<div class="auth-heading"><p class="eyebrow">Account recovery</p><h1>Reset Password</h1><p>Create a new secure password.</p></div>
<?php if (!empty($error)): ?><div class="alert alert-warning" role="alert"><?= htmlspecialchars($error, ENT_QUOTES, 'UTF-8') ?></div><?php endif; ?>
<form method="post" action="/crm/public/reset-password" class="form-stack">
    <input type="hidden" name="_csrf" value="<?= htmlspecialchars($csrf, ENT_QUOTES, 'UTF-8') ?>">
    <input type="hidden" name="token" value="<?= htmlspecialchars($token, ENT_QUOTES, 'UTF-8') ?>">
    <label class="form-field"><span>New password</span><input type="password" name="password" autocomplete="new-password" minlength="12" required><small>Use at least 12 characters.</small></label>
    <label class="form-field"><span>Confirm password</span><input type="password" name="password_confirmation" autocomplete="new-password" minlength="12" required></label>
    <button class="btn btn-primary btn-block" type="submit">Reset password</button>
</form>
