lmxopcua/src/Server/ZB.MOM.WW.OtOpcUa.Admin/Components/Pages/Reservations.razor

@page "/reservations"
@using System.Security.Claims
@using Microsoft.AspNetCore.Authorization
@using Microsoft.AspNetCore.Components.Authorization
@using Microsoft.AspNetCore.Components.Web
@using ZB.MOM.WW.OtOpcUa.Admin.Services
@using ZB.MOM.WW.OtOpcUa.Configuration.Entities
@attribute [Authorize(Policy = "CanPublish")]
@rendermode RenderMode.InteractiveServer
@inject ReservationService ReservationSvc

<h1 class="page-title">External-ID reservations</h1>
<p class="text-muted">
    Fleet-wide ZTag + SAPID reservation state (decision #124). Releasing a reservation is a
    FleetAdmin-only audit-logged action — only release when the physical asset is permanently
    retired and its ID needs to be reused by a different equipment.
</p>

<section class="panel rise" style="animation-delay:.02s">
    <div class="panel-head">Active</div>
    @if (_active is null) { <p class="px-3 py-2">Loading…</p> }
    else if (_active.Count == 0) { <p class="px-3 py-2 text-muted">No active reservations.</p> }
    else
    {
        <div class="table-wrap">
            <table class="data-table">
                <thead><tr><th>Kind</th><th>Value</th><th>EquipmentUuid</th><th>Cluster</th><th>First published</th><th>Last published</th><th></th></tr></thead>
                <tbody>
                @foreach (var r in _active)
                {
                    <tr>
                        <td><span class="mono">@r.Kind</span></td>
                        <td><span class="mono">@r.Value</span></td>
                        <td><span class="mono">@r.EquipmentUuid</span></td>
                        <td>@r.ClusterId</td>
                        <td><small>@r.FirstPublishedAt.ToString("u") by @r.FirstPublishedBy</small></td>
                        <td><small>@r.LastPublishedAt.ToString("u")</small></td>
                        <td><button class="btn btn-sm btn-outline-danger" @onclick='() => OpenReleaseDialog(r)'>Release…</button></td>
                    </tr>
                }
                </tbody>
            </table>
        </div>
    }
</section>

<section class="panel rise" style="animation-delay:.08s">
    <div class="panel-head">Released (most recent 100)</div>
    @if (_released is null) { <p class="px-3 py-2">Loading…</p> }
    else if (_released.Count == 0) { <p class="px-3 py-2 text-muted">No released reservations yet.</p> }
    else
    {
        <div class="table-wrap">
            <table class="data-table">
                <thead><tr><th>Kind</th><th>Value</th><th>Released at</th><th>By</th><th>Reason</th></tr></thead>
                <tbody>
                @foreach (var r in _released)
                {
                    <tr><td><span class="mono">@r.Kind</span></td><td><span class="mono">@r.Value</span></td><td>@r.ReleasedAt?.ToString("u")</td><td>@r.ReleasedBy</td><td>@r.ReleaseReason</td></tr>
                }
                </tbody>
            </table>
        </div>
    }
</section>

@if (_releasing is not null)
{
    <div class="modal show d-block" tabindex="-1" style="background-color: rgba(0,0,0,0.5);">
        <div class="modal-dialog">
            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title">Release reservation <span class="mono">@_releasing.Kind</span> = <span class="mono">@_releasing.Value</span></h5>
                </div>
                <div class="modal-body">
                    <p>This makes the (Kind, Value) pair available for a different EquipmentUuid in a future publish. Audit-logged.</p>
                    <label class="form-label">Reason (required)</label>
                    <textarea class="form-control form-control-sm" rows="3" @bind="_reason"></textarea>
                    @if (_error is not null) { <section class="panel notice mt-2">@_error</section> }
                </div>
                <div class="modal-footer">
                    <button class="btn btn-secondary" @onclick='() => _releasing = null'>Cancel</button>
                    <button class="btn btn-danger" @onclick="ReleaseAsync" disabled="@_busy">Release</button>
                </div>
            </div>
        </div>
    </div>
}

@code {
    // Admin-008: capture the signed-in operator so the release is attributed correctly in the
    // ExternalIdReservation.ReleasedBy column and the ConfigAuditLog.Principal column.
    [CascadingParameter] private Task<AuthenticationState>? AuthState { get; set; }

    private List<ExternalIdReservation>? _active;
    private List<ExternalIdReservation>? _released;
    private ExternalIdReservation? _releasing;
    private string _reason = string.Empty;
    private bool _busy;
    private string? _error;

    protected override async Task OnInitializedAsync() => await ReloadAsync();

    private async Task ReloadAsync()
    {
        _active = await ReservationSvc.ListActiveAsync(CancellationToken.None);
        _released = await ReservationSvc.ListReleasedAsync(CancellationToken.None);
    }

    private void OpenReleaseDialog(ExternalIdReservation r)
    {
        _releasing = r;
        _reason = string.Empty;
        _error = null;
    }

    private async Task ReleaseAsync()
    {
        if (_releasing is null || string.IsNullOrWhiteSpace(_reason)) { _error = "Reason is required"; return; }

        // Resolve the operator principal. The page is [Authorize(Policy="CanPublish")] so
        // AuthState will be available with an authenticated user; fall back to "unknown" only
        // as a defensive last resort (should never happen in practice).
        var user = AuthState is not null ? (await AuthState).User : null;
        var operatorName = user?.FindFirstValue(ClaimTypes.Name)
            ?? user?.FindFirstValue(ClaimTypes.NameIdentifier)
            ?? "unknown";

        _busy = true;
        try
        {
            await ReservationSvc.ReleaseAsync(
                _releasing.Kind.ToString(), _releasing.Value, _reason, operatorName, CancellationToken.None);
            _releasing = null;
            await ReloadAsync();
        }
        catch (Exception ex) { _error = ex.Message; }
        finally { _busy = false; }
    }
}