{# _auth_main_login.html — login form column.
   Renders <main class="wf-auth-form"> standalone for HTMX fragment responses.

   Expected context:
     csrf_token, identifier, error, next, client_id, app_name,
     oauth_providers, is_production
#}
{% import "_partials/_auth_macros.html" as auth %}
{%- if signup_url -%}
  {%- set register_href = signup_url -%}
{%- elif client_id -%}
  {%- set register_href = "/register?client_id=" ~ client_id -%}
{%- else -%}
  {%- set register_href = "/register" -%}
{%- endif -%}
<main class="wf-auth-form">
  <div class="wf-auth-top">
    {{ auth.kicker(app_name, "Sign in",
                   swap_href=register_href,
                   swap_label="Create account",
                   swap_prefix="New here?") }}
  </div>

  <div class="wf-auth-wrap">
    <h1>Sign in</h1>
    <p class="wf-auth-sub">Welcome back.</p>

    <div class="wf-mt-5">
      {{ auth.tabs(active="signin", signup_href=register_href) }}
    </div>

    {% if error %}
      {% set flash = { "kind": "err", "message": error } %}
      <div class="wf-mt-4">
        {% include "_partials/_flash.html" %}
      </div>
    {% endif %}

    <form method="post" action="/login" class="wf-f wf-col wf-gap-5 wf-mt-5">
      <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
      {% if next %}<input type="hidden" name="next" value="{{ next }}">{% endif %}
      {% if client_id %}<input type="hidden" name="client_id" value="{{ client_id }}">{% endif %}

      <div class="wf-field">
        <label class="wf-label" for="identifier">Email or username</label>
        <input class="wf-input" id="identifier" name="identifier"
               type="text" value="{{ identifier }}"
               autocomplete="username" required>
      </div>

      <div class="wf-field">
        <div class="wf-f wf-jc-sb wf-ai-b">
          <label class="wf-label" for="password">Password</label>
          <a href="/forgot-password" hx-boost="true"
             class="wf-fg-muted wf-caption"
             style="text-decoration: none">Forgot?</a>
        </div>
        <input class="wf-input" id="password" name="password"
               type="password" autocomplete="current-password" required>
      </div>

      <button type="submit" class="wf-btn primary lg wf-w-full">Sign in →</button>
    </form>

    {{ auth.oauth_grid(oauth_providers, next=next) }}

    {{ auth.terms_footer(terms_url=terms_url, privacy_url=privacy_url) }}
  </div>
</main>