fusion/packages/dashboard/app/components/settings/sections/SourceControlGlobalSection.tsx

import type { GlobalSettings } from "@fusion/core";
import { useTranslation } from "react-i18next";
import { TrackingRepoSelect, type TrackingRepoOption } from "../../TrackingRepoSelect";
import { SettingsSelectRow } from "../SettingsSelectRow";
import { SettingsToggleRow } from "../SettingsToggleRow";
import { SettingsTextRow } from "../SettingsTextRow";
import { SettingsHelpTip } from "../SettingsHelpTip";
import type { SectionBaseProps } from "./context";

type GlobalSourceControlSettings = Pick<GlobalSettings, "gitlabEnabled" | "gitlabInstanceUrl" | "gitlabApiBaseUrl" | "gitlabAuthToken" | "gitlabAuthTokenType" | "reportRoadmapDedupeEnabled" | "reportRoadmapLabel" | "reportRoadmapRepo" | "jiraEnabled" | "jiraBaseUrl" | "jiraApiBaseUrl" | "jiraAuthEmail" | "jiraAuthTokenSecretKey" | "jiraAuthTokenSecretScope" | "jiraBranchNameTemplate">;

export interface SourceControlGlobalSectionProps extends SectionBaseProps {
    globalSettings: GlobalSourceControlSettings | null;
    onGlobalSourceControlSettingsChange: (patch: Partial<GlobalSourceControlSettings>) => void;
    globalTrackingRepoOptions: TrackingRepoOption[];
    globalTrackingRepoLoading: boolean;
    globalTrackingRepoError: string | null;
}

/*
FNXC:SourceControl 2026-07-15-20:30:
The global GitLab fallbacks and the global default tracking repo moved out of "General · Global" into their own section, adjacent to "Source Control · Project" under the Integrations nav group. They are integrations with GitHub/GitLab, not general app preferences, and pairing the two scopes is what lets an operator see a global fallback and its project override without hunting across unrelated sections.
NOTE for future edits: `splitSettingsSave` (save-split.ts) gates these nine dual-scope keys on the ACTIVE SECTION ID — they route to the global patch only while this section is open, and to the project patch everywhere else. That guard names `source-control-global` literally. Renaming this section id without updating save-split.ts would silently write these global fallbacks into project settings.

FNXC:SettingsScope 2026-07-15-20:30:
No scope badge on any row here: all nine keys (`gitlabEnabled`, `gitlabInstanceUrl`, `gitlabApiBaseUrl`, `gitlabAuthTokenType`, `gitlabAuthToken`, `githubTrackingDefaultRepo`, `reportRoadmapDedupeEnabled`, `reportRoadmapLabel`, `reportRoadmapRepo`) are declared in BOTH `DEFAULT_GLOBAL_SETTINGS` and `DEFAULT_PROJECT_SETTINGS`, so no badge can state their scope honestly. The section name ("Source Control · Global") carries it, as does each label's "Global …" prefix.

FNXC:SettingsStyling 2026-07-15-20:30:
Plain label+control+help rows use the shared primitives; `gitlabAuthToken` uses the primitive's `type: "password"` (defaulting `autocomplete="off"`). The tracking-repo select and the disclosure chrome stay bespoke — they are custom widgets, not label+control+help rows.
*/
export function SourceControlGlobalSection({ form, setForm, globalSettings, onGlobalSourceControlSettingsChange, globalTrackingRepoOptions, globalTrackingRepoLoading, globalTrackingRepoError, }: SourceControlGlobalSectionProps) {
    const { t } = useTranslation("app");
    /*
    FNXC:GitLabEnablement 2026-07-04-00:00:
    The GitLab rows read from the SCOPED global values (`globalSettings`), not the merged `form`, so a project override never renders as the global fallback's value. `form` is only the fallback while the scoped fetch is in flight.
    */
    const globalSourceControl = globalSettings ?? form;
    const globalGitlab = globalSourceControl;
    return (<>
      {/* FNXC:SettingsHelp 2026-07-16-12:45: Inline help moved behind the shared "?" affordance beside the label — operator requirement: no inline description paragraphs in Settings. The bespoke TrackingRepoSelect widget is no obstacle: the tip belongs to the label line, not the control. */}
      <div className="form-group">
        <div className="settings-field-label-row">
          <label htmlFor="globalGithubTrackingDefaultRepo">{t("settings.globalGeneral.globalDefaultTrackingRepo", "Global default tracking repo")}</label>
          <SettingsHelpTip settingKey="globalGithubTrackingDefaultRepo">{t("settings.globalGeneral.projectsInheritThisValueWhenTheyDoNot", "Projects inherit this value when they do not set a project default tracking repo. No default — unset.")}</SettingsHelpTip>
        </div>
        <TrackingRepoSelect id="globalGithubTrackingDefaultRepo" ariaLabel="Global default tracking repo" value={form.githubTrackingDefaultRepo ?? ""} options={globalTrackingRepoOptions} loading={globalTrackingRepoLoading} error={globalTrackingRepoError ?? undefined} placeholder={t("settings.globalGeneral.ownerRepo", "owner/repo")} onChange={(nextValue) => setForm((f) => ({ ...f, githubTrackingDefaultRepo: nextValue || undefined }))}/>
      </div>
      {/* FNXC:ReportPipeline 2026-07-18-20:45: FR-30 exposes global fallback values beside the global tracking repository so operators can configure a machine-wide public-roadmap policy without creating a project override. */}
      <SettingsToggleRow
        descriptor={{
          key: "reportRoadmapDedupeEnabled",
          label: t("settings.globalGeneral.reportRoadmapDedupeEnabled", "Global public-roadmap deduplication"),
          help: t("settings.globalGeneral.reportRoadmapDedupeEnabledHelp", "Fallback for projects that do not set a public-roadmap deduplication preference. No default — unset (projects default to enabled)."),
        }}
        value={globalSourceControl.reportRoadmapDedupeEnabled ?? true}
        onChange={(value) => onGlobalSourceControlSettingsChange({ reportRoadmapDedupeEnabled: value ?? undefined })}
      />
      <SettingsTextRow
        descriptor={{
          key: "reportRoadmapLabel",
          label: t("settings.globalGeneral.reportRoadmapLabel", "Global public roadmap label"),
          help: t("settings.globalGeneral.reportRoadmapLabelHelp", "Fallback label for open public-roadmap issues when a project does not set one. No default — unset (projects default to roadmap)."),
        }}
        value={globalSourceControl.reportRoadmapLabel ?? ""}
        onChange={(value) => onGlobalSourceControlSettingsChange({ reportRoadmapLabel: value || undefined })}
      />
      <SettingsTextRow
        descriptor={{
          key: "reportRoadmapRepo",
          label: t("settings.globalGeneral.reportRoadmapRepo", "Global public roadmap repository (optional)"),
          help: t("settings.globalGeneral.reportRoadmapRepoHelp", "Fallback GitHub owner/repository for public-roadmap issues. When unset, uses the tracking repository. No default — unset."),
          placeholder: "owner/repository",
        }}
        value={globalSourceControl.reportRoadmapRepo ?? ""}
        onChange={(value) => onGlobalSourceControlSettingsChange({ reportRoadmapRepo: value || undefined })}
      />
      {/*
        FNXC:GitLabEnablement 2026-07-02-00:00:
        FN-7453 adds a global GitLab enable fallback that can disable outbound GitLab HTTP API operations without deleting saved self-managed URL or token settings. Projects can override the enabled state when they need GitLab active while the global fallback is off.
      */}
      <details className="settings-gitlab-disclosure" data-testid="global-gitlab-configuration-disclosure">
        <summary>
          <span className="settings-gitlab-disclosure__title">{t("settings.globalGeneral.gitLabConfiguration", "GitLab Configuration")}</span>
          <label className="checkbox-label settings-gitlab-disclosure__toggle" htmlFor="globalGitlabEnabled" onClick={(event) => event.stopPropagation()}>
            <input id="globalGitlabEnabled" type="checkbox" checked={globalGitlab.gitlabEnabled !== false} onChange={(e) => onGlobalSourceControlSettingsChange({ gitlabEnabled: e.target.checked })}/>
            {t("settings.globalGeneral.enableGitLabIntegration", "Enable GitLab integration")}
          </label>
          {/*
          FNXC:SettingsHelp 2026-07-16-12:45:
          Inline disclosure hint moved behind the shared "?" affordance beside the summary title — operator requirement: no inline description paragraphs in Settings.
          The copy stays conditional on `gitlabEnabled` inside the tip. The wrapping span stops propagation, same as the summary's checkbox label, so opening the tip never toggles the disclosure.
          */}
          <span onClick={(event) => event.stopPropagation()}>
            <SettingsHelpTip settingKey="global-gitlab-configuration">{globalGitlab.gitlabEnabled === false ? t("settings.globalGeneral.gitLabDisabledHint", "GitLab API operations are disabled by global default. Saved URL and token fallbacks remain stored for re-enable.") : t("settings.globalGeneral.gitLabEnabledHint", "Global GitLab URL and token fallbacks apply to projects that do not set their own values. No default — unset (unset behaves as enabled until explicitly disabled).")}</SettingsHelpTip>
          </span>
        </summary>
        <div className="settings-gitlab-disclosure__body" aria-disabled={globalGitlab.gitlabEnabled === false}>
          <SettingsTextRow
            descriptor={{
              key: "gitlabInstanceUrl",
              label: t("settings.globalGeneral.gitLabInstanceUrl", "Global GitLab instance URL"),
              help: t("settings.globalGeneral.gitLabInstanceUrlHint", "Blank defaults to GitLab.com. Projects inherit this self-managed GitLab URL unless they set their own project value. No default — unset."),
              type: "url",
              placeholder: "https://gitlab.com",
              disabled: globalGitlab.gitlabEnabled === false,
            }}
            value={globalGitlab.gitlabInstanceUrl ?? ""}
            onChange={(v) => onGlobalSourceControlSettingsChange({ gitlabInstanceUrl: v || undefined })}
          />
          <SettingsTextRow
            descriptor={{
              key: "gitlabApiBaseUrl",
              label: t("settings.globalGeneral.gitLabApiBaseUrlOptional", "Global GitLab API base URL (optional / advanced)"),
              help: t("settings.globalGeneral.gitLabApiBaseUrlHint", "Blank derives <instance>/api/v4. Override only for self-managed GitLab API gateways that use a different absolute http:// or https:// URL. No default — unset."),
              type: "url",
              placeholder: "https://gitlab.com/api/v4",
              disabled: globalGitlab.gitlabEnabled === false,
            }}
            value={globalGitlab.gitlabApiBaseUrl ?? ""}
            onChange={(v) => onGlobalSourceControlSettingsChange({ gitlabApiBaseUrl: v || undefined })}
          />
          <SettingsSelectRow
            descriptor={{
              key: "gitlabAuthTokenType",
              label: t("settings.globalGeneral.gitLabTokenType", "Global GitLab token type"),
              help: t("settings.globalGeneral.gitLabTokenTypeHint", "No default — unset (the selector falls back to personal access token until you choose otherwise)."),
              disabled: globalGitlab.gitlabEnabled === false,
              options: [
                { value: "personal", label: t("settings.globalGeneral.gitLabPersonalAccessToken", "Personal access token") },
                { value: "project", label: t("settings.globalGeneral.gitLabProjectAccessToken", "Project access token") },
                { value: "group", label: t("settings.globalGeneral.gitLabGroupAccessToken", "Group access token") },
              ],
            }}
            value={globalGitlab.gitlabAuthTokenType ?? "personal"}
            onChange={(v) => onGlobalSourceControlSettingsChange({ gitlabAuthTokenType: v as "personal" | "project" | "group" })}
          />
          <SettingsTextRow
            descriptor={{
              key: "gitlabAuthToken",
              label: t("settings.globalGeneral.gitLabAccessToken", "Global GitLab access token"),
              help: t("settings.globalGeneral.gitLabAuthTokenHint", "Projects inherit this fallback only when they do not set a project GitLab token. Read-only operations need read_api or api; write actions need api; project/group tokens remain limited by resource membership. No default — unset."),
              type: "password",
              disabled: globalGitlab.gitlabEnabled === false,
            }}
            value={globalGitlab.gitlabAuthToken ?? ""}
            onChange={(v) => onGlobalSourceControlSettingsChange({ gitlabAuthToken: v || undefined })}
          />
        </div>
      </details>
      {/* FNXC:JiraBranchNaming 2026-08-20-05:10: JIRA remains opt-in and stores only a secret key reference; this global disclosure edits scoped fallback values, never the merged project form. */}
      <details className="settings-gitlab-disclosure" data-testid="global-jira-configuration-disclosure">
        <summary>
          <span className="settings-gitlab-disclosure__title">{t("settings.jira.configuration", "JIRA Configuration")}</span>
          <label className="checkbox-label settings-gitlab-disclosure__toggle" htmlFor="globalJiraEnabled" onClick={(event) => event.stopPropagation()}>
            <input id="globalJiraEnabled" type="checkbox" checked={globalSourceControl.jiraEnabled === true} onChange={(event) => onGlobalSourceControlSettingsChange({ jiraEnabled: event.target.checked })}/>
            {t("settings.jira.enable", "Enable JIRA integration")}
          </label>
        </summary>
        <div className="settings-gitlab-disclosure__body" aria-disabled={globalSourceControl.jiraEnabled !== true}>
          <SettingsTextRow descriptor={{ key: "jiraBaseUrl", label: t("settings.jira.globalBaseUrl", "Global JIRA site URL"), help: t("settings.jira.baseUrlHelp", "JIRA site URL. Default: unset."), type: "url", disabled: globalSourceControl.jiraEnabled !== true }} value={globalSourceControl.jiraBaseUrl ?? ""} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraBaseUrl: v || undefined })}/>
          <SettingsTextRow descriptor={{ key: "jiraApiBaseUrl", label: t("settings.jira.globalApiBaseUrl", "Global JIRA API base URL (optional)"), help: t("settings.jira.apiBaseUrlHelp", "Default: <site>/rest/api/3."), type: "url", disabled: globalSourceControl.jiraEnabled !== true }} value={globalSourceControl.jiraApiBaseUrl ?? ""} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraApiBaseUrl: v || undefined })}/>
          <SettingsTextRow descriptor={{ key: "jiraAuthEmail", label: t("settings.jira.globalEmail", "Global JIRA account email (optional)"), help: t("settings.jira.emailHelp", "Email selects Basic authentication. Default: unset."), disabled: globalSourceControl.jiraEnabled !== true }} value={globalSourceControl.jiraAuthEmail ?? ""} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraAuthEmail: v || undefined })}/>
          <SettingsTextRow descriptor={{ key: "jiraAuthTokenSecretKey", label: t("settings.jira.globalSecretKey", "Global JIRA token secret key"), help: t("settings.jira.secretHelp", "Secret-store key only. Default: JIRA_API_TOKEN."), disabled: globalSourceControl.jiraEnabled !== true }} value={globalSourceControl.jiraAuthTokenSecretKey ?? ""} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraAuthTokenSecretKey: v || undefined })}/>
          <SettingsSelectRow descriptor={{ key: "jiraAuthTokenSecretScope", label: t("settings.jira.globalSecretScope", "Global JIRA token secret scope"), help: t("settings.jira.scopeHelp", "Default: project."), disabled: globalSourceControl.jiraEnabled !== true, options: [{ value: "project", label: "Project" }, { value: "global", label: "Global" }] }} value={globalSourceControl.jiraAuthTokenSecretScope ?? "project"} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraAuthTokenSecretScope: v as "project" | "global" })}/>
          <SettingsTextRow descriptor={{ key: "jiraBranchNameTemplate", label: t("settings.jira.globalTemplate", "Global JIRA branch-name template"), help: t("settings.jira.templateHelp", "Default: feature/{key}-{summary}."), disabled: globalSourceControl.jiraEnabled !== true }} value={globalSourceControl.jiraBranchNameTemplate ?? ""} onChange={(v) => onGlobalSourceControlSettingsChange({ jiraBranchNameTemplate: v || undefined })}/>
        </div>
      </details>
    </>);
}
export default SourceControlGlobalSection;