/* auth area styles (see ARCHITECTURE.md: Front end): sign-in, two-step verification, account pages.
   Colours come only from the tokens in acab.css. The sign-in frame's left panel is a charcoal island in
   light mode (ink on bone, inverted) and the raised surface in dark mode; its colours are aliases of tokens,
   set once here and swapped in the two dark-mode blocks at the end. */

/* ---------- the two-panel frame (design/mockups/BrandSignIn.dc.html) ---------- */
.auth-split{
  --aside-bg:var(--ink); --aside-fg:var(--bg); --aside-muted:var(--line); --aside-focus:var(--bg);
  display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);max-width:960px;margin:32px auto 0;
  background:var(--bg);border:1px solid var(--line);border-radius:var(--radius);overflow:hidden;box-shadow:var(--shadow)}
.auth-split.wide-panel{max-width:1040px;grid-template-columns:minmax(0,.75fr) minmax(0,1.25fr)}
.auth-aside{background:var(--aside-bg);color:var(--aside-fg);padding:48px;display:flex;flex-direction:column;justify-content:space-between;gap:40px;min-height:560px}
.auth-aside a{color:inherit;text-decoration-thickness:1px}
.auth-aside a:hover{text-decoration-thickness:2px}
.auth-aside :focus-visible{outline-color:var(--aside-focus)}
.auth-hero{font-family:var(--display);font-weight:700;font-size:clamp(32px,4.4vw,44px);line-height:1.05;letter-spacing:-.01em;color:inherit;margin:0}
.auth-aside-lede{margin-top:12px;color:var(--aside-muted);max-width:34ch}
.auth-aside-foot{display:flex;align-items:center;gap:20px}
.auth-aside-foot p{flex:1;font-size:14px;color:var(--aside-muted)}
.auth-aside-foot a{color:var(--aside-fg)}

/* the full seal with its ring of words */
.auth-bigseal{flex:none;display:block;width:120px;height:120px}
.auth-bigseal .o{fill:none;stroke:var(--aside-fg);stroke-width:5}
.auth-bigseal .t{fill:var(--aside-fg);font-family:var(--display);font-weight:800;font-size:16px;letter-spacing:.6px;font-variation-settings:'SOFT' 100,'WONK' 1}
.auth-bigseal .t.wide{letter-spacing:1.4px}
.auth-bigseal .d,.auth-bigseal .dot{fill:var(--rose);fill:color-mix(in srgb,var(--rose) 60%,var(--aside-fg))}
.auth-bigseal .peak{fill:none;stroke:var(--rose);stroke:color-mix(in srgb,var(--rose) 60%,var(--aside-fg));stroke-width:6;stroke-linejoin:round}
.auth-bigseal .ring{fill:none;stroke:var(--aside-fg);stroke-width:6}

/* the task side */
.auth-panel{padding:48px;display:flex;flex-direction:column;justify-content:center;gap:14px;min-width:0}
.auth-panel p{overflow-wrap:anywhere}
.auth-panel-title{color:var(--accent);font-size:26px;margin-bottom:6px}
.auth-panel-h1{font-size:clamp(28px,3.6vw,36px);line-height:1.08;margin-bottom:4px}
.auth-panel .label{margin-bottom:-6px}
.auth-panel .btn{min-height:48px}
.auth-sso{display:flex;flex-direction:column;gap:12px}
.btn.sso{width:100%;font-weight:700;background:var(--surface);color:var(--accent);border-color:var(--accent);white-space:normal;text-align:center}
.btn.sso:hover{background:var(--tint)}
.auth-or{display:flex;align-items:center;gap:12px;margin:6px 0}
.auth-or span[aria-hidden]{flex:1;height:1px;background:var(--line)}
.auth-or .label{font-size:13px;text-transform:none;letter-spacing:0}
.auth-form{display:flex;flex-direction:column;gap:12px}
.auth-form input[type=email],.auth-form input[type=password],.auth-form input[type=text]{background:var(--surface);min-height:48px}
.field-error{font-size:14px;color:var(--warn);font-weight:600}
.auth-foot{font-size:13px;color:var(--muted)}
.auth-email{overflow-wrap:anywhere}
.auth-help{border-top:1px solid var(--line);padding-top:14px}
.auth-signout{border-top:1px solid var(--line);padding-top:14px;margin-top:6px}
/* "Skip for now" under two-step setup: set apart from the setup itself, and quieter */
.auth-skip{border-top:1px solid var(--line);padding-top:18px;margin-top:8px;gap:8px}
.auth-skip-title{margin:0;font-size:16px;line-height:1.3}
.auth-details{border:1px solid var(--line);border-radius:var(--radius);background:var(--surface)}
.auth-details summary{display:flex;align-items:center;min-height:44px;padding:0 14px;cursor:pointer;font-weight:600;color:var(--link)}
.auth-details[open] summary{border-bottom:1px solid var(--line)}
.auth-details .auth-form{padding:14px}

/* ---------- authenticator set-up ---------- */
.enrol-steps{margin:4px 0 0;padding-left:22px;display:flex;flex-direction:column;gap:20px}
.enrol-steps li::marker{font-weight:700;color:var(--accent)}
.enrol-steps h3{font-size:16px;margin-bottom:4px}
.enrol-qr{display:flex;flex-wrap:wrap;gap:16px;align-items:flex-start;margin-top:8px}
.qr{flex:none;width:184px;padding:6px;background:var(--surface);border:1px solid var(--line);border-radius:var(--radius)}
.qr svg{display:block;width:100%;height:auto}
.qr .qr-line{stroke:var(--ink)}
.enrol-key{flex:1;min-width:180px;display:flex;flex-direction:column;gap:6px}
.secret-key{font-family:var(--mono);font-size:15px;letter-spacing:.04em;word-spacing:.2em;background:var(--tint);padding:8px 10px;border-radius:var(--radius);overflow-wrap:anywhere;user-select:all}
.code-input{font-family:var(--mono);font-size:22px!important;letter-spacing:.2em;max-width:12ch}

/* ---------- recovery codes ---------- */
.codes{list-style:none;margin:0;padding:16px;display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px 16px;background:var(--tint);border-radius:var(--radius)}
.codes code{font-family:var(--mono);font-size:17px;letter-spacing:.03em}
.codes-actions{min-height:44px}
.codes-actions .btn.small{min-height:44px}

/* ---------- your account / sign-in and security ---------- */
.account-app .page-head{padding-block:0 4px}
.account-who{display:flex;flex-direction:column;padding:0 12px 10px;overflow-wrap:anywhere}
.sidenav-form{padding:12px}
.account-app .btn.small{min-height:44px}
.account-app .linkbtn{min-height:44px;display:inline-flex;align-items:center}
.account-main{min-width:0;max-width:960px}   /* forms keep a working width on a wide monitor */
.account-confirm{display:flex;flex-wrap:wrap;gap:12px;align-items:center;justify-content:space-between}
.account-confirm .btn{background:var(--surface)}
.readonly{display:flex;flex-wrap:wrap;gap:8px;align-items:center;min-height:46px;overflow-wrap:anywhere}
.plain-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column}
.list-row{display:flex;flex-wrap:wrap;gap:8px 16px;align-items:center;justify-content:space-between;padding:12px 0;border-bottom:1px solid var(--line)}
.list-row:first-child{padding-top:0}
.list-row:last-child{border-bottom:0;padding-bottom:0}
.list-main{display:flex;flex-direction:column;min-width:0;overflow-wrap:anywhere}
.danger-zone{border-color:var(--warn)}
.danger-zone h2{color:var(--warn)}
.reauth p{max-width:none}
@media (max-width:860px){.account-who,.sidenav-form{display:none}}

/* ---------- small screens ---------- */
@media (max-width:760px){
  /* the left panel splits around the form: headline above, the questionnaire note below */
  .auth-split,.auth-split.wide-panel{display:flex;flex-direction:column;margin-top:16px}
  .auth-aside{display:contents}
  .auth-aside-main{order:1;background:var(--aside-bg);color:var(--aside-fg);padding:24px 20px}
  .auth-panel{order:2;padding:28px 20px}
  .auth-aside-foot{order:3;background:var(--aside-bg);color:var(--aside-fg);padding:20px}
  .auth-bigseal{display:none}
  .auth-hero{font-size:32px}
  .auth-split.minor .auth-aside-main,.auth-split.minor .auth-aside-foot{display:none}
  .codes{grid-template-columns:1fr}
  .qr{width:168px}
}

/* ---------- dark mode: the left panel becomes the raised surface; QR codes stay dark-on-light ---------- */
:root[data-theme="dark"] .auth-split{--aside-bg:var(--surface);--aside-fg:var(--ink);--aside-muted:var(--muted);--aside-focus:var(--focus)}
:root[data-theme="dark"] .auth-bigseal .d,:root[data-theme="dark"] .auth-bigseal .dot{fill:var(--rose)}
:root[data-theme="dark"] .auth-bigseal .peak{stroke:var(--rose)}
:root[data-theme="dark"] .qr{background:var(--ink);border-color:var(--ink)}
:root[data-theme="dark"] .qr .qr-line{stroke:var(--bg)}

/* ---------- printing recovery codes ---------- */
@media print{
  .site-header,.site-footer,.skip-link,.auth-aside,.codes-actions,.auth-panel .btn{display:none!important}
  .auth-split{display:block;border:0;box-shadow:none}
  .codes{background:none;border:1px solid}
}