/* Sign-in, change-password and 2FA pages (both apps). Loaded after pcc-base.css,
   whose --yl-* tokens (light and [data-bs-theme="dark"]) supply every color. */

body.yl-auth {
    margin: 0;
    min-height: 100vh;
    display: flex;
    flex-direction: column;
    align-items: center;
    padding: max(48px, 12vh) 16px 48px;
    background: var(--yl-canvas);
    color: var(--yl-ink);
    font-family: var(--yl-font-sans);
    font-size: 14px;
}

.login-card {
    position: relative;
    width: 100%;
    max-width: 400px;
    padding: 32px;
    background: var(--yl-surface);
    border: 1px solid var(--yl-line);
    border-radius: var(--yl-radius-card);
}
.login-card.auth-wide { max-width: 480px; }

/* ── Brand + page title ─────────────────────────────────────── */
.lc-header, .tfa-header { text-align: center; margin-bottom: 24px; }
.auth-mark { display: block; width: 44px; height: 44px; margin: 0 auto 12px; }
.auth-wordmark {
    display: flex;
    flex-direction: column;
    align-items: center;
    gap: 2px;
    font-size: 22px;
    font-weight: 700;
    letter-spacing: -0.01em;
    line-height: 1.2;
    color: var(--yl-ink);
}
.auth-brand-divider { display: none; }
.auth-brand-app { font-size: 13px; font-weight: 500; letter-spacing: 0; color: var(--yl-slate); }
.auth-title { margin: 16px 0 0; font-size: 18px; font-weight: 600; color: var(--yl-ink); }
.auth-subtitle { margin: 4px 0 0; font-size: 13px; color: var(--yl-slate); }

/* ── Form ───────────────────────────────────────────────────── */
.login-card .form-label { margin-bottom: 6px; }
.lc-body .form-control { height: 40px; }
.otp-digit:focus { border-color: var(--yl-link); box-shadow: var(--yl-focus-ring); }
/* Browser autofill paints its own tint; an inset surface shadow covers it. */
.login-card .form-control:-webkit-autofill,
.login-card .form-control:-webkit-autofill:hover,
.login-card .form-control:-webkit-autofill:focus {
    -webkit-box-shadow: 0 0 0 1000px var(--yl-surface) inset;
    -webkit-text-fill-color: var(--yl-ink);
    caret-color: var(--yl-ink);
}
.login-card .form-control:-webkit-autofill:focus {
    -webkit-box-shadow: 0 0 0 1000px var(--yl-surface) inset, var(--yl-focus-ring);
}

.login-pw-wrap { position: relative; }
.login-pw-wrap .form-control { padding-right: 40px; }
.login-pw-toggle {
    position: absolute;
    top: 50%;
    right: 4px;
    transform: translateY(-50%);
    display: flex;
    align-items: center;
    padding: 6px 8px;
    background: none;
    border: none;
    color: var(--yl-slate);
    font-size: 16px;
    line-height: 1;
    cursor: pointer;
}
.login-pw-toggle:hover, .login-pw-toggle:focus-visible { color: var(--yl-ink); outline: none; }

.auth-hint {
    display: flex;
    align-items: center;
    gap: 6px;
    margin: 0 0 16px;
    font-size: 12px;
    color: var(--yl-slate);
}

/* ── Buttons ────────────────────────────────────────────────── */
.login-btn, .login-btn-outline {
    display: flex;
    align-items: center;
    justify-content: center;
    width: 100%;
    height: 40px;
    padding: 0 16px;
    border-radius: var(--yl-radius);
    font: inherit;
    font-weight: 600;
    text-decoration: none;
    cursor: pointer;
}
.login-btn {
    background: var(--yl-fill);
    border: 1px solid var(--yl-fill);
    color: white;
}
.login-btn:hover, .login-btn:focus-visible { background: var(--yl-fill-hover); border-color: var(--yl-fill-hover); color: white; }
.login-btn:disabled { opacity: 0.65; cursor: default; }
.login-btn-outline {
    background: var(--yl-surface);
    border: 1px solid var(--yl-line-strong);
    color: var(--yl-ink);
}
.login-btn-outline:hover { background: var(--yl-surface-alt); color: var(--yl-ink); }

.auth-link {
    padding: 0;
    background: none;
    border: none;
    color: var(--yl-link);
    font: inherit;
    font-size: 13px;
    text-decoration: none;
    cursor: pointer;
}
.auth-link:hover { text-decoration: underline; }
.auth-links { margin-top: 12px; text-align: center; }

/* ── Alerts (tints come from pcc-base .alert-*) ─────────────── */
.login-card .alert { display: block; margin-bottom: 16px; padding: 10px 12px; font-size: 13px; } /* Tabler 1.4 makes .alert a flex row */
.lc-alerts .alert-dismissible { padding-right: 40px; }
.lc-alerts .alert-dismissible .btn-close { padding: 12px; }
.login-card :is(.tfa-alert, .lc-alert):not(.visible) { display: none; } /* page scripts toggle .visible */

/* ── Footer: help note + theme toggle ───────────────────────── */
.lc-footer {
    display: flex;
    flex-direction: column;
    align-items: center;
    gap: 8px;
    margin-top: 24px;
    padding-top: 16px;
    border-top: 1px solid var(--yl-line);
}
.footer-note { margin: 0; font-size: 12px; color: var(--yl-slate); text-align: center; }
.auth-theme-toggle { display: inline-flex; align-items: center; gap: 6px; padding: 2px 4px; }

/* ── Inline 2FA panel on the login card ─────────────────────── */
.lc-2fa-overlay {
    position: absolute;
    inset: 0;
    z-index: 5;
    padding: 32px;
    overflow-y: auto;
    background: var(--yl-surface);
    border-radius: var(--yl-radius-card);
    visibility: hidden;
}
.lc-2fa-overlay.active,
.lc-2fa-overlay.fading-out { visibility: visible; } /* stays up until the redirect lands */
/* Where :has() works the panel replaces the form in flow, so the card grows with it. */
.login-card:has(> .lc-2fa-overlay:is(.active, .fading-out)) > :not(.lc-2fa-overlay) { display: none; }
.login-card:has(> .lc-2fa-overlay:is(.active, .fading-out)) > .lc-2fa-overlay { position: static; padding: 0; }
.lc-header, .lc-body, .lc-footer { transition: opacity 0.2s ease; } /* scripts fade these before the post-2FA redirect */

.tfa-divider { margin: 16px 0; border: 0; border-top: 1px solid var(--yl-line); opacity: 1; }
.tfa-instruction { margin: 0 0 12px; font-size: 13px; color: var(--yl-slate); text-align: center; }

.otp-inputs { display: flex; justify-content: center; gap: 8px; margin-bottom: 16px; }
.otp-digit {
    width: 44px;
    height: 48px;
    background: var(--yl-surface);
    border: 1px solid var(--yl-line-strong);
    border-radius: var(--yl-radius);
    color: var(--yl-ink);
    font-family: var(--yl-font-mono);
    font-size: 20px;
    font-weight: 500;
    text-align: center;
    outline: none;
    -moz-appearance: textfield;
}
.otp-digit::-webkit-outer-spin-button,
.otp-digit::-webkit-inner-spin-button { -webkit-appearance: none; margin: 0; }
.otp-digit.filled { border-color: var(--yl-slate); }
.otp-inputs.error .otp-digit { border-color: var(--yl-danger); background: var(--yl-danger-bg); }

/* ── 2FA setup pages ────────────────────────────────────────── */
.method-card {
    margin-bottom: 16px;
    padding: 16px;
    border: 1px solid var(--yl-line);
    border-radius: var(--yl-radius-card);
}
.method-title {
    display: flex;
    align-items: center;
    gap: 8px;
    margin: 0 0 4px;
    font-size: 16px;
    font-weight: 600;
    color: var(--yl-ink);
}
.method-desc, .step-desc { margin: 0 0 12px; font-size: 13px; color: var(--yl-slate-700); }
.method-card .form-control { margin-bottom: 12px; }

.step-num {
    margin: 0 0 2px;
    font-size: 12px;
    font-weight: 500;
    color: var(--yl-slate);
    text-transform: uppercase;
    letter-spacing: 0.04em;
}
.qr-container { margin: 0 0 16px; text-align: center; }
.qr-container img { padding: 8px; background: white; border: 1px solid var(--yl-line); border-radius: var(--yl-radius); }

.secret-box, .code-item {
    padding: 8px 12px;
    background: var(--yl-surface-alt);
    border: 1px solid var(--yl-line);
    border-radius: var(--yl-radius);
    color: var(--yl-ink);
    font-family: var(--yl-font-mono);
    font-size: 13px;
    letter-spacing: 0.05em;
    text-align: center;
    word-break: break-all;
}
.codes-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; margin-bottom: 16px; }
.check-label { display: flex; align-items: center; gap: 8px; margin: 16px 0; font-size: 13px; color: var(--yl-ink); }
.check-label input[type=checkbox] { width: 16px; height: 16px; flex-shrink: 0; }

/* ── Change password: zxcvbn strength meter ─────────────────── */
.strength-segment { flex: 1; height: 4px; border-radius: 2px; background: var(--yl-line); }

@media (max-width: 480px) {
    body.yl-auth { padding-top: 24px; }
    .login-card, .lc-2fa-overlay { padding: 24px 20px; }
}