{# Write controls for the notes on a commit. Expects `notes`, `can_write_notes`,
   `notes_merged`, `detail.oid`, and the csrf token. Deliberately separate from
   git_notes_panel.html, which is shared with the file view and stays read-only:
   P2 writes notes on commits, and a form that appeared beside a blob note would
   be offering something the routes do not accept. #}
{% if can_write_notes %}
{% if let Some(token) = csrf_token %}
<div class="git-notes-edit">
    {% if notes_merged %}
    <p class="git-note-merged">
        Somebody edited this note while you were writing. Both versions were kept,
        so what is below is not exactly what you typed.
    </p>
    {% endif %}

    {# A note in a namespace the write routes refuse gets no form. makenot.work
       writes refs/notes/mnw/*, and offering an edit box that saves to a 422 is
       worse than offering nothing. #}
    {% for note in notes %}
    {% if !note.read_only %}
    <form class="git-note-form" method="post" action="/git/{{ owner }}/{{ repo_name }}/commit/{{ detail.oid }}/notes">
        <input type="hidden" name="_csrf" value="{{ token }}">
        <input type="hidden" name="namespace" value="{{ note.namespace }}">
        <div class="form-group">
            <label for="note-{{ loop.index }}">Edit the note in {{ note.namespace }}</label>
            <textarea id="note-{{ loop.index }}" name="content" rows="6" maxlength="50000">{{ note.source }}</textarea>
        </div>
        <button type="submit">Save note</button>
    </form>
    <form class="git-note-delete" method="post" action="/git/{{ owner }}/{{ repo_name }}/commit/{{ detail.oid }}/notes/delete">
        <input type="hidden" name="_csrf" value="{{ token }}">
        <input type="hidden" name="namespace" value="{{ note.namespace }}">
        <button type="submit">Remove the note in {{ note.namespace }}</button>
    </form>
    {% endif %}
    {% endfor %}

    <form class="git-note-form" method="post" action="/git/{{ owner }}/{{ repo_name }}/commit/{{ detail.oid }}/notes">
        <input type="hidden" name="_csrf" value="{{ token }}">
        <div class="form-group">
            <label for="note-new-namespace">Namespace</label>
            {# `commits` is what `git notes` writes with no namespace given, so a
               reader running stock git finds a note left at the default. #}
            <input id="note-new-namespace" name="namespace" value="commits" maxlength="64" required>
        </div>
        <div class="form-group">
            <label for="note-new">Add a note</label>
            <textarea id="note-new" name="content" rows="6" maxlength="50000" placeholder="Markdown. Stored in the repository under refs/notes, and it travels with a clone that fetches them."></textarea>
        </div>
        <button type="submit">Add note</button>
    </form>
</div>
{% endif %}
{% endif %}