{% extends "base.html" %}
{% block title %}Settings — Waikiki{% endblock %}
{% block content %}
  <h1>Settings</h1>
  {% if msg %}<div class="banner ok">{{ msg }}</div>{% endif %}
  {% if error %}<div class="banner err">{{ error }}
    {% if detail %}<details class="banner-detail"><summary>What it said</summary>
      <pre>{{ detail }}</pre></details>{% endif %}
  </div>{% endif %}

  {# --- Capabilities -------------------------------------------------------
     What this install can actually do, before you press anything. Every row
     that can be fixed carries a button; every row that can't says why, in
     words, with the setting that changes it. Doorman deliberately has neither:
     it is the user's own app and Waikiki never installs or starts it. #}
  <section class="settings" id="capabilities">
    <details class="settings-sec" open>
      <summary>Capabilities <span class="muted">(what this Waikiki can do right now)</span></summary>

      {% if pending %}
        <div class="cap-confirm">
          <h4>Before Waikiki does this</h4>
          <p>{{ pending.detail }}</p>
          {% if pending.host %}
            <p class="cap-warn"><strong>This one downloads code and runs it.</strong>
              The installer script comes from <code>{{ pending.host }}</code> and
              runs with your account&rsquo;s permissions. Waikiki verifies the
              signature on its own updates before running them; it cannot do that
              for somebody else&rsquo;s installer, and it won&rsquo;t pretend
              otherwise.</p>
          {% endif %}
          <details class="cap-runs">
            <summary>Exactly what will run</summary>
            <pre>{{ pending.runs }}</pre>
          </details>
          <form method="post" action="/settings/capabilities/{{ pending.id }}/fix"
                class="cap-fix"
                data-busy="Working&hellip; this can take a minute. Leave Waikiki open.">
            <input type="hidden" name="confirm" value="yes">
            <button class="btn primary" type="submit">Yes, {{ pending.verb }}</button>
            <a class="btn" href="/settings#capabilities">Cancel</a>
            <span class="cap-busy muted" aria-live="polite"></span>
          </form>
        </div>
      {% endif %}

      <ul class="caplist">
        {% for c in capabilities %}
          <li class="cap cap-{{ c.state }}{{ ' cap-optional' if c.optional }}"
              id="cap-{{ c.id }}">
            <div class="cap-head">
              <span class="cap-dot" aria-hidden="true"></span>
              <strong class="cap-name">{{ c.label }}</strong>
              <span class="cap-badge">{{ c.state_label }}</span>
              {% if c.backend %}<span class="muted cap-backend">{{ c.backend }}</span>{% endif %}
            </div>
            <p class="muted cap-powers">{{ c.powers }}</p>
            <p class="cap-reason">{{ c.reason }}</p>
            {% if c.remedy %}
              {% if c.remedy.kind == 'manual' %}
                <div class="cap-actions">
                  {# Greyed out on purpose: the row keeps its shape, and "there is
                     no button for this one" is itself the honest answer. #}
                  <button class="btn" type="button" disabled
                          title="Waikiki can&rsquo;t do this one for you">{{ c.remedy.label }}</button>
                  {% if c.remedy.settings %}
                    <a href="{{ c.remedy.settings }}">Open the setting</a>
                  {% endif %}
                  {% if c.remedy.url %}
                    <a href="{{ c.remedy.url }}" target="_blank" rel="noopener">{{ c.remedy.link or c.remedy.url }}</a>
                  {% endif %}
                </div>
                <p class="muted note cap-why">{{ c.remedy.why }}</p>
              {% else %}
                <form method="post" action="/settings/capabilities/{{ c.remedy.id }}/fix"
                      class="cap-actions">
                  <button class="btn primary" type="submit">{{ c.remedy.label }}</button>
                  {% if c.remedy.step == 'prerequisite' %}
                    <span class="muted">&mdash; the missing piece comes first; the CLI
                      is one click after it</span>
                  {% endif %}
                </form>
                <p class="muted note cap-why">Waikiki will say what it is about to do,
                  and ask, before it changes anything.</p>
              {% endif %}
            {% endif %}
            {% if c.where %}
              <a class="cap-where" href="{{ c.where.href }}">Settings &rsaquo; {{ c.where.label }}</a>
            {% endif %}
          </li>
        {% endfor %}
      </ul>
      <p class="muted note">Waikiki never installs or starts Doorman &mdash; that row
        is here to say what is in play, not to switch it on.</p>
    </details>
  </section>

  <form method="post" action="/settings" class="settings">
    <details class="settings-sec" open>
      <summary>Theme</summary>
      <select name="theme">
        {% for t in themes %}
          <option value="{{ t }}" {{ 'selected' if settings.theme == t }}>{{ t }}</option>
        {% endfor %}
      </select>
    </details>

    <details class="settings-sec" open>
      <summary>Content <span class="muted">(this wiki)</span></summary>
      <label class="rag-toggle">
        <input type="checkbox" name="allow_html" value="1"
               {{ 'checked' if settings.allow_html == '1' }}>
        Allow raw HTML in pages
      </label>
      <p class="muted note">Renders custom HTML/CSS snippets and embeds like
        <code>&lt;video&gt;</code>/<code>&lt;iframe&gt;</code>. <strong>On by
        default</strong> — all content here is local and only editable by you and
        your local agent. Uncheck to escape HTML in this wiki instead.</p>
    </details>

    <details class="settings-sec" open>
      <summary>Retention <span class="muted">(this wiki)</span></summary>
      <label>Keep the last N versions per page
        <input type="number" name="retention_versions" min="0"
               value="{{ settings.retention_versions }}">
        <span class="muted">0 = keep all</span>
      </label>
      <label>Empty trash after N days
        <input type="number" name="retention_trash_days" min="0"
               value="{{ settings.retention_trash_days }}">
        <span class="muted">0 = never auto-empty</span>
      </label>
    </details>

    <details class="settings-sec" id="ai-generation" open>
      <summary>AI generation <span class="muted">(the editor's Generate button)</span></summary>
      <label>Provider
        <select name="gen_provider">
          <option value="anthropic" {{ 'selected' if settings.gen_provider != 'ollama' }}>Anthropic (cloud)</option>
          <option value="ollama" {{ 'selected' if settings.gen_provider == 'ollama' }}>Ollama (local)</option>
        </select>
      </label>
      <label>Anthropic model
        <input type="text" name="gen_model" value="{{ settings.gen_model }}"
               placeholder="claude-opus-4-8">
      </label>
      <label>Local (Ollama) model
        <input type="text" name="gen_model_local" value="{{ settings.gen_model_local }}"
               placeholder="phi3">
      </label>
      <label>Ollama URL
        <input type="text" name="ollama_url" value="{{ settings.ollama_url }}"
               placeholder="http://localhost:11434">
      </label>
      <p class="muted note">Local generation needs <a href="https://ollama.com">Ollama</a>
        running (<code>ollama serve</code>) with the model pulled
        (<code>ollama pull phi3</code>).</p>
    </details>

    <details class="settings-sec" id="chat" open>
      <summary>Chat <span class="muted">(chat with an article)</span></summary>
      <label>CLI
        <select name="chat_provider">
          <option value="claude" {{ 'selected' if settings.chat_provider != 'gemini' }}>Claude Code</option>
          <option value="gemini" {{ 'selected' if settings.chat_provider == 'gemini' }}>Gemini</option>
        </select>
      </label>
      <label>Model <span class="muted">(blank = CLI default)</span>
        <input type="text" name="chat_model" value="{{ settings.chat_model }}"
               placeholder="e.g. claude-sonnet-4-5 / gemini-2.5-pro">
      </label>
      <p class="muted note">Chat shells out to a local CLI. Install the
        <code>claude</code> or <code>gemini</code> command and make sure it's
        signed in.</p>
    </details>

    <details class="settings-sec" id="images" open>
      <summary>Images <span class="muted">(generate an image)</span></summary>
      <label>Image CLI
        <input type="text" name="image_cli" value="{{ settings.image_cli }}"
               placeholder="agy">
      </label>
      <label>Model <span class="muted">(blank = CLI default)</span>
        <input type="text" name="image_model" value="{{ settings.image_model }}">
      </label>
      <label>House style for this wiki <span class="muted">(applied to every image)</span></label>
      <textarea name="image_style_prompt" rows="3"
                placeholder="e.g. clockwork punk pixel art RPG in the style of Dragon Warrior 7">{{ settings.image_style_prompt }}</textarea>
      <p class="muted note"><code>claude</code> writes the prompt, then this CLI
        (e.g. <code>agy</code> or <code>gemini</code>) renders a PNG into the
        article's own folder — images for one article share a folder so the CLI
        can keep them visually consistent. Use the ✨ button in the editor.</p>
    </details>

    <details class="settings-sec" open>
      <summary>Logging <span class="muted">(all wikis)</span></summary>
      <label>Keep access logs for N hours
        <input type="number" name="log_retention_hours" min="1"
               value="{{ log_retention_hours }}">
      </label>
      <p class="muted note">The <a href="/logs">access log</a> records every request
        and CLI/MCP call (hour-stamped files, swept after this many hours). View it
        under <strong>Help → Access log</strong>.</p>
    </details>

    <button class="btn primary" type="submit">Save settings</button>
  </form>

  <section class="settings">
    <details class="settings-sec" open>
      <summary>Embedding model (RAG)</summary>
      <p class="muted">Active: <strong>{{ active_provider }}</strong> · <code>{{ active_model }}</code></p>

      {% if library %}
        <table class="modeltable">
          <tbody>
          {% for m in library %}
            <tr>
              <td>{{ m.provider }}</td>
              <td><code>{{ m.model }}</code></td>
              <td>
                {% if m.provider == active_provider and m.model == active_model %}
                  <span class="badge human">active</span>
                {% else %}
                  <form method="post" action="/settings/models/activate">
                    <input type="hidden" name="provider" value="{{ m.provider }}">
                    <input type="hidden" name="model" value="{{ m.model }}">
                    <button class="btn" type="submit">Activate</button>
                  </form>
                {% endif %}
              </td>
            </tr>
          {% endfor %}
          </tbody>
        </table>
      {% endif %}

      <h4>Add a model</h4>
      <p class="muted note">Paste a HuggingFace slug and click Add. It downloads,
        becomes active, and all pages are re-embedded. Changing the vector size is
        handled automatically.</p>
      <form method="post" action="/settings/models/add" class="addmodel">
        <select name="provider">
          <option value="fastembed">fastembed (ONNX, no PyTorch — recommended)</option>
          <option value="local">local (sentence-transformers, needs PyTorch)</option>
          <option value="voyage">voyage (cloud, needs VOYAGE_API_KEY)</option>
        </select>
        <input type="text" name="slug" list="fe-catalog" placeholder="e.g. BAAI/bge-small-en-v1.5" required>
        <button class="btn primary" type="submit">Add model</button>
      </form>
      <datalist id="fe-catalog">
        {% for s in catalog %}<option value="{{ s }}"></option>{% endfor %}
      </datalist>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" open>
      <summary>Share on your network <span class="muted">(all wikis)</span></summary>
      <form method="post" action="/settings/sharing" class="settings">
        <label class="rag-toggle">
          <input type="checkbox" name="share_enabled" value="1"
                 {{ 'checked' if share_enabled }}>
          Serve this Waikiki to the local network
        </label>
        <label>{{ 'Change password' if share_has_password else 'Set a password' }}
          <input type="password" name="password" autocomplete="new-password"
                 placeholder="{{ '••••••••  (leave blank to keep)' if share_has_password else 'required to enable sharing' }}">
        </label>
        <button class="btn primary" type="submit">Save sharing</button>
      </form>

      {% if share_enabled and share_lan_urls %}
        <p class="muted note">Others on your network can reach it at:
          {% for u in share_lan_urls %}<br><code>{{ u }}</code>{% endfor %}
          <br><strong>Restart Waikiki</strong> after turning sharing on or off —
          the network port is opened at startup.</p>
        <p class="muted note">
          {% if bonjour_on %}
            📡 <strong>Discoverable via Bonjour</strong> — it appears automatically
            on Macs and iPhones on this network (Safari → Bonjour bookmarks, or
            <code>dns-sd -B _http._tcp</code>), so guests don't need to type the
            IP address.
          {% elif bonjour_available %}
            Bonjour advertising starts with the app — restart to announce this
            wiki on the network.
          {% else %}
            Bonjour advertising is unavailable on this system
            (<code>dns-sd</code> not found); hand out the address above instead.
          {% endif %}
        </p>
      {% endif %}

      <p class="muted note"><strong>What guests can do.</strong> Anyone who signs
        in with the password can read and edit pages. They cannot open Settings,
        manage wikis or elements, view logs, or use Chat and image generation —
        those run programs on <em>this</em> computer, so they stay with you.</p>
      <p class="muted note"><strong>Know the limits.</strong> This is a single
        shared password over plain HTTP, meant for a home or office network you
        trust — not hardened multi-user security. Anyone on the network who has
        the password can edit every wiki, and traffic isn't encrypted. It's off
        by default.</p>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" open>
      <summary>Backups <span class="muted">(all wikis)</span></summary>
      <form method="post" action="/settings/backups" class="settings">
        <label class="rag-toggle">
          <input type="checkbox" name="enabled" value="1" {{ 'checked' if backup_enabled }}>
          Back up automatically
        </label>
        <label>Every N hours
          <input type="number" name="interval_hours" min="1" value="{{ backup_interval }}">
        </label>
        <label>Keep the last N backups
          <input type="number" name="keep" min="1" value="{{ backup_keep }}">
        </label>
        <button class="btn primary" type="submit">Save backup settings</button>
      </form>
      <form method="post" action="/settings/backups/run" style="margin-top:.6rem">
        <button class="btn" type="submit">Back up now</button>
      </form>

      {% if backup_list %}
        <table class="modeltable" style="margin-top:.8rem">
          <tbody>
            {% for b in backup_list %}
              <tr>
                <td class="mono">{{ b.when }}</td>
                <td class="muted">{{ b.wikis | length }} wiki(s)</td>
                <td class="muted">{{ (b.bytes / 1048576) | round(1) }} MB</td>
              </tr>
            {% endfor %}
          </tbody>
        </table>
      {% else %}
        <p class="muted">No backups yet — one runs automatically, or take one now.</p>
      {% endif %}
      <p class="muted note">Snapshots of every wiki, taken safely while the app is
        running. Images live inside each wiki's database, so a snapshot is a
        complete copy. They're written to <code>{{ backup_dir }}</code>.</p>
      <p class="muted note"><strong>To restore:</strong> quit Waikiki, then use
        <em>Manage wikis → Open</em> on a <code>.db</code> file from a backup
        folder — it opens as a separate wiki, so you can compare before replacing
        anything. These are local copies: they protect against corruption and
        mistakes, not against losing the machine. Keep a copy elsewhere too.</p>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" id="doorman">
      <summary>Doorman
        <span class="muted">({{ 'the app showing this window' if doorman.embedded
                                else 'optional' }})</span></summary>
      <form method="post" action="/settings/doorman" class="settings">
        <label class="rag-toggle">
          <input type="checkbox" name="enabled" value="1"
                 {{ 'checked' if doorman.enabled }}
                 {{ 'disabled' if doorman.embedded }}>
          Use Doorman when it is running
        </label>
        {% if not doorman.embedded %}
          <button class="btn primary" type="submit">Save</button>
        {% endif %}
      </form>
      {% if doorman.embedded %}
        <p class="muted"><strong>Locked on:</strong>
          Waikiki is running inside Doorman’s own window, so Doorman is
          unmistakably here and is the host. Open Waikiki on its own to make the
          integration optional again.</p>
      {% endif %}
      {% if doorman.running %}
        <p class="muted">Detected at <code>{{ doorman.url }}</code>{% if doorman.version %}
          (version {{ doorman.version }}){% endif %}.
          {% if doorman.voices %}Better voices are available for Listen and
          “Say this word”.{% endif %}
          {% if doorman.ask %}Generation and chat are answered by
          <strong>{{ doorman.ask.agent }}</strong> in Doorman.{% endif %}
          {% if doorman.image %}Images are rendered by
          <strong>{{ doorman.image.model }}</strong> in Doorman.{% endif %}</p>
        {% if not doorman.ask or not doorman.image %}
          <p class="muted note">{% if not doorman.ask %}Generation and chat{% endif %}
            {%- if not doorman.ask and not doorman.image %} and {% endif %}
            {%- if not doorman.image %}Images{% endif %}
            still use this machine’s own models and CLIs — this Doorman doesn’t
            offer that yet, which is normal and needs nothing from you.</p>
        {% endif %}
      {% else %}
        <p class="muted">Not running. Everything works without it — this only
          adds nicer speech, and hands generation, chat and images to the agents
          you have already set up there, when Doorman happens to be open.</p>
      {% endif %}
      <p class="muted note">Doorman is a separate app. Waikiki never starts or
        installs it, and every feature here works without it.</p>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" id="updates">
      <summary>Updates <span class="muted">(version {{ update.current }})</span></summary>
      {% if update.updatable %}
        <form method="post" action="/settings/updates" class="settings">
          <label class="rag-toggle">
            <input type="checkbox" name="auto_check" value="1"
                   {{ 'checked' if update.auto_check }}>
            Check for updates automatically
          </label>
          <label>Check every N hours
            <input type="number" name="interval_hours" min="1"
                   value="{{ update.interval_hours }}">
          </label>
          <button class="btn primary" type="submit">Save update settings</button>
        </form>
        <form method="post" action="/settings/updates/check" style="margin-top:.6rem">
          <button class="btn" type="submit">Check now</button>
        </form>
        {# last_available, not last_seen: an offer only when the release is both
           newer and signed, so this can't propose a downgrade or an install
           that would fail verification. #}
        {% if update.last_available %}
          <form method="post" action="/settings/updates/install" style="margin-top:.6rem">
            <button class="btn primary" type="submit">
              Download and install {{ update.last_available }}
            </button>
            <p class="muted note">Waikiki will back up every wiki, then quit and
              restart itself to finish. Save anything you're mid-way through
              first.</p>
          </form>
        {% endif %}
      {% else %}
        <p class="muted">Automatic updates are unavailable for this install:
          {{ update.reason }}.</p>
        {% if not update.signing_key_pinned %}
          <p class="muted note">This build has no update signing key pinned, so it
            can't verify that a download really came from you. Updating is
            disabled rather than trusting an unverified download — see
            <code>waikiki/updater.py</code>.</p>
        {% endif %}
      {% endif %}
      <p class="muted note">Your wikis live outside the app bundle, so an update
        replaces code only and never touches your content. A backup runs first
        anyway: a newer version can migrate a wiki forward, but an older one
        can't read it back.</p>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" id="public-link" open>
      <summary>Share with someone remote <span class="muted">(temporary public link)</span></summary>
      {% if tunnel_url %}
        <p>🔗 <strong>Live now:</strong>
          <code class="tunnelurl">{{ tunnel_url }}</code></p>
        <p class="muted note">Send that link <em>and</em> the password to them
          separately (text the link, say the password out loud). They'll get the
          same guest access as someone on your network. The link dies when you
          stop it or quit Waikiki.</p>
        <form method="post" action="/settings/tunnel/stop">
          <button class="btn danger" type="submit">Stop public link</button>
        </form>
      {% elif not tunnel_available %}
        <p class="muted">Needs <code>cloudflared</code>. Install it with
          <code>brew install cloudflared</code>, then restart Waikiki.</p>
      {% elif not share_has_password %}
        <p class="muted">Set a sharing password above first — a public link puts
          this wiki on the internet, so it can't be left open.</p>
      {% else %}
        <form method="post" action="/settings/tunnel/start">
          <button class="btn primary" type="submit">Start public link</button>
        </form>
        <p class="muted note">Creates a temporary <code>https://…trycloudflare.com</code>
          address that forwards to this wiki, so someone outside your network can
          join. Traffic is encrypted, and visitors must sign in with your sharing
          password — they get guest access only (no Settings, no AI tools that run
          on this computer).</p>
      {% endif %}
      <p class="muted note"><strong>Be deliberate about this one.</strong> Unlike
        network sharing, the link is reachable by anyone on the internet who has
        it. Keep it short-lived, use a password you don't use elsewhere, and stop
        the link when you're done.</p>
    </details>
  </section>

  <section class="settings">
    <details class="settings-sec" open>
      <summary>Style reference images <span class="muted">(this wiki)</span></summary>
      <p class="muted note">Images that define this wiki's art style. During image
        generation they're handed to the image CLI with <code>--add-dir</code> so it
        can study and match them. Folder: <code>{{ style_refs_dir }}</code></p>
      {% if style_refs %}
        <div class="refgrid">
          {% for r in style_refs %}
            <figure class="ref">
              <img src="/style-ref/{{ r }}?wiki={{ current_wiki }}" alt="{{ r }}" loading="lazy">
              <form method="post" action="/settings/style-refs/{{ r }}/delete">
                <button class="btn small danger" type="submit" title="Remove {{ r }}">✕</button>
              </form>
            </figure>
          {% endfor %}
        </div>
      {% else %}
        <p class="muted">No reference images yet.</p>
      {% endif %}
      <form method="post" action="/settings/style-refs" enctype="multipart/form-data" class="addmodel">
        <input type="file" name="files" accept="image/*" multiple required>
        <button class="btn primary" type="submit">Upload reference images</button>
      </form>
    </details>
  </section>
{% endblock %}

{% block scripts %}
<script>
  // Progress, not a frozen page. An install runs on the server and the request
  // is held while it does, so the one thing the user must not think is that
  // nothing is happening.
  document.querySelectorAll('form.cap-fix').forEach(function (f) {
    f.addEventListener('submit', function () {
      var btn = f.querySelector('button[type=submit]');
      var say = f.querySelector('.cap-busy');
      if (btn) { btn.disabled = true; btn.textContent = 'Working\u2026'; }
      if (say) say.textContent = f.dataset.busy || '';
    });
  });
</script>
{% endblock %}