{{- /* SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Commercial */ -}}
{{- /* SPDX-FileCopyrightText: 2025-2026 Christian Galo */ -}}

<!-- Operator Domains surface (claim-lifecycle-hardening D7): every live claim
     in the deployment, pending first, with the one moderation write an
     operator has. Force-release goes through the shared confirm-action modal
     and swaps this partial back into #operator-body. Built from the
     page-anatomy parts (docs/design-system.md §6): the header, section
     headers, badges, and empty states come from ui_*.html; their values
     from OperatorDomainsData's methods. -->
{{ if .Error }}
<div class="alert alert-danger" role="alert">
    <strong>Error:</strong> {{ .Error }}
</div>
{{ end }}

{{ template "pageHeader" .Header }}

<!-- Effective claim policy. These are core flags with no settings page, so
     this section is the only place a deployment's numbers are visible. What
     is printed is what the registry allocates under: unset keys have
     already resolved to their defaults. Absent only when there is no
     registry to ask, which the banner above has already said.

     An ordinary section, not a disclosure (task 10, round 2): the section
     is titled outside the box its content sits in (the heading rule from
     ux-operator-scale).

     Name policy vs abuse policy (docs/models/domains-registry.md dimension
     "Name policy vs abuse policy"): the two subsystems share no scope, and
     this page's numbers are entirely the second one, so the section says
     so before printing them. Name policy itself is seed-and-SQL only with
     no settings page. -->
{{ if .Policy.ClaimWindow }}
{{ template "sectionHeader" .PolicyHeader }}
<div class="card mb-4">
    <div class="card-body">
        <p class="text-muted small mb-3">
            Name policy governs carving inside operator roots only: reserved, blocked, and premium
            labels are seed data with no settings page. External claims are governed separately, by
            verification and the abuse apparatus these numbers describe.
        </p>
        <div class="row row-cols-1 row-cols-md-3 g-2 small mb-2">
            <div class="col"><span class="text-muted">Verification window</span><br><code>{{ .Policy.ClaimWindow }}</code></div>
            <div class="col"><span class="text-muted">Pending claims per organization</span><br><code>{{ .Policy.PendingCap }}</code></div>
            <div class="col"><span class="text-muted">New claims per organization per day</span><br><code>{{ .Policy.InitiationBudget }}</code></div>
            <div class="col"><span class="text-muted">Abandonment scope budget</span><br><code>{{ .Policy.AbandonBudget }}</code></div>
            <div class="col"><span class="text-muted">Abandonment window</span><br><code>{{ .Policy.AbandonWindow }}</code></div>
            <div class="col"><span class="text-muted">Abandonment scope width (labels)</span><br><code>{{ .Policy.ScopeLabels }}</code></div>
        </div>
        <!-- The width asymmetry (invariant 10): counting is wide, clearing is
             narrow. Stated inline every place an abandonment scope tally
             appears, since reading the two widths as symmetric is "the
             single most damaging misreading in this model". -->
        <p class="text-muted small mb-0">
            Abandonments count against the whole scope root and everything beneath it.
            Verifying a name clears only that name's own subtree.
        </p>
    </div>
</div>
{{ end }}

<!-- The live-claims table is the governed list on this page
     (operator-list-scale, design D4): search over the claimed name and the
     holder's name, the status facet over the live vocabulary, and
     true-total pagination, all from operator_list_controls.html driven by
     .Nav. The header count above is that same true total. Placements and
     history below are unpaged and carry no controls. -->
{{ if eq (len .Claims) 0 }}
    {{ if .Nav.Filtered }}
    {{ template "listControls" .Nav }}
    {{ template "listNoMatch" .Nav }}
    {{ else }}
    {{ template "emptyState" .NoClaims }}
    {{ end }}
{{ else }}
{{ template "listControls" .Nav }}
<div class="table-responsive">
    <table class="table table-hover table-sm align-middle table-record">
        <thead>
            <tr>
                <th>Domain</th>
                <th>Kind</th>
                <th>Status</th>
                <th>Organization</th>
                <th>Age</th>
                <th>Placements</th>
                <th class="text-end"><span class="visually-hidden">Actions</span></th>
            </tr>
        </thead>
        <tbody>
            {{ range .Claims }}
            <tr>
                <th scope="row" class="text-nowrap"><code>{{ .Root }}</code></th>
                <td>{{ template "statusBadge" .KindBadge }}</td>
                <td>{{ template "statusBadge" .StatusBadge }}</td>
                <td><a href="{{ routeURL "/operator/organizations/{orgID}" .OrgID }}">{{ .OrgName }}</a></td>
                <td class="text-nowrap">{{ .Age }}</td>
                <td>{{ .Placements }}</td>
                <td class="text-end">
                    {{ if .Releasable }}
                    <button type="button" class="btn btn-outline-danger btn-sm ms-1"
                            data-bs-toggle="modal"
                            data-bs-target="#confirmActionModal"
                            data-action-url="{{ routeURL "/partials/operator/domains/{claimID}/force-release" .ClaimID }}"
                            data-action-method="post"
                            data-action-target="#operator-body"
                            data-action-title="Force-release domain"
                            data-action-body="Force-release {{ .Root }}, held by {{ .OrgName }}? The name becomes claimable by anyone immediately, any verification stops, and a pending claim is recorded as abandoned against its holder."
                            data-action-confirm-label="Force-release">
                        Force-release
                    </button>
                    {{ end }}
                    {{/* A placed claim gets no button: the registry's
                         placement guard would refuse the release (a name in
                         use is freed by removing its sites, not from here),
                         and a control the server always refuses is a
                         dead-end affordance. It gets no text either: the
                         Placements column already carries the count that
                         says why (chrome-conventions "A verb-less row leaves
                         its Actions cell empty"; the "in use" note left
                         2026-09-19). The operator-root row (neither
                         releasable nor placed via a member claim) likewise
                         gets no filler text (maintainer, sheet pass:
                         "Domains: same ['operator root']" as Grants' empty
                         Actions cells): the Kind column already carries that
                         fact. */}}
                </td>
            </tr>
            {{ end }}
        </tbody>
    </table>
</div>
{{ template "listPager" .Nav }}
{{ end }}

<!-- Placements: the exact names actually being served, and only the exact
     names actually being served. A claim with no placements serves zero
     names, so this list is deliberately separate from the claims table
     above it (docs/models/domains-registry.md, "Claim vs placement"): an
     operator asking "what is live right now" wants this table, not that
     one. -->
{{ template "sectionHeader" .PlacementsHeader }}
{{ if eq (len .Placements) 0 }}
{{ template "emptyState" .NoPlacements }}
{{ else }}
<div class="table-responsive">
    <table class="table table-hover table-sm align-middle table-record">
        <thead>
            <tr>
                <th>Name</th>
                <th>Provider</th>
                <th>Resource</th>
                <th>State</th>
            </tr>
        </thead>
        <tbody>
            {{ range .Placements }}
            <tr>
                <th scope="row" class="text-nowrap"><code class="text-break">{{ .Name }}</code></th>
                <td class="text-nowrap"><code class="small">{{ .Provider }}</code></td>
                <td class="text-nowrap"><code class="text-break">{{ .ResourceRef }}</code></td>
                <td>{{ template "statusBadge" .StateBadge }}</td>
            </tr>
            {{ end }}
        </tbody>
    </table>
</div>
{{ end }}

<!-- Claims ledger history: expired, canceled, and released claims. An
     ordinary section, not a disclosure (task 10, round 2), below the live
     claims table.

     Blame is never read from Status here: "canceled" says nothing about
     fault (docs/models/domains-registry.md, "Status vs blame"). Evidence and
     Outcome are read from the ledger columns instead: Evidence reports
     whether evidence_at was ever stamped; Outcome names which of
     abandoned_at / system_canceled_at / evidence_at applies, for external
     claims only. -->
{{ template "sectionHeader" .HistoryHeader }}
{{ if eq (len .TerminalClaims) 0 }}
{{ template "emptyState" .NoHistory }}
{{ else }}
<div class="table-responsive">
    <table class="table table-hover table-sm table-record align-middle">
        <thead>
            <tr>
                <th>Domain</th>
                <th>Kind</th>
                <th>Status</th>
                <th>Organization</th>
                <th>Age</th>
                <th>Evidence</th>
                <th>Outcome</th>
            </tr>
        </thead>
        <tbody>
            {{ range .TerminalClaims }}
            <tr>
                <th scope="row"><code class="text-break">{{ .Root }}</code></th>
                <td>{{ template "statusBadge" .KindBadge }}</td>
                <td>{{ template "statusBadge" .StatusBadge }}</td>
                <td><a href="{{ routeURL "/operator/organizations/{orgID}" .OrgID }}">{{ .OrgName }}</a></td>
                <td class="text-nowrap">{{ .Age }}</td>
                <td>
                    {{ if .Evidence }}{{ template "statusBadge" .EvidenceBadge }}
                    {{ else }}<span class="text-muted">—</span>{{ end }}
                </td>
                <td>
                    {{ if .Outcome }}{{ .Outcome }}
                    {{ else }}<span class="text-muted">—</span>{{ end }}
                </td>
            </tr>
            {{ end }}
        </tbody>
    </table>
</div>
{{ end }}