{{define "content"}}
<header rst-page-header>
<div rst-page-header-titles>
<h1>Share</h1>
<p rst-page-header-sub>Who can open this sheet, and what they can do with it.</p>
</div>
<a rst-btn="ghost" href="/sheets/{{.Data.Sheet.ID}}">Back to sheet</a>
</header>

{{/* A fixed sentence chosen by code, in its tone (shared chrome spec §4);
     role="alert" only for a submit that did not work. */}}
{{with .Data.Notice}}{{template "callout" (dict "Body" . "Tone" $.Data.NoticeTone "Alert" (eq $.Data.NoticeTone "negative"))}}{{end}}

<form rst-form method="post" action="/sheets/{{.Data.Sheet.ID}}/share">
<div rst-field-row>
<div rst-field>
<label rst-field-label for="address">Share with</label>
<input rst-input id="address" name="address" type="email" autocomplete="off"
       placeholder="name@example.com" required>
</div>
<div rst-field>
<label rst-field-label for="role">Can</label>
<select rst-input id="role" name="role">
{{range .Data.Roles}}<option value="{{.}}">{{.}}</option>{{end}}
</select>
</div>
<button rst-btn="primary" type="submit">Share</button>
</div>
</form>

{{/* Spec §9.5, ruled: a guest grant puts a row in that person's
     directory carrying the granting team's name. The behaviour is kept
     and the obligation is to disclose it in words, here, rather than
     leave it an emergent property nobody decided. */}}
{{template "callout" (dict "Body" "Sharing with somebody outside your team lets them see your team’s name, because this sheet then appears in their list alongside their own. They see nothing else about the team, and only the sheets you share." "Tone" "info")}}

{{with .Data.NewLink}}
{{/* A warning, the tone rastrillo defines: rst-callout="warn" matched
     no rule, so this rendered as an ordinary grey note. */}}
<div rst-callout rst-tone="warning">
<span rst-callout-ic aria-hidden="true">{{icon "alert-triangle"}}</span>
<div rst-callout-body>
<p><strong>Your link.</strong> Copy it now: only its fingerprint is
stored, so this page cannot show it to you again.</p>
<p><code>{{.}}</code></p>
</div>
</div>
{{end}}

<h2>Link sharing</h2>
{{/* rst-field-help, not rst-help: rst-help is a 28x28 icon badge and
     swallows prose. See signin.html and the guard test in
     internal/guardstest/markup_test.go. */}}
<p rst-field-help>Off unless you make one. Anybody holding the link can
read this sheet without an account — so it is exactly as private as the
people you send it to. A link can never edit.</p>

<form rst-form method="post" action="/sheets/{{.Data.Sheet.ID}}/share/link">
<div rst-field-row>
<div rst-field>
<label rst-field-label for="link-role">A link that can</label>
<select rst-input id="link-role" name="role">
{{range .Data.LinkRoles}}<option value="{{.}}">{{.}}</option>{{end}}
</select>
</div>
<button rst-btn="primary" type="submit">Create a link</button>
</div>
</form>

{{if .Data.Links}}
<ul rst-list data-share-list>
{{$sheet := .Data.Sheet}}
{{range .Data.Links}}
<li rst-lrow>
<div rst-row-main>
<span>A {{.Role}} link</span>
<span rst-row-sub>Made {{.Created.Format "2 Jan 2006, 15:04"}}</span>
</div>
<form method="post" action="/sheets/{{$sheet.ID}}/share/link/revoke">
<input type="hidden" name="link" value="{{.ID}}">
<button rst-btn="ghost" class="rst-danger" type="submit">Turn off</button>
</form>
</li>
{{end}}
</ul>
{{end}}

<h2>Who has access</h2>
{{if .Data.People}}
<ul rst-list data-share-list>
{{$sheet := .Data.Sheet}}
{{range .Data.People}}
<li rst-lrow>
<div rst-row-main>
<span>{{.Member.Address}}</span>
<span rst-row-sub>{{.Role}}{{if eq .Member.TeamRole "guest"}} · guest{{end}}</span>
</div>
<form method="post" action="/sheets/{{$sheet.ID}}/share/revoke">
<input type="hidden" name="member" value="{{.Member.ID}}">
<button rst-btn="ghost" class="rst-danger" type="submit">Remove</button>
</form>
</li>
{{end}}
</ul>
{{else}}
<div rst-empty>
<p rst-empty-title>Nobody yet</p>
<p rst-empty-body>Only you can open this sheet.</p>
</div>
{{end}}
{{end}}