/* Double authentification (connexion + page « Sécurité ») : QR code, clé manuelle,
   codes de secours, étapes FALC. Couleurs : uniquement les tokens de glass.css. */

/* ── étapes numérotées ── */
.tfa-steps { display: flex; flex-direction: column; gap: 8px; margin: 0; padding: 0; list-style: none; counter-reset: tfa; }
.tfa-steps li { position: relative; padding-left: 34px; font-size: 0.875rem; line-height: 1.45; counter-increment: tfa; }
.tfa-steps li::before {
  content: counter(tfa);
  position: absolute;
  left: 0;
  top: -1px;
  width: 24px;
  height: 24px;
  display: grid;
  place-items: center;
  border-radius: 9999px;
  background: var(--color-brand-100);
  color: var(--color-brand-700);
  font-size: 0.75rem;
  font-weight: 800;
}

/* ── QR code : toujours sur fond blanc (lisible par l'appareil photo, même en thème sombre) ── */
.tfa-qr {
  width: min(220px, 70vw);
  aspect-ratio: 1;
  margin: 4px auto;
  padding: 10px;
  border-radius: 16px;
  background: #ffffff;
  box-shadow: 0 6px 24px rgb(13 28 63 / 0.12);
}
.tfa-qr svg { display: block; width: 100%; height: 100%; }

/* ── clé manuelle ── */
.tfa-key {
  display: flex;
  align-items: center;
  gap: 8px;
  padding: 8px 8px 8px 14px;
  border-radius: 14px;
  border: 1px solid color-mix(in oklab, var(--color-fg) 14%, transparent);
  background: var(--color-surface-2);
}
.tfa-key code {
  flex: 1;
  min-width: 0;
  font-family: ui-monospace, 'SFMono-Regular', Consolas, monospace;
  font-size: 0.875rem;
  font-weight: 700;
  letter-spacing: 0.06em;
  overflow-wrap: anywhere;
  user-select: all;
}
.tfa-details summary { cursor: pointer; font-size: 0.8125rem; font-weight: 700; color: var(--color-brand-700); min-height: 32px; display: flex; align-items: center; }
.tfa-details[open] summary { margin-bottom: 8px; }
.tfa-open-app { width: 100%; }
/* le lien otpauth:// n'a de sens que sur le téléphone lui-même */
@media (hover: hover) and (pointer: fine) {
  .tfa-open-app { display: none; }
}

/* ── codes de secours ── */
.tfa-codes {
  display: grid;
  grid-template-columns: repeat(2, minmax(0, 1fr));
  gap: 8px;
  margin: 0;
  padding: 12px;
  list-style: none;
  border-radius: 14px;
  border: 1px dashed color-mix(in oklab, var(--color-fg) 24%, transparent);
  background: var(--color-surface-2);
}
.tfa-codes li {
  text-align: center;
  font-family: ui-monospace, 'SFMono-Regular', Consolas, monospace;
  font-size: 1rem;
  font-weight: 700;
  letter-spacing: 0.08em;
  padding: 6px 4px;
  user-select: all;
}
.tfa-actions { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; }
.tfa-confirm { align-items: flex-start; padding: 8px 4px; }
.tfa-confirm input { margin-top: 2px; }

/* ── code de secours (champ unique) ── */
.tfa-recovery-input { text-align: center; font-family: ui-monospace, 'SFMono-Regular', Consolas, monospace; font-size: 1.125rem; letter-spacing: 0.12em; text-transform: lowercase; }

/* ── page Sécurité ── */
.security { max-width: 960px; }
.security .card-quiet { display: flex; flex-direction: column; gap: 14px; }
.security-status { display: flex; flex-wrap: wrap; gap: 8px; }
.security-form { display: flex; flex-direction: column; gap: 12px; }
.security-form .btn { align-self: flex-start; }
.security-actions { display: flex; flex-wrap: wrap; gap: 8px; }
.security-note { font-size: 0.8125rem; color: color-mix(in oklab, var(--color-fg) 72%, transparent); }
.security-wizard { display: flex; flex-direction: column; gap: 14px; }
.security-wizard .otp { margin-top: 2px; }

@media (max-width: 380px) {
  .tfa-codes li { font-size: 0.9375rem; letter-spacing: 0.04em; }
  .tfa-actions { grid-template-columns: 1fr; }
}