{% extends 'base.html' %}
{% block title %}Provision local teacher login{% endblock %}
{% block content %}<section class="classroom-panel"><h1>Provision a teacher on this classroom server</h1><p>Only teachers already approved on Cloudflare and received in the staff synchronization roster may receive a local login. The cloud password is never transferred.</p>
{% if eligible %}<form method="post" action="{{url_for('teachers.provision_approved_cloud_teacher')}}" class="form-stack">
<input type="hidden" name="csrf_token" value="{{csrf_token()}}"><label>Approved cloud teacher<select name="cloud_id" required><option value="">Choose teacher...</option>{% for staff in eligible %}<option value="{{staff.cloud_id}}">{{staff.cloud_username}}</option>{% endfor %}</select></label>
<label>Verified full name<input name="full_name" dir="auto" required minlength="3" maxlength="100"></label>
<label>Academic rank<select name="academic_rank" required>{% for value in ranks %}<option value="{{value}}">{{value}}</option>{% endfor %}</select></label>
<label>Degree<select name="scientific_degree" required>{% for value in degrees %}<option value="{{value}}">{{value}}</option>{% endfor %}</select></label>
<button type="submit" class="classroom-action">Create and link local login</button>
</form>{% else %}<p class="notice">No approved, unlinked cloud teachers are available. First approve the teacher online, then run Direct Sync on this Pi.</p>{% endif %}
<p class="muted">This creates a separate local password. Existing teachers are unaffected; use staff mapping if their username already exists locally.</p></section>{% endblock %}