{{define "width"}}bounded{{end}}
{{define "title"}}account settings{{end}}
{{define "content"}}
<h1>Account settings</h1>
{{if .Notice}}<p class="error" role="alert">{{.Notice}}</p>{{end}}
{{if .Message}}<p class="notice" role="status">{{.Message}}</p>{{end}}

<h2>Profile</h2>
<p class="meta">Shown on your profile page, <a href="/{{.Viewer}}">/{{.Viewer}}</a>.</p>
{{if .Draft.Is "about"}}{{template "previewblock" .Draft.HTML}}{{end}}
<form method="post" action="/settings" class="setform stack">
  <input type="hidden" name="field" value="profile">
  <label for="p-description">Description</label>
  <input type="text" id="p-description" name="description" value="{{.Draft.Or "about" "description" .Profile.Description}}" placeholder="one line, shown in listings">
  <label for="p-website">Website</label>
  <input type="text" id="p-website" name="website" value="{{.Draft.Or "about" "website" .Profile.Website}}" placeholder="https://example.org">
  <label for="p-links">Links</label>
  <textarea id="p-links" name="links" rows="3" placeholder="one per line: label|https://... or a bare https://... (at most 5)">{{.Draft.Or "about" "links" .LinksText}}</textarea>
  <label for="p-about">About</label>
  <textarea id="p-about" name="about" rows="8" placeholder="longer, shown below your repositories">{{.Draft.Or "about" "about" .Profile.About}}</textarea>
  {{template "formatpicker" (.Draft.Or "about" "format" .Profile.AboutFormat)}}
  <span class="btngroup"><button type="submit" class="btn">Save profile</button>{{template "previewbtn"}}</span>
</form>

<h2>SSH keys</h2>
<p class="meta">Your keys are your identity here. A <code>full</code> key can run
commands and push; a <code>git</code> key can only move git data, which is what
a CI checkout wants.</p>
{{if .Keys}}<div class="tablewrap"><table class="keys">
<tr class="cols"><th scope="col">label</th><th scope="col">fingerprint</th><th scope="col">type</th><th scope="col">scope</th><th scope="col"></th></tr>
{{range .Keys}}<tr>
  <td>{{.Label}}</td>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{.Algo}}</td>
  <td>{{.Scope}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="key-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}">{{template "confirmfield" .Confirm}} <button type="submit" class="danger">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No SSH keys — which cannot be right, since you signed in.</p>{{end}}
<details class="editbox">
  <summary>Add an SSH key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="key-add">
    <label for="key">Public key</label>
    <textarea id="key" name="key" rows="3" required placeholder="ssh-ed25519 AAAA... you@machine"></textarea>
    <label for="key-label">Label</label>
    <input id="key-label" name="label" maxlength="64" placeholder="defaults to the key's comment">
    <label for="scope">Scope</label>
    <select id="scope" name="scope">
      <option value="full">full — commands and git</option>
      <option value="git">git — git transport only</option>
    </select>
    <button type="submit" class="btn">Add key</button>
  </form>
</details>

<h2>Email addresses</h2>
<p class="meta">A verified address is what ties your signed commits to this
account, and where notifications go.</p>
{{if .Emails}}<ul class="plain">
{{range .Emails}}<li>{{.Address}}
  {{if .Primary}}<span class="chip">primary</span>{{end}}
  {{if .Verified}}<span class="badge badge-verified">verified{{with .VerifiedBy}} · {{.}}{{end}}</span>
  {{else}}<span class="badge badge-unsigned">unverified</span>{{end}}
  {{if not .Primary}}{{if .Verified}}<form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-primary"><input type="hidden" name="address" value="{{.Address}}"><button type="submit" class="linklike">Make primary</button></form>{{end}}
  <form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-remove"><input type="hidden" name="address" value="{{.Address}}">{{template "confirmfield" .Address}} <button type="submit" class="danger">Remove</button></form>{{end}}</li>
{{end}}</ul>{{end}}
<details class="editbox">
  <summary>Add an address</summary>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-add">
    <label for="address">Address</label>
    <input type="email" id="address" name="address" required placeholder="you@example.org">
    <button type="submit" class="btn">Send code</button>
  </form>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-verify">
    <label for="code">Verification code</label>
    <input type="text" id="code" name="code" required placeholder="from the mail">
    <button type="submit" class="btn">Verify</button>
  </form>
</details>

<h2>OpenPGP keys</h2>
<p class="meta">Only needed if you sign commits with GPG. SSH signing
(<code>gpg.format = ssh</code>) uses the keys above.</p>
{{if .PGP}}<div class="tablewrap"><table class="keys">
<tr class="cols"><th scope="col">fingerprint</th><th scope="col">identities</th><th scope="col"></th></tr>
{{range .PGP}}<tr>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{range .UIDs}}{{.}}<br>{{end}}{{if .Revoked}}<span class="badge badge-bad_signature">revoked</span>{{else if .Expired}}<span class="badge badge-signed_key_expired">expired</span>{{end}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="pgp-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}">{{template "confirmfield" .Confirm}} <button type="submit" class="danger">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No OpenPGP keys.</p>{{end}}
<details class="editbox">
  <summary>Add a PGP key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="pgp-add">
    <label for="pgpkey">Armored public key</label>
    <textarea id="pgpkey" name="key" rows="6" required placeholder="-----BEGIN PGP PUBLIC KEY BLOCK-----"></textarea>
    <button type="submit" class="btn">Add key</button>
  </form>
</details>

<h2>Notifications</h2>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-mail">
  <label for="notify-mail">Activity by mail</label>
  <input type="checkbox" id="notify-mail" name="mail" value="on"{{if .MailOn}} checked{{end}}>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">The inbox is filed either way; this is the mail half. Login links are not activity and still arrive.</p>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-watch">
  <label for="notify-watch">Watch repositories you can write to</label>
  <input type="checkbox" id="notify-watch" name="watch" value="on"{{if .WatchOn}} checked{{end}}>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">Every issue and merge request on those repositories, as if you had watched each. A watch or mute on a repository still wins.</p>

<h2>Appearance</h2>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="theme">
  <label for="theme">Colour scheme</label>
  <select id="theme" name="theme">
    <option value="system"{{if eq .ThemeSetting "system"}} selected{{end}}>follow the browser</option>
    <option value="light"{{if eq .ThemeSetting "light"}} selected{{end}}>light</option>
    <option value="dark"{{if eq .ThemeSetting "dark"}} selected{{end}}>dark</option>
  </select>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">The same setting as <code>gitbay web theme set</code>. Following the browser takes its light or dark preference.</p>

<h2>Export</h2>
<p class="meta">Your profile, repositories, issues and merge requests as one
JSON bundle, the same one <code>gitbay account export</code> writes. Keys are
never included; a replayed bundle's emails arrive unverified.</p>
<p><a href="/settings/export">Download bundle</a></p>

<h2>On the command line</h2>
<p class="meta">No page here yet, and nothing refusing one: a credential is
easier to pipe than to paste, and a minted token is shown once.</p>
<pre class="message">gitbay auth token create --name laptop # API tokens
gitbay web sessions list               # browser sessions
gitbay admin ...                       # instance administration</pre>
<p class="meta">All of it works from stock OpenSSH too:
<code>ssh git@{{.Host}} auth whoami</code>.</p>
{{end}}