{% extends "brickwork/shell/auth.html" %}
{% load i18n %}
{% comment %}
Auth: password reset (page-templates kit, v1.1.0, BR-BW-PAGE-003). One of
THREE discoverability-split auth pages (auth_signin.html, auth_signup.html,
auth_reset.html): identical block shape, separate files by owner ruling so
each is found by name rather than guessed at inside one shared template. A
consuming page EXTENDS this template, never includes it; the pattern itself
extends shell/auth.html, so brand_logo/brand_wordmark/footer stay available
on the extending page (do not redeclare them here).

BACKEND-AGNOSTIC CONTRACT (BR-BW-PAGE-003): brickwork ships no view, no
form, no model, and no URL for authentication (allauth and
django.contrib.auth shape the reset flow differently, and a reset request
page and a set-new-password page are two different forms sharing this one
template shape). This template therefore:
  - never emits a <form> element itself (the consumer's own <form
    method="post" action="{% url ... %}"> wraps auth_body's content, since
    only the consumer knows its own URL name, which also differs between
    the "request a reset" step and the "set a new password" step),
  - never references {% url %} for a submit target (a hard-coded name that
    does not exist in the consuming project would 500 on render),
  - never names a form field (an email-only request form and a
    new-password-plus-confirmation form have entirely different fields;
    a hard-coded field name or label here would break whichever step is
    not in use), and
  - never assumes which reset step is current: the consumer's own view
    decides that and supplies the matching form.

Blocks (semver-public, BR-BW-TPL-001):
  auth_heading    default: the page title, translated, in a heading element.
                  Override to replace the copy or heading level (e.g. for
                  the "set a new password" step of the flow).
  auth_body       default: empty. The consumer's own <form> wrapping
                  {% bw_form form %} and the submit button:

                    {% block auth_body %}
                    <form method="post" action="{% url 'account_reset_password' %}">
                      {% csrf_token %}
                      {% load brickwork_forms brickwork_components %}
                      {% bw_form form %}
                      {% bw_button label="Reset password" type="submit" variant="primary" %}
                    </form>
                    {% endblock %}

                  form is the consumer's own form instance; brickwork never
                  inspects or names its fields.
  auth_secondary  default: empty. Secondary links (e.g. Back to sign in).

Composes: {% bw_form %}, {% bw_button %}, _alert.html (e.g. for a
"check your email" confirmation or a non-field error),
forms/_form_errors.html (auto-included by {% bw_form %}). No-JS floor: an
ordinary <form method="post"> submit and the 422 re-render loop
(BR-BW-HTMX-003), same as form_page.html.

Required context: none from this template itself. Optional: form (the
consumer's bound/unbound form instance, used inside auth_body).
{% endcomment %}

{% block content %}
<div class="bw-section-stack">
  {% block auth_heading %}<h1>{% translate "Reset your password" %}</h1>{% endblock %}
  {% block auth_body %}{% endblock %}
  {% block auth_secondary %}{% endblock %}
</div>
{% endblock %}