{% extends 'pages/auth/_standalone.html' %}

{# auth/create-password-basic — faithful port of src/html/auth/create-password-basic.html
   Standalone off-app page (no sidebar/header). Same DOM/classes/ARIA,
   same demo copy, same Alpine helpers. Reference hrefs converted to
   clean Django routes (# -> /x/, index -> /). #}


{% block auth_body %}
  <style>
    @keyframes ax-spin-local { to { transform: rotate(360deg); } }
    .ax-spin { animation: ax-spin-local 0.7s var(--ax-ease-linear) infinite; }
    @media (prefers-reduced-motion: reduce) { .ax-spin { animation: none; } .ax-strength__bar { transition: none !important; } }
    .ax-strength__bar { transition: background var(--ax-motion-fast) var(--ax-ease-standard); }
  </style>

  <div class="ax-cluster" style="position:fixed;inset-block-start:var(--ax-space-5);inset-inline-end:var(--ax-space-6);z-index:5;gap:var(--ax-space-2);">
    <button type="button" class="ax-btn ax-btn--ghost ax-btn--icon" aria-label="Toggle color theme"
            x-data @click="$store.theme && $store.theme.toggle()">
      <svg class="ax-btn__icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3c.132 0 .263 0 .393 0a7.5 7.5 0 0 0 7.92 12.446a9 9 0 1 1 -8.313 -12.454l0 .008"/></svg>
    </button>
    <button type="button" class="ax-btn ax-btn--ghost ax-btn--sm">
      <svg class="ax-btn__icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 12a9 9 0 1 0 18 0a9 9 0 1 0 -18 0"/><path d="M3.6 9h16.8"/><path d="M3.6 15h16.8"/><path d="M11.5 3a17 17 0 0 0 0 18"/><path d="M12.5 3a17 17 0 0 1 0 18"/></svg>
      <span class="ax-btn__label">EN</span>
    </button>
  </div>

  <main class="ax-center" id="ax-main" style="position:relative;z-index:1;width:100%;">
    <div style="width:100%;max-width:400px;" x-data="createPassword()">

      <!-- brand -->
      <div class="ax-center" style="margin-block-end:var(--ax-space-6);">
        <a href="/" class="ax-cluster" style="gap:var(--ax-space-3);text-decoration:none;" aria-label="Vireo home">
          <span style="display:inline-grid;place-items:center;width:40px;height:40px;border-radius:var(--ax-radius-md);background:var(--ax-gradient-accent);color:var(--ax-on-accent);box-shadow:0 8px 22px -8px rgba(var(--ax-accent-rgb),.7);">
            <svg viewBox="0 0 32 32" width="23" height="23" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><defs><linearGradient id="axmk0" x1="4" y1="4" x2="28" y2="28" gradientUnits="userSpaceOnUse"><stop stop-color="#2BC4B0"/><stop offset="0.55" stop-color="#1E9E96"/><stop offset="1" stop-color="#6D5CF0"/></linearGradient></defs><path d="M4 4 H16 A12 12 0 0 1 28 16 V28 A0 0 0 0 1 28 28 H16 A12 12 0 0 1 4 16 V4 Z" fill="url(#axmk0)" stroke="none"/><circle cx="20.5" cy="11.5" r="2.6" fill="#0A0C11" fill-opacity="0.92" stroke="none"/></svg>
          </span>
          <b style="font-family:var(--ax-font-display);font-size:var(--ax-text-lg);color:var(--ax-text-strong);">Vireo</b>
        </a>
      </div>

      <div class="ax-card">
        <div class="ax-card__body" style="padding:var(--ax-space-8);">

          <!-- ── expired-token error path (form hidden) ── -->
          <template x-if="expired">
            <div>
              <div class="ax-alert ax-alert--danger" role="alert" style="margin-block-end:var(--ax-space-5);">
                <svg class="ax-alert__icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 9v4"/><path d="M12 16h.01"/><path d="M5.07 19h13.86a2 2 0 0 0 1.73 -3l-6.93 -12a2 2 0 0 0 -3.46 0l-6.93 12a2 2 0 0 0 1.73 3"/></svg>
                <div class="ax-alert__content">
                  <p class="ax-alert__title">This reset link has expired</p>
                  <p class="ax-alert__message">For your security, reset links are valid for 60 minutes. Request a fresh one to continue.</p>
                </div>
              </div>
              <a class="ax-btn ax-btn--primary ax-btn--block" href="/auth/reset-password-basic/" style="min-height:44px;">
                <span class="ax-btn__label">Request a new link</span>
              </a>
            </div>
          </template>

          <!-- ── normal form ── -->
          <template x-if="!expired">
            <div>
              <h1 style="font-family:var(--ax-font-display);font-size:var(--ax-text-2xl);font-weight:600;color:var(--ax-text-strong);margin:0 0 var(--ax-space-2);letter-spacing:-.01em;">Set a new password</h1>
              <p style="font-size:var(--ax-text-sm);color:var(--ax-text-muted);margin:0 0 var(--ax-space-6);">Choose a strong password you don't use elsewhere. It'll apply across all your devices.</p>

              <!-- success state -->
              <div x-show="done" x-cloak x-transition class="ax-alert ax-alert--success" role="alert" style="margin-block-end:var(--ax-space-5);">
                <svg class="ax-alert__icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 12l5 5l10 -10"/></svg>
                <div class="ax-alert__content"><p class="ax-alert__message">Password updated. Redirecting you to sign in…</p></div>
              </div>

              <form class="ax-stack" @submit.prevent="submit()" novalidate x-show="!done">
                <!-- new password -->
                <div class="ax-field">
                  <label class="ax-label" for="np">New password</label>
                  <div class="ax-field__control">
                    <input id="np" class="ax-input ax-input--with-trailing" :type="reveal?'text':'password'"
                           autocomplete="new-password" placeholder="Enter a new password"
                           x-model="pw" @input="touched=true" aria-describedby="np-rules" />
                    <button type="button" class="ax-field__affix ax-field__affix--trailing ax-field__affix--button"
                            :aria-pressed="reveal" :aria-label="reveal?'Hide password':'Show password'" @click="reveal=!reveal">
                      <svg x-show="!reveal" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10 12a2 2 0 1 0 4 0a2 2 0 0 0 -4 0"/><path d="M21 12c-2.4 4 -5.4 6 -9 6c-3.6 0 -6.6 -2 -9 -6c2.4 -4 5.4 -6 9 -6c3.6 0 6.6 2 9 6"/></svg>
                      <svg x-show="reveal" x-cloak viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10.585 10.587a2 2 0 0 0 2.829 2.828"/><path d="M16.681 16.673a8.717 8.717 0 0 1 -4.681 1.327c-3.6 0 -6.6 -2 -9 -6c1.272 -2.12 2.712 -3.678 4.32 -4.674m2.86 -1.146a9.055 9.055 0 0 1 1.82 -.18c3.6 0 6.6 2 9 6c-.666 1.11 -1.379 2.067 -2.138 2.87"/><path d="M3 3l18 18"/></svg>
                    </button>
                  </div>

                  <!-- strength meter -->
                  <div class="ax-strength" x-show="pw.length>0" x-cloak style="margin-block-start:var(--ax-space-2);" aria-hidden="true">
                    <div class="ax-strength__bars">
                      <span class="ax-strength__bar" :style="score>=1 ? `background:${barColor}` : ''"></span>
                      <span class="ax-strength__bar" :style="score>=2 ? `background:${barColor}` : ''"></span>
                      <span class="ax-strength__bar" :style="score>=3 ? `background:${barColor}` : ''"></span>
                      <span class="ax-strength__bar" :style="score>=4 ? `background:${barColor}` : ''"></span>
                    </div>
                    <span class="ax-strength__label">Strength: <b :style="`color:${barColor}`" x-text="label"></b></span>
                  </div>

                  <!-- rules checklist -->
                  <ul id="np-rules" class="ax-stack" style="--ax-gap:var(--ax-space-1);margin-block-start:var(--ax-space-3);list-style:none;padding:0;" aria-live="polite">
                    <template x-for="r in rules" :key="r.id">
                      <li class="ax-cluster" style="gap:var(--ax-space-2);font-size:var(--ax-text-xs);" :style="`color:${r.ok ? 'var(--ax-success-500)' : 'var(--ax-text-muted)'}`">
                        <svg x-show="r.ok" viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 12l5 5l10 -10"/></svg>
                        <svg x-show="!r.ok" viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 6l-12 12"/><path d="M6 6l12 12"/></svg>
                        <span x-text="r.text"></span>
                      </li>
                    </template>
                  </ul>
                </div>

                <!-- confirm -->
                <div class="ax-field">
                  <label class="ax-label" for="cp">Confirm new password</label>
                  <input id="cp" class="ax-input" :type="reveal?'text':'password'" autocomplete="new-password"
                         placeholder="Re-enter your new password" x-model="confirm"
                         :aria-invalid="confirm.length>0 && !match"
                         :style="confirm.length>0 && !match ? 'border-color:var(--ax-danger-500)' : ''"
                         aria-describedby="cp-msg" />
                  <p id="cp-msg" x-show="confirm.length>0 && !match" x-cloak class="ax-field__message ax-error">Passwords don't match yet.</p>
                </div>

                <button type="submit" class="ax-btn ax-btn--primary ax-btn--block" :aria-busy="loading" :disabled="loading || !canSubmit" style="margin-block-start:var(--ax-space-2);min-height:44px;">
                  <svg x-show="loading" x-cloak class="ax-btn__icon ax-spin" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3a9 9 0 1 0 9 9"/></svg>
                  <span class="ax-btn__label" x-text="loading ? 'Saving…' : 'Set new password'"></span>
                </button>
              </form>

              <p style="margin-block-start:var(--ax-space-5);text-align:center;font-size:var(--ax-text-sm);color:var(--ax-text-muted);">
                Remembered it? <a class="ax-link" href="/auth/sign-in-basic/">Back to sign in</a>
              </p>
            </div>
          </template>
        </div>
      </div>
    </div>
  </main>

  
{% endblock %}

{% block auth_scripts %}
  <script>
    function createPassword() {
      return {
        pw:'', confirm:'', reveal:false, loading:false, done:false, touched:false,
        expired: new URLSearchParams(location.search).get('token')==='expired',
        get rules(){
          return [
            { id:'len', text:'At least 8 characters', ok:this.pw.length>=8 },
            { id:'num', text:'Contains a number', ok:/\d/.test(this.pw) },
            { id:'upper', text:'Contains an uppercase letter', ok:/[A-Z]/.test(this.pw) },
            { id:'sym', text:'Contains a symbol', ok:/[^A-Za-z0-9]/.test(this.pw) },
          ];
        },
        get score(){
          if(!this.pw) return 0;
          const met=this.rules.filter(r=>r.ok).length;
          // require min length before allowing high scores so an 8-char dictionary word never reads "Strong"
          let s=met;
          if(this.pw.length<8) s=Math.min(s,1);
          if(this.pw.length>=12 && met===4) s=4;
          return Math.min(s,4);
        },
        get label(){ return ['','Weak','Fair','Good','Strong'][this.score]; },
        get barColor(){
          return ['', 'var(--ax-danger-500)','var(--ax-warning-500)','var(--ax-info-500)','var(--ax-success-500)'][this.score] || 'var(--ax-fill-hover)';
        },
        get match(){ return this.confirm.length>0 && this.pw===this.confirm; },
        get canSubmit(){ return this.rules.every(r=>r.ok) && this.match; },
        submit(){
          if(!this.canSubmit) return;
          this.loading=true;
          setTimeout(()=>{
            this.loading=false; this.done=true;
            setTimeout(()=>{ window.location.href='/auth/sign-in-basic/'; },1400);
          },650);
        }
      };
    }
  </script>
{% endblock %}