gateways.js

import { loadAuthHeaders, updateAuthHeadersJSON } from "./auth.js";
import { MASKED_AUTH_VALUE } from "./constants.js";
import { closeModal, openModal } from "./modals.js";
import { initPromptSelect } from "./prompts.js";
import { initResourceSelect } from "./resources.js";
import { validateInputName, validateJson, validateUrl } from "./security.js";
import {
  ensureNoResultsElement,
  serverSideEditPromptsSearch,
  serverSideEditResourcesSearch,
  serverSideEditToolSearch,
  serverSidePromptSearch,
  serverSideResourceSearch,
  serverSideToolSearch,
} from "./search.js";
import { getEditSelections } from "./servers.js";
import { applyVisibilityRestrictions } from "./teams.js";
import { initToolSelect } from "./tools.js";
import {
  buildTableUrl,
  decodeHtml,
  fetchWithTimeout,
  getCurrentTeamId,
  handleFetchError,
  isInactiveChecked,
  makeCopyIdButton,
  safeGetElement,
  showErrorMessage,
  showSuccessMessage,
} from "./utils.js";

/**
 * SECURE: View Gateway function
 */
export const viewGateway = async function (gatewayId) {
  try {
    console.log(`Viewing gateway ID: ${gatewayId}`);

    const response = await fetchWithTimeout(
      `${window.ROOT_PATH}/admin/gateways/${gatewayId}`
    );

    if (!response.ok) {
      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
    }

    const gateway = await response.json();

    const gatewayDetailsDiv = safeGetElement("gateway-details");
    if (gatewayDetailsDiv) {
      const container = document.createElement("div");
      container.className = "space-y-2 dark:bg-gray-900 dark:text-gray-100";

      // ID field with copy-to-clipboard button
      const idP = document.createElement("p");
      const idStrong = document.createElement("strong");
      idStrong.textContent = "Gateway ID: ";
      idP.appendChild(idStrong);
      const idSpan = document.createElement("span");
      idSpan.className = "font-mono text-sm";
      idSpan.textContent = gateway.id;
      idP.appendChild(idSpan);
      idP.appendChild(makeCopyIdButton(gateway.id));
      container.appendChild(idP);

      const fields = [
        { label: "Name", value: gateway.name },
        { label: "URL", value: gateway.url },
        {
          label: "Description",
          value: decodeHtml(gateway.description) || "N/A",
        },
        { label: "Visibility", value: gateway.visibility || "private" },
      ];

      // Add tags field with special handling
      const tagsP = document.createElement("p");
      const tagsStrong = document.createElement("strong");
      tagsStrong.textContent = "Tags: ";
      tagsP.appendChild(tagsStrong);
      if (gateway.tags && gateway.tags.length > 0) {
        gateway.tags.forEach((tag, index) => {
          const tagSpan = document.createElement("span");
          tagSpan.className =
            "inline-block bg-blue-100 text-blue-800 text-xs px-2 py-1 rounded-full mr-1";
          const raw =
            typeof tag === "object" && tag !== null
              ? tag.id || tag.label || JSON.stringify(tag)
              : tag;
          tagSpan.textContent = raw;
          tagsP.appendChild(tagSpan);
        });
      } else {
        tagsP.appendChild(document.createTextNode("No tags"));
      }
      container.appendChild(tagsP);

      fields.forEach((field) => {
        const p = document.createElement("p");
        const strong = document.createElement("strong");
        strong.textContent = field.label + ": ";
        p.appendChild(strong);
        p.appendChild(document.createTextNode(field.value));
        container.appendChild(p);
      });

      // Status
      const statusP = document.createElement("p");
      const statusStrong = document.createElement("strong");
      statusStrong.textContent = "Status: ";
      statusP.appendChild(statusStrong);

      const statusSpan = document.createElement("span");
      let statusText = "";
      let statusClass = "";
      let statusIcon = "";
      if (!gateway.enabled) {
        statusText = "Inactive";
        statusClass = "bg-red-100 text-red-800";
        statusIcon = `
                    <svg class="ml-1 h-4 w-4 text-red-600 self-center" fill="currentColor" viewBox="0 0 20 20">
                        <path fill-rule="evenodd" d="M6.293 6.293a1 1 0 011.414 0L10 8.586l2.293-2.293a1 1 0 111.414 1.414L11.414 10l2.293 2.293a1 1 0 11-1.414 1.414L10 11.414l-2.293 2.293a1 1 0 11-1.414-1.414L8.586 10 6.293 7.707a1 1 0 010-1.414z" clip-rule="evenodd"></path>
                    </svg>`;
      } else if (gateway.enabled && gateway.reachable) {
        statusText = "Active";
        statusClass = "bg-green-100 text-green-800";
        statusIcon = `
                    <svg class="ml-1 h-4 w-4 text-green-600 self-center" fill="currentColor" viewBox="0 0 20 20">
                        <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm-1-4.586l5.293-5.293-1.414-1.414L9 11.586 7.121 9.707 5.707 11.121 9 14.414z" clip-rule="evenodd"></path>
                    </svg>`;
      } else if (gateway.enabled && !gateway.reachable) {
        statusText = "Offline";
        statusClass = "bg-yellow-100 text-yellow-800";
        statusIcon = `
                    <svg class="ml-1 h-4 w-4 text-yellow-600 self-center" fill="currentColor" viewBox="0 0 20 20">
                        <path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm-1-10h2v4h-2V8zm0 6h2v2h-2v-2z" clip-rule="evenodd"></path>
                    </svg>`;
      }

      statusSpan.className = `px-2 inline-flex text-xs leading-5 font-semibold rounded-full ${statusClass}`;
      statusSpan.innerHTML = `${statusText} ${statusIcon}`;

      statusP.appendChild(statusSpan);
      container.appendChild(statusP);

      // Add metadata section
      const metadataDiv = document.createElement("div");
      metadataDiv.className = "mt-6 border-t pt-4";

      const metadataTitle = document.createElement("strong");
      metadataTitle.textContent = "Metadata:";
      metadataDiv.appendChild(metadataTitle);

      const metadataGrid = document.createElement("div");
      metadataGrid.className = "grid grid-cols-2 gap-4 mt-2 text-sm";

      const metadataFields = [
        {
          label: "Created By",
          value: gateway.created_by || gateway.createdBy || "Legacy Entity",
        },
        {
          label: "Created At",
          value:
            gateway.created_at || gateway.createdAt
              ? new Date(
                gateway.created_at || gateway.createdAt
              ).toLocaleString()
              : "Pre-metadata",
        },
        {
          label: "Created From IP",
          value: gateway.created_from_ip || gateway.createdFromIp || "Unknown",
        },
        {
          label: "Created Via",
          value: gateway.created_via || gateway.createdVia || "Unknown",
        },
        {
          label: "Last Modified By",
          value: gateway.modified_by || gateway.modifiedBy || "N/A",
        },
        {
          label: "Last Modified At",
          value:
            gateway.updated_at || gateway.updatedAt
              ? new Date(
                gateway.updated_at || gateway.updatedAt
              ).toLocaleString()
              : "N/A",
        },
        {
          label: "Modified From IP",
          value: gateway.modified_from_ip || gateway.modifiedFromIp || "N/A",
        },
        {
          label: "Modified Via",
          value: gateway.modified_via || gateway.modifiedVia || "N/A",
        },
        { label: "Version", value: gateway.version || "1" },
        {
          label: "Import Batch",
          value: gateway.importBatchId || "N/A",
        },
      ];

      metadataFields.forEach((field) => {
        const fieldDiv = document.createElement("div");

        const labelSpan = document.createElement("span");
        labelSpan.className = "font-medium text-gray-600 dark:text-gray-400";
        labelSpan.textContent = field.label + ":";

        const valueSpan = document.createElement("span");
        valueSpan.className = "ml-2";
        valueSpan.textContent = field.value;

        fieldDiv.appendChild(labelSpan);
        fieldDiv.appendChild(valueSpan);
        metadataGrid.appendChild(fieldDiv);
      });

      metadataDiv.appendChild(metadataGrid);
      container.appendChild(metadataDiv);

      gatewayDetailsDiv.innerHTML = "";
      gatewayDetailsDiv.appendChild(container);
    }

    openModal("gateway-modal");
    console.log("✓ Gateway details loaded successfully");
  } catch (error) {
    console.error("Error fetching gateway details:", error);
    const errorMessage = handleFetchError(error, "load gateway details");
    showErrorMessage(errorMessage);
  }
};

/**
 * SECURE: Edit Gateway function
 */
export const editGateway = async function (gatewayId) {
  try {
    console.log(`Editing gateway ID: ${gatewayId}`);

    const response = await fetchWithTimeout(
      `${window.ROOT_PATH}/admin/gateways/${gatewayId}`
    );

    if (!response.ok) {
      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
    }

    const gateway = await response.json();

    console.log("Gateway Details: " + JSON.stringify(gateway, null, 2));

    const isInactiveCheckedBool = isInactiveChecked("gateways");
    let hiddenField = safeGetElement("edit-gateway-show-inactive");
    if (!hiddenField) {
      hiddenField = document.createElement("input");
      hiddenField.type = "hidden";
      hiddenField.name = "is_inactive_checked";
      hiddenField.id = "edit-gateway-show-inactive";
      const editForm = safeGetElement("edit-gateway-form");
      if (editForm) {
        editForm.appendChild(hiddenField);
      }
    }
    hiddenField.value = isInactiveCheckedBool;

    // Set form action and populate fields with validation
    const editForm = safeGetElement("edit-gateway-form");
    if (editForm) {
      editForm.action = `${window.ROOT_PATH}/admin/gateways/${gatewayId}/edit`;
    }

    const nameValidation = validateInputName(gateway.name, "gateway");
    const urlValidation = validateUrl(gateway.url);

    const nameField = safeGetElement("edit-gateway-name");
    const urlField = safeGetElement("edit-gateway-url");
    const descField = safeGetElement("edit-gateway-description");

    const transportField = safeGetElement("edit-gateway-transport");

    if (nameField && nameValidation.valid) {
      nameField.value = nameValidation.value;
    }
    if (urlField && urlValidation.valid) {
      urlField.value = urlValidation.value;
    }
    if (descField) {
      descField.value = decodeHtml(gateway.description || "");
    }

    // Set tags field
    const tagsField = safeGetElement("edit-gateway-tags");
    if (tagsField) {
      const rawTags = gateway.tags
        ? gateway.tags.map((tag) =>
          typeof tag === "object" && tag !== null ? tag.label || tag.id : tag
        )
        : [];
      tagsField.value = rawTags.join(", ");
    }

    const teamId = new URL(window.location.href).searchParams.get("team_id");

    if (teamId) {
      const hiddenInput = document.createElement("input");
      hiddenInput.type = "hidden";
      hiddenInput.name = "team_id";
      hiddenInput.value = teamId;
      editForm.appendChild(hiddenInput);
    }

    const visibility = gateway.visibility
      ? gateway.visibility.toLowerCase()
      : null;
    const publicRadio = safeGetElement("edit-gateway-visibility-public");
    const teamRadio = safeGetElement("edit-gateway-visibility-team");
    const privateRadio = safeGetElement("edit-gateway-visibility-private");

    // Clear all first
    if (publicRadio) {
      publicRadio.checked = false;
    }
    if (teamRadio) {
      teamRadio.checked = false;
    }
    if (privateRadio) {
      privateRadio.checked = false;
    }

    if (visibility) {
      // When public visibility is disabled and we're in a team-scoped view,
      // coerce legacy-public records to team.
      const effectiveVisibility =
        window.ALLOW_PUBLIC_VISIBILITY === false &&
        visibility === "public" &&
        teamId
          ? "team"
          : visibility;
      if (effectiveVisibility === "public" && publicRadio) {
        publicRadio.checked = true;
      } else if (effectiveVisibility === "team" && teamRadio) {
        teamRadio.checked = true;
      } else if (effectiveVisibility === "private" && privateRadio) {
        privateRadio.checked = true;
      }
    }

    if (transportField) {
      transportField.value = gateway.transport || "SSE"; // falls back to Admin.SSE(default)
    }

    const authTypeField = safeGetElement("auth-type-gw-edit");

    if (authTypeField) {
      authTypeField.value = gateway.authType || ""; // falls back to None
    }

    // Auth containers
    const authBasicSection = safeGetElement("auth-basic-fields-gw-edit");
    const authBearerSection = safeGetElement("auth-bearer-fields-gw-edit");
    const authHeadersSection = safeGetElement("auth-headers-fields-gw-edit");
    const authOAuthSection = safeGetElement("auth-oauth-fields-gw-edit");
    const authQueryParamSection = safeGetElement(
      "auth-query_param-fields-gw-edit"
    );

    // Individual fields
    const authUsernameField = safeGetElement(
      "auth-basic-fields-gw-edit"
    )?.querySelector("input[name='auth_username']");
    const authPasswordField = safeGetElement(
      "auth-basic-fields-gw-edit"
    )?.querySelector("input[name='auth_password']");

    const authTokenField = safeGetElement(
      "auth-bearer-fields-gw-edit"
    )?.querySelector("input[name='auth_token']");

    const authHeaderKeyField = safeGetElement(
      "auth-headers-fields-gw-edit"
    )?.querySelector("input[name='auth_header_key']");
    const authHeaderValueField = safeGetElement(
      "auth-headers-fields-gw-edit"
    )?.querySelector("input[name='auth_header_value']");

    // OAuth fields
    const oauthGrantTypeField = safeGetElement("oauth-grant-type-gw-edit");
    const oauthClientIdField = safeGetElement("oauth-client-id-gw-edit");
    const oauthClientSecretField = safeGetElement(
      "oauth-client-secret-gw-edit"
    );
    const oauthTokenUrlField = safeGetElement("oauth-token-url-gw-edit");
    const oauthAuthUrlField = safeGetElement("oauth-authorization-url-gw-edit");
    const oauthRedirectUriField = safeGetElement("oauth-redirect-uri-gw-edit");
    const oauthIssuerField = safeGetElement("oauth-issuer-gw-edit");
    const oauthScopesField = safeGetElement("oauth-scopes-gw-edit");
    const oauthAuthCodeFields = safeGetElement(
      "oauth-auth-code-fields-gw-edit"
    );

    // Hide all auth sections first
    if (authBasicSection) {
      authBasicSection.style.display = "none";
    }
    if (authBearerSection) {
      authBearerSection.style.display = "none";
    }
    if (authHeadersSection) {
      authHeadersSection.style.display = "none";
    }
    if (authOAuthSection) {
      authOAuthSection.style.display = "none";
    }
    if (authQueryParamSection) {
      authQueryParamSection.style.display = "none";
    }

    switch (gateway.authType) {
      case "basic":
        if (authBasicSection) {
          authBasicSection.style.display = "block";
          if (authUsernameField) {
            authUsernameField.value = gateway.authUsername || "";
          }
          if (authPasswordField) {
            if (gateway.authPasswordUnmasked) {
              authPasswordField.dataset.isMasked = "true";
              authPasswordField.dataset.realValue =
                gateway.authPasswordUnmasked;
            } else {
              delete authPasswordField.dataset.isMasked;
              delete authPasswordField.dataset.realValue;
            }
            authPasswordField.value = MASKED_AUTH_VALUE;
          }
        }
        break;
      case "bearer":
        if (authBearerSection) {
          authBearerSection.style.display = "block";
          if (authTokenField) {
            if (gateway.authTokenUnmasked) {
              authTokenField.dataset.isMasked = "true";
              authTokenField.dataset.realValue = gateway.authTokenUnmasked;
              authTokenField.value = MASKED_AUTH_VALUE;
            } else {
              delete authTokenField.dataset.isMasked;
              delete authTokenField.dataset.realValue;
              authTokenField.value = gateway.authToken || "";
            }
          }
        }
        break;
      case "authheaders":
        if (authHeadersSection) {
          authHeadersSection.style.display = "block";
          if (
            Array.isArray(gateway.authHeaders) &&
            gateway.authHeaders.length > 0
          ) {
            loadAuthHeaders(
              "auth-headers-container-gw-edit",
              gateway.authHeaders,
              { maskValues: true }
            );
          } else {
            updateAuthHeadersJSON("auth-headers-container-gw-edit");
          }
          if (authHeaderKeyField) {
            authHeaderKeyField.value = gateway.authHeaderKey || "";
          }
          if (authHeaderValueField) {
            if (
              Array.isArray(gateway.authHeaders) &&
              gateway.authHeaders.length === 1
            ) {
              authHeaderValueField.dataset.isMasked = "true";
              authHeaderValueField.dataset.realValue =
                gateway.authHeaders[0].value ?? "";
            }
            authHeaderValueField.value = MASKED_AUTH_VALUE;
          }
        }
        break;
      case "oauth":
        if (authOAuthSection) {
          authOAuthSection.style.display = "block";
        }
        // Populate OAuth fields if available
        if (gateway.oauthConfig) {
          const config = gateway.oauthConfig;
          if (oauthIssuerField) {
            oauthIssuerField.value = config.issuer || "";
          }
          if (oauthGrantTypeField) {
            oauthGrantTypeField.value = config.grant_type || "";
            // Show/hide authorization code fields based on grant type
            if (oauthAuthCodeFields) {
              oauthAuthCodeFields.style.display =
                config.grant_type === "authorization_code" ? "block" : "none";
            }
          }
          if (oauthClientIdField) {
            oauthClientIdField.value = config.client_id || "";
          }
          if (oauthClientSecretField) {
            oauthClientSecretField.value = ""; // Don't populate secret for security
          }
          if (oauthTokenUrlField) {
            oauthTokenUrlField.value = config.token_url || "";
          }
          if (oauthAuthUrlField) {
            oauthAuthUrlField.value = config.authorization_url || "";
          }
          if (oauthRedirectUriField) {
            oauthRedirectUriField.value = config.redirect_uri || "";
          }
          if (oauthScopesField) {
            oauthScopesField.value = Array.isArray(config.scopes)
              ? config.scopes.join(" ")
              : "";
          }
        }
        break;
      case "query_param":
        if (authQueryParamSection) {
          authQueryParamSection.style.display = "block";
          // Get the input fields within the section
          const queryParamKeyField = authQueryParamSection.querySelector(
            "input[name='auth_query_param_key']"
          );
          const queryParamValueField = authQueryParamSection.querySelector(
            "input[name='auth_query_param_value']"
          );
          if (queryParamKeyField && gateway.authQueryParamKey) {
            queryParamKeyField.value = gateway.authQueryParamKey;
          }
          if (queryParamValueField) {
            // Always show masked value for security
            queryParamValueField.value = MASKED_AUTH_VALUE;
            if (gateway.authQueryParamValueUnmasked) {
              queryParamValueField.dataset.isMasked = "true";
              queryParamValueField.dataset.realValue =
                gateway.authQueryParamValueUnmasked;
            } else {
              delete queryParamValueField.dataset.isMasked;
              delete queryParamValueField.dataset.realValue;
            }
          }
        }
        break;
      case "":
      default:
        // No auth – keep everything hidden
        break;
    }

    // Handle passthrough headers
    const passthroughHeadersField = safeGetElement(
      "edit-gateway-passthrough-headers"
    );
    if (passthroughHeadersField) {
      if (
        gateway.passthroughHeaders &&
        Array.isArray(gateway.passthroughHeaders)
      ) {
        passthroughHeadersField.value = gateway.passthroughHeaders.join(", ");
      } else {
        passthroughHeadersField.value = "";
      }
    }

    openModal("gateway-edit-modal");
    applyVisibilityRestrictions(["edit-gateway-visibility"]); // Disable public radio if restricted, preserve checked state
    console.log("✓ Gateway edit modal loaded successfully");
  } catch (error) {
    console.error("Error fetching gateway for editing:", error);
    const errorMessage = handleFetchError(error, "load gateway for editing");
    showErrorMessage(errorMessage);
  }
};

// ===================================================================
// GATEWAY SELECT (Associated MCP Servers) - search/select/clear
// ===================================================================

export const initGatewaySelect = function (
  selectId = "associatedGateways",
  pillsId = "selectedGatewayPills",
  warnId = "selectedGatewayWarning",
  max = 12,
  selectBtnId = "selectAllGatewayBtn",
  clearBtnId = "clearAllGatewayBtn",
  searchInputId = "searchGateways"
) {
  const container = safeGetElement(selectId);
  const pillsBox = safeGetElement(pillsId);
  const warnBox = safeGetElement(warnId);
  const clearBtn = clearBtnId ? safeGetElement(clearBtnId) : null;
  const selectBtn = selectBtnId ? safeGetElement(selectBtnId) : null;
  const searchInput = searchInputId ? safeGetElement(searchInputId) : null;

  if (!container || !pillsBox || !warnBox) {
    console.warn(
      `Gateway select elements not found: ${selectId}, ${pillsId}, ${warnId}`
    );
    return;
  }

  const pillClasses =
    "inline-block bg-indigo-100 text-indigo-800 text-xs px-2 py-1 rounded-full dark:bg-indigo-900 dark:text-indigo-200";

  // Search functionality
  const applySearch = function () {
    if (!searchInput) {
      return;
    }

    try {
      const query = searchInput.value.toLowerCase().trim();
      const items = container.querySelectorAll(".tool-item");
      let visibleCount = 0;

      items.forEach((item) => {
        const text = item.textContent.toLowerCase();
        if (!query || text.includes(query)) {
          item.style.display = "";
          visibleCount++;
        } else {
          item.style.display = "none";
        }
      });

      // Update "no results" message – ensure element exists even if template is cached
      // Use edit-modal message element when operating on the edit container
      const noMsgId = selectId.includes("Edit")
        ? "noEditGatewayMessage"
        : "noGatewayMessage";
      const searchQuerySpanId = selectId.includes("Edit")
        ? "searchQueryEditServers"
        : "searchQueryServers";
      const { msg: noMsg, span: searchQuerySpan } = ensureNoResultsElement(
        selectId,
        noMsgId,
        searchQuerySpanId,
        "MCP server"
      );

      if (query && visibleCount === 0) {
        container.style.display = "none";
        if (noMsg) {
          noMsg.style.display = "block";
          if (searchQuerySpan) {
            searchQuerySpan.textContent = query;
          }
        }
      } else {
        container.style.display = "";
        if (noMsg) {
          noMsg.style.display = "none";
        }
      }
    } catch (error) {
      console.error("Error applying gateway search:", error);
    }
  };

  // Bind search input
  if (searchInput && !searchInput.dataset.searchBound) {
    searchInput.addEventListener("input", applySearch);
    searchInput.dataset.searchBound = "true";
  }

  const update = function () {
    try {
      const checkboxes = container.querySelectorAll('input[type="checkbox"]');
      const checked = Array.from(checkboxes).filter((cb) => cb.checked);

      // Check if "Select All" mode is active
      const selectAllInput = container.querySelector(
        'input[name="selectAllGateways"]'
      );
      const allIdsInput = container.querySelector(
        'input[name="allGatewayIds"]'
      );

      let count = checked.length;

      // If Select All mode is active, use the count from allGatewayIds
      if (selectAllInput && selectAllInput.value === "true" && allIdsInput) {
        try {
          const allIds = JSON.parse(allIdsInput.value);
          count = allIds.length;
        } catch (e) {
          console.error("Error parsing allGatewayIds:", e);
        }
      }

      // Rebuild pills safely - show first 3, then summarize the rest
      pillsBox.innerHTML = "";
      const maxPillsToShow = 3;

      checked.slice(0, maxPillsToShow).forEach((cb) => {
        const span = document.createElement("span");
        span.className = pillClasses;
        span.textContent =
          cb.nextElementSibling?.textContent?.trim() || "Unnamed";
        pillsBox.appendChild(span);
      });

      // If more than maxPillsToShow, show a summary pill
      if (count > maxPillsToShow) {
        const span = document.createElement("span");
        span.className = pillClasses + " cursor-pointer";
        span.title = "Click to see all selected gateways";
        const remaining = count - maxPillsToShow;
        span.textContent = `+${remaining} more`;
        pillsBox.appendChild(span);
      }

      // Warning when > max
      if (count > max) {
        warnBox.textContent = `Selected ${count} MCP servers. Selecting more than ${max} servers may impact performance.`;
      } else {
        warnBox.textContent = "";
      }

      // Update the Select All button text to show count
      if (selectBtnId) {
        const currentSelectBtn = document.getElementById(selectBtnId);
        if (currentSelectBtn) {
          if (count > 0) {
            currentSelectBtn.textContent = `Select All (${count})`;
          } else {
            currentSelectBtn.textContent = "Select All";
          }
        }
      }
    } catch (error) {
      console.error("Error updating gateway select:", error);
    }
  };

  // Remove old event listeners by cloning and replacing (preserving ID)
  if (clearBtn && !clearBtn.dataset.listenerAttached) {
    clearBtn.dataset.listenerAttached = "true";
    const newClearBtn = clearBtn.cloneNode(true);
    newClearBtn.dataset.listenerAttached = "true";
    clearBtn.parentNode.replaceChild(newClearBtn, clearBtn);

    newClearBtn.addEventListener("click", () => {
      const checkboxes = container.querySelectorAll('input[type="checkbox"]');
      checkboxes.forEach((cb) => (cb.checked = false));

      // Clear the "select all" flag
      const selectAllInput = container.querySelector(
        'input[name="selectAllGateways"]'
      );
      if (selectAllInput) {
        selectAllInput.remove();
      }
      const allIdsInput = container.querySelector(
        'input[name="allGatewayIds"]'
      );
      if (allIdsInput) {
        allIdsInput.remove();
      }

      update();

      // Reload associated items after clearing selection
      reloadAssociatedItems();
    });
  }

  if (selectBtn && !selectBtn.dataset.listenerAttached) {
    selectBtn.dataset.listenerAttached = "true";
    const newSelectBtn = selectBtn.cloneNode(true);
    newSelectBtn.dataset.listenerAttached = "true";
    selectBtn.parentNode.replaceChild(newSelectBtn, selectBtn);

    newSelectBtn.addEventListener("click", async () => {
      // Disable button and show loading state
      newSelectBtn.disabled = true;
      newSelectBtn.textContent = "Selecting all gateways...";

      try {
        // Fetch all gateway IDs from the server.
        // Respect View Public checkbox: keep team_id, add include_public when checked.
        // Use the correct checkbox for the active modal context.
        const selectedTeamId = getCurrentTeamId();
        const vpCbId = selectId.includes("Edit")
          ? "edit-server-view-public"
          : "add-server-view-public";
        const vpCb = document.getElementById(vpCbId);
        const params = new URLSearchParams();
        if (selectedTeamId) {
          params.set("team_id", selectedTeamId);
        }
        if (vpCb && vpCb.checked) {
          params.set("include_public", "true");
        }
        const queryString = params.toString();
        const response = await fetch(
          `${window.ROOT_PATH}/admin/gateways/ids${queryString ? `?${queryString}` : ""}`
        );
        if (!response.ok) {
          throw new Error("Failed to fetch gateway IDs");
        }

        const data = await response.json();
        const allGatewayIds = data.gateway_ids || [];

        // Apply search filter first to determine which items are visible
        applySearch();

        // Check only currently visible checkboxes
        const loadedCheckboxes = container.querySelectorAll(
          'input[type="checkbox"]'
        );
        loadedCheckboxes.forEach((cb) => {
          const parent = cb.closest(".tool-item") || cb.parentElement;
          const isVisible =
            parent && getComputedStyle(parent).display !== "none";
          if (isVisible) {
            cb.checked = true;
          }
        });

        // Add a hidden input to indicate "select all" mode
        // Remove any existing one first
        let selectAllInput = container.querySelector(
          'input[name="selectAllGateways"]'
        );
        if (!selectAllInput) {
          selectAllInput = document.createElement("input");
          selectAllInput.type = "hidden";
          selectAllInput.name = "selectAllGateways";
          container.appendChild(selectAllInput);
        }
        selectAllInput.value = "true";

        // Also store the IDs as a JSON array for the backend
        // Ensure the special 'null' sentinel is included when selecting all
        try {
          const nullCheckbox = container.querySelector(
            'input[data-gateway-null="true"]'
          );
          if (nullCheckbox) {
            // Include the literal string "null" so server-side
            // `any(gid.lower() == 'null' ...)` evaluates to true.
            if (!allGatewayIds.includes("null")) {
              allGatewayIds.push("null");
            }
          }
        } catch (err) {
          console.error("Error ensuring null sentinel in gateway IDs:", err);
        }

        let allIdsInput = container.querySelector(
          'input[name="allGatewayIds"]'
        );
        if (!allIdsInput) {
          allIdsInput = document.createElement("input");
          allIdsInput.type = "hidden";
          allIdsInput.name = "allGatewayIds";
          container.appendChild(allIdsInput);
        }
        allIdsInput.value = JSON.stringify(allGatewayIds);

        update();

        // Reload associated items after selecting all
        reloadAssociatedItems();
      } catch (error) {
        console.error("Error in Select All:", error);
        alert("Failed to select all gateways. Please try again.");
        newSelectBtn.disabled = false;
        update(); // Reset button text via update()
      } finally {
        newSelectBtn.disabled = false;
      }
    });
  }

  update(); // Initial render

  // Attach change listeners to checkboxes (using delegation for dynamic content)
  if (!container.dataset.changeListenerAttached) {
    container.dataset.changeListenerAttached = "true";
    container.addEventListener("change", (e) => {
      if (e.target.type === "checkbox") {
        // Log gateway_id when checkbox is clicked
        // Normalize the special null-gateway checkbox to the literal string "null"
        let gatewayId = e.target.value;
        if (e.target.dataset && e.target.dataset.gatewayNull === "true") {
          gatewayId = "null";
        }
        const gatewayName =
          e.target.nextElementSibling?.textContent?.trim() || "Unknown";
        const isChecked = e.target.checked;

        console.log(
          `[MCP Server Selection] Gateway ID: ${gatewayId}, Name: ${gatewayName}, Checked: ${isChecked}`
        );

        // Check if we're in "Select All" mode
        const selectAllInput = container.querySelector(
          'input[name="selectAllGateways"]'
        );
        const allIdsInput = container.querySelector(
          'input[name="allGatewayIds"]'
        );

        if (selectAllInput && selectAllInput.value === "true" && allIdsInput) {
          // User is manually checking/unchecking after Select All
          // Update the allGatewayIds array to reflect the change
          try {
            let allIds = JSON.parse(allIdsInput.value);

            if (e.target.checked) {
              // Add the ID if it's not already there
              if (!allIds.includes(gatewayId)) {
                allIds.push(gatewayId);
              }
            } else {
              // Remove the ID from the array
              allIds = allIds.filter((id) => id !== gatewayId);
            }

            // Update the hidden field
            allIdsInput.value = JSON.stringify(allIds);
          } catch (error) {
            console.error("Error updating allGatewayIds:", error);
          }
        }

        // No exclusivity: allow the special 'null' gateway (RestTool/Prompts/Resources) to be
        // selected together with real gateways. Server-side filtering already
        // supports mixed lists like `gateway_id=abc,null`.

        update();

        // Trigger reload of associated tools, resources, and prompts with selected gateway filter
        reloadAssociatedItems();
      }
    });
  }

  // Initial render
  applySearch();
  update();
};

/**
 * Get all selected gateway IDs from the gateway selection container
 * @returns {string[]} Array of selected gateway IDs
 */
export const getSelectedGatewayIds = function () {
  // Prefer the gateway selection belonging to the currently active form.
  // If the edit-server modal is open, use the edit modal's gateway container
  // (`associatedEditGateways`). Otherwise use the create form container
  // (`associatedGateways`). This allows the same filtering logic to work
  // for both Add and Edit flows.
  let container = safeGetElement("associatedGateways");
  const editContainer = safeGetElement("associatedEditGateways");

  const editModal = safeGetElement("server-edit-modal");
  const isEditModalOpen = editModal && !editModal.classList.contains("hidden");

  if (isEditModalOpen && editContainer) {
    container = editContainer;
  } else if (
    editContainer &&
    editContainer.offsetParent !== null &&
    !container
  ) {
    // If edit container is visible (e.g. modal rendered) and associatedGateways
    // not present, prefer edit container.
    container = editContainer;
  }

  console.log(
    "[Gateway Selection DEBUG] Container used:",
    container ? container.id : null
  );

  if (!container) {
    console.warn(
      "[Gateway Selection DEBUG] No gateway container found (associatedGateways or associatedEditGateways)"
    );
    return [];
  }

  // Check if "Select All" mode is active
  const selectAllInput = container.querySelector(
    "input[name='selectAllGateways']"
  );
  const allIdsInput = container.querySelector("input[name='allGatewayIds']");

  console.log(
    "[Gateway Selection DEBUG] Select All mode:",
    selectAllInput?.value === "true"
  );
  if (selectAllInput && selectAllInput.value === "true" && allIdsInput) {
    try {
      const allIds = JSON.parse(allIdsInput.value);
      console.log(
        `[Gateway Selection DEBUG] Returning all gateway IDs (${allIds.length} total)`
      );
      return allIds;
    } catch (error) {
      console.error(
        "[Gateway Selection DEBUG] Error parsing allGatewayIds:",
        error
      );
    }
  }

  // Otherwise, get all checked checkboxes. If the special 'null' gateway
  // checkbox is selected, include the sentinel 'null' alongside any real
  // gateway ids. This allows requests like `gateway_id=abc,null` which the
  // server interprets as (gateway_id = abc) OR (gateway_id IS NULL).
  const checkboxes = container.querySelectorAll(
    "input[type='checkbox']:checked"
  );

  const selectedIds = Array.from(checkboxes)
    .map((cb) => {
      // Convert the special null-gateway checkbox to the literal 'null'
      if (cb.dataset?.gatewayNull === "true") {
        return "null";
      }
      return cb.value;
    })
    // Filter out any empty values to avoid sending empty CSV entries
    .filter((id) => id !== "" && id !== null && id !== undefined);

  console.log(
    `[Gateway Selection DEBUG] Found ${selectedIds.length} checked gateway checkboxes`
  );
  console.log("[Gateway Selection DEBUG] Selected gateway IDs:", selectedIds);

  return selectedIds;
};

/**
 * Reload associated tools, resources, and prompts filtered by selected gateway IDs
 */
const reloadAssociatedItems = function () {
  const selectedGatewayIds = getSelectedGatewayIds();
  // Join all selected IDs (including the special 'null' sentinel if present)
  // so the server receives a combined filter like `gateway_id=abc,null`.
  let gatewayIdParam = "";
  if (selectedGatewayIds.length > 0) {
    gatewayIdParam = selectedGatewayIds.join(",");
  }

  console.log(
    `[Filter Update] Reloading associated items for gateway IDs: ${gatewayIdParam || "none (showing all)"}`
  );
  console.log(
    "[Filter Update DEBUG] Selected gateway IDs array:",
    selectedGatewayIds
  );

  // Determine whether to reload the 'create server' containers (associated*)
  // or the 'edit server' containers (edit-server-*). Prefer the edit
  // containers when the edit modal is open or the edit-gateway selector
  // exists and is visible.
  const editModal = safeGetElement("server-edit-modal");
  const isEditModalOpen = editModal && !editModal.classList.contains("hidden");
  const editGateways = safeGetElement("associatedEditGateways");

  const useEditContainers =
    isEditModalOpen || (editGateways && editGateways.offsetParent !== null);

  const toolsContainerId = useEditContainers
    ? "edit-server-tools"
    : "associatedTools";
  const resourcesContainerId = useEditContainers
    ? "edit-server-resources"
    : "associatedResources";
  const promptsContainerId = useEditContainers
    ? "edit-server-prompts"
    : "associatedPrompts";

  // Respect View Public checkbox: always include team_id, add include_public when checked
  const vpCheckboxId = useEditContainers
    ? "edit-server-view-public"
    : "add-server-view-public";
  const vpCheckbox = document.getElementById(vpCheckboxId);
  const urlTeamId = getCurrentTeamId();
  let teamIdSuffix = urlTeamId
    ? `&team_id=${encodeURIComponent(urlTeamId)}`
    : "";
  if (vpCheckbox && vpCheckbox.checked) {
    teamIdSuffix += "&include_public=true";
  }

  // Reload tools
  const toolsContainer = safeGetElement(toolsContainerId);
  if (toolsContainer) {
    let toolsUrl = `${window.ROOT_PATH}/admin/tools/partial?page=1&per_page=50&render=selector`;
    if (gatewayIdParam) {
      toolsUrl += `&gateway_id=${encodeURIComponent(gatewayIdParam)}`;
    }
    toolsUrl += teamIdSuffix;

    console.log(
      "[Filter Update DEBUG] Tools URL:",
      toolsUrl,
      "-> target:",
      `#${toolsContainerId}`
    );

    // Use HTMX to reload the content into the chosen container
    if (window.htmx) {
      window.htmx
        .ajax("GET", toolsUrl, {
          target: `#${toolsContainerId}`,
          swap: "innerHTML",
        })
        .then(() => {
          console.log("[Filter Update DEBUG] Tools reloaded successfully");
          // Re-initialize the tool select after content is loaded
          const pillsId = useEditContainers
            ? "selectedEditToolsPills"
            : "selectedToolsPills";
          const warnId = useEditContainers
            ? "selectedEditToolsWarning"
            : "selectedToolsWarning";
          const selectBtn = useEditContainers
            ? "selectAllEditToolsBtn"
            : "selectAllToolsBtn";
          const clearBtn = useEditContainers
            ? "clearAllEditToolsBtn"
            : "clearAllToolsBtn";

          initToolSelect(
            toolsContainerId,
            pillsId,
            warnId,
            6,
            selectBtn,
            clearBtn
          );

          // Re-apply active search so a previously-hidden container is correctly shown/hidden
          const toolSearchInput = document.getElementById(
            useEditContainers ? "searchEditTools" : "searchTools"
          );
          if (toolSearchInput && toolSearchInput.value.trim()) {
            if (useEditContainers) {
              serverSideEditToolSearch(toolSearchInput.value.trim());
            } else {
              serverSideToolSearch(toolSearchInput.value.trim());
            }
          } else if (toolSearchInput) {
            const toolContainer = document.getElementById(toolsContainerId);
            if (toolContainer) {
              toolContainer.style.display = "";
            }
          }
        })
        .catch((err) => {
          console.error("[Filter Update DEBUG] Tools reload failed:", err);
        });
    } else {
      console.error(
        "[Filter Update DEBUG] HTMX not available for tools reload"
      );
    }
  } else {
    console.warn(
      "[Filter Update DEBUG] Tools container not found ->",
      toolsContainerId
    );
  }

  // Reload resources - use fetch directly to avoid HTMX race conditions
  const resourcesContainer = safeGetElement(resourcesContainerId);
  if (resourcesContainer) {
    let resourcesUrl = `${window.ROOT_PATH}/admin/resources/partial?page=1&per_page=50&render=selector`;
    if (gatewayIdParam) {
      resourcesUrl += `&gateway_id=${encodeURIComponent(gatewayIdParam)}`;
    }
    resourcesUrl += teamIdSuffix;

    console.log("[Filter Update DEBUG] Resources URL:", resourcesUrl);

    // Use fetch() directly instead of htmx.ajax() to avoid race conditions
    fetch(resourcesUrl, {
      method: "GET",
      headers: {
        "HX-Request": "true",
        "HX-Current-URL": window.location.href,
      },
    })
      .then((response) => {
        if (!response.ok) {
          throw new Error(`HTTP ${response.status}: ${response.statusText}`);
        }
        return response.text();
      })
      .then((html) => {
        console.log(
          "[Filter Update DEBUG] Resources fetch successful, HTML length:",
          html.length
        );
        // Flush current DOM state into the Map store before replacing container
        if (resourcesContainerId === "associatedResources") {
          const addResSel = getEditSelections("associatedResources");
          resourcesContainer
            .querySelectorAll('input[name="associatedResources"]')
            .forEach((cb) => {
              const value = String(cb.value);
              if (cb.checked) {
                addResSel.add(value);
              } else {
                addResSel.delete(value);
              }
            });
        }

        resourcesContainer.innerHTML = html;

        // If HTMX is available, process the newly-inserted HTML so hx-*
        // triggers (like the infinite-scroll 'intersect' trigger) are
        // initialized. To avoid HTMX re-triggering the container's
        // own `hx-get`/`hx-trigger="load"` (which would issue a second
        // request without the gateway filter), temporarily remove those
        // attributes from the container while we call `htmx.process`.
        if (window.htmx && typeof window.htmx.process === "function") {
          try {
            // Backup and remove attributes that could auto-fire
            const hadHxGet = resourcesContainer.hasAttribute("hx-get");
            const hadHxTrigger = resourcesContainer.hasAttribute("hx-trigger");
            const oldHxGet = resourcesContainer.getAttribute("hx-get");
            const oldHxTrigger = resourcesContainer.getAttribute("hx-trigger");

            if (hadHxGet) {
              resourcesContainer.removeAttribute("hx-get");
            }
            if (hadHxTrigger) {
              resourcesContainer.removeAttribute("hx-trigger");
            }

            // Process only the newly-inserted inner nodes to initialize
            // any hx-* behavior (infinite scroll, after-swap hooks, etc.)
            window.htmx.process(resourcesContainer);

            // Restore original attributes so the container retains its
            // declarative behavior for future operations, but don't
            // re-process (we already processed child nodes).
            if (hadHxGet && oldHxGet !== null) {
              resourcesContainer.setAttribute("hx-get", oldHxGet);
            }
            if (hadHxTrigger && oldHxTrigger !== null) {
              resourcesContainer.setAttribute("hx-trigger", oldHxTrigger);
            }

            console.log(
              "[Filter Update DEBUG] htmx.process called on resources container (attributes temporarily removed)"
            );
          } catch (e) {
            console.warn("[Filter Update DEBUG] htmx.process failed:", e);
          }
        }

        // Re-initialize the resource select after content is loaded
        const resPills = useEditContainers
          ? "selectedEditResourcesPills"
          : "selectedResourcesPills";
        const resWarn = useEditContainers
          ? "selectedEditResourcesWarning"
          : "selectedResourcesWarning";
        const resSelectBtn = useEditContainers
          ? "selectAllEditResourcesBtn"
          : "selectAllResourcesBtn";
        const resClearBtn = useEditContainers
          ? "clearAllEditResourcesBtn"
          : "clearAllResourcesBtn";

        // Restore persisted selections from Map store (Add Server mode)
        if (resourcesContainerId === "associatedResources") {
          try {
            const addResSel = getEditSelections("associatedResources");
            if (addResSel.size > 0) {
              const resourceCheckboxes = resourcesContainer.querySelectorAll(
                'input[type="checkbox"][name="associatedResources"]'
              );
              resourceCheckboxes.forEach((cb) => {
                if (addResSel.has(String(cb.value))) {
                  cb.checked = true;
                }
              });
            }
          } catch (e) {
            console.warn("Error restoring persisted resource selections:", e);
          }
        }

        initResourceSelect(
          resourcesContainerId,
          resPills,
          resWarn,
          6,
          resSelectBtn,
          resClearBtn
        );

        // Re-apply server-associated resource selections so selections
        // persist across gateway-filtered reloads (Edit Server mode).
        // The resources partial replaces checkbox inputs; use the container's
        // `data-server-resources` attribute (set when opening edit modal)
        // to restore checked state.
        try {
          const dataAttr = resourcesContainer.getAttribute(
            "data-server-resources"
          );
          if (dataAttr) {
            const associated = JSON.parse(dataAttr);
            if (Array.isArray(associated) && associated.length > 0) {
              const resourceCheckboxes = resourcesContainer.querySelectorAll(
                'input[type="checkbox"][name="associatedResources"]'
              );
              resourceCheckboxes.forEach((cb) => {
                const val = cb.value;
                if (!Number.isNaN(val) && associated.includes(val)) {
                  cb.checked = true;
                }
              });

              // Trigger change so pills and counts update
              const event = new Event("change", {
                bubbles: true,
              });
              resourcesContainer.dispatchEvent(event);
            }
          }
        } catch (e) {
          console.warn("Error restoring associated resources:", e);
        }
        // Re-apply active search so a previously-hidden container is correctly shown/hidden
        const resSearchInput = document.getElementById(
          useEditContainers ? "searchEditResources" : "searchResources"
        );
        if (resSearchInput && resSearchInput.value.trim()) {
          if (useEditContainers) {
            serverSideEditResourcesSearch(resSearchInput.value.trim());
          } else {
            serverSideResourceSearch(resSearchInput.value.trim());
          }
        } else if (resSearchInput) {
          if (resourcesContainer) {
            resourcesContainer.style.display = "";
          }
        }
        console.log(
          "[Filter Update DEBUG] Resources reloaded successfully via fetch"
        );
      })
      .catch((err) => {
        console.error("[Filter Update DEBUG] Resources reload failed:", err);
      });
  } else {
    console.warn("[Filter Update DEBUG] Resources container not found");
  }

  // Reload prompts
  const promptsContainer = safeGetElement(promptsContainerId);
  if (promptsContainer) {
    let promptsUrl = `${window.ROOT_PATH}/admin/prompts/partial?page=1&per_page=50&render=selector`;
    if (gatewayIdParam) {
      promptsUrl += `&gateway_id=${encodeURIComponent(gatewayIdParam)}`;
    }
    promptsUrl += teamIdSuffix;

    // Flush current DOM state into the Map store before HTMX replaces the container
    if (promptsContainerId === "associatedPrompts") {
      try {
        const addPromptSel = getEditSelections("associatedPrompts");
        promptsContainer
          .querySelectorAll('input[name="associatedPrompts"]')
          .forEach((cb) => {
            const value = String(cb.value);
            if (cb.checked) {
              addPromptSel.add(value);
            } else {
              addPromptSel.delete(value);
            }
          });
      } catch (e) {
        console.error(
          "Error capturing current prompt selections before reload:",
          e
        );
      }
    }

    if (window.htmx) {
      window.htmx
        .ajax("GET", promptsUrl, {
          target: `#${promptsContainerId}`,
          swap: "innerHTML",
        })
        .then(() => {
          // Restore persisted selections from Map store (Add Server mode)
          if (promptsContainerId === "associatedPrompts") {
            try {
              const addPromptSel = getEditSelections("associatedPrompts");
              const containerEl = document.getElementById(promptsContainerId);
              if (containerEl && addPromptSel.size > 0) {
                const promptCheckboxes = containerEl.querySelectorAll(
                  'input[type="checkbox"][name="associatedPrompts"]'
                );
                promptCheckboxes.forEach((cb) => {
                  if (addPromptSel.has(String(cb.value))) {
                    cb.checked = true;
                  }
                });
              }
            } catch (e) {
              console.error(
                "Error restoring prompt selections after HTMX reload:",
                e
              );
            }
          }
          // Re-initialize the prompt select after content is loaded
          const pPills = useEditContainers
            ? "selectedEditPromptsPills"
            : "selectedPromptsPills";
          const pWarn = useEditContainers
            ? "selectedEditPromptsWarning"
            : "selectedPromptsWarning";
          const pSelectBtn = useEditContainers
            ? "selectAllEditPromptsBtn"
            : "selectAllPromptsBtn";
          const pClearBtn = useEditContainers
            ? "clearAllEditPromptsBtn"
            : "clearAllPromptsBtn";

          initPromptSelect(
            promptsContainerId,
            pPills,
            pWarn,
            6,
            pSelectBtn,
            pClearBtn
          );

          // Re-apply active search so a previously-hidden container is correctly shown/hidden
          const promptSearchInput = document.getElementById(
            useEditContainers ? "searchEditPrompts" : "searchPrompts"
          );
          if (promptSearchInput && promptSearchInput.value.trim()) {
            if (useEditContainers) {
              serverSideEditPromptsSearch(promptSearchInput.value.trim());
            } else {
              serverSidePromptSearch(promptSearchInput.value.trim());
            }
          } else if (promptSearchInput) {
            const promptContainer = document.getElementById(promptsContainerId);
            if (promptContainer) {
              promptContainer.style.display = "";
            }
          }
        });
    }
  }
};

// ===================================================================
// ENHANCED GATEWAY TEST FUNCTIONALITY
// ===================================================================

let gatewayTestHeadersEditor = null;
let gatewayTestBodyEditor = null;
let gatewayTestFormHandler = null;
let gatewayTestCloseHandler = null;

export const testGateway = async function (gatewayURL) {
  try {
    console.log("Opening gateway test modal for:", gatewayURL);

    // Validate URL
    const urlValidation = validateUrl(gatewayURL);
    if (!urlValidation.valid) {
      showErrorMessage(`Invalid gateway URL: ${urlValidation.error}`);
      return;
    }

    // Clean up any existing event listeners first
    cleanupGatewayTestModal();

    // Clear previous result before opening
    const responseDiv = safeGetElement("gateway-test-response-json");
    const resultDiv = safeGetElement("gateway-test-result");
    if (responseDiv) {
      responseDiv.textContent = "";
    }
    if (resultDiv) {
      resultDiv.classList.add("hidden");
    }

    // Open the modal
    openModal("gateway-test-modal");

    // Initialize CodeMirror editors if they don't exist
    if (!gatewayTestHeadersEditor) {
      const headersElement = safeGetElement("gateway-test-headers");
      if (headersElement && window.CodeMirror) {
        gatewayTestHeadersEditor = window.CodeMirror.fromTextArea(
          headersElement,
          {
            mode: "application/json",
            lineNumbers: true,
            lineWrapping: true,
          }
        );
        gatewayTestHeadersEditor.setSize(null, 100);
        console.log("✓ Initialized gateway test headers editor");
      }
    }

    if (!gatewayTestBodyEditor) {
      const bodyElement = safeGetElement("gateway-test-body");
      if (bodyElement && window.CodeMirror) {
        gatewayTestBodyEditor = window.CodeMirror.fromTextArea(bodyElement, {
          mode: "application/json",
          lineNumbers: true,
          lineWrapping: true,
        });
        gatewayTestBodyEditor.setSize(null, 100);
        console.log("✓ Initialized gateway test body editor");
      }
    }

    // Set form action and URL
    const form = safeGetElement("gateway-test-form");
    const urlInput = safeGetElement("gateway-test-url");

    if (form) {
      form.action = `${window.ROOT_PATH}/admin/gateways/test`;
    }
    if (urlInput) {
      urlInput.value = urlValidation.value;
    }

    // Set up form submission handler
    if (form) {
      gatewayTestFormHandler = async (e) => {
        await handleGatewayTestSubmit(e);
      };
      form.addEventListener("submit", gatewayTestFormHandler);
    }

    // Set up close button handler
    const closeButton = safeGetElement("gateway-test-close");
    if (closeButton) {
      gatewayTestCloseHandler = () => {
        handleGatewayTestClose();
      };
      closeButton.addEventListener("click", gatewayTestCloseHandler);
    }
  } catch (error) {
    console.error("Error setting up gateway test modal:", error);
    showErrorMessage("Failed to open gateway test modal");
  }
};

const handleGatewayTestSubmit = async function (e) {
  e.preventDefault();

  const loading = safeGetElement("gateway-test-loading");
  const responseDiv = safeGetElement("gateway-test-response-json");
  const resultDiv = safeGetElement("gateway-test-result");
  const testButton = safeGetElement("gateway-test-submit");

  try {
    // Show loading
    if (loading) {
      loading.classList.remove("hidden");
    }
    if (resultDiv) {
      resultDiv.classList.add("hidden");
    }
    if (testButton) {
      testButton.disabled = true;
      testButton.textContent = "Testing...";
    }

    const form = e.target;
    const url = form.action;

    // Get form data with validation
    const formData = new FormData(form);
    const baseUrl = formData.get("url");
    const method = formData.get("method");
    const path = formData.get("path");
    const contentType = formData.get("content_type") || "application/json";

    // Validate URL
    const urlValidation = validateUrl(baseUrl);
    if (!urlValidation.valid) {
      throw new Error(`Invalid URL: ${urlValidation.error}`);
    }

    // Get CodeMirror content safely
    let headersRaw = "";
    let bodyRaw = "";

    if (gatewayTestHeadersEditor) {
      try {
        headersRaw = gatewayTestHeadersEditor.getValue() || "";
      } catch (error) {
        console.error("Error getting headers value:", error);
      }
    }

    if (gatewayTestBodyEditor) {
      try {
        bodyRaw = gatewayTestBodyEditor.getValue() || "";
      } catch (error) {
        console.error("Error getting body value:", error);
      }
    }

    // Validate and parse JSON safely
    const headersValidation = validateJson(headersRaw, "Headers");
    const bodyValidation = validateJson(bodyRaw, "Body");

    if (!headersValidation.valid) {
      throw new Error(headersValidation.error);
    }

    if (!bodyValidation.valid) {
      throw new Error(bodyValidation.error);
    }

    // Process body based on content type
    let processedBody = bodyValidation.value;
    if (
      contentType === "application/x-www-form-urlencoded" &&
      bodyValidation.value &&
      typeof bodyValidation.value === "object"
    ) {
      // Convert JSON object to URL-encoded string
      const params = new URLSearchParams();
      Object.entries(bodyValidation.value).forEach(([key, value]) => {
        params.append(key, String(value));
      });
      processedBody = params.toString();
    }

    const payload = {
      base_url: urlValidation.value,
      method,
      path,
      headers: headersValidation.value,
      body: processedBody,
      content_type: contentType,
    };

    // Make the request with timeout
    const response = await fetchWithTimeout(url, {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify(payload),
    });

    const result = await response.json();

    const isSuccess =
      result.statusCode && result.statusCode >= 200 && result.statusCode < 300;

    const alertType = isSuccess ? "success" : "error";
    const icon = isSuccess ? "✅" : "❌";
    const title = isSuccess ? "Connection Successful" : "Connection Failed";
    const statusCode = result.statusCode || "Unknown";
    const latency = result.latencyMs != null ? `${result.latencyMs}ms` : "NA";
    const body = result.body
      ? `<details open>
                <summary class='cursor-pointer'><strong>Response Body</strong></summary>
                <pre class="text-sm px-4 max-h-96 dark:bg-gray-800 dark:text-gray-100 overflow-auto">${JSON.stringify(result.body, null, 2)}</pre>
            </details>`
      : "";

    responseDiv.innerHTML = `
        <div class="alert alert-${alertType}">
            <h4><strong>${icon} ${title}</strong></h4>
            <p><strong>Status Code:</strong> ${statusCode}</p>
            <p><strong>Response Time:</strong> ${latency}</p>
            ${body}
        </div>
        `;
  } catch (error) {
    console.error("Gateway test error:", error);
    if (responseDiv) {
      const errorDiv = document.createElement("div");
      errorDiv.className = "text-red-600 p-4";
      errorDiv.textContent = `❌ Error: ${error.message}`;
      responseDiv.innerHTML = "";
      responseDiv.appendChild(errorDiv);
    }
  } finally {
    if (loading) {
      loading.classList.add("hidden");
    }
    if (resultDiv) {
      resultDiv.classList.remove("hidden");
    }

    testButton.disabled = false;
    testButton.textContent = "Test";
  }
};

const handleGatewayTestClose = function () {
  try {
    // Reset form
    const form = safeGetElement("gateway-test-form");
    if (form) {
      form.reset();
    }

    // Clear editors
    if (gatewayTestHeadersEditor) {
      try {
        gatewayTestHeadersEditor.setValue("");
      } catch (error) {
        console.error("Error clearing headers editor:", error);
      }
    }

    if (gatewayTestBodyEditor) {
      try {
        gatewayTestBodyEditor.setValue("");
      } catch (error) {
        console.error("Error clearing body editor:", error);
      }
    }

    // Clear response
    const responseDiv = safeGetElement("gateway-test-response-json");
    const resultDiv = safeGetElement("gateway-test-result");

    if (responseDiv) {
      responseDiv.innerHTML = "";
    }
    if (resultDiv) {
      resultDiv.classList.add("hidden");
    }

    // Close modal
    closeModal("gateway-test-modal");
  } catch (error) {
    console.error("Error closing gateway test modal:", error);
  }
};

export const cleanupGatewayTestModal = function () {
  try {
    const form = safeGetElement("gateway-test-form");
    const closeButton = safeGetElement("gateway-test-close");

    // Remove existing event listeners
    if (form && gatewayTestFormHandler) {
      form.removeEventListener("submit", gatewayTestFormHandler);
      gatewayTestFormHandler = null;
    }

    if (closeButton && gatewayTestCloseHandler) {
      closeButton.removeEventListener("click", gatewayTestCloseHandler);
      gatewayTestCloseHandler = null;
    }

    console.log("✓ Cleaned up gateway test modal listeners");
  } catch (error) {
    console.error("Error cleaning up gateway test modal:", error);
  }
};

/**
 * Refresh (or first-time fetch) tools for a gateway via the unified refresh endpoint.
 * Works for all auth types. Shows a toast with delta counts on success.
 *
 * @param {string} gatewayId - ID of the gateway
 * @param {string} gatewayName - Display name for toast messages
 * @param {HTMLElement|null} buttonEl - Optional button element for loading-state feedback
 */
export const refreshGatewayTools = async function (gatewayId, gatewayName, buttonEl) {
  const origText = buttonEl ? buttonEl.textContent : "";
  if (buttonEl) {
    buttonEl.disabled = true;
    buttonEl.textContent = "⏳ Refreshing...";
  }

  try {
    const response = await fetch(
      `${window.ROOT_PATH}/gateways/${gatewayId}/tools/refresh`,
      {
        method: "POST",
        credentials: "include", // pragma: allowlist secret
        headers: { Accept: "application/json" },
      }
    );

    const data = await response.json();
    if (!response.ok) {
      throw new Error(data.detail || data.message || "Refresh failed");
    }

    // Check if the refresh operation itself succeeded (even if HTTP 200)
    if (data.success === false || data.error) {
      throw new Error(data.error || "Refresh failed on the server");
    }

    showSuccessMessage(
      `${gatewayName}: ${data.toolsAdded ?? 0} added, ${data.toolsUpdated ?? 0} updated, ${data.toolsRemoved ?? 0} removed`
    );

    // Reload the gateways partial table via HTMX to reflect updated tool counts / button labels.
    // Use buildTableUrl to preserve current pagination, search, filter, and team scope.
    const _refreshParams = {
      include_inactive: (
        document.getElementById("show-inactive-gateways")?.checked ?? true
      ).toString(),
      q: document.getElementById("gateways-search-input")?.value || "",
      tags: document.getElementById("gateways-tag-filter")?.value || "",
    };
    const _teamId = getCurrentTeamId();
    if (_teamId) {
      _refreshParams.team_id = _teamId;
    }
    const reloadUrl = buildTableUrl(
      "gateways",
      `${window.ROOT_PATH}/admin/gateways/partial`,
      _refreshParams
    );
    window.htmx.ajax("GET", reloadUrl, {
      target: "#gateways-table",
      swap: "outerHTML",
    });
  } catch (err) {
    console.error("refreshGatewayTools error:", err);
    showErrorMessage(
      `Failed to refresh tools for ${gatewayName}: ${err.message}`
    );
  } finally {
    if (buttonEl) {
      buttonEl.disabled = false;
      buttonEl.textContent = origText;
    }
  }
}

/**
 * Refresh tools for all currently selected gateways in the virtual server edit form.
 * After completion, triggers an HTMX reload of the tools selector list.
 *
 * @param {HTMLElement} buttonEl - The button element clicked
 */
export const refreshToolsForSelectedGateways = async function(buttonEl) {
  const gwIds =
    typeof getSelectedGatewayIds === "function" ? getSelectedGatewayIds() : [];

  // Filter out the REST/A2A sentinel ("null") — it has no MCP server to refresh.
  const realGwIds = gwIds.filter((id) => id !== "null");

  if (!realGwIds.length) {
    showErrorMessage("Select at least one MCP gateway first.");
    return;
  }

  const origText = buttonEl.textContent;
  buttonEl.disabled = true;
  buttonEl.textContent = "⏳ Refreshing...";

  let added = 0;
  let updated = 0;
  let removed = 0;
  let failed = 0;

  await Promise.allSettled(
    realGwIds.map(async (gid) => {
      try {
        const res = await fetch(
          `${window.ROOT_PATH}/gateways/${gid}/tools/refresh`,
          {
            method: "POST",
            credentials: "include", // pragma: allowlist secret
            headers: { Accept: "application/json" },
          }
        );
        const data = await res.json();
        if (res.ok && data.success !== false) {
          added += data.toolsAdded ?? 0;
          updated += data.toolsUpdated ?? 0;
          removed += data.toolsRemoved ?? 0;
        } else {
          failed++;
        }
      } catch (_) {
        failed++;
      }
    })
  );

  buttonEl.disabled = false;
  buttonEl.textContent = origText;

  const deltaMsg =
    added || updated || removed
      ? `${added} added, ${updated} updated, ${removed} removed`
      : "No changes detected";
  if (failed) {
    showErrorMessage(`${failed} gateway(s) failed. ${deltaMsg}`);
  } else {
    showSuccessMessage(deltaMsg);
  }

  // Reload the tools selector to pick up newly discovered tools.
  // Use reloadAssociatedItems which correctly determines whether the
  // edit modal or create form is active, and issues a proper htmx.ajax
  // reload with the right container and gateway filter.
  if (typeof reloadAssociatedItems === "function") {
    reloadAssociatedItems();
  }
}

// ---------------------------------------------------------------------------
// Personal Credential Management
// ---------------------------------------------------------------------------

/**
 * Open the credential modal for a gateway, checking current credential status.
 */
export const openCredentialModal = async function (gatewayId, gatewayName) {
  document.getElementById("credential-gateway-id").value = gatewayId;
  document.getElementById("credential-gateway-name").textContent = gatewayName || gatewayId;
  document.getElementById("credential-value").value = "";
  document.getElementById("credential-label").value = "";
  document.getElementById("credential-type").value = "api_key";
  const statusEl = document.getElementById("credential-status");
  statusEl.classList.add("hidden");

  // Check if user already has a credential for this gateway
  try {
    const res = await fetchWithTimeout(`${window.ROOT_PATH}/credentials/${gatewayId}`, {
      headers: { Accept: "application/json" },
    });
    if (res.ok) {
      const data = await res.json();
      if (data.has_credential) {
        statusEl.innerHTML = `<span class="text-green-600 dark:text-green-400">✓ You have a stored <strong>${data.credential_type}</strong> credential${data.label ? ` (${data.label})` : ""}. Submitting will replace it.</span>`;
        statusEl.classList.remove("hidden");
        if (data.credential_type) {
          document.getElementById("credential-type").value = data.credential_type;
        }
        if (data.label) {
          document.getElementById("credential-label").value = data.label;
        }
      }
    }
  } catch (_) {
    // Silently ignore — modal still opens
  }

  openModal("credential-modal");
};

/**
 * Submit the credential form to store a personal credential.
 */
export const submitCredential = async function () {
  const gatewayId = document.getElementById("credential-gateway-id").value;
  const credentialType = document.getElementById("credential-type").value;
  const credentialValue = document.getElementById("credential-value").value;
  const label = document.getElementById("credential-label").value || null;

  if (!credentialValue) {
    showErrorMessage("Credential value is required");
    return;
  }

  try {
    const res = await fetchWithTimeout(`${window.ROOT_PATH}/credentials/${gatewayId}`, {
      method: "POST",
      headers: { "Content-Type": "application/json", Accept: "application/json" },
      body: JSON.stringify({
        credential_type: credentialType,
        credential_value: credentialValue,
        label: label,
      }),
    });
    const data = await res.json();
    if (res.ok && data.success) {
      showSuccessMessage("Personal credential stored successfully");
      closeModal("credential-modal");
    } else {
      showErrorMessage(data.detail || data.message || "Failed to store credential");
    }
  } catch (err) {
    showErrorMessage(`Failed to store credential: ${err.message}`);
  }
};

/**
 * Revoke the stored credential for the current gateway.
 */
export const revokeCredential = async function () {
  const gatewayId = document.getElementById("credential-gateway-id").value;
  if (!confirm("Are you sure you want to revoke your personal credential for this gateway?")) {
    return;
  }

  try {
    const res = await fetchWithTimeout(`${window.ROOT_PATH}/credentials/${gatewayId}`, {
      method: "DELETE",
      headers: { Accept: "application/json" },
    });
    const data = await res.json();
    if (res.ok && data.success) {
      showSuccessMessage("Personal credential revoked");
      closeModal("credential-modal");
    } else {
      showErrorMessage(data.message || "No credential found to revoke");
    }
  } catch (err) {
    showErrorMessage(`Failed to revoke credential: ${err.message}`);
  }
};