/* bcos-mfa — two-step sign-in: Security panel, enrollment, challenge.
   Loaded on public, admin, and auth pages after bcos.css. Tokens from :root. */

.mfa-card {
  background: var(--bg); border: 1px solid var(--line); border-radius: 18px;
  padding: 1.35rem 1.4rem; margin: 1.4rem 0; max-width: 56rem;
  box-shadow: 0 1px 0 rgba(0,0,0,.03), 0 12px 32px rgba(0,0,0,.04);
}
.mfa-card-h { display: grid; grid-template-columns: auto 1fr auto; gap: .9rem; align-items: start; }
.mfa-card-h h3 { margin: .05rem 0 .25rem; font-size: 1.15rem; letter-spacing: -.02em; }
.mfa-card-h p { margin: 0; color: var(--muted); font-size: .9rem; line-height: 1.5; max-width: 38rem; }
.mfa-ico {
  width: 2.5rem; height: 2.5rem; border-radius: 12px; display: grid; place-items: center;
  background: var(--ink); color: var(--on-ink); font-size: 1rem;
}
.mfa-pill {
  font-size: .66rem; font-weight: 700; letter-spacing: .14em; text-transform: uppercase;
  padding: .32rem .6rem; border-radius: 999px; white-space: nowrap;
}
.mfa-pill.is-on { background: rgba(31,138,76,.12); color: var(--green); }
.mfa-pill.is-off { background: var(--surface-3); color: var(--ink-4); }
.mfa-note { margin: 1rem 0 0; font-size: .9rem; padding: .7rem .85rem; border-radius: 12px; }
.mfa-note.is-warn { background: rgba(225,6,0,.06); color: var(--red); }
.mfa-step-k { font-size: .7rem; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; margin: 0 0 .45rem; color: var(--ink); }
.mfa-start, .mfa-codes-box, .mfa-setup, .mfa-facts, .mfa-grid, .mfa-off { margin-top: 1.2rem; }

/* Enrollment */
.mfa-setup { display: grid; grid-template-columns: 196px 1fr; gap: 1.6rem; align-items: start; }
.mfa-setup-qr {
  background: #fff; border: 1px solid var(--line); border-radius: 16px; padding: .6rem;
  width: 196px; aspect-ratio: 1; display: grid; place-items: center;
}
.mfa-qr-svg { width: 100%; height: auto; display: block; }
.mfa-key code {
  display: inline-block; font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace; font-size: .95rem;
  letter-spacing: .06em; background: var(--surface-2); border: 1px solid var(--line); border-radius: 10px;
  padding: .55rem .75rem; word-break: break-all; user-select: all;
}
.mfa-confirm { margin-top: 1.1rem; }
.mfa-cancel { margin-top: .6rem; }
.mfa-actions { display: flex; flex-wrap: wrap; gap: .5rem; margin-top: .9rem; }
.bcos-btn-link { background: none; border: 0; padding: 0; font: inherit; font-size: .85rem; color: var(--muted); text-decoration: underline; cursor: pointer; }
.bcos-btn-link:hover { color: var(--ink); }

/* Six-digit code: fallback single input, and the enhanced boxes */
.mfa-code {
  font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace; font-size: 1.4rem; letter-spacing: .4em;
  width: 11.5rem; padding: .6rem .8rem; border: 1px solid var(--line); border-radius: 12px; text-align: center;
}
.mfa-boxes { display: flex; gap: .45rem; margin: .2rem 0 .1rem; }
.mfa-box {
  width: 2.75rem; height: 3.3rem; padding: 0 !important; text-align: center;
  font: 600 1.45rem/1 ui-monospace, "SF Mono", Menlo, Consolas, monospace; color: var(--ink);
  border: 1.5px solid var(--line); border-radius: 12px; background: var(--bg);
  transition: border-color .15s, box-shadow .15s;
}
.mfa-box:nth-child(3) { margin-right: .55rem; }
.mfa-box:focus { outline: none; border-color: var(--ink); box-shadow: 0 0 0 3px rgba(17,17,17,.08); }
.mfa-boxes.is-full .mfa-box { border-color: var(--ink); }
.mfa-boxes.is-short { animation: mfa-shake .4s; }
@keyframes mfa-shake { 20%, 60% { transform: translateX(-5px); } 40%, 80% { transform: translateX(5px); } }
@media (prefers-reduced-motion: reduce) { .mfa-boxes.is-short { animation: none; } }

/* Recovery codes */
.mfa-codes-box { background: var(--surface-2); border: 1px solid var(--line); border-radius: 16px; padding: 1.1rem 1.2rem; }
.mfa-codes-box > p { margin: 0 0 .7rem; font-size: .9rem; color: var(--ink-3); }
.mfa-codes {
  list-style: none; margin: 0; padding: 0;
  display: grid; grid-template-columns: repeat(auto-fill, minmax(9.5rem, 1fr)); gap: .45rem;
}
.mfa-codes code {
  display: block; font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace; font-size: .98rem; letter-spacing: .05em;
  background: var(--bg); border: 1px solid var(--line); border-radius: 10px; padding: .45rem .6rem; text-align: center;
}

/* Enrolled */
.mfa-facts { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: .6rem; }
.mfa-facts div { background: var(--surface-2); border-radius: 12px; padding: .7rem .85rem; }
.mfa-facts dt { font-size: .66rem; letter-spacing: .12em; text-transform: uppercase; color: var(--muted); margin: 0 0 .2rem; }
.mfa-facts dd { margin: 0; font-weight: 650; font-size: .95rem; }
.mfa-facts dd.is-low { color: var(--red); }
.mfa-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: .8rem; }
.mfa-mini { border: 1px solid var(--line); border-radius: 14px; padding: 1rem; display: grid; gap: .5rem; align-content: start; }
.mfa-mini .bcos-hint { margin: 0; }
.mfa-mini .bcos-btn { justify-self: start; }
.mfa-off summary { cursor: pointer; font-size: .88rem; color: var(--muted); }
.mfa-off summary:hover { color: var(--ink); }
.mfa-off form { margin-top: .8rem; max-width: 22rem; }

/* Sign-in challenge */
.mfa-challenge { display: grid; gap: .9rem; }
.mfa-challenge .mfa-who { display: flex; align-items: center; gap: .6rem; font-size: .9rem; color: var(--ink-3); margin: 0; }
.mfa-challenge .mfa-who img { width: 2rem; height: 2rem; border-radius: 50%; }
.mfa-challenge .bcos-check { font-size: .9rem; }
.mfa-alt { display: flex; flex-wrap: wrap; gap: .5rem 1.2rem; font-size: .85rem; margin-top: .4rem; }
.mfa-alt a { color: var(--muted); text-decoration: underline; }
.mfa-alt a:hover { color: var(--ink); }
.mfa-recovery-input {
  font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace; font-size: 1.1rem; letter-spacing: .08em;
}

@media (max-width: 720px) {
  .mfa-card { padding: 1.1rem; }
  .mfa-card-h { grid-template-columns: auto 1fr; }
  .mfa-card-h .mfa-pill { grid-column: 1 / -1; justify-self: start; }
  .mfa-setup { grid-template-columns: 1fr; }
  .mfa-setup-qr { width: min(220px, 100%); }
  .mfa-facts, .mfa-grid { grid-template-columns: 1fr; }
  .mfa-box { width: 2.45rem; height: 3rem; font-size: 1.3rem; }
  .mfa-box:nth-child(3) { margin-right: .3rem; }
}