/* T-D02b — auth surfaces: login screen, account security page, rail
 * account block. Uses Rising Dough tokens (tokens.css); loads after
 * rising-dough.css. See ADR-0050 (visual direction), ADR-0070. */

/* ─── Login screen (no app chrome) ─────────────────────────────────── */
.rd-auth {
  min-height: 100dvh;
  display: grid;
  grid-template-columns: minmax(0, 1.1fr) minmax(0, 1fr);
  background: var(--paper);
}

.rd-auth__brand {
  position: relative;
  display: flex;
  flex-direction: column;
  justify-content: space-between;
  padding: clamp(2rem, 1rem + 4vw, 4.5rem);
  background:
    radial-gradient(120% 80% at 0% 100%, var(--accent-soft) 0%, transparent 60%),
    var(--sunk);
  border-right: 1px solid var(--line);
  overflow: hidden;
}

.rd-auth__wordmark {
  font-family: var(--font-display);
  font-size: 1.5rem;
  letter-spacing: -0.015em;
  color: var(--ink);
  margin: 0;
}

.rd-auth__lede {
  font-family: var(--font-display);
  font-size: clamp(2.25rem, 1.4rem + 3vw, 4.25rem);
  line-height: 1.02;
  letter-spacing: -0.02em;
  max-width: 13ch;
  margin: 0;
  color: var(--ink);
}

.rd-auth__lede em {
  font-style: italic;
  color: var(--accent);
}

.rd-auth__foot {
  font-size: 0.8rem;
  color: var(--mute);
  margin: 0;
}

.rd-auth__panel {
  display: flex;
  align-items: center;
  justify-content: center;
  padding: clamp(1.5rem, 1rem + 3vw, 4rem);
}

.rd-auth__card {
  width: 100%;
  max-width: 24rem;
  display: grid;
  gap: 1.5rem;
}

.rd-auth__card h1 {
  font-size: clamp(1.75rem, 1.4rem + 1vw, 2.25rem);
  margin: 0.25rem 0 0;
}

.rd-auth .rd-field input[type="email"],
.rd-auth .rd-field input[type="password"],
.rd-auth-page .rd-field input[type="text"] {
  box-sizing: border-box;
  width: 100%;
  padding: 0.65rem 0.8rem;
  border: 1px solid var(--line);
  border-radius: var(--radius-control);
  background: var(--surface);
  font: inherit;
  color: var(--ink);
  transition: border-color var(--dur) var(--ease), box-shadow var(--dur) var(--ease);
}

.rd-auth .rd-field input:focus-visible,
.rd-auth-page .rd-field input:focus-visible {
  outline: none;
  border-color: var(--accent);
  box-shadow: 0 0 0 3px var(--accent-soft);
}

.rd-auth__submit {
  justify-content: center;
  width: 100%;
  padding-block: 0.65rem;
  font-weight: 500;
}

.rd-auth__divider {
  display: grid;
  grid-template-columns: 1fr auto 1fr;
  align-items: center;
  gap: 0.75rem;
  font-size: 0.7rem;
  text-transform: uppercase;
  letter-spacing: 0.1em;
  color: var(--mute);
}

.rd-auth__divider::before,
.rd-auth__divider::after {
  content: "";
  height: 1px;
  background: var(--line);
}

.rd-auth__error {
  margin: 0;
  padding: 0.65rem 0.8rem;
  border-left: 3px solid var(--expense);
  background: var(--expense-soft);
  color: var(--expense);
  border-radius: 0 var(--radius-control) var(--radius-control) 0;
  font-size: 0.875rem;
}

.rd-auth__status {
  min-height: 1.25rem;
  margin: 0;
  font-size: 0.85rem;
  color: var(--mute);
}

.rd-auth__status--error { color: var(--expense); }

.rd-btn[aria-busy="true"] { opacity: 0.7; cursor: progress; }
.rd-btn[disabled] { opacity: 0.55; cursor: not-allowed; }
.rd-btn:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
.rd-btn:active { transform: translateY(1px); }

/* ─── Account security page ────────────────────────────────────────── */
.rd-auth-page .rd-panel__head p {
  margin: 0.2rem 0 0;
  font-size: 0.85rem;
  color: var(--mute);
}

.rd-auth-device {
  display: block;
  font-weight: 500;
  max-width: 34ch;
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
}

.rd-auth-meta {
  display: block;
  color: var(--mute);
  font-size: 0.78rem;
  font-family: var(--font-mono);
}

.rd-auth-page .rd-table td.rd-auth-action { text-align: right; width: 1%; white-space: nowrap; }
.rd-auth-page form { margin: 0; }

.rd-btn--danger { color: var(--expense); border-color: color-mix(in oklab, var(--expense) 35%, var(--line)); }
.rd-btn--danger:hover { background: var(--expense-soft); }

.rd-auth-page .rd-empty-state { padding: 1.25rem; margin: 0; color: var(--mute); }

.rd-auth-register {
  max-width: 32rem;
  padding: 1.25rem;
}

/* ─── Rail account block + mobile account link ─────────────────────── */
.rd-rail__account {
  display: grid;
  gap: 0.25rem;
  margin-top: 0.75rem;
  padding-top: 0.75rem;
  border-top: 1px solid var(--line);
}

.rd-rail__who {
  font-size: 0.75rem;
  color: var(--mute);
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
  padding: 0 0.6rem;
}

.rd-rail__signout {
  width: 100%;
  justify-content: flex-start;
  padding: 0.4rem 0.6rem;
  font-size: 0.95rem;
  color: var(--mute);
}

.rd-rail__signout:hover { color: var(--ink); }

.rd-account-mobile { display: none; }
.rd-auth-show-sm { display: none; }

@media (width <= 900px) {
  .rd-auth { grid-template-columns: 1fr; }

  .rd-auth__brand {
    border-right: 0;
    border-bottom: 1px solid var(--line);
    gap: 1.5rem;
  }

  .rd-auth__lede { font-size: clamp(1.75rem, 1.2rem + 3vw, 2.5rem); max-width: 18ch; }
  .rd-auth__panel { align-items: flex-start; }
}

@media (width <= 640px) {
  .rd-account-mobile {
    display: flex;
    justify-content: flex-end;
    margin: -0.25rem 0 0.75rem;
  }

  .rd-auth-device { max-width: 22ch; }
  .rd-auth-page .rd-table-scroll .rd-table { min-width: 0; }
  .rd-auth-page .rd-table .rd-auth-hide-sm { display: none; }
  .rd-auth-page .rd-auth-show-sm { display: inline; }
  .rd-auth-page .rd-auth-meta.rd-auth-show-sm { display: block; }
  .rd-auth-page .rd-btn { min-height: 44px; }
}