/* #region zone:monitor.auth — UI ความปลอดภัยผู้ดูแล */
/* Operator security UI (console-auth.js) — page specifics only; components come from design-system.css. */
.auth-link.btn-link {
  align-self: center;
  margin-top: calc(-1 * var(--s-1));
  font-size: var(--fs-sm);
  min-height: var(--s-10);
}
/* Login method switch: tap targets stay at 40px or taller at every width. */
.login-shell-form .segmented .segment {
  height: var(--s-10);
}
.auth-flow form,
.auth-flow > div {
  display: flex;
  flex-direction: column;
  gap: var(--s-4);
}
.auth-flow h3 {
  font-size: var(--fs-lg);
}
.auth-flow .btn {
  width: 100%;
}
.auth-flow .btn-secondary {
  background: transparent;
}
.auth-lead {
  font-size: var(--fs-md);
  color: var(--text-1);
}
.auth-hint {
  font-size: var(--fs-xs);
  color: var(--text-3);
}
.auth-hint:empty {
  display: none;
}
.auth-otp {
  font: 22px/1 var(--mono) !important;
  letter-spacing: 0.35em;
  text-align: center;
}
.auth-status:empty {
  display: none;
}
.auth-status {
  padding: var(--s-3) var(--s-4);
  border-radius: var(--r-md);
  background: var(--danger-soft);
  color: var(--text-1);
  font-size: var(--fs-sm);
}
/* One centred column for the whole enroll page (title/subtitle/refresh, banner(s), card) — the
   card fills the column instead of carrying its own, mismatched width (owner review 2026-09-26). */
#content:has(> .auth-enroll) {
  max-width: 600px;
  margin: 0 auto;
}
.page-header:has(~ #content > .auth-enroll) {
  max-width: 600px;
  margin: 0 auto;
}
.auth-banner:has(~ #content > .auth-enroll) {
  max-width: 600px;
  margin: 0 auto var(--s-4);
}
.auth-enroll {
  width: 100%;
  max-width: none;
  padding: var(--s-6);
}
.auth-enroll > .banner {
  margin-top: var(--s-4);
}
.auth-enroll > .auth-steps {
  margin-top: var(--s-4);
}
.auth-enroll > .panel-header + .banner,
.auth-enroll > .panel-header + .auth-steps {
  margin-top: 0;
}
.auth-steps {
  margin: 0;
  padding-left: var(--s-5);
  display: flex;
  flex-direction: column;
  gap: var(--s-6);
}
.auth-steps li {
  padding-left: var(--s-1);
}
.auth-steps li > strong {
  display: block;
  margin-bottom: var(--s-2);
}
.auth-steps li p {
  margin: var(--s-2) 0;
}
.auth-steps form {
  display: flex;
  flex-direction: column;
  gap: var(--s-3);
  max-width: 320px;
  margin-top: var(--s-3);
}
.auth-qr {
  display: block;
  width: 210px;
  height: 210px;
  margin: var(--s-3) 0;
  border-radius: var(--r-md);
  image-rendering: pixelated;
  background: #fff;
}
.auth-secret {
  display: inline-block;
  margin: 0 var(--s-2) var(--s-2) 0;
  padding: var(--s-2) var(--s-3);
  border-radius: var(--r-md);
  background: var(--surface-3);
  border: 1px solid var(--border);
  font: var(--fs-sm) var(--mono);
  letter-spacing: 0.06em;
  overflow-wrap: anywhere;
}
.auth-codes {
  display: grid;
  grid-template-columns: repeat(2, minmax(0, max-content));
  gap: var(--s-2) var(--s-8);
  margin: var(--s-3) 0;
  padding: var(--s-4) var(--s-5);
  border-radius: var(--r-md);
  background: var(--surface-3);
  border: 1px solid var(--border);
  list-style: none;
  font: var(--fs-md) var(--mono);
}
.auth-actions {
  display: flex;
  gap: var(--s-2);
  flex-wrap: wrap;
  align-items: center;
  margin-top: var(--s-4);
}
.auth-check {
  display: flex;
  align-items: center;
  gap: var(--s-2);
  margin: var(--s-3) 0;
  font-size: var(--fs-sm);
}
.auth-inline {
  display: flex;
  flex-direction: column;
  gap: var(--s-3);
  max-width: 420px;
  margin-top: var(--s-5);
  padding: var(--s-5);
  border: 1px solid var(--border);
  border-radius: var(--r-lg);
  background: var(--surface-2);
}
.auth-inline > h3,
.auth-inline > strong {
  font-size: var(--fs-md);
  font-weight: var(--fw-semibold);
}
.auth-inline .btn-primary {
  align-self: flex-end;
}
.auth-security-body {
  display: flex;
  flex-direction: column;
  gap: var(--s-4);
}
.auth-team-area:empty {
  display: none;
}
.auth-team-area {
  margin-top: var(--s-2);
  text-align: left;
}
@media (max-width: 699px) {
  .auth-codes {
    grid-template-columns: 1fr;
  }
  .auth-qr {
    width: 180px;
    height: 180px;
  }
  .auth-inline {
    padding: var(--s-4);
  }
  .auth-inline .btn-primary {
    align-self: stretch;
  }
}
/* Longer English button labels must wrap instead of running off a narrow card. */
.members-table .row-actions,
.member-card-actions {
  flex-wrap: wrap;
}
/* #endregion */
/* จดจำเครื่องนี้ + รายการอุปกรณ์ที่จดจำไว้ (spec 2026-10-05-trusted-device.md) */
.auth-remember {
  display: flex;
  gap: var(--s-3);
  align-items: center;
  margin: var(--s-3) 0;
}
.auth-device-row {
  display: flex;
  gap: var(--s-3);
  align-items: center;
  justify-content: space-between;
  flex-wrap: wrap;
  padding: var(--s-3) 0;
  border-bottom: 1px solid var(--line, currentColor);
}
.auth-trusted-body > .btn,
.auth-trusted-body > button {
  margin-top: var(--s-4);
}