/* Portão de entrada pintado por public/index.html e controlado pelo núcleo de
   autenticação em public/app.js. A caixa do perfil vive em profile.css;
   passwordToggle fica na base porque também é usado pelo painel de Operações. */

.loginGate {
  max-width: none;
  min-height: 100vh;
  min-height: 100dvh;
  margin: 0;
  display: grid;
  place-items: center;
  padding: clamp(20px, 4vw, 64px);
  background:
    radial-gradient(circle at 14% 8%, rgba(47, 116, 219, .15), transparent 28%),
    radial-gradient(circle at 90% 92%, rgba(16, 28, 44, .07), transparent 28%),
    var(--bg);
}

.loginCard {
  width: min(100%, 900px);
  min-height: 570px;
  display: grid;
  grid-template-columns: minmax(0, .92fr) minmax(390px, 1.08fr);
  overflow: hidden;
  border: 1px solid var(--line);
  border-radius: 24px;
  background: var(--panel);
  box-shadow: 0 28px 80px rgba(16, 28, 44, .14), 0 2px 8px rgba(16, 28, 44, .05);
}

.authLoading {
  display: grid;
  justify-items: center;
  gap: 14px;
  color: var(--muted);
  font-size: var(--txt-lg);
  font-weight: 700;
}

.authLoading .loginMark {
  margin-bottom: 0;
  border-color: transparent;
  background: linear-gradient(145deg, #397fe8, #205dc0);
  box-shadow: 0 8px 24px rgba(32, 93, 192, .2);
}

.loginMark {
  width: 46px;
  height: 46px;
  flex: none;
  display: grid;
  place-items: center;
  border: 1px solid rgba(255, 255, 255, .25);
  border-radius: 13px;
  background: rgba(255, 255, 255, .13);
  color: white;
  font-weight: 800;
  letter-spacing: -.03em;
}

.loginIntro {
  min-width: 0;
  padding: 40px;
  display: flex;
  flex-direction: column;
  color: #fff;
  background:
    radial-gradient(circle at 102% 4%, rgba(104, 163, 255, .34), transparent 36%),
    linear-gradient(145deg, #173b72 0%, #102b55 52%, #0c2346 100%);
  position: relative;
  isolation: isolate;
}

.loginIntro::after {
  content: "";
  width: 260px;
  height: 260px;
  position: absolute;
  right: -110px;
  bottom: -125px;
  z-index: -1;
  border: 1px solid rgba(255, 255, 255, .12);
  border-radius: 50%;
  box-shadow: 0 0 0 34px rgba(255, 255, 255, .035), 0 0 0 72px rgba(255, 255, 255, .025);
}

.loginBrand,
.loginMobileBrand {
  display: flex;
  align-items: center;
  gap: 13px;
}

.loginBrand > span:last-child,
.loginMobileBrand > span:last-child {
  min-width: 0;
  display: grid;
}

.loginBrand b,
.loginMobileBrand b {
  font-size: var(--txt-lg);
  line-height: 1.25;
}

.loginBrand small,
.loginMobileBrand small {
  color: rgba(255, 255, 255, .67);
  font-size: var(--txt-xs);
}

.loginIntroCopy {
  margin: auto 0;
  padding: 52px 0;
}

.loginIntroEyebrow {
  display: block;
  margin-bottom: 14px;
  color: #93bdff;
  font-size: var(--txt-xs);
  font-weight: 750;
  letter-spacing: .13em;
  text-transform: uppercase;
}

.loginIntroCopy h2 {
  max-width: 330px;
  margin: 0;
  font-size: clamp(29px, 3vw, 37px);
  line-height: 1.08;
  letter-spacing: -.045em;
}

.loginIntroCopy p {
  max-width: 330px;
  margin: 20px 0 0;
  color: rgba(255, 255, 255, .72);
  font-size: var(--txt-md);
  line-height: 1.65;
}

.loginSecurity {
  margin: 0;
  display: flex;
  align-items: center;
  gap: 8px;
  color: rgba(255, 255, 255, .67);
  font-size: var(--txt-xs);
}

.loginSecurity span {
  width: 20px;
  height: 20px;
  display: grid;
  place-items: center;
  border-radius: 50%;
  background: rgba(255, 255, 255, .1);
  color: #9bc3ff;
  font-size: var(--txt-xs);
  font-weight: 800;
}

.loginPanel {
  min-width: 0;
  padding: 48px clamp(42px, 5vw, 64px);
  display: flex;
  flex-direction: column;
  justify-content: center;
}

.loginMobileBrand {
  display: none;
}

.loginHeading {
  margin: 0 0 32px;
  padding: 0;
  display: block;
  position: static;
  border: 0;
  background: transparent;
}

.loginHeading h1 {
  margin: 5px 0 9px;
  color: var(--ink);
  font-size: clamp(30px, 4vw, 38px);
  line-height: 1.1;
  letter-spacing: -.04em;
}

.loginHeading p {
  margin: 0;
  color: var(--muted);
  font-size: var(--txt-md);
}

.loginForm {
  display: grid;
  gap: 20px;
}

.loginField {
  min-width: 0;
  display: grid;
  gap: 8px;
}

.loginForm label,
.loginLabelRow label {
  color: var(--ink);
  font-size: var(--txt-md);
  font-weight: 680;
}

.loginLabelRow {
  display: flex;
  align-items: baseline;
  justify-content: space-between;
  gap: 12px;
}

.loginLabelRow > span,
.loginFieldHint {
  color: var(--muted);
  font-size: var(--txt-xs);
}

.loginFieldHint {
  margin-top: -2px;
}

.accessKeyInput {
  min-width: 0;
  min-height: 50px;
  display: flex;
  align-items: center;
  gap: 11px;
  padding: 0 14px;
  border: 1px solid #cbd3de;
  border-radius: var(--r-md);
  background: var(--panel);
  box-shadow: 0 1px 2px rgba(16, 28, 44, .035);
  transition: border-color .15s ease, box-shadow .15s ease, background .15s ease;
}

.accessKeyInput:focus-within {
  border-color: var(--accent);
  box-shadow: 0 0 0 4px color-mix(in srgb, var(--accent) 13%, transparent);
}

.accessKeyInput > svg {
  width: 19px;
  height: 19px;
  flex: none;
  fill: none;
  stroke: var(--muted);
  stroke-width: 1.8;
  stroke-linecap: round;
  stroke-linejoin: round;
}

.accessKeyInput input {
  width: 100%;
  min-width: 0;
  height: 48px;
  padding: 0;
  border: 0;
  outline: 0;
  background: transparent;
  color: var(--ink);
  font-size: var(--txt-lg);
}

.loginForm .accessKeyInput input:focus-visible {
  outline: 0;
}

.accessKeyInput input::placeholder {
  color: color-mix(in srgb, var(--muted) 65%, transparent);
  opacity: 1;
}

/* Chrome e Safari pintam apenas o elemento <input> quando recuperam
   credenciais, criando uma faixa azul dentro da caixa que também contém o
   ícone. Cobrimos esse preenchimento nativo com a mesma cor do contentor para
   o campo continuar a ser uma única superfície, também no tema escuro. */
.accessKeyInput input:-webkit-autofill,
.accessKeyInput input:-webkit-autofill:hover,
.accessKeyInput input:-webkit-autofill:focus,
.accessKeyInput input:-webkit-autofill:active {
  -webkit-text-fill-color: var(--ink);
  caret-color: var(--ink);
  -webkit-box-shadow: 0 0 0 1000px var(--panel) inset;
  box-shadow: 0 0 0 1000px var(--panel) inset;
}

.accessKeyInput input:autofill {
  color: var(--ink);
  caret-color: var(--ink);
  box-shadow: 0 0 0 1000px var(--panel) inset;
}

.accessKeyInput:has(input:invalid:not(:placeholder-shown)) {
  border-color: var(--vermelho);
}

.loginStatus {
  min-height: 0;
  margin: -2px 0 -4px;
  padding: 10px 12px;
  border: 1px solid color-mix(in srgb, var(--vermelho) 22%, var(--line));
  border-radius: var(--r-sm);
  background: color-mix(in srgb, var(--vermelho) 7%, var(--panel));
  color: var(--vermelho);
  font-size: var(--txt-sm);
  line-height: 1.4;
}

.loginStatus:empty {
  display: none;
}

.loginStatus.info {
  border-color: color-mix(in srgb, var(--accent) 22%, var(--line));
  background: color-mix(in srgb, var(--accent) 7%, var(--panel));
  color: var(--accent);
}

.loginForm .loginSubmit {
  width: 100%;
  min-height: 50px;
  margin-top: 2px;
  position: relative;
  font-size: var(--txt-md);
  font-weight: 720;
}

.loginForm .loginSubmit:not(:disabled):hover {
  transform: translateY(-1px);
  box-shadow: 0 5px 14px rgba(23, 92, 211, .24);
  filter: none;
}

.loginSpinner {
  width: 17px;
  height: 17px;
  position: absolute;
  inset: 0;
  margin: auto;
  display: none;
  border: 2px solid rgba(255, 255, 255, .4);
  border-top-color: white;
  border-radius: 50%;
  animation: loginSpin .65s linear infinite;
}

.loginSubmit:disabled .loginButtonText {
  visibility: hidden;
}

.loginSubmit:disabled .loginSpinner {
  display: block;
}

.loginHelp {
  margin: 24px 0 0;
  color: var(--muted);
  font-size: var(--txt-xs);
  text-align: center;
}

@keyframes loginSpin {
  to { transform: rotate(360deg); }
}

@media (max-width: 760px) {
  .loginGate {
    place-items: start center;
    padding: 16px;
  }

  /* Enquanto se verifica a sessão o cartão de login está escondido e a página só
     tem o "A verificar a sessão…": o `start` acima deixava-o pendurado no topo
     de um ecrã vazio. Esse `start` existe pelo cartão, que precisa de encostar
     ao topo para o teclado não o empurrar; sem cartão, não há razão para não
     centrar. */
  body.authChecking > .loginGate {
    place-items: center;
  }

  .loginCard {
    width: min(100%, 480px);
    min-height: 0;
    grid-template-columns: 1fr;
    border-radius: 20px;
  }

  .loginIntro {
    display: none;
  }

  .loginPanel {
    padding: 28px clamp(22px, 7vw, 38px) 30px;
  }

  .loginMobileBrand {
    margin-bottom: 38px;
    display: flex;
  }

  .loginMobileBrand .loginMark {
    width: 42px;
    height: 42px;
    background: linear-gradient(145deg, #397fe8, #205dc0);
  }

  .loginMobileBrand b {
    color: var(--ink);
  }

  .loginMobileBrand small {
    color: var(--muted);
  }

  .loginHeading {
    margin-bottom: 28px;
  }
}

@media (max-width: 620px) {
  /* Empata com a regra global anti-zoom do Safari iOS. No ficheiro único essa
     regra vinha depois e elevava estes campos a 16px; a folha de domínio passa
     a carregar depois da base, por isso conserva aqui a mesma exceção. */
  .accessKeyInput input { font-size: 16px; }
}

@media (max-width: 380px) {
  .loginGate { padding: 0; }
  .loginCard { min-height: 100dvh; border: 0; border-radius: 0; }
  .loginPanel { padding-inline: 20px; }
}

body.authLocked {
  overflow: hidden;
}

body.authLocked .appShell,
body.authLocked > .drawer,
body.authLocked > .overlay,
body.authLocked > .toast,
body.authLocked > .mobileScrim {
  display: none !important;
}

body.authChecking > .loginGate .loginCard {
  display: none;
}

body:not(.authChecking) > .loginGate .authLoading {
  display: none;
}

body:not(.authLocked) > .loginGate {
  display: none;
}