{% extends "base.html" %}
{% block title %}Account - MCP{% endblock %}
{% block content %}
<h1>MCP</h1>
{% if !notice.is_empty() %}<p class="primary">{{ notice }}</p>{% endif %}
{% if !error.is_empty() %}<p class="error">{{ error }}</p>{% endif %}
<div class="card">
  <h2>Signed in</h2>
  <p>You are signed in as <code>{{ email }}</code>{% if is_admin %} (administrator){% endif %}.</p>
  {% if totp_enrolled %}
  <p>Two-factor authentication is <strong>on</strong>. Unused recovery codes: {{ recovery_codes_left }}.</p>
  <p><a href="/totp/enrol">Re-enrol your authenticator</a> (this replaces your recovery codes).</p>
  <form method="post" action="/account/recovery-codes">
    <p><button type="submit">Regenerate recovery codes</button></p>
  </form>
  {% else %}
  <p>Two-factor authentication is <strong>off</strong>.</p>
  <p><a class="primary" href="/totp/enrol">Set up an authenticator app &rarr;</a></p>
  {% endif %}
  <form method="post" action="/logout">
    <p><button type="submit">Sign out</button></p>
  </form>
</div>
<div class="card">
  <h2>Connection</h2>
  {% if connected %}
  <p><strong>Connected.</strong> Your tool calls act on your configured upstream instance.</p>
  <p><a href="{{ settings_path }}">Manage connection</a></p>
  {% else %}
  <p>Not connected yet: your tool calls have nothing to act on until you connect an upstream instance.</p>
  <p><a class="primary" href="{{ settings_path }}">Connect &rarr;</a></p>
  {% endif %}
</div>
<div class="card">
  <h2>Change password</h2>
  <form method="post" action="/account/password">
    <p><label>Current password<br><input type="password" name="current_password" autocomplete="current-password" required></label></p>
    <p><label>New password<br><input type="password" name="new_password" autocomplete="new-password" required></label></p>
    <p><label>Confirm new password<br><input type="password" name="new_password_confirm" autocomplete="new-password" required></label></p>
    <p class="muted">At least {{ min_password_len }} characters.</p>
    <p><button class="primary" type="submit">Change password</button></p>
  </form>
</div>
<div class="card">
  <h2>Delete account</h2>
  <p class="muted">This permanently removes your account, your upstream connection, and every issued access token. It cannot be undone.</p>
  <form method="post" action="/account/delete">
    <p><label>Confirm with your password<br><input type="password" name="password" autocomplete="current-password" required></label></p>
    <p><button type="submit">Delete my account</button></p>
  </form>
</div>
{% endblock %}