{% extends "auth_base.html" %}
{% block title %}Pramagent - Sign in{% endblock %}
{% block card %}
<div>
  <div class="eyebrow">Pramagent Console</div>
  <h1>Sign in</h1>
  <p style="margin-top:8px;">Use the email, phone, or admin username tied to your tenant and the generated dashboard key.</p>
</div>

{% if error %}
<div class="callout bad"><p>{{ error }}</p></div>
{% endif %}

<form method="post" action="/login" autocomplete="on" class="form-grid">
  <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
  <div class="field">
    <label for="username">Email, phone, or admin username</label>
    <input id="username" name="username" type="text" autocomplete="username" required>
  </div>
  <div class="field">
    <label for="password">Dashboard key</label>
    <input id="password" name="password" type="password" autocomplete="current-password" required>
  </div>
  <button class="button primary" type="submit">Sign in</button>
</form>

{% if signup_enabled or password_reset_enabled %}
<div class="helper-row">
  {% if signup_enabled %}<a href="/signup">Create account</a>{% endif %}
  {% if password_reset_enabled %}<a href="/forgot-password">Regenerate key</a>{% endif %}
</div>
{% endif %}

<div class="callout ok">
  <p>No browser cache after sign out. Back button returns to login, not protected pages.</p>
</div>
{% endblock %}