{% extends "base.html" %}
{% block title %}Native account and security settings{% endblock %}
{% block content %}
<div id="ns-root" class="container" data-api="{{ aida_rel('api/native-settings') }}"><h1>Account and security settings</h1>
<p>These controls use this desktop's native account token, license engines, user accounts and master vault.</p>
<p id="ns-status" role="status">Loading native settings...</p>
<section><h2>Licenses</h2><label>Native key <input id="ns-key" type="password" autocomplete="off"></label>
<button id="ns-activate">Activate</button><button id="ns-reverify">Reverify all native keys</button>
<label>Saved license <select id="ns-license"></select></label><button id="ns-remove-license">Review local removal</button>
<pre id="ns-license-state"></pre></section>
<section><h2>Cloud account</h2><p id="ns-account-state"></p>
<label>Email <input id="ns-email" type="email" autocomplete="username"></label>
<label>Account password <input id="ns-account-password" type="password" autocomplete="current-password"></label>
<button id="ns-account-login">Sign in</button><button id="ns-google">Sign in with Google</button><button id="ns-account-logout">Review local sign out</button>
<p><a id="ns-handoff" href="#" target="_blank" rel="noopener noreferrer" hidden>Open actual native Google authorization</a></p>
<p>Google authorization opens in your browser. Cancel stops this desktop's polling; an external authorization already issued may remain active. Sign out removes this PC's token and does not revoke it remotely or stop existing cloud tunnels.</p></section>
<section><h2>Native web users</h2><label>User <select id="ns-user"></select></label>
<label>New username <input id="ns-username" autocomplete="off"></label><label>User password <input id="ns-user-password" type="password" autocomplete="new-password"></label>
<button id="ns-add-user">Add user</button><button id="ns-password-user">Change selected user password</button><button id="ns-remove-user">Review selected user removal</button></section>
<section><h2>Native master vault</h2><p id="ns-vault-state"></p><label>Master password <input id="ns-vault-password" type="password" autocomplete="current-password"></label>
<button id="ns-create-vault">Create</button><button id="ns-unlock-vault">Unlock</button><button id="ns-lock-vault">Lock</button><button id="ns-reset-vault">Review Reset then Create</button>
<p>The native master-password workflow is Reset then Create. Reset backs up the canonical settings and makes ciphertext encrypted with the old key unreadable after new creation. User password changes above are separate.</p></section>
<section><h2>Reset native settings</h2><label>Native section <select id="ns-section"></select></label>
<button id="ns-reset-section">Review section defaults</button><button id="ns-reset-all">Review Reset All</button>
<p>The desktop section control resets a draft until Apply. Confirmation here saves the reviewed native defaults. Reset All preserves the native user/security/connection keys and creates a checked backup.</p></section>
<section id="ns-review-panel" hidden><h2>Review this exact change</h2><pre id="ns-review"></pre><button id="ns-confirm">Confirm reviewed change</button><button id="ns-dismiss">Dismiss</button></section>
<p><button id="ns-cancel" disabled>Cancel current account/license operation</button><button id="ns-refresh">Refresh native status</button></p>
<pre id="ns-result" aria-live="polite"></pre></div>
{% endblock %}
{% block scripts %}<script src="{{ aida_rel('static/js/native_settings.js') }}"></script>{% endblock %}