/* v2/auth.css — the sign-in pages (login.html, change-password.html,
 * totp.html): one card on the canvas, no app shell. Tokens, buttons and
 * inputs come from v2/theme.css. No gradients (G1). */

body.auth-page {
  min-height: 100vh; min-height: 100dvh; margin: 0;
  display: flex; align-items: center; justify-content: center;
  padding: calc(var(--sp-6) + env(safe-area-inset-top, 0px)) var(--sp-4) calc(var(--sp-6) + env(safe-area-inset-bottom, 0px));
  background: var(--canvas); color: var(--ink);
}
.auth-main { width: 100%; max-width: 440px; }
.auth-main.is-wide { max-width: 560px; }
.auth-brand { display: inline-flex; align-items: center; gap: 10px; min-height: 32px; margin: 0 0 var(--sp-5) 4px; border-radius: 6px; color: var(--ink); text-decoration: none; font-weight: 700; font-size: 16px; letter-spacing: -0.01em; }
.auth-brand img { width: 30px; height: auto; display: block; }
.auth-card {
  background: var(--panel); border-radius: 20px; box-shadow: var(--shadow-sm);
  padding: var(--sp-7) var(--sp-7) var(--sp-6); border-left: 4px solid var(--brand-sky);
}
.auth-card[data-tone="warn"] { border-left-color: var(--status-post, #d9822b); }
.auth-card h1 { margin: 0 0 6px; font-size: 22px; font-weight: 700; letter-spacing: -0.015em; line-height: 1.25; }
.auth-sub { margin: 0 0 var(--sp-5); color: var(--ink-2); font-size: 14.5px; line-height: 1.55; }
.auth-sub.auth-who { margin: 0; overflow-wrap: anywhere; }
.auth-form { display: flex; flex-direction: column; gap: var(--sp-4); }
.auth-form .field .input { width: 100%; }
/* Show / Hide sits beside the field, not on top of it: an overlaid button is
 * two targets in one place (tests/hit-target.test.mjs). */
.auth-pw { display: flex; align-items: center; gap: var(--sp-2); }
.auth-pw .input { flex: 1 1 auto; min-width: 0; }
.auth-pw-toggle {
  flex: none;
  min-height: 40px; min-width: 64px; padding: 0 10px; border: 1px solid var(--line-strong); border-radius: var(--r-pill, 999px);
  background: transparent; color: var(--ink-2); font: inherit; font-size: 12.5px; font-weight: 650; cursor: pointer;
}
.auth-pw-toggle:hover { background: rgba(20, 21, 31, 0.06); color: var(--ink); }
.auth-pw-toggle:focus-visible { outline: 2px solid var(--focus-ring, var(--brand-sky)); outline-offset: 2px; }
.auth-error {
  margin: 0; padding: 10px 12px; border-radius: var(--r-lg); font-size: 13.5px; line-height: 1.5; font-weight: 600;
  background: var(--status-cancel-tint, #fdeceb); color: var(--status-cancel); border-left: 3px solid var(--status-cancel);
}
.auth-error[hidden], .auth-ok[hidden], [data-view][hidden] { display: none; }
.auth-ok { margin: 0; padding: 10px 12px; border-radius: var(--r-lg); font-size: 13.5px; background: var(--status-new-tint, #e8f6ee); color: var(--status-new); border-left: 3px solid var(--status-new); font-weight: 600; }
.auth-actions { display: flex; flex-direction: column; gap: var(--sp-2); margin-top: var(--sp-1); }
.auth-actions .btn { min-height: 44px; }
.auth-foot { margin: var(--sp-5) 0 0; font-size: 13px; line-height: 1.55; color: var(--ink-3); }
.auth-foot a, .auth-link { color: var(--brand-sky); font-weight: 650; }
.auth-link-btn { border: 0; background: none; padding: 6px 0; min-height: 32px; color: var(--brand-sky); font: inherit; font-size: 13.5px; font-weight: 650; cursor: pointer; text-align: left; }
.auth-link-btn:focus-visible { outline: 2px solid var(--focus-ring, var(--brand-sky)); outline-offset: 2px; border-radius: 4px; }

/* The rule list under a new password. */
.auth-rules { list-style: none; margin: -4px 0 0; padding: 0; display: grid; gap: 4px; font-size: 12.5px; color: var(--ink-3); }
.auth-rules li { display: flex; align-items: center; gap: 8px; }
.auth-rules li::before { content: ""; width: 8px; height: 8px; border-radius: 50%; border: 1.5px solid var(--ink-4, #b9bccb); flex: 0 0 auto; }
.auth-rules li.is-met { color: var(--status-new); }
.auth-rules li.is-met::before { background: var(--status-new); border-color: var(--status-new); }

/* Authenticator enrollment. */
.auth-steps { list-style: none; margin: 0 0 var(--sp-4); padding: 0; display: flex; gap: var(--sp-2); font-size: 12px; font-weight: 650; color: var(--ink-3); flex-wrap: wrap; }
.auth-steps li { padding: 4px 10px; border-radius: 999px; background: var(--canvas); }
.auth-steps li[aria-current="step"] { background: var(--brand-tint, #e7f2fb); color: var(--brand-sky); }
.auth-qr { display: flex; gap: var(--sp-5); align-items: center; flex-wrap: wrap; margin: 0 0 var(--sp-4); }
.auth-qr-img { flex: 0 0 auto; width: 200px; height: 200px; padding: 0; border-radius: 12px; background: #fff; box-shadow: 0 0 0 1px var(--line, #e7e8ef); overflow: hidden; }
.auth-qr-img svg { width: 100%; height: 100%; display: block; }
.auth-qr-text { flex: 1 1 200px; min-width: 0; font-size: 13.5px; line-height: 1.55; color: var(--ink-2); }
.auth-key {
  display: block; margin: 6px 0 8px; padding: 8px 10px; border-radius: 10px; background: var(--canvas);
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 14px; letter-spacing: 0.06em; color: var(--ink);
  overflow-wrap: anywhere; user-select: all;
}
.auth-code { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 22px !important; letter-spacing: 0.3em; text-align: center; }
.auth-codes {
  list-style: none; margin: 0 0 var(--sp-3); padding: var(--sp-3); border-radius: 12px; background: var(--canvas);
  display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 6px 16px;
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 15px; letter-spacing: 0.04em;
}
.auth-codes li { padding: 2px 0; }
.auth-row { display: flex; gap: var(--sp-2); flex-wrap: wrap; }
.auth-check { display: flex; align-items: flex-start; gap: 10px; font-size: 13.5px; color: var(--ink-2); line-height: 1.45; cursor: pointer; min-height: 32px; }
.auth-check input { width: 18px; height: 18px; margin: 1px 0 0; flex: 0 0 auto; }

@media (max-width: 520px) {
  .auth-card { padding: var(--sp-6) var(--sp-5) var(--sp-5); border-radius: 16px; }
  .auth-qr-img { width: 180px; height: 180px; }
  .auth-codes { grid-template-columns: minmax(0, 1fr); }
}

/* Sign In With A Passkey sits under Sign In; hidden where the browser has no
 * passkeys (.btn sets display, so [hidden] needs saying). */
.auth-actions .btn[hidden], .auth-who[hidden] { display: none; }