{% extends "base.html" %}
{% import "repo_tabs.html" as m %}
{% block title %}Trust · {{ repo.owner }}/{{ repo.name }}{% endblock %}
{% block bodyattrs %} data-repo="{{ repo.url }}"{% endblock %}
{% block tabs %}{% call m::tabs(repo, "trust") %}{% endblock %}
{% block content %}
<div class="head"><h1>Trust <small>who may update what, and what has been verified</small></h1></div>
{% if let Some(p) = t.policy %}
<section class="panel">
  <h2>Policy serial {{ p.serial }} {% if p.expired %}<span class="tag bad">expired {{ p.expires_ms|when }}</span>{% else if p.expires_ms > 0 %}<span class="tag">expires {{ p.expires_ms|when }}</span>{% endif %} <span class="mute small">{{ p.signatures|plural("signature", "signatures") }}, {{ p.history|plural("version", "versions") }}</span></h2>
  <h3>Roots <span class="mute small">threshold {{ p.root_threshold }}</span></h3>
  <ul class="plain">{% for k in p.roots %}<li><span class="sig sig-valid">◆</span> {% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }} <span class="mute">{{ k.email }}</span> <code class="mute">{{ k.short }}</code>{% endif %}</li>{% endfor %}</ul>
  <h3>Rules</h3>
  <div class="table"><table>
  <tr><th>Pattern</th><th>Keys</th><th>Threshold</th><th>Require</th><th>Conflicts</th></tr>
  {% for r in p.rules %}<tr><td class="px">{{ r.pattern }}</td><td>{% for k in r.keys %}{% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }}{% endif %}{% if !loop.last %}, {% endif %}{% endfor %}</td><td>{{ r.threshold }}</td><td>{{ r.require }}</td><td>{% if r.allow_conflicts %}allowed{% else %}refused{% endif %}</td></tr>{% endfor %}
  </table></div>
  {% if !p.revoked.is_empty() %}<h3>Revoked</h3><ul class="plain">{% for k in p.revoked %}<li><span class="sig sig-revoked">⊘</span> {% if k.name.is_empty() %}<code>{{ k.short }}</code>{% else %}{{ k.name }} <code class="mute">{{ k.short }}</code>{% endif %}</li>{% endfor %}</ul>{% endif %}
</section>
{% else %}
<div class="strip warn">No trust policy: every reference update from anyone who may push is accepted. Create one from a client with <code>oxy policy init</code> and push.</div>
{% endif %}
<section class="panel">
  <h2>Verification <span class="mute small">{{ t.verification.total|plural("change", "changes") }}</span></h2>
  <p>
    <span class="sig sig-valid">✔</span> {{ t.verification.signed }} signed ·
    <span class="sig sig-valid">◈</span> {{ t.verification.sealed }} sealed ·
    <span class="sig sig-unsigned">○</span> {{ t.verification.unsigned }} unsigned
    {% if t.verification.revoked > 0 %} · <span class="sig sig-revoked">⊘</span> {{ t.verification.revoked }} by revoked keys{% endif %}
    {% if !t.verification.invalid.is_empty() %} · <span class="sig sig-invalid">✘</span> <strong>{{ t.verification.invalid.len() }} INVALID</strong>{% endif %}
  </p>
  {% if !t.verification.invalid.is_empty() %}<ul class="plain">{% for (h, why) in t.verification.invalid %}<li><a class="chip" href="{{ repo.url }}/change/{{ h }}">{{ h|short }}</a> {{ why }}</li>{% endfor %}</ul>{% endif %}
</section>
<section class="panel">
  <h2>Connecting</h2>
  <p class="small">Clone with <code>oxy clone {{ repo.clone_url }}</code>. If this hub uses a self-signed certificate, save <a href="/.well-known/oxyhub-ca.pem">its certificate</a> and point <code>oxy</code> at it with <code>oxy config remote.&lt;name&gt;.ca &lt;file&gt;</code> or <code>OXY_CA</code>.</p>
</section>
<section class="panel">
  <h2>Hub delegate key</h2>
  <p class="small">Changes the hub makes for you in the browser (later milestones) are signed with this key on your behalf, once you have run <code>oxy identity delegate add hub.identity</code> with the file from <a href="/.well-known/oxyhub-key">/.well-known/oxyhub-key</a>.</p>
  <p><code class="full">{{ t.hub_key }}</code></p>
  {% if t.hub_delegated_by.is_empty() %}<p class="mute small">Nobody in this repository's policy has delegated to it.</p>{% else %}<p class="small">Delegated by: {% for k in t.hub_delegated_by %}{{ k.name }}{% if !loop.last %}, {% endif %}{% endfor %}</p>{% endif %}
</section>
{% endblock %}