/* =====================================================
   auth.css — Layout y overrides minimos para pantallas auth.

   Reglas:
   - Reusar tokens y clases globales (components/input.css,
     components/buttons.css, components/cards.css,
     components/forms.css) y main.css.
   - Evitar reglas que dupliquen lo que ya hacen los componentes.
   - Solo estilos de layout (centrado vertical, padding, mobile) y
     overrides minimos para inputs especificos de auth (password toggle,
     estado de error, OTP).
   - Sin reglas de marca-firma ajena al sistema.
   ===================================================== */

body.layout-auth .cd-main-content {
	grid-template-columns: 1fr;
	min-height: 100vh;
	height: auto;
}

body.layout-auth .cd-content-wrapper {
	min-height: 100vh;
	display: flex;
	flex-direction: column;
}

body.layout-auth .main-section {
	flex: 1 1 auto;
	display: flex;
	align-items: center;
	justify-content: center;
	padding: clamp(.75rem, 2.2vh, 1.6rem);
}

.auth-center {
	display: flex;
	justify-content: center;
	width: 100%;
	position: relative;
}

.auth-card {
	width: 100%;
	max-width: 480px;
	margin: 1rem auto;
	display: flex;
	flex-direction: column;
	gap: .65rem;
}

.auth-card--mfa {
	max-width: 460px;
}

.auth-card--login {
	max-width: 560px;
}

.auth-card.auth-card--login .field {
	display: flex;
	flex-direction: column;
	align-items: stretch;
}

.auth-card.auth-card--login .field label {
	margin: 0;
}

.auth-card.auth-card--login .field .pw-wrap input {
	width: 100%;
}

.auth-title {
	margin-top: 0;
	display: flex;
	align-items: center;
	gap: .5rem;
	font-size: var(--font-size-xl);
}

.auth-subtitle {
	margin: 0 0 .25rem;
	font-size: var(--font-size-sm);
	color: var(--color-muted);
}

.auth-subtitle strong { color: var(--color-text); font-weight: 600; }

/* Apilado vertical por defecto: el sistema global ya hace el resto
   para inputs (componentes/input.css). Solo forzamos columna en mobile. */
.auth-card .field {
	display: flex;
	flex-direction: column;
	gap: .35rem;
	margin: .5rem 0;
}
.auth-card .field label {
	font-weight: 600;
	color: var(--color-text);
	line-height: 1.2;
	font-size: var(--font-size-md);
}
.auth-card .field .ui-input,
.auth-card .field input[type="text"],
.auth-card .field input[type="password"],
.auth-card .field input[type="email"] {
	width: 100%;
}

/* components/input.css no cubre password; auth lo necesita para login y
   cambio de contrasena, especialmente tras envolverlo con .pw-wrap. */
.auth-card input[type="password"] {
	box-sizing: border-box;
	height: var(--ui-control-height);
	padding: 0 .9rem;
	font-family: var(--font-stack);
	font-size: var(--font-size-base);
	line-height: var(--line-height-tight);
	font-weight: 400;
	border-radius: var(--ui-control-radius);
	border: 1px solid var(--ui-combo-border);
	background: var(--ui-combo-bg);
	color: var(--ui-combo-text);
	transition: box-shadow .18s var(--ease-standard), border-color .18s var(--ease-standard);
}

.auth-card input[type="password"]:focus {
	outline: none;
	box-shadow: 0 0 0 3px color-mix(in srgb, var(--color-accent) 12%, transparent);
	border-color: color-mix(in srgb, var(--color-accent) 24%, var(--ui-combo-border));
}

/* Help text bajo nueva contraseña */
.auth-card .ui-help {
	font-size: var(--font-size-sm);
	color: var(--color-muted);
	margin-top: .25rem;
	line-height: 1.3;
}
.auth-card .ui-help ul { margin: .25rem 0 .25rem 1rem; padding: 0; }
.auth-card .ui-help li { list-style: disc; margin: .15rem 0; }
.auth-card .auth-help-block { margin-top: .6rem; }

/* Estado de error en campos del formulario de auth */
.auth-card .field.has-error input[type="text"],
.auth-card .field.has-error input[type="password"],
.auth-card .field.has-error input[type="email"],
.auth-card .field.has-error .pw-wrap input {
	border-color: var(--color-danger);
	box-shadow: 0 0 0 1px var(--color-danger);
}
.auth-card .field-error {
	color: var(--color-danger);
	font-size: var(--font-size-xs);
	margin-top: .25rem;
}
.auth-card .global-errors { margin-bottom: .5rem; }

/* Toggle de visibilidad de contraseña */
.pw-wrap {
	position: relative;
	display: block;
	width: 100%;
}
.pw-wrap input[type="password"],
.pw-wrap input[type="text"] { padding-right: 2.2rem; }
.pw-toggle {
	position: absolute;
	right: .5rem;
	top: 50%;
	transform: translateY(-50%);
	background: transparent;
	border: none;
	color: var(--color-muted);
	cursor: pointer;
	width: 1.8rem;
	height: 1.8rem;
	display: inline-flex;
	align-items: center;
	justify-content: center;
	border-radius: 50%;
}
.pw-toggle:hover { color: var(--color-text); }
.pw-toggle:focus {
	outline: none;
	box-shadow: 0 0 0 2px color-mix(in srgb, var(--color-accent) 35%, transparent);
}

/* Layout actions */
.actions {
	margin-top: 1rem;
	display: flex;
	gap: .5rem;
	justify-content: flex-end;
	flex-wrap: wrap;
}
.actions--stack { flex-direction: column; }
.actions--stack > .btn,
.actions--stack > .btn-link,
.actions--stack > a { width: 100%; justify-content: center; }

.auth-actions--login {
	justify-content: flex-end;
}

.auth-actions--login > .btn {
	width: auto;
	min-width: 132px;
	justify-content: center;
}

.auth-submit-loading {
	pointer-events: none;
	gap: .45rem;
	opacity: .82;
}

/* Alertas auth (reutilizan el sistema global de alerts) */
.alert.error {
	padding: .5rem .7rem;
	border-radius: var(--radius);
	background: var(--color-danger);
	color: var(--color-danger-contrast);
}
.alert.success {
	padding: .5rem .7rem;
	border-radius: var(--radius);
	background: var(--color-success);
	color: var(--color-success-contrast);
}

/* Link estilo boton (texto) */
.btn-link {
	background: none;
	border: 0;
	padding: 0;
	font: inherit;
	color: var(--color-accent);
	cursor: pointer;
}
.btn-link:hover { text-decoration: underline; }
.btn-link:focus {
	outline: none;
	box-shadow: 0 0 0 2px color-mix(in srgb, var(--color-accent) 35%, transparent);
	border-radius: 4px;
}

.auth-secondary-action {
	margin-top: .8rem;
	text-align: right;
	font-size: var(--font-size-sm);
}

.auth-secondary-action a,
.auth-secondary-action a:visited {
	color: var(--color-accent);
}

/* =====================================================
   OTP: composicion compacta y mobile-first
   - Por defecto, el panel es una sola columna.
   - Inputs comparten grid via .mfa-otp__digits.
   - Tamano base pensado para mobile y escalable en desktop.
   ===================================================== */
.mfa-otp {
	display: flex;
	flex-direction: column;
	gap: 1rem;
}
.mfa-otp__legend {
	font-size: var(--font-size-sm);
	color: var(--color-muted);
	margin: 0 0 .25rem;
}
.mfa-otp__digits {
	display: grid;
	grid-template-columns: repeat(6, minmax(0, 1fr));
	gap: .5rem;
}
.mfa-otp__digit {
	width: 100%;
	box-sizing: border-box;
	height: 56px;
	padding: 0;
	font: inherit;
	font-size: 1.5rem;
	font-weight: 700;
	line-height: 1;
	text-align: center;
	border-radius: 12px;
	border: 1px solid var(--ui-combo-border);
	background: var(--ui-combo-bg);
	color: var(--ui-combo-text);
	transition:
		border-color .18s var(--ease-standard),
		box-shadow .18s var(--ease-standard);
}
.mfa-otp__digit:focus {
	outline: none;
	border-color: color-mix(in srgb, var(--color-accent) 24%, var(--ui-combo-border));
	box-shadow: 0 0 0 3px color-mix(in srgb, var(--color-accent) 18%, transparent);
}
.mfa-otp__digit[aria-invalid="true"] {
	border-color: var(--color-danger);
	box-shadow: 0 0 0 1px var(--color-danger);
}

.mfa-remember {
	margin: .25rem 0 0;
}
.mfa-remember label {
	display: inline-flex;
	align-items: center;
	gap: .55rem;
	font-size: var(--font-size-base);
	color: var(--color-text);
	cursor: pointer;
}
.mfa-remember input[type="checkbox"] {
	width: 1.05rem;
	height: 1.05rem;
	accent-color: var(--color-accent);
}

.mfa-verify-btn {
	width: 100%;
	justify-content: center;
}

.auth-actions--mfa-primary {
	margin-top: 1.25rem;
}

/* Tablet/desktop: amplifica tamano del OTP, no el resto */
.auth-card--login .auth-actions--login {
	flex-direction: column;
}

.auth-card--login .auth-actions--login > .btn {
	width: 100%;
}

@media (min-width: 640px) {
	.mfa-otp__digit { height: 64px; font-size: 1.75rem; }
	.auth-card.auth-card--login .field {
		display: grid;
		grid-template-columns: 190px minmax(0, 1fr);
		column-gap: 1rem;
		row-gap: .3rem;
		align-items: center;
	}
	.auth-card.auth-card--login .field label {
		grid-column: 1;
	}
	.auth-card.auth-card--login .field input[type="text"],
	.auth-card.auth-card--login .field input[type="password"],
	.auth-card.auth-card--login .field input[type="email"],
	.auth-card.auth-card--login .field .pw-wrap,
	.auth-card.auth-card--login .field .field-error {
		grid-column: 2;
	}
	.auth-card--login .auth-actions--login {
		flex-direction: row;
		justify-content: flex-end;
	}
	.auth-card--login .auth-actions--login > .btn {
		width: auto;
	}
	.auth-card--mfa {
		max-width: 560px;
	}
	.mfa-otp__digits {
		gap: .65rem;
	}
	.mfa-remember {
		margin-top: .5rem;
	}
	.auth-actions--mfa-primary {
		flex-direction: row;
		justify-content: flex-end;
	}
	.auth-actions--mfa-primary > .btn {
		width: auto;
		min-width: 132px;
		justify-content: center;
	}
	.mfa-verify-btn {
		width: auto;
	}
	.auth-secondary-action {
		display: flex;
		justify-content: flex-end;
		align-items: center;
		gap: 1rem;
		text-align: right;
	}
}
@media (min-width: 900px) {
	.mfa-otp__digit { height: 72px; font-size: 2rem; }
}