{% extends "base.html" %}
{% block title %}New Key — Tourniquet{% endblock %}
{% block content %}
<div class="form-page">
  <h1>Add API key</h1>

  <div class="trust-inline">
    <strong>🔒 Your sk-ant- key is encrypted on disk (AES-256) before it touches the database.</strong>
    The plaintext lives only in process memory while a request is being forwarded, then it's wiped.
    It is <strong>never</strong> sent anywhere except <code>api.anthropic.com</code>, exactly as if you'd called Anthropic directly.
    <a href="/trust">Read the full trust story →</a>
  </div>

  <form action="/dashboard/keys/new" method="post" class="key-form">

    <label>Name
      <input type="text" name="name" required placeholder="e.g. ojw-swarm" maxlength="100">
    </label>

    <label>Anthropic API key
      <input type="password" name="anthropic_key" required placeholder="sk-ant-...">
    </label>

    <label>Daily cap ({{ currency }})
      <input type="number" name="daily_cap" value="5.00" min="0.01" step="0.01" required>
    </label>

    <label>Profile
      <select name="profile">
        {% for p in profiles %}
          <option value="{{ p }}">{{ p }}</option>
        {% endfor %}
      </select>
    </label>

    <label class="checkbox-label">
      <input type="checkbox" name="kill_enabled" value="true" checked>
      Enable kill switch
    </label>

    <div class="form-actions">
      <a href="/dashboard" class="btn-small">Cancel</a>
      <button type="submit" class="btn-primary">Create key</button>
    </div>
  </form>
</div>
{% endblock %}