{{define "title"}}Your printed kit — CONTRA{{end}}
{{define "brand"}}<a rst-shell-brand href="/">CONTRA</a>{{end}}
{{define "head"}}<script type="module" src="{{asset "static/pages/kit.js"}}"></script>{{end}}

{{define "content"}}
<h1>Your printed kit</h1>

{{/* The two documents behave differently and the page says so up front,
     because the difference is the whole thing a person needs to understand
     before they press anything here. */}}
<p>Two documents, and only one of them can be reprinted. That is not an
oversight — it is what "nobody can open your vault for you" costs.</p>

<section data-card>
  <h2>Account Key card</h2>
  <p>This <strong>reprints exactly</strong>. Your devices keep a copy of the
  Account Key, so a new card is the same key on new paper. The old card keeps
  working — throw it away or keep it, it makes no difference.</p>

  <div data-card-ready hidden>
    <p><button type="button" data-print-card>Print the Account Key card
    again</button></p>
  </div>

  <p data-card-missing hidden>
    This device does not have your Account Key, so it cannot print the card.
    <a href="/device">Give it the key</a> from another device or from the card
    you still have, and this will work.
  </p>

  <p data-card-status aria-live="polite"></p>
</section>

<section data-recovery>
  <h2>Recovery sheet</h2>

  {{/* The warning goes BEFORE the control, not beside it and not after it.
       This is the one destructive action in the app. */}}
  <p><strong>This cannot be reprinted.</strong> Nobody stores your recovery
  code — only a wrap that it opens — so there is nothing to print a second
  copy of. What this does instead is <strong>issue a new one</strong>.</p>

  <p data-kind="warning">When you do this, <strong>the code on your old
  recovery sheet stops working immediately</strong>. If you are not certain
  the old sheet is lost, find it first: doing this while it is still in the
  safe means shredding it and filing the new one.</p>

  <p>Your passphrase and your other devices are unaffected.</p>

  <form data-recovery-form method="post" action="#">
    <p>
      <label for="recovery-passphrase">Passphrase</label>
      <input id="recovery-passphrase" name="passphrase" type="password"
             autocomplete="current-password" required>
      <small>Needed to open your vault key so the new code can be sealed to
      it. It is not sent anywhere.</small>
    </p>
    <p>
      <label>
        <input type="checkbox" data-confirm-recovery>
        I understand the old recovery sheet will stop working.
      </label>
    </p>
    <p><button type="submit" data-regenerate disabled>Issue a new recovery
    sheet</button></p>
  </form>

  <div data-new-sheet hidden></div>
  <p data-recovery-status aria-live="polite"></p>
</section>

<section data-nag hidden>
  <h2>Only one device</h2>
  {{/* PROTOCOL.md's loss table, row six: passphrase known, kit lost, every
       device gone. The obligation is not to soften the rule — it is to make
       sure nobody arrives there by accident. This is that. */}}
  <p>This is the only browser holding your Account Key. If you lose it and the
  printed card at the same time, the vault cannot be opened — by you, by us, by
  anyone.</p>
  <p>Two minutes of work makes that much less likely:
  <a href="/device">add a second device</a>, or check you still have the
  printed card.</p>
</section>

<p><a href="/vault">Back to your vault</a></p>
{{end}}