{% extends "base.html" %}
{% block title %}Licences{% endblock %}
{% block content %}
<div class="crumb"><a href="/manage">Admin</a> / Licences</div>
<div class="hdr"><div><h1>Self-hosted licences</h1><p class="sub" style="margin:0">Signed keys for customers running Vigil on their own hosts. Paddle sales issue keys automatically; issue manual ones here for invoices, POs and air-gapped sites.</p></div></div>
{% if not signing %}<div class="flash err">The licence signing key file is missing on this server (LICENSE_PRIVATE_KEY_FILE), so keys cannot be signed.</div>{% endif %}
<div class="panel" style="margin-bottom:16px{% if pending %};border-color:var(--warn){% endif %}"><h2>Installations waiting for your approval <span class="pill {% if pending %}warn{% else %}ok{% endif %}">{{ pending|length }}</span></h2>
  <p class="small muted">Every self-hosted install registers itself with its licence and its own key fingerprint. Nothing can be changed on that installation until you approve it here{% if reauth %} — approval needs your password{% if needs_totp %} and a fresh 2FA code{% endif %}{% endif %}. The key you approve is bound to that fingerprint, so copying it to another machine does nothing.</p>
  {% if pending %}<table><thead><tr><th>Requested</th><th>Licence · customer</th><th>Installation</th><th>Approve</th><th></th></tr></thead><tbody>
  {% for a in pending %}<tr><td class="small">{{ a.requested_at|timeago }}<div class="xs dim">from {{ a.ip or '?' }}</div></td><td class="small"><span class="mono">{{ a.license_id }}</span>{% for r in rows if r.license_id == a.license_id %}<div>{{ r.customer }} <span class="xs dim">{{ r.email }}</span></div>{% endfor %}</td>
    <td class="small"><b>{{ a.hostname or '?' }}</b><div class="xs dim">{{ a.instance_url or '' }} · v{{ a.version or '?' }}</div><div class="xs mono dim">fp {{ a.fingerprint }}</div></td>
    <td><form method="post" action="/manage/licenses/activations/{{ a.id }}/approve" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}">{% if reauth %}<input type="password" name="password" placeholder="your password" autocomplete="current-password" required style="width:150px"> {% if needs_totp %}<input type="text" name="code" placeholder="2FA code" inputmode="numeric" autocomplete="one-time-code" required style="width:90px"> {% endif %}{% endif %}<button class="btn sm primary">Approve</button></form></td>
    <td><form method="post" action="/manage/licenses/activations/{{ a.id }}/deny" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm danger">Deny</button></form></td></tr>{% endfor %}</tbody></table>{% else %}<p class="small muted" style="margin:0">Nothing pending. New requests also arrive by email.</p>{% endif %}
  <details style="margin-top:10px"><summary class="small">Air-gapped customer? Paste their activation request code</summary>
    <form method="post" action="/manage/licenses/activations/paste" style="margin-top:8px"><input type="hidden" name="csrf" value="{{ csrf }}"><div class="row"><label>Code (VGA1.…) from the customer's Licence page</label><textarea name="code" rows="3" class="mono" required></textarea></div>
    <div class="row"><label>Licence</label><select name="license_id"><option value="">(use the licence id inside the code)</option>{% for r in rows %}<option value="{{ r.license_id }}">{{ r.license_id }} · {{ r.customer }}</option>{% endfor %}</select></div><button class="btn sm">Record request</button></form></details>
</div>
<div class="grid g2" style="align-items:start">
<div class="panel"><h2>Issue a licence</h2>
  <form method="post" action="/manage/licenses"><input type="hidden" name="csrf" value="{{ csrf }}">
    <div class="grid g2"><div class="row"><label>Customer</label><input type="text" name="customer" placeholder="Acme Ltd" required></div><div class="row"><label>Email</label><input type="email" name="email" placeholder="ops@acme.com" required></div></div>
    <div class="grid g3"><div class="row"><label>Months</label><input type="number" name="months" value="12" min="1" max="60"></div><div class="row"><label>Servers</label><input type="number" name="servers" placeholder="50"></div><div class="row"><label>Monitors</label><input type="number" name="monitors" placeholder="1000"></div>
      <div class="row"><label>Seats</label><input type="number" name="team_seats" placeholder="999"></div><div class="row"><label>Status pages</label><input type="number" name="status_pages" placeholder="50"></div><div class="row"><label>Private locations</label><input type="number" name="private_locations" placeholder="10"></div></div>
    <div class="row"><label>Notes</label><input type="text" name="notes" placeholder="PO 4711 · annual · paid by bank transfer"></div>
    <label class="check"><input type="checkbox" name="send" value="1" checked> Email the key and install command to the customer</label>
    <button class="btn primary" style="margin-top:10px">Issue licence</button></form>
  <p class="small muted" style="margin-top:12px">List price: ${{ price }}/month per instance (Enterprise limits). Annual deals: price × 10.</p>
  <details style="margin-top:8px"><summary class="small">Signing public key (verify bundles with openssl)</summary><pre class="code" style="white-space:pre-wrap;word-break:break-all">{{ pubkey }}</pre></details></div>
<div class="panel tight tbl"><table><thead><tr><th>Licence</th><th>Customer</th><th>Expires</th><th>Last seen</th><th></th></tr></thead><tbody>
{% for r in rows %}<tr><td class="mono small">{{ r.license_id }}{% if r.paddle_subscription_id %} <span class="pill ok">paddle</span>{% endif %}{% if r.revoked %} <span class="pill err">revoked</span>{% endif %}</td><td>{{ r.customer }}<div class="xs dim">{{ r.email }}{% if r.notes %} · {{ r.notes }}{% endif %}</div></td><td class="small">{{ r.expires|dt }}</td><td class="small">{{ r.last_seen_at|timeago }}{% if r.last_instance %}<div class="xs dim">{{ r.last_instance[:40] }}</div>{% endif %}{% if r.last_stats %}<div class="xs dim">{{ r.last_stats.get('servers', '?') }} servers · {{ r.last_stats.get('monitors', '?') }} monitors</div>{% endif %}</td>
  <td style="white-space:nowrap"><details style="display:inline"><summary class="btn sm" style="display:inline-block">Key</summary><div class="xs dim">Claim key (installs register with it; read-only until approved)</div><pre class="code" style="max-width:360px;white-space:pre-wrap;word-break:break-all">{{ r.key }}</pre>
    {% for a in acts.get(r.license_id, []) %}<div class="small" style="margin-top:6px"><span class="pill {% if a.status == 'approved' %}ok{% elif a.status == 'pending' %}warn{% else %}err{% endif %}">{{ a.status }}</span> {{ a.hostname or '?' }} <span class="xs dim mono">{{ a.fingerprint[:12] }}</span> <span class="xs dim">seen {{ a.last_seen_at|timeago }}</span>
      {% if a.status == 'approved' %}<details><summary class="xs">bound key (air-gapped: send this to the customer)</summary><pre class="code" style="max-width:360px;white-space:pre-wrap;word-break:break-all">{{ a.bound_key }}</pre></details><form method="post" action="/manage/licenses/activations/{{ a.id }}/revoke" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm danger">Revoke installation</button></form>{% endif %}</div>{% endfor %}</details> <form method="post" action="/manage/licenses/{{ r.license_id }}/revoke" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm {% if not r.revoked %}danger{% endif %}">{{ 'Restore' if r.revoked else 'Revoke' }}</button></form></td></tr>{% else %}<tr><td colspan="5" class="muted small" style="padding:20px">No licences issued yet.</td></tr>{% endfor %}
</tbody></table></div>
</div>
{% endblock %}