@php
    $monitor = $monitoring['config'];
    $latest = $monitoring['latest'];
    $backupConfig ??= null;
    $backups ??= collect();
    $backupScheduleMode = old('schedule_mode', $backupConfig?->schedule_times ? 'times' : 'interval');
    $backupScheduleTimes = old('schedule_times', $backupConfig?->schedule_times ?? []);
@endphp
@extends('layout')

@section('content')
    <link rel="stylesheet" href="{{ url('assets/css/monitoring.css?v=9') }}">
    <div class="page-head">
        @include('partials.context-back')
        <div class="t">
            <h1>Monitoramento</h1>
            <p class="lead">{{ $system->name }} · disponibilidade, resposta e proteção de dados</p>
        </div>
        <div class="actions"><a class="btn btn--ghost" href="{{ url('sistemas/'.$system->id) }}"><i class="ic">apps</i>Ver solução</a></div>
    </div>

    <div class="monitor-metrics">
        <section class="card pad-lg"><span class="muted small"><i class="ic sm">sensors</i> Disponibilidade</span>
            <h2>{{ $monitoring['availability'] === null ? '—' : $monitoring['availability'].'%' }}</h2><span class="muted small">{{ $monitoring['checks']->count() }} verificação(ões) registradas</span>
        </section>
        <section class="card pad-lg"><span class="muted small"><i class="ic sm">speed</i> Tempo de resposta</span>
            <h2>{{ $latest === null || $latest->response_ms === null ? '—' : $latest->response_ms.' ms' }}</h2><span class="muted small">última medição</span>
        </section>
        <section class="card pad-lg"><span class="muted small"><i class="ic sm">history</i> Última verificação</span>
            <h2 class="monitor-metric-date">{{ $latest === null ? '—' : datetime_br($latest->checked_at?->format('Y-m-d H:i:s'), 'd/m H:i') }}</h2><span class="badge badge--{{ $latest === null ? 'muted' : ($latest->status === 'up' ? 'ok' : ($latest->status === 'slow' ? 'warn' : 'bad')) }} plain">{{ $latest === null ? 'Aguardando' : strtoupper($latest->status) }}</span>
        </section>
    </div>

    <div class="monitor-layout" x-data="{ openPanel: null }">
        <div class="monitor-primary-stack">
        <section class="card monitor-panel monitor-panel--availability" :class="{ 'is-open': openPanel === 'availability' }">
            <div class="card-head monitor-accordion-head">
                <button type="button" class="monitor-accordion-trigger" @click="openPanel = openPanel === 'availability' ? null : 'availability'" :aria-expanded="openPanel === 'availability' ? 'true' : 'false'">
                    <i class="ic sm">monitor_heart</i><span><strong>Disponibilidade HTTP</strong><small>{{ $monitor ? 'Configurada · '.($latest->status ?? 'aguardando') : 'Ainda não configurada' }}</small></span><i class="ic sm monitor-accordion-chevron" :class="{ 'is-open': openPanel === 'availability' }">expand_more</i>
                </button>
                <span class="grow"></span>
                @if($monitor)<form method="post" action="{{ url('sistemas/'.$system->id.'/monitoramento/verificar') }}" data-ajax data-reload="1"><button class="btn btn--subtle btn--sm" type="submit" title="Verificar agora"><i class="ic sm">refresh</i><span class="sr-only">Verificar agora</span></button></form>@endif
            </div>
            <form class="form card-body" x-show="openPanel === 'availability'" x-cloak method="post" action="{{ url('sistemas/'.$system->id.'/monitoramento') }}" data-ajax>
                @csrf
                <p class="muted small">O OPS fará uma requisição HEAD no endereço configurado e registrará disponibilidade, status HTTP e tempo de resposta. Para proteger a hospedagem e evitar excesso de tráfego, o limite global é de 10 verificações por minuto.</p>
                <div class="field"><label for="monitor-endpoint">Endereço a monitorar</label><input id="monitor-endpoint" type="url" name="endpoint" required maxlength="2048" placeholder="https://exemplo.com.br/health" value="{{ field_value($monitor, 'endpoint', $system->website_url ?? '') }}">{!! field_error('endpoint') !!}</div>
                <div class="form-grid">
                    <div class="field"><label for="monitor-interval">Verificar a cada</label><select id="monitor-interval" name="interval_minutes">@foreach([1, 5, 10, 15, 30, 60] as $n)<option value="{{ $n }}" @selected((int) field_value($monitor, 'interval_minutes', 5) === $n)>{{ $n }} minuto(s)</option>@endforeach</select>{!! field_error('interval_minutes') !!}</div>
                    <div class="field"><label for="monitor-timeout">Tempo máximo</label><select id="monitor-timeout" name="timeout_seconds">@foreach([5, 10, 15, 30] as $n)<option value="{{ $n }}" @selected((int) field_value($monitor, 'timeout_seconds', 10) === $n)>{{ $n }} segundos</option>@endforeach</select>{!! field_error('timeout_seconds') !!}</div>
                    <div class="field"><label for="monitor-status">HTTP esperado</label><input id="monitor-status" name="expected_status" type="number" min="100" max="599" required value="{{ field_value($monitor, 'expected_status', 200) }}">{!! field_error('expected_status') !!}</div>
                    <div class="field"><label for="monitor-slow">Lento após (ms)</label><input id="monitor-slow" name="slow_threshold_ms" type="number" min="100" max="30000" required value="{{ field_value($monitor, 'slow_threshold_ms', 2000) }}">{!! field_error('slow_threshold_ms') !!}</div>
                </div>
                <div class="actions"><button class="btn btn--primary" type="submit"><i class="ic">save</i>Salvar monitoramento</button><span class="muted small">{{ $monitor ? 'Agendamento ativo' : 'Ainda não configurado' }}</span></div>
            </form>
        </section>
        <section class="monitor-data-protection">
        @php
            $maskedBackupHost = static function (?string $value): string {
                if (blank($value)) {
                    return '—';
                }
                if (filter_var($value, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
                    $octets = explode('.', $value);

                    return substr($octets[0], 0, 1).'*.' .substr($octets[1], 0, 1).'.'.substr($octets[2], 0, 2).'*.*';
                }

                return mb_substr($value, 0, 1).'••••';
            };
            $maskedBackupIdentifier = static fn (?string $value): string => blank($value) ? '—' : mb_substr($value, 0, 1).'••••';
        @endphp
        <section class="card monitor-backup-card monitor-panel" :class="{ 'is-open': openPanel === 'database-backup' }">
            <div class="card-head monitor-accordion-head">
                <button type="button" class="monitor-accordion-trigger" @click="openPanel = openPanel === 'database-backup' ? null : 'database-backup'" :aria-expanded="openPanel === 'database-backup' ? 'true' : 'false'">
                    <i class="ic sm">database</i><span><strong>Backup do banco de dados</strong><small>{{ $backupConfig ? 'SQL configurado · '.$backups->count().' arquivo(s)' : 'SQL ainda não configurado' }}</small></span><i class="ic sm monitor-accordion-chevron" :class="{ 'is-open': openPanel === 'database-backup' }">expand_more</i>
                </button>
                <span class="grow"></span><span class="badge badge--{{ $backupConfig ? 'ok' : 'muted' }}">{{ $backupConfig ? 'Configurado' : 'Não configurado' }}</span>
            </div>
            <div class="card-body" x-show="openPanel === 'database-backup'" x-cloak>
                <p class="muted small">O OmniAURIOS conecta diretamente ao MySQL, gera um dump compactado e guarda o arquivo em armazenamento privado. Os campos mostram apenas máscaras; valores atuais não são enviados à página. Deixe-os vazios para manter a configuração. A senha é cifrada pela APP_KEY.</p>
                <form class="backup-config-form" x-data="{ scheduleMode: @js($backupScheduleMode) }" method="post" action="{{ url('sistemas/'.$system->id.'/backups') }}" data-ajax>
                    @csrf
                    <div class="form-grid thirds">
                        <div class="field"><label for="backup-host">Servidor</label><input id="backup-host" name="host" @if(!$backupConfig) required @endif maxlength="255" placeholder="{{ $backupConfig ? $maskedBackupHost($backupConfig->host).' · preencher para alterar' : '127.0.0.1' }}">{!! field_error('host') !!}</div>
                        <div class="field"><label for="backup-port">Porta</label><input id="backup-port" name="port" type="number" min="1" max="65535" @if(!$backupConfig) required value="3306" @else placeholder="•••• · preencher para alterar" @endif>{!! field_error('port') !!}</div>
                        <div class="field"><label for="backup-database">Banco</label><input id="backup-database" name="database_name" @if(!$backupConfig) required @endif maxlength="128" placeholder="{{ $backupConfig ? $maskedBackupIdentifier($backupConfig->database_name).' · preencher para alterar' : '' }}">{!! field_error('database_name') !!}</div>
                        <div class="field"><label for="backup-user">Usuário</label><input id="backup-user" name="username" @if(!$backupConfig) required @endif maxlength="128" placeholder="{{ $backupConfig ? $maskedBackupIdentifier($backupConfig->username).' · preencher para alterar' : '' }}">{!! field_error('username') !!}</div>
                        <div class="field"><label for="backup-password">Senha @if($backupConfig)<span class="hint">deixe vazia para manter</span>@endif</label><div class="password-control"><input id="backup-password" name="password" type="password" maxlength="255" @if(!$backupConfig) required @endif autocomplete="new-password" placeholder="{{ $backupConfig ? '•••••••• · senha protegida' : '' }}"><button type="button" class="password-toggle" data-password-toggle aria-controls="backup-password" aria-label="Mostrar senha" aria-pressed="false" title="Mostrar senha"><i class="ic sm" data-password-toggle-icon>visibility</i></button></div>{!! field_error('password') !!}</div>
                        <div class="field"><label for="backup-schedule-mode">Agendamento</label><select id="backup-schedule-mode" name="schedule_mode" x-model="scheduleMode"><option value="interval" @selected($backupScheduleMode === 'interval')>Por intervalo</option><option value="times" @selected($backupScheduleMode === 'times')>Horários fixos</option></select>{!! field_error('schedule_mode') !!}</div>
                        <div class="field" x-show="scheduleMode === 'interval'" x-cloak><label for="backup-interval">Periodicidade</label><select id="backup-interval" name="interval_hours">@foreach([6 => 'A cada 6 horas', 12 => 'A cada 12 horas', 24 => 'Diário', 168 => 'Semanal'] as $hours => $intervalLabel)<option value="{{ $hours }}" @selected((int) field_value($backupConfig, 'interval_hours', 24) === $hours)>{{ $intervalLabel }}</option>@endforeach</select>{!! field_error('interval_hours') !!}</div>
                        <div class="field"><label for="backup-retention">Manter backups</label><select id="backup-retention" name="retention_count">@foreach([3, 7, 14, 30] as $count)<option value="{{ $count }}" @selected((int) field_value($backupConfig, 'retention_count', 7) === $count)>{{ $count }} arquivo(s)</option>@endforeach</select>{!! field_error('retention_count') !!}</div>
                    </div>
                    <div class="backup-schedule-times" x-show="scheduleMode === 'times'" x-cloak>
                        <p class="muted small">Escolha até três horários por dia. O OmniAURIOS agenda no máximo três backups no total a cada janela de 15 minutos; horários não executados podem ser recuperados por até 24 horas, respeitando a mesma cota.</p>
                        <div class="form-grid thirds">
                            @for($slot = 0; $slot < 3; $slot++)
                                <div class="field"><label for="backup-schedule-time-{{ $slot }}">Horário {{ $slot + 1 }}{{ $slot === 0 ? ' (ao menos um)' : ' (opcional)' }}</label><input id="backup-schedule-time-{{ $slot }}" type="time" name="schedule_times[]" value="{{ $backupScheduleTimes[$slot] ?? '' }}">{!! field_error('schedule_times.'.$slot) !!}</div>
                            @endfor
                        </div>
                        {!! field_error('schedule_times') !!}
                    </div>
                    {!! field_error('backup') !!}
                    <div class="actions"><button class="btn btn--primary" type="submit"><i class="ic">verified</i>Testar e salvar conexão</button></div>
                </form>
                @if($backupConfig)<form class="backup-run-form" method="post" action="{{ url('sistemas/'.$system->id.'/backups/executar') }}" data-ajax>@csrf<button class="btn btn--ghost" type="submit"><i class="ic">backup</i>Executar backup agora</button><span class="muted small">Conta na cota global de três despachos a cada 15 minutos. O worker processará o arquivo em segundo plano.</span></form>@endif

            </div>
        </section>
        <section class="card monitor-file-backup-card monitor-panel" :class="{ 'is-open': openPanel === 'file-backup' }">
            <div class="card-head monitor-accordion-head">
                <button type="button" class="monitor-accordion-trigger" @click="openPanel = openPanel === 'file-backup' ? null : 'file-backup'" :aria-expanded="openPanel === 'file-backup' ? 'true' : 'false'">
                    <i class="ic sm">folder_zip</i><span><strong>Backup de arquivos remotos</strong><small>{{ $fileBackupConfig ? 'SFTP configurado · '.($fileBackupConfig->enabled ? 'agendamento ativo' : 'agendamento suspenso') : 'Ainda não configurado' }}</small></span><i class="ic sm monitor-accordion-chevron" :class="{ 'is-open': openPanel === 'file-backup' }">expand_more</i>
                </button>
                <span class="grow"></span><span class="badge badge--{{ $fileBackupConfig?->connection_status === 'verified' ? 'ok' : ($fileBackupConfig ? 'warn' : 'muted') }}">{{ $fileBackupConfig?->connection_status === 'verified' ? 'Conexão verificada' : ($fileBackupConfig ? 'Configuração salva' : 'Fase de configuração') }}</span>
            </div>
            <div class="card-body" x-show="openPanel === 'file-backup'" x-cloak>
                <div class="file-backup-foundation">
                    <p class="muted small file-backup-intro">Configuração SFTP por solução. As credenciais ficam cifradas e a chave do servidor precisa ser fixada após conferência fora de banda.</p>
                    <div class="file-backup-capabilities" role="status">
                        <strong>Capacidade: {{ $fileBackupCapabilities['native_pipeline_ready'] ? 'recursos nativos detectados' : 'requisitos pendentes' }} · não homologada</strong>
                        @if($fileBackupCapabilities['missing'])
                            <span>{{ implode(' ', $fileBackupCapabilities['missing']) }} A coleta e os snapshots permanecem desabilitados até configurar um executor compatível.</span>
                        @else
                            <span>Dependências locais detectadas, mas o pipeline permanece fechado até homologar coleta, snapshot, retenção e restauração isolada no executor real.</span>
                        @endif
                        <span>{{ $fileBackupCapabilities['hosting_type_reason'] }} Executor externo e modalidade restrita somente por PHP ainda não estão implementados.</span>
                    </div>
                    <form class="file-backup-config" method="post" action="{{ url('sistemas/'.$system->id.'/backups-arquivos') }}" data-ajax data-reload="1">
                        @csrf
                        <div class="form-grid thirds">
                            <div class="field"><label for="file-backup-host">Servidor SSH</label><input id="file-backup-host" name="host" @required(!$fileBackupConfig) maxlength="255" autocomplete="off" value="{{ old('host') }}" placeholder="{{ $fileBackupConfig ? $maskedBackupHost($fileBackupConfig->host).' · preencher para alterar' : 'backup.exemplo.com' }}">{!! field_error('host') !!}</div>
                            <div class="field"><label for="file-backup-port">Porta SFTP</label><input id="file-backup-port" type="number" name="port" @required(!$fileBackupConfig) min="1" max="65535" @if(!$fileBackupConfig)value="22"@else placeholder="•••• · preencher para alterar"@endif>{!! field_error('port') !!}</div>
                            <div class="field"><label for="file-backup-user">Usuário</label><input id="file-backup-user" name="username" @required(!$fileBackupConfig) maxlength="128" autocomplete="off" placeholder="{{ $fileBackupConfig ? $maskedBackupIdentifier($fileBackupConfig->username).' · preencher para alterar' : '' }}">{!! field_error('username') !!}</div>
                        </div>
                        <div class="form-grid">
                            <div class="field"><label for="file-backup-auth">Autenticação</label><select id="file-backup-auth" name="auth_type" required><option value="password" @selected(old('auth_type', $fileBackupConfig?->auth_type ?? 'password') === 'password')>Senha</option><option value="private_key" @selected(old('auth_type', $fileBackupConfig?->auth_type) === 'private_key')>Chave privada SSH</option></select>{!! field_error('auth_type') !!}</div>
                            <div class="field"><label for="file-backup-credential">Credencial @if($fileBackupConfig)<span class="hint">vazia mantém a atual</span>@endif</label><textarea id="file-backup-credential" name="credential" rows="3" maxlength="20000" autocomplete="new-password" placeholder="{{ $fileBackupConfig ? '•••••••• · credencial cifrada' : 'Informe a senha ou o conteúdo da chave privada' }}"></textarea>{!! field_error('credential') !!}</div>
                        </div>
                        <div class="field"><label for="file-backup-passphrase">Frase secreta da chave privada <span class="hint">opcional; deixe vazia para manter a atual</span></label><input id="file-backup-passphrase" name="credential_passphrase" type="password" maxlength="2000" autocomplete="new-password" placeholder="••••••••"><small class="hint">Só se aplica à autenticação por chave SSH; também é protegida junto da credencial.</small>{!! field_error('credential_passphrase') !!}</div>
                        <details class="file-backup-remote-restore-credentials">
                            <summary>Credencial separada para restauração remota <span class="badge">Desativada por padrão</span></summary>
                            <p class="hint">Use uma conta SFTP distinta, limitada a criar arquivos em diretórios autorizados. Ela nunca será reutilizada na coleta. Cadastrar esta credencial não habilita gravações: a restauração remota permanece bloqueada até homologação e ativação explícita do gate.</p>
                            <div class="form-grid">
                                <div class="field"><label for="file-backup-restore-user">Usuário de restauração</label><input id="file-backup-restore-user" name="remote_restore_username" maxlength="128" autocomplete="off" value="{{ old('remote_restore_username', $fileBackupConfig?->remote_restore_username) }}" placeholder="Conta SFTP com permissão mínima">{!! field_error('remote_restore_username') !!}</div>
                                <div class="field"><label for="file-backup-restore-auth">Autenticação de restauração</label><select id="file-backup-restore-auth" name="remote_restore_auth_type"><option value="">— Não configurada —</option><option value="password" @selected(old('remote_restore_auth_type', $fileBackupConfig?->remote_restore_auth_type) === 'password')>Senha</option><option value="private_key" @selected(old('remote_restore_auth_type', $fileBackupConfig?->remote_restore_auth_type) === 'private_key')>Chave privada SSH</option></select>{!! field_error('remote_restore_auth_type') !!}</div>
                            </div>
                            <div class="field"><label for="file-backup-restore-credential">Nova credencial de restauração</label><textarea id="file-backup-restore-credential" name="remote_restore_credential" rows="3" maxlength="20000" autocomplete="new-password" placeholder="{{ $fileBackupConfig?->remote_restore_credentials_encrypted ? '•••••••• · credencial cifrada; vazio mantém a atual' : 'Informe uma senha ou chave privada exclusiva' }}"></textarea><small class="hint">Armazenada cifrada. Deixe vazia para preservar a atual, exceto ao trocar usuário ou método de autenticação.</small>{!! field_error('remote_restore_credential') !!}</div>
                            <div class="field"><label for="file-backup-restore-passphrase">Frase secreta da chave de restauração</label><input id="file-backup-restore-passphrase" name="remote_restore_passphrase" type="password" maxlength="2000" autocomplete="new-password" placeholder="Vazia mantém a atual">{!! field_error('remote_restore_passphrase') !!}</div>
                        </details>
                        <div class="field"><label for="file-backup-fingerprint">Fingerprint SSH fixado</label><input id="file-backup-fingerprint" name="host_fingerprint" @required(!$fileBackupConfig) maxlength="100" autocomplete="off" value="{{ old('host_fingerprint') }}" placeholder="{{ $fileBackupConfig ? 'Chave fixada · preencher para alterar' : 'SHA256:...' }}"><small class="hint">Não aceite automaticamente uma chave apresentada pela rede. Compare o fingerprint com o provedor/administrador do servidor antes de salvar.</small>{!! field_error('host_fingerprint') !!}</div>
                        <div class="field"><label for="file-backup-directories">Diretórios absolutos (um por linha)</label><textarea id="file-backup-directories" name="directories_text" rows="4" required maxlength="20000" placeholder="/home/usuario/app/storage/app/public&#10;/home/usuario/app/public/uploads">{{ old('directories_text', implode("\n", $fileBackupConfig?->directories ?? [])) }}</textarea><small class="hint">Links simbólicos são identificados e não podem ser abertos pelo navegador SFTP.</small>{!! field_error('directories') !!}</div>
                        <div class="file-backup-sftp-tools" data-file-backup-sftp data-test-url="{{ url('sistemas/'.$system->id.'/backups-arquivos/conexao') }}" data-browse-url="{{ url('sistemas/'.$system->id.'/backups-arquivos/diretorio') }}">
                            <div class="file-backup-sftp-tools__actions"><button class="btn btn--subtle btn--sm" type="button" data-file-backup-test @disabled(!$fileBackupConfig)><i class="ic sm">link</i>Testar conexão</button><span class="muted small" data-file-backup-sftp-status>{{ $fileBackupConfig?->connection_verified_at ? 'Verificada em '.datetime_br($fileBackupConfig->connection_verified_at->toDateTimeString()) : 'Salve a configuração antes de testar.' }}</span></div>
                            <div class="file-backup-sftp-browser" data-file-backup-browser hidden><div class="file-backup-sftp-browser__head"><strong data-file-backup-current-path>Diretório remoto</strong><button type="button" class="btn btn--ghost btn--sm" data-file-backup-root>Início</button></div><div class="file-backup-sftp-browser__entries" data-file-backup-entries></div></div>
                        </div>
                        <div class="form-grid thirds">
                            <div class="field"><label for="file-backup-destination">Destino pretendido</label><select id="file-backup-destination" name="destination_driver"><option value="local" @selected(old('destination_driver', $fileBackupConfig?->destination_driver ?? 'local') === 'local')>Armazenamento privado local</option><option value="s3" @selected(old('destination_driver', $fileBackupConfig?->destination_driver) === 's3')>S3 / Cloudflare R2</option></select>{!! field_error('destination_driver') !!}</div>
                            <div class="field"><label for="file-backup-schedule">Frequência</label><select id="file-backup-schedule" name="schedule_type"><option value="daily" @selected(old('schedule_type', $fileBackupConfig?->schedule_type ?? 'daily') === 'daily')>Diária</option><option value="weekly" @selected(old('schedule_type', $fileBackupConfig?->schedule_type) === 'weekly')>Semanal</option></select>{!! field_error('schedule_type') !!}</div>
                            <div class="field"><label for="file-backup-time">Horário</label><input id="file-backup-time" name="schedule_time" type="time" value="{{ old('schedule_time', $fileBackupConfig?->schedule_time ?? '01:00') }}" required>{!! field_error('schedule_time') !!}</div>
                            <div class="field"><label for="file-backup-day">Dia da semana (0=domingo)</label><select id="file-backup-day" name="schedule_day">@foreach(['Domingo','Segunda','Terça','Quarta','Quinta','Sexta','Sábado'] as $day => $dayLabel)<option value="{{ $day }}" @selected((int) old('schedule_day', $fileBackupConfig?->schedule_day ?? 0) === $day)>{{ $dayLabel }}</option>@endforeach</select>{!! field_error('schedule_day') !!}</div>
                            <div class="field"><label for="file-backup-timezone">Fuso horário</label><input id="file-backup-timezone" name="timezone" required maxlength="64" value="{{ old('timezone', $fileBackupConfig?->timezone ?? 'America/Fortaleza') }}">{!! field_error('timezone') !!}</div>
                            <div class="field"><label for="file-backup-retention">Snapshots a reter</label><input id="file-backup-retention" name="retention_count" type="number" required min="1" max="30" value="{{ old('retention_count', $fileBackupConfig?->retention_count ?? 3) }}">{!! field_error('retention_count') !!}</div>
                        </div>
                        <fieldset class="file-backup-destination-options">
                            <legend>Credenciais do destino S3 / R2 <span class="hint">use quando esse destino estiver selecionado</span></legend>
                            @php($destinationOptions = $fileBackupConfig?->destination_options ?? [])
                            <div class="form-grid thirds">
                                <div class="field"><label for="file-backup-destination-endpoint">Endpoint HTTPS</label><input id="file-backup-destination-endpoint" name="destination_endpoint" type="url" maxlength="255" value="{{ old('destination_endpoint', $destinationOptions['endpoint'] ?? '') }}" placeholder="https://account-id.r2.cloudflarestorage.com">{!! field_error('destination_endpoint') !!}</div>
                                <div class="field"><label for="file-backup-destination-bucket">Bucket</label><input id="file-backup-destination-bucket" name="destination_bucket" maxlength="63" value="{{ old('destination_bucket', $destinationOptions['bucket'] ?? '') }}">{!! field_error('destination_bucket') !!}</div>
                                <div class="field"><label for="file-backup-destination-prefix">Prefixo</label><input id="file-backup-destination-prefix" name="destination_prefix" maxlength="500" value="{{ old('destination_prefix', $destinationOptions['prefix'] ?? '') }}" placeholder="omniaurios/backups"></div>
                                <div class="field"><label for="file-backup-destination-region">Região</label><input id="file-backup-destination-region" name="destination_region" maxlength="64" value="{{ old('destination_region', $destinationOptions['region'] ?? '') }}" placeholder="opcional"></div>
                                <div class="field"><label for="file-backup-destination-access">Access key @if($fileBackupConfig?->destination_driver === 's3')<span class="hint">vazia mantém a atual</span>@endif</label><input id="file-backup-destination-access" name="destination_access_key" maxlength="256" autocomplete="off" placeholder="{{ $fileBackupConfig?->destination_driver === 's3' ? '•••••••• · armazenada cifrada' : '' }}">{!! field_error('destination_access_key') !!}</div>
                                <div class="field"><label for="file-backup-destination-secret">Secret key @if($fileBackupConfig?->destination_driver === 's3')<span class="hint">vazia mantém a atual</span>@endif</label><input id="file-backup-destination-secret" name="destination_secret_key" type="password" maxlength="512" autocomplete="new-password" placeholder="{{ $fileBackupConfig?->destination_driver === 's3' ? '•••••••• · armazenada cifrada' : '' }}">{!! field_error('destination_secret_key') !!}</div>
                            </div>
                            <div class="field"><label for="file-backup-destination-session">Token de sessão temporário <span class="hint">opcional</span></label><input id="file-backup-destination-session" name="destination_session_token" type="password" maxlength="4096" autocomplete="new-password" placeholder="{{ $fileBackupConfig?->destination_driver === 's3' ? 'vazio mantém o token atual' : '' }}"><small class="hint">Credenciais são cifradas no banco. O endpoint precisa estar em FILE_BACKUP_ALLOWED_DESTINATION_HOSTS e resolver somente para IPs públicos.</small></div>
                        </fieldset>
                        <div class="form-grid">
                            <div class="field"><label for="file-backup-notification-email">E-mail para resumos</label><input id="file-backup-notification-email" type="email" name="notification_email" maxlength="254" value="{{ old('notification_email', $fileBackupConfig?->notification_email) }}" placeholder="operacao@exemplo.com">{!! field_error('notification_email') !!}</div>
                            <div class="field"><label>Notificações</label><div class="check-row"><input type="hidden" name="notify_on_failure" value="0"><input type="checkbox" name="notify_on_failure" value="1" @checked((bool) old('notify_on_failure', $fileBackupConfig?->notify_on_failure ?? true))><span>Falhas e ocorrências relevantes</span></div><div class="check-row"><input type="hidden" name="notify_on_success" value="0"><input type="checkbox" name="notify_on_success" value="1" @checked((bool) old('notify_on_success', $fileBackupConfig?->notify_on_success ?? true))><span>Execuções concluídas</span></div>{!! field_error('notify_on_failure') !!}{!! field_error('notify_on_success') !!}</div>
                        </div>
                        {!! field_error('directories_text') !!}{!! field_error('credential') !!}
                        <div class="actions"><button class="btn btn--primary" type="submit"><i class="ic">save</i>Salvar configuração</button><span class="muted small">Salvar não testa a conexão nem ativa a execução.</span></div>
                    </form>
                    @if($fileBackupConfig)
                        <div class="file-backup-sftp-tools__actions">
                            <form method="post" action="{{ url('sistemas/'.$system->id.'/backups-arquivos/ativacao') }}" data-ajax data-reload="1">
                                @csrf
                                <input type="hidden" name="enabled" value="{{ $fileBackupConfig->enabled ? '0' : '1' }}">
                                <button class="btn {{ $fileBackupConfig->enabled ? 'btn--subtle' : 'btn--primary' }} btn--sm" type="submit" @disabled(!$fileBackupConfig->enabled && (!$fileBackupCapabilities['execution_ready'] || $fileBackupConfig->connection_status !== 'verified'))>
                                    <i class="ic sm">{{ $fileBackupConfig->enabled ? 'pause_circle' : 'play_circle' }}</i>{{ $fileBackupConfig->enabled ? 'Suspender agendamento' : 'Ativar agendamento' }}
                                </button>
                            </form>
                            <form method="post" action="{{ url('sistemas/'.$system->id.'/backups-arquivos/executar') }}" data-ajax data-reload="1">
                                @csrf
                                <button class="btn btn--subtle btn--sm" type="submit" @disabled(!$fileBackupConfig->enabled || !$fileBackupCapabilities['execution_ready']) title="{{ !$fileBackupCapabilities['execution_ready'] ? 'Disponível após homologação do executor' : 'Enfileira a coleta e o snapshot' }}">
                                    <i class="ic sm">backup</i>Executar agora
                                </button>
                            </form>
                            <span class="muted small">{{ $fileBackupConfig->enabled ? 'Agendamento ativo · conexão '.($fileBackupConfig->connection_status === 'verified' ? 'validada' : 'não validada') : 'Agendamento suspenso' }}</span>
                        </div>
                    @endif
                </div>
            </div>
        </section>
        </section>
        </div>
        <section class="card monitor-history-panel">
            <div class="card-head">
                <h2><i class="ic sm">timeline</i> Histórico recente</h2><span class="grow"></span><span class="muted small">{{ $monitoring['checks']->count() }} registro(s)</span>
            </div>
            @if($monitoring['checks']->isEmpty())
                <div class="empty"><i class="ic">monitor_heart</i>
                    <p>Nenhuma verificação registrada.</p><span class="muted small">Salve o endereço e execute a primeira verificação.</span>
                </div>
            @else
                <div class="monitor-history">
                    @foreach($monitoring['checks']->take(10) as $check)
                        <div class="monitor-history-row"><span class="health-dot health-dot--{{ $check->status === 'up' ? 'ok' : ($check->status === 'slow' ? 'warn' : 'bad') }}"></span><span class="monitor-history-status">{{ strtoupper($check->status) }}</span><span>{{ $check->http_status ?? '—' }} · {{ $check->response_ms ?? '—' }} ms</span><span class="muted small">{{ datetime_br($check->checked_at?->format('Y-m-d H:i:s'), 'd/m H:i') }}</span></div>
                    @endforeach
                </div>
            @endif
        </section>
    </div>

    <section class="monitor-backup-history-section">
        <div class="monitor-section-heading">
            <div>
                <h2><i class="ic sm">history</i> Histórico de backups</h2>
                <p class="muted small">Execuções e arquivos SQL e remotos, cada um no seu histórico.</p>
            </div>
        </div>
        <div class="monitor-backup-histories">
        <section class="card monitor-backup-history">
            <div class="card-head">
                <h2><i class="ic sm">folder_zip</i> Histórico de backup de arquivos</h2><span class="grow"></span><span class="muted small">{{ $fileBackupOperations['summary']['total'] }} execução(ões)</span>
            </div>
            <div class="card-body">
                <div class="file-backup-metrics">
                    <span>{{ $fileBackupOperations['summary']['completed'] }} snapshots válidos</span>
                    <span>{{ $fileBackupOperations['summary']['failed'] }} execuções com falha</span>
                    <span>{{ number_format($fileBackupOperations['summary']['bytes_transferred'] / 1048576, 2, ',', '.') }} MB transferidos</span>
                    @if($fileBackupOperations['percentiles']['sample_size'] > 0)
                        <span>{{ $fileBackupOperations['percentiles']['sample_size'] }} snapshots concluídos</span>
                        @if($fileBackupOperations['percentiles']['period_start_at'] && $fileBackupOperations['percentiles']['period_end_at'])
                            <span>Período {{ $fileBackupOperations['percentiles']['period_start_at']->timezone(config('app.timezone'))->format('d/m/Y') }}–{{ $fileBackupOperations['percentiles']['period_end_at']->timezone(config('app.timezone'))->format('d/m/Y') }}</span>
                        @endif
                        <span>P50 {{ number_format($fileBackupOperations['percentiles']['p50_ms'] / 1000, 1, ',', '.') }} s</span>
                        <span>P95 {{ number_format($fileBackupOperations['percentiles']['p95_ms'] / 1000, 1, ',', '.') }} s</span>
                        <span>P98 {{ number_format($fileBackupOperations['percentiles']['p98_ms'] / 1000, 1, ',', '.') }} s</span>
                    @else
                        <span class="muted">Percentis disponíveis após a primeira execução medida.</span>
                    @endif
                </div>
                @if($fileBackupOperations['runs']->isEmpty())
                    <div class="empty"><i class="ic">folder_off</i><p>Nenhuma execução de arquivos.</p><span class="muted small">Este histórico é separado dos backups SQL e das verificações HTTP.</span></div>
                @else
                    <div class="backup-table-wrap">
                        <table class="backup-table">
                            <thead><tr><th>Status</th><th>Snapshot</th><th>Arquivos</th><th>Volume</th><th>Duração</th><th>Data</th><th>Restaurações de teste</th><th>Ação</th></tr></thead>
                            <tbody>
                                @foreach($fileBackupOperations['runs'] as $fileBackupRun)
                                    @php($backupTone = in_array($fileBackupRun->status, ['completed'], true) ? 'ok' : (in_array($fileBackupRun->status, ['inventory', 'transferring', 'staged'], true) ? 'warn' : 'bad'))
                                    <tr>
                                        <td data-label="Status"><span class="backup-status"><i class="health-dot health-dot--{{ $backupTone }}"></i>{{ str_replace('_', ' ', $fileBackupRun->status) }}</span></td>
                                        <td data-label="Snapshot" class="backup-name">{{ $fileBackupRun->snapshot_id ? '#'.substr($fileBackupRun->snapshot_id, 0, 12) : '—' }}</td>
                                        <td data-label="Arquivos">{{ number_format($fileBackupRun->files_processed, 0, ',', '.') }} / {{ number_format($fileBackupRun->files_total, 0, ',', '.') }}</td>
                                        <td data-label="Volume">{{ number_format($fileBackupRun->bytes_transferred / 1048576, 2, ',', '.') }} MB</td>
                                        <td data-label="Duração">
                                            {{ $fileBackupRun->duration_ms !== null ? number_format($fileBackupRun->duration_ms / 1000, 1, ',', '.').' s' : '—' }}
                                            @if($fileBackupRun->stage_durations_ms)
                                                @php($stageLabels = ['connection' => 'Conexão', 'inventory' => 'Inventário', 'transfer' => 'Transferência', 'snapshot_validation' => 'Validação', 'snapshot_publication' => 'Snapshot', 'retention' => 'Retenção'])
                                                <details class="backup-stage-details"><summary>Etapas</summary><span>
                                                    @foreach($fileBackupRun->stage_durations_ms as $stage => $duration)
                                                        {{ $stageLabels[$stage] ?? $stage }}: {{ number_format((int) $duration / 1000, 1, ',', '.') }} s{{ !$loop->last ? ' · ' : '' }}
                                                    @endforeach
                                                </span></details>
                                            @endif
                                        </td>
                                        <td data-label="Data">{{ datetime_br($fileBackupRun->created_at?->format('Y-m-d H:i:s'), 'd/m/Y H:i') }}</td>
                                        @php($latestRestore = $fileBackupRun->restores->sortByDesc('id')->first())
                                        @php($restoreStatusLabels = ['queued' => 'na fila', 'running' => 'em andamento', 'verified' => 'verificada', 'failed' => 'falhou', 'expired' => 'expirada'])
                                        <td data-label="Restaurações">
                                            {{ $fileBackupRun->restores->count() }} · {{ $fileBackupRun->restores->where('status', 'verified')->count() }} verificadas
                                            @if($latestRestore && in_array($latestRestore->status, ['queued', 'running', 'failed'], true))
                                                <small class="muted">Última #{{ $latestRestore->id }} · {{ $restoreStatusLabels[$latestRestore->status] ?? $latestRestore->status }}</small>
                                            @endif
                                        </td>
                                        <td data-label="Ação">
                                            @if($fileBackupRun->status === 'completed' && $fileBackupRun->phase === 'snapshot_validated')
                                                @php($verifiedRestore = $fileBackupRun->restores->where('status', 'verified')->sortByDesc('id')->first())
                                                @if($verifiedRestore)
                                                    <a class="btn btn--subtle btn--sm" href="{{ url('sistemas/'.$system->id.'/backups-arquivos/restauracoes/'.$verifiedRestore->id) }}"><i class="ic sm">folder_open</i>Arquivos recuperados</a>
                                                @elseif($latestRestore && in_array($latestRestore->status, ['queued', 'running'], true))
                                                    <span class="muted small">Restauração #{{ $latestRestore->id }} {{ $restoreStatusLabels[$latestRestore->status] }}</span>
                                                @else
                                                    <a class="btn btn--subtle btn--sm" href="{{ url('sistemas/'.$system->id.'/backups-arquivos/'.$fileBackupRun->id.'/restaurar') }}" @if(!$fileBackupCapabilities['execution_ready']) aria-disabled="true" title="Disponível após homologação do executor" @endif><i class="ic sm">settings_backup_restore</i>Testar restauração</a>
                                                @endif
                                            @else
                                                <span class="muted small">Snapshot não confirmado</span>
                                            @endif
                                        </td>
                                    </tr>
                                @endforeach
                            </tbody>
                        </table>
                    </div>
                @endif
            </div>
        </section>
        <section class="card monitor-backup-history">
            <div class="card-head">
                <h2><i class="ic sm">history</i> Histórico de backups SQL</h2><span class="grow"></span><span class="muted small">{{ $backups->count() }} registro(s)</span>
            </div>
            @if($backups->isEmpty())
                <div class="empty"><i class="ic">database</i>
                    <p>Nenhum backup gerado.</p><span class="muted small">Os arquivos aparecerão aqui depois da primeira execução.</span>
                </div>
            @else
                <div class="backup-table-wrap">
                    <table class="backup-table">
                        <thead>
                            <tr>
                                <th>Status</th>
                                <th>Arquivo</th>
                                <th>Tamanho</th>
                                <th>Data</th>
                                <th><span class="sr-only">Ação</span></th>
                            </tr>
                        </thead>
                        <tbody>
                            @foreach($backups as $backup)
                                <tr>
                                    <td data-label="Status"><span class="backup-status"><i class="health-dot health-dot--{{ $backup->status === 'success' ? 'ok' : ($backup->status === 'running' ? 'warn' : 'bad') }}"></i>{{ $backup->status }}</span></td>
                                    <td data-label="Arquivo" class="backup-name">{{ $backup->status === 'success' ? 'Backup SQL #'.$backup->id : 'Backup em processamento' }}</td>
                                    <td data-label="Tamanho">{{ $backup->size_bytes ? number_format($backup->size_bytes / 1048576, 2, ',', '.').' MB' : '—' }}</td>
                                    <td data-label="Data">{{ datetime_br($backup->created_at?->format('Y-m-d H:i:s'), 'd/m/Y H:i') }}</td>
                                    <td class="backup-action">@if($backup->status === 'success')<a class="btn btn--subtle btn--sm" href="{{ url('sistemas/'.$system->id.'/backups/'.$backup->id) }}"><i class="ic sm">download</i><span>Baixar</span></a>@else<span class="muted small">Indisponível</span>@endif</td>
                                </tr>
                            @endforeach
                        </tbody>
                    </table>
                </div>
            @endif
        </section>
        </div>
    </section>
@endsection