{% extends "base.html" %}
{% block title %}Settings · Ordine{% endblock %}
{% block content %}
<h1>Settings</h1>
<p>Config file: <code>{{ config.config_file or "(built-in defaults — run ordine init)" }}</code></p>

<section aria-labelledby="paths-heading">
  <h2 id="paths-heading">Paths (read-only)</h2>
  <dl>
    <dt>Database</dt><dd><code>{{ config.db_path }}</code></dd>
    <dt>Workdirs</dt><dd><code>{{ config.workdir_root }}</code></dd>
  </dl>
  <p class="hint">Edit paths in the config file and restart <code>ordine serve</code>.</p>
</section>

<form action="/settings" method="post">
  <section aria-labelledby="runner-heading">
    <h2 id="runner-heading">Runner</h2>
    <label for="stale_after_minutes">stale_after_minutes</label>
    <input id="stale_after_minutes" name="stale_after_minutes" type="number" min="1" value="{{ config.stale_after_minutes }}" required />
    <label for="reconcile_policy">reconcile_policy</label>
    <select id="reconcile_policy" name="reconcile_policy">
      <option value="retry"{% if config.reconcile_policy == "retry" %} selected{% endif %}>retry</option>
      <option value="fail"{% if config.reconcile_policy == "fail" %} selected{% endif %}>fail</option>
    </select>
  </section>
  <section aria-labelledby="web-heading">
    <h2 id="web-heading">Web</h2>
    <p class="hint">
      <strong>bind</strong> is the listen address (applied only after restarting <code>ordine serve</code>).
      <strong>allowed_hosts</strong> is the HTTP Host allowlist (applied on save). Never put
      <code>0.0.0.0</code> or <code>::</code> in allowed_hosts — those are bind addresses, not Host names.
      CLI <code>--host</code> overrides bind only.
    </p>
    <label for="web_bind">bind</label>
    <input id="web_bind" name="web_bind" value="{{ config.web_bind }}" required />
    <label for="web_allowed_hosts">allowed_hosts (comma-separated)</label>
    <input id="web_allowed_hosts" name="web_allowed_hosts" value="{{ allowed_hosts_text }}" required />
    <label for="web_port">port</label>
    <input id="web_port" name="web_port" type="number" min="1" max="65535" value="{{ config.web_port }}" required />
    <label><input type="checkbox" name="autostart_pipelines"{% if config.autostart_pipelines %} checked{% endif %} /> autostart_pipelines</label>
    <label><input type="checkbox" name="i_understand_no_auth"{% if config.i_understand_no_auth %} checked{% endif %} /> i_understand_no_auth (required to bind non-loopback — Ordine has no auth)</label>
    <p class="hint">Non-loopback binds are refused unless this flag is set. Anyone who can reach the port can control pipelines.</p>
  </section>
  <section aria-labelledby="llm-heading">
    <h2 id="llm-heading">LLM</h2>
    <label for="llm_provider">provider</label>
    <select id="llm_provider" name="llm_provider">
      <option value="none"{% if config.llm_provider == "none" %} selected{% endif %}>none</option>
      <option value="anthropic"{% if config.llm_provider == "anthropic" %} selected{% endif %}>anthropic</option>
      <option value="openai"{% if config.llm_provider == "openai" %} selected{% endif %}>openai</option>
      <option value="openai_compatible"{% if config.llm_provider == "openai_compatible" %} selected{% endif %}>openai_compatible</option>
    </select>
    <label for="llm_model">model</label>
    <input id="llm_model" name="llm_model" value="{{ config.llm_model }}" />
    <label for="llm_base_url">base_url</label>
    <input id="llm_base_url" name="llm_base_url" value="{{ config.llm_base_url }}" placeholder="http://localhost:11434/v1" />
    <p class="hint">base_url is used for openai_compatible (e.g. Ollama at <code>http://localhost:11434/v1</code>).</p>
    <label for="llm_max_tokens">max_tokens</label>
    <input id="llm_max_tokens" name="llm_max_tokens" type="number" min="1" value="{{ config.llm_max_tokens }}" required />
    <label for="llm_session_token_cap">session_token_cap</label>
    <input id="llm_session_token_cap" name="llm_session_token_cap" type="number" min="1" value="{{ config.llm_session_token_cap }}" required />
    <p>key present: {{ llm_key_label }}</p>
    {% if llm_key_from_dotenv %}
    <p class="flash flash-error" role="alert">
      API key is loaded from plaintext <code>~/.config/ordine/.env</code>. Prefer the OS keyring
      (Set key below) or an environment variable.
    </p>
    {% endif %}
    <p class="hint">Keys entered here are stored in the system keyring. Environment variables and <code>~/.config/ordine/.env</code> are equally valid alternatives: <code>ANTHROPIC_API_KEY</code>, <code>OPENAI_API_KEY</code>, <code>ORDINE_LLM_API_KEY</code>. Clear removes the keyring entry only. Prefer keyring over plaintext <code>.env</code>.</p>
  </section>
  {% if error %}<p class="error">{{ error }}</p>{% endif %}
  {% if saved %}<p class="flash flash-info">Settings saved.</p>{% endif %}
  {% if bind_restart_notice %}
  <p class="flash flash-error" role="alert">
    Bind address/port changes are written to disk but the listener does not move until you restart
    <code>ordine serve</code>. Host allowlist changes apply immediately.
  </p>
  {% endif %}
  <button type="submit">Save</button>
</form>

<form action="/settings/llm-key" method="post">
  <input type="hidden" name="llm_provider" value="{{ config.llm_provider }}" />
  <label for="api_key">API key (never shown after save)</label>
  <input id="api_key" name="api_key" type="password" autocomplete="off" />
  <button type="submit" name="action" value="set">Set key</button>
  <button type="submit" name="action" value="clear">Clear key</button>
</form>
{% endblock %}