/**
 * TSAVO IoT — premium auth experience
 * Inspired by tsavo-scada-dashboard + tsavo-theme
 */

@import url("https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600&display=swap");

:root {
  --auth-bg: #0b0e14;
  --auth-bg-2: #11151e;
  --auth-panel: #121822;
  --auth-card: rgba(18, 24, 34, 0.92);
  --auth-border: rgba(120, 150, 180, 0.2);
  --auth-border-glow: rgba(0, 229, 255, 0.35);
  --auth-text: #d7e3ef;
  --auth-muted: #7f91a8;
  --auth-cyan: #00e5ff;
  --auth-amber: #ffb800;
  --auth-green: #00ff6a;
  --auth-navy: #082d57;
  --auth-navy-deep: #0a3a6e;
  --auth-grid: rgba(90, 120, 160, 0.07);
  --auth-mono: "JetBrains Mono", ui-monospace, monospace;
  --auth-sans: "Poppins", sans-serif;
  --auth-radius: 18px;
  --auth-radius-sm: 12px;
  --auth-shadow: 0 28px 80px rgba(0, 0, 0, 0.45), 0 0 0 1px rgba(0, 229, 255, 0.08);
}

*,
*::before,
*::after {
  box-sizing: border-box;
}

html,
body.tsavo-auth-page {
  margin: 0;
  min-height: 100vh;
  font-family: var(--auth-sans);
  color: var(--auth-text);
  background: var(--auth-bg);
  -webkit-font-smoothing: antialiased;
}

body.tsavo-auth-page {
  overflow-x: hidden;
}

/* —— Ambient background —— */
.tsavo-auth-bg {
  position: fixed;
  inset: 0;
  z-index: 0;
  pointer-events: none;
  background:
    radial-gradient(ellipse 80% 50% at 15% 20%, rgba(0, 229, 255, 0.09), transparent 55%),
    radial-gradient(ellipse 60% 40% at 85% 80%, rgba(8, 45, 87, 0.55), transparent 50%),
    repeating-linear-gradient(0deg, transparent, transparent 23px, var(--auth-grid) 24px),
    repeating-linear-gradient(90deg, transparent, transparent 23px, var(--auth-grid) 24px),
    linear-gradient(165deg, var(--auth-bg) 0%, #0e131c 45%, var(--auth-bg-2) 100%);
}

.tsavo-auth-bg::after {
  content: "";
  position: absolute;
  inset: 0;
  background: linear-gradient(180deg, transparent 60%, rgba(11, 14, 20, 0.85) 100%);
}

.tsavo-auth-orb {
  position: absolute;
  border-radius: 50%;
  filter: blur(60px);
  opacity: 0.35;
  animation: authOrbFloat 14s ease-in-out infinite;
}

.tsavo-auth-orb--cyan {
  width: 320px;
  height: 320px;
  top: -80px;
  right: 10%;
  background: rgba(0, 229, 255, 0.25);
}

.tsavo-auth-orb--navy {
  width: 280px;
  height: 280px;
  bottom: -60px;
  left: 5%;
  background: rgba(8, 45, 87, 0.6);
  animation-delay: -5s;
}

@keyframes authOrbFloat {
  0%, 100% { transform: translate(0, 0) scale(1); }
  50% { transform: translate(12px, -18px) scale(1.05); }
}

/* —— Layout shell —— */
.tsavo-auth-wrap {
  position: relative;
  z-index: 1;
  min-height: 100vh;
  display: grid;
  grid-template-columns: minmax(280px, 1fr) minmax(340px, 460px);
  gap: 0;
  max-width: 1180px;
  margin: 0 auto;
  padding: 24px;
  align-items: center;
}

@media (max-width: 900px) {
  .tsavo-auth-wrap {
    grid-template-columns: 1fr;
    max-width: 480px;
    padding: 20px 16px 32px;
  }
}

/* —— Brand panel —— */
.tsavo-auth-brand {
  padding: 32px 40px 32px 8px;
  animation: authFadeUp 0.7s cubic-bezier(0.22, 1, 0.36, 1) both;
}

@media (max-width: 900px) {
  .tsavo-auth-brand {
    padding: 8px 4px 20px;
    text-align: center;
  }
}

.tsavo-auth-brand-head {
  display: flex;
  align-items: center;
  gap: 16px;
  margin-bottom: 28px;
}

@media (max-width: 900px) {
  .tsavo-auth-brand-head {
    justify-content: center;
  }
}

.tsavo-auth-mark {
  width: 52px;
  height: 52px;
  border-radius: 14px;
  display: flex;
  align-items: center;
  justify-content: center;
  font-family: var(--auth-mono);
  font-weight: 700;
  font-size: 22px;
  color: var(--auth-cyan);
  background: linear-gradient(145deg, rgba(0, 229, 255, 0.12), rgba(8, 45, 87, 0.5));
  border: 1px solid rgba(0, 229, 255, 0.35);
  box-shadow: 0 0 24px rgba(0, 229, 255, 0.15);
}

.tsavo-auth-brand-title {
  margin: 0;
  font-size: 1.35rem;
  font-weight: 700;
  letter-spacing: 0.06em;
  color: #fff;
  line-height: 1.2;
}

.tsavo-auth-brand-sub {
  margin: 4px 0 0;
  font-family: var(--auth-mono);
  font-size: 0.72rem;
  letter-spacing: 0.12em;
  text-transform: uppercase;
  color: var(--auth-muted);
}

.tsavo-auth-tagline {
  margin: 0 0 28px;
  font-size: 1.05rem;
  line-height: 1.6;
  color: var(--auth-muted);
  max-width: 380px;
}

@media (max-width: 900px) {
  .tsavo-auth-tagline {
    margin-left: auto;
    margin-right: auto;
    font-size: 0.95rem;
  }
}

.tsavo-auth-features {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: 14px;
}

@media (max-width: 900px) {
  .tsavo-auth-features {
    display: none;
  }
}

.tsavo-auth-features li {
  display: flex;
  align-items: flex-start;
  gap: 12px;
  font-size: 0.88rem;
  color: var(--auth-text);
  line-height: 1.45;
}

.tsavo-auth-features i {
  width: 36px;
  height: 36px;
  flex-shrink: 0;
  display: flex;
  align-items: center;
  justify-content: center;
  border-radius: 10px;
  font-size: 14px;
  color: var(--auth-cyan);
  background: rgba(0, 229, 255, 0.08);
  border: 1px solid rgba(0, 229, 255, 0.2);
}

.tsavo-auth-live {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  margin-top: 36px;
  padding: 8px 14px;
  border-radius: 999px;
  font-family: var(--auth-mono);
  font-size: 0.68rem;
  font-weight: 600;
  letter-spacing: 0.14em;
  text-transform: uppercase;
  color: var(--auth-green);
  background: rgba(0, 255, 106, 0.06);
  border: 1px solid rgba(0, 255, 106, 0.25);
}

@media (max-width: 900px) {
  .tsavo-auth-live {
    margin-top: 16px;
  }
}

.tsavo-auth-live-pulse {
  width: 7px;
  height: 7px;
  border-radius: 50%;
  background: var(--auth-green);
  box-shadow: 0 0 10px var(--auth-green);
  animation: authPulse 1.8s ease-in-out infinite;
}

@keyframes authPulse {
  0%, 100% { opacity: 1; transform: scale(1); }
  50% { opacity: 0.5; transform: scale(0.85); }
}

/* —— Auth card —— */
.tsavo-auth-card {
  position: relative;
  padding: 36px 32px 32px;
  border-radius: var(--auth-radius);
  background: var(--auth-card);
  border: 1px solid var(--auth-border);
  box-shadow: var(--auth-shadow);
  backdrop-filter: blur(16px);
  -webkit-backdrop-filter: blur(16px);
  animation: authFadeUp 0.7s cubic-bezier(0.22, 1, 0.36, 1) 0.1s both;
}

.tsavo-auth-card::before {
  content: "";
  position: absolute;
  top: 0;
  left: 24px;
  right: 24px;
  height: 3px;
  border-radius: 0 0 4px 4px;
  background: linear-gradient(90deg, var(--auth-navy) 0%, var(--auth-cyan) 50%, var(--auth-navy-deep) 100%);
  opacity: 0.9;
}

@keyframes authFadeUp {
  from {
    opacity: 0;
    transform: translateY(20px);
  }
  to {
    opacity: 1;
    transform: translateY(0);
  }
}

.tsavo-auth-eyebrow {
  margin: 0 0 8px;
  font-family: var(--auth-mono);
  font-size: 0.68rem;
  font-weight: 600;
  letter-spacing: 0.16em;
  text-transform: uppercase;
  color: var(--auth-cyan);
}

.tsavo-auth-title {
  margin: 0 0 8px;
  font-size: 1.65rem;
  font-weight: 700;
  color: #fff;
  line-height: 1.2;
}

.tsavo-auth-sub {
  margin: 0 0 28px;
  font-size: 0.9rem;
  line-height: 1.55;
  color: var(--auth-muted);
}

/* —— Form fields —— */
.tsavo-auth-form {
  display: flex;
  flex-direction: column;
  gap: 18px;
}

.tsavo-auth-field label {
  display: block;
  margin-bottom: 7px;
  font-size: 0.78rem;
  font-weight: 600;
  color: var(--auth-text);
  letter-spacing: 0.02em;
}

.tsavo-auth-input-wrap {
  position: relative;
}

.tsavo-auth-input-wrap > i.fa {
  position: absolute;
  left: 14px;
  top: 50%;
  transform: translateY(-50%);
  color: var(--auth-muted);
  font-size: 14px;
  pointer-events: none;
  transition: color 0.2s;
}

.tsavo-auth-input-wrap:focus-within > i.fa {
  color: var(--auth-cyan);
}

.tsavo-auth-input-wrap input {
  width: 100%;
  height: 48px;
  padding: 0 44px 0 42px;
  border: 1px solid var(--auth-border);
  border-radius: var(--auth-radius-sm);
  background: rgba(0, 0, 0, 0.35);
  color: #fff;
  font-family: var(--auth-sans);
  font-size: 0.92rem;
  outline: none;
  transition: border-color 0.2s, box-shadow 0.2s, background 0.2s;
}

.tsavo-auth-input-wrap input::placeholder {
  color: rgba(127, 145, 168, 0.65);
}

.tsavo-auth-input-wrap input:focus {
  border-color: var(--auth-border-glow);
  background: rgba(0, 0, 0, 0.5);
  box-shadow: 0 0 0 3px rgba(0, 229, 255, 0.12), inset 0 0 0 1px rgba(0, 229, 255, 0.08);
}

.tsavo-auth-toggle-pwd {
  position: absolute;
  right: 10px;
  top: 50%;
  transform: translateY(-50%);
  width: 32px;
  height: 32px;
  border: 0;
  border-radius: 8px;
  background: transparent;
  color: var(--auth-muted);
  cursor: pointer;
  display: flex;
  align-items: center;
  justify-content: center;
  transition: color 0.2s, background 0.2s;
}

.tsavo-auth-toggle-pwd:hover {
  color: var(--auth-cyan);
  background: rgba(0, 229, 255, 0.08);
}

/* —— OTP digit inputs —— */
.tsavo-auth-otp-row {
  display: flex;
  gap: 10px;
  justify-content: center;
}

.tsavo-auth-otp-row input {
  width: 52px;
  height: 56px;
  padding: 0;
  text-align: center;
  font-family: var(--auth-mono);
  font-size: 1.35rem;
  font-weight: 600;
  letter-spacing: 0;
  border: 1px solid var(--auth-border);
  border-radius: var(--auth-radius-sm);
  background: rgba(0, 0, 0, 0.35);
  color: var(--auth-cyan);
  outline: none;
  transition: border-color 0.2s, box-shadow 0.2s;
}

.tsavo-auth-otp-row input:focus {
  border-color: var(--auth-cyan);
  box-shadow: 0 0 0 3px rgba(0, 229, 255, 0.15), 0 0 16px rgba(0, 229, 255, 0.12);
}

.tsavo-auth-otp-timer {
  text-align: center;
  margin: 4px 0 0;
  font-family: var(--auth-mono);
  font-size: 0.78rem;
  color: var(--auth-muted);
}

.tsavo-auth-otp-timer strong {
  color: var(--auth-amber);
  font-weight: 600;
}

/* —— Buttons —— */
.tsavo-auth-btn {
  display: flex;
  align-items: center;
  justify-content: center;
  gap: 8px;
  width: 100%;
  height: 50px;
  margin-top: 6px;
  border: 0;
  border-radius: var(--auth-radius-sm);
  font-family: var(--auth-sans);
  font-size: 0.88rem;
  font-weight: 700;
  letter-spacing: 0.06em;
  text-transform: uppercase;
  cursor: pointer;
  color: #fff;
  background: linear-gradient(135deg, var(--auth-navy-deep) 0%, var(--auth-navy) 55%, #0c3d6e 100%);
  box-shadow: 0 10px 28px rgba(8, 45, 87, 0.45), inset 0 1px 0 rgba(255, 255, 255, 0.08);
  transition: transform 0.15s, box-shadow 0.2s, opacity 0.2s;
}

.tsavo-auth-btn:hover:not(:disabled) {
  transform: translateY(-1px);
  box-shadow: 0 14px 32px rgba(8, 45, 87, 0.55), 0 0 20px rgba(0, 229, 255, 0.12);
}

.tsavo-auth-btn:active:not(:disabled) {
  transform: translateY(0);
}

.tsavo-auth-btn:disabled {
  opacity: 0.55;
  cursor: not-allowed;
  transform: none;
}

.tsavo-auth-btn.is-loading {
  opacity: 0.85;
  cursor: wait;
}

.tsavo-auth-spinner {
  display: inline-block;
  width: 16px;
  height: 16px;
  margin-right: 8px;
  border: 2px solid rgba(255, 255, 255, 0.35);
  border-top-color: #fff;
  border-radius: 50%;
  animation: authSpin 0.7s linear infinite;
  vertical-align: middle;
}

@keyframes authSpin {
  to { transform: rotate(360deg); }
}

.tsavo-auth-alert {
  margin-bottom: 16px;
  padding: 10px 12px;
  border-radius: 10px;
  font-size: 0.82rem;
  line-height: 1.45;
}

.tsavo-auth-alert.is-error {
  background: rgba(255, 77, 77, 0.1);
  color: #ff9a9a;
  border: 1px solid rgba(255, 77, 77, 0.35);
}

.tsavo-auth-alert.is-success {
  background: rgba(0, 255, 106, 0.08);
  color: #7dffb0;
  border: 1px solid rgba(0, 255, 106, 0.3);
}

.tsavo-auth-btn--locked {
  background: linear-gradient(135deg, #3a2030 0%, #2a1520 100%);
  box-shadow: none;
}

.tsavo-auth-btn i {
  font-size: 14px;
}

/* —— Footer links —— */
.tsavo-auth-footer {
  margin-top: 22px;
  padding-top: 20px;
  border-top: 1px solid var(--auth-border);
  text-align: center;
}

.tsavo-auth-footer a {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  font-size: 0.85rem;
  font-weight: 500;
  color: var(--auth-muted);
  text-decoration: none;
  padding: 8px 14px;
  border-radius: var(--auth-radius-sm);
  transition: color 0.2s, background 0.2s;
}

.tsavo-auth-footer a:hover {
  color: var(--auth-cyan);
  background: rgba(0, 229, 255, 0.06);
}

/* —— Password rules —— */
.tsavo-auth-rules {
  margin: 0;
  padding: 12px 14px;
  list-style: none;
  border-radius: var(--auth-radius-sm);
  background: rgba(0, 0, 0, 0.25);
  border: 1px solid var(--auth-border);
}

.tsavo-auth-rules li {
  position: relative;
  padding-left: 18px;
  font-size: 0.76rem;
  line-height: 1.55;
  color: var(--auth-muted);
}

.tsavo-auth-rules li::before {
  content: "›";
  position: absolute;
  left: 0;
  color: var(--auth-cyan);
  font-weight: 700;
}

/* —— Status / error cards (external invalid link) —— */
.tsavo-auth-status {
  text-align: center;
  padding: 28px 16px;
}

.tsavo-auth-status-icon {
  width: 64px;
  height: 64px;
  margin: 0 auto 18px;
  border-radius: 16px;
  display: flex;
  align-items: center;
  justify-content: center;
  font-size: 26px;
}

.tsavo-auth-status-icon--error {
  color: #ff6b6b;
  background: rgba(255, 77, 77, 0.1);
  border: 1px solid rgba(255, 77, 77, 0.3);
}

.tsavo-auth-status-icon--warn {
  color: var(--auth-amber);
  background: rgba(255, 184, 0, 0.1);
  border: 1px solid rgba(255, 184, 0, 0.3);
}

.tsavo-auth-status h2 {
  margin: 0 0 10px;
  font-size: 1.25rem;
  color: #fff;
}

.tsavo-auth-status p {
  margin: 0 0 20px;
  font-size: 0.9rem;
  color: var(--auth-muted);
  line-height: 1.5;
}

/* —— Logged-in password reset page —— */
body.tsavo-auth-page--inapp .tsavo-auth-wrap {
  grid-template-columns: 1fr;
  max-width: 560px;
}

body.tsavo-auth-page--inapp .tsavo-auth-brand {
  display: none;
}

.tsavo-auth-inapp-back {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  margin-bottom: 20px;
  font-size: 0.82rem;
  color: var(--auth-muted);
  text-decoration: none;
  transition: color 0.2s;
}

.tsavo-auth-inapp-back:hover {
  color: var(--auth-cyan);
}

.tsavo-auth-otp-row--6 {
  gap: 8px;
}

.tsavo-auth-otp-row--6 input {
  width: 44px;
  height: 52px;
}

.tsavo-mfa-steps {
  margin-bottom: 18px;
}

.tsavo-mfa-setup {
  display: flex;
  align-items: center;
  gap: 18px;
  margin: 0 0 22px;
  padding: 16px;
  border-radius: var(--auth-radius-sm);
  background: rgba(0, 0, 0, 0.28);
  border: 1px solid var(--auth-border);
}

.tsavo-mfa-qr-wrap {
  flex: 0 0 auto;
  padding: 8px;
  border-radius: 12px;
  background: #fff;
}

.tsavo-mfa-qr,
.tsavo-mfa-qr img,
.tsavo-mfa-qr canvas {
  display: block;
  width: 196px;
  height: 196px;
}

.tsavo-mfa-secret-block {
  min-width: 0;
}

.tsavo-mfa-secret-label {
  margin: 0 0 8px;
  font-size: 0.75rem;
  color: var(--auth-muted);
}

.tsavo-mfa-secret {
  display: block;
  margin: 0 0 12px;
  font-family: var(--auth-mono);
  font-size: 0.92rem;
  font-weight: 600;
  letter-spacing: 0.08em;
  color: var(--auth-cyan);
  word-break: break-all;
}

.tsavo-auth-footer-btn,
.tsavo-mfa-skip {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  border: 0;
  background: transparent;
  color: var(--auth-muted);
  font-family: var(--auth-sans);
  font-size: 0.85rem;
  font-weight: 500;
  cursor: pointer;
  padding: 8px 14px;
  border-radius: var(--auth-radius-sm);
  transition: color 0.2s, background 0.2s;
}

.tsavo-auth-footer-btn:hover,
.tsavo-mfa-skip:hover {
  color: var(--auth-cyan);
  background: rgba(0, 229, 255, 0.06);
}

@media (max-width: 640px) {
  .tsavo-mfa-setup {
    flex-direction: column;
    text-align: center;
  }
}

@media (max-width: 400px) {
  .tsavo-auth-otp-row {
    gap: 6px;
  }

  .tsavo-auth-otp-row input,
  .tsavo-auth-otp-row--6 input {
    width: 38px;
    height: 46px;
    font-size: 1.1rem;
  }
}