{% extends "auth_base.html" %}
{% block title %}Pramagent - Regenerate key{% endblock %}
{% block card %}
<div>
  <div class="eyebrow">Key recovery</div>
  <h1>Regenerate dashboard key</h1>
  <p style="margin-top:8px;">Verify the account by email or phone, then issue a fresh generated key.</p>
</div>

{% if error %}
<div class="callout bad"><p>{{ error }}</p></div>
{% endif %}
{% if message %}
<div class="callout ok"><p>{{ message }}</p></div>
{% endif %}

<form method="post" action="/forgot-password" autocomplete="on" class="form-grid">
  <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
  <div class="field">
    <label for="identity">Email or phone</label>
    <input id="identity" name="identity" type="text" autocomplete="username" required>
  </div>
  <button class="button primary" type="submit">Verify and regenerate key</button>
</form>

{% if reset_token %}
<form method="get" action="/reset-password" class="form-grid">
  <input type="hidden" name="token" value="{{ reset_token }}">
  <button class="button" type="submit">Open development reset page</button>
</form>
{% endif %}

<div class="callout warn">
  <p>Production deployments should deliver verification links through a verified email/SMS provider. Tokens are stored hashed and expire automatically.</p>
</div>

<div class="helper-row">
  <a href="/login">Back to sign in</a>
</div>
{% endblock %}