/* Auth screens: login, password reset, MFA enrollment.
 * Uses ui/tokens.css + ui/components.css primitives. */

.auth-photo-page {
  min-height: 100vh;
  background-image: url("/static/assets/images/loch-lomond-1.jpg");
  background-size: cover;
  background-position: center;
  background-repeat: no-repeat;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: var(--space-8);
}

.mfa-page {
  min-height: 100vh;
  background: var(--surface);
  display: flex;
  align-items: center;
  justify-content: center;
  padding: var(--space-7);
}

.auth-grid {
  width: 100%;
  max-width: 1200px;
  display: grid;
  grid-template-columns: minmax(0, 1fr) 420px;
  gap: var(--space-8);
  align-items: center;
}

/* Tinted Console Cream (--on-surface = #dce2f7) over the photo backdrop.
   Pure #fff is banned in the neutral scale. */
.auth-hero { color: var(--on-surface); }

.auth-hero__logo {
  display: block;
  width: 260px;
  height: auto;
  margin-bottom: var(--space-6);
}

.auth-hero__brand {
  font-size: var(--font-xs);
  font-weight: var(--font-xs-weight);
  letter-spacing: var(--tracking-caps);
  text-transform: uppercase;
  color: var(--on-surface);
  margin-bottom: var(--space-6);
  display: inline-flex;
  align-items: center;
  gap: var(--space-3);
}

.auth-hero__brand-dot {
  width: 6px;
  height: 6px;
  border-radius: 50%;
  background: var(--on-surface);
}

.auth-hero__title {
  font-size: var(--font-display);
  line-height: var(--font-display-lh);
  font-weight: var(--font-display-weight);
  margin: 0 0 var(--space-4);
  letter-spacing: -0.01em;
}

.auth-hero__sub {
  font-size: var(--font-lg);
  line-height: var(--font-lg-lh);
  margin: 0;
  color: rgba(220, 226, 247, 0.9); /* --on-surface @ 0.9α — no #fff */
  max-width: 430px;
}

.auth-card { width: 100%; }

.auth-card .ui-panel {
  background: var(--auth-panel-bg);
  backdrop-filter: var(--auth-panel-blur);
  -webkit-backdrop-filter: var(--auth-panel-blur);
  border-color: var(--auth-panel-border);
}

.auth-card .ui-panel__body { padding: var(--space-7); }
.auth-card .ui-field + .ui-field { margin-top: var(--space-5); }
.auth-card .ui-button--primary { width: 100%; margin-top: var(--space-5); }

.auth-card__title {
  font-size: var(--font-xl);
  line-height: var(--font-xl-lh);
  font-weight: var(--font-xl-weight);
  margin: 0 0 var(--space-2);
  color: var(--on-surface);
}

.auth-card__subtitle {
  font-size: var(--font-sm);
  line-height: var(--font-sm-lh);
  color: var(--on-surface-dim);
  margin: 0 0 var(--space-6);
}

.auth-card__row {
  display: flex;
  align-items: center;
  justify-content: space-between;
  margin-top: var(--space-4);
  font-size: var(--font-sm);
  color: var(--on-surface-dim);
}

.auth-support-text,
.auth-card__footer {
  margin: var(--space-6) 0 0;
  padding-top: var(--space-5);
  border-top: 1px solid var(--outline-variant);
  text-align: center;
  font-size: var(--font-sm);
  line-height: var(--font-sm-lh);
  color: var(--on-surface-dim);
}

.auth-message { margin-bottom: var(--space-5); }

.mfa-shell { width: 100%; max-width: 960px; }

.mfa-header { margin-bottom: var(--space-6); }

.mfa-step-pill {
  display: inline-block;
  font-size: var(--font-xs);
  font-weight: var(--font-xs-weight);
  letter-spacing: var(--tracking-caps);
  text-transform: uppercase;
  color: var(--primary);
  background: var(--info-surface);
  padding: var(--space-2) var(--space-4);
  border-radius: 999px;
  margin-bottom: var(--space-4);
}

.mfa-title {
  font-size: var(--font-xl);
  line-height: var(--font-xl-lh);
  font-weight: var(--font-xl-weight);
  margin: 0 0 var(--space-2);
}

.mfa-subtitle {
  font-size: var(--font-sm);
  color: var(--on-surface-dim);
  margin: 0;
}

.mfa-progress {
  height: 4px;
  width: 100%;
  background: var(--surface-high);
  border-radius: var(--radius-1);
  overflow: hidden;
  margin-top: var(--space-5);
}

.mfa-progress__fill {
  height: 100%;
  width: 66.66%;
  background: var(--primary-strong);
}

.mfa-grid {
  display: grid;
  grid-template-columns: minmax(0, 1fr) minmax(0, 1fr);
  gap: var(--space-5);
}

.mfa-steps {
  display: flex;
  flex-direction: column;
  gap: var(--space-5);
  list-style: none;
  margin: 0;
  padding: 0;
}

.mfa-steps__row {
  display: flex;
  gap: var(--space-4);
  align-items: flex-start;
}

.mfa-steps__row.is-muted { opacity: 0.45; }

.mfa-steps__row.is-active .mfa-steps__num {
  background: var(--primary-strong);
  color: var(--on-primary);
  border-color: var(--primary-strong);
}

.mfa-steps__row.is-active .mfa-steps__title { color: var(--primary); }

.mfa-steps__num {
  width: 28px;
  height: 28px;
  border-radius: 50%;
  background: var(--surface-high);
  border: 1px solid var(--outline);
  display: inline-flex;
  align-items: center;
  justify-content: center;
  font-size: var(--font-sm);
  font-weight: 600;
  color: var(--on-surface-dim);
  flex-shrink: 0;
}

.mfa-steps__title {
  font-size: var(--font-md);
  font-weight: 500;
  margin: 0;
}

.mfa-steps__desc {
  font-size: var(--font-sm);
  color: var(--on-surface-dim);
  margin: var(--space-2) 0 0;
}

.mfa-qr-wrap {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: var(--space-4);
  margin-bottom: var(--space-6);
}

.mfa-qr-frame {
  width: 200px;
  height: 200px;
  background: #fff;
  padding: var(--space-4);
  border: 1px solid var(--outline);
  border-radius: var(--radius-2);
  display: flex;
  align-items: center;
  justify-content: center;
}

.mfa-qr-frame img { width: 180px; height: 180px; image-rendering: pixelated; }

.mfa-secret {
  font-family: var(--font-family-mono);
  font-size: var(--font-sm);
  letter-spacing: 0.12em;
  color: var(--on-surface-dim);
  background: var(--surface-container);
  border: 1px solid var(--outline-variant);
  border-radius: var(--radius-2);
  padding: var(--space-3) var(--space-4);
  user-select: all;
  cursor: pointer;
  overflow-wrap: anywhere;
  text-align: center;
}

.mfa-otp {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: var(--space-4);
}

.mfa-otp__label {
  font-size: var(--font-xs);
  font-weight: var(--font-xs-weight);
  letter-spacing: var(--tracking-caps);
  text-transform: uppercase;
  color: var(--on-surface-mute);
}

.mfa-otp__row { display: flex; gap: var(--space-3); }

.mfa-otp__cell {
  width: 40px;
  height: 44px;
  background: var(--surface);
  border: 1px solid var(--surface-highest);
  border-radius: var(--radius-2);
  font-family: var(--font-family-mono);
  font-size: var(--font-lg);
  font-weight: 600;
  text-align: center;
  color: var(--on-surface);
  transition: border-color 80ms linear, box-shadow 80ms linear;
}

.mfa-otp__cell:focus-visible {
  outline: none;
  border-color: var(--primary-strong);
  box-shadow: var(--focus-ring);
}

.mfa-actions {
  margin-top: var(--space-6);
  display: flex;
  flex-direction: column;
  gap: var(--space-3);
  width: 100%;
}

.mfa-actions .ui-button--primary { width: 100%; }

.mfa-helper-link {
  background: none;
  border: none;
  cursor: pointer;
  font-size: var(--font-sm);
  color: var(--on-surface-mute);
  text-decoration: underline;
  text-underline-offset: 3px;
}

.mfa-helper-link:hover { color: var(--primary); }

.mfa-manual-details {
  width: 100%;
  text-align: center;
}

.mfa-manual-details summary {
  cursor: pointer;
  color: var(--on-surface-mute);
  font-size: var(--font-sm);
}

.mfa-manual-details summary:hover { color: var(--primary); }

.mfa-footnote {
  margin-top: var(--space-6);
  text-align: center;
  font-size: var(--font-xs);
  color: var(--on-surface-mute);
}

.auth-refresh {
  text-align: center;
  color: var(--on-surface-dim);
}

.auth-refresh a { color: var(--primary); }

@media (max-width: 900px) {
  .auth-photo-page,
  .mfa-page { padding: var(--space-5); }
  .auth-grid { grid-template-columns: 1fr; gap: var(--space-6); }
  .auth-hero { display: none; }
  .mfa-grid { grid-template-columns: 1fr; }
}

/* Show-password checkbox under each password field. Auth screens share this
   page bundle; authenticated app pages use the app shell bundle. */
.auth-show-pw {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  margin-top: 8px;
  font-size: 13px;
  color: var(--on-surface-mute);
  cursor: pointer;
  user-select: none;
}
.auth-show-pw input {
  width: 14px;
  height: 14px;
  margin: 0;
  accent-color: var(--primary);
}

/* Inline text-link styled <button> — for actions that must be POST
   (e.g. logout) but should read like a link inside body copy. */
.auth-link-button {
  background: transparent;
  border: 0;
  padding: 0;
  color: var(--primary);
  text-decoration: underline;
  cursor: pointer;
  font: inherit;
}
.auth-link-button:hover { color: var(--primary-strong); }
.auth-link-button:focus-visible {
  outline: none;
  box-shadow: var(--focus-ring);
  border-radius: 2px;
}