/* ASW application styles. Every colour resolves through the variables defined
   in brand.css / light.css / dark.css -- no literals below except overlays. */

*, *::before, *::after { box-sizing: border-box; }

body {
  margin: 0;
  font-family: var(--font-sans);
  background: var(--bg-primary);
  color: var(--text-primary);
  line-height: 1.5;
  -webkit-font-smoothing: antialiased;
}

a { color: var(--text-accent); }

code, .code-inline, .code-block {
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
  font-size: 0.85em;
}

.code-inline {
  padding: 0.1rem 0.35rem;
  border-radius: var(--radius-sm);
  background: var(--bg-accent);
}

.code-block {
  display: block;
  padding: var(--space-xs);
  margin: var(--space-xs) 0 var(--space-sm);
  border: 1px solid var(--border);
  border-radius: var(--radius-sm);
  background: var(--bg-accent);
  word-break: break-all;
}

.muted { color: var(--text-secondary); }
.text-warning { color: var(--sev-2); }
.num { text-align: right; }

/* ------------------------------------------------------------------- shell */

.shell { display: flex; min-height: 100vh; }

.shell__main {
  flex: 1;
  min-width: 0;
  padding: var(--space-lg);
  display: flex;
  flex-direction: column;
  gap: var(--space-md);
}

.page-head {
  display: flex;
  align-items: flex-start;
  justify-content: space-between;
  gap: var(--space-sm);
  flex-wrap: wrap;
}

.page-head__title { margin: 0; font-size: 1.6rem; font-weight: 700; letter-spacing: -0.01em; }
.page-head__subtitle { margin: 0.25rem 0 0; color: var(--text-secondary); }

/* -------------------------------------------------------------------- auth */

/* The auth screens run dark in both themes, for the same reason the sidebar
   does: the logo sits on them full-bleed with no tile behind it. */
.auth {
  --bg-secondary: var(--color-ink-2);
  --bg-primary: var(--color-ink);
  --bg-accent: var(--color-ink-3);
  --text-primary: #F2F2F0;
  --text-secondary: #A8A8A4;
  --text-accent: var(--color-yellow);
  --border: rgba(242, 242, 240, 0.12);
  --border-strong: rgba(242, 242, 240, 0.24);
  --brand-primary: var(--color-yellow);
  --brand-primary-hover: var(--color-yellow-bright);
  --on-brand: var(--color-ink-2);
  --shadow-color: rgba(0, 0, 0, 0.5);

  min-height: 100vh;
  display: grid;
  place-items: center;
  padding: var(--space-md);
  background: var(--color-ink);
  color: var(--text-primary);
}

.auth__card {
  width: 100%;
  max-width: 400px;
  padding: var(--space-lg);
  background: var(--bg-secondary);
  border: 1px solid var(--border);
  border-radius: var(--radius-lg);
  box-shadow: 0 12px 32px var(--shadow-color);
}

.auth__card--wide { max-width: 620px; }

.auth__brand {
  display: flex;
  align-items: center;
  gap: var(--space-xs);
  margin-bottom: var(--space-md);
  font-weight: 700;
  letter-spacing: 0.04em;
}

.auth__mark {
  display: block;
  flex: none;
  width: 40px; height: 40px;
  object-fit: contain;
}

.auth__title { margin: 0 0 0.25rem; font-size: 1.5rem; font-weight: 700; }
.auth__subtitle { margin: 0 0 var(--space-md); color: var(--text-secondary); }
.auth__foot { margin: var(--space-md) 0 0; text-align: center; color: var(--text-secondary); font-size: 0.9rem; }
.auth__error { margin-top: var(--space-xs); color: var(--status-serious); font-size: 0.875rem; }

.auth__divider {
  display: flex;
  align-items: center;
  gap: var(--space-xs);
  margin: var(--space-md) 0;
  color: var(--text-secondary);
  font-size: 0.8rem;
}

.auth__divider::before,
.auth__divider::after {
  content: '';
  flex: 1;
  height: 1px;
  background: var(--border);
}

.error-code {
  margin: 0;
  font-size: 3rem;
  font-weight: 700;
  color: var(--brand-primary);
  line-height: 1;
}

/* ------------------------------------------------------------------- forms */

.form { display: flex; flex-direction: column; gap: var(--space-sm); }
.form--inline-sso { flex-direction: row; gap: var(--space-xs); margin-top: var(--space-xs); }
.form--inline-sso .field__input { flex: 1; }
.inline-form { display: inline; }

.field { display: flex; flex-direction: column; gap: 0.3rem; }
.field[hidden] { display: none; }
.field-row { display: grid; grid-template-columns: 1fr 1fr; gap: var(--space-sm); }

.field__label { font-size: 0.825rem; font-weight: 600; color: var(--text-secondary); }
.field__hint { font-size: 0.75rem; color: var(--text-secondary); font-style: normal; }

.field__input {
  width: 100%;
  padding: 0.6rem 0.75rem;
  font: inherit;
  font-size: 0.925rem;
  color: var(--text-primary);
  background: var(--bg-primary);
  border: 1px solid var(--border-strong);
  border-radius: var(--radius-sm);
  transition: border-color 0.15s ease, box-shadow 0.15s ease;
}

.field__input--compact { padding: 0.35rem 0.5rem; font-size: 0.85rem; }

.field__input--code {
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
  font-size: 1.1rem;
  letter-spacing: 0.15em;
}

.field__input:focus {
  outline: none;
  border-color: var(--brand-primary);
  box-shadow: 0 0 0 3px var(--bg-accent);
}

.field__input:disabled { opacity: 0.65; cursor: not-allowed; }

.checkbox { display: flex; gap: 0.6rem; align-items: flex-start; font-size: 0.9rem; }
.checkbox input { margin-top: 0.25rem; }
.checkbox em { display: block; }

/* ----------------------------------------------------------------- buttons */

.btn {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  gap: 0.5rem;
  padding: 0.625rem 1.1rem;
  font: inherit;
  font-size: 0.9rem;
  font-weight: 600;
  border: 1px solid transparent;
  border-radius: var(--radius-sm);
  cursor: pointer;
  text-decoration: none;
  transition: background-color 0.15s ease, border-color 0.15s ease, opacity 0.15s ease;
}

.btn:focus-visible { outline: 2px solid var(--brand-primary); outline-offset: 2px; }
.btn--block { width: 100%; }
.btn--small { padding: 0.35rem 0.7rem; font-size: 0.8rem; }

.btn--primary { background: var(--brand-primary); color: var(--on-brand, #fff); }
.btn--primary:hover { background: var(--brand-primary-hover); }

.btn--ghost {
  background: transparent;
  color: var(--text-primary);
  border-color: var(--border-strong);
}
.btn--ghost:hover { background: var(--bg-accent); }

.btn--danger { background: var(--status-critical); color: #fff; }
.btn--danger:hover { opacity: 0.9; }

/* ------------------------------------------------------------------- cards */

.card {
  padding: var(--space-md);
  background: var(--bg-secondary);
  border: 1px solid var(--border);
  border-radius: var(--radius-md);
  box-shadow: 0 1px 3px var(--shadow-color);
}

.card--narrow { max-width: 560px; }
.card__title { margin: 0 0 var(--space-sm); font-size: 1.05rem; font-weight: 700; }
/* Groups sections within one card -- quieter than the card's own heading. */
.card__subtitle {
  margin: var(--space-md) 0 var(--space-xs);
  font-size: 0.8rem; font-weight: 700; letter-spacing: 0.04em;
  text-transform: uppercase; color: var(--text-secondary);
}

.grid { display: grid; gap: var(--space-md); }
.grid--2 { grid-template-columns: repeat(auto-fit, minmax(340px, 1fr)); }

.empty { color: var(--text-secondary); font-size: 0.9rem; margin: 0; }

/* ------------------------------------------------------------------- stats */

.stat-row {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(140px, 1fr));
  gap: var(--space-sm);
}

.stat {
  display: flex;
  flex-direction: column;
  gap: 0.2rem;
  padding: var(--space-sm);
  background: var(--bg-secondary);
  border: 1px solid var(--border);
  border-left: 3px solid var(--border-strong);
  border-radius: var(--radius-md);
}

.stat__value { font-size: 1.75rem; font-weight: 700; line-height: 1.1; }
.stat__label { font-size: 0.8rem; color: var(--text-secondary); }

.stat--danger  { border-left-color: var(--status-critical); }
.stat--warning { border-left-color: var(--sev-2); }
.stat--accent  { border-left-color: var(--sev-4); }
.stat--ok      { border-left-color: var(--status-good); }

/* ------------------------------------------------------------------ charts */

.chart-scroll { overflow-x: auto; }
.chart { width: 100%; height: auto; display: block; }
.chart--wide { min-width: 520px; }

/* Severity marks. The ramp is one hue ordered by lightness, so these stay
   distinguishable under colour-vision deficiency and in greyscale print.
   Each class publishes --mark, so the same class paints an SVG mark (fill),
   an HTML stack segment, and its legend swatch (background) alike. */
.chart__bar       { --mark: var(--chart-neutral); }
.chart__bar--1    { --mark: var(--sev-1); }
.chart__bar--2    { --mark: var(--sev-2); }
.chart__bar--3    { --mark: var(--sev-3); }
.chart__bar--4    { --mark: var(--sev-4); }
.chart__bar--5    { --mark: var(--sev-5); }
.chart__bar--good { --mark: var(--status-good); }
.chart__bar--cat1 { --mark: var(--cat-1); }
.chart__bar--cat2 { --mark: var(--cat-2); }

.chart rect[class*="chart__bar"],
.chart path[class*="chart__bar"] { fill: var(--mark); }

.chart rect, .chart path, .chart circle { transition: opacity 0.12s ease; }
.chart rect:hover, .chart path[data-hover]:hover { opacity: 0.78; cursor: default; }

.chart__grid     { stroke: var(--chart-grid); stroke-width: 1; }
.chart__axis     { stroke: var(--chart-axis); stroke-width: 1; }
.chart__label    { fill: var(--text-muted); font-size: 10px; font-family: var(--font-sans); }
.chart__value    { fill: var(--text-secondary); font-size: 10px; font-weight: 600;
                   font-family: var(--font-sans); font-variant-numeric: tabular-nums; }
.chart__area     { fill: var(--chart-accent); opacity: 0.14; }
.chart__line     { fill: none; stroke: var(--chart-accent); stroke-width: 2;
                   stroke-linecap: round; stroke-linejoin: round; }
.chart__dot      { fill: var(--chart-accent); stroke: var(--bg-secondary); stroke-width: 2; }

/* Donut: the 2px surface-coloured ring is the spacer between segments. */
.chart__arc { stroke: var(--bg-secondary); stroke-width: 2; }
.chart__hole-value { fill: var(--text-primary); font-size: 22px; font-weight: 700;
                     font-family: var(--font-sans); }
.chart__hole-label { fill: var(--text-muted); font-size: 9px; font-family: var(--font-sans);
                     text-transform: uppercase; letter-spacing: 0.06em; }

/* Legend -- always present for 2+ series, so identity is never colour-alone. */
.legend {
  display: flex; flex-wrap: wrap; gap: 0.4rem 1rem;
  margin-top: var(--space-sm); padding: 0;
  list-style: none; font-size: 0.775rem; color: var(--text-secondary);
}
.legend__item { display: flex; align-items: center; gap: 0.4rem; }
.legend__swatch { width: 10px; height: 10px; border-radius: 3px; flex: none; background: var(--mark); }
.legend__count { color: var(--text-muted); font-variant-numeric: tabular-nums; }

/* Health mix: one stacked ratio bar, 2px gaps carry the segment boundaries. */
.mixbar { display: flex; gap: 2px; height: 14px; margin-bottom: var(--space-xs); }
.mixbar__seg { height: 100%; background: var(--mark); min-width: 2px; }
.mixbar__seg:first-child { border-radius: 4px 0 0 4px; }
.mixbar__seg:last-child  { border-radius: 0 4px 4px 0; }

.tenant-risk { margin-bottom: var(--space-sm); }
.tenant-risk__head {
  display: flex; justify-content: space-between; align-items: baseline;
  gap: var(--space-xs); margin-bottom: 0.3rem; font-size: 0.8rem;
}
.tenant-risk__name {
  font-weight: 600; color: var(--text-primary);
  overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
}

/* Two columns at desk width. The time-series SVGs are authored at a 640 viewBox,
   so anything narrower than ~420px starts shrinking the axis text illegibly. */
.chart-grid {
  display: grid;
  gap: var(--space-md);
  grid-template-columns: repeat(auto-fit, minmax(420px, 1fr));
  align-items: start;
}
.chart-note { margin: var(--space-xs) 0 0; font-size: 0.775rem; color: var(--text-muted); }

/* ------------------------------------------------------------------ tables */

.table-scroll { overflow-x: auto; }

.table { width: 100%; border-collapse: collapse; font-size: 0.9rem; }

.table th {
  text-align: left;
  padding: 0.5rem 0.75rem;
  font-size: 0.75rem;
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--text-secondary);
  border-bottom: 1px solid var(--border);
  white-space: nowrap;
}

.table td { padding: 0.7rem 0.75rem; border-bottom: 1px solid var(--border); vertical-align: middle; }
.table tr:last-child td { border-bottom: none; }

.table__primary { display: block; font-weight: 600; }
.table__secondary { display: block; font-size: 0.8rem; color: var(--text-secondary); }

/* ------------------------------------------------------------------ badges */

.badge {
  display: inline-block;
  padding: 0.12rem 0.5rem;
  border-radius: 999px;
  font-size: 0.7rem;
  font-weight: 600;
  text-transform: uppercase;
  letter-spacing: 0.04em;
  vertical-align: middle;
}

.badge--muted  { background: var(--bg-accent); color: var(--text-secondary); }
.badge--accent { background: var(--brand-primary); color: var(--on-brand, #fff); }
.badge--ok     { background: var(--bg-accent); color: var(--status-good); }
.badge--danger { background: var(--status-critical); color: #fff; }

.days { font-weight: 700; font-variant-numeric: tabular-nums; }
.days--ok      { color: var(--text-secondary); }
.days--warning { color: var(--sev-2); }
.days--danger  { color: var(--status-critical); }

/* -------------------------------------------------------------- flash/notice */

.flash-stack { display: flex; flex-direction: column; gap: var(--space-xs); }

.flash, .notice {
  padding: 0.7rem 0.9rem;
  border-radius: var(--radius-sm);
  border: 1px solid var(--border-strong);
  font-size: 0.875rem;
  margin-bottom: var(--space-sm);
}

.flash__list { margin: 0; padding-left: 1.1rem; }

.flash--success, .notice--success { background: var(--bg-accent); border-color: var(--status-good); }
.flash--warning, .notice--warning { background: var(--bg-accent); border-color: var(--status-warning); }
.flash--error   { background: var(--bg-accent); border-color: var(--status-critical); color: var(--text-primary); }
.notice--info   { background: var(--bg-accent); border-color: var(--border-strong); }

.status { font-size: 0.9rem; font-weight: 600; margin: 0 0 var(--space-sm); }
.status--ok { color: var(--status-good); }

/* -------------------------------------------------------------------- tabs */

.tabs {
  display: flex;
  gap: 0.25rem;
  border-bottom: 1px solid var(--border);
  flex-wrap: wrap;
}

.tabs__link {
  padding: 0.55rem 0.9rem;
  font-size: 0.9rem;
  font-weight: 600;
  color: var(--text-secondary);
  text-decoration: none;
  border-bottom: 2px solid transparent;
  margin-bottom: -1px;
}

.tabs__link:hover { color: var(--text-primary); }
.tabs__link.is-active { color: var(--text-accent); border-bottom-color: var(--brand-primary); }

/* ------------------------------------------------------------------- lists */

.tenant-list, .passkey-list, .invite-list, .recovery-codes {
  list-style: none; margin: 0; padding: 0;
}

.tenant-list__item, .passkey-list__item, .invite-list__item {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: var(--space-sm);
  padding: 0.7rem 0;
  border-bottom: 1px solid var(--border);
  flex-wrap: wrap;
}

.tenant-list__item { display: block; }
.tenant-list__item:last-child,
.passkey-list__item:last-child,
.invite-list__item:last-child { border-bottom: none; }

.invite-list__actions { display: flex; gap: 0.4rem; flex-wrap: wrap; }

.tenant-list__name { font-weight: 600; margin-right: 0.4rem; }
.tenant-list__meta { font-size: 0.8rem; color: var(--text-secondary); margin-top: 0.15rem; }
.tenant-list__error { font-size: 0.8rem; color: var(--status-critical); margin-top: 0.25rem; }

.passkey-list__name { display: block; font-weight: 600; }
.passkey-list__meta { display: block; font-size: 0.8rem; color: var(--text-secondary); }

.recovery-codes {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
  gap: var(--space-xs);
  margin: var(--space-md) 0;
}

.recovery-codes li {
  padding: 0.5rem;
  text-align: center;
  background: var(--bg-accent);
  border: 1px solid var(--border);
  border-radius: var(--radius-sm);
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
}

/* Printed recovery codes: drop the app chrome, force legible ink on paper. */
@media print {
  .no-print, .leftbar { display: none !important; }

  /* Backgrounds are not printed, so dark theme would put light text on white. */
  body, .auth__card, .auth__title, .auth__subtitle { color: #000; }

  .auth__card, .auth__card--wide {
    box-shadow: none;
    border: none;
    max-width: none;
    margin: 0;
    padding: 0;
  }

  .recovery-codes li {
    background: transparent;
    border: 1px solid #767676;
    color: #000;
  }
}

/* --------------------------------------------------------------- consent UI */

.consent-url {
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
  font-size: 0.75rem;
  resize: vertical;
  word-break: break-all;
}

.copy-status { margin-left: var(--space-xs); font-size: 0.85rem; color: var(--status-good); }

.consent-result {
  display: grid;
  place-items: center;
  width: 56px; height: 56px;
  margin: 0 0 var(--space-sm);
  border-radius: 50%;
  font-size: 1.75rem;
  font-weight: 700;
}

.consent-result--ok   { background: var(--status-good); color: #fff; }
.consent-result--fail { background: var(--status-critical); color: #fff; }

.subheading { margin: var(--space-md) 0 var(--space-xs); font-size: 0.95rem; font-weight: 700; }
.plain-list { margin: 0 0 var(--space-sm); padding-left: 1.1rem; font-size: 0.875rem; }
.plain-list li { margin-bottom: 0.35rem; }

.text-danger { color: var(--status-critical); }
.nowrap { white-space: nowrap; }

/* -------------------------------------------------------------------- misc */

.disclosure { margin-top: var(--space-sm); border-top: 1px solid var(--border); padding-top: var(--space-sm); }
.disclosure summary { cursor: pointer; font-size: 0.9rem; font-weight: 600; }
.disclosure .form { margin-top: var(--space-sm); }

.mfa-setup { display: grid; grid-template-columns: auto 1fr; gap: var(--space-md); align-items: start; }
.mfa-setup__qr { padding: var(--space-xs); background: #fff; border-radius: var(--radius-sm); }

@media (max-width: 720px) {
  .shell__main { padding: var(--space-sm); }
  .field-row, .mfa-setup { grid-template-columns: 1fr; }
  .form--inline-sso { flex-direction: column; }
}