/* ---------------------------------------------------------
   Authentication
   --------------------------------------------------------- */

.login-page {
    display: flex;
    justify-content: center;
    align-items: flex-start;
    min-height: 60vh;
    padding: 3rem 1rem;
}

.login-card {
    width: 100%;
    max-width: 440px;
    padding: 2rem;
    background: var(--card-background);
    border: 1px solid var(--border-colour);
    border-radius: 14px;
    box-shadow: 0 16px 40px rgba(20, 30, 50, 0.10);
}

.login-card-header {
    display: flex;
    align-items: center;
    gap: 1rem;
    margin-bottom: 2rem;
}

.login-card-header h3 {
    margin: 0 0 0.35rem;
    font-size: 22px;
}

.login-card-header p {
    margin: 0;
    color: var(--secondary-text);
}

.login-brand {
    display: flex;
    flex: 0 0 54px;
    align-items: center;
    justify-content: center;
    width: 54px;
    height: 54px;
    border-radius: 13px;
    background: var(--sidebar-background);
    color: #ffffff;
    font-size: 18px;
    font-weight: 700;
}

.login-form {
    display: grid;
    gap: 1.25rem;
}

/*
 * BUGFIX: [hidden] and .login-form (display: grid) have equal CSS
 * specificity, and this stylesheet loads after the browser's
 * default one - so without this explicit override, the hidden
 * attribute on a .login-form-classed element does nothing at all,
 * and the element stays visible regardless. This is exactly why
 * .login-message[hidden] below already existed - that exact same
 * trap, already worked around for one element but not for
 * .login-form itself, which login.js's MFA stage (added in v1.8.7)
 * needed too. Found via a live report: the authenticator code
 * field was showing on page load for every user, not just after a
 * successful password submission for MFA-enabled accounts.
 */
.login-form[hidden] {
    display: none;
}

.form-group {
    display: grid;
    gap: 0.45rem;
}

.form-group label {
    font-weight: 600;
}

.form-group input {
    width: 100%;
    min-height: 46px;
    padding: 0.75rem 0.9rem;
    border: 1px solid var(--border-colour);
    border-radius: 8px;
    background: #ffffff;
    color: inherit;
    font: inherit;
}

.form-group input:focus {
    border-color: var(--accent-colour);
    outline: 3px solid rgba(200, 54, 121, 0.12);
}

.form-hint {
    margin: 0;
    font-size: 13px;
    color: var(--secondary-text);
}

.primary-button {
    min-height: 46px;
    padding: 0.75rem 1rem;
    border: 0;
    border-radius: 8px;
    background: var(--accent-colour);
    color: #ffffff;
    font: inherit;
    font-weight: 700;
    cursor: pointer;
}

.primary-button:hover {
    filter: brightness(0.94);
}

.primary-button:disabled {
    cursor: wait;
    opacity: 0.7;
}

.login-button {
    width: 100%;
}

.login-message {
    padding: 0.8rem 0.9rem;
    border: 1px solid #f0b4b4;
    border-radius: 8px;
    background: #fff2f2;
    color: #9c1c1c;
    font-size: 14px;
}

.login-message[hidden] {
    display: none;
}

.user-panel {
    display: flex;
    align-items: center;
    gap: 12px;
}

.logout-button {
    padding: 7px 10px;
    border: 1px solid var(--border-colour);
    border-radius: 7px;
    background: #ffffff;
    color: var(--primary-text);
    cursor: pointer;
}

.logout-button:hover {
    background: var(--page-background);
}

.user-logged-out .sidebar,
.user-logged-out .user-panel {
    display: none;
}

.user-logged-out .main-content {
    margin-left: 0;
}

.user-logged-out .topbar {
    justify-content: center;
    text-align: center;
}

.user-logged-out .page-content {
    padding-top: 10px;
}