{% extends "base.html" %}
{% import "webhooks_panel.html" as w %}
{% import "assistants_panel.html" as ai %}
{% import "variables_panel.html" as va %}
{% import "secrets_panel.html" as se %}
{% import "runner_update_fields.html" as ruf %}
{% block title %}{{ org.name }} settings{% endblock %}
{% block content %}
<div class="head"><h1>{{ org.name }} <small>organisation settings · <a href="/{{ org.name }}">repositories</a></small></h1></div>
<div class="sectioned">
<nav class="section-nav" aria-label="Sections">
  <a href="#general">General</a>
  <a href="#logo">Logo</a>
  <a href="#members">Members</a>
  <a href="#webhooks">Webhooks</a>
  <a href="#variables">Variables</a>
  <a href="#secrets">Secrets</a>
  <a href="#assistants">AI assistants</a>
  <a href="#teams">Teams</a>
  <a href="#storage">Storage</a>
  <a href="#backups">Backups</a>
</nav>
<div class="sections">
{% if let Some(n) = notice %}<p class="note">{{ n }}</p>{% endif %}
{% if let Some(e) = error %}<p class="error">{{ e }}</p>{% endif %}
<section class="panel" id="backups"><h2>Backups</h2><p class="small">Copy every repository {{ org.name }} owns, with its issues, proposals and wiki, hourly to a bucket or directory you control. <a class="go small" href="/orgs/{{ org.name }}/settings/backups">Set up backups</a></p></section>
<form class="card" id="general" method="post" action="/orgs/{{ org.name }}/settings">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <label for="display_name">Display name</label><input type="text" id="display_name" name="display_name" value="{{ org.display_name }}">
  <label for="description">Description</label><input type="text" id="description" name="description" value="{{ org.description }}">
  <label for="default_role">Members' default role on the organisation's repositories</label>
  <select id="default_role" name="default_role">{% for r in ["none", "read", "triage", "write", "maintain", "admin"] %}<option value="{{ r }}"{% if org.default_role.as_str() == *r %} selected{% endif %}>{{ r }}</option>{% endfor %}</select>
  <button type="submit">SAVE</button>
</form>
<form class="card picture-card" id="logo" method="post" action="/orgs/{{ org.name }}/settings/avatar" enctype="multipart/form-data">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <h2>Logo</h2>
  <div class="picture-row">
    <img class="avatar xl" src="/avatar/{{ org.name }}?v={{ org.avatar }}" alt="{{ org.name }} logo" width="96" height="96">
    <div>
      <label for="logo-file">Upload a logo</label>
      <input type="file" id="logo-file" name="picture" accept="image/png,image/jpeg,image/webp">
      <p class="small mute">PNG (transparency is kept), JPEG or WebP, up to 5 MiB. It is cropped to the middle square and resized to 400×400.</p>
      <button type="submit" name="action" value="upload">UPLOAD</button>
      {% if !org.avatar.is_empty() %}<button type="submit" name="action" value="remove" class="danger-btn">REMOVE</button>{% endif %}
    </div>
  </div>
</form>
<section class="panel" id="members">
  <h2>Members</h2>
  <table class="small">{% for (a, r) in members %}<tr><td><a href="/{{ a.username }}">{{ a.username }}</a></td><td>{{ r }}</td>
  <td><form class="tiny" method="post" action="/orgs/{{ org.name }}/settings/members"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><input type="hidden" name="username" value="{{ a.username }}"><button name="remove" value="1">remove</button></form></td></tr>{% endfor %}</table>
  <form class="card" method="post" action="/orgs/{{ org.name }}/settings/members">
    <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
    <div class="row"><div><label for="username">Account</label><input type="text" id="username" name="username" required></div>
    <div><label for="role">Role</label><select id="role" name="role"><option value="member">member</option><option value="owner">owner</option></select></div></div>
    <button type="submit">ADD OR CHANGE</button>
  </form>
</section>
<form class="card" id="flow-priority" method="post" action="/orgs/{{ org.name }}/settings/flow-priority">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <h2>OxygenFlow priority</h2>
  <p class="small">Runners take higher levels first; within a level, repositories take turns. A repository may set its own level, and a maintainer can expedite one run.</p>
  <select name="priority" aria-label="Priority">
    <option value="default"{% if org.flow_priority.is_empty() %} selected{% endif %}>the site's</option>
    {% if shell.is_admin %}<option value="high"{% if org.flow_priority == "high" %} selected{% endif %}>high</option>{% endif %}
    <option value="normal"{% if org.flow_priority == "normal" %} selected{% endif %}>normal</option>
    <option value="low"{% if org.flow_priority == "low" %} selected{% endif %}>low</option>
  </select>
  <button type="submit">Save</button>
</form>
<form class="card" id="storage" method="post" action="/orgs/{{ org.name }}/settings/storage">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <h2>Storage</h2>
  <p class="small mute">Where the organisation's new repositories may live. Repositories that exist stay where they are.</p>
  <label class="check"><input type="checkbox" name="require_bucket" value="1"{% if policy.require_bucket %} checked{% endif %}> Keep every new repository in a bucket, not on this server's disk</label>
  <label for="allowed">Buckets allowed, one store URL prefix per line (empty: any bucket)</label>
  <textarea id="allowed" name="allowed" rows="3" placeholder="s3://acme-london/repos/&#10;gs://acme-eu/" spellcheck="false">{{ policy.allowed.join("\n") }}</textarea>
  <p class="small mute">Listing the organisation's own buckets keeps its data where those buckets are: the provider, the region, the country.</p>
  <button type="submit">SAVE</button>
</form>
<section class="panel" id="teams">
  <h2>Teams</h2>
  {% for (t, ms) in teams %}
  <p><strong>{{ t.name }}</strong>: {% for a in ms %}{{ a.username }}{% if !loop.last %}, {% endif %}{% endfor %}{% if ms.is_empty() %}<span class="mute">nobody yet</span>{% endif %}
  <form class="tiny" method="post" action="/orgs/{{ org.name }}/settings/teams"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><input type="hidden" name="team" value="{{ t.name }}"><button name="action" value="delete">delete team</button></form></p>
  {% endfor %}
  <form class="card" method="post" action="/orgs/{{ org.name }}/settings/teams">
    <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
    <div class="row"><div><label for="team">Team</label><input type="text" id="team" name="team" required></div>
    <div><label for="tuser">Account (for add or remove)</label><input type="text" id="tuser" name="username"></div></div>
    <div class="choice"><button type="submit" name="action" value="create">CREATE TEAM</button> <button type="submit" name="action" value="add">ADD MEMBER</button> <button type="submit" name="action" value="remove">REMOVE MEMBER</button></div>
  </form>
</section>
<section class="panel" id="runners">
  <h2>Runners</h2>
  <p class="small">The OxygenFlow runners that may take this organisation's jobs: the site's, the organisation's, and those of its repositories.</p>
  {% if let Some(t) = runner_token %}<p class="note">Register a runner for the organisation with:</p><pre class="snippet">flow runner register {{ shell.base_url }} --token {{ t }} --name NAME</pre>{% endif %}
  {% if runners.is_empty() %}<p class="mute small">None yet: runs wait until a runner that serves them is added.</p>{% else %}
  <div class="table"><table>
  <tr><th>Runner</th><th>Status</th><th>Serves</th><th>Machine</th><th></th></tr>
  {% for (r, serves, own) in runners %}<tr><td><strong>{{ r.name }}</strong></td><td><span class="runner-status st-{{ r.status() }}">{{ r.status() }}</span></td><td class="small">{{ serves }}</td><td class="small">{% if r.arch.is_empty() %}<span class="mute">unknown</span>{% else %}{{ r.arch }} · {{ r.os }}{% endif %}</td>
  <td>{% if *own %}<form class="tiny" method="post" action="/orgs/{{ org.name }}/settings/runners/{{ r.id }}/remove" data-confirm="Remove {{ r.name }}? Its credential stops working."><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button class="danger-btn">remove</button></form>{% endif %}</td></tr>{% endfor %}
  </table></div>{% endif %}
  <form method="post" action="/orgs/{{ org.name }}/settings/runners/token"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button type="submit">Add a runner for the organisation</button></form>
</section>
<section class="panel" id="runner-updates">
  <h2>Runner updates</h2>
  <p class="small">The organisation's own runners can update themselves: off unless chosen. Try a build on a test group first (runners you pick, or a percentage of them, the same machines every time), then turn updates on for the rest. A runner's own setting wins over a group's, a group's over the organisation's, the organisation's over the site's.</p>
  {% let ou = updates.owners[0] %}
  <form class="pol-form" method="post" action="/orgs/{{ org.name }}/settings/runners/updates/policy">
    <input type="hidden" name="_csrf" value="{{ shell.csrf }}"><input type="hidden" name="scope" value="owner"><input type="hidden" name="key" value="{{ org.name }}">
    <strong>The organisation</strong>{% call ruf::policy_fields(ou, false) %}<button type="submit">Save</button>
  </form>
  <h3>Test groups</h3>
  {% if updates.groups.is_empty() %}<p class="mute small">None yet.</p>{% endif %}
  {% for gv in updates.groups %}{% let g = gv.g %}
  <div class="card wide update-group">
    <h3>{{ g.name }} <small class="mute">{% if let Some(p) = g.percent %}{{ p }}%{% else %}chosen{% endif %} · {{ gv.members.len()|plural("runner", "runners") }} now{% if let Some(w) = g.wave %} · wave {{ w }}{% endif %}</small></h3>
    <p class="small">{% for m in gv.members %}<span class="lbl">{{ m }}</span> {% endfor %}</p>
    <form class="pol-form" method="post" action="/orgs/{{ org.name }}/settings/runners/updates/policy">
      <input type="hidden" name="_csrf" value="{{ shell.csrf }}"><input type="hidden" name="scope" value="group"><input type="hidden" name="key" value="{{ g.id }}">
      {% call ruf::policy_fields(gv.policy, false) %}<button type="submit">Save settings</button>
    </form>
    <details><summary class="small">Who is in it</summary>
    <form method="post" action="/orgs/{{ org.name }}/settings/runners/updates/groups/{{ g.id }}">
      <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
      <label class="pol"><input type="radio" name="mode" value="percent"{% if g.percent.is_some() %} checked{% endif %}> a percentage: <input type="number" name="percent" min="1" max="100" value="{% if let Some(p) = g.percent %}{{ p }}{% endif %}">%</label>
      <label class="pol"><input type="radio" name="mode" value="chosen"{% if g.percent.is_none() %} checked{% endif %}> these runners:</label>
      <div class="pol-row">{% for rv in updates.runners %}<label class="pol"><input type="checkbox" name="runner" value="{{ rv.r.id }}"{% if gv.chosen.contains(rv.r.id) %} checked{% endif %}> {{ rv.r.name }}</label>{% endfor %}</div>
      <label class="pol">Wave <input type="number" name="wave" min="1" max="9" size="3" value="{% if let Some(w) = g.wave %}{{ w }}{% endif %}" title="Blank: after every wave"></label>
      <button type="submit">Save members</button>
    </form>
    <form class="tiny" method="post" action="/orgs/{{ org.name }}/settings/runners/updates/groups/{{ g.id }}/delete" data-confirm="Remove the test group {{ g.name }}?"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button class="danger-btn">remove group</button></form>
    </details>
  </div>
  {% endfor %}
  <form class="card wide" method="post" action="/orgs/{{ org.name }}/settings/runners/updates/groups">
    <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
    <h3>New test group</h3>
    <label class="pol">Name <input type="text" name="name" size="14" required placeholder="canary"></label>
    <label class="pol"><input type="radio" name="mode" value="percent"> a percentage of the organisation's runners: <input type="number" name="percent" min="1" max="100">%</label>
    <label class="pol"><input type="radio" name="mode" value="chosen" checked> these runners:</label>
    <div class="pol-row">{% for rv in updates.runners %}<label class="pol"><input type="checkbox" name="runner" value="{{ rv.r.id }}"> {{ rv.r.name }}</label>{% endfor %}</div>
    <label class="pol">Wave <input type="number" name="wave" min="1" max="9" size="3" title="Blank: after every wave"></label>
    <button type="submit">Make group</button>
  </form>
  {% if !updates.runners.is_empty() %}
  <h3>The organisation's runners</h3>
  <div class="table"><table>
  <tr><th>Runner</th><th>Runs</th><th>Its policy</th><th>Now</th><th>Last said</th><th>Its own settings</th></tr>
  {% for rv in updates.runners %}{% let r = rv.r %}
  <tr><td><strong>{{ r.name }}</strong>{% for g in rv.groups %} <span class="lbl">{{ g }}</span>{% endfor %}</td>
    <td class="small">{% if r.version.is_empty() %}<span class="mute">unknown</span>{% else %}flow {{ r.version }}{% endif %}</td>
    <td class="small">{{ rv.effective_words() }}</td><td class="small">{{ rv.offer }}</td>
    <td class="small">{% if r.update_note.is_empty() %}<span class="mute">nothing yet</span>{% else %}{{ r.update_note }}{% endif %}</td>
    <td><form class="pol-form tiny" method="post" action="/orgs/{{ org.name }}/settings/runners/updates/policy"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><input type="hidden" name="scope" value="runner"><input type="hidden" name="key" value="{{ r.id }}">{% call ruf::policy_fields(rv.policy, false) %}<button type="submit">set</button></form></td></tr>
  {% endfor %}
  </table></div>
  {% endif %}
</section>
{% call w::panel("/orgs/" ~ org.name ~ "/settings", hooks, shell.csrf, "These hear every repository of the organisation, as well as each repository's own webhooks.") %}
{% call va::panel("/orgs/" ~ org.name ~ "/settings", variables, shell.csrf, "Jobs of every repository of the organisation get these, beside the site's and each repository's own.") %}
{% call se::panel("/orgs/" ~ org.name ~ "/settings", secrets, shell.csrf, "Jobs of every repository of the organisation may use these, beside the site's and each repository's own.") %}
{% call ai::panel("/orgs/" ~ org.name ~ "/settings", assistants, shell.csrf, "Every repository of the organisation may ask these, beside the site's and its own.") %}
</div>
</div>
{% endblock %}