{# _auth_main_reset_password.html — reset-password form column.
   Renders <main class="wf-auth-form"> standalone for HTMX fragment responses.

   Expected context:
     csrf_token, token, invalid_token, success, error, app_name, is_production
#}
{% import "_partials/_auth_macros.html" as auth %}
<main class="wf-auth-form">
  <div class="wf-auth-top">
    {{ auth.kicker(app_name, "Reset password") }}
  </div>

  <div class="wf-auth-wrap">
    <h1>Set new password</h1>
    <p class="wf-auth-sub">Choose a new password for your account.</p>

    {% if invalid_token %}
      {% set flash = { "kind": "err", "message": "This password reset link is invalid or has expired." } %}
      <div class="wf-mt-4">
        {% include "_partials/_flash.html" %}
      </div>
      <p class="wf-caption wf-mt-4">
        <a href="/forgot-password">Request a new reset link</a>
      </p>
    {% elif success %}
      {% set flash = { "kind": "ok", "message": "Your password has been reset. You can now log in with your new password." } %}
      <div class="wf-mt-5">
        {% include "_partials/_flash.html" %}
      </div>
      <p class="wf-caption wf-mt-4">
        <a href="/login">Log in</a>
      </p>
    {% else %}
      {% if error %}
        {% set flash = { "kind": "err", "message": error } %}
        <div class="wf-mt-4">
          {% include "_partials/_flash.html" %}
        </div>
      {% endif %}

      <form method="post" action="/auth/reset-password" class="wf-f wf-col wf-gap-5 wf-mt-5">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <input type="hidden" name="token" value="{{ token }}">

        <div class="wf-field">
          <label class="wf-label" for="new_password">New password</label>
          <input class="wf-input" id="new_password" name="new_password"
                 type="password" required autocomplete="new-password">
        </div>

        <div class="wf-field">
          <label class="wf-label" for="confirm_password">Confirm new password</label>
          <input class="wf-input" id="confirm_password" name="confirm_password"
                 type="password" required autocomplete="new-password">
        </div>

        <button type="submit" class="wf-btn primary lg wf-w-full">Reset password →</button>
      </form>
    {% endif %}
  </div>
</main>