{% extends "base.html" %}

{% import "repo_tabs.html" as m %}

{% block title %}Trust · {{ repo.owner }}/{{ repo.name }}{% endblock %}

{% block bodyattrs %} data-repo="{{ repo.url }}"{% endblock %}

{% block tabs %}{% call m::tabs(repo, "trust") %}{% endblock %}

{% block content %}

<div class="head"><h1>Trust <small>who may update what, and what has been verified</small></h1></div>

{% if let Some(p) = t.policy %}

<section class="panel">

  <h2>Policy serial {{ p.serial }} {% if p.expired %}<span class="tag bad">expired {{ p.expires_ms|when }}</span>{% else if p.expires_ms > 0 %}<span class="tag">expires {{ p.expires_ms|when }}</span>{% endif %} <span class="mute small">{{ p.signatures|plural("signature", "signatures") }}, {{ p.history|plural("version", "versions") }}</span></h2>

  <h3>Roots <span class="mute small">threshold {{ p.root_threshold }}</span></h3>

  <ul class="plain">{% for k in p.roots %}<li><span class="sig sig-valid">◆</span> {% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }} <span class="mute">{{ k.email }}</span> <code class="mute">{{ k.short }}</code>{% endif %}</li>{% endfor %}</ul>

  <h3>Rules</h3>

  <div class="table"><table>

  <tr><th>Pattern</th><th>Keys</th><th>Threshold</th><th>Require</th><th>Conflicts</th></tr>

  {% for r in p.rules %}<tr><td class="px">{{ r.pattern }}</td><td>{% for k in r.keys %}{% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }}{% endif %}{% if !loop.last %}, {% endif %}{% endfor %}</td><td>{{ r.threshold }}</td><td>{{ r.require }}</td><td>{% if r.allow_conflicts %}allowed{% else %}refused{% endif %}</td></tr>{% endfor %}

  </table></div>

  {% if !p.revoked.is_empty() %}<h3>Revoked</h3><ul class="plain">{% for k in p.revoked %}<li><span class="sig sig-revoked">⊘</span> {% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }} <code class="mute">{{ k.short }}</code>{% endif %}</li>{% endfor %}</ul>{% endif %}

</section>

{% else %}

<div class="strip warn">No trust policy: every reference update from anyone who may push is accepted. Create one from a client with <code>oxy policy init</code> and push.</div>

{% endif %}

<section class="panel">

  <h2>Verification <span class="mute small">{{ t.verification.total|plural("change", "changes") }}</span></h2>

  <p>

    <span class="sig sig-valid">✔</span> {{ t.verification.signed }} signed ·

    <span class="sig sig-valid">◈</span> {{ t.verification.sealed }} sealed ·

    <span class="sig sig-unsigned">○</span> {{ t.verification.unsigned }} unsigned

    {% if t.verification.revoked > 0 %} · <span class="sig sig-revoked">⊘</span> {{ t.verification.revoked }} by revoked keys{% endif %}

    {% if !t.verification.invalid.is_empty() %} · <span class="sig sig-invalid">✘</span> <strong>{{ t.verification.invalid.len() }} INVALID</strong>{% endif %}

  </p>

  {% if !t.verification.invalid.is_empty() %}<ul class="plain">{% for (h, why) in t.verification.invalid %}<li><a class="chip" href="{{ repo.url }}/change/{{ h }}">{{ h|short }}</a> {{ why }}</li>{% endfor %}</ul>{% endif %}

</section>

<section class="panel">

  <h2>Connecting</h2>

  <p class="small">Clone with <code>oxy clone {{ repo.clone_url }}</code>. If this hub uses a self-signed certificate, save <a href="/.well-known/oxyhub-ca.pem">its certificate</a> and point <code>oxy</code> at it with <code>oxy config remote.&lt;name&gt;.ca &lt;file&gt;</code> or <code>OXY_CA</code>.</p>

</section>

<section class="panel">

  <h2>Hub delegate key</h2>

  <p class="small">Changes the hub makes for you in the browser (later milestones) are signed with this key on your behalf, once you have run <code>oxy identity delegate add hub.identity --scope changes,refs</code> with the file from <a href="/.well-known/oxyhub-key">/.well-known/oxyhub-key</a>.</p>

  <p><code class="full">{{ t.hub_key }}</code></p>

  {% if t.hub_delegated_by.is_empty() %}<p class="mute small">Nobody in this repository's policy has delegated to it.</p>{% else %}<p class="small">Delegated by: {% for k in t.hub_delegated_by %}{{ k.name }}{% if !loop.last %}, {% endif %}{% endfor %}</p>{% endif %}

</section>

{% endblock %}