{% extends "base.html" %}
{% block title %}Consent · {{ app_name }}{% endblock %}
{% block body %}
<h1>🤝 Consent <small class="hint">who else may see or do anything here — and the safeword <a class="doc" href="/guide/consent" title="the guide on this">📖</a></small></h1>

{#- 🔴 THE SAFEWORD FIRST, ALWAYS. The pause form carries NO form token on purpose: a safeword
    that could answer "this page expired" is not one. Resume carries one, and lives only here. -#}
<section class="card pausebar {{ 'paused' if is_paused else '' }}" id="pause">
  {% if is_paused %}
  <h2>🛑 Paused</h2>
  <p>Since {{ pause_ev.ts|local }}. <b>Every grant is suspended</b> — nobody else can see or do
    anything here, reads included, until you resume. Your own game carries on as normal.</p>
  <form method="post" action="/consent/resume" class="inline">
    <input type="hidden" name="_t" value="{{ form_token('consent.resume') }}">
    <button class="primary">▶ Resume</button>
  </form>
  {% else %}
  <h2>The safeword</h2>
  <p class="hint">One tap suspends everything you have granted, to everybody, at once — reads
    included. Only you can resume, and only on this page. It is always there; it never asks why.</p>
  <form method="post" action="/consent/pause" class="inline">
    <button class="danger">🛑 Pause everyone</button>
  </form>
  {% endif %}
</section>

{% for s in sections %}
<section class="card consent" id="p-{{ s.principal|replace(':', '-') }}">
  <h2>{{ s.icon or '' }} {{ s.title or s.principal }}</h2>
  {% if s.note %}<p class="hint">{{ s.note }}</p>{% endif %}
  {% if s.signer_kind == 'ai' %}<p class="hint">⚠️ Everything you grant is read by a language model on
    the kennel operator's computer; you cannot check which model.</p>{% endif %}
  {% if s.preview %}<details class="fold"><summary>This is exactly what {{ s.title or 'they' }} will receive</summary>
    <pre class="preview">{{ s.preview }}</pre></details>{% endif %}
  <div class="consent-rows">
  {% for r in s.rows %}
    <div class="consent-row {{ 'on' if r.grant else '' }}">
      <form method="post" action="/consent/grant" class="row">
        <input type="hidden" name="_t" value="{{ form_token('consent.grant') }}">
        <input type="hidden" name="principal" value="{{ s.principal }}">
        <input type="hidden" name="capability" value="{{ r.cap }}">
        <div class="what">
          <b>{{ r.label }}</b> <small class="hint">{{ r.says }}</small>
          {% if r.grant %}<span class="badge ok">granted{% if r.value is not none %} · {{ r.value }} {{ r.unit }}{% endif %}</span>
          {% if r.used is not none %}<span class="badge">used today {{ r.used }}</span>{% endif %}{% endif %}
        </div>
        {% if r.grant %}
          {% if r.share_kind and shares_ok %}<small class="hint">shown: {% for c in r.choices if c.on %}{{ c.label }}{% if not loop.last %}, {% endif %}{% else %}nothing ticked{% endfor %}</small>{% endif %}
          <input type="hidden" name="on" value="0">
          <button class="danger">Revoke</button>
        {% else %}
          {#- 🔴 NOTHING IS EVER PRE-TICKED: the box is empty until the pup ticks it. -#}
          <label class="check"><input type="checkbox" name="on" value="1" required> allow</label>
          {% if r.unit %}<label>{{ r.unit }} <input type="number" name="cap" min="1" max="{{ r.max }}" value="{{ r.value }}"></label>{% endif %}
          {% if r.share_kind and not shares_ok %}<small class="hint">item-by-item choices arrive with packs — for now this grants the category with nothing in it</small>{% endif %}
          {% if r.share_kind and shares_ok %}
          {#- 🔴 R38: the EXACT checklist, none ticked — a category granted with nothing ticked shows nothing -#}
          <fieldset class="share-list"><legend class="hint">Only what you tick here (and nothing else) is shown</legend>
          {% for c in r.choices %}<label class="check"><input type="checkbox" name="share" value="{{ c.subject }}"> {{ c.label }}</label>
          {% else %}<small class="hint">Nothing here can be shown yet.</small>{% endfor %}
          </fieldset>
          {% endif %}
          <button>Grant</button>
        {% endif %}
      </form>
    </div>
  {% endfor %}
  </div>
  <form method="post" action="/consent/revoke-all" class="inline">
    <input type="hidden" name="_t" value="{{ form_token('consent.revoke_all') }}">
    <input type="hidden" name="principal" value="{{ s.principal }}">
    <button class="chip">Revoke everything they hold</button>
  </form>
</section>
{% else %}
<section class="card">
  <h2>Nobody else</h2>
  <p class="hint">Nobody but you can see or do anything on this box. When you set up your AI
    Handler or join a pack, what they may do appears here — one tick at a time, nothing
    ticked for you.</p>
</section>
{% endfor %}

{% if stale %}
<section class="card" id="stale">
  <h2>Still granted</h2>
  <p class="hint">Grants to somebody who is not here any more. They cannot act while nobody
    speaks for them — revoke them anyway.</p>
  <ul class="plain">
  {% for g in stale %}
    <li><code>{{ g.principal }}</code> · {{ labels[g.capability][0] if g.capability in labels else g.capability }}
      <form method="post" action="/consent/grant" class="inline">
        <input type="hidden" name="_t" value="{{ form_token('consent.grant') }}">
        <input type="hidden" name="principal" value="{{ g.principal }}">
        <input type="hidden" name="capability" value="{{ g.capability }}">
        <input type="hidden" name="on" value="0">
        <button class="chip">Revoke</button>
      </form></li>
  {% endfor %}
  </ul>
</section>
{% endif %}

<section class="card" id="ceiling">
  <h2>The ceiling</h2>
  <p class="hint">However much each one is allowed, together they can never put more than this
    on your clock in one day — added time and freezes, everybody combined. Moved today:
    <b>{{ moved_today }} min</b>.</p>
  <form method="post" action="/consent/ceiling" class="row">
    <input type="hidden" name="_t" value="{{ form_token('consent.ceiling') }}">
    <label>minutes a day <input type="number" name="minutes" min="0" max="{{ ceiling_max }}" value="{{ ceiling }}"></label>
    <button>Save</button>
  </form>
</section>

<section class="card" id="bot">
  <h2>💬 The chat bot <a class="doc" href="/guide/bot" title="the guide on this">📖</a></h2>
  {% if hosted %}
  <p class="hint">Not on a hosted instance — the chat bot talks to the API, and the API is off here.</p>
  {% else %}
  <p class="hint">A bot token lets a chat bot on your own machine read today's duties, remind
    you, and say the safeword for you. It is still you speaking — but it relays into a chat
    room, and <b>whoever runs that room's server can read everything it posts, and could send
    commands as you</b>. It never carries your words, anybody's name, training titles, kit or
    health, and never the clock of a hidden lock. It can pause; it can never resume.</p>
  {% if minted %}
  <div class="card minted" id="minted">
    <p><b>Token for {{ minted.name }}</b> — copy it now. It is shown this once and stored
      nowhere; if you lose it, revoke it and make another.</p>
    <pre class="token">{{ minted.token }}</pre>
  </div>
  {% endif %}
  <ul class="plain">
  {% for t in bot_clients %}
    <li>bot (token <b>{{ t.name }}</b>, last used {{ t.last_used_at|rel if t.last_used_at else 'never' }})
      <form method="post" action="/consent/tokens/{{ t.id }}/revoke" class="inline">
        <input type="hidden" name="_t" value="{{ form_token('consent.token_revoke') }}">
        <button class="chip danger">Revoke</button>
      </form></li>
  {% else %}
    <li class="hint">No bot token — nothing but your own token and this page can reach the API.</li>
  {% endfor %}
  </ul>
  <form method="post" action="/consent/tokens" class="row">
    <input type="hidden" name="_t" value="{{ form_token('consent.tokens') }}">
    <label>which machine <input type="text" name="name" maxlength="40" required></label>
    <button>Make a bot token</button>
  </form>
  <p class="hint">What it may relay and do:</p>
  <div class="consent-rows">
  {% for key, is_on in bot_switches.items() %}
    <div class="consent-row {{ 'on' if is_on else '' }}">
      <form method="post" action="/consent/bot" class="row">
        <input type="hidden" name="_t" value="{{ form_token('consent.bot') }}">
        <input type="hidden" name="switch" value="{{ key.split('.', 1)[1] }}">
        <input type="hidden" name="on" value="{{ '0' if is_on else '1' }}">
        <div class="what"><b>{{ switch_labels[key] }}</b> <small class="hint">{{ switch_says[key] }}</small>
          {% if is_on %}<span class="badge ok">on</span>{% else %}<span class="badge">off</span>{% endif %}</div>
        {% if is_on %}<button class="danger">Turn off</button>{% else %}<button>Turn on</button>{% endif %}
      </form>
    </div>
  {% endfor %}
  </div>
  {% endif %}
</section>

<section class="card" id="never">
  <h2>What can never be granted</h2>
  <p class="hint">These are not switches that happen to be off. They do not exist, so nobody —
    no Handler, no pack, no AI — can ever be given them:</p>
  <ul>{% for n in never %}<li>{{ n }}</li>{% endfor %}</ul>
  <p class="hint">The emergency key always works, whatever you have granted and whether or not
    you are paused.</p>
  {% if any_live %}
  <form method="post" action="/consent/revoke-all" class="inline">
    <input type="hidden" name="_t" value="{{ form_token('consent.revoke_all') }}">
    <button class="danger">Revoke everything, from everybody</button>
  </form>
  {% endif %}
</section>
{% endblock %}