/*
 * ADAM — signed-out chrome.
 *
 * Layered on top of app.css for the pages a user sees before they are signed
 * in, or instead of the app: the login form, "not provisioned", and 403 when
 * there is no session to draw a menu from. Same tokens, same logos, same footer
 * and the same theme toggle as the application layout — only the sidebar and
 * the menu are missing, because neither means anything to someone who has not
 * signed in yet.
 */

.auth-shell { display: flex; flex-direction: column; min-height: 100vh; }
.auth-topbar {
    display: flex; align-items: center; justify-content: space-between; gap: 1rem;
    padding: .5rem 1.4rem; min-height: 78px;
    border-bottom: 1px solid var(--border);
    background: linear-gradient(135deg, var(--brand-grad1), var(--brand-grad2));
}
.auth-brand { display: flex; align-items: center; gap: .6rem; color: var(--text); text-decoration: none; }
.auth-brand img { height: 57px; width: auto; border-radius: 6px; }
.auth-brand-name { display: flex; flex-direction: column; }
.auth-brand-name strong {
    font-family: "Century Gothic", "Trebuchet MS", "Segoe UI", sans-serif;
    font-size: .72rem; font-weight: 500; text-transform: uppercase;
    letter-spacing: .16em; line-height: 1.24;
}
.auth-main { flex: 1; display: grid; place-items: center; padding: 2rem 1rem; }
.auth-card {
    width: min(100%, 420px);
    background: var(--card); border: 1px solid var(--border);
    border-radius: 12px; padding: 1.5rem 1.6rem;
    box-shadow: 0 18px 50px rgba(0, 0, 0, .28);
}
.auth-card h1 { margin: 0; font-size: 1.15rem; font-weight: 700; color: var(--page-title); }
.auth-card .auth-subtitle { margin: .3rem 0 1.25rem; color: var(--muted); font-size: .88rem; }
.auth-card label { display: block; margin-bottom: .9rem; gap: .3rem; }
.auth-card label > span { display: block; margin-bottom: .28rem; font-size: .78rem; color: var(--muted); }
.auth-card input[type="text"], .auth-card input[type="password"] { width: 100%; padding: .55rem .65rem; }
.auth-card input:focus { outline: none; border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-soft); }
.auth-card button[type="submit"] { width: 100%; padding: .6rem 1rem; font-weight: 600; margin-top: .2rem; }
/* The Entra sign-in control: same weight and shape as the Sign in button it
   replaces, so the card keeps its proportions in either mode. */
.auth-federated-button {
    display: flex; align-items: center; justify-content: center; gap: .6rem;
    width: 100%; padding: .7rem 1rem; margin-top: .2rem;
    font-weight: 600; text-align: center; text-decoration: none;
}
.auth-ms-logo { width: 1.05rem; height: 1.05rem; flex-shrink: 0; display: block; }
.auth-message {
    margin-bottom: 1rem; padding: .65rem .75rem;
    border-radius: 8px; font-size: .85rem; line-height: 1.4;
}
.auth-message.error { border: 1px solid var(--error); background: rgba(255, 132, 132, .1); color: var(--error); }
.auth-message.notice { border: 1px solid var(--accent); background: var(--accent-soft); color: var(--text); }
.auth-help {
    margin: 1.1rem 0 0; padding-top: .85rem; border-top: 1px solid var(--border);
    color: var(--muted2); font-size: .76rem; line-height: 1.5;
}
.auth-footer {
    display: flex; align-items: center; justify-content: space-between; gap: 1rem; flex-wrap: wrap;
    padding: .7rem 1.4rem; border-top: 1px solid var(--border);
    color: var(--muted2); font-size: .75rem;
}