{% extends 'layouts/base.html' %}
{% block subtitle %}<p class="text-secondary">Sign in to your controller workspace.</p>{% endblock %}
{% block content %}
<div class="login-layout"><section class="card login-card"><div class="card-body p-4">
<p class="eyebrow">LOCAL ACCOUNT</p><h2 class="h4 mb-4">Welcome back</h2>
<form action="/login" method="post">
<input type="hidden" name="_csrf" value="{{ csrf }}">
<div class="mb-3"><label class="form-label" for="username">Username</label><input class="form-control" id="username" name="username" autocomplete="username" maxlength="64" required autofocus></div>
<div class="mb-4"><label class="form-label" for="password">Password</label><input class="form-control" id="password" type="password" name="password" autocomplete="current-password" maxlength="128" required></div>
<button class="btn btn-primary w-100" type="submit">Sign in to AIM Web</button>
</form></div></section><section class="login-note"><span class="section-index">01 / FIRST SIGN-IN</span><h2 class="h4">Built around your existing AIM installation.</h2><p>Retrieve the initial administrator password from the protected <code>.credentials</code> path printed by deployment. The file is local to your controller, not accessible through this website.</p><p>First login requires a password change. Your terminal workflow stays independent.</p></section></div>
{% endblock %}