{% extends "base.html" %}
{% block title %}Legion{% endblock %}
{% block content %}
<main class="grid">
    {% set credential_capture = snapshot.get('credential_capture', {}) %}
    <div class="state-cache" aria-hidden="true">
        <input id="project-open-path" type="text">
        <input id="project-save-path" type="text">
        <input id="project-save-replace" type="checkbox" checked>
        <input id="project-restore-zip-file" type="file" accept=".zip,application/zip">
        <input id="targets-file-path" type="text">
        <input id="nmap-xml-path" type="text">
        <input id="nmap-xml-run-actions" type="checkbox">
    </div>

    <section class="panel panel-full ribbon-panel">
        <div class="ribbon">
            <div class="ribbon-column ribbon-main-column">
                <div class="ribbon-group ribbon-menu-group">
                <div class="ribbon-menu" data-ribbon-menu="workspace">
                    <button
                        id="ribbon-workspace-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Workspace lifecycle options"
                        data-ribbon-menu-toggle="workspace"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-folder-tree" aria-hidden="true"></i>
                        <span>Workspace</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-workspace-menu" class="ribbon-submenu" role="menu" aria-label="Workspace options">
                        <button id="ribbon-launch-wizard-button" class="ribbon-submenu-item" type="button" title="Run the workspace startup wizard">Workspace Wizard</button>
                        <button id="ribbon-workspace-new-action-button" class="ribbon-submenu-item" type="button" title="Create a new temporary workspace">New Workspace</button>
                        <button id="ribbon-workspace-open-action-button" class="ribbon-submenu-item" type="button" title="Open an existing .legion workspace">Open Workspace</button>
                        <button id="ribbon-workspace-save-action-button" class="ribbon-submenu-item" type="button" title="Save using the current workspace path">Save</button>
                        <button id="ribbon-workspace-save-as-action-button" class="ribbon-submenu-item" type="button" title="Choose a destination path and save">Save As</button>
                        <button id="ribbon-workspace-download-action-button" class="ribbon-submenu-item" type="button" title="Download a ZIP containing session and tool output folders">Download</button>
                        <button id="ribbon-workspace-restore-action-button" class="ribbon-submenu-item" type="button" title="Restore a previously downloaded session ZIP and open it">Restore ZIP</button>
                    </div>
                </div>
                <div class="ribbon-menu" data-ribbon-menu="import">
                    <button
                        id="ribbon-import-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Import options"
                        data-ribbon-menu-toggle="import"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-file-import" aria-hidden="true"></i>
                        <span>Import Data</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-import-menu" class="ribbon-submenu" role="menu" aria-label="Import options">
                        <button id="ribbon-import-xml-action-button" class="ribbon-submenu-item" type="button" title="Import scan results from an Nmap XML file">Import XML</button>
                        <button id="ribbon-import-targets-action-button" class="ribbon-submenu-item" type="button" title="Import target hosts/subnets from a text file">Import Targets TXT</button>
                    </div>
                </div>
                <div class="ribbon-menu" data-ribbon-menu="export">
                    <button
                        id="ribbon-export-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Export options"
                        data-ribbon-menu-toggle="export"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-file-export" aria-hidden="true"></i>
                        <span>Export Data</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-export-menu" class="ribbon-submenu" role="menu" aria-label="Export options">
                        <button id="ribbon-export-json-action-button" class="ribbon-submenu-item" type="button" title="Export workspace data as JSON">Export JSON</button>
                        <button id="ribbon-export-csv-action-button" class="ribbon-submenu-item" type="button" title="Export workspace data as CSV">Export CSV</button>
                        <button id="ribbon-export-hosts-csv-action-button" class="ribbon-submenu-item" type="button" title="Export hosts only as CSV">Export Hosts CSV</button>
                        <button id="ribbon-export-project-report-json-action-button" class="ribbon-submenu-item" type="button" title="Export full project report as JSON">Export Project Report JSON</button>
                        <button id="ribbon-export-project-report-md-action-button" class="ribbon-submenu-item" type="button" title="Export full project report as Markdown">Export Project Report Markdown</button>
                        <button id="ribbon-export-project-report-push-action-button" class="ribbon-submenu-item" type="button" title="Push full project report to configured delivery endpoint">Push Project Report</button>
                        <button id="ribbon-export-ai-reports-action-button" class="ribbon-submenu-item" type="button" title="Download all host reports (JSON and Markdown) as a ZIP">Export Host Reports ZIP</button>
                    </div>
                </div>
                <div class="ribbon-menu" data-ribbon-menu="scans">
                    <button
                        id="ribbon-scans-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Scan actions"
                        data-ribbon-menu-toggle="scans"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-magnifying-glass-chart" aria-hidden="true"></i>
                        <span>Scans</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-scans-menu" class="ribbon-submenu" role="menu" aria-label="Scan options">
                        <button id="ribbon-scan-add-action-button" class="ribbon-submenu-item" type="button" title="Open the Nmap scan wizard">Add Scan</button>
                        <button id="ribbon-scan-manual-action-button" class="ribbon-submenu-item" type="button" title="Run a manual tool against a host and port">Manual Scan</button>
                    </div>
                </div>
                <div class="ribbon-menu" data-ribbon-menu="misc">
                    <button
                        id="ribbon-misc-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Miscellaneous workspace actions"
                        data-ribbon-menu-toggle="misc"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-toolbox" aria-hidden="true"></i>
                        <span>Misc</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-misc-menu" class="ribbon-submenu" role="menu" aria-label="Misc options">
                        <button id="ribbon-misc-host-selection-action-button" class="ribbon-submenu-item" type="button" title="Open host selection and notes">Host Selection</button>
                        <button id="ribbon-misc-script-cve-action-button" class="ribbon-submenu-item" type="button" title="Open Add Script/CVE form">Add Script/CVE</button>
                    </div>
                </div>
                <div class="ribbon-menu" data-ribbon-menu="logging">
                    <button
                        id="ribbon-logging-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="View logs and diagnostics"
                        data-ribbon-menu-toggle="logging"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-clipboard-list" aria-hidden="true"></i>
                        <span>Logging</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-logging-menu" class="ribbon-submenu" role="menu" aria-label="Logging options">
                        <button id="ribbon-logging-jobs-button" class="ribbon-submenu-item" type="button" title="View background jobs">Jobs</button>
                        <button id="ribbon-logging-submitted-scans-button" class="ribbon-submenu-item" type="button" title="View submitted scan history">Submitted Scans</button>
                        <button id="ribbon-logging-scheduler-decisions-button" class="ribbon-submenu-item" type="button" title="View scheduler decisions">Scheduler Decisions</button>
                        <button id="ribbon-logging-ai-provider-button" class="ribbon-submenu-item" type="button" title="View provider request and response logs">Provider Logs</button>
                    </div>
                </div>
                <button
                    id="ribbon-credential-capture-toggle-button"
                    class="ribbon-btn ribbon-btn-toggle{% if credential_capture.get('panel_enabled', True) %} is-active{% endif %}"
                    type="button"
                    title="{{ 'Hide' if credential_capture.get('panel_enabled', True) else 'Show' }} Responder / NTLM Relay panel"
                    aria-pressed="{{ 'true' if credential_capture.get('panel_enabled', True) else 'false' }}"
                >
                    <i class="fa-solid fa-user-secret" aria-hidden="true"></i>
                    <span>Responder / Relay</span>
                </button>
                <div class="ribbon-menu" data-ribbon-menu="settings">
                    <button
                        id="ribbon-settings-menu-button"
                        class="ribbon-btn ribbon-btn-menu"
                        type="button"
                        title="Application and scheduler settings"
                        data-ribbon-menu-toggle="settings"
                        aria-haspopup="menu"
                        aria-expanded="false"
                    >
                        <i class="fa-solid fa-gear" aria-hidden="true"></i>
                        <span>Settings</span>
                        <small class="ribbon-caret"><i class="fa-solid fa-chevron-down" aria-hidden="true"></i></small>
                    </button>
                    <div id="ribbon-settings-menu" class="ribbon-submenu" role="menu" aria-label="Settings options">
                        <button id="ribbon-scheduler-settings-button" class="ribbon-submenu-item" type="button" title="Open scheduler settings">Scheduler</button>
                        <button id="ribbon-interface-settings-button" class="ribbon-submenu-item" type="button" title="Open interface settings">Interface</button>
                        <button id="ribbon-device-category-settings-button" class="ribbon-submenu-item" type="button" title="Open device category settings">Device Categories</button>
                        <button id="ribbon-report-provider-settings-button" class="ribbon-submenu-item" type="button" title="Open project report provider settings">Report Provider</button>
                        <button id="ribbon-app-settings-button" class="ribbon-submenu-item" type="button" title="Open and edit legion.conf settings">App Settings</button>
                    </div>
                </div>
                </div>
                <div class="ribbon-lower-row">
                    <div class="ribbon-group ribbon-project-group" aria-label="Project summary">
                        <div class="ribbon-project-header">
                            <h2>Project</h2>
                            <p id="project-name">{{ snapshot.project.name }}</p>
                        </div>
                        <div class="ribbon-project-body">
                            <div class="scheduler-meta ribbon-project-meta">
                                <span class="chip">Type: <strong id="project-kind">{{ "temporary" if snapshot.project.is_temporary else "saved" }}</strong></span>
                                <span class="chip">Scheduler: <strong id="scheduler-mode">{{ snapshot.scheduler.mode }}</strong></span>
                                <span class="chip">Engagement: <strong id="scheduler-goal">{{ snapshot.scheduler.engagement_policy.preset_label if snapshot.scheduler.engagement_policy else snapshot.scheduler.goal_profile }}</strong></span>
                                <span class="chip">Preapproved Families: <strong id="scheduler-families">{{ snapshot.scheduler.preapproved_families_count }}</strong></span>
                            </div>
                            <div class="ribbon-project-lines">
                                <p class="meta-note" id="project-output-folder">{{ snapshot.project.output_folder }}</p>
                                <p class="meta-note" id="project-running-folder">{{ snapshot.project.running_folder }}</p>
                                <p class="meta-note">Action status: <span id="action-status">Idle</span></p>
                                <p class="meta-note">Workspace status: <span id="workspace-status">Idle</span></p>
                            </div>
                        </div>
                    </div>
                    <div class="ribbon-group ribbon-rationale-group" aria-label="Scheduler decision rationale">
                        <div class="ribbon-rationale-header">
                            <div>
                                <h2>Decision Rationale</h2>
                                <p><span id="decision-rationale-count">{{ snapshot.scheduler_rationale_feed | length }}</span> recent items</p>
                            </div>
                        </div>
                        <div class="ribbon-rationale-body" id="decision-rationale-body">
                            {% if snapshot.scheduler_rationale_feed %}
                                {% for entry in snapshot.scheduler_rationale_feed %}
                                    <article class="rationale-entry">
                                        <div class="rationale-entry-top">
                                            <div class="rationale-entry-heading">
                                                <p class="rationale-entry-prefix">{{ entry.host_ip if entry.host_ip else "Project-wide" }}{% if entry.port %}:{{ entry.port }}{% endif %}{% if entry.protocol %}/{{ entry.protocol }}{% endif %}</p>
                                                <strong class="rationale-entry-title">{{ entry.headline }}</strong>
                                            </div>
                                            <span class="rationale-entry-time">{{ entry.timestamp }}</span>
                                        </div>
                                        {% if entry.tags %}
                                            <div class="rationale-entry-tags">
                                                {% for tag in entry.tags %}
                                                    <span class="chip rationale-chip">{{ tag }}</span>
                                                {% endfor %}
                                            </div>
                                        {% endif %}
                                        <p class="rationale-entry-summary">{{ entry.summary }}</p>
                                        {% if entry.details %}
                                            <div class="rationale-entry-details">
                                                {% for detail in entry.details %}
                                                    <div class="rationale-entry-line">{{ detail }}</div>
                                                {% endfor %}
                                            </div>
                                        {% endif %}
                                    </article>
                                {% endfor %}
                            {% else %}
                                <p class="meta-note rationale-empty">Scheduler rationale will appear here as tools are ranked, suppressed, and executed.</p>
                            {% endif %}
                        </div>
                    </div>
                    <div class="ribbon-group ribbon-summary-group" aria-label="Workspace summary">
                        <div class="ribbon-stat-card">
                            <span class="ribbon-stat-label">Hosts</span>
                            <strong id="stat-hosts" class="ribbon-stat-value">{{ snapshot.summary.hosts }}</strong>
                        </div>
                        <div class="ribbon-stat-card">
                            <span class="ribbon-stat-label">Open Ports</span>
                            <strong id="stat-open-ports" class="ribbon-stat-value">{{ snapshot.summary.open_ports }}</strong>
                        </div>
                        <div class="ribbon-stat-card">
                            <span class="ribbon-stat-label">Services</span>
                            <strong id="stat-services" class="ribbon-stat-value">{{ snapshot.summary.services }}</strong>
                        </div>
                        <div class="ribbon-stat-card">
                            <span class="ribbon-stat-label">Running Jobs</span>
                            <strong id="stat-running" class="ribbon-stat-value">{{ snapshot.summary.running_processes }}</strong>
                        </div>
                        <div class="ribbon-stat-card">
                            <span class="ribbon-stat-label">Finished Jobs</span>
                            <strong id="stat-finished" class="ribbon-stat-value">{{ snapshot.summary.finished_processes }}</strong>
                        </div>
                    </div>
                </div>
            </div>
            <div class="ribbon-group ribbon-process-group" aria-label="Process activity">
                <div class="ribbon-process-header">
                    <div class="ribbon-process-meta">
                        <span class="ribbon-process-icon" aria-hidden="true">
                            <i class="fa-solid fa-terminal" aria-hidden="true"></i>
                        </span>
                        <span class="sr-only">Processes</span>
                        <strong id="process-count" class="ribbon-process-count">{{ snapshot.processes | length }}</strong>
                    </div>
                    <div class="process-actions ribbon-process-actions">
                        <button
                            id="process-clear-finished-button"
                            class="icon-btn"
                            type="button"
                            title="Hide Finished/Issues"
                            aria-label="Hide Finished/Issues"
                        >
                            <i class="fa-solid fa-broom" aria-hidden="true"></i>
                        </button>
                        <button
                            id="process-clear-all-button"
                            class="icon-btn"
                            type="button"
                            title="Hide All Non-Running"
                            aria-label="Hide All Non-Running"
                        >
                            <i class="fa-solid fa-eye-slash" aria-hidden="true"></i>
                        </button>
                    </div>
                </div>
                <div class="table-wrap ribbon-process-table-wrap">
                    <table>
                        <thead>
                        <tr>
                            <th>ID</th>
                            <th>Name</th>
                            <th>Target</th>
                            <th>Status</th>
                            <th>%</th>
                            <th>ETA</th>
                            <th>Actions</th>
                        </tr>
                        </thead>
                        <tbody id="processes-body"></tbody>
                    </table>
                </div>
            </div>
        </div>
    </section>

    <section id="credential-capture-panel" class="panel panel-full credential-capture-panel"{% if not credential_capture.get('panel_enabled', True) %} hidden{% endif %}>
        <div class="panel-header credential-capture-header">
            <div class="credential-capture-heading">
                <h2>Credential Capture</h2>
                <p>
                    <span id="credential-capture-count">{{ credential_capture.get('capture_count', 0) }}</span> captures |
                    <span id="credential-capture-hash-count">{{ credential_capture.get('unique_hash_count', 0) }}</span> unique hashes
                </p>
            </div>
            <div class="modal-actions credential-capture-header-actions">
                <button id="credential-capture-open-credentials-button" type="button">Credentials</button>
                <button id="credential-capture-open-config-button" type="button">Configuration</button>
            </div>
        </div>
        <div class="credential-capture-grid">
            <article class="credential-capture-card">
                <div class="credential-capture-card-header">
                    <div>
                        <h3>Responder</h3>
                        <p id="credential-capture-responder-status">{{ credential_capture.get('responder', {}).get('session', {}).get('status', 'Idle') }}</p>
                    </div>
                    <label class="credential-capture-inline-select">
                        Mode
                        <select id="credential-capture-responder-mode-quick">
                            <option value="active" {% if credential_capture.get('responder', {}).get('config', {}).get('mode', 'active') != 'passive' %}selected{% endif %}>active</option>
                            <option value="passive" {% if credential_capture.get('responder', {}).get('config', {}).get('mode', '') == 'passive' %}selected{% endif %}>passive</option>
                        </select>
                    </label>
                </div>
                <p id="credential-capture-responder-meta" class="meta-note">
                    Interface: {{ credential_capture.get('responder', {}).get('config', {}).get('interface_name', '') or 'not configured' }}
                </p>
                <div class="modal-actions">
                    <button id="credential-capture-responder-start-button" type="button">Start</button>
                    <button id="credential-capture-responder-stop-button" type="button">Stop</button>
                    <button id="credential-capture-responder-view-log-button" type="button">View Log</button>
                    <button id="credential-capture-responder-download-log-button" type="button">Download Log</button>
                </div>
            </article>
            <article class="credential-capture-card">
                <div class="credential-capture-card-header">
                    <div>
                        <h3>ntlmrelayx</h3>
                        <p id="credential-capture-ntlmrelayx-status">{{ credential_capture.get('ntlmrelayx', {}).get('session', {}).get('status', 'Idle') }}</p>
                    </div>
                </div>
                <p id="credential-capture-ntlmrelayx-meta" class="meta-note">
                    Target: {{ credential_capture.get('ntlmrelayx', {}).get('config', {}).get('target', '') or credential_capture.get('ntlmrelayx', {}).get('config', {}).get('targets_file', '') or 'not configured' }}
                </p>
                <div class="modal-actions">
                    <button id="credential-capture-ntlmrelayx-start-button" type="button">Start</button>
                    <button id="credential-capture-ntlmrelayx-stop-button" type="button">Stop</button>
                    <button id="credential-capture-ntlmrelayx-view-log-button" type="button">View Log</button>
                    <button id="credential-capture-ntlmrelayx-download-log-button" type="button">Download Log</button>
                </div>
            </article>
            <article class="credential-capture-card credential-capture-recent-card">
                <div class="credential-capture-card-header">
                    <div>
                        <h3>Recent Captures</h3>
                        <p class="meta-note">Latest observed hashes and credentials.</p>
                    </div>
                </div>
                <div id="credential-capture-recent-list" class="credential-capture-recent-list">
                    {% if credential_capture.get('recent_captures') %}
                        {% for capture in credential_capture.get('recent_captures', []) %}
                            <div class="credential-capture-recent-item">
                                <strong>{{ capture.get('username', '') or 'unknown-user' }}</strong>
                                <span>{{ capture.get('source', '') or capture.get('tool', '') }}</span>
                                <small>{{ capture.get('capturedAt', '') }}</small>
                            </div>
                        {% endfor %}
                    {% else %}
                        <p class="meta-note credential-capture-empty">No captured credentials yet.</p>
                    {% endif %}
                </div>
            </article>
        </div>
    </section>

    <section id="graph-workspace-panel" class="panel panel-full graph-panel" data-graph-enabled="{{ 'true' if graph_workspace_enabled else 'false' }}"{% if not graph_workspace_enabled %} hidden{% endif %}>
        <div class="panel-header graph-panel-header">
            <div class="graph-panel-heading">
                <h2>Graph Workspace</h2>
                <p id="graph-workspace-summary">0 nodes shown | 0 edges shown</p>
            </div>
            <div class="scheduler-actions graph-panel-actions">
                <button
                    id="graph-filters-toggle-button"
                    class="graph-icon-button"
                    type="button"
                    title="Show Filters"
                    aria-label="Show Filters"
                    aria-expanded="false"
                    aria-controls="graph-filters-panel"
                >
                    <i class="fa-solid fa-sliders" aria-hidden="true"></i>
                </button>
                <button
                    id="graph-panel-toggle-button"
                    class="panel-menu-button"
                    type="button"
                    title="Hide Graph Workspace"
                    aria-label="Hide Graph Workspace"
                    aria-expanded="true"
                    aria-controls="graph-panel-body"
                >
                    <i class="fa-solid fa-chevron-down" aria-hidden="true"></i>
                    <span class="sr-only">Toggle Graph Workspace</span>
                </button>
            </div>
        </div>
        <div id="graph-panel-body">
        <div id="graph-workspace-disabled-state" hidden>
            <p class="meta-note">Graph workspace is disabled in Interface Settings.</p>
        </div>
        <div id="graph-workspace-shell">
        <div id="graph-filters-panel" class="graph-filters-panel" hidden>
            <div class="graph-toolbar">
                <label>
                    View
                    <select id="graph-view-select">
                        <option value="attack_surface" selected>attack surface</option>
                        <option value="host_service_topology">host/service topology</option>
                        <option value="web_application_map">web application map</option>
                        <option value="credential_identity_session">credential / identity / session</option>
                        <option value="exploitation_chain">exploitation chain</option>
                    </select>
                </label>
                <label>
                    Group By
                    <select id="graph-group-select">
                        <option value="finding" selected>finding</option>
                        <option value="category">device category</option>
                        <option value="service">service</option>
                        <option value="host">host</option>
                        <option value="domain">domain</option>
                        <option value="subnet">subnet</option>
                    </select>
                </label>
                <label>
                    Host Focus
                    <select id="graph-host-filter">
                        <option value="">all hosts</option>
                    </select>
                </label>
                <label>
                    Node Type
                    <select id="graph-node-type-filter">
                        <option value="">all node types</option>
                    </select>
                </label>
                <label>
                    Edge Type
                    <select id="graph-edge-type-filter">
                        <option value="">all edge types</option>
                    </select>
                </label>
                <label>
                    Provenance
                    <select id="graph-source-kind-filter">
                        <option value="">all provenance</option>
                    </select>
                </label>
                <label>
                    Severity
                    <select id="graph-severity-filter">
                        <option value="">all severities</option>
                    </select>
                </label>
                <label>
                    Pack
                    <select id="graph-pack-filter">
                        <option value="">all packs</option>
                    </select>
                </label>
                <label>
                    Density Mode
                    <select id="graph-render-mode-select">
                        <option value="auto" selected>auto</option>
                        <option value="graph">full graph</option>
                        <option value="summary">summary graph</option>
                        <option value="matrix">matrix</option>
                    </select>
                </label>
                <label>
                    Time Window
                    <select id="graph-time-window-filter">
                        <option value="all">all time</option>
                        <option value="24h">last 24h</option>
                        <option value="7d">last 7d</option>
                        <option value="30d">last 30d</option>
                        <option value="90d">last 90d</option>
                    </select>
                </label>
                <label>
                    Search
                    <input id="graph-search-input" type="search" placeholder="node, edge, evidence, host">
                </label>
                <label class="graph-confidence-label">
                    Min Confidence
                    <input id="graph-min-confidence" type="range" min="0" max="100" step="5" value="0">
                    <span id="graph-min-confidence-value">0</span>
                </label>
                <label class="graph-confidence-label">
                    Zoom
                    <input id="graph-zoom-slider" type="range" min="10" max="400" step="10" value="70">
                    <span id="graph-zoom-value">70%</span>
                </label>
                <label class="checkbox graph-checkbox">
                    <input id="graph-hide-ai-suggested" type="checkbox">
                    Hide AI-suggested
                </label>
                <label class="checkbox graph-checkbox">
                    <input id="graph-hide-nmap-xml-artifacts" type="checkbox">
                    Hide Nmap XML artifacts
                </label>
            </div>
        </div>
        <div id="graph-workspace-shell" class="graph-workspace graph-workspace-detail-floating">
            <div class="graph-canvas-panel">
                <div id="graph-workspace-empty" class="graph-empty-state" hidden>No graph data matches the current filters.</div>
                <div class="graph-canvas-scroll">
                    <div id="graph-matrix-view" class="graph-matrix-view" hidden></div>
                    <svg
                        id="graph-workspace-canvas"
                        class="graph-canvas"
                        viewBox="0 0 1600 900"
                        role="img"
                        aria-label="Evidence graph workspace"
                    ></svg>
                </div>
                <div id="graph-detail-floating-layer" class="graph-detail-floating-layer" hidden></div>
            </div>
            <aside id="graph-sidebar" class="graph-sidebar" hidden>
                <div id="graph-detail-dock-slot">
                    <section id="graph-detail-panel" class="graph-detail-panel" hidden>
                        <div class="panel-header graph-detail-header">
                            <div class="graph-detail-heading">
                                <h3>Graph Detail</h3>
                                <p id="graph-detail-caption">Select a node or edge</p>
                            </div>
                            <div class="scheduler-actions graph-detail-shell-actions">
                                <button
                                    id="graph-expand-selection-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Expand Selected"
                                    aria-label="Expand Selected"
                                    hidden
                                >
                                    <i class="fa-solid fa-expand" aria-hidden="true"></i>
                                </button>
                                <button
                                    id="graph-collapse-expanded-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Collapse Expanded"
                                    aria-label="Collapse Expanded"
                                    hidden
                                >
                                    <i class="fa-solid fa-compress" aria-hidden="true"></i>
                                </button>
                                <button
                                    id="graph-focus-selection-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Focus Selected"
                                    aria-label="Focus Selected"
                                >
                                    <i class="fa-solid fa-crosshairs" aria-hidden="true"></i>
                                </button>
                                <button
                                    id="graph-pin-toggle-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Pin Node"
                                    aria-label="Pin Node"
                                >
                                    <i class="fa-solid fa-thumbtack" aria-hidden="true"></i>
                                </button>
                                <button
                                    id="graph-detail-dock-toggle-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Dock Panel"
                                    aria-label="Dock Panel"
                                >
                                    <i class="fa-solid fa-table-columns" aria-hidden="true"></i>
                                </button>
                                <button
                                    id="graph-detail-close-button"
                                    class="modal-close-btn graph-detail-close-btn"
                                    type="button"
                                    title="Close"
                                    aria-label="Close"
                                    hidden
                                >
                                    <i class="fa-solid fa-xmark" aria-hidden="true"></i>
                                </button>
                            </div>
                        </div>
                        <div id="graph-selection-badges" class="graph-selection-badges"></div>
                        <dl id="graph-detail-fields" class="graph-detail-list"></dl>
                        <div id="graph-host-actions-block" class="graph-detail-block" hidden>
                            <h4>Host Actions</h4>
                            <div id="graph-host-actions" class="host-actions graph-host-actions"></div>
                        </div>
                        <div id="graph-port-actions-block" class="graph-detail-block" hidden>
                            <h4>Port Actions</h4>
                            <div id="graph-port-actions" class="graph-node-actions"></div>
                        </div>
                        <div id="graph-service-actions-block" class="graph-detail-block" hidden>
                            <h4>Service Actions</h4>
                            <div id="graph-service-actions" class="graph-node-actions"></div>
                        </div>
                        <div id="graph-subnet-actions-block" class="graph-detail-block" hidden>
                            <h4>Subnet Actions</h4>
                            <div id="graph-subnet-actions" class="host-actions graph-host-actions"></div>
                        </div>
                        <div id="graph-screenshot-actions-block" class="graph-detail-block" hidden>
                            <h4>Screenshot Actions</h4>
                            <div id="graph-screenshot-actions" class="host-actions graph-host-actions"></div>
                        </div>
                        <div class="graph-detail-block">
                            <h4>Evidence</h4>
                            <ul id="graph-detail-evidence" class="graph-detail-evidence"></ul>
                        </div>
                        <div class="graph-detail-block">
                            <h4>Related Content</h4>
                            <p id="graph-detail-content-status" class="text-muted">No related artifacts or screenshots.</p>
                            <div id="graph-detail-content-list" class="graph-content-list"></div>
                        </div>
                        <div class="graph-detail-block">
                            <h4>Properties</h4>
                            <pre id="graph-detail-properties" class="graph-detail-properties">No graph selection</pre>
                        </div>
                        <div class="graph-detail-block">
                            <h4>Notes</h4>
                            <div id="graph-annotations-list" class="graph-annotations-list"></div>
                            <div class="scheduler-actions graph-detail-actions">
                                <button
                                    id="graph-note-open-button"
                                    class="graph-icon-button"
                                    type="button"
                                    title="Add Note"
                                    aria-label="Add Note"
                                >
                                    <i class="fa-solid fa-note-sticky" aria-hidden="true"></i>
                                </button>
                            </div>
                        </div>
                    </section>
                </div>
            </aside>
        </div>
        <div class="graph-action-bar graph-action-footer">
            <div class="graph-action-group graph-action-footer-left graph-action-buttons">
                <button id="graph-refresh-button" class="graph-icon-button" type="button" title="Refresh Graph" aria-label="Refresh Graph">
                    <i class="fa-solid fa-rotate-right" aria-hidden="true"></i>
                </button>
                <button id="graph-rebuild-button" class="graph-icon-button" type="button" title="Rebuild Graph" aria-label="Rebuild Graph">
                    <i class="fa-solid fa-sitemap" aria-hidden="true"></i>
                </button>
                <button id="graph-export-json-button" class="graph-icon-button" type="button" title="Export JSON" aria-label="Export JSON">
                    <i class="fa-solid fa-file-code" aria-hidden="true"></i>
                </button>
                <button id="graph-export-graphml-button" class="graph-icon-button" type="button" title="Export GraphML" aria-label="Export GraphML">
                    <i class="fa-solid fa-diagram-project" aria-hidden="true"></i>
                </button>
                <button id="graph-export-svg-button" class="graph-icon-button" type="button" title="Export SVG" aria-label="Export SVG">
                    <i class="fa-solid fa-vector-square" aria-hidden="true"></i>
                </button>
                <button id="graph-export-png-button" class="graph-icon-button" type="button" title="Export PNG" aria-label="Export PNG">
                    <i class="fa-solid fa-image" aria-hidden="true"></i>
                </button>
            </div>
            <span class="graph-footer-separator" aria-hidden="true"></span>
            <div class="graph-action-group graph-action-group-separated">
                <label>
                    Saved Layout
                    <select id="graph-layout-select">
                        <option value="">auto layout</option>
                    </select>
                </label>
                <label>
                    Layout Name
                    <input id="graph-layout-name" type="text" value="default" placeholder="default">
                </label>
                <button id="graph-layout-tidy-button" class="graph-icon-button" type="button" title="Tidy Layout" aria-label="Tidy Layout">
                    <i class="fa-solid fa-broom" aria-hidden="true"></i>
                </button>
                <button id="graph-layout-save-button" class="graph-icon-button" type="button" title="Save Layout" aria-label="Save Layout">
                    <i class="fa-solid fa-floppy-disk" aria-hidden="true"></i>
                </button>
                <button id="graph-layout-reset-button" class="graph-icon-button" type="button" title="Reset Layout" aria-label="Reset Layout">
                    <i class="fa-solid fa-rotate-left" aria-hidden="true"></i>
                </button>
            </div>
            <span class="graph-footer-separator" aria-hidden="true"></span>
            <div class="graph-action-group graph-action-group-separated">
                <label>
                    Focus Depth
                    <select id="graph-focus-depth-select">
                        <option value="1" selected>1 hop</option>
                        <option value="2">2 hop</option>
                        <option value="3">3 hop</option>
                    </select>
                </label>
                <button id="graph-clear-focus-button" class="graph-icon-button" type="button" title="Clear Focus" aria-label="Clear Focus">
                    <i class="fa-solid fa-circle-xmark" aria-hidden="true"></i>
                </button>
            </div>
        </div>
        <div
            id="graph-resize-handle"
            class="graph-resize-handle"
            role="separator"
            aria-orientation="horizontal"
            aria-label="Resize graph workspace vertically"
            title="Drag to resize graph workspace"
        ></div>
        <p class="meta-note graph-status-note">Graph status: <span id="graph-workspace-status">Idle</span></p>
        </div>
        </div>
    </section>
    <section class="panel">
        <div class="panel-header">
            <h2>Hosts</h2>
            <div class="panel-header-actions">
                <label class="panel-inline-select">
                    Category
                    <select id="hosts-category-filter-select">
                        <option value="">all categories</option>
                    </select>
                </label>
                <p id="host-count">{{ snapshot.hosts | length }}</p>
                <button
                    id="hosts-reset-filter-button"
                    class="icon-btn"
                    type="button"
                    title="Reset host filters (show only up hosts)"
                    aria-label="Reset host filters (show only up hosts)"
                >
                    <i class="fa-solid fa-filter-circle-xmark" aria-hidden="true"></i>
                    <span class="sr-only">Reset host filters</span>
                </button>
                <div class="ribbon-menu panel-menu" data-ribbon-menu="hosts-panel">
                    <button
                        id="hosts-panel-menu-button"
                        class="panel-menu-button"
                        type="button"
                        data-ribbon-menu-toggle="hosts-panel"
                        aria-haspopup="menu"
                        aria-expanded="false"
                        title="Host options">
                        <i class="fa-solid fa-bars" aria-hidden="true"></i>
                        <span class="sr-only">Host options</span>
                    </button>
                    <div id="hosts-panel-menu" class="ribbon-submenu panel-submenu" role="menu" aria-label="Host options">
                        <div class="panel-submenu-group">
                            <p class="panel-submenu-title">Export</p>
                            <button id="hosts-export-json-button" class="ribbon-submenu-item" type="button" title="Export visible hosts as JSON">Export JSON</button>
                            <button id="hosts-export-csv-button" class="ribbon-submenu-item" type="button" title="Export visible hosts as CSV">Export CSV</button>
                        </div>
                        <div class="panel-submenu-group">
                            <p class="panel-submenu-title">Filter</p>
                            <button id="hosts-filter-show-all-button" class="ribbon-submenu-item" type="button" title="Show all hosts regardless of status">Show All</button>
                            <button id="hosts-filter-hide-down-button" class="ribbon-submenu-item" type="button" title="Hide hosts with down status">Hide Down Hosts</button>
                            <div class="panel-filter-dropdown panel-filter-dropdown-menu" id="hosts-service-filter-dropdown">
                                <button
                                    id="hosts-service-filter-button"
                                    class="ribbon-submenu-item panel-filter-button"
                                    type="button"
                                    aria-haspopup="true"
                                    aria-expanded="false"
                                >Services</button>
                                <div id="hosts-service-filter-popover" class="panel-filter-popover" hidden>
                                    <div class="panel-filter-popover-header">
                                        <strong>Open services</strong>
                                        <button id="hosts-service-filter-clear-button" type="button">Clear</button>
                                    </div>
                                    <div id="hosts-service-filter-list" class="panel-filter-list"></div>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th></th>
                    <th>IP</th>
                    <th>Hostname</th>
                    <th>Status</th>
                    <th>OS</th>
                    <th>Categories</th>
                    <th>Open Ports</th>
                    <th></th>
                </tr>
                </thead>
                <tbody id="hosts-body"></tbody>
            </table>
        </div>
    </section>

    <section class="panel">
        <div class="panel-header">
            <h2>Services</h2>
            <div class="panel-header-actions">
                <label class="panel-inline-select">
                    Category
                    <select id="services-category-filter-select">
                        <option value="">all categories</option>
                    </select>
                </label>
                <p id="services-scope-label" class="panel-scope-label">all hosts</p>
                <p id="service-count">{{ snapshot.services | length }}</p>
                <button
                    id="services-panel-toggle-button"
                    class="panel-menu-button"
                    type="button"
                    title="Show Services"
                    aria-label="Show Services"
                    aria-expanded="false"
                    aria-controls="services-panel-body"
                >
                    <i class="fa-solid fa-chevron-down" aria-hidden="true"></i>
                    <span class="sr-only">Toggle Services</span>
                </button>
            </div>
        </div>
        <div id="services-panel-body" class="table-wrap" hidden>
            <table>
                <thead>
                <tr>
                    <th></th>
                    <th>Service</th>
                    <th>Port</th>
                    <th>Hosts</th>
                    <th>Ports</th>
                    <th>Protocols</th>
                    <th>Categories</th>
                    <th>Actions</th>
                </tr>
                </thead>
                <tbody id="services-body"></tbody>
            </table>
        </div>
    </section>

    <section class="panel panel-full">
        <div class="panel-header">
            <h2>Host Detail</h2>
            <p id="host-detail-name"></p>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Port</th>
                    <th>Protocol</th>
                    <th>State</th>
                    <th>Service</th>
                    <th>Product</th>
                    <th>Banner</th>
                    <th>Screenshot</th>
                </tr>
                </thead>
                <tbody id="host-detail-ports"></tbody>
            </table>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Script DB ID</th>
                    <th>Script ID</th>
                    <th>Output</th>
                    <th>Action</th>
                </tr>
                </thead>
                <tbody id="host-detail-scripts"></tbody>
            </table>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>CVE ID</th>
                    <th>Name</th>
                    <th>Severity</th>
                    <th>Product</th>
                    <th>URL</th>
                    <th>Action</th>
                </tr>
                </thead>
                <tbody id="host-detail-cves"></tbody>
            </table>
        </div>
        <div class="panel-header">
            <h3>Device Categories</h3>
            <p id="host-device-category-count">0</p>
        </div>
        <div id="host-detail-categories" class="category-chip-list"></div>
        <p id="host-detail-category-note" class="meta-note"></p>
        <div class="panel-header">
            <h3>Technologies</h3>
            <p id="host-ai-tech-count">0</p>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Name</th>
                    <th>Version</th>
                    <th>CPE</th>
                    <th>Evidence</th>
                </tr>
                </thead>
                <tbody id="host-detail-ai-technologies"></tbody>
            </table>
        </div>
        <div class="panel-header">
            <h3>Findings</h3>
            <p id="host-ai-finding-count">0</p>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Severity</th>
                    <th>Title</th>
                    <th>CVE</th>
                    <th>CVSS</th>
                    <th>Evidence</th>
                </tr>
                </thead>
                <tbody id="host-detail-ai-findings"></tbody>
            </table>
        </div>
        <div class="panel-header">
            <h3>Manual Tests</h3>
            <p id="host-ai-manual-count">0</p>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Why</th>
                    <th>Command</th>
                    <th>Scope Note</th>
                </tr>
                </thead>
                <tbody id="host-detail-ai-manual-tests"></tbody>
            </table>
        </div>
        <div class="panel-header">
            <h3>Analysis Status</h3>
            <p id="host-ai-analysis-status"></p>
        </div>
        <div class="host-ai-report-actions">
            <button id="host-ai-export-json-button" type="button">Export Report JSON</button>
            <button id="host-ai-export-md-button" type="button">Export Report Markdown</button>
        </div>
        <div class="panel-header">
            <h3>Screenshots</h3>
            <p id="host-screenshot-count">0</p>
        </div>
        <div id="host-detail-screenshots" class="screenshot-list"></div>
    </section>

    <section class="panel panel-full">
        <div class="panel-header">
            <h2>Dangerous Action Approvals</h2>
            <p id="approval-count">{{ snapshot.scheduler_approvals | length }}</p>
        </div>
        <div class="table-wrap">
            <table>
                <thead>
                <tr>
                    <th>ID</th>
                    <th>Target</th>
                    <th>Action</th>
                    <th>Risk & Policy</th>
                    <th>Planner</th>
                    <th>Actions</th>
                </tr>
                </thead>
                <tbody id="approvals-body"></tbody>
            </table>
        </div>
    </section>

</main>

<div id="process-output-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal output-modal" role="dialog" aria-modal="true" aria-labelledby="process-output-modal-title">
        <div class="panel-header modal-header">
            <h2 id="process-output-modal-title">Process Output</h2>
            <p id="process-output-meta">No process selected</p>
            <button id="process-output-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="modal-actions modal-toolbar-actions">
            <button id="process-output-refresh-button" class="icon-btn" type="button" title="Refresh" aria-label="Refresh">
                <i class="fa-solid fa-rotate-right" aria-hidden="true"></i>
            </button>
            <button id="process-output-copy-button" class="icon-btn" type="button" title="Copy to Clipboard" aria-label="Copy to Clipboard">
                <i class="fa-regular fa-copy" aria-hidden="true"></i>
            </button>
            <button id="process-output-download-button" class="icon-btn" type="button" title="Download .txt" aria-label="Download .txt">
                <i class="fa-solid fa-download" aria-hidden="true"></i>
            </button>
        </div>
        <div class="process-command-block">
            <div class="process-command-header">
                <span>Command</span>
                <button id="process-output-command-copy" type="button" title="Copy command" aria-label="Copy command">
                    <i class="fa-regular fa-copy" aria-hidden="true"></i>
                </button>
            </div>
            <div id="process-output-command" class="process-command-text"></div>
        </div>
        <div class="process-command-block">
            <div class="process-command-header">
                <span>Progress</span>
            </div>
            <div id="process-output-progress" class="process-command-text">No structured progress reported</div>
        </div>
        <div class="process-command-block process-output-block">
            <div class="process-command-header">
                <span>Output</span>
            </div>
            <div id="process-output-text" class="ansi-output-view" role="textbox" aria-readonly="true"></div>
        </div>
    </div>
</div>

<div id="script-output-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal output-modal" role="dialog" aria-modal="true" aria-labelledby="script-output-modal-title">
        <div class="panel-header modal-header">
            <h2 id="script-output-modal-title">Script Output</h2>
            <p id="script-output-meta">No script selected</p>
            <button id="script-output-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="modal-actions modal-toolbar-actions">
            <button id="script-output-copy-button" class="icon-btn" type="button" title="Copy to Clipboard" aria-label="Copy to Clipboard">
                <i class="fa-regular fa-copy" aria-hidden="true"></i>
            </button>
            <button id="script-output-download-button" class="icon-btn" type="button" title="Download .txt" aria-label="Download .txt">
                <i class="fa-solid fa-download" aria-hidden="true"></i>
            </button>
        </div>
        <div class="process-command-block">
            <div class="process-command-header">
                <span>Command</span>
                <button id="script-output-command-copy" type="button" title="Copy command" aria-label="Copy command">
                    <i class="fa-regular fa-copy" aria-hidden="true"></i>
                </button>
            </div>
            <div id="script-output-command" class="process-command-text"></div>
        </div>
        <div class="process-command-block process-output-block">
            <div class="process-command-header">
                <span>Output</span>
            </div>
            <div id="script-output-text" class="ansi-output-view" role="textbox" aria-readonly="true"></div>
        </div>
    </div>
</div>

<div id="screenshot-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal screenshot-modal" role="dialog" aria-modal="true" aria-labelledby="screenshot-modal-title">
        <div class="panel-header modal-header">
            <h2 id="screenshot-modal-title">Screenshot</h2>
            <p id="screenshot-modal-meta">No screenshot selected</p>
            <button id="screenshot-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="modal-actions">
            <button id="screenshot-copy-button" type="button">Copy to Clipboard</button>
            <button id="screenshot-download-button" type="button">Download .png</button>
        </div>
        <div class="screenshot-modal-body">
            <img id="screenshot-modal-image" alt="Selected screenshot preview">
        </div>
    </div>
</div>

<div id="nmap-scan-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal scan-modal" role="dialog" aria-modal="true" aria-labelledby="nmap-scan-modal-title">
        <div class="panel-header modal-header">
            <h2 id="nmap-scan-modal-title">Run Scan</h2>
            <p>Scans > Add Scan</p>
            <button id="nmap-scan-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div id="nmap-scan-block" class="action-block">
            <div id="nmap-wizard" class="nmap-wizard">
                <div class="wizard-steps">
                    <button id="nmap-wizard-indicator-1" type="button" class="wizard-step is-active" data-wizard-goto="1">1. Engagement</button>
                    <button id="nmap-wizard-indicator-2" type="button" class="wizard-step" data-wizard-goto="2">2. Mode</button>
                    <button id="nmap-wizard-indicator-3" type="button" class="wizard-step" data-wizard-goto="3">3. Targets</button>
                    <button id="nmap-wizard-indicator-4" type="button" class="wizard-step" data-wizard-goto="4">4. Options</button>
                </div>

                <section id="nmap-wizard-step-1" class="wizard-page is-active" data-wizard-step="1">
                    <label>
                        Engagement Preset
                        <select id="nmap-engagement-preset-select">
                            <option value="external_recon">external_recon</option>
                            <option value="external_pentest">external_pentest</option>
                            <option value="internal_quick_recon">internal_quick_recon</option>
                            <option value="internal_recon">internal_recon</option>
                            <option value="internal_pentest">internal_pentest</option>
                            <option value="custom">custom</option>
                        </select>
                    </label>
                    <p id="nmap-engagement-preset-summary" class="meta-note scheduler-group-note">Select the engagement preset for this scan. The scan defaults and post-scan scheduler follow-up will use it.</p>
                    <div id="nmap-engagement-derived-policy" class="scheduler-policy-summary" aria-live="polite">
                        <span class="scheduler-policy-chip">Scope: <strong id="nmap-engagement-derived-scope">internal</strong></span>
                        <span class="scheduler-policy-chip">Intent: <strong id="nmap-engagement-derived-intent">recon</strong></span>
                    </div>
                    <p id="nmap-engagement-custom-note" class="meta-note scheduler-group-note" hidden>Custom uses the current policy values from Scheduler Settings for this scan.</p>
                </section>

                <section id="nmap-wizard-step-2" class="wizard-page" data-wizard-step="2">
                    <div class="mode-grid">
                        <label class="mode-card">
                            <input type="radio" name="nmap-scan-mode" value="rfc1918_discovery">
                            <strong>RFC1918 Discovery</strong>
                            <span>Internal network discovery-first scanning.</span>
                        </label>
                        <label class="mode-card">
                            <input type="radio" name="nmap-scan-mode" value="easy" checked>
                            <strong>Easy Mode</strong>
                            <span>Balanced scan for quick service visibility.</span>
                        </label>
                        <label class="mode-card">
                            <input type="radio" name="nmap-scan-mode" value="hard">
                            <strong>Hard Mode</strong>
                            <span>Deeper and slower enumeration.</span>
                        </label>
                        <label id="nmap-mode-card-passive" class="mode-card" hidden>
                            <input type="radio" name="nmap-scan-mode" value="passive_capture">
                            <strong>Passive Capture</strong>
                            <span>Capture local discovery traffic with Tshark, then queue bounded Easy scans for discovered internal networks.</span>
                        </label>
                    </div>
                </section>

                <section id="nmap-wizard-step-3" class="wizard-page" data-wizard-step="3">
                    <div id="nmap-standard-target-controls">
                        <label>
                            Targets (hosts, subnets, ranges; space or comma separated)
                            <textarea id="nmap-targets" rows="3" placeholder="192.168.1.10 192.168.1.0/24"></textarea>
                        </label>
                    </div>
                    <div id="nmap-rfc-target-controls" hidden>
                        <p class="meta-note scheduler-group-note">RFC1918 mode scans the selected private subnet families directly. Free-form targets are not used in this mode.</p>
                        <div class="wizard-subgrid">
                            <label class="checkbox">
                                <input id="nmap-rfc-10" type="checkbox" checked>
                                10.0.0.0/8
                            </label>
                            <label class="checkbox">
                                <input id="nmap-rfc-172" type="checkbox" checked>
                                172.16.0.0/12
                            </label>
                            <label class="checkbox">
                                <input id="nmap-rfc-192" type="checkbox" checked>
                                192.168.0.0/16
                            </label>
                        </div>
                    </div>
                    <div id="nmap-passive-target-controls" hidden>
                        <p class="meta-note scheduler-group-note">Passive Capture listens on a single local interface for ARP, broadcast, multicast, Bonjour/mDNS, NetBIOS, SSDP, DHCP, and similar discovery traffic. After the capture window ends, Legion will queue Easy scans for the internal networks it identifies.</p>
                        <label>
                            Capture Interface
                            <select id="passive-capture-interface">
                                <option value="">Loading interfaces...</option>
                            </select>
                        </label>
                        <p id="passive-capture-interface-note" class="meta-note scheduler-group-note"></p>
                    </div>
                </section>

                <section id="nmap-wizard-step-4" class="wizard-page" data-wizard-step="4">
                    <div id="nmap-options-rfc1918_discovery" class="mode-options is-active" data-mode-options="rfc1918_discovery">
                        <h4>RFC1918 Discovery Options</h4>
                        <label class="checkbox">
                            <input id="nmap-rfc-discovery" type="checkbox" checked>
                            Use host discovery probes
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-host-discovery-only" type="checkbox" checked>
                            Host discovery only (`-sn`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-arp-ping" type="checkbox">
                            Prefer ARP discovery (`-PR`) where applicable
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-skip-dns" type="checkbox" checked>
                            Skip reverse DNS lookups (`-n`)
                        </label>
                        <label>
                            Timing Template
                            <select id="nmap-rfc-timing">
                                <option value="T2">T2</option>
                                <option value="T3" selected>T3</option>
                                <option value="T4">T4</option>
                            </select>
                        </label>
                        <label>
                            TCP Port Profile (used if discovery-only is disabled)
                            <select id="nmap-rfc-profile">
                                <option value="quick" selected>Quick low-hanging fruit</option>
                                <option value="comprehensive">More comprehensive common services</option>
                            </select>
                        </label>
                        <label>
                            Concurrent chunk scans
                            <select id="nmap-rfc-chunk-concurrency">
                                <option value="1" selected>1 chunk scan at a time</option>
                                <option value="2">2 chunk scans at a time</option>
                                <option value="3">3 chunk scans at a time</option>
                                <option value="4">4 chunk scans at a time</option>
                            </select>
                        </label>
                        <p id="nmap-rfc-profile-note" class="meta-note scheduler-group-note">Quick uses a curated low-hanging-fruit TCP list. RFC sweeps run in /24 chunks, up to 2 subnets per Nmap run, 1 chunk scan at a time by default. Disable discovery-only to apply the selected profile to responsive hosts.</p>
                        <label class="checkbox">
                            <input id="nmap-rfc-service-detection" type="checkbox">
                            Enable service detection (`-sV`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-default-scripts" type="checkbox">
                            Run default scripts (`-sC`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-os-detection" type="checkbox">
                            Enable OS detection (`-O`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-rfc-force-pn" type="checkbox">
                            Treat hosts as online (`-Pn`)
                        </label>
                    </div>

                    <div id="nmap-options-easy" class="mode-options" data-mode-options="easy">
                        <h4>Easy Mode Options</h4>
                        <p id="nmap-easy-preset-note" class="meta-note scheduler-group-note" hidden></p>
                        <label class="checkbox">
                            <input id="nmap-easy-discovery" type="checkbox" checked>
                            Use host discovery probes
                        </label>
                        <label class="checkbox">
                            <input id="nmap-easy-skip-dns" type="checkbox" checked>
                            Skip reverse DNS lookups (`-n`)
                        </label>
                        <label>
                            Timing Template
                            <select id="nmap-easy-timing">
                                <option value="T2">T2</option>
                                <option value="T3" selected>T3</option>
                                <option value="T4">T4</option>
                            </select>
                        </label>
                        <label id="nmap-easy-top-ports-label">
                            Top Ports
                            <input id="nmap-easy-top-ports" type="number" min="1" max="65535" value="1000">
                        </label>
                        <label class="checkbox">
                            <input id="nmap-easy-service-detection" type="checkbox" checked>
                            Enable service detection (`-sV`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-easy-default-scripts" type="checkbox" checked>
                            Run default scripts (`-sC`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-easy-os-detection" type="checkbox">
                            Enable OS detection (`-O`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-easy-force-pn" type="checkbox">
                            Treat hosts as online (`-Pn`)
                        </label>
                    </div>

                    <div id="nmap-options-hard" class="mode-options" data-mode-options="hard">
                        <h4>Hard Mode Options</h4>
                        <label class="checkbox">
                            <input id="nmap-hard-discovery" type="checkbox">
                            Use host discovery probes
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-skip-dns" type="checkbox" checked>
                            Skip reverse DNS lookups (`-n`)
                        </label>
                        <label>
                            Timing Template
                            <select id="nmap-hard-timing">
                                <option value="T2">T2</option>
                                <option value="T3">T3</option>
                                <option value="T4" selected>T4</option>
                            </select>
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-full-ports" type="checkbox" checked>
                            Scan full TCP port range (`-p-`)
                        </label>
                        <label>
                            Top Ports (used if full-range is disabled)
                            <input id="nmap-hard-top-ports" type="number" min="1" max="65535" value="1000">
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-aggressive" type="checkbox">
                            Aggressive profile (`-A`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-service-detection" type="checkbox" checked>
                            Enable service detection (`-sV`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-default-scripts" type="checkbox" checked>
                            Run default scripts (`-sC`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-os-detection" type="checkbox" checked>
                            Enable OS detection (`-O`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-force-pn" type="checkbox">
                            Treat hosts as online (`-Pn`)
                        </label>
                        <label class="checkbox">
                            <input id="nmap-hard-vuln-scripts" type="checkbox">
                            Run vulnerability script set (`--script vuln`)
                        </label>
                    </div>

                    <div id="nmap-options-passive_capture" class="mode-options" data-mode-options="passive_capture">
                        <h4>Passive Capture Options</h4>
                        <label>
                            Capture Duration
                            <select id="passive-capture-duration">
                                <option value="5">5 minutes</option>
                                <option value="15" selected>15 minutes</option>
                                <option value="30">30 minutes</option>
                                <option value="45">45 minutes</option>
                                <option value="60">60 minutes</option>
                                <option value="75">75 minutes</option>
                                <option value="90">90 minutes</option>
                                <option value="105">105 minutes</option>
                                <option value="120">120 minutes</option>
                            </select>
                        </label>
                        <p class="meta-note scheduler-group-note">This mode uses `tshark` for passive capture. It does not run Nmap until the capture window finishes and candidate internal networks have been inferred.</p>
                    </div>

                    <div class="nmap-final-controls">
                        <label id="nmap-args-label">
                            Extra Nmap Arguments
                            <input id="nmap-args" type="text" placeholder="-p- --reason">
                        </label>
                        <label id="nmap-run-actions-label" class="checkbox">
                            <input id="nmap-run-actions" type="checkbox" checked>
                            Run scripted actions after scan
                        </label>
                        <div class="scheduler-actions">
                            <button id="nmap-scan-button" type="button" disabled>Start Nmap Scan Job</button>
                        </div>
                        <p class="meta-note" id="nmap-command-preview"></p>
                    </div>
                </section>

                <div class="wizard-nav">
                    <button id="nmap-wizard-back" type="button">Back</button>
                    <button id="nmap-wizard-next" type="button">Next</button>
                </div>
            </div>
        </div>
    </div>
</div>

<div id="manual-scan-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal manual-scan-modal" role="dialog" aria-modal="true" aria-labelledby="manual-scan-modal-title">
        <div class="panel-header modal-header">
            <h2 id="manual-scan-modal-title">Manual Tool Run</h2>
            <p>Scans > Manual Scan</p>
            <button id="manual-scan-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="action-block">
            <label id="workspace-tool-target-wrapper" hidden>
                Target
                <select id="workspace-tool-target-select"></select>
            </label>
            <p id="workspace-tool-context" class="meta-note"></p>
            <label>
                Target Host IP
                <input id="workspace-tool-host-ip" type="text" placeholder="10.0.0.10">
            </label>
            <label>
                Port
                <input id="workspace-tool-port" type="text" placeholder="445">
            </label>
            <label>
                Protocol
                <select id="workspace-tool-protocol">
                    <option value="tcp">tcp</option>
                    <option value="udp">udp</option>
                </select>
            </label>
            <label>
                Tool
                <select id="workspace-tool-select"></select>
            </label>
            <div id="workspace-tool-parameters-wrapper" hidden>
                <h3>Tool Options</h3>
                <div id="workspace-tool-parameters"></div>
            </div>
            <div class="scheduler-actions">
                <button id="workspace-run-tool-button" type="button">Run Tool</button>
                <button id="workspace-run-scheduler-button" type="button">Run Scheduler Now</button>
            </div>
        </div>
    </div>
</div>

<div id="host-selection-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal host-selection-modal" role="dialog" aria-modal="true" aria-labelledby="host-selection-modal-title">
        <div class="panel-header modal-header">
            <h2 id="host-selection-modal-title">Host Selection</h2>
            <p>Misc > Host Selection</p>
            <button id="host-selection-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="action-block">
            <label>
                Host
                <select id="workspace-host-select"></select>
            </label>
            <div class="scheduler-actions">
                <button id="workspace-refresh-button" type="button">Refresh Workspace Data</button>
            </div>
            <label>
                Host Note
                <textarea id="workspace-note" rows="5" placeholder="Host notes..."></textarea>
            </label>
            <div class="scheduler-actions">
                <button id="workspace-save-note-button" type="button">Save Note</button>
            </div>
            <label>
                Device Categories
                <input id="workspace-host-categories" type="text" placeholder="Windows, Server">
            </label>
            <label class="checkbox">
                <input id="workspace-host-categories-override" type="checkbox">
                Replace automatic classification for this host
            </label>
            <div class="scheduler-actions">
                <button id="workspace-save-categories-button" type="button">Save Categories</button>
            </div>
        </div>
    </div>
</div>

<div id="script-cve-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal script-cve-modal" role="dialog" aria-modal="true" aria-labelledby="script-cve-modal-title">
        <div class="panel-header modal-header">
            <h2 id="script-cve-modal-title">Add Script/CVE</h2>
            <p>Misc > Add Script/CVE</p>
            <button id="script-cve-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="action-block">
            <label>
                Script ID
                <input id="workspace-script-id" type="text" placeholder="smb-enum-users.nse">
            </label>
            <label>
                Script Port
                <input id="workspace-script-port" type="text" placeholder="445">
            </label>
            <label>
                Script Protocol
                <select id="workspace-script-protocol">
                    <option value="tcp">tcp</option>
                    <option value="udp">udp</option>
                </select>
            </label>
            <label>
                Script Output
                <textarea id="workspace-script-output" rows="3"></textarea>
            </label>
            <div class="scheduler-actions">
                <button id="workspace-add-script-button" type="button">Add Script</button>
            </div>
            <label>
                CVE Name
                <input id="workspace-cve-name" type="text" placeholder="CVE-2025-0001">
            </label>
            <label>
                CVE Severity
                <input id="workspace-cve-severity" type="text" placeholder="high">
            </label>
            <div class="scheduler-actions">
                <button id="workspace-add-cve-button" type="button">Add CVE</button>
            </div>
        </div>
    </div>
</div>

<div id="device-category-settings-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal scheduler-modal device-category-modal" role="dialog" aria-modal="true" aria-labelledby="device-category-modal-title">
        <div class="panel-header modal-header">
            <h2 id="device-category-modal-title">Device Categories</h2>
            <p id="device-category-save-status">Idle</p>
            <button id="device-category-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="device-category-modal-body">
            <section class="device-category-panel">
                <div class="panel-header">
                    <h3>Built-in Categories</h3>
                    <p>Read-only</p>
                </div>
                <div id="device-category-builtins-list" class="category-chip-list"></div>
                <p class="meta-note">Built-in categories cover common roles like Windows, Linux, Network, Storage, Database, Printer, and Server.</p>
            </section>
            <section class="device-category-panel">
                <div class="panel-header">
                    <h3>Custom Categories</h3>
                    <div class="scheduler-actions">
                        <button id="device-category-add-rule-button" type="button">Add Category</button>
                    </div>
                </div>
                <div class="table-wrap">
                    <table>
                        <thead>
                        <tr>
                            <th>Name</th>
                            <th>Ports</th>
                            <th>Fingerprint Fragments</th>
                            <th>CPE Fragments</th>
                            <th>Actions</th>
                        </tr>
                        </thead>
                        <tbody id="device-category-rules-body"></tbody>
                    </table>
                </div>
                <p class="meta-note">Ports are comma-separated numbers. Fingerprint and CPE fragments are comma-separated contains matches. Strong fingerprint/CPE evidence or enough matching ports will make a host eligible for the category.</p>
                <div class="scheduler-actions">
                    <button id="device-category-save-button" type="button">Save Categories</button>
                </div>
            </section>
        </div>
    </div>
</div>

<div id="scheduler-settings-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal scheduler-modal" role="dialog" aria-modal="true" aria-labelledby="scheduler-modal-title">
        <div class="panel-header modal-header">
            <h2 id="scheduler-modal-title">Scheduler Settings</h2>
            <p id="scheduler-save-status">Idle</p>
            <button id="scheduler-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <form id="scheduler-form" class="scheduler-form">
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Engagement Profile</legend>
                <label>
                    Mode
                    <select id="scheduler-mode-select" name="mode">
                        <option value="deterministic">deterministic</option>
                        <option value="ai">ai</option>
                    </select>
                </label>
                <label>
                    Engagement Preset
                    <select id="scheduler-goal-select" name="goal_profile">
                        <option value="external_recon">external_recon</option>
                        <option value="external_pentest">external_pentest</option>
                        <option value="internal_quick_recon">internal_quick_recon</option>
                        <option value="internal_recon">internal_recon</option>
                        <option value="internal_pentest">internal_pentest</option>
                        <option value="custom">custom</option>
                    </select>
                </label>
                <p id="engagement-preset-summary" class="meta-note scheduler-group-note">Preset drives scope and intent for most runs. Switch to custom only if you need a manual override.</p>
                <div id="engagement-derived-policy" class="scheduler-field-span-2 scheduler-policy-summary" aria-live="polite">
                    <span class="scheduler-policy-chip">Scope: <strong id="engagement-derived-scope">internal</strong></span>
                    <span class="scheduler-policy-chip">Intent: <strong id="engagement-derived-intent">recon</strong></span>
                </div>
                <label id="engagement-custom-scope-label" hidden>
                    Custom Scope
                    <select id="engagement-scope-select" name="engagement_scope">
                        <option value="internal">internal</option>
                        <option value="external">external</option>
                        <option value="mixed">mixed</option>
                    </select>
                </label>
                <label id="engagement-custom-intent-label" hidden>
                    Custom Intent
                    <select id="engagement-intent-select" name="engagement_intent">
                        <option value="recon">recon</option>
                        <option value="pentest">pentest</option>
                    </select>
                </label>
                <p id="engagement-custom-note" class="meta-note scheduler-group-note" hidden>Use custom only when the standard presets do not match the engagement. Otherwise the preset is the simpler and safer choice.</p>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Risk And Permissions</legend>
                <label class="checkbox">
                    <input id="engagement-allow-exploitation" type="checkbox" name="engagement_allow_exploitation">
                    Allow exploitation
                </label>
                <label class="checkbox">
                    <input id="engagement-allow-lateral" type="checkbox" name="engagement_allow_lateral">
                    Allow lateral movement
                </label>
                <label>
                    Credential attack mode
                    <select id="engagement-credential-mode" name="engagement_credential_mode">
                        <option value="blocked">blocked</option>
                        <option value="approval">approval</option>
                        <option value="allowed">allowed</option>
                    </select>
                </label>
                <label>
                    Lockout risk mode
                    <select id="engagement-lockout-mode" name="engagement_lockout_mode">
                        <option value="blocked">blocked</option>
                        <option value="approval">approval</option>
                        <option value="allowed">allowed</option>
                    </select>
                </label>
                <label>
                    Stability risk mode
                    <select id="engagement-stability-mode" name="engagement_stability_mode">
                        <option value="blocked">blocked</option>
                        <option value="approval">approval</option>
                        <option value="allowed">allowed</option>
                    </select>
                </label>
                <label>
                    Detection tolerance
                    <select id="engagement-detection-mode" name="engagement_detection_mode">
                        <option value="low">low</option>
                        <option value="medium">medium</option>
                        <option value="high">high</option>
                    </select>
                </label>
                <label>
                    Approval mode
                    <select id="engagement-approval-mode" name="engagement_approval_mode">
                        <option value="never">never</option>
                        <option value="risky">risky</option>
                        <option value="always">always</option>
                    </select>
                </label>
                <label>
                    Noise budget
                    <select id="engagement-noise-budget" name="engagement_noise_budget">
                        <option value="low">low</option>
                        <option value="medium">medium</option>
                        <option value="high">high</option>
                    </select>
                </label>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Execution Controls</legend>
                <label>
                    Runner preference
                    <select id="engagement-runner-preference" name="engagement_runner_preference">
                        <option value="local">local</option>
                        <option value="container">container</option>
                        <option value="browser">browser</option>
                        <option value="manual">manual</option>
                        <option value="auto">auto</option>
                    </select>
                </label>
                <label>
                    Max Concurrent Scheduler Tools
                    <input id="scheduler-concurrency-input" type="number" min="1" max="16" step="1" name="max_concurrency">
                </label>
                <label>
                    Max Hosts In Parallel (Easy Scan)
                    <input id="scheduler-host-concurrency-input" type="number" min="1" max="8" step="1" name="max_host_concurrency">
                </label>
                <label>
                    Max Jobs Retained
                    <input id="scheduler-max-jobs-input" type="number" min="20" max="2000" step="1" name="max_jobs">
                </label>
                <p class="meta-note scheduler-group-note">This only applies to normal scheduler runs. Dig Deeper stays single-host so AI follow-up remains bounded.</p>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Integrations</legend>
                <label class="scheduler-field-span-2">
                    Grayhat Warfare API Key
                    <input id="scheduler-integration-grayhatwarfare-apikey" type="password" name="grayhatwarfare_api_key" placeholder="Enter a new Grayhat Warfare API key">
                </label>
                <label class="scheduler-field-span-2">
                    Chaos API Key
                    <input id="scheduler-integration-chaos-apikey" type="password" name="chaos_api_key" placeholder="Enter a new Chaos API key">
                </label>
                <label class="scheduler-field-span-2">
                    Shodan API Key
                    <input id="scheduler-integration-shodan-apikey" type="password" name="shodan_api_key" placeholder="Enter a new Shodan API key">
                </label>
                <p class="meta-note scheduler-group-note">Scheduler-owned integrations are used for governed enrichment and discovery. Leave a key blank to preserve the currently stored value.</p>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>AI Provider</legend>
                <label>
                    Provider
                    <select id="scheduler-provider-select" name="provider">
                        <option value="none">none</option>
                        <option value="lm_studio">lm_studio</option>
                        <option value="openai">openai</option>
                        <option value="claude">claude</option>
                    </select>
                </label>
                <p class="meta-note scheduler-provider-notice scheduler-group-note">{{ snapshot.scheduler.cloud_notice }}</p>
                <label class="scheduler-provider-field" data-scheduler-provider="lm_studio">
                    LM Studio Base URL
                    <input id="provider-lmstudio-baseurl" type="text" name="lm_studio_base_url">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="lm_studio">
                    LM Studio Model
                    <input id="provider-lmstudio-model" type="text" name="lm_studio_model">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="lm_studio">
                    LM Studio API Key
                    <input id="provider-lmstudio-apikey" type="password" name="lm_studio_api_key">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="openai">
                    OpenAI Base URL
                    <input id="provider-openai-baseurl" type="text" name="openai_base_url">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="openai">
                    OpenAI Model
                    <input id="provider-openai-model" type="text" name="openai_model">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="openai">
                    OpenAI API Key
                    <input id="provider-openai-apikey" type="password" name="openai_api_key">
                </label>
                <label class="checkbox scheduler-provider-field scheduler-field-span-2" data-scheduler-provider="openai">
                    <input id="provider-openai-structured-outputs" type="checkbox" name="openai_structured_outputs">
                    Use OpenAI structured outputs
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="claude">
                    Claude Base URL
                    <input id="provider-claude-baseurl" type="text" name="claude_base_url">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="claude">
                    Claude Model
                    <input id="provider-claude-model" type="text" name="claude_model">
                </label>
                <label class="scheduler-provider-field" data-scheduler-provider="claude">
                    Claude API Key
                    <input id="provider-claude-apikey" type="password" name="claude_api_key">
                </label>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>AI Feedback Controls</legend>
                <label class="checkbox">
                    <input id="scheduler-ai-feedback-enabled" type="checkbox" name="ai_feedback_enabled">
                    Enable AI feedback loop
                </label>
                <label>
                    Max Rounds Per Target
                    <input id="scheduler-ai-max-rounds" type="number" min="1" max="12" step="1" name="ai_feedback_max_rounds">
                </label>
                <label>
                    Max Actions Per Round
                    <input id="scheduler-ai-max-actions" type="number" min="1" max="8" step="1" name="ai_feedback_max_actions">
                </label>
                <label>
                    Recent Output Chars
                    <input id="scheduler-ai-recent-output-chars" type="number" min="320" max="4000" step="10" name="ai_feedback_recent_output_chars">
                </label>
                <label class="checkbox">
                    <input id="scheduler-ai-reflection-enabled" type="checkbox" name="ai_feedback_reflection_enabled">
                    Enable stalled-loop reflection
                </label>
                <label>
                    Stall Rounds Without Progress
                    <input id="scheduler-ai-stall-rounds" type="number" min="1" max="6" step="1" name="ai_feedback_stall_rounds">
                </label>
                <label>
                    Repeated Selection Threshold
                    <input id="scheduler-ai-repeat-threshold" type="number" min="1" max="8" step="1" name="ai_feedback_repeat_threshold">
                </label>
                <label>
                    Max Reflections Per Target
                    <input id="scheduler-ai-max-reflections" type="number" min="0" max="4" step="1" name="ai_feedback_max_reflections">
                </label>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Dangerous Categories</legend>
                <label class="checkbox">
                    <input id="danger-exploit_execution" type="checkbox" value="exploit_execution">
                    exploit_execution
                </label>
                <label class="checkbox">
                    <input id="danger-credential_bruteforce" type="checkbox" value="credential_bruteforce">
                    credential_bruteforce
                </label>
                <label class="checkbox">
                    <input id="danger-network_flooding" type="checkbox" value="network_flooding">
                    network_flooding
                </label>
                <label class="checkbox">
                    <input id="danger-destructive_write_actions" type="checkbox" value="destructive_write_actions">
                    destructive_write_actions
                </label>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Scheduler Prompt Controls</legend>
                <label class="checkbox">
                    <input id="feature-context-summary-enabled" type="checkbox" value="context_summary_enabled">
                    Include deterministic context summary ahead of raw evidence
                </label>
                <label class="checkbox">
                    <input id="feature-scheduler-prompt-profiles" type="checkbox" value="scheduler_prompt_profiles">
                    Enable service and phase prompt overlays
                </label>
                <label class="checkbox">
                    <input id="feature-scheduler-web-followup-sidecar" type="checkbox" value="scheduler_web_followup_sidecar">
                    Enable web follow-up specialist sidecar
                </label>
            </fieldset>
            <div class="scheduler-actions">
                <button id="scheduler-test-provider-button" type="button">Test Provider</button>
                <button id="scheduler-save-button" type="submit">Save Scheduler Preferences</button>
            </div>
        </form>
    </div>
</div>

<div id="report-provider-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal report-provider-modal" role="dialog" aria-modal="true" aria-labelledby="report-provider-modal-title">
        <div class="panel-header modal-header">
            <h2 id="report-provider-modal-title">Report Provider Settings</h2>
            <p id="report-provider-save-status">Idle</p>
            <button id="report-provider-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <form id="report-provider-form" class="scheduler-form">
            <label>
                Project Report Provider Name
                <input id="project-report-provider-name" type="text" name="project_report_provider_name" placeholder="e.g. siem-prod">
            </label>
            <label>
                Project Report Endpoint
                <input id="project-report-endpoint" type="text" name="project_report_endpoint" placeholder="https://example/api/report">
            </label>
            <label>
                Project Report HTTP Method
                <select id="project-report-method" name="project_report_method">
                    <option value="POST">POST</option>
                    <option value="PUT">PUT</option>
                    <option value="PATCH">PATCH</option>
                </select>
            </label>
            <label>
                Project Report Format
                <select id="project-report-format" name="project_report_format">
                    <option value="json">json</option>
                    <option value="md">md</option>
                </select>
            </label>
            <label>
                Project Report Timeout (seconds)
                <input id="project-report-timeout" type="number" min="5" max="300" step="1" name="project_report_timeout">
            </label>
            <label class="checkbox">
                <input id="project-report-mtls-enabled" type="checkbox" name="project_report_mtls_enabled">
                Project Report mTLS Enabled
            </label>
            <label>
                Project Report mTLS Client Cert Path
                <input id="project-report-mtls-cert" type="text" name="project_report_mtls_cert" placeholder="/path/to/client.crt">
            </label>
            <label>
                Project Report mTLS Client Key Path
                <input id="project-report-mtls-key" type="text" name="project_report_mtls_key" placeholder="/path/to/client.key">
            </label>
            <label>
                Project Report mTLS CA Cert Path (optional)
                <input id="project-report-mtls-ca" type="text" name="project_report_mtls_ca" placeholder="/path/to/ca.crt">
            </label>
            <label class="project-report-headers-label">
                Project Report Headers (JSON object)
                <textarea id="project-report-headers" rows="4" name="project_report_headers" placeholder="{\"X-API-Key\":\"...\"}"></textarea>
            </label>
            <div class="scheduler-actions">
                <button id="project-report-save-button" type="submit">Save Report Provider Settings</button>
                <button id="project-report-push-button" type="button">Push Project Report</button>
            </div>
        </form>
    </div>
</div>

<div id="interface-settings-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal settings-modal" role="dialog" aria-modal="true" aria-labelledby="interface-settings-modal-title">
        <div class="panel-header modal-header">
            <h2 id="interface-settings-modal-title">Interface Settings</h2>
            <p id="interface-settings-status">Idle</p>
            <button id="interface-settings-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <p class="meta-note">Live interface controls for the current workspace. Changes apply immediately.</p>
        <label class="settings-inline-toggle">
            <input id="interface-graph-workspace-enabled" type="checkbox">
            <span>Enable graph workspace</span>
        </label>
        <p class="meta-note">Hide this when graph rendering is not useful for the current engagement size.</p>
        <label class="settings-inline-toggle">
            <input id="interface-colorful-ascii-background" type="checkbox">
            <span>Enable colorful ASCII art background</span>
        </label>
        <p class="meta-note">The default background is solid black. The ASCII background is optional visual flair.</p>
        <label class="settings-inline-toggle">
            <input id="interface-credential-capture-panel-enabled" type="checkbox">
            <span>Enable credential capture panel</span>
        </label>
        <p class="meta-note">Show the shared Responder and ntlmrelayx monitoring panel on the main screen.</p>
        <div class="modal-actions">
            <button id="interface-settings-save-button" type="button">Save Interface Settings</button>
        </div>
    </div>
</div>

<div id="credentials-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal modal-table-modal" role="dialog" aria-modal="true" aria-labelledby="credentials-modal-title">
        <div class="panel-header modal-header">
            <h2 id="credentials-modal-title">Captured Credentials</h2>
            <p id="credentials-modal-meta">0 captures</p>
            <button id="credentials-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="modal-actions">
            <button id="credentials-copy-hashes-button" type="button">Copy Dedupe Hashes</button>
            <button id="credentials-download-hashes-button" type="button">Download Dedupe Hashes</button>
            <button id="credentials-download-json-button" type="button">Download JSON</button>
        </div>
        <div class="table-wrap modal-table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Captured</th>
                    <th>Tool</th>
                    <th>Source</th>
                    <th>Username</th>
                    <th>Hash</th>
                    <th>Details</th>
                </tr>
                </thead>
                <tbody id="credential-captures-body"></tbody>
            </table>
        </div>
    </div>
</div>

<div id="credential-capture-config-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal settings-modal" role="dialog" aria-modal="true" aria-labelledby="credential-capture-config-modal-title">
        <div class="panel-header modal-header">
            <h2 id="credential-capture-config-modal-title">Credential Capture Configuration</h2>
            <p id="credential-capture-config-status">Idle</p>
            <button id="credential-capture-config-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <p class="meta-note">Common high-value Responder and ntlmrelayx options live here. Use Advanced Arguments for the rest.</p>
        <form id="credential-capture-config-form" class="scheduler-form">
            <fieldset class="danger-group scheduler-settings-group">
                <legend>Responder</legend>
                <label>
                    Interface
                    <select id="credential-config-responder-interface"></select>
                </label>
                <label>
                    Mode
                    <select id="credential-config-responder-mode">
                        <option value="active">active</option>
                        <option value="passive">passive</option>
                    </select>
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-wpad" type="checkbox">
                    Enable WPAD serving
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-force-wpad-auth" type="checkbox">
                    Force WPAD authentication
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-proxy-auth" type="checkbox">
                    Enable proxy authentication prompts
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-dhcp" type="checkbox">
                    Enable DHCP poisoning
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-dhcp-dns" type="checkbox">
                    Enable DHCP DNS poisoning
                </label>
                <label class="checkbox">
                    <input id="credential-config-responder-basic-auth" type="checkbox">
                    Enable basic auth prompts
                </label>
                <label>
                    Advanced Arguments
                    <input id="credential-config-responder-extra-args" type="text" placeholder="-r -v">
                </label>
            </fieldset>
            <fieldset class="danger-group scheduler-settings-group">
                <legend>ntlmrelayx</legend>
                <label>
                    Relay Target
                    <input id="credential-config-ntlmrelayx-target" type="text" placeholder="smb://192.168.3.50">
                </label>
                <label>
                    Relay Targets File
                    <input id="credential-config-ntlmrelayx-targets-file" type="text" placeholder="/path/to/targets.txt">
                </label>
                <label>
                    Listener IP
                    <input id="credential-config-ntlmrelayx-interface-ip" type="text" placeholder="192.168.3.10">
                </label>
                <label class="checkbox">
                    <input id="credential-config-ntlmrelayx-smb2support" type="checkbox">
                    Enable SMB2 support
                </label>
                <label class="checkbox">
                    <input id="credential-config-ntlmrelayx-interactive" type="checkbox">
                    Enable interactive mode
                </label>
                <label class="checkbox">
                    <input id="credential-config-ntlmrelayx-socks" type="checkbox">
                    Enable SOCKS relay
                </label>
                <label class="checkbox">
                    <input id="credential-config-ntlmrelayx-output-hashes" type="checkbox">
                    Write captured hashes to a file
                </label>
                <label>
                    Advanced Arguments
                    <input id="credential-config-ntlmrelayx-extra-args" type="text" placeholder="--no-http-server">
                </label>
            </fieldset>
            <div class="modal-actions">
                <button id="credential-capture-config-save-button" type="submit">Save Credential Capture Configuration</button>
            </div>
        </form>
    </div>
</div>

<div id="app-settings-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal settings-modal" role="dialog" aria-modal="true" aria-labelledby="settings-modal-title">
        <div class="panel-header modal-header">
            <h2 id="settings-modal-title">Application Settings</h2>
            <p id="settings-config-path">legion.conf</p>
            <button id="settings-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="settings-tool-audit">
            <div class="panel-header">
                <h3>Tool Audit</h3>
                <p id="settings-tool-audit-status">Idle</p>
            </div>
            <p class="meta-note">Curated install hints for the external tools Legion launches or depends on, including upstream fallbacks where Ubuntu lacks native packages.</p>
            <div class="tool-install-controls">
                <label>
                    Install Platform
                    <select id="settings-tool-install-platform">
                        <option value="kali">Kali</option>
                        <option value="ubuntu">Ubuntu</option>
                    </select>
                </label>
                <p id="settings-tool-install-status" class="meta-note">Install plan not loaded yet.</p>
            </div>
            <div class="modal-actions">
                <button id="settings-tool-audit-refresh-button" type="button">Refresh Tool Audit</button>
                <button id="settings-tool-install-copy-button" type="button">Copy Install Script</button>
                <button id="settings-tool-install-run-button" type="button">Install Missing</button>
            </div>
            <label class="tool-install-script-block">
                Install Script Preview
                <textarea id="settings-tool-install-script" rows="7" readonly></textarea>
            </label>
            <div class="table-wrap modal-table-wrap tool-audit-table-wrap">
                <table>
                    <thead>
                    <tr>
                        <th>Tool</th>
                        <th>Category</th>
                        <th>Status</th>
                        <th>Resolved</th>
                        <th>Kali</th>
                        <th>Ubuntu</th>
                    </tr>
                    </thead>
                    <tbody id="settings-tool-audit-body"></tbody>
                </table>
            </div>
        </div>
        <p class="meta-note">Edit `legion.conf` directly. Saving reloads settings for subsequent actions.</p>
        <label>
            Config Text
            <textarea id="settings-config-text" rows="18"></textarea>
        </label>
        <p id="settings-config-status" class="meta-note"></p>
        <div class="modal-actions">
            <button id="settings-config-refresh-button" type="button">Reload</button>
            <button id="settings-config-save-button" type="button">Save Config</button>
        </div>
    </div>
</div>

<div id="workspace-switch-guard-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal compact-modal" role="dialog" aria-modal="true" aria-labelledby="workspace-switch-guard-title">
        <div class="panel-header modal-header">
            <h2 id="workspace-switch-guard-title">Active Work In Progress</h2>
            <p id="workspace-switch-guard-status">Stop running jobs and processes before switching workspaces.</p>
            <button id="workspace-switch-guard-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <p id="workspace-switch-guard-summary" class="meta-note">No active work detected.</p>
        <pre id="workspace-switch-guard-details" class="modal-log-block"></pre>
        <div class="modal-actions">
            <button id="workspace-switch-guard-stop-button" type="button">Stop Active Work And Continue</button>
            <button id="workspace-switch-guard-cancel-button" type="button">Cancel</button>
        </div>
    </div>
</div>

<div id="provider-logs-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal provider-logs-modal" role="dialog" aria-modal="true" aria-labelledby="provider-logs-modal-title">
        <div class="panel-header modal-header">
            <h2 id="provider-logs-modal-title">Provider Logs</h2>
            <p id="provider-logs-meta">No logs loaded</p>
            <button id="provider-logs-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="modal-actions">
            <button id="provider-logs-refresh-button" type="button">Refresh</button>
            <button id="provider-logs-copy-button" type="button">Copy to Clipboard</button>
            <button id="provider-logs-download-button" type="button">Download .txt</button>
        </div>
        <label>
            Log Output
            <div id="provider-logs-text" class="ansi-output-view" role="textbox" aria-readonly="true"></div>
        </label>
    </div>
</div>

<div id="jobs-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal modal-table-modal" role="dialog" aria-modal="true" aria-labelledby="jobs-modal-title">
        <div class="panel-header modal-header">
            <h2 id="jobs-modal-title">Jobs</h2>
            <p><span id="job-count">{{ snapshot.jobs | length }}</span> total</p>
            <button id="jobs-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="table-wrap modal-table-wrap">
            <table>
                <thead>
                <tr>
                    <th>ID</th>
                    <th>Type</th>
                    <th>Status</th>
                    <th>Created</th>
                    <th>Started</th>
                    <th>Finished</th>
                    <th>Error</th>
                    <th>Actions</th>
                </tr>
                </thead>
                <tbody id="jobs-body"></tbody>
            </table>
        </div>
    </div>
</div>

<div id="submitted-scans-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal modal-table-modal" role="dialog" aria-modal="true" aria-labelledby="submitted-scans-modal-title">
        <div class="panel-header modal-header">
            <h2 id="submitted-scans-modal-title">Submitted Scans</h2>
            <p><span id="scan-history-count">{{ snapshot.scan_history | length }}</span> total</p>
            <button id="submitted-scans-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="table-wrap modal-table-wrap">
            <table>
                <thead>
                <tr>
                    <th>ID</th>
                    <th>Kind</th>
                    <th>Status</th>
                    <th>Targets</th>
                    <th>Scope</th>
                    <th>Mode</th>
                    <th>Created</th>
                    <th>Result</th>
                </tr>
                </thead>
                <tbody id="scan-history-body"></tbody>
            </table>
        </div>
    </div>
</div>

<div id="scheduler-decisions-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal modal-table-modal" role="dialog" aria-modal="true" aria-labelledby="scheduler-decisions-modal-title">
        <div class="panel-header modal-header">
            <h2 id="scheduler-decisions-modal-title">Scheduler Decisions</h2>
            <p><span id="decision-count">{{ snapshot.scheduler_decisions | length }}</span> total</p>
            <button id="scheduler-decisions-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <div class="table-wrap modal-table-wrap">
            <table>
                <thead>
                <tr>
                    <th>Time</th>
                    <th>Target</th>
                    <th>Tool</th>
                    <th>Mode</th>
                    <th>Approved</th>
                    <th>Executed</th>
                    <th>Reason</th>
                    <th>Family</th>
                </tr>
                </thead>
                <tbody id="decisions-body"></tbody>
            </table>
        </div>
    </div>
</div>

<div id="host-remove-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal host-remove-modal" role="dialog" aria-modal="true" aria-labelledby="host-remove-modal-title">
        <div class="panel-header modal-header">
            <h2 id="host-remove-modal-title">Remove Host</h2>
            <p id="host-remove-modal-meta">This action deletes host data from the current workspace.</p>
            <button id="host-remove-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <p class="meta-note">Remove host and associated scans, scripts, CVEs, scheduler decisions, and screenshots?</p>
        <p id="host-remove-modal-target" class="meta-note"></p>
        <div class="modal-actions">
            <button id="host-remove-modal-cancel" type="button">Cancel</button>
            <button id="host-remove-modal-confirm" type="button">Remove Host</button>
        </div>
    </div>
</div>

<div id="graph-note-modal" class="legion-modal-overlay" aria-hidden="true">
    <div class="legion-modal graph-note-modal" role="dialog" aria-modal="true" aria-labelledby="graph-note-modal-title">
        <div class="panel-header modal-header">
            <h2 id="graph-note-modal-title">Add Note</h2>
            <p id="graph-note-modal-meta">Add an operator note for the selected graph item.</p>
            <button id="graph-note-modal-close" class="modal-close-btn" type="button" aria-label="Close dialog">
                <i class="fa-solid fa-xmark" aria-hidden="true"></i>
            </button>
        </div>
        <p id="graph-note-modal-target" class="meta-note"></p>
        <label>
            Note
            <textarea id="graph-note-input" rows="6" placeholder="Operator note, validation status, next step..."></textarea>
        </label>
        <div class="modal-actions">
            <button id="graph-note-modal-cancel" type="button">Cancel</button>
            <button id="graph-note-save-button" type="button">Save Note</button>
        </div>
    </div>
</div>

<div id="startup-wizard-overlay" class="startup-wizard-overlay" aria-hidden="true">
    <div class="startup-wizard" role="dialog" aria-modal="true" aria-labelledby="startup-wizard-title">
        <div class="panel-header modal-header">
            <h2 id="startup-wizard-title">Workspace Setup</h2>
            <p id="startup-wizard-meta">Step 1 of 4</p>
        </div>

        <section id="startup-step-1" class="startup-step is-active" data-startup-step="1">
            <h3>Project</h3>
            <p class="meta-note">Start a new temporary project or open an existing `.legion` file.</p>
            <label class="mode-card">
                <input id="startup-project-new" type="radio" name="startup-project-action" value="new" checked>
                <strong>New Temporary Project</strong>
                <span>Create a fresh temporary workspace now.</span>
            </label>
            <label class="mode-card">
                <input id="startup-project-open" type="radio" name="startup-project-action" value="open">
                <strong>Open Existing Project</strong>
                <span>Load an existing `.legion` project file.</span>
            </label>
            <label>
                Existing Project Path
                <input id="startup-project-open-path" type="text" placeholder="/path/to/project.legion">
            </label>
        </section>

        <section id="startup-step-2" class="startup-step" data-startup-step="2">
            <h3>Imports</h3>
            <p class="meta-note">Import optional seed data before scanning.</p>
            <label class="checkbox">
                <input id="startup-import-targets-enabled" type="checkbox">
                Import Targets File
            </label>
            <label>
                Targets File Path
                <input id="startup-import-targets-path" type="text" placeholder="/path/to/targets.txt">
            </label>
            <label class="checkbox">
                <input id="startup-import-xml-enabled" type="checkbox">
                Import Nmap XML
            </label>
            <label>
                Nmap XML Path
                <input id="startup-import-xml-path" type="text" placeholder="/path/to/scan.xml">
            </label>
            <label class="checkbox">
                <input id="startup-import-xml-run-actions" type="checkbox">
                Run scripted actions after XML import
            </label>
        </section>

        <section id="startup-step-3" class="startup-step" data-startup-step="3">
            <h3>Scheduler</h3>
            <p class="meta-note">Choose the scheduling strategy before entering the workspace.</p>
            <label>
                Mode
                <select id="startup-scheduler-mode">
                    <option value="deterministic">deterministic</option>
                    <option value="ai">ai</option>
                </select>
            </label>
            <label>
                Engagement Preset
                <select id="startup-scheduler-goal">
                    <option value="external_recon">external_recon</option>
                    <option value="external_pentest">external_pentest</option>
                    <option value="internal_quick_recon">internal_quick_recon</option>
                    <option value="internal_recon">internal_recon</option>
                    <option value="internal_pentest">internal_pentest</option>
                    <option value="custom">custom</option>
                </select>
            </label>
            <p id="startup-engagement-preset-summary" class="meta-note scheduler-group-note">Preset drives scope and intent for most runs. Switch to custom only if you need a manual override.</p>
            <div id="startup-engagement-derived-policy" class="scheduler-policy-summary" aria-live="polite">
                <span class="scheduler-policy-chip">Scope: <strong id="startup-engagement-derived-scope">internal</strong></span>
                <span class="scheduler-policy-chip">Intent: <strong id="startup-engagement-derived-intent">recon</strong></span>
            </div>
            <label id="startup-engagement-custom-scope-label" hidden>
                Custom Scope
                <select id="startup-engagement-scope-select">
                    <option value="internal">internal</option>
                    <option value="external">external</option>
                    <option value="mixed">mixed</option>
                </select>
            </label>
            <label id="startup-engagement-custom-intent-label" hidden>
                Custom Intent
                <select id="startup-engagement-intent-select">
                    <option value="recon">recon</option>
                    <option value="pentest">pentest</option>
                </select>
            </label>
            <p id="startup-engagement-custom-note" class="meta-note scheduler-group-note" hidden>Use custom only when the standard presets do not match the engagement. Otherwise the preset is the simpler and safer choice.</p>
            <label>
                Provider
                <select id="startup-scheduler-provider">
                    <option value="none">none</option>
                    <option value="lm_studio">lm_studio</option>
                    <option value="openai">openai</option>
                    <option value="claude">claude</option>
                </select>
            </label>
        </section>

        <section id="startup-step-4" class="startup-step" data-startup-step="4">
            <h3>Ready</h3>
            <p class="meta-note">Setup is complete. Continue to workspace and launch Scans > Add Scan.</p>
            <div id="startup-summary" class="startup-summary"></div>
        </section>

        <p id="startup-wizard-status" class="meta-note"></p>
        <div class="modal-actions">
            <button id="startup-wizard-skip" type="button">Skip Setup</button>
            <button id="startup-wizard-back" type="button">Back</button>
            <button id="startup-wizard-next" type="button">Continue</button>
        </div>
    </div>
</div>
{% endblock %}