/* ═══════════════════════════════════════════════════════════════
   Security Tab — Component CSS
   ═══════════════════════════════════════════════════════════════

   Scope note: rules below rely on CSS custom properties declared on
   `.settings-page` in Settings.razor (--orange, --teal, --charcoal,
   --surface, --warm-white, --green, --amber, --indigo, --radius-*,
   --font-display, --font-body, --charcoal-*). They cascade into the
   Security tab via inheritance because `<SecurityTab>` renders inside
   `.settings-page`. If this stylesheet is ever loaded on a surface
   that does not provide those tokens, redeclare them on the relevant
   root (same pattern as `.logs-dialog` / `.crm-layout`).

   The `fadeUp` keyframe is also defined in Settings.razor's parent
   block; it animates `.sec-tab` on mount. Keep it there until the
   Profile / Notifications tabs migrate too.
   ═══════════════════════════════════════════════════════════════ */

.sec-tab { display: flex; flex-direction: column; gap: 1.25rem; animation: fadeUp 0.4s ease-out both; }
.sec-loading { display: flex; justify-content: center; padding: 4rem 0; }

/* Bottom split: change-password + recent-activity in the main column,
   active sessions floats as a sticky right rail. Posture banner and MFA
   panel above stay full-width so the factor cards don't get cramped. */
.sec-bottom-grid { display: grid; grid-template-columns: 1fr 360px; gap: 1.25rem; align-items: start; }
.sec-bottom-main { display: flex; flex-direction: column; gap: 1.25rem; min-width: 0; }
.sec-bottom-rail { position: sticky; top: 1rem; min-width: 0; }
@media (max-width: 1100px) {
    .sec-bottom-grid { grid-template-columns: 1fr; }
    .sec-bottom-rail { position: static; }
}

/* Posture banner */
.sec-posture-banner { display: flex; align-items: center; justify-content: space-between; gap: 1.5rem; padding: 1.375rem 1.75rem; background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-lg); box-shadow: 0 1px 3px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.02); position: relative; overflow: hidden; transition: box-shadow 0.3s ease; }
.sec-posture-banner::before { content: ''; position: absolute; left: 0; top: 0; bottom: 0; width: 3px; }
.sec-posture-banner.sec-grade-strong::before { background: var(--green); }
.sec-posture-banner.sec-grade-good::before { background: var(--amber); }
.sec-posture-banner.sec-grade-atrisk::before { background: #ef4444; }
.sec-posture-text { flex: 1; min-width: 0; }
.sec-posture-grade { font-family: var(--font-display); font-size: 1.625rem; font-weight: 800; letter-spacing: -0.03em; color: var(--charcoal); margin-bottom: 0.1875rem; line-height: 1.1; }
.sec-posture-banner.sec-grade-strong .sec-posture-grade { color: #15803d; }
.sec-posture-banner.sec-grade-good .sec-posture-grade { color: #92400e; }
.sec-posture-banner.sec-grade-atrisk .sec-posture-grade { color: #dc2626; }
.sec-posture-sub { font-size: 0.8125rem; color: var(--charcoal-40); margin-bottom: 0.875rem; line-height: 1.4; }
.sec-posture-chips { display: flex; gap: 0.5rem; flex-wrap: wrap; }
.sec-posture-chip { display: inline-flex; align-items: center; gap: 0.375rem; padding: 0.3125rem 0.75rem 0.3125rem 0.625rem; background: rgba(221,145,66,0.07); border: 1px solid rgba(221,145,66,0.18); border-radius: 100px; font-size: 0.75rem; font-weight: 600; color: var(--orange); text-decoration: none; transition: all 0.18s; cursor: pointer; }
.sec-posture-chip:hover { background: rgba(221,145,66,0.14); border-color: rgba(221,145,66,0.32); transform: translateY(-1px); }
.sec-posture-chip:focus-visible { outline: 2px solid var(--orange); outline-offset: 2px; }
.sec-posture-chip svg { width: 11px; height: 11px; transition: transform 0.18s; }
.sec-posture-chip:hover svg { transform: translateX(2px); }
.sec-posture-ring { position: relative; width: 92px; height: 92px; flex-shrink: 0; }
.sec-posture-ring svg { width: 100%; height: 100%; filter: drop-shadow(0 2px 8px rgba(0,0,0,0.06)); }
.sec-ring-track { stroke: rgba(50,50,50,0.07); }
.sec-posture-banner.sec-grade-strong .sec-ring-fill { stroke: #22c55e; filter: drop-shadow(0 0 6px rgba(34,197,94,0.35)); }
.sec-posture-banner.sec-grade-good .sec-ring-fill { stroke: #f59e0b; filter: drop-shadow(0 0 6px rgba(245,158,11,0.35)); }
.sec-posture-banner.sec-grade-atrisk .sec-ring-fill { stroke: #ef4444; filter: drop-shadow(0 0 6px rgba(239,68,68,0.35)); }
.sec-ring-fill { transition: stroke-dashoffset 1s cubic-bezier(0.34, 1.2, 0.64, 1); }
.sec-posture-score { position: absolute; inset: 0; display: flex; align-items: center; justify-content: center; font-family: var(--font-display); font-weight: 800; font-size: 1.4375rem; letter-spacing: -0.03em; color: var(--charcoal); pointer-events: none; }
.sec-posture-banner.sec-grade-strong .sec-posture-score { color: #15803d; }
.sec-posture-banner.sec-grade-good .sec-posture-score { color: #92400e; }
.sec-posture-banner.sec-grade-atrisk .sec-posture-score { color: #dc2626; }

/* Sign-in & MFA panel */
.sec-mfa-panel { background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-lg); padding: 1.375rem 1.75rem; box-shadow: 0 1px 3px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.02); }
.sec-section-header { display: flex; gap: 0.875rem; align-items: flex-start; margin-bottom: 1.125rem; }
.sec-section-icon { width: 40px; height: 40px; min-width: 40px; border-radius: 10px; background: rgba(0,166,156,0.09); color: var(--teal); display: flex; align-items: center; justify-content: center; flex-shrink: 0; transition: background 0.2s; }
.sec-mfa-panel:hover .sec-section-icon { background: rgba(0,166,156,0.14); }
.sec-section-icon svg { width: 18px; height: 18px; }
.sec-section-title { font-family: var(--font-display); font-size: 1.0625rem; font-weight: 700; color: var(--charcoal); margin: 0; line-height: 1.3; letter-spacing: -0.01em; }
.sec-section-desc { font-size: 0.8125rem; color: var(--charcoal-40); margin: 0.1875rem 0 0; line-height: 1.45; }
.sec-factor-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 0.875rem; }
@media (max-width: 900px) { .sec-factor-grid { grid-template-columns: 1fr; } }

/* Recovery codes strip */
.sec-recovery-strip { display: flex; align-items: center; gap: 0.875rem; padding: 0.8125rem 1rem; background: rgba(50,50,50,0.03); border: 1px solid var(--charcoal-08); border-radius: var(--radius-md); margin-top: 0.875rem; transition: all 0.2s; }
.sec-recovery-strip.is-low { background: rgba(245,158,11,0.06); border-color: rgba(245,158,11,0.2); }
.sec-recovery-icon { width: 18px; height: 18px; color: rgba(50,50,50,0.45); flex-shrink: 0; }
.sec-recovery-strip.is-low .sec-recovery-icon { color: var(--amber); }
.sec-recovery-text { flex: 1; min-width: 0; }
.sec-recovery-title { font-size: 0.6875rem; font-weight: 700; color: var(--charcoal-40); text-transform: uppercase; letter-spacing: 0.06em; margin-bottom: 0.1875rem; }
.sec-recovery-count { font-size: 0.875rem; color: var(--charcoal); line-height: 1.35; }
.sec-recovery-count strong { font-weight: 700; font-family: var(--font-display); }
.sec-recovery-warning { color: var(--amber); font-weight: 600; }
.sec-recovery-link { flex-shrink: 0; font-size: 0.8125rem; font-weight: 600; color: var(--orange); text-decoration: none; padding: 0.3125rem 0.75rem; border-radius: var(--radius-sm); transition: all 0.18s; white-space: nowrap; }
.sec-recovery-link:hover { background: rgba(221,145,66,0.09); }
.sec-recovery-link:focus-visible { outline: 2px solid var(--orange); outline-offset: 2px; }

/* Factor cards */
.sec-factor-card { background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-md); padding: 1rem 1.125rem; display: flex; flex-direction: column; min-height: 180px; transition: all 0.25s; position: relative; overflow: hidden; }
.sec-factor-card:hover { box-shadow: 0 2px 8px rgba(0,0,0,0.06), 0 6px 20px rgba(0,0,0,0.04); transform: translateY(-1px); }
.sec-factor-card.is-active { border-color: rgba(34,197,94,0.28); background: linear-gradient(160deg, rgba(34,197,94,0.025) 0%, var(--surface) 60%); }
.sec-factor-card.is-active::after { content: ''; position: absolute; top: -1px; right: -1px; width: 32px; height: 32px; background: radial-gradient(circle at top right, rgba(34,197,94,0.18) 0%, transparent 70%); border-radius: 0 var(--radius-md) 0 0; pointer-events: none; }
.sec-factor-head { display: flex; gap: 0.625rem; align-items: center; margin-bottom: 0.625rem; }
.sec-factor-icon { width: 32px; height: 32px; border-radius: 8px; background: rgba(50,50,50,0.04); color: rgba(50,50,50,0.5); display: flex; align-items: center; justify-content: center; flex-shrink: 0; transition: all 0.2s; }
.sec-factor-card.is-active .sec-factor-icon { background: rgba(34,197,94,0.1); color: #22c55e; }
.sec-factor-icon svg { width: 16px; height: 16px; }
.sec-factor-titleblock { flex: 1; min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 0.5rem; }
.sec-factor-title { font-family: var(--font-display); font-size: 0.9375rem; font-weight: 700; color: var(--charcoal); margin: 0; letter-spacing: -0.01em; }
.sec-factor-pill { display: inline-flex; align-items: center; font-size: 0.6875rem; font-weight: 700; padding: 0.1875rem 0.5rem; border-radius: 100px; text-transform: uppercase; letter-spacing: 0.04em; white-space: nowrap; flex-shrink: 0; }
.sec-factor-pill.is-recommended { background: rgba(221,145,66,0.1); color: var(--orange); border: 1px solid rgba(221,145,66,0.2); }
.sec-factor-pill.is-active-pill { background: rgba(34,197,94,0.1); color: #15803d; border: 1px solid rgba(34,197,94,0.2); }
.sec-factor-pill.is-off { background: rgba(50,50,50,0.04); color: var(--charcoal-40); border: 1px solid var(--charcoal-08); }
.sec-factor-copy { font-size: 0.8125rem; color: rgba(50,50,50,0.55); line-height: 1.55; margin: 0 0 0.75rem; flex: 1; }
.sec-factor-cta { display: inline-flex; align-items: center; justify-content: center; gap: 0.375rem; padding: 0.5rem 1rem; background: var(--orange); color: #fff; border: none; border-radius: 8px; font-family: var(--font-body); font-size: 0.8125rem; font-weight: 600; cursor: pointer; text-decoration: none; transition: all 0.2s; margin-top: auto; align-self: flex-start; box-shadow: 0 1px 4px rgba(221,145,66,0.3); white-space: nowrap; }
.sec-factor-cta:hover:not(:disabled) { background: #c47f38; transform: translateY(-1px); box-shadow: 0 3px 10px rgba(221,145,66,0.35); }
.sec-factor-cta:focus-visible { outline: 2px solid var(--orange); outline-offset: 2px; }
.sec-factor-cta:disabled { opacity: 0.48; cursor: not-allowed; transform: none; box-shadow: none; }
.sec-factor-cta-secondary { background: var(--surface); color: var(--charcoal); border: 1px solid var(--charcoal-08); box-shadow: none; }
.sec-factor-cta-secondary:hover:not(:disabled) { background: rgba(50,50,50,0.04); border-color: var(--charcoal-20); }
.sec-factor-actions { display: flex; align-items: center; gap: 0.625rem; margin-top: auto; flex-wrap: wrap; }
.sec-factor-link { font-size: 0.75rem; font-weight: 600; color: rgba(50,50,50,0.5); text-decoration: none; padding: 0.25rem 0.375rem; border-radius: 6px; transition: all 0.18s; }
.sec-factor-link:hover { background: rgba(50,50,50,0.05); color: var(--charcoal); }
.sec-factor-link-danger { color: #dc2626; }
.sec-factor-link-danger:hover { background: rgba(239,68,68,0.07); color: #b91c1c; }
.sec-factor-admin { font-size: 0.75rem; color: var(--charcoal-40); font-style: italic; margin: auto 0 0; }

/* Passkey list */
.sec-passkey-list { list-style: none; padding: 0; margin: 0 0 0.75rem; display: flex; flex-direction: column; gap: 0.4375rem; }
.sec-passkey-row { display: flex; flex-wrap: wrap; align-items: center; gap: 0.4375rem; padding: 0.5rem 0.625rem; background: rgba(50,50,50,0.03); border: 1px solid transparent; border-radius: 8px; transition: all 0.18s; }
.sec-passkey-row:hover { background: rgba(50,50,50,0.06); border-color: var(--charcoal-08); }
.sec-passkey-name { flex: 1; min-width: 120px; font-size: 0.8125rem; font-weight: 600; color: var(--charcoal); }
.sec-passkey-badge { display: inline-block; margin-left: 0.3125rem; font-size: 0.625rem; font-weight: 700; padding: 0.125rem 0.375rem; border-radius: 100px; background: rgba(0,166,156,0.1); color: var(--teal); text-transform: uppercase; letter-spacing: 0.04em; }
.sec-passkey-badge-bound { background: rgba(99,102,241,0.1); color: #6366f1; }
.sec-passkey-meta { font-size: 0.6875rem; color: var(--charcoal-40); width: 100%; line-height: 1.35; }
.sec-passkey-actions { display: flex; gap: 0.1875rem; margin-left: auto; flex-shrink: 0; }

/* Icon buttons */
.sec-icon-btn { width: 28px; height: 28px; padding: 0; border: none; background: transparent; color: rgba(50,50,50,0.5); border-radius: 6px; cursor: pointer; display: flex; align-items: center; justify-content: center; transition: all 0.18s; flex-shrink: 0; }
.sec-icon-btn:hover { background: rgba(50,50,50,0.07); color: var(--charcoal); transform: scale(1.05); }
.sec-icon-btn:focus-visible { outline: 2px solid var(--teal); outline-offset: 2px; }
.sec-icon-btn svg { width: 14px; height: 14px; pointer-events: none; }
.sec-icon-btn-danger:hover { background: rgba(239,68,68,0.08); color: #dc2626; }
.sec-icon-btn-danger:focus-visible { outline-color: #dc2626; }

@media (max-width: 900px) {
    .sec-posture-banner { flex-direction: column-reverse; align-items: flex-start; padding: 1.25rem; }
    .sec-posture-ring { width: 72px; height: 72px; align-self: flex-end; }
    .sec-posture-grade { font-size: 1.375rem; }
    .sec-mfa-panel { padding: 1.125rem 1.25rem; }
}

/* ─────────────────────────────────────────────
   Password requirements checklist
   Used inside ChangePasswordCard. The matching
   JS lives at /js/change-password-validator.js
   and toggles .is-pass / .is-pending per rule.
─────────────────────────────────────────────── */
.sec-pwd-rules { background: rgba(50,50,50,0.03); border: 1px solid var(--charcoal-08); border-radius: 10px; padding: 0.75rem 1rem; margin: 0.875rem 0; }
.sec-pwd-rules-heading { font-size: 0.6875rem; font-weight: 700; color: var(--charcoal-40); text-transform: uppercase; letter-spacing: 0.06em; margin: 0 0 0.5rem; }
.sec-pwd-rules-list { list-style: none; padding: 0; margin: 0; display: flex; flex-direction: column; gap: 0.3125rem; }
.sec-pwd-rule { display: flex; align-items: center; gap: 0.5rem; font-size: 0.8125rem; color: var(--charcoal-40); transition: color 0.2s; }
.sec-pwd-mark { width: 14px; height: 14px; border-radius: 50%; border: 1.5px solid var(--charcoal-20); display: inline-flex; align-items: center; justify-content: center; flex-shrink: 0; transition: all 0.2s; position: relative; }
.sec-pwd-rule.is-pass .sec-pwd-mark { background: #22c55e; border-color: #22c55e; }
.sec-pwd-rule.is-pass .sec-pwd-mark::after { content: ''; width: 7px; height: 4px; border-left: 1.5px solid #fff; border-bottom: 1.5px solid #fff; transform: translate(0, -1px) rotate(-45deg); }
.sec-pwd-rule.is-pass .sec-pwd-text { color: #15803d; font-weight: 600; }
.sec-pwd-footnote { font-size: 0.6875rem; color: var(--charcoal-40); margin: 0.5rem 0 0; font-style: italic; line-height: 1.45; }

/* ─────────────────────────────────────────────
   ChangePasswordCard
─────────────────────────────────────────────── */
.sec-change-password { background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-lg); padding: 1.375rem 1.75rem; box-shadow: 0 1px 3px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.02); }
.sec-form-field { margin-bottom: 0.875rem; }
.sec-form-row { display: grid; grid-template-columns: 1fr 1fr; gap: 0.875rem; }
.sec-field-label { display: block; font-size: 0.6875rem; font-weight: 700; color: var(--charcoal-40); text-transform: uppercase; letter-spacing: 0.06em; margin-bottom: 0.375rem; }
.sec-input { width: 100%; padding: 0.5625rem 0.875rem; border: 1px solid var(--charcoal-08); background: var(--surface); border-radius: 8px; font-family: var(--font-body); font-size: 0.875rem; color: var(--charcoal); transition: border-color 0.2s, box-shadow 0.2s; box-sizing: border-box; }
.sec-input:hover { border-color: var(--charcoal-20); }
.sec-input:focus { outline: none; border-color: var(--orange); box-shadow: 0 0 0 3px rgba(221,145,66,0.15); }
.sec-alert { padding: 0.625rem 0.875rem; border-radius: var(--radius-sm); font-size: 0.8125rem; margin-bottom: 0.875rem; line-height: 1.45; }
.sec-alert-error { background: rgba(239,68,68,0.06); color: #b91c1c; border: 1px solid rgba(239,68,68,0.18); }
@media (max-width: 700px) { .sec-form-row { grid-template-columns: 1fr; } }

/* ─────────────────────────────────────────────
   ActiveSessionsCard
─────────────────────────────────────────────── */
.sec-sessions { background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-lg); padding: 1.375rem 1.75rem; box-shadow: 0 1px 3px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.02); }
/* Session list scrolls internally after ~10 rows. Each row is ~54px;
   580px caps the visible window at 10 rows + a touch of breathing room. */
.sec-session-list { list-style: none; padding: 0 0.25rem 0 0; margin: 0; max-height: 580px; overflow-y: auto; }
.sec-session-list::-webkit-scrollbar { width: 6px; }
.sec-session-list::-webkit-scrollbar-track { background: transparent; }
.sec-session-list::-webkit-scrollbar-thumb { background: rgba(50,50,50,0.15); border-radius: 3px; }
.sec-session-list::-webkit-scrollbar-thumb:hover { background: rgba(50,50,50,0.25); }
.sec-session-row { display: flex; align-items: center; gap: 0.75rem; padding: 0.6875rem 0; border-bottom: 1px solid var(--charcoal-08); }
.sec-session-row:last-child { border-bottom: none; }
.sec-session-row.is-current { background: rgba(0,166,156,0.04); margin: 0 -0.5rem; padding: 0.6875rem 0.5rem; border-radius: 8px; border-bottom-color: transparent; }
.sec-session-icon { width: 36px; height: 36px; border-radius: 10px; background: rgba(50,50,50,0.04); color: var(--charcoal-40); display: flex; align-items: center; justify-content: center; flex-shrink: 0; }
.sec-session-row.is-current .sec-session-icon { background: rgba(0,166,156,0.12); color: var(--teal); }
.sec-session-icon svg { width: 16px; height: 16px; }
.sec-session-info { flex: 1; min-width: 0; }
.sec-session-name { font-size: 0.875rem; color: var(--charcoal); display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; }
.sec-session-meta { font-size: 0.75rem; color: var(--charcoal-40); margin-top: 0.125rem; line-height: 1.4; }
.sec-session-pill { font-size: 0.6125rem; font-weight: 700; padding: 0.125rem 0.4375rem; border-radius: 100px; text-transform: uppercase; letter-spacing: 0.04em; }
.sec-session-pill.is-current-pill { background: rgba(0,166,156,0.12); color: var(--teal); }
.sec-session-revoke { padding: 0.375rem 0.75rem; background: var(--surface); color: #dc2626; border: 1px solid rgba(239,68,68,0.2); border-radius: 8px; font-size: 0.75rem; font-weight: 600; cursor: pointer; transition: all 0.18s; white-space: nowrap; }
.sec-session-revoke:hover { background: rgba(239,68,68,0.06); border-color: rgba(239,68,68,0.4); }
.sec-session-revoke:focus-visible { outline: 2px solid #dc2626; outline-offset: 2px; }
.sec-sessions-empty { font-size: 0.8125rem; color: var(--charcoal-40); margin: 0.625rem 0 0; padding: 0.875rem 0; }
.sec-sessions-footer { margin-top: 0.875rem; padding-top: 0.875rem; border-top: 1px solid var(--charcoal-08); display: flex; justify-content: flex-end; }

/* ─────────────────────────────────────────────
   RecentSecurityActivityCard
─────────────────────────────────────────────── */
.sec-activity { background: var(--surface); border: 1px solid var(--charcoal-08); border-radius: var(--radius-lg); padding: 1.375rem 1.75rem; box-shadow: 0 1px 3px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.02); }
.sec-empty { font-size: 0.8125rem; color: var(--charcoal-40); margin: 0; padding: 0.5rem 0; }
.sec-activity-list { list-style: none; padding: 0 0 0 1.25rem; margin: 0.25rem 0 0; border-left: 2px solid var(--charcoal-08); }
.sec-activity-row { position: relative; padding: 0.5rem 0 0.5rem 0.875rem; display: flex; gap: 0.75rem; align-items: flex-start; }
.sec-activity-marker { position: absolute; left: -0.5625rem; top: 0.875rem; width: 9px; height: 9px; background: var(--teal); border-radius: 50%; border: 2px solid var(--surface); box-shadow: 0 0 0 1px var(--charcoal-08); }
.sec-activity-text { flex: 1; min-width: 0; }
.sec-activity-label { font-size: 0.8125rem; font-weight: 600; color: var(--charcoal); line-height: 1.35; }
.sec-activity-detail { font-size: 0.75rem; color: var(--charcoal-40); margin-top: 0.125rem; line-height: 1.45; }
.sec-activity-time { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 0.6875rem; color: var(--charcoal-40); flex-shrink: 0; padding-top: 0.125rem; }