{# plugins/homeassistant/templates/homeassistant/form.html — where Home Assistant
   is, what signing in gives Steward, and leaving for its sign-in page. #}
{% extends "base.html" %}
{% from "_macros.html" import crumbs, page_header %}
{% block title %}Home Assistant connection — Steward{% endblock %}
{% block breadcrumb %}{{ crumbs([("Home Assistant", "/plugins/homeassistant/"), ("Connection", "")]) }}{% endblock %}
{% block content %}
{{ page_header("Home Assistant connection") }}

<div class="form-page">
{% if error %}<p class="field-error" role="alert">{{ error }}</p>{% endif %}
{% if connection %}
<p class="field-hint">Signed in{% if connection.signed_in_at %} {{ connection.signed_in_at|ago }}{% endif %}{% if connection.signed_in_by %} by {{ connection.signed_in_by }}{% endif %}, as {{ "an administrator: Steward can install updates" if connection.can_install else "a user who isn't an administrator: Steward shows status only" }}.</p>
{% endif %}
<form method="post" action="/plugins/homeassistant/connection/sign-in">{{ csrf_field() }}
  <section class="card form-section" aria-labelledby="ha-sign-in">
    <h2 id="ha-sign-in" class="section-title">Sign in with Home Assistant</h2>
    <div class="field">
      <label class="field-label" for="ha-url">Address</label>
      <input class="input mono" id="ha-url" name="url" required maxlength="500" value="{{ url or '' }}" placeholder="http://homeassistant.local:8123" autocomplete="off">
      <span class="field-hint">Both your browser and Steward need to reach it at this address.</span>
    </div>
    <label style="display:flex;gap:0.5rem;align-items:center;cursor:pointer;margin-bottom:0.9rem;">
      <input type="checkbox" name="verify_tls" value="on"{% if verify_tls %} checked{% endif %}> Check its HTTPS certificate
    </label>
    <p class="tone-warn"><strong>Steward stores a credential with the same access as the user who signs in.</strong> Home Assistant has no narrower permission, so an administrator's credential can do anything that administrator can, including controlling every device. Steward only uses it to read status, take backups and install updates.</p>
    <p class="field-hint"><strong>We recommend a service account:</strong> a Home Assistant user made just for Steward (Settings → People → Add person). What Steward does then appears under its own name in Home Assistant's logs, so it's easy to tell apart from what people do.</p>
    <p class="field-hint" style="margin-bottom:0;">Installing updates needs an administrator. With any other user, Steward shows status only.</p>
  </section>

  <div class="form-actions">
    <button type="submit" class="btn">{{ "Sign in again" if connection else "Continue to Home Assistant" }}</button>
    <a href="/plugins/homeassistant/" class="btn btn-ghost">Cancel</a>
  </div>
</form>

{% if connection %}
<section class="card danger-zone" aria-labelledby="ha-remove">
  <div>
    <h2 id="ha-remove" class="section-title">Remove this connection</h2>
    <p class="field-hint">Steward stops reading Home Assistant, forgets its credential and ends the sign-in there.</p>
  </div>
  <form method="post" action="/plugins/homeassistant/connection/delete"
        data-confirm="Remove the Home Assistant connection? Steward stops reading it and forgets its credential.">{{ csrf_field() }}
    <button class="btn btn-danger" type="submit">Remove connection</button>
  </form>
</section>
{% endif %}
</div>
{% endblock %}