05/07 Phase 3: initial codes

app/templates/tenant/staff/reset_passcode.html

@@ -0,0 +1,28 @@
+{% extends "tenant/layouts/base.html" %}
+{% block title %}Reset Passcode — {{ staff.name }}{% endblock %}
+{% block content %}
+<div class="row justify-content-center">
+  <div class="col-md-4">
+    <div class="card shadow-sm border-warning">
+      <div class="card-header bg-warning-subtle fw-semibold">Reset Passcode — {{ staff.name }}</div>
+      <div class="card-body">
+        <p class="text-muted small">Enter a new 4–6 digit PIN for this staff member. Show it to them once, then discard it.</p>
+        {% if error %}<div class="alert alert-danger py-2">{{ error }}</div>{% endif %}
+        <form method="POST" novalidate>
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+          <div class="mb-3">
+            <label class="form-label">New Passcode</label>
+            <input type="text" class="form-control form-control-lg text-center font-monospace"
+                   name="passcode" inputmode="numeric" maxlength="6"
+                   placeholder="••••" autofocus required>
+          </div>
+          <div class="d-flex gap-2">
+            <button type="submit" class="btn btn-warning">Set New Passcode</button>
+            <a href="{{ url_for('staff.index') }}" class="btn btn-outline-secondary">Cancel</a>
+          </div>
+        </form>
+      </div>
+    </div>
+  </div>
+</div>
+{% endblock %}