{% extends "base.html" %}

{% block title %}Create Submission{% endblock %}

{% block content %}
<div class="card card-body">
    <div class="flex justify-between items-center mb-6">
        <h2 class="text-2xl font-bold">Create New Submission</h2>
        <a href="/files" class="link-info hover:underline">← Back to Files</a>
    </div>

    {% if file %}
    <!-- File Information Section -->
    <div class="mb-6">
        <h3 class="text-sm font-semibold mb-2">File Information</h3>
        <div class="border border-border rounded">
            <table class="w-full text-sm">
                <tbody>
                    <tr class="border-b border-border">
                        <td class="px-4 py-2 font-medium w-32">Filename</td>
                        <td class="px-4 py-2">{{ file.filename }}</td>
                    </tr>
                    {% if file.comment %}
                    <tr class="border-b border-border">
                        <td class="px-4 py-2 font-medium">Comment</td>
                        <td class="px-4 py-2">{{ file.comment }}</td>
                    </tr>
                    {% endif %}
                    {% if file.exec_arguments %}
                    <tr class="border-b border-border">
                        <td class="px-4 py-2 font-medium">Arguments</td>
                        <td class="px-4 py-2"><code class="bg-code px-1 rounded">{{ file.exec_arguments }}</code></td>
                    </tr>
                    {% endif %}
                    <tr>
                        <td class="px-4 py-2 font-medium">Uploaded</td>
                        <td class="px-4 py-2">{{ file.created_at|strftime('%Y-%m-%d %H:%M:%S') }}</td>
                    </tr>
                </tbody>
            </table>
        </div>
    </div>
    
    <div class="bg-light p-4 rounded-lg">
        <form 
            id="create-submission-form"
            hx-post="{{ API_BASE_URL }}/api/files/{{ file.id }}/createsubmission" 
            hx-target="#create-submission-result"
            hx-indicator="#submission-loading"
            class="space-y-6"
        >
            <!-- Profile -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Profile *</h3>
                    <p class="text-sm text-description">
                        The VM / EDR you want to test against
                    </p>
                </div>
                <div>
                    <select 
                        id="profile_name" 
                        name="profile_name"
                        required
                        class="input"
                    >
                        <option value="">Select a profile...</option>
                        {% for profile_name, profile in profiles.items() %}
                        <option value="{{ profile_name }}" title="{{ profile.comment }}" data-require-password="{{ profile.require_password }}">
                            {{ profile_name }}
                            {% if profile.connector %} - {{ profile.connector }}{% endif %}
                        </option>
                        {% endfor %}
                        {% if not profiles %}
                        <option value="" disabled>No profiles available</option>
                        {% endif %}
                    </select>
                </div>
            </div>
            
            <!-- Execution Mode -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Execution Mode *</h3>
                    <p class="text-sm text-description">
                        <b>AutoIt</b> is more realistic for initial access payloads. Will "click" the file (and container). <br>
                        <b>Direct</b> execution invokes the target directly. Supports .exe arguments. Supports .dll. For testing tools.
                        <b>Clickfix</b> will interpret the content of the file as single line string to be inserted into the run dialog. 
                    </p>
                </div>
                <div>
                    <select 
                        id="execution_mode" 
                        name="execution_mode"
                        class="input"
                    >
                        <option value="exec">Direct</option>
                        <option value="autoit" selected>AutoIt</option>
                        <option value="clickfix">Clickfix</option>
                    </select>
                </div>
            </div>

            <!-- Runtime -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Runtime (seconds)</h3>
                    <p class="text-sm text-description">
                        How long the payload runs. Increase this to observe post-ex behaviors like beacon callbacks.
                    </p>
                </div>
                <div>
                    <input 
                        type="number" 
                        id="runtime_seconds" 
                        name="runtime" 
                        min="3" 
                        max="7200"
                        value="10"
                        class="input"
                    >
                    <p class="mt-2 text-xs text-description">
                        Accepted range: 3 - 7200 seconds. Default 10 seconds.
                    </p>
                </div>
            </div>
            
            <!-- Password field - initially hidden -->
            <div id="password_field" class="grid grid-cols-1 lg:grid-cols-2 gap-4 hidden">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Profile Password</h3>
                    <p class="text-sm text-description">
                        This analysis profile requires password authentication. Enter the password to proceed with the analysis.
                    </p>
                </div>
                <div>
                    <input 
                        type="password" 
                        id="password" 
                        name="password" 
                        placeholder="Enter profile password"
                        class="input"
                    >
                </div>
            </div>
            
            <!-- Malware path field -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Malware Execution Path</h3>
                    <p class="text-sm text-description">
                        The target directory path where the malware should be initially placed on the virtual machine
                    </p>
                </div>
                <div>
                    <input 
                        type="text" 
                        id="drop_path" 
                        name="drop_path"
                        placeholder="C:\Users\Public\Downloads\"
                        class="input"
                    >
                    <p class="mt-2 text-xs text-description">
                        <strong>Default:</strong> <code>C:\Users\Public\Downloads\</code><br>
                        <strong>Whitelisted execution:</strong> <code>C:\RedEdr\data\</code>
                    </p>
                </div>
            </div>

            <!-- Horizontal Divider -->
            <div class="border-t border-divider"></div>

            <!-- Submission Comment -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Comment</h3>
                    <p class="text-sm text-description">
                        [Optional] description of what you're testing or trying to achieve with this analysis. Include your hypothesis, what detection capabilities you're evaluating, or research objectives
                    </p>
                </div>
                <div>
                    <textarea 
                        id="submission_comment" 
                        name="comment" 
                        rows="3"
                        placeholder="Check if sgn works against MDE"
                        class="input"
                    ></textarea>
                </div>
            </div>

            <!-- Project -->
            <div class="grid grid-cols-1 lg:grid-cols-2 gap-4">
                <div>
                    <h3 class="text-sm font-medium text-label mb-1">Submission Project</h3>
                    <p class="text-sm text-description">
                        [Optional] project name to group related submissions together
                    </p>
                </div>
                <div>
                    <input 
                        type="text" 
                        id="project" 
                        name="project" 
                        placeholder="metasploit research A"
                        class="input"
                    >
                </div>
            </div>
            
            <div id="edr_template_info_container"></div>
            
            <div class="flex space-x-4 pt-4">
                <button 
                    type="submit" 
                    class="btn-primary flex-1"
                >
                    <span id="submission-loading" class="hidden">Creating...</span>
                    <span id="submission-button-text">Create Submission</span>
                </button>
                <a 
                    href="/files"
                    class="btn-gray"
                >
                    Cancel
                </a>
            </div>
        </form>
        
        <div id="create-submission-result" class="mt-4"></div>
    </div>

    <script>
        // Profile selection handler function
        function handleProfileSelection(profileSelect) {
            const selectedOption = profileSelect.options[profileSelect.selectedIndex];
            const description = selectedOption.getAttribute('title');
            
            // Handle password field visibility
            const requirePassword = selectedOption.getAttribute('data-require-password') === 'True';
            const passwordField = document.getElementById('password_field');
            if (requirePassword && profileSelect.value) {
                passwordField.classList.remove('hidden');
            } else {
                passwordField.classList.add('hidden');
            }
            
            // Remove any existing profile info
            const existingInfo = document.getElementById('profile_info');
            if (existingInfo) {
                existingInfo.remove();
            }
            
            // Add profile description if a profile is selected
            if (profileSelect.value && description) {
                const infoDiv = document.createElement('div');
                infoDiv.id = 'profile_info';
                infoDiv.className = 'mt-2 p-3 info-box rounded-md';
                infoDiv.innerHTML = `
                    <div class="flex">
                        <div class="flex-shrink-0">
                            <svg class="h-5 w-5 info-box-icon" fill="currentColor" viewBox="0 0 20 20">
                                <path fill-rule="evenodd" d="M18 10a8 8 0 11-16 0 8 8 0 0116 0zm-7-4a1 1 0 11-2 0 1 1 0 012 0zM9 9a1 1 0 000 2v3a1 1 0 001 1h1a1 1 0 100-2v-3a1 1 0 00-1-1H9z" clip-rule="evenodd"></path>
                            </svg>
                        </div>
                        <div class="ml-3">
                            <p class="mt-1 text-sm info-box-text">${description}</p>
                        </div>
                    </div>
                `;
                profileSelect.parentNode.appendChild(infoDiv);
            }
        }

        // Profile selection event listener
        document.getElementById('profile_name').addEventListener('change', function(e) {
            handleProfileSelection(e.target);
        });

        // Handle form submission
        document.getElementById('create-submission-form').addEventListener('htmx:beforeRequest', function(evt) {
            // Show loading state
            document.getElementById('submission-loading').classList.remove('hidden');
            document.getElementById('submission-button-text').classList.add('hidden');
        });

        // Handle response
        document.getElementById('create-submission-form').addEventListener('htmx:afterRequest', function(evt) {
            const xhr = evt.detail.xhr;
            const container = document.getElementById('create-submission-result');
            
            // Hide loading state
            document.getElementById('submission-loading').classList.add('hidden');
            document.getElementById('submission-button-text').classList.remove('hidden');
            
            if (xhr.status === 200) {
                const response = JSON.parse(xhr.responseText);
                container.innerHTML = `
                    <div class="bg-green-50 border border-green-200 rounded-md p-4">
                        <div class="flex">
                            <div class="flex-shrink-0">
                                <svg class="h-5 w-5 text-green-400" fill="currentColor" viewBox="0 0 20 20">
                                    <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z" clip-rule="evenodd"></path>
                                </svg>
                            </div>
                            <div class="ml-3">
                                <h3 class="text-sm font-medium text-green-800">Submission created successfully!</h3>
                                <div class="mt-2 text-sm text-green-700">
                                    <p><strong>Submission ID:</strong> ${response.id}</p>
                                    <p>Analysis has been started with status: <strong>${response.status}</strong></p>
                                    ${response.edr_template ? '<p><strong>EDR Template:</strong> ' + response.edr_template + '</p>' : ''}
                                    ${response.project ? '<p><strong>Project:</strong> ' + response.project + '</p>' : ''}
                                    ${response.comment ? '<p><strong>Comment:</strong> ' + response.comment + '</p>' : ''}
                                </div>
                                <div class="mt-4">
                                    <div class="flex space-x-2">
                                        <a href="/files" class="btn-success text-sm inline-block">
                                            Back to Files
                                        </a>
                                        <a href="/submissions/${response.id}" class="btn-info text-sm inline-block">
                                            View Submission
                                        </a>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                `;
                // Reset form
                evt.detail.target.reset();
                document.getElementById('edr_template_info_container').innerHTML = '';
            } else {
                try {
                    const response = JSON.parse(xhr.responseText);
                    container.innerHTML = `
                        <div class="bg-red-50 border border-red-200 rounded-md p-4">
                            <div class="flex">
                                <div class="flex-shrink-0">
                                    <svg class="h-5 w-5 text-red-400" fill="currentColor" viewBox="0 0 20 20">
                                        <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zM8.707 7.293a1 1 0 00-1.414 1.414L8.586 10l-1.293 1.293a1 1 0 101.414 1.414L10 11.414l1.293 1.293a1 1 0 001.414-1.414L11.414 10l1.293-1.293a1 1 0 00-1.414-1.414L10 8.586 8.707 7.293z" clip-rule="evenodd"></path>
                                    </svg>
                                </div>
                                <div class="ml-3">
                                    <h3 class="text-sm font-medium text-red-800">Submission creation failed</h3>
                                    <div class="mt-2 text-sm text-red-700">
                                        <p>${response.detail || response.error || 'Unknown error occurred'}</p>
                                    </div>
                                </div>
                            </div>
                        </div>
                    `;
                } catch (e) {
                    container.innerHTML = `
                        <div class="bg-red-50 border border-red-200 rounded-md p-4">
                            <div class="flex">
                                <div class="flex-shrink-0">
                                    <svg class="h-5 w-5 text-red-400" fill="currentColor" viewBox="0 0 20 20">
                                        <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zM8.707 7.293a1 1 0 00-1.414 1.414L8.586 10l-1.293 1.293a1 1 0 101.414 1.414L10 11.414l1.293 1.293a1 1 0 001.414-1.414L11.414 10l1.293-1.293a1 1 0 00-1.414-1.414L10 8.586 8.707 7.293z" clip-rule="evenodd"></path>
                                    </svg>
                                </div>
                                <div class="ml-3">
                                    <h3 class="text-sm font-medium text-red-800">Submission creation failed</h3>
                                    <div class="mt-2 text-sm text-red-700">
                                        <p>Server error: ${xhr.status} - ${xhr.statusText}</p>
                                    </div>
                                </div>
                            </div>
                        </div>
                    `;
                }
            }
        });

        // Initialize profile selection on page load
        document.addEventListener('DOMContentLoaded', function() {
            const profileSelect = document.getElementById('profile_name');
            if (profileSelect && profileSelect.value) {
                handleProfileSelection(profileSelect);
            }
        });
    </script>
    {% else %}
    <div class="text-center text-red-500">
        <p>Error: Could not load file information.</p>
        <a href="/files" class="link-info hover:underline mt-4 inline-block">← Back to Files</a>
    </div>
    {% endif %}
</div>
{% endblock %}