/* Vasco auth pages — matches landing.html design system */

:root {
  --white:      #FFFFFF;
  --off-white:  #FAFAF9;
  --bg-soft:    #F5F3F0;
  --gray-light: #E8E4DD;
  --gray-mid:   #9E9686;
  --dark:       #1A1A1A;
  --accent:     #C1682A;
  --accent-hover: #A85423;
  --accent-light: rgba(193, 104, 42, 0.08);
  --positive:   #2E7D32;
  --negative:   #C62828;
  --rule:       rgba(26, 26, 26, 0.06);
  --font-serif: 'Merriweather', Georgia, serif;
  --font-sans:  'Source Sans 3', system-ui, sans-serif;
  --font-mono:  'IBM Plex Mono', monospace;
}

*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }

html { -webkit-font-smoothing: antialiased; }

body.auth-page {
  font-family: var(--font-sans);
  font-size: 16px;
  line-height: 1.6;
  color: var(--dark);
  background: linear-gradient(135deg, var(--white) 0%, var(--off-white) 55%, var(--bg-soft) 100%);
  min-height: 100vh;
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  padding: 24px;
  position: relative;
  overflow-x: hidden;
}

body.auth-page::before,
body.auth-page::after {
  content: '';
  position: fixed;
  border-radius: 50%;
  pointer-events: none;
  z-index: 0;
}

body.auth-page::before {
  top: -280px;
  right: -160px;
  width: 560px;
  height: 560px;
  background: radial-gradient(circle, var(--accent-light) 0%, transparent 70%);
}

body.auth-page::after {
  bottom: -220px;
  left: -120px;
  width: 440px;
  height: 440px;
  background: radial-gradient(circle, rgba(193, 104, 42, 0.05) 0%, transparent 70%);
}

.auth-top {
  position: fixed;
  top: 0;
  left: 0;
  right: 0;
  z-index: 10;
  display: flex;
  align-items: center;
  justify-content: space-between;
  padding: 16px 32px;
  background: rgba(255, 255, 255, 0.92);
  backdrop-filter: blur(8px);
  border-bottom: 1px solid var(--rule);
}

.auth-top-logo {
  display: flex;
  align-items: center;
  line-height: 0;
  text-decoration: none;
}

.auth-top-logo img {
  width: 120px;
  height: auto;
  max-height: 40px;
  object-fit: contain;
  object-position: left center;
}

.auth-top-link {
  font-family: var(--font-sans);
  font-size: 14px;
  font-weight: 500;
  color: var(--gray-mid);
  text-decoration: none;
  transition: color 0.2s;
}

.auth-top-link:hover { color: var(--accent); }

.auth-shell {
  position: relative;
  z-index: 1;
  width: 100%;
  max-width: 420px;
  margin-top: 48px;
}

.auth-card {
  width: 100%;
  background: var(--white);
  border: 1px solid var(--gray-light);
  box-shadow: 0 12px 40px rgba(26, 26, 26, 0.08);
  padding: 40px 36px;
  display: flex;
  flex-direction: column;
  gap: 22px;
}

.auth-brand {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 10px;
  text-align: center;
}

.auth-brand img {
  width: 140px;
  height: auto;
  max-height: 48px;
  object-fit: contain;
}

.auth-brand .tenant-name {
  font-family: var(--font-serif);
  font-size: 1.25rem;
  font-weight: 700;
  color: var(--dark);
  letter-spacing: -0.02em;
}

.auth-brand h1 {
  font-family: var(--font-serif);
  font-size: 1.25rem;
  font-weight: 700;
  color: var(--dark);
  letter-spacing: -0.02em;
}

.auth-subtitle {
  font-size: 0.9rem;
  color: var(--gray-mid);
  text-align: center;
  line-height: 1.6;
  margin-top: -8px;
}

.auth-divider {
  display: flex;
  align-items: center;
  gap: 12px;
  color: var(--gray-mid);
  font-family: var(--font-mono);
  font-size: 11px;
  font-weight: 600;
  letter-spacing: 0.08em;
  text-transform: uppercase;
}

.auth-divider::before,
.auth-divider::after {
  content: '';
  flex: 1;
  height: 1px;
  background: var(--gray-light);
}

.auth-form {
  display: flex;
  flex-direction: column;
  gap: 14px;
}

.auth-field {
  display: flex;
  flex-direction: column;
  gap: 6px;
}

.auth-field label {
  font-size: 13px;
  font-weight: 600;
  color: var(--dark);
}

.auth-field input {
  background: var(--white);
  border: 1px solid var(--gray-light);
  padding: 11px 14px;
  color: var(--dark);
  font-size: 15px;
  font-family: var(--font-sans);
  outline: none;
  transition: border-color 0.2s, box-shadow 0.2s;
  width: 100%;
}

.auth-field input::placeholder { color: var(--gray-mid); }

.auth-field input:focus {
  border-color: var(--accent);
  box-shadow: 0 0 0 3px var(--accent-light);
}

.auth-btn-primary {
  display: flex;
  align-items: center;
  justify-content: center;
  gap: 10px;
  width: 100%;
  padding: 12px 16px;
  background: var(--accent);
  color: var(--white);
  font-size: 15px;
  font-weight: 600;
  font-family: var(--font-sans);
  border: none;
  cursor: pointer;
  text-decoration: none;
  transition: background 0.2s, transform 0.15s, box-shadow 0.2s;
  box-shadow: 0 4px 16px rgba(193, 104, 42, 0.25);
}

.auth-btn-primary:hover {
  background: var(--accent-hover);
  transform: translateY(-1px);
  box-shadow: 0 8px 24px rgba(193, 104, 42, 0.3);
}

.auth-btn-primary:active { transform: translateY(0); }

.auth-btn-secondary {
  width: 100%;
  padding: 11px 16px;
  background: transparent;
  border: 2px solid var(--gray-light);
  color: var(--dark);
  font-size: 15px;
  font-weight: 600;
  font-family: var(--font-sans);
  cursor: pointer;
  transition: border-color 0.2s, color 0.2s, background 0.2s, transform 0.15s;
}

.auth-btn-secondary:hover {
  border-color: var(--accent);
  color: var(--accent);
  background: var(--accent-light);
  transform: translateY(-1px);
}

.auth-btn-secondary:active { transform: translateY(0); }

.ms-icon {
  width: 18px;
  height: 18px;
  flex-shrink: 0;
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 2px;
}

.ms-icon span { display: block; border-radius: 1px; }
.ms-icon span:nth-child(1) { background: #f25022; }
.ms-icon span:nth-child(2) { background: #7fba00; }
.ms-icon span:nth-child(3) { background: #00a4ef; }
.ms-icon span:nth-child(4) { background: #ffb900; }

.auth-banner-error {
  background: rgba(198, 40, 40, 0.08);
  border: 1px solid rgba(198, 40, 40, 0.25);
  padding: 10px 14px;
  color: var(--negative);
  font-size: 14px;
  line-height: 1.5;
  display: none;
}

.auth-banner-error.visible { display: block; }

.auth-banner-info {
  background: rgba(46, 125, 50, 0.08);
  border: 1px solid rgba(46, 125, 50, 0.25);
  padding: 10px 14px;
  color: var(--positive);
  font-size: 14px;
  line-height: 1.5;
  display: none;
}

.auth-banner-info.visible { display: block; }

.auth-link {
  font-size: 14px;
  color: var(--gray-mid);
  text-align: center;
  text-decoration: none;
  transition: color 0.2s;
}

.auth-link:hover { color: var(--accent); }

.auth-link-right {
  text-align: right;
}

.auth-hint {
  font-size: 13px;
  color: var(--gray-mid);
}

.auth-pw-rules {
  display: flex;
  flex-direction: column;
  gap: 4px;
  margin-top: 2px;
}

.auth-pw-rule {
  display: flex;
  align-items: center;
  gap: 7px;
  font-size: 13px;
  color: var(--gray-mid);
  transition: color 0.15s;
}

.auth-pw-rule .dot {
  width: 6px;
  height: 6px;
  border-radius: 50%;
  background: var(--gray-mid);
  flex-shrink: 0;
  transition: background 0.15s;
}

.auth-pw-rule.ok { color: var(--positive); }
.auth-pw-rule.ok .dot { background: var(--positive); }

/* Access denied */
.auth-card--center {
  text-align: center;
  align-items: center;
}

.auth-icon {
  width: 56px;
  height: 56px;
  border-radius: 12px;
  background: rgba(198, 40, 40, 0.08);
  border: 1px solid rgba(198, 40, 40, 0.2);
  display: flex;
  align-items: center;
  justify-content: center;
  font-size: 1.6rem;
}

.auth-card--center p {
  font-size: 15px;
  color: var(--gray-mid);
  line-height: 1.65;
  max-width: 32ch;
}

@media (max-width: 480px) {
  .auth-top { padding: 12px 20px; }
  .auth-card { padding: 32px 24px; }
  .auth-shell { margin-top: 40px; }
}