    <input type="date" id="email-quar-from" class="form-control form-control-sm csm-toolbar__filter" aria-label="From date">
                    <input type="date" id="email-quar-to" class="form-control form-control-sm csm-toolbar__filter" aria-label="To date">
                    <span class="csm-toolbar__spacer"></span>
                    <div class="csm-toolbar__actions">
                        <button class="btn btn-warning btn-sm d-none" id="email-quar-bulk-release"><i class="ti ti-mail-forward"></i>&nbsp;Release Selected</button>
                        <button class="btn btn-danger btn-sm d-none" id="email-quar-bulk-delete"><i class="ti ti-trash"></i>&nbsp;Delete Selected</button>
                    </div>
                </div>
                <div class="card-body">
                    <div id="quarantine-table"></div>
                </div>
            </div>

            <!-- Senders tab -->
            <div class="tab-pane fade" id="email-pane-senders" role="tabpanel" aria-labelledby="email-tab-senders" tabindex="0">
                <div class="card-body p-0 csm-list-scroll-sm" id="top-senders">
                    <div class="text-muted text-center py-3"><span class="spinner-border spinner-border-sm"></span> Loading...</div>
                </div>
            </div>

            <!-- Forwarders tab -->
            <div class="tab-pane fade" id="email-pane-forwarders" role="tabpanel" aria-labelledby="email-tab-forwarders" tabindex="0">
                <div class="csm-toolbar">
                    <input type="text" id="email-fwd-search" class="form-control form-control-sm csm-toolbar__search" placeholder="Search source / destination / owner..." aria-label="Search forwarders">
                    <select id="email-fwd-filter" class="form-select form-select-sm csm-toolbar__filter" aria-label="Filter forwarders">
                        <option value="">All forwarders</option>
                        <option value="external">External only</option>
                        <option value="free">Free providers</option>
                        <option value="forward_only">Forward-only (no local copy)</option>
                    </select>
                    <span class="csm-toolbar__spacer"></span>
                    <span class="csm-toolbar__count" id="email-fwd-count"></span>
                </div>
                <div class="table-responsive">
                    <table class="table table-vcenter card-table table-sm" id="email-fwd-table">
                        <thead>
                            <tr>
                                <th>Source</th>
                                <th>Owner</th>
                                <th>Destinations</th>
                                <th>Providers</th>
                                <th>Local copy</th>
                            </tr>
                        </thead>
                        <tbody id="email-fwd-tbody">
                            <tr><td colspan="5" class="text-center text-muted py-4">Forwarder inventory loads when this tab is opened.</td></tr>
                        </tbody>
                    </table>
                </div>

                <div class="card-body border-top">
                    <div class="subheader mb-2"><i class="ti ti-mail-pause"></i>&nbsp;Held forward copies <span class="text-muted small" id="email-held-count"></span></div>
                    <div class="text-muted small mb-2">Spam-bounce or bad-sender forward copies the guard held before they relayed externally. The local copy still delivered. Release re-sends a copy to its external recipient; delete discards it.</div>
                    <div class="table-responsive">
                        <table class="table table-vcenter card-table table-sm" id="email-held-table">
                            <thead>
                                <tr>
                                    <th>Held</th>
                                    <th>Forwarder</th>
                                    <th>Recipient</th>
                                    <th>Reason</th>
                                    <th class="text-end">Actions</th>
                                </tr>
                            </thead>
                            <tbody id="email-held-tbody">
                                <tr><td colspan="5" class="text-center text-muted py-4">Held forwards load when this tab is opened.</td></tr>
                            </tbody>
                        </table>
                    </div>
                </div>
            </div>

            <!-- Deliverability tab: outbound deferral picture from exim_mainlog -->
            <div class="tab-pane fade" id="email-pane-deliverability" role="tabpanel" aria-labelledby="email-tab-deliverability" tabindex="0">
                <div class="card-body">
                    <div class="text-muted small mb-3" id="email-deliv-summary">Deferral activity loads when this tab is opened.</div>
                    <div class="row row-cards">
                        <div class="col-lg-6">
                            <div class="subheader mb-2"><i class="ti ti-building-broadcast-tower"></i>&nbsp;Providers throttling this server</div>
                            <div class="table-responsive">
                                <table class="table table-vcenter card-table table-sm" id="email-deliv-providers">
                                    <thead>
                                        <tr><th>Provider</th><th class="text-end">Deferrals</th><th>Reasons</th></tr>
                                    </thead>
                                    <tbody id="email-deliv-providers-body">
                                        <tr><td colspan="3" class="text-center text-muted py-4"><span class="spinner-border spinner-border-sm"></span> Loading...</td></tr>
                                    </tbody>
                                </table>
                            </div>
                        </div>
                        <div class="col-lg-6">
                            <div class="subheader mb-2"><i class="ti ti-router"></i>&nbsp;Outbound IP reputation</div>
                            <div class="table-responsive">
                                <table class="table table-vcenter card-table table-sm" id="email-deliv-ips">
                                    <thead>
                                        <tr><th>Sending IP</th><th class="text-end">Deferrals</th><th>Deferred by</th></tr>
                                    </thead>
                                    <tbody id="email-deliv-ips-body">
                                        <tr><td colspan="3" class="text-center text-muted py-4"><span class="spinner-border spinner-border-sm"></span> Loading...</td></tr>
                                    </tbody>
                                </table>
                            </div>
                        </div>
                    </div>
                </div>
            </div>

            <!-- Outbound abuse tab -->
            <div class="tab-pane fade" id="email-pane-outbound-abuse" role="tabpanel" aria-labelledby="email-tab-outbound-abuse" tabindex="0">
                <div id="outbound-abuse-body">
                    <div class="csm-empty"><div class="csm-empty__reason">Outbound mail abuse loads when this tab is opened.</div></div>
                </div>
            </div>
        </div>
    </div>
{{end}}
{{define "scripts"}}
<script src="/static/js/email.js"></script>
{{end}}
{{template "layout" .}}