{% extends "base.html" %}
{% block title %}permissions · Maverick{% endblock %}
{% block content %}
  <h2>what maverick can do</h2>

  {% if perm.error %}
    <div class="panel"><p style="color: var(--danger);">{{ perm.error }}</p></div>
  {% endif %}

  {% if perm.sandbox_warning %}
    <div class="panel" style="border-left: 3px solid var(--danger);">
      <p style="color: var(--danger);"><strong>⚠ {{ perm.sandbox_warning }}</strong></p>
    </div>
  {% endif %}

  <div class="panel">
    <p class="muted">
      Everything the agent is currently allowed to do. Disabling a tool
      here takes effect on the next goal — it writes a dashboard-owned
      override file, never your <code>config.toml</code>.
    </p>
  </div>

  <h2>tools</h2>
  <div class="panel">
    {% if perm.tools %}
      <table>
        <thead><tr><th scope="col">tool</th><th scope="col">status</th><th scope="col">action</th></tr></thead>
        <tbody>
        {% for t in perm.tools %}
          <tr>
            <td><code>{{ t.name }}</code></td>
            <td>
              {% if t.enabled %}<span class="badge active">enabled</span>
              {% else %}<span class="badge blocked">disabled</span>{% endif %}
            </td>
            <td>
              {% if t.enabled %}
                <button class="perm-toggle" data-name="{{ t.name }}" data-action="disable">Disable</button>
              {% else %}
                <button class="perm-toggle" data-name="{{ t.name }}" data-action="enable">Enable</button>
              {% endif %}
            </td>
          </tr>
        {% endfor %}
        </tbody>
      </table>
    {% else %}
      <p class="muted">No tools registered.</p>
    {% endif %}
  </div>

  <h2>capabilities &amp; limits</h2>
  <div class="panel">
    <table>
      <tbody>
        <tr><td>computer-use</td><td>{% if perm.capabilities.computer_use %}<span class="badge blocked">on</span>{% else %}<span class="badge done">off</span>{% endif %}</td></tr>
        <tr><td>browser</td><td>{% if perm.capabilities.browser %}<span class="badge blocked">on</span>{% else %}<span class="badge done">off</span>{% endif %}</td></tr>
        <tr><td>web search</td><td>{% if perm.capabilities.web_search %}<span class="badge active">on</span>{% else %}<span class="badge done">off</span>{% endif %}</td></tr>
        <tr><td>sandbox</td><td><code>{{ perm.sandbox.backend or 'local' }}</code></td></tr>
        <tr><td>network policy</td><td><code>{{ perm.network }}</code></td></tr>
        <tr><td>budget / task</td><td>${{ perm.budget.max_dollars if perm.budget.max_dollars is defined else '?' }} · {{ perm.budget.max_wall_seconds if perm.budget.max_wall_seconds is defined else '?' }}s</td></tr>
      </tbody>
    </table>
  </div>

  <h2>channels</h2>
  <div class="panel">
    {% if perm.channels %}
      {% for c in perm.channels %}
        <span class="badge {{ 'active' if c.enabled else 'done' }}">{{ c.name }}</span>
      {% endfor %}
    {% else %}
      <p class="muted">No channels enabled — nothing is reachable from the network.</p>
    {% endif %}
  </div>

  <h2>your data</h2>
  <div class="panel">
    <p class="muted">
      Your prompts and tool outputs are sent to:
      {% if perm.providers %}<strong>{{ perm.providers | join(', ') }}</strong>{% else %}<strong>(no provider configured)</strong>{% endif %}.
      Nothing else.
    </p>
    <ul class="muted">
      <li>No telemetry. Maverick collects no usage analytics.</li>
      <li>Local logs at <code>~/.maverick/audit/</code>, retained
        {{ perm.retention.audit_days if perm.retention.audit_days is defined else 'until you delete them' }} day(s).</li>
      <li>World model at <code>~/.maverick/world.db</code>. Erase a
        person's data with <code>maverick erase</code>; wipe everything
        with <code>maverick erase --all</code>.</li>
    </ul>
  </div>

  <p id="perm-msg" role="status" aria-live="polite" class="muted" style="min-height: 1em;"></p>

  <style>
    button.perm-toggle { padding: 0.35rem 0.85rem; background: var(--panel); color: var(--text); border: 1px solid var(--border); border-radius: 4px; cursor: pointer; font-size: 0.85rem; }
    button.perm-toggle:hover { border-color: var(--accent); }
    button.perm-toggle[disabled] { opacity: 0.6; cursor: not-allowed; }
  </style>

  <script>
    (function() {
      const msg = document.getElementById('perm-msg');
      document.querySelectorAll('button.perm-toggle').forEach(function(btn) {
        btn.addEventListener('click', async function() {
          const name = btn.dataset.name;
          const action = btn.dataset.action;  // "disable" | "enable"
          btn.disabled = true;
          msg.style.color = 'var(--muted)';
          msg.textContent = (action === 'disable' ? 'Disabling ' : 'Enabling ') + name + '…';
          try {
            const r = await fetch('/api/v1/permissions/tools/' + encodeURIComponent(name) + '/' + action, {
              method: 'POST',
            });
            if (r.ok || r.status === 204) {
              msg.style.color = 'var(--accent)';
              msg.textContent = name + ' ' + action + 'd. Takes effect on the next goal. Reloading…';
              setTimeout(function() { window.location.reload(); }, 700);
            } else {
              const j = await r.json().catch(function() { return {}; });
              btn.disabled = false;
              msg.style.color = 'var(--danger)';
              msg.textContent = (j.detail || ('Failed: ' + r.status));
            }
          } catch (e) {
            btn.disabled = false;
            msg.style.color = 'var(--danger)';
            msg.textContent = String(e);
          }
        });
      });
    })();
  </script>
{% endblock %}