{% extends "base.html" %}
{% block title %}Pup ID · {{ app_name }}{% endblock %}
{% block body %}
{% macro arrive_form(label) %}
  <form method="post" action="/pup/arrive" enctype="multipart/form-data" class="stack">
    <input type="hidden" name="_t" value="{{ form_token('pup.arrive') }}">
    <label>pup.json <input type="file" name="file" accept="application/json,.json"></label>
    <label>…or your recovery sheet <textarea name="sheet" rows="3" placeholder="LATCH2-…" autocomplete="off"></textarea></label>
    <label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>
    <label>Again — only with a recovery sheet <input type="password" name="again" autocomplete="new-password"></label>
    <small class="hint">With pup.json: the passphrase it was sealed under. With a sheet: a new one
      (at least {{ min_pass }} characters), twice, to seal it on this box.</small>
    <button>{{ label }}</button>
  </form>
{% endmacro %}
<h1>🪪 Pup ID <small class="hint">a key that is you, not this box <a class="doc" href="/guide/identity" title="the guide on this">📖</a></small></h1>

{% if ident.state == 'none' %}
<section class="card" id="make">
  <h2>Make your Pup ID</h2>
  <p>A Pup ID is a key that is <b>you</b>: it signs the papers for your badges, it is who a
    Handler collars and who a pack knows, and it moves with you to a new box.</p>
  <p class="hint">🔴 {{ make_warning }}</p>
  {% if hosted %}<p class="hint">⚠️ {{ hosted_warning }}</p>{% endif %}
  <form method="post" action="/pup/make" class="stack">
    <input type="hidden" name="_t" value="{{ form_token('pup.make') }}">
    <label>Name <input name="name" maxlength="40" required></label>
    <fieldset><legend>You are making this key as — <small class="hint">your own declaration, signed into
      every paper; nobody checks it, and it can never change</small></legend>
      {% for k in kinds %}<label class="check"><input type="radio" name="kind" value="{{ k }}" {{ 'checked' if k == 'pup' else '' }} required>
        {{ kind_label[k] }}{% if k == 'ai' %} <small class="hint">— for an AI kennel's box; irreversible</small>{% endif %}</label>{% endfor %}
    </fieldset>
    <label class="check"><input type="checkbox" name="ack" value="on"> I have read that: this key is my
      pup, and if I lose it with my passphrase and my recovery sheet, nobody can bring it back.</label>
    <button class="primary">🪪 Make my Pup ID</button>
  </form>
</section>

<section class="card" id="arrive">
  <h2>🧳 Arrive from another box</h2>
  <p class="hint">Your pup already lives somewhere? Bring it here with your <b>pup.json</b> (your key
    sealed under your passphrase, your papers, your travelling kit and photos) — or with just your
    <b>recovery sheet</b>, which brings the key alone. Only a box with no Pup ID can arrive.</p>
  {{ arrive_form('Arrive') }}
</section>
{% else %}

{% if banner %}<section class="card"><p class="flash warn">{{ banner }}</p></section>{% endif %}

<section class="card" id="who">
  <h2>{{ pup_profile.name or 'Your pup' }}</h2>
  <p>{{ headline }}</p>
  {% if soc and soc.paused %}<p class="flash warn">🛑 Paused — everything you granted is suspended.
    <a href="/consent#pause">Resume on the Consent page</a> (only there, on the web).</p>{% endif %}
  {% if soc and soc.packs %}<p class="hint">Packs: {% for p in soc.packs %}{{ p.name or p.uid }}{{ ', ' if not loop.last }}{% endfor %}</p>{% endif %}
  <dl class="facts">
    <div><dt>you signed that you are</dt><dd>{{ kind_label.get(ident.kind, ident.kind) }}</dd></div>
    <div><dt>fingerprint</dt><dd class="fp">{{ ident.fingerprint }}</dd></div>
    <div><dt>did</dt><dd class="did">{{ ident.did }}</dd></div>
    <div><dt>key</dt><dd>{{ ident.state }}{% if ident.sealed %} · sealed copy{% endif %}{% if ident.seal_at_rest %} · sealed at rest{% endif %}</dd></div>
  </dl>
  <p class="hint">Read the fingerprint aloud to compare it — it is what a Handler checks against their screen.</p>
  {% for w in ident.perms %}<p class="flash warn">⚠ {{ w }}</p>{% endfor %}
  <p><a class="btn" href="/pup/papers">📜 Papers ({{ n_papers }})</a>
     <a class="btn" href="/pup/media">🧳 What travels ({{ n_carry }} photos)</a>
     <a class="btn" href="/export/pup.json" download>⬇ pup.json</a></p>
  {% if ident.state == 'ready' or ident.moving_at %}{% if left_behind %}<p class="flash warn">⚠ <b>pup.json carries
    no pack</b> — this box is still in {{ left_behind|length }} pack{{ 's' if left_behind|length != 1 }}.
    <a href="#move">Read this before you move by pup.json.</a></p>{% endif %}
  {% else %}{% with moving=ident.moving_at, retired=(ident.state == 'moved') %}{% include "_pupjson_packs.html" %}{% endwith %}{% endif %}
  {% if n_unpapered and ident.state == 'ready' and not ident.moving_at %}<p class="hint">{{ n_unpapered }} badge(s) get their paper on the next tick.</p>{% endif %}
</section>

{% if ident.state in ('ready', 'locked', 'mismatch', 'missing') %}
<section class="card" id="profile">
  <h2>Profile</h2>
  <form method="post" action="/pup/profile" class="row">
    <input type="hidden" name="_t" value="{{ form_token('pup.profile') }}">
    <label>Name <input name="name" maxlength="40" value="{{ pup_profile.name }}" required></label>
    <label>Colour <input type="color" name="colour" value="{{ pup_profile.colour or '#7c4dff' }}"></label>
    <label>Pronouns <input name="pronouns" maxlength="20" value="{{ pup_profile.pronouns }}"></label>
    <button>Save</button>
  </form>
  {% if pup_profile.name_given_by %}<p class="hint">Your name was given by {{ pup_profile.name_given_by.name }} with their collar.</p>{% endif %}
</section>
{% endif %}

<section class="card" id="key">
  <h2>🔐 Your key</h2>
  <p class="hint">⚠️ {{ backup_warning }}</p>
  {% if hosted %}<p class="hint">⚠️ {{ hosted_warning }}</p>{% endif %}

  {% if ident.state == 'locked' %}
  <form method="post" action="/pup/unlock" class="row">
    <input type="hidden" name="_t" value="{{ form_token('pup.unlock') }}">
    <label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>
    <button class="primary">🔓 Unlock</button>
  </form>
  {% elif ident.state == 'missing' %}
  <p>This box knows your Pup ID but has no key for it. Bring the key home from your pup.json or your
    recovery sheet — only this pup's own key comes back, with any papers this box lacks. The game on
    this box — its kit, its photos, its profile — stays exactly as it is.</p>
  {{ arrive_form('Bring my key home') }}
  {% elif ident.state == 'mismatch' %}
  <p>The key file here is not the Pup ID this box says it is. Nothing is signed. Put the right
    <code>identity/pup.key</code> back — or restore your bundle onto a fresh box (a restore never
    goes onto a box that holds a key file).</p>
  {% endif %}

  {% if ident.state == 'ready' %}
  <h3>{{ 'Change your passphrase' if ident.sealed else 'Seal it with a passphrase' }}</h3>
  <p class="hint">A passphrase seals a copy of your key (at least {{ min_pass }} characters). The
    sealed copy is what pup.json and the backup zip carry — never the plain key.</p>
  <form method="post" action="/pup/passphrase" class="stack">
    <input type="hidden" name="_t" value="{{ form_token('pup.passphrase') }}">
    {% if ident.sealed %}<label>Current passphrase <input type="password" name="current" required autocomplete="current-password"></label>{% endif %}
    <label>New passphrase <input type="password" name="passphrase" minlength="{{ min_pass }}" required autocomplete="new-password"></label>
    <label>Again <input type="password" name="again" minlength="{{ min_pass }}" required autocomplete="new-password"></label>
    <button>{{ 'Change it' if ident.sealed else 'Seal' }}</button>
  </form>
  {% if ident.sealed %}<p class="hint">⚠️ Changing the passphrase re-seals the copy on this box only. A
    pup.json or backup zip you already made still opens with the old passphrase, and a recovery sheet
    needs none. If one of those leaked, your key leaked — there is no key rotation yet.</p>{% endif %}
  {% endif %}

  {% if ident.state in ('ready', 'locked') %}
  <h3>Seal at rest</h3>
  <p class="hint">{% if ident.seal_at_rest %}On: only the sealed file is on disk, and the key is held in
    memory until this app restarts — then it waits for your passphrase.{% else %}Off: the plain key file
    is on this box's disk (0600).{% endif %}</p>
  {% if ident.sealed or ident.seal_at_rest %}
  <form method="post" action="/pup/seal-at-rest" class="row">
    <input type="hidden" name="_t" value="{{ form_token('pup.seal') }}">
    <input type="hidden" name="on" value="{{ '0' if ident.seal_at_rest else '1' }}">
    <label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>
    <button>{{ 'Turn seal-at-rest off' if ident.seal_at_rest else 'Turn seal-at-rest on' }}</button>
  </form>
  {% else %}
  <p class="hint">Seal it with a passphrase first (above) — seal-at-rest deletes the plain file, so the
    sealed copy has to be one you can open.</p>
  {% endif %}

  {% if ident.sealed %}
  <h3>Recovery sheet</h3>
  <p class="hint">Your key written out by hand — for the day this box and your pup.json are both gone.
    Anyone holding it holds your pup. It needs your passphrase to print.</p>
  <form method="post" action="/pup/recovery" class="row">
    <input type="hidden" name="_t" value="{{ form_token('pup.recovery') }}">
    <label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>
    <label class="check"><input type="checkbox" name="ack" value="on"> I will keep it where only I can reach it</label>
    <button>Show my recovery sheet</button>
  </form>
  {% endif %}
  {% endif %}
</section>

<section class="card" id="move">
  <h2>🧳 Moving to a new box</h2>
  {% if ident.state == 'moved' %}
    {% if ident.retired and ident.retired.kept_key %}
    <p class="flash warn">🔴 Your key is on another box you did not move to{% if ident.retired.box_fp %} ({{ ident.retired.box_fp }}){% endif %}. Your key was copied. This box signs nothing.</p>
    {% else %}
    <p>This box is retired: {{ 'another box holds this pup' if ident.retired and ident.retired.reason == 'rehomed' else 'you moved your pup away' }}{% if ident.retired and ident.retired.box_fp %} (fingerprint <span class="fp">{{ ident.retired.box_fp }}</span>){% endif %}{% if ident.retired and ident.retired.at %}, since {{ ident.retired.at|local('%Y-%m-%d') }}{% endif %}. The sealed copy of the key stays here.</p>
    {% endif %}
    <h3>Bring my pup back to this box</h3>
    <form method="post" action="/pup/bring-back" class="stack">
      <input type="hidden" name="_t" value="{{ form_token('pup.bring_back') }}">
      {% if ident.sealed %}<label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>{% endif %}
      <label class="check"><input type="checkbox" name="ack" value="on"> This box is my pup's home again</label>
      <button>Bring it back</button>
    </form>
  {% elif ident.moving_at %}
    <p><b>This pup is packing to move:</b> packs, your AI and papers are stopped (since {{ ident.moving_at|local('%Y-%m-%d %H:%M') }}).
      Your own game — the lock, the emergency key, everything — keeps working.</p>
    <ol class="hint">
      <li>Download <a href="/export/bundle.zip" download>the whole game</a> and restore it on the new box
        (<code>python -m latch.restore</code>), <b>or</b> download <a href="/export/pup.json" download>pup.json</a> and arrive there.
        <b>pup.json carries no pack:</b> the game's bundle keeps your packs, but by pup.json each den still
        holds your membership through THIS box and refuses a new join until it is gone — so leave your
        packs before you prepare (or ask their operators to remove you), then join again with fresh tags.
        {% with moving=True %}{% include "_pupjson_packs.html" %}{% endwith %}</li>
      <li>Once your pup is alive on the new box, retire this one: its plain key is zero-overwritten and
        deleted; the sealed copy stays.</li>
    </ol>
    <form method="post" action="/pup/move" class="inline">
      <input type="hidden" name="_t" value="{{ form_token('pup.move') }}">
      <input type="hidden" name="step" value="cancel">
      <button>Cancel — stay here</button>
    </form>
    <form method="post" action="/pup/move" class="inline">
      <input type="hidden" name="_t" value="{{ form_token('pup.move') }}">
      <input type="hidden" name="step" value="retire">
      <label>Passphrase <input type="password" name="passphrase" required autocomplete="current-password"></label>
      <label class="check"><input type="checkbox" name="ack" value="on"> My pup is alive on the new box</label>
      <button class="danger">Retire this box</button>
    </form>
    <p class="hint">Retiring asks for your passphrase: it proves the sealed copy the new box relies on
      actually opens before this box deletes its plain key.</p>
  {% elif ident.state == 'ready' %}
    <p class="hint">Moving is explicit. Preparing stops everything that talks to anyone else — packs,
      your AI, papers — so nothing is signed twice from two boxes. Cancel any time.</p>
    {% with moving=False %}{% include "_pupjson_packs.html" %}{% endwith %}
    <form method="post" action="/pup/move" class="inline">
      <input type="hidden" name="_t" value="{{ form_token('pup.move') }}">
      <input type="hidden" name="step" value="prepare">
      <button>🧳 Prepare to move</button>
    </form>
  {% else %}
    <p class="hint">Unlock your key first.</p>
  {% endif %}
  {% if box_fp %}<p class="hint">This box's own fingerprint: <span class="fp">{{ box_fp }}</span></p>{% endif %}
</section>
{% endif %}
{% endblock %}