<%- include('../shared/_head', { title: title, portalCss: '/platform/merchant/css/portal.css', bodyClass: 'merchant-portal auth-page' }) %>

<div class="auth-shell">
  <div class="auth-card">
    <div class="auth-header">
      <a href="/merchant/login" class="back-link">← Sign in</a>
      <div class="portal-badge portal-badge--merchant">Merchant</div>
    </div>
    <h1 class="auth-title">Choose a new password</h1>

    <%- include('../shared/_errors') %>

    <form method="POST" action="/merchant/reset-password" class="auth-form" novalidate>
      <input type="hidden" name="_csrf" value="<%= csrfToken %>">
      <input type="hidden" name="token" value="<%= token %>">

      <div class="field">
        <label for="password">New password <span class="field-hint">(min 8 characters)</span></label>
        <input type="password" id="password" name="password" autocomplete="new-password" required minlength="8" autofocus>
      </div>

      <div class="field">
        <label for="confirmPassword">Confirm new password</label>
        <input type="password" id="confirmPassword" name="confirmPassword" autocomplete="new-password" required minlength="8">
      </div>

      <button type="submit" class="btn btn-primary btn-block">Reset password</button>
    </form>
  </div>
</div>

<%- include('../shared/_foot', {}) %>
