{% extends "base.html" %}

{% import "webhooks_panel.html" as w %}

{% import "assistants_panel.html" as ai %}

{% import "variables_panel.html" as va %}

{% import "secrets_panel.html" as se %}

{% import "repo_tabs.html" as m %}

{% block title %}Settings · {{ repo.owner }}/{{ repo.name }}{% endblock %}

{% block bodyattrs %} data-repo="{{ repo.url }}"{% endblock %}

{% block tabs %}{% call m::tabs(repo, "settings") %}{% endblock %}

{% block content %}

<div class="head"><h1>Settings <small>{{ repo.owner }}/{{ repo.name }}</small></h1></div>

{% if let Some(n) = notice %}<p class="note">{{ n }}</p>{% endif %}

{% if let Some(e) = error %}<p class="error">{{ e }}</p>{% endif %}

<div class="sectioned">

<nav class="section-nav" aria-label="Sections">

  <a href="#general">General</a>

  <a href="#landing">Landing requirements</a>

  <a href="#git-mirror">Git mirror</a>

  <a href="#checks">Required checks</a>

  <a href="#flow">OxygenFlow</a>

  {% if role == crate::auth::Role::Admin %}<a href="#webhooks">Webhooks</a>

  <a href="#variables">Variables</a>

  <a href="#secrets">Secrets</a>

  <a href="#assistants">AI assistants</a>

  <a href="#collaborators">Collaborators</a>

  <a href="#danger">Delete</a>{% endif %}

</nav>

<div class="sections">

<form class="card wide" id="general" method="post" action="{{ repo.url }}/settings">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <h2>General</h2>

  <label for="description">Description</label><input type="text" id="description" name="description" value="{{ row.description }}">

  <label for="topics">Topics</label><input type="text" id="topics" name="topics" value="{{ row.topics }}" placeholder="rust version-control retro">

  <p class="small mute">Separated by spaces or commas; letters, digits and dashes. People find repositories by them under Explore.</p>

  <label for="default_bookmark">Default bookmark</label><input type="text" id="default_bookmark" name="default_bookmark" value="{{ row.default_bookmark }}">

  <label>Visibility{% if role != crate::auth::Role::Admin %} <span class="mute">(admins only)</span>{% endif %}</label>

  <div class="choice">

    <label><input type="radio" name="visibility" value="public"{% if row.visibility == "public" %} checked{% endif %}> public</label>

    <label><input type="radio" name="visibility" value="internal"{% if row.visibility == "internal" %} checked{% endif %}> internal</label>

    <label><input type="radio" name="visibility" value="private"{% if row.visibility == "private" %} checked{% endif %}> private</label>

  </div>

  <button type="submit">SAVE</button>

</form>

<form class="card wide" id="landing" method="post" action="{{ repo.url }}/settings/requirements">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <h2>Landing requirements</h2>

  <label for="required_approvals">Sealed approvals required</label><input type="number" id="required_approvals" name="required_approvals" min="0" value="{{ requirements.required_approvals }}">

  <div class="choice">

    <label><input type="checkbox" name="require_owners" value="1"{% if requirements.require_owners %} checked{% endif %}> code owners from <code>.oxyowners</code> must approve</label>

    <label><input type="checkbox" name="allow_conflicts" value="1"{% if requirements.allow_conflicts %} checked{% endif %}> allow landing with conflicts</label>

  </div>

  <button type="submit">SAVE</button>

</form>

<form class="card wide" id="git-mirror" method="post" action="{{ repo.url }}/settings/mirror">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <h2>Git mirror</h2>

  <div class="choice"><label><input type="checkbox" name="enabled" value="1"{% if row.git_mirror %} checked{% endif %}> keep a read-only Git mirror of <strong>{{ row.default_bookmark }}</strong></label></div>

  <p class="small mute">For tools that only speak Git (CI runners, IDEs): <code>git clone {{ shell.base_url }}{{ repo.url }}.git</code>. Private repositories take a personal access token as the password. Pushing to the mirror is refused.{% if row.git_mirror && !row.git_mirror_state.is_empty() %} Last exported state <code>{{ row.git_mirror_state|short }}</code>.{% endif %}</p>

  <button type="submit">SAVE</button>

</form>

<form class="card wide" id="checks" method="post" action="{{ repo.url }}/settings/checks">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <h2>Required checks</h2>

  <label for="required_checks">Check names that must pass on a proposal's projected state (comma-separated)</label><input type="text" id="required_checks" name="required_checks" value="{{ required_checks }}" placeholder="build, test">

  <p class="small mute">Any token with <code>checks:write</code> reports checks with <code>POST {{ shell.base_url }}/api/v1/repos/{{ repo.owner }}/{{ repo.name }}/checks</code>.</p>

  <button type="submit">SAVE</button>

</form>

<form class="card wide" id="flow" method="post" action="{{ repo.url }}/settings/flow">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <h2>OxygenFlow</h2>

  <p>Pushes to this repository {% if flow_enabled %}<strong>start runs</strong>{% else %}<strong>do not start runs</strong>{% endif %} of its <code>.flow/pipeline.kdl</code>.</p>

  {% if site_admin %}

  <div class="choice">

    <label><input type="radio" name="flow" value="on"{% if row.flow == "on" %} checked{% endif %}> on</label>

    <label><input type="radio" name="flow" value="off"{% if row.flow == "off" %} checked{% endif %}> off</label>

    <label><input type="radio" name="flow" value="default"{% if row.flow.is_empty() %} checked{% endif %}> site default ({% if flow_default %}on{% else %}off{% endif %}, from <code>[flow] repos</code> in <code>hub.toml</code>)</label>

  </div>

  <p class="small mute">Runs use the site's runners, so only site administrators change this. It takes effect at the next push.</p>

  <button type="submit">SAVE</button>

  {% else %}

  <p class="small mute">A site administrator turns OxygenFlow on or off here.</p>

  {% endif %}

</form>

{% if role == crate::auth::Role::Admin %}

<section class="panel" id="runners">

  <h2>Runners</h2>

  <p class="small">The OxygenFlow runners that may take this repository's jobs: the site's, {{ row.owner }}'s, and this repository's own.</p>

  {% if let Some(t) = runner_token %}<p class="note">Register a runner for this repository with:</p><pre class="snippet">flow runner register {{ shell.base_url }} --token {{ t }} --name NAME</pre>{% endif %}

  {% if runners.is_empty() %}<p class="mute small">None yet: runs wait until a runner that serves this repository is added.</p>{% else %}

  <div class="table"><table>

  <tr><th>Runner</th><th>Status</th><th>Serves</th><th>Machine</th><th></th></tr>

  {% for (r, serves, own) in runners %}<tr><td><strong>{{ r.name }}</strong></td><td><span class="runner-status st-{{ r.status() }}">{{ r.status() }}</span></td><td class="small">{{ serves }}</td><td class="small">{% if r.arch.is_empty() %}<span class="mute">unknown</span>{% else %}{{ r.arch }} · {{ r.os }}{% endif %}</td>

  <td>{% if *own %}<form class="tiny" method="post" action="{{ repo.url }}/settings/runners/{{ r.id }}/remove" onsubmit="return confirm('Remove {{ r.name }}? Its credential stops working.')"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button class="danger-btn">remove</button></form>{% endif %}</td></tr>{% endfor %}

  </table></div>{% endif %}

  <form method="post" action="{{ repo.url }}/settings/runners/token"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button type="submit">Add a runner for this repository</button></form>

</section>

{% call w::panel(repo.url ~ "/settings", hooks, shell.csrf, "Each delivery is signed with the secret (X-Oxyhub-Signature) and retried with backoff for a day.") %}

{% call va::panel(repo.url ~ "/settings", variables, shell.csrf, "This repository's jobs get these, beside the ones the site and its owner set.") %}

{% call se::panel(repo.url ~ "/settings", secrets, shell.csrf, "This repository's jobs may use these, beside the ones the site and its owner set.") %}

{% call ai::panel(repo.url ~ "/settings", assistants, shell.csrf, "This repository may ask these, beside the ones the site and its owner provide.") %}

<section class="panel" id="collaborators">

  <h2>Collaborators</h2>

  {% if collaborators.is_empty() %}<p class="mute small">Nobody beyond the owner{% if !teams.is_empty() %} and the organisation's members{% endif %}.</p>{% else %}

  <table class="small">

  {% for c in collaborators %}

  <tr><td>{% if let Some(a) = c.account %}<a href="/{{ a.username }}">{{ a.username }}</a>{% else if let Some(t) = c.team %}team {{ t.name }}{% endif %}</td><td>{{ c.role }}</td>

  <td><form class="tiny" method="post" action="{{ repo.url }}/settings/collaborators"><input type="hidden" name="_csrf" value="{{ shell.csrf }}">{% if let Some(a) = c.account %}<input type="hidden" name="username" value="{{ a.username }}">{% else if let Some(t) = c.team %}<input type="hidden" name="team" value="{{ t.name }}">{% endif %}<button name="remove" value="1">remove</button></form></td></tr>

  {% endfor %}

  </table>{% endif %}

  <form class="card" method="post" action="{{ repo.url }}/settings/collaborators">

    <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

    <div class="row">

      <div><label for="username">Account</label><input type="text" id="username" name="username"></div>

      {% if !teams.is_empty() %}<div><label for="team">or team</label><select id="team" name="team"><option value="">—</option>{% for t in teams %}<option value="{{ t.name }}">{{ t.name }}</option>{% endfor %}</select></div>{% endif %}

      <div><label for="role">Role</label><select id="role" name="role"><option value="read">read</option><option value="triage">triage</option><option value="write" selected>write</option><option value="maintain">maintain</option><option value="admin">admin</option></select></div>

    </div>

    <button type="submit">ADD</button>

  </form>

</section>

<details class="danger" id="danger">

  <summary>Delete this repository</summary>

  <form class="card" method="post" action="{{ repo.url }}/settings/delete">

    <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

    <p class="small">The repository moves to the trash and is removed after the retention period. Type <code>{{ repo.owner }}/{{ repo.name }}</code> to confirm.</p>

    <input type="text" name="confirm" required>

    <button type="submit">DELETE</button>

  </form>

</details>

{% endif %}

</div>

</div>

{% endblock %}