/* WK Online · auth screens (login error, forced set-password). Extends live .login-wrap from app.css.
   Component tokens map onto app.css semantic vars; no raw hex. */
:root {
  --auth-focus-ring: 0 0 0 2px var(--surface), 0 0 0 4px var(--primary);
  --auth-input-focus: 0 0 0 1px var(--primary);
  --auth-check-met: var(--success);
  --auth-check-unmet: var(--text-muted);
  --auth-foot-fg: color-mix(in srgb, var(--text-muted) 70%, var(--text)); /* on page tint: muted alone is 4.45:1 */
  --auth-error-bg: var(--row-oos-bg);
  --auth-error-border: color-mix(in srgb, var(--danger) 45%, var(--border));
  --auth-error-fg: color-mix(in srgb, var(--danger) 70%, var(--text));
}
.login-wrap .form-control:focus { border-color: var(--primary); box-shadow: var(--auth-input-focus); }
.login-wrap .btn:focus-visible, .login-wrap .form-check-input:focus-visible, .auth-link:focus-visible { outline: none; box-shadow: var(--auth-focus-ring); }
.login-wrap .btn:focus { box-shadow: none; }
.login-wrap .btn:focus-visible { box-shadow: var(--auth-focus-ring); }
.login-wrap .input-group .btn.btn-outline-secondary { color: var(--text-muted); border-color: var(--border); background: var(--surface); min-width: 44px; }
.login-wrap .input-group .btn.btn-outline-secondary:hover { color: var(--text); background: var(--table-header-bg); }
.login-wrap .input-group .btn.btn-outline-secondary[aria-pressed="true"] { color: var(--primary); }

.auth-alert { display: flex; gap: 10px; align-items: flex-start; padding: 10px 12px; margin-bottom: 16px; border-radius: 6px;
  background: var(--auth-error-bg); border: 1px solid var(--auth-error-border); color: var(--text); font-size: 14px; line-height: 1.45; }
.auth-alert i { color: var(--auth-error-fg); font-size: 18px; line-height: 1.2; flex-shrink: 0; }
.auth-alert strong { display: block; color: var(--auth-error-fg); }
/* Neutral notice (signed out): same shape, info tone */
.auth-alert.is-info { background: var(--alert-info-bg); border-color: var(--alert-info-border); }
.auth-alert.is-info i, .auth-alert.is-info strong { color: var(--alert-info-fg); }

.auth-title { font-size: 20px; font-weight: 600; margin: 0 0 6px; }
.auth-lead { font-size: 14px; color: var(--text-muted); margin: 0 0 18px; line-height: 1.45; }
.auth-lead strong { color: var(--text); font-weight: 600; }
.auth-checks { list-style: none; padding: 0; margin: -4px 0 16px; display: grid; gap: 4px; font-size: 13.5px; }
.auth-checks li { display: flex; align-items: center; gap: 8px; color: var(--text-muted); }
.auth-checks li i { font-size: 15px; color: var(--auth-check-unmet); }
.auth-checks li.is-met { color: var(--text); }
.auth-checks li.is-met i { color: var(--auth-check-met); }
.auth-checks li.is-bad { color: var(--auth-error-fg); }
.auth-checks li.is-bad i { color: var(--auth-error-fg); }
.auth-checks-label { font-size: 12.5px; font-weight: 600; color: var(--text-muted); margin: 0 0 6px; }
.auth-actions { display: flex; align-items: center; gap: 12px; }
.login-wrap .btn.auth-btn { width: auto; display: inline-flex; align-items: center; gap: 6px; font-weight: 600; font-size: 15px; padding: 0 16px; min-height: 40px; }
.login-wrap .btn.auth-btn:disabled { opacity: .5; }
.auth-foot { text-align: center; font-size: 13px; color: var(--auth-foot-fg); margin: 14px 0 0; }
.auth-link { color: var(--count-accent-bg); font-weight: 600; text-decoration: none; border-radius: 2px; display: inline-flex; align-items: center; min-height: 32px; }
.auth-link:hover { text-decoration: underline; }
@media (max-width: 575.98px) {
  .login-wrap { align-items: flex-start; padding-top: 32px; }
  .login-wrap .form-control { min-height: 44px; }
  .login-wrap .btn, .login-wrap .btn.auth-btn { min-height: 44px; }
  .auth-link { min-height: 44px; }
}
@media (max-width: 575.98px) {
  .login-wrap .form-check { min-height: 44px; display: flex; align-items: center; gap: 10px; padding-left: 0; }
  .login-wrap .form-check .form-check-input { width: 20px; height: 20px; margin: 0; float: none; }
}