{% extends "base.html" %}
{% block title %}Oikos — approvals{% endblock %}
{% block content %}
<h1>Pending approvals</h1>
<p class="muted">Mirrors what would be posted to Matrix. Approving/denying here calls the same
oikos/approve.py engine — actually executing the gated action still goes through the
<span class="mono">homelab</span> CLI with the resulting grant.</p>

{% if approvals %}
{% for a in approvals %}
<div class="card">
  <p><span class="pill">{{ a.id }}</span> <span class="pill">{{ a.risk }}</span></p>
  <p><b>{{ a.entity }}</b> — {{ a.action }}</p>
  <p class="muted">{{ a.evidence }}</p>
  {% if a.verification %}<p class="muted mono">verify: {{ a.verification }}</p>{% endif %}
  <form method="post" action="/approvals/{{ a.id }}/reply">
    <input type="hidden" name="decision" value="approve">
    {% if a.requires_phrase %}
      <input type="text" name="phrase" placeholder="type: {{ a.confirmation_phrase }}" size="30">
    {% endif %}
    <button type="submit">approve</button>
  </form>
  <form class="inline" method="post" action="/approvals/{{ a.id }}/reply">
    <input type="hidden" name="decision" value="deny">
    <button class="deny" type="submit">deny</button>
  </form>
</div>
{% endfor %}
{% else %}
<div class="empty">No pending approvals.</div>
{% endif %}
{% endblock %}