{% extends "auth_base.html" %}
{% block title %}Pramagent - Create account{% endblock %}
{% block card %}
<div>
  <div class="eyebrow">Dashboard access</div>
  <h1>Create account</h1>
  <p style="margin-top:8px;">Enter an email or phone. Pramagent generates the dashboard key; users do not choose passwords.</p>
</div>

{% if error %}
<div class="callout bad"><p>{{ error }}</p></div>
{% endif %}

<form method="post" action="/signup" autocomplete="on" class="form-grid">
  <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
  <div class="field">
    <label for="email">Email</label>
    <input id="email" name="email" type="email" autocomplete="email" placeholder="you@example.com">
  </div>
  <div class="field">
    <label for="phone">Phone</label>
    <input id="phone" name="phone" type="tel" autocomplete="tel" placeholder="+15551234567">
  </div>
  <button class="button primary" type="submit">Generate dashboard key</button>
</form>

<div class="callout warn">
  <span class="badge warn">Tenant scoped</span>
  <p>New accounts are scoped to tenant <code>{{ tenant }}</code>. Disable public signup in production unless this dashboard is behind a trusted boundary.</p>
</div>

<div class="helper-row">
  <a href="/login">Back to sign in</a>
</div>
{% endblock %}