<?php
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/csrf.php';
require_once __DIR__ . '/../includes/config.php';

$success = false;
$error   = '';
$reset_link = '';  // shown on screen since no email system yet

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    csrf_verify();
    $email = trim($_POST['email'] ?? '');
    if ($email === '') {
        $error = 'Please enter your email address.';
    } else {
        $token = auth_admin_create_reset_token($email);
        if ($token) {
            $reset_link = (defined('SITE_URL') ? SITE_URL : '') . '/admin/reset.php?token=' . $token;
            app_log("Admin password reset requested for: $email");
        }
        // Always show success, regardless of whether email exists (prevents enumeration)
        $success = true;
    }
}
?><!DOCTYPE html>
<html lang="en"><head>
<meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1">
<title>Reset Password — Admin — Buy Local Lowveld</title>
<link rel="icon" type="image/png" href="../assets/img/favicon.png">
<style>
*{box-sizing:border-box;}
html,body{margin:0;padding:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;background:#0e0e0e;color:#fff;min-height:100vh;}
body{display:flex;align-items:center;justify-content:center;padding:1rem;background:radial-gradient(circle at 50% 0%, #232323 0%, #0e0e0e 60%);}
.al-card{background:#1a1a1a;border:1px solid #2a2a2a;border-radius:14px;padding:2.5rem;width:100%;max-width:480px;box-shadow:0 30px 80px rgba(0,0,0,.6);}
.al-logo{text-align:center;margin-bottom:1.5rem;}
.al-logo img{height:56px;}
.al-title{font-size:1.4rem;font-weight:600;text-align:center;margin:0 0 .25rem;}
.al-sub{text-align:center;color:#9a9a9a;font-size:.85rem;margin:0 0 2rem;}
.al-card label{display:block;color:#9a9a9a;font-size:.78rem;text-transform:uppercase;letter-spacing:.08em;font-weight:600;margin-bottom:.4rem;}
.al-card input[type="email"]{width:100%;padding:.85rem 1rem;background:#0e0e0e;color:#fff;border:1px solid #2a2a2a;border-radius:8px;font-size:1rem;margin-bottom:1.25rem;}
.al-card input:focus{outline:none;border-color:#7a9d47;}
.al-btn{width:100%;padding:.95rem;background:#7a9d47;color:#fff;border:none;border-radius:8px;font-size:1rem;font-weight:600;cursor:pointer;}
.al-btn:hover{background:#8db04f;}
.al-success{background:#1a3a1a;border:1px solid #2a6e2a;color:#a8e3a8;padding:1rem;border-radius:8px;font-size:.9rem;margin-bottom:1rem;}
.al-error{background:#3b1818;border:1px solid #7a2828;color:#ffabab;padding:.75rem 1rem;border-radius:8px;font-size:.88rem;margin-bottom:1.25rem;}
.al-foot{text-align:center;margin-top:1.5rem;font-size:.85rem;}
.al-foot a{color:#9a9a9a;text-decoration:none;}
.al-foot a:hover{color:#7a9d47;}
.al-link-box{background:#0e0e0e;border:1px solid #2a2a2a;border-radius:8px;padding:.75rem;font-family:ui-monospace,Menlo,monospace;font-size:.78rem;color:#7a9d47;word-break:break-all;margin-top:.5rem;}
</style>
</head><body>

<div class="al-card">
    <div class="al-logo"><img src="../assets/img/buylocal-stamp.png" alt="Buy Local Lowveld"></div>
    <h1 class="al-title">Reset Password</h1>
    <p class="al-sub">We'll send a reset link to your admin email.</p>

    <?php if ($error): ?>
        <div class="al-error"><?= htmlspecialchars($error) ?></div>
    <?php endif; ?>

    <?php if ($success): ?>
        <div class="al-success">
            <strong>Check your email.</strong> If an admin account exists for that address,
            a reset link has been generated. The link expires in 1 hour.

            <?php if ($reset_link): ?>
                <p style="margin:1rem 0 .25rem;color:#fff;font-size:.85rem;">
                    <strong>⚠ DEV NOTE — email system not yet built.</strong>
                    Reset link shown below (copy + paste into browser):
                </p>
                <div class="al-link-box"><?= htmlspecialchars($reset_link) ?></div>
            <?php endif; ?>
        </div>
        <p class="al-foot"><a href="login.php">← Back to sign in</a></p>
    <?php else: ?>
        <form method="post">
            <?= csrf_field() ?>
            <label for="email">Email</label>
            <input id="email" type="email" name="email" required>
            <button type="submit" class="al-btn">Send reset link →</button>
        </form>
        <p class="al-foot"><a href="login.php">← Back to sign in</a></p>
    <?php endif; ?>
</div>

</body></html>