{% extends "base.html" %}
{% block title %}Account · {{ app_name }}{% endblock %}
{% block body %}
<h1>Account <small class="hint">@{{ profile.handle }} · since {{ created|local('%-d %b %Y') }}</small></h1>

<section class="grid2">
  <div class="card settings">
    <h2>Profile</h2>
    <form method="post" action="/account/profile" class="fields">
      <label>display name <input name="display_name" value="{{ profile.display_name }}" maxlength="40"></label>
      <label>timezone <input name="tz" list="tzlist" value="{{ profile.tz_name }}" required>
        <datalist id="tzlist">
          {% for z in common_tz %}<option value="{{ z }}">{% endfor %}
          {% for z in all_tz %}{% if z not in common_tz %}<option value="{{ z }}">{% endif %}{% endfor %}
        </datalist></label>
      <p><button type="submit" class="btn primary">save</button></p>
    </form>
  </div>

  <div class="card settings">
    <h2>Password</h2>
    <form method="post" action="/account/password" class="fields">
      <label>current <input name="current" type="password" autocomplete="current-password" required></label>
      <label>new <input name="new" type="password" autocomplete="new-password" minlength="10" required></label>
      <label>new, again <input name="new2" type="password" autocomplete="new-password" minlength="10" required></label>
      <p><button type="submit" class="btn primary">change</button></p>
    </form>
    <p class="hint">Changing it signs out every other device.</p>
  </div>

  <div class="card settings">
    <h2>Devices</h2>
    <p>{{ sessions }} signed-in session{{ '' if sessions == 1 else 's' }}, this one included.</p>
    <form method="post" action="/account/signout-everywhere"><button type="submit" class="btn">sign out everywhere else</button></form>
    <form method="post" action="/logout" class="inline"><button type="submit" class="btn">sign out here</button></form>
  </div>

  <div class="card settings leave">
    <h2>Leave</h2>
    <p><a class="btn" href="/export">Export everything first →</a></p>
    <p class="hint">Deleting removes your profile and its whole directory — every event, reflection, photo and memo — from this machine. Nothing is kept.</p>
    <form method="post" action="/account/delete" class="fields">
      <label>type your handle to confirm <input name="confirm" autocapitalize="none" spellcheck="false" required></label>
      <label>password <input name="password" type="password" autocomplete="current-password" required></label>
      <p><button type="submit" class="btn bad">delete my profile</button></p>
    </form>
  </div>
</section>
{% endblock %}