/*
 * Pagine di accesso (login, verifica in due passaggi, attivazione dell'MFA, password dimenticata, reimpostazione,
 * invito, primo avvio). Usa le variabili di tema di app.css, quindi segue il tema chiaro e scuro.
 * Lo carica web/js/views/auth/shell.js alla prima pagina di accesso.
 */

/* Senza menu né barra in alto (già nascosti dalla modalità auth: ripetuto qui per non dipendere dall'ordine dei fogli). */
body[data-mode="auth"] .layout { grid-template-columns: 1fr; }
body[data-mode="auth"] .sidebar,
body[data-mode="auth"] .topbar { display: none; }
body[data-mode="auth"] main { padding: 0; }

.auth-page {
  position: relative;
  min-height: 100vh;
  min-height: 100dvh;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 32px 16px;
}

.auth-theme { position: absolute; top: 16px; right: 16px; margin: 0; }

.auth-card {
  width: 100%;
  max-width: 440px;
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 14px;
  box-shadow: var(--shadow), 0 12px 32px rgba(16, 24, 40, 0.07);
  padding: 28px 28px 24px;
}
.auth-card.wide { max-width: 600px; }

.auth-brand { padding: 0 0 20px; }
.auth-title { font-size: 21px; margin: 0 0 6px; outline: none; }
.auth-lead { color: var(--muted); margin: 0 0 18px; }
.auth-body { margin-top: 18px; }
.auth-lead:not([hidden]) + .auth-body { margin-top: 0; }
.auth-loading { display: flex; align-items: center; gap: 8px; color: var(--muted); padding: 8px 0; }

.auth-form { display: flex; flex-direction: column; gap: 14px; }
.auth-card .alert { margin-bottom: 14px; }
.auth-card .alert[hidden] { display: none; }
/* Dentro un modulo la distanza la dà il gap. */
.auth-card .auth-form .alert { margin-bottom: 0; }

.auth-field { display: flex; flex-direction: column; gap: 5px; font-size: 13px; color: var(--muted); }
.auth-field > label { font-weight: 550; }
.auth-field.error > label { color: var(--danger); }
.auth-card input:not([type="checkbox"]) { width: 100%; padding: 9px 11px; font-size: 15px; }

.auth-password { position: relative; }
.auth-card .auth-password input { padding-right: 84px; }
.auth-card .auth-password.plain input { padding-right: 11px; }
.auth-reveal {
  position: absolute;
  right: 4px;
  top: 50%;
  transform: translateY(-50%);
  border: none;
  background: none;
  color: var(--accent);
  padding: 4px 8px;
  font-size: 12.5px;
  border-radius: 6px;
}
.auth-reveal:hover:not(:disabled) { background: var(--accent-soft); }

.auth-meter { font-size: 12.5px; color: var(--faint); margin-top: -8px; }
.auth-meter.ok { color: var(--ok); }
.auth-note { color: var(--muted); font-size: 12.5px; margin: 0; }

.auth-card button.primary,
.auth-card a.button.primary { width: 100%; justify-content: center; padding: 10px 14px; font-size: 15px; }
.auth-card button.primary .spinner { border-color: rgba(255, 255, 255, 0.4); border-top-color: #fff; }
.auth-card button.wide { width: 100%; justify-content: center; padding: 10px 14px; }

.auth-links { display: flex; justify-content: space-between; align-items: baseline; gap: 12px; flex-wrap: wrap; font-size: 13px; }
.auth-links.end { justify-content: flex-end; }
.auth-foot { margin-top: 16px; text-align: center; font-size: 13px; }
.auth-foot button.link { font-weight: 450; font-size: 13px; }

.auth-divider { display: flex; align-items: center; gap: 12px; color: var(--faint); font-size: 12.5px; margin: 16px 0; }
.auth-divider::before,
.auth-divider::after { content: ""; flex: 1; height: 1px; background: var(--border); }

.auth-card .tabs { margin: 0 0 16px; }
.auth-card .tabs button { flex: 1 1 auto; padding: 9px 8px; font-size: 13px; justify-content: center; }
.auth-panel > p { color: var(--muted); }

.auth-card input.auth-code { font-family: var(--mono); font-size: 22px; letter-spacing: 0.35em; text-align: center; }
.auth-card input.auth-code::placeholder { letter-spacing: 0.2em; color: var(--faint); }
.auth-card input.auth-recovery { font-family: var(--mono); letter-spacing: 0.12em; text-transform: uppercase; }
.auth-card input.auth-recovery::placeholder { text-transform: none; letter-spacing: 0.05em; color: var(--faint); }
.auth-attempts { color: var(--muted); font-size: 12.5px; margin: 0; }

/* Scelta del metodo di verifica */
.auth-options { display: grid; gap: 10px; }
.auth-card button.auth-option {
  display: flex;
  flex-direction: column;
  align-items: flex-start;
  gap: 4px;
  width: 100%;
  text-align: left;
  white-space: normal;
  padding: 14px 16px;
  border-radius: 10px;
  font-weight: 400;
}
.auth-option .title { display: flex; align-items: center; gap: 8px; font-weight: 650; font-size: 15px; }
.auth-option .desc { color: var(--muted); font-size: 13px; }
.auth-card button.auth-option:hover:not(:disabled) { border-color: var(--accent); background: var(--accent-soft); }

.auth-done { list-style: none; margin: 0 0 16px; padding: 0; display: grid; gap: 8px; }
.auth-done li { display: flex; align-items: center; gap: 8px; padding: 10px 12px; border-radius: 8px; background: var(--ok-soft); color: var(--ok); font-weight: 550; }
.auth-done svg { width: 18px; height: 18px; flex: none; }

/* Attivazione dell'app di autenticazione */
.auth-qr { display: grid; place-items: center; margin: 4px 0 14px; }
.auth-qr img { width: 208px; height: 208px; background: #fff; padding: 10px; border-radius: 10px; border: 1px solid var(--border); }
.auth-steps { margin: 0 0 14px; padding-left: 20px; color: var(--muted); }
.auth-steps li { margin: 5px 0; }
.auth-secret {
  display: flex;
  align-items: center;
  gap: 8px;
  margin: 6px 0 14px;
  padding: 8px 10px;
  background: var(--surface-2);
  border: 1px solid var(--border);
  border-radius: 8px;
}
.auth-secret code { flex: 1; font-size: 14px; letter-spacing: 0.08em; word-break: break-all; user-select: all; color: var(--text); }

/* Codici di recupero */
.auth-codes {
  list-style: none;
  counter-reset: code;
  margin: 0 0 14px;
  padding: 14px 16px;
  display: grid;
  grid-template-columns: repeat(2, minmax(0, 1fr));
  gap: 8px 16px;
  background: var(--surface-2);
  border: 1px solid var(--border);
  border-radius: 10px;
}
.auth-codes li { font-family: var(--mono); font-size: 15px; letter-spacing: 0.06em; color: var(--text); }
.auth-codes li::before { counter-increment: code; content: counter(code) "."; display: inline-block; min-width: 2.2ch; margin-right: 6px; color: var(--faint); font-size: 12px; letter-spacing: 0; }
.auth-actions { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 14px; }
.auth-check { display: flex; align-items: flex-start; gap: 8px; margin: 0 0 14px; color: var(--text); font-size: 14px; cursor: pointer; }
.auth-check input { margin-top: 3px; flex: none; }

.auth-sr-only,
.auth-card input.auth-sr-only { position: absolute; width: 1px; height: 1px; margin: -1px; padding: 0; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; border: 0; }

@media (max-width: 520px) {
  .auth-page { padding: 16px 12px; align-items: flex-start; }
  .auth-card { padding: 22px 18px 20px; }
  .auth-codes { grid-template-columns: 1fr; }
  .auth-qr img { width: 180px; height: 180px; }
}

/* ---- Console: voci di menu per permesso, contenitori della barra in alto, menu utente, pagina «Non hai accesso» ---- */

/* Voci nascoste per mancanza di permesso (data-perm, vedi app.js): la regola `.sidebar a { display: flex }` vincerebbe su [hidden]. */
.sidebar a[hidden] { display: none; }

/* Contenitori della barra in alto per la campanella (#notifications) e il menu utente (#user-menu). */
.topbar-slot { flex: none; align-self: center; position: relative; }
.topbar-slot[hidden], .topbar-slot:empty { display: none; }

.user-menu { margin: 0 6px; }
.user-menu-toggle {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  max-width: 260px;
  padding: 4px 10px 4px 4px;
  border-radius: 999px;
  background: var(--surface-2);
  color: var(--text);
}
.user-menu-toggle:hover:not(:disabled) { background: var(--surface-2); border-color: var(--accent); }
.user-menu-toggle[aria-expanded="true"] { border-color: var(--accent); color: var(--accent); }
.user-menu-toggle > svg { width: 14px; height: 14px; flex: none; color: var(--muted); }
.user-avatar {
  display: inline-grid;
  place-items: center;
  flex: none;
  width: 28px;
  height: 28px;
  border-radius: 50%;
  background: var(--accent-soft);
  color: var(--accent);
  font-size: 12px;
  font-weight: 700;
  letter-spacing: 0.02em;
}
.user-name { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 13.5px; }

.user-menu-panel {
  position: absolute;
  top: calc(100% + 8px);
  right: 0;
  z-index: 30;
  display: flex;
  flex-direction: column;
  gap: 2px;
  min-width: 240px;
  max-width: min(320px, calc(100vw - 24px));
  padding: 6px;
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 12px;
  box-shadow: 0 8px 24px rgba(16, 24, 40, 0.18);
}
.user-menu-panel[hidden] { display: none; }
.user-menu-head { display: flex; flex-direction: column; gap: 3px; margin-bottom: 4px; padding: 8px 10px 10px; border-bottom: 1px solid var(--border); }
.user-menu-head strong, .user-menu-head .small { overflow-wrap: anywhere; }
.user-menu-head .chips { margin-top: 4px; }
.user-menu-item {
  display: flex;
  align-items: center;
  gap: 10px;
  width: 100%;
  padding: 8px 10px;
  border: none;
  border-radius: 8px;
  background: none;
  color: var(--text);
  font: inherit;
  font-weight: 500;
  text-align: left;
  cursor: pointer;
}
.user-menu-item:hover, .user-menu-item:focus-visible { background: var(--surface-2); text-decoration: none; }
.user-menu-item svg { width: 18px; height: 18px; flex: none; color: var(--muted); }
@media (prefers-color-scheme: dark) {
  :root:not([data-theme="light"]) .user-menu-panel { box-shadow: 0 8px 24px rgba(0, 0, 0, 0.5); }
}
:root[data-theme="dark"] .user-menu-panel { box-shadow: 0 8px 24px rgba(0, 0, 0, 0.5); }
@media (max-width: 760px) {
  .user-menu { margin: 0 4px; }
  .user-name { display: none; }
  .user-menu-toggle { padding-right: 8px; }
}

/* Pagina «Non hai accesso» (permesso mancante per la pagina richiesta). */
.no-access { max-width: 560px; margin: 40px auto; text-align: center; }
.no-access .actions { justify-content: center; margin-top: 14px; }

/* Avvio: finché app.js non sa se l'utente è entrato, menu e barra restano nascosti (niente lampo prima dell'accesso). */
body[data-mode="loading"] .layout { visibility: hidden; }