{% extends "base.html" %}
{% from "macros.html" import help_bubble, render_next_steps %}
{% block title %}Sign in — Target Revenue Control Plane{% endblock %}
{% block content %}
<wn-page-header>
  <span slot="title">
    Sign in
    {{ help_bubble(
      "This UI is multi-user: you authenticate with a personal credential token "
      "issued under the binky Licensor tenant, not a shared password."
    ) }}
  </span>
</wn-page-header>

{% set login_steps = [
  {
    "key": "get_token",
    "title": "1. Obtain your credential token",
    "body": "Admins issue tokens in Credentials. The founding pilot token is stored in OpenBao at platform/operators/founding-admin/revenue (field token).",
    "priority": "recommended",
  },
  {
    "key": "paste",
    "title": "2. Paste the token below",
    "body": "Use the raw 64-character hex value only — no quotes. Whitespace is stripped automatically.",
    "priority": "recommended",
    "section": "login-form",
    "cta": "Jump to form",
  },
  {
    "key": "continue",
    "title": "3. Follow the dashboard guide",
    "body": "After sign-in, the dashboard suggests the next recommended action for your rights tier.",
    "priority": "optional",
  },
] %}
{{ render_next_steps(login_steps, title='How to sign in') }}

<div id="login-form">
<form class="wn-form" method="post" action="{{ root_path }}/login">
  <label>
    <span class="cp-label-row">
      Credential token
      {{ help_bubble("OpenBao: platform/operators/founding-admin/revenue → field `token`. Never commit tokens to git.") }}
    </span>
    <input type="password" name="token" required autocomplete="current-password">
  </label>
  <button type="submit">Sign in</button>
</form>
</div>
{% endblock %}