{% extends "tenant/layouts/base.html" %}
{% block title %}Reset Passcode — {{ staff.name }}{% endblock %}
{% block content %}
<div class="row justify-content-center">
  <div class="col-md-4">
    <div class="card shadow-sm border-warning">
      <div class="card-header bg-warning-subtle fw-semibold">Reset Passcode — {{ staff.name }}</div>
      <div class="card-body">
        <p class="text-muted small">Enter a new 4–6 digit PIN for this staff member. Show it to them once, then discard it.</p>
        {% if error %}<div class="alert alert-danger py-2">{{ error }}</div>{% endif %}
        <form method="POST" novalidate>
          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
          <div class="mb-3">
            <label class="form-label">New Passcode</label>
            <input type="text" class="form-control form-control-lg text-center font-monospace"
                   name="passcode" inputmode="numeric" maxlength="6"
                   placeholder="••••" autofocus required>
          </div>
          <div class="d-flex gap-2">
            <button type="submit" class="btn btn-warning">Set New Passcode</button>
            <a href="{{ url_for('staff.index') }}" class="btn btn-outline-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>
{% endblock %}