/* src/shared/mfa.css — two-step verification: the account page's settings and
   the code dialog (src/shared/mfa.js). Tokens only (src/shared/tokens.css). */

.tmt-mfa { padding: 12px 14px; background: var(--card); border: 1px solid var(--rule); border-radius: 8px; }
.tmt-mfa__head { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
.tmt-mfa__name { font-family: var(--font-sans); font-size: 13.5px; font-weight: 600; color: var(--ink); }
.tmt-mfa__state { font-family: var(--font-sans); font-size: 11.5px; color: var(--ink-3); margin-top: 1px; }
.tmt-mfa__state.is-on { color: var(--up); font-weight: 600; }
.tmt-mfa__desc { font-family: var(--font-sans); font-size: 12px; line-height: 1.5; color: var(--ink-2); margin: 10px 0 0; }
.tmt-mfa__desc a { color: var(--cool); }
.tmt-mfa__msg { font-family: var(--font-sans); font-size: 12px; line-height: 1.45; margin: 10px 0 0; padding: 7px 10px;
  border-left: 2px solid var(--rule); border-radius: 4px; background: var(--paper-2); color: var(--ink-1); }
.tmt-mfa__msg.is-ok { border-left-color: var(--up); }
.tmt-mfa__msg.is-error { border-left-color: var(--down); }

.tmt-mfa__steps { margin: 12px 0 0; padding-left: 18px; font-family: var(--font-sans); font-size: 12.5px; color: var(--ink-1); }
.tmt-mfa__steps > li { margin: 0 0 14px; }
.tmt-mfa__steps > li::marker { color: var(--ink-3); font-weight: 600; }
.tmt-mfa__step { display: block; margin-bottom: 8px; }
/* The QR code is black on white whatever the theme: a scanner needs the contrast. */
.tmt-mfa__qr { display: inline-block; padding: 8px; background: white; border: 1px solid var(--rule); border-radius: 6px; line-height: 0; }
.tmt-mfa__qr img { display: block; width: 168px; height: 168px; }
.tmt-mfa__link { display: block; margin: 8px 0 0; font-family: var(--font-sans); font-size: 12px; color: var(--cool); }
.tmt-mfa__keyrow { display: flex; flex-wrap: wrap; align-items: center; gap: 6px; margin-top: 8px; }
.tmt-mfa__keyrow .tmt-mfa__desc { margin: 0; }
.tmt-mfa__key { font-family: var(--font-mono); font-size: 12.5px; letter-spacing: 0.04em; color: var(--ink); word-break: break-all;
  background: var(--paper-2); border: 1px solid var(--rule-soft); border-radius: 4px; padding: 2px 6px; }

.tmt-mfa__label { display: block; margin-bottom: 5px; font-family: var(--font-sans); font-size: 10px; font-weight: 700;
  letter-spacing: 0.1em; text-transform: uppercase; color: var(--ink-3); }
.tmt-mfa__inline { display: flex; flex-wrap: wrap; align-items: center; gap: 6px; }
.tmt-mfa__code { width: 9.5em; height: 40px; padding: 0 10px; box-sizing: border-box; font-family: var(--font-mono); font-size: 16px;
  letter-spacing: 0.18em; color: var(--ink); background: var(--card); border: 1px solid var(--rule); border-radius: 6px; }
.tmt-mfa__code:focus { outline: none; border-color: var(--cool); box-shadow: 0 0 0 3px var(--cool-soft); }
.tmt-mfa__error { margin: 8px 0 0; font-family: var(--font-sans); font-size: 12.5px; color: var(--down); }

.tmt-mfa__btn { display: inline-flex; align-items: center; justify-content: center; height: 36px; padding: 0 14px;
  font-family: var(--font-sans); font-size: 12.5px; font-weight: 600; color: var(--ink-1); background: transparent;
  border: 1px solid var(--rule); border-radius: 6px; cursor: pointer; white-space: nowrap; }
.tmt-mfa__btn:hover { border-color: var(--rule-strong); }
.tmt-mfa__btn:disabled { opacity: 0.6; cursor: default; }
.tmt-mfa__btn--primary { color: var(--text-on-ink, var(--paper)); background: var(--brand); border-color: var(--brand); }
.tmt-mfa__btn--primary:hover { filter: brightness(1.06); border-color: var(--brand); }
.tmt-mfa__btn--danger { color: var(--down); border-color: var(--down-soft); }
.tmt-mfa__btn--danger:hover { background: var(--down-bg); border-color: var(--down); }
.tmt-mfa__btn--ghost { margin-top: 12px; }
.tmt-mfa__btn--sm { height: 28px; padding: 0 10px; font-size: 12px; }
.tmt-mfa__confirm { margin-top: 10px; }
.tmt-mfa__confirm .tmt-mfa__inline { margin-top: 8px; }

/* The code dialog: a native <dialog> (the top layer needs no z-index; focus
   returns to the opener). */
.tmt-mfa-dialog { width: min(380px, calc(100vw - 32px)); margin: auto; padding: 20px; color: var(--ink);
  background: var(--card); border: 1px solid var(--rule); border-radius: var(--radius-lg); box-shadow: var(--shadow-floating); }
.tmt-mfa-dialog::backdrop { background: oklch(0 0 0 / 0.42); }
.tmt-mfa-dialog h2 { margin: 0 0 8px; font-family: var(--font-serif); font-size: 17px; font-weight: 600; line-height: 1.3; }
.tmt-mfa-dialog__why { margin: 0 0 14px; font-family: var(--font-sans); font-size: 13px; line-height: 1.5; color: var(--ink-2); }
.tmt-mfa-dialog .tmt-mfa__code { width: 100%; }
.tmt-mfa-dialog__actions { display: flex; justify-content: flex-end; gap: 8px; margin-top: 16px; }

/* Phones (docs/MOBILE.md section 1): 44px targets, 16px fields (already),
   and the dialog is a bottom sheet over the tab bar. */
@media (max-width: 820px), (pointer: coarse) and (max-height: 500px) {
  .tmt-mfa__btn, .tmt-mfa__btn--sm { min-height: 44px; }
  .tmt-mfa__code { height: 48px; }
  .tmt-mfa__link { display: flex; align-items: center; min-height: 44px; margin-top: 2px; }
  .tmt-mfa__desc a { display: inline-flex; align-items: center; min-height: 44px; }
  .tmt-mfa__label { font-size: 11px; }
  .tmt-mfa-dialog { width: min(560px, 100vw); max-width: 100vw; margin: auto auto 0; border-radius: var(--radius-lg) var(--radius-lg) 0 0;
    padding-bottom: calc(20px + env(safe-area-inset-bottom)); }
}