{#
  Admin login form.

  Single email input, no JS. If the submitted address is on the
  allowlist (ADMIN_EMAILS env var), the POST handler emails a
  one-time magic link; otherwise it silently succeeds without
  sending (anti-enumeration).

  Context:
    - error  : str | None  (format validation errors only)
    - email  : str         (pre-fill on re-render after format error)
#}
{% extends "admin/base.html" %}

{% block title %}Log in — Admin{% endblock %}

{% block content %}
  <article class="page-article">
    <header class="page-article__header">
      <h1 class="page-article__title">Admin log in</h1>
    </header>

    <p>
      Enter your admin email and we'll send a one-time login link
      that expires after 15 minutes.
    </p>

    {% if error %}
      <p class="admin-flash admin-flash--error" role="alert">{{ error }}</p>
    {% endif %}

    <form class="contact-form" action="/admin/login" method="post" novalidate>
      <div class="contact-form__field">
        <label for="admin-email">Email</label>
        <input type="email"
               id="admin-email"
               name="email"
               autocomplete="email"
               value="{{ email or '' }}"
               required>
      </div>

      <div class="contact-form__actions">
        <button type="submit" class="btn btn--primary">Send login link</button>
      </div>
    </form>
  </article>
{% endblock %}