/* ==========================================================================
   lean-auth — SemanticWorks corporate identity
   Follows: corporate-identity/guidelines.md + colors/palette.css
   Icons: Material Symbols Outlined (self-hosted, see icons.md)
   ========================================================================== */

/* --- Source Sans 3 (self-hosted for DSGVO compliance) --- */
@font-face {
  font-family: "Source Sans 3";
  src: url("/auth/static/fonts/SourceSans3-VF.woff2") format("woff2");
  font-weight: 200 900;
  font-style: normal;
  font-display: swap;
}

@font-face {
  font-family: "Source Sans 3";
  src: url("/auth/static/fonts/SourceSans3-VF-Italic.woff2") format("woff2");
  font-weight: 200 900;
  font-style: italic;
  font-display: swap;
}

/* --- Material Symbols Outlined (self-hosted, no CDN — GDPR) --- */
@font-face {
  font-family: "Material Symbols Outlined";
  font-style: normal;
  font-weight: 100 700;
  src: url("/auth/static/MaterialSymbolsOutlined.woff2") format("woff2");
  font-display: block;
}

.material-symbols-outlined {
  font-family: "Material Symbols Outlined";
  font-weight: normal;
  font-style: normal;
  font-size: 24px;
  line-height: 1;
  letter-spacing: normal;
  text-transform: none;
  display: inline-block;
  white-space: nowrap;
  word-wrap: normal;
  direction: ltr;
  -webkit-font-feature-settings: "liga";
  font-feature-settings: "liga";
  -webkit-font-smoothing: antialiased;
  font-variation-settings:
    "FILL" 0,
    "wght" 300,
    "GRAD" 0,
    "opsz" 24;
}

/* --- Design tokens (subset from palette.css) --- */
:root {
  --color-navy-500: #000080;
  --color-navy-400: #2E2E9C;
  --color-navy-50: #E8EAF6;
  --color-blue-500: #256dbd;
  --color-blue-600: #1E5DA6;
  --color-blue-700: #174A88;
  --color-teal-400: #3ab0a2;
  --color-teal-600: #247B6F;
  --color-neutral-50: #F8F9FA;
  --color-neutral-100: #F0F1F4;
  --color-neutral-200: #E1E3E8;
  --color-neutral-300: #C8CCD3;
  --color-neutral-500: #6E737D;
  --color-neutral-600: #555B65;
  --color-neutral-900: #1A1A2E;
  --color-error: #C4280D;
  --color-error-light: #FDDDD6;
  --color-success: #1A7F37;
  --color-success-light: #DAFBE1;

  --font-family: "Source Sans 3", "Source Sans Pro", -apple-system,
    BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
  --border-radius: 8px;
  --transition-hover: 200ms ease-out;
}

/* --- Reset --- */
*,
*::before,
*::after {
  box-sizing: border-box;
  margin: 0;
  padding: 0;
}

/* --- Base --- */
body {
  font-family: var(--font-family);
  font-size: 1rem;
  line-height: 1.6;
  color: var(--color-neutral-900);
  background: var(--color-neutral-50);
  -webkit-font-smoothing: antialiased;
}

/* --- Utility --- */
.hidden {
  display: none !important;
}

/* ==========================================================================
   App shell — shared header, nav, footer (base.html)
   ========================================================================== */

.app-shell {
  min-height: 100vh;
  display: flex;
  flex-direction: column;
}

/* --- App header --- */
.app-header {
  background: var(--color-navy-500);
  color: #FFFFFF;
  padding: 0 24px;
}

.app-header-inner {
  max-width: 960px;
  margin: 0 auto;
  display: flex;
  align-items: center;
  gap: 32px;
  height: 56px;
}

.app-logo-link {
  display: flex;
  align-items: center;
  flex-shrink: 0;
}

.app-logo {
  height: 28px;
  width: auto;
  filter: brightness(0) invert(1);
}

/* --- App navigation --- */
.app-nav {
  display: flex;
  align-items: center;
  gap: 4px;
}

.app-nav-link {
  padding: 6px 14px;
  font-size: 0.875rem;
  font-weight: 600;
  color: rgba(255, 255, 255, 0.75);
  text-decoration: none;
  border-radius: var(--border-radius);
  transition: color var(--transition-hover), background var(--transition-hover);
  white-space: nowrap;
}

.app-nav-link:hover {
  color: #FFFFFF;
  background: rgba(255, 255, 255, 0.1);
}

.app-nav-link.active {
  color: #FFFFFF;
  background: rgba(255, 255, 255, 0.15);
}

.app-nav-link.disabled {
  opacity: 0.45;
  cursor: default;
  pointer-events: none;
}

/* --- App main --- */
.app-main {
  flex: 1;
}

/* --- App footer --- */
.app-footer {
  padding: 16px 24px;
  font-size: 0.75rem;
  color: var(--color-neutral-500);
  text-align: center;
}

/* ==========================================================================
   Login / Logout — centered card layout (no nav)
   ========================================================================== */

.login-container {
  min-height: 100vh;
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  padding: 24px 16px;
}

.login-card {
  width: 100%;
  max-width: 400px;
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-200);
  border-radius: var(--border-radius);
  padding: 48px 32px 32px;
  position: relative;
}

/* --- Login header --- */
.login-header {
  text-align: center;
  margin-bottom: 32px;
}

.login-logo {
  height: 48px;
  width: auto;
  margin-bottom: 16px;
}

.login-header h1 {
  font-size: 1.5rem;
  font-weight: 700;
  color: var(--color-navy-500);
  letter-spacing: -0.01em;
  line-height: 1.3;
}

/* --- Steps (login flow) --- */
.step {
  display: none;
}

.step.active {
  display: block;
}

.step-info {
  font-size: 0.875rem;
  color: var(--color-neutral-600);
  margin-bottom: 24px;
  line-height: 1.5;
}

.step-info-center {
  text-align: center;
}

/* --- Forms --- */
label {
  display: block;
  font-size: 0.875rem;
  font-weight: 600;
  color: var(--color-neutral-900);
  margin-bottom: 6px;
}

input[type="email"],
input[type="text"] {
  display: block;
  width: 100%;
  padding: 10px 12px;
  font-family: var(--font-family);
  font-size: 1rem;
  color: var(--color-neutral-900);
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-300);
  border-radius: var(--border-radius);
  outline: none;
  transition: border-color var(--transition-hover);
}

input:focus {
  border-color: var(--color-blue-500);
  box-shadow: 0 0 0 2px rgba(37, 109, 189, 0.15);
}

input::placeholder {
  color: var(--color-neutral-500);
}

/* OTP code input — monospaced, larger, centered */
#otp-code {
  font-family: "SF Mono", "Fira Code", "Consolas", monospace;
  font-size: 1.5rem;
  text-align: center;
  letter-spacing: 0.3em;
  padding: 12px;
}

/* --- Buttons --- */
.btn-primary {
  display: block;
  width: 100%;
  padding: 12px;
  margin-top: 16px;
  font-family: var(--font-family);
  font-size: 1rem;
  font-weight: 600;
  color: #FFFFFF;
  background: var(--color-navy-500);
  border: none;
  border-radius: var(--border-radius);
  cursor: pointer;
  transition: background var(--transition-hover);
  min-height: 48px;
}

.btn-primary:hover {
  background: var(--color-navy-400);
}

.btn-primary:focus-visible {
  outline: 2px solid var(--color-blue-500);
  outline-offset: 2px;
}

.btn-primary:disabled {
  background: var(--color-neutral-300);
  cursor: not-allowed;
}

.btn-link {
  display: block;
  width: 100%;
  margin-top: 12px;
  padding: 8px;
  font-family: var(--font-family);
  font-size: 0.875rem;
  font-weight: 400;
  color: var(--color-blue-600);
  background: none;
  border: none;
  cursor: pointer;
  text-align: center;
  transition: color var(--transition-hover);
}

.btn-link:hover {
  color: var(--color-blue-700);
  text-decoration: underline;
}

/* --- Passkey prompt --- */
.passkey-prompt-icon {
  text-align: center;
  margin-bottom: 12px;
}

.passkey-prompt-icon .material-symbols-outlined {
  font-size: 48px;
  color: var(--color-navy-500);
  font-variation-settings:
    "FILL" 0,
    "wght" 300,
    "GRAD" 0,
    "opsz" 48;
}

.step h2 {
  font-size: 1.25rem;
  font-weight: 600;
  color: var(--color-navy-500);
  text-align: center;
  margin-bottom: 8px;
}

/* --- Banners --- */
.error {
  margin-top: 16px;
  padding: 12px;
  font-size: 0.875rem;
  color: var(--color-error);
  background: var(--color-error-light);
  border-radius: var(--border-radius);
  line-height: 1.5;
}

.error-banner {
  margin-bottom: 16px;
  padding: 12px;
  font-size: 0.875rem;
  color: var(--color-error);
  background: var(--color-error-light);
  border-radius: var(--border-radius);
  line-height: 1.5;
}

.success-banner {
  margin-bottom: 16px;
  padding: 12px;
  font-size: 0.875rem;
  color: var(--color-success);
  background: var(--color-success-light);
  border-radius: var(--border-radius);
  line-height: 1.5;
}

/* --- Linux note --- */
.note {
  margin-top: 16px;
  padding: 12px;
  font-size: 0.8125rem;
  color: var(--color-neutral-600);
  background: var(--color-neutral-100);
  border-radius: var(--border-radius);
  line-height: 1.5;
}

.note a {
  color: var(--color-blue-600);
  text-decoration: none;
}

.note a:hover {
  text-decoration: underline;
}

/* --- Login footer --- */
.login-footer {
  margin-top: 24px;
  font-size: 0.75rem;
  color: var(--color-neutral-500);
  text-align: center;
}

/* --- Loading --- */
.loading {
  display: flex;
  justify-content: center;
  padding: 16px 0;
}

.spinner {
  width: 24px;
  height: 24px;
  border: 3px solid var(--color-neutral-200);
  border-top-color: var(--color-navy-500);
  border-radius: 50%;
  animation: spin 0.6s linear infinite;
}

@keyframes spin {
  to { transform: rotate(360deg); }
}

/* ==========================================================================
   Page layout — authenticated pages (profile, tokens, passkeys, sessions)
   ========================================================================== */

.page-container {
  display: flex;
  flex-direction: column;
  align-items: center;
  padding: 32px 16px;
}

.page-card {
  width: 100%;
  max-width: 480px;
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-200);
  border-radius: var(--border-radius);
  padding: 32px;
}

.page-card-wide {
  max-width: 640px;
}

.page-header {
  margin-bottom: 24px;
}

.page-header h1 {
  font-size: 1.5rem;
  font-weight: 700;
  color: var(--color-navy-500);
  letter-spacing: -0.01em;
  line-height: 1.3;
}

.page-subtitle {
  font-size: 0.875rem;
  color: var(--color-neutral-600);
  margin-top: 8px;
}

/* ==========================================================================
   Profile page — /auth/profile
   ========================================================================== */

.profile-section {
  margin-bottom: 24px;
}

.profile-section h2 {
  font-size: 1rem;
  font-weight: 700;
  color: var(--color-navy-500);
  margin-bottom: 12px;
  padding-bottom: 8px;
  border-bottom: 1px solid var(--color-neutral-200);
}

.profile-field {
  margin-bottom: 16px;
}

.profile-field label {
  display: block;
  font-size: 0.8125rem;
  font-weight: 600;
  color: var(--color-neutral-600);
  margin-bottom: 4px;
  text-transform: uppercase;
  letter-spacing: 0.04em;
}

.profile-field .field-value {
  font-size: 1rem;
  color: var(--color-neutral-900);
  padding: 8px 0;
}

.profile-field input[type="text"] {
  display: block;
  width: 100%;
  padding: 10px 12px;
  font-family: var(--font-family);
  font-size: 1rem;
  color: var(--color-neutral-900);
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-300);
  border-radius: var(--border-radius);
  outline: none;
  transition: border-color var(--transition-hover);
}

.profile-field input[type="text"]:focus {
  border-color: var(--color-blue-500);
  box-shadow: 0 0 0 2px rgba(37, 109, 189, 0.15);
}

/* Organizations list */
.org-list {
  list-style: none;
  padding: 0;
  margin: 0;
}

.org-item {
  display: flex;
  justify-content: space-between;
  align-items: center;
  padding: 10px 12px;
  background: var(--color-neutral-50);
  border: 1px solid var(--color-neutral-200);
  border-radius: var(--border-radius);
  margin-bottom: 8px;
}

.org-item:last-child {
  margin-bottom: 0;
}

.org-name {
  font-weight: 600;
  color: var(--color-neutral-900);
}

.org-roles {
  display: flex;
  gap: 6px;
}

.role-badge {
  display: inline-block;
  padding: 2px 8px;
  font-size: 0.75rem;
  font-weight: 600;
  border-radius: 4px;
  text-transform: uppercase;
  letter-spacing: 0.03em;
}

.role-badge.admin {
  background: var(--color-navy-50);
  color: var(--color-navy-500);
}

.role-badge.editor {
  background: #E0F2FE;
  color: var(--color-blue-600);
}

.role-badge.viewer {
  background: var(--color-neutral-100);
  color: var(--color-neutral-600);
}

.no-orgs {
  font-size: 0.875rem;
  color: var(--color-neutral-500);
  font-style: italic;
  padding: 8px 0;
}

/* Profile actions (sign out link) */
.profile-actions {
  margin-top: 24px;
  padding-top: 16px;
  border-top: 1px solid var(--color-neutral-200);
  text-align: center;
}

.profile-actions a {
  color: var(--color-blue-600);
  font-size: 0.875rem;
  text-decoration: none;
}

.profile-actions a:hover {
  text-decoration: underline;
}

/* ==========================================================================
   Token management page — /auth/tokens
   ========================================================================== */

.token-created-banner {
  margin-bottom: 24px;
  padding: 16px;
  background: var(--color-success-light);
  border: 1px solid var(--color-success);
  border-radius: var(--border-radius);
}

.token-created-header {
  color: var(--color-success);
  margin-bottom: 8px;
}

.token-created-warning {
  font-size: 0.875rem;
  color: var(--color-neutral-900);
  font-weight: 600;
  margin-bottom: 12px;
}

.token-display {
  display: flex;
  align-items: center;
  gap: 8px;
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-300);
  border-radius: var(--border-radius);
  padding: 10px 12px;
}

.token-display code {
  flex: 1;
  font-family: "SF Mono", "Fira Code", "Consolas", monospace;
  font-size: 0.8125rem;
  word-break: break-all;
  color: var(--color-neutral-900);
}

.btn-copy {
  flex-shrink: 0;
  padding: 6px 12px;
  font-family: var(--font-family);
  font-size: 0.8125rem;
  font-weight: 600;
  color: var(--color-blue-600);
  background: var(--color-neutral-50);
  border: 1px solid var(--color-neutral-300);
  border-radius: var(--border-radius);
  cursor: pointer;
  transition: background var(--transition-hover);
}

.btn-copy:hover {
  background: var(--color-neutral-100);
}

.create-token-section {
  margin-bottom: 24px;
}

.create-toggle {
  cursor: pointer;
  font-weight: 600;
  list-style: none;
  padding: 12px 0;
}

.create-toggle::-webkit-details-marker {
  display: none;
}

.create-token-form {
  margin-top: 16px;
}

.form-group {
  margin-bottom: 16px;
}

.scope-group {
  border: none;
  padding: 0;
}

.scope-group legend {
  font-size: 0.875rem;
  font-weight: 600;
  color: var(--color-neutral-900);
  margin-bottom: 8px;
}

.scope-checkboxes {
  display: flex;
  flex-wrap: wrap;
  gap: 8px 16px;
}

.checkbox-label {
  display: flex;
  align-items: center;
  gap: 6px;
  font-size: 0.875rem;
  font-weight: 400;
  cursor: pointer;
}

.checkbox-label input[type="checkbox"] {
  width: 16px;
  height: 16px;
  accent-color: var(--color-navy-500);
}

select {
  display: block;
  width: 100%;
  padding: 10px 12px;
  font-family: var(--font-family);
  font-size: 1rem;
  color: var(--color-neutral-900);
  background: #FFFFFF;
  border: 1px solid var(--color-neutral-300);
  border-radius: var(--border-radius);
  outline: none;
  transition: border-color var(--transition-hover);
}

select:focus {
  border-color: var(--color-blue-500);
  box-shadow: 0 0 0 2px rgba(37, 109, 189, 0.15);
}

.token-list-section {
  margin-top: 24px;
}

.token-list-section h2 {
  font-size: 1.125rem;
  font-weight: 700;
  color: var(--color-navy-500);
  margin-bottom: 16px;
  padding-bottom: 8px;
  border-bottom: 1px solid var(--color-neutral-200);
}

.token-table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.875rem;
}

.token-table thead th {
  text-align: left;
  padding: 8px 10px;
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--color-neutral-600);
  text-transform: uppercase;
  letter-spacing: 0.04em;
  border-bottom: 2px solid var(--color-neutral-200);
}

.token-table tbody td {
  padding: 10px;
  border-bottom: 1px solid var(--color-neutral-200);
  vertical-align: middle;
}

.token-revoked td {
  opacity: 0.55;
}

.token-name-cell {
  font-weight: 600;
  color: var(--color-neutral-900);
}

.token-scopes-cell {
  display: flex;
  flex-wrap: wrap;
  gap: 4px;
}

.scope-badge {
  display: inline-block;
  padding: 2px 8px;
  font-size: 0.6875rem;
  font-weight: 600;
  color: var(--color-blue-600);
  background: var(--color-navy-50);
  border-radius: 4px;
  letter-spacing: 0.02em;
}

.scope-none {
  font-size: 0.75rem;
  color: var(--color-neutral-500);
  font-style: italic;
}

.token-date-cell {
  font-size: 0.8125rem;
  color: var(--color-neutral-600);
  white-space: nowrap;
}

.token-status-cell {
  white-space: nowrap;
}

.status-active {
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--color-success);
}

.status-revoked {
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--color-error);
}

.token-action-cell {
  text-align: right;
}

.btn-revoke {
  padding: 4px 10px;
  font-family: var(--font-family);
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--color-error);
  background: transparent;
  border: 1px solid var(--color-error);
  border-radius: var(--border-radius);
  cursor: pointer;
  transition: background var(--transition-hover), color var(--transition-hover);
}

.btn-revoke:hover {
  background: var(--color-error);
  color: #FFFFFF;
}

.revoke-form {
  display: inline;
}

.empty-state {
  font-size: 0.875rem;
  color: var(--color-neutral-500);
  font-style: italic;
  padding: 16px 0;
}

.page-nav {
  margin-top: 24px;
  padding-top: 16px;
  border-top: 1px solid var(--color-neutral-200);
  text-align: center;
}

/* --- Secondary button (outlined) --- */
.btn-secondary {
  display: block;
  width: 100%;
  padding: 12px;
  border: 2px solid var(--color-navy-500);
  background: transparent;
  color: var(--color-navy-500);
  border-radius: var(--border-radius);
  font-family: var(--font-family);
  font-size: 1rem;
  font-weight: 600;
  cursor: pointer;
  margin-top: 8px;
  text-align: center;
  text-decoration: none;
  min-height: 48px;
  transition: background var(--transition-hover);
}

.btn-secondary:hover {
  background: rgba(0, 0, 128, 0.05);
}

.btn-secondary:focus-visible {
  outline: 2px solid var(--color-blue-500);
  outline-offset: 2px;
}

/* --- Back-to-app link (profile page) --- */
.back-to-app {
  margin-bottom: 16px;
}
.back-to-app .btn-secondary {
  display: inline-block;
  width: auto;
  padding: 8px 16px;
  font-size: 0.875rem;
  min-height: auto;
  margin-top: 0;
}

/* --- Skip-to-content link (accessibility) --- */
.skip-link {
  position: absolute;
  left: -9999px;
  z-index: 999;
  font-family: var(--font-family);
  font-size: 0.875rem;
}

.skip-link:focus {
  left: 50%;
  transform: translateX(-50%);
  top: 8px;
  background: var(--color-navy-500);
  color: #FFFFFF;
  padding: 8px 16px;
  border-radius: 4px;
  text-decoration: none;
}

/* --- Focus-visible on checkboxes and nav links --- */
input[type="checkbox"]:focus-visible {
  outline: 2px solid var(--color-blue-500);
  outline-offset: 2px;
}

.app-nav-link:focus-visible {
  outline: 2px solid var(--color-blue-500);
  outline-offset: 2px;
}

/* --- Scope descriptions --- */
.scope-description {
  font-size: 0.75rem;
  color: var(--color-neutral-500);
  margin-left: 2px;
}

/* --- Read-only field indicator --- */
.field-readonly {
  display: inline-block;
  padding: 8px 12px;
  font-size: 1rem;
  color: var(--color-neutral-900);
  background: var(--color-neutral-100);
  border: 1px solid var(--color-neutral-200);
  border-radius: var(--border-radius);
  width: 100%;
}

.field-readonly-hint {
  font-size: 0.75rem;
  color: var(--color-neutral-500);
  margin-left: 4px;
  font-weight: 400;
}

.profile-field-label {
  display: block;
  font-size: 0.8125rem;
  font-weight: 600;
  color: var(--color-neutral-600);
  margin-bottom: 4px;
  text-transform: uppercase;
  letter-spacing: 0.04em;
}

/* --- Coming soon badge --- */
.badge-coming-soon {
  display: inline-block;
  padding: 4px 10px;
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--color-neutral-600);
  background: var(--color-neutral-100);
  border: 1px solid var(--color-neutral-200);
  border-radius: 12px;
  vertical-align: middle;
  margin-left: 8px;
}

.coming-soon-card {
  text-align: center;
  padding: 32px 16px;
  color: var(--color-neutral-500);
}

.coming-soon-card p {
  margin-top: 8px;
  font-size: 0.875rem;
  line-height: 1.5;
}

/* --- Details toggle chevron --- */
.create-toggle::before {
  content: "";
  display: inline-block;
  width: 8px;
  height: 8px;
  border-right: 2px solid var(--color-blue-600);
  border-bottom: 2px solid var(--color-blue-600);
  transform: rotate(-45deg);
  margin-right: 8px;
  transition: transform var(--transition-hover);
  vertical-align: middle;
}

details[open] > .create-toggle::before {
  transform: rotate(45deg);
}

/* --- Min-width on expiry select --- */
#ttl-select {
  min-width: 120px;
}

/* --- Scope hint --- */
.scope-hint {
  font-size: 0.8125rem;
  color: var(--color-neutral-500);
  margin-top: 4px;
}

/* --- Sign-out nav link --- */
.app-nav-right {
  margin-left: auto;
}

.app-nav-signout {
  padding: 6px 14px;
  font-size: 0.8125rem;
  font-weight: 600;
  color: rgba(255, 255, 255, 0.65);
  text-decoration: none;
  border-radius: var(--border-radius);
  transition: color var(--transition-hover), background var(--transition-hover);
  white-space: nowrap;
}

.app-nav-signout:hover {
  color: #FFFFFF;
  background: rgba(255, 255, 255, 0.1);
}

.app-nav-signout:focus-visible {
  outline: 2px solid var(--color-blue-500);
  outline-offset: 2px;
}

/* --- Passkey SVG icon --- */
.passkey-prompt-icon svg {
  color: var(--color-navy-500);
}

/* ==========================================================================
   Responsive
   ========================================================================== */

@media (max-width: 480px) {
  .login-card {
    padding: 32px 20px 24px;
  }

  .page-card {
    padding: 24px 16px;
  }

  .token-table {
    font-size: 0.75rem;
  }

  .app-header-inner {
    gap: 16px;
  }

  .app-nav {
    gap: 2px;
  }

  .app-nav-link {
    padding: 6px 8px;
    font-size: 0.8125rem;
  }
}
