/* ── MD3 Design Tokens ─────────────────────────────────────────────────────── */
:root {
  --md-primary: #1565C0;
  --md-on-primary: #FFFFFF;
  --md-primary-container: color-mix(in srgb, var(--md-primary) 15%, #FFFFFF);
  --md-on-primary-container: color-mix(in srgb, var(--md-primary) 85%, #000000);
  /* --md-link is for text/link color specifically (as opposed to filled-button
     backgrounds, which keep --md-primary). Same value in light mode; the dark
     block below redefines it to a lighter tint because #1565C0 itself fails
     4.5:1 as text against the dark surfaces. */
  --md-link: var(--md-primary);

  --md-surface: #F8F9FF;
  --md-surface-1: #ECEEF7;
  --md-surface-2: #E6E8F1;
  --md-surface-container: #FFFFFF;
  --md-on-surface: #1B1B1F;
  --md-on-surface-variant: #44474F;

  --md-outline: #74777F;
  --md-outline-variant: #C4C6D0;

  --md-error: #BA1A1A;
  --md-on-error: #FFFFFF;
  --md-error-container: #FFDAD6;
  --md-on-error-container: #410002;

  --md-success: #2E7D32;
  --md-success-container: #C8E6C9;
  --md-on-success-container: #1B5E20;

  --md-warning: #E65100;
  --md-warning-container: #FFE0B2;
  --md-on-warning-container: #BF360C;

  --md-shape-xs:   4px;
  --md-shape-sm:   8px;
  --md-shape-md:  12px;
  --md-shape-lg:  16px;
  --md-shape-xl:  28px;
  --md-shape-full: 9999px;

  --md-elevation-1: 0 1px 2px rgba(0,0,0,.3), 0 1px 3px 1px rgba(0,0,0,.15);
  --md-elevation-2: 0 1px 2px rgba(0,0,0,.3), 0 2px 6px 2px rgba(0,0,0,.15);
}

/* ── Reset ────────────────────────────────────────────────────────────────── */
*, *::before, *::after { box-sizing: border-box; }

body {
  font-family: 'Roboto', system-ui, sans-serif;
  font-size: 14px;
  line-height: 1.5;
  background: var(--md-surface);
  color: var(--md-on-surface);
  margin: 0;
  padding: 0;
  min-height: 100vh;
}

a { color: var(--md-link); }

/* ── Landing page ─────────────────────────────────────────────────────────── */
body.sso-landing {
  display: flex;
  flex-direction: column;
  align-items: center;
  background: linear-gradient(160deg, var(--md-primary-container) 0%, var(--md-surface) 55%);
}

.sso-system-bar {
  width: 100%;
  background: var(--md-primary);
  color: var(--md-on-primary);
  text-align: center;
  padding: 0.5rem 1rem;
  font-size: 0.6875rem;
  font-weight: 500;
  letter-spacing: 0.08em;
  text-transform: uppercase;
}

.sso-main {
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  flex: 1;
  width: 100%;
  padding: 2rem 1rem;
  gap: 1.5rem;
}

.sso-card {
  background: var(--md-surface-container);
  border-radius: var(--md-shape-xl);
  box-shadow: var(--md-elevation-1);
  width: 100%;
  max-width: 448px;
  overflow: hidden;
}

.sso-card-header {
  display: flex;
  flex-direction: column;
  align-items: center;
  padding: 2.5rem 2rem 1.5rem;
  border-bottom: 1px solid var(--md-outline-variant);
  text-align: center;
}

.sso-lock-icon {
  color: var(--md-primary);
  margin-bottom: 1rem;
}

.sso-card-title {
  font-size: 1.375rem;
  font-weight: 400;
  color: var(--md-on-surface);
  margin: 0 0 0.25rem;
  letter-spacing: 0;
}

.sso-card-subtitle {
  font-size: 0.875rem;
  color: var(--md-on-surface-variant);
  margin: 0;
}

.sso-card-body {
  padding: 1.5rem 2rem 2rem;
}

.sso-footer-note {
  font-size: 0.75rem;
  color: var(--md-on-surface-variant);
  opacity: 0.6;
  text-align: center;
  margin: 0;
}
.sso-footer-btn {
  background: none;
  border: none;
  color: inherit;
  font: inherit;
  cursor: pointer;
  padding: 0;
  opacity: 0.4;
}
.sso-footer-btn:hover { opacity: 0.8; }

@media (max-width: 512px) {
  .sso-card { border-radius: 0; max-width: none; box-shadow: none; }
  .sso-main { padding: 0; gap: 0; }
  .sso-card-header { padding: 2rem 1.25rem 1.25rem; }
  .sso-card-body { padding: 1.25rem 1.25rem 2rem; }
  .sso-footer-note { padding: 1rem; }
}

/* ── Signed-in state inside landing card ─────────────────────────────────── */
.sso-signed-in {
  display: flex;
  align-items: center;
  gap: 0.875rem;
  padding: 0.875rem;
  background: color-mix(in srgb, var(--md-primary) 8%, transparent);
  border-radius: var(--md-shape-md);
  margin-bottom: 1.25rem;
}
.sso-signed-in-avatar {
  width: 40px;
  height: 40px;
  border-radius: 50%;
  background: var(--md-primary);
  color: var(--md-on-primary);
  display: flex;
  align-items: center;
  justify-content: center;
  font-size: 1rem;
  font-weight: 500;
  flex-shrink: 0;
}
.sso-signed-in-name  { font-size: 0.9375rem; font-weight: 500; }
.sso-signed-in-label { font-size: 0.75rem; color: var(--md-on-surface-variant); margin-top: 0.125rem; }
.sso-signed-in-actions { display: flex; gap: 0.5rem; flex-wrap: wrap; }

/* ── Inputs ───────────────────────────────────────────────────────────────── */
input[type=email],
input[type=text],
input[type=password],
input[type=search],
input[type=url],
textarea {
  font-family: inherit;
  font-size: 1rem;
  color: var(--md-on-surface);
  background: var(--md-surface-container);
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-xs);
  padding: 0.875rem 1rem;
  width: 100%;
  outline: none;
  transition: border-color 0.15s;
}
input[type=email]:hover,
input[type=text]:hover,
input[type=password]:hover,
input[type=search]:hover,
input[type=url]:hover,
textarea:hover {
  border-color: var(--md-on-surface);
}
input[type=email]:focus,
input[type=text]:focus,
input[type=password]:focus,
input[type=search]:focus,
input[type=url]:focus,
textarea:focus {
  border-color: var(--md-primary);
  border-width: 2px;
  padding: 0.8125rem 0.9375rem;
}

/* Show/hide password toggle: the button sits absolutely inside a positioned
   wrapper, so the input needs right padding clear of it. */
.input-with-action { position: relative; }
.input-with-action input { padding-right: 2.75rem; }
.input-with-action input:focus { padding-right: 2.6875rem; }
.input-icon-btn {
  position: absolute;
  top: 50%;
  right: 0.375rem;
  transform: translateY(-50%);
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 0.375rem;
  background: none;
  border: none;
  border-radius: var(--md-shape-full);
  color: var(--md-on-surface-variant);
  cursor: pointer;
}
.input-icon-btn:hover { background: color-mix(in srgb, var(--md-on-surface) 8%, transparent); }

/* ── Accessibility ────────────────────────────────────────────────────────── */
/* The UA [hidden] rule is scoped to the HTML namespace, so it does not hide
   inline SVG (used by the password show/hide toggle). Make hidden universal. */
[hidden] { display: none !important; }

/* Off-screen but still present in the accessibility tree and, crucially,
   discoverable by password managers (unlike type=hidden / display:none). */
/* Every declaration is !important so no other rule can out-rank one of them:
   e.g. the global `input[type=text] { width: 100% }` beats `.visually-hidden`
   on specificity, and a full-width invisible input inside <dialog> overflows
   it sideways (the dialog is the positioned ancestor), skewing its padding. */
.visually-hidden {
  position: absolute !important;
  width: 1px !important;
  height: 1px !important;
  padding: 0 !important;
  margin: -1px !important;
  overflow: hidden !important;
  clip: rect(0, 0, 0, 0) !important;
  white-space: nowrap !important;
  border: 0 !important;
}

a:focus-visible,
button:focus-visible {
  outline: 2px solid var(--md-link);
  outline-offset: 2px;
}

/* ── Form layout ──────────────────────────────────────────────────────────── */
.field { margin-bottom: 1.25rem; }
.field label,
.sign-in-label {
  display: block;
  font-size: 0.6875rem;
  font-weight: 500;
  color: var(--md-on-surface-variant);
  margin-bottom: 0.375rem;
  letter-spacing: 0.06em;
  text-transform: uppercase;
}

.field-hint  { font-size: 0.8125rem; color: var(--md-on-surface-variant); margin-top: 0.375rem; }
.field-error { font-size: 0.8125rem; color: var(--md-error); margin-top: 0.375rem; }

.btn-row { display: flex; gap: 0.5rem; align-items: center; flex-wrap: wrap; margin-top: 1rem; }
.code-row { display: flex; gap: 0.75rem; align-items: center; flex-wrap: wrap; margin-top: 0.25rem; }

.code-input {
  width: 9rem;
  text-align: center;
  font-size: 1.5rem;
  letter-spacing: 0.2em;
  font-weight: 500;
}

/* ── Buttons ──────────────────────────────────────────────────────────────── */
button { font-family: inherit; cursor: pointer; }

.btn-primary,
.btn-filled,
.btn-search,
.add-btn {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  padding: 0.625rem 1.5rem;
  background: var(--md-primary);
  color: var(--md-on-primary);
  border: none;
  border-radius: var(--md-shape-full);
  font-family: inherit;
  font-size: 0.875rem;
  font-weight: 500;
  letter-spacing: 0.00625em;
  text-decoration: none;
  cursor: pointer;
  min-height: 40px;
  transition: box-shadow 0.15s;
}
.btn-primary:hover,
.btn-filled:hover,
.btn-search:hover,
.add-btn:hover {
  box-shadow: var(--md-elevation-1);
  background: color-mix(in srgb, var(--md-primary) 92%, #000000);
}
.btn-primary:disabled, .btn-filled:disabled, .add-btn:disabled {
  opacity: 0.38; cursor: not-allowed; box-shadow: none;
}

/* htmx puts .htmx-request on the element bearing hx-post — every form here —
   for the duration of the request; htmx 2's hx-disabled-elt="find button"
   (set on these forms) disables the button itself, this just makes the
   in-flight state visible. */
form.htmx-request .btn-primary { pointer-events: none; opacity: 0.7; }
@media (prefers-reduced-motion: no-preference) {
  form.htmx-request .btn-primary { position: relative; color: transparent; }
  form.htmx-request .btn-primary::after {
    content: '';
    position: absolute;
    top: 50%;
    left: 50%;
    width: 1rem;
    height: 1rem;
    margin: -0.5rem 0 0 -0.5rem;
    border: 2px solid var(--md-on-primary);
    border-top-color: transparent;
    border-radius: 50%;
    animation: sso-spin 0.6s linear infinite;
  }
  @keyframes sso-spin { to { transform: rotate(360deg); } }
}

.btn-secondary,
.btn-outlined {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  padding: 0.625rem 1.5rem;
  background: transparent;
  color: var(--md-link);
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-full);
  font-family: inherit;
  font-size: 0.875rem;
  font-weight: 500;
  letter-spacing: 0.00625em;
  text-decoration: none;
  cursor: pointer;
  min-height: 40px;
  transition: background 0.15s;
}
.btn-secondary:hover, .btn-outlined:hover {
  background: color-mix(in srgb, var(--md-primary) 8%, transparent);
  border-color: var(--md-outline);
}

.btn-tonal {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  padding: 0.625rem 1.5rem;
  background: var(--md-primary-container);
  color: var(--md-on-primary-container);
  border: none;
  border-radius: var(--md-shape-full);
  font-family: inherit;
  font-size: 0.875rem;
  font-weight: 500;
  text-decoration: none;
  cursor: pointer;
  min-height: 40px;
  transition: box-shadow 0.15s;
}
.btn-tonal:hover { box-shadow: var(--md-elevation-1); }

/* btn-local: navigation and cancel actions (no system change). */
.btn-local,
.btn-text {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  padding: 0.625rem 0.75rem;
  background: transparent;
  color: var(--md-link);
  border: none;
  border-radius: var(--md-shape-full);
  font-family: inherit;
  font-size: 0.875rem;
  font-weight: 500;
  text-decoration: none;
  cursor: pointer;
}
.btn-local:hover,
.btn-text:hover { background: color-mix(in srgb, var(--md-primary) 8%, transparent); }

.btn-safe {
  display: inline-flex; align-items: center; justify-content: center;
  padding: 0.5rem 1.25rem;
  background: transparent;
  color: var(--md-success);
  border: 1px solid color-mix(in srgb, var(--md-success) 40%, transparent);
  border-radius: var(--md-shape-full);
  font-family: inherit; font-size: 0.875rem; font-weight: 500; cursor: pointer;
  transition: background 0.15s;
}
.btn-safe:hover { background: var(--md-success-container); }

.btn-warning {
  display: inline-flex; align-items: center; justify-content: center;
  padding: 0.5rem 1.25rem;
  background: transparent;
  color: var(--md-warning);
  border: 1px solid color-mix(in srgb, var(--md-warning) 40%, transparent);
  border-radius: var(--md-shape-full);
  font-family: inherit; font-size: 0.875rem; font-weight: 500; cursor: pointer;
  transition: background 0.15s;
}
.btn-warning:hover { background: var(--md-warning-container); }

.btn-danger {
  display: inline-flex; align-items: center; justify-content: center;
  padding: 0.375rem 1rem;
  background: transparent;
  color: var(--md-error);
  border: 1px solid color-mix(in srgb, var(--md-error) 40%, transparent);
  border-radius: var(--md-shape-full);
  font-family: inherit; font-size: 0.8125rem; font-weight: 500; cursor: pointer;
  transition: background 0.15s;
}
.btn-danger:hover { background: var(--md-error-container); }

/* ── Badges ───────────────────────────────────────────────────────────────── */
.badge {
  display: inline-flex;
  align-items: center;
  padding: 0.1875rem 0.625rem;
  border-radius: var(--md-shape-full);
  font-size: 0.6875rem;
  font-weight: 500;
  letter-spacing: 0.04em;
  text-transform: uppercase;
}
.badge--ok     { background: var(--md-success-container); color: var(--md-on-success-container); }
.badge--err    { background: var(--md-error-container); color: var(--md-on-error-container); }
.badge-blocked { background: var(--md-error-container); color: var(--md-on-error-container); }
.badge-active  { background: var(--md-success-container); color: var(--md-on-success-container); }

/* ── Flash messages ───────────────────────────────────────────────────────── */
.flash {
  padding: 0.75rem 1rem;
  border-radius: var(--md-shape-md);
  margin-bottom: 1.25rem;
  font-size: 0.875rem;
}
.flash--success { background: var(--md-success-container); color: var(--md-on-success-container); }
.flash--error   { background: var(--md-error-container); color: var(--md-on-error-container); }

/* ── Signed-in banner (non-landing pages) ─────────────────────────────────── */
.signed-in {
  background: color-mix(in srgb, var(--md-primary) 10%, transparent);
  border: 1px solid color-mix(in srgb, var(--md-primary) 30%, transparent);
  padding: 0.875rem 1rem;
  border-radius: var(--md-shape-md);
  margin-bottom: 1rem;
}

/* ── Sign-in flow fragments ───────────────────────────────────────────────── */
.sign-in-row {
  display: flex;
  flex-direction: column;
  gap: 0.75rem;
}

.sign-in-error {
  color: var(--md-error);
  font-size: 0.8125rem;
  margin: 0.375rem 0;
}

.sign-in-hint {
  font-size: 0.8125rem;
  color: var(--md-on-surface-variant);
  margin: 0.625rem 0 0;
}
.sign-in-hint a { color: var(--md-link); }

.sign-in-as {
  font-size: 0.9375rem;
  color: var(--md-on-surface-variant);
  margin: 0 0 1rem;
}
.sign-in-as strong { color: var(--md-on-surface); }

.sign-in-back {
  margin: 1rem 0 0;
  font-size: 0.875rem;
}
.sign-in-back a { color: var(--md-on-surface-variant); text-decoration: none; }
.sign-in-back a:hover { color: var(--md-link); }

.sign-in-divider {
  display: flex;
  align-items: center;
  gap: 0.75rem;
  margin: 1.25rem 0;
  color: var(--md-on-surface-variant);
  font-size: 0.75rem;
  letter-spacing: 0.04em;
  text-transform: uppercase;
}
.sign-in-divider::before,
.sign-in-divider::after {
  content: '';
  flex: 1;
  height: 1px;
  background: var(--md-outline-variant);
}

.sign-in-alts {
  display: flex;
  flex-direction: column;
  gap: 0.5rem;
  margin-top: 0.25rem;
}
.sign-in-alts-label {
  font-size: 0.6875rem;
  color: var(--md-on-surface-variant);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  margin: 0 0 0.375rem;
}

.alt-btn {
  display: flex;
  align-items: center;
  justify-content: center;
  width: 100%;
  padding: 0.75rem 1rem;
  background: transparent;
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-md);
  font-family: inherit;
  font-size: 0.9375rem;
  font-weight: 500;
  color: var(--md-on-surface);
  cursor: pointer;
  text-decoration: none;
  gap: 0.5rem;
  transition: background 0.15s, border-color 0.15s;
}
.alt-btn:hover { background: color-mix(in srgb, var(--md-primary) 6%, transparent); border-color: var(--md-outline); }
.alt-btn:disabled { opacity: 0.38; cursor: not-allowed; }

/* Options step */
.sign-in-options {
  display: flex;
  flex-direction: column;
  gap: 0.5rem;
  margin-top: 0.25rem;
}

.option-btn {
  display: flex;
  align-items: center;
  width: 100%;
  padding: 0.875rem 1rem;
  background: transparent;
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-md);
  font-family: inherit;
  font-size: 0.9375rem;
  color: var(--md-on-surface);
  cursor: pointer;
  text-decoration: none;
  text-align: left;
  transition: background 0.15s, border-color 0.15s;
}
.option-btn:hover { background: color-mix(in srgb, var(--md-primary) 6%, transparent); border-color: var(--md-outline); }
.option-btn:disabled { opacity: 0.38; cursor: not-allowed; }

.option-btn--primary {
  border-color: var(--md-primary);
  color: var(--md-link);
  font-weight: 500;
  background: color-mix(in srgb, var(--md-primary) 5%, transparent);
}
.option-btn--primary:hover { background: color-mix(in srgb, var(--md-primary) 12%, transparent); }

.option-btn--muted {
  border-style: dashed;
  color: var(--md-on-surface-variant);
  font-size: 0.875rem;
}

/* ── Dev shortcut ─────────────────────────────────────────────────────────── */
details summary {
  cursor: pointer;
  font-size: 0.8125rem;
  color: var(--md-on-surface-variant);
  margin-top: 1.5rem;
  list-style: none;
  user-select: none;
}
details summary::-webkit-details-marker { display: none; }
details summary::before { content: '▶  '; font-size: 0.625rem; opacity: 0.6; }
details[open] summary::before { content: '▼  '; }

#greeting { margin-top: 1rem; min-height: 1.5rem; color: var(--md-link); }

/* ── Inner pages (account, admin) ─────────────────────────────────────────── */
body:not(.sso-landing) {
  max-width: 48rem;
  margin: 0 auto;
  padding: 0 1.25rem;
}
body.wide { max-width: 72rem; }

nav {
  padding: 1rem 0;
  margin-bottom: 0;
  font-size: 0.875rem;
  border-bottom: 1px solid var(--md-outline-variant);
}
nav a { color: var(--md-link); text-decoration: none; font-weight: 500; }
nav a:hover { text-decoration: underline; }

h1 {
  font-size: 1.75rem;
  font-weight: 400;
  color: var(--md-on-surface);
  margin: 1.5rem 0 0.25rem;
}
h1 .badge { margin-left: 0.5rem; vertical-align: middle; }
body.wide h1 { margin: 1.5rem 0 1.25rem; }

h2 {
  font-size: 0.875rem;
  font-weight: 500;
  color: var(--md-on-surface-variant);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  margin: 2.5rem 0 0.875rem;
  padding-top: 1.5rem;
  border-top: 1px solid var(--md-outline-variant);
}
h2:first-of-type { border-top: none; padding-top: 0; }

.subtitle { color: var(--md-on-surface-variant); font-size: 0.875rem; margin: 0.25rem 0 2rem; }

/* ── Account settings layout ─────────────────────────────────────────────── */
.toggle-row {
  display: flex;
  align-items: center;
  gap: 0.625rem;
  font-size: 0.875rem;
  color: var(--md-on-surface);
  cursor: pointer;
}
.toggle-row input[type=checkbox]:not(.switch) {
  width: 1.125rem;
  height: 1.125rem;
  accent-color: var(--md-primary);
  cursor: pointer;
}

/* MD3 switch: a restyled checkbox, so form/htmx semantics stay identical.
   Dimensions follow the MD3 spec (52×32 track; 16px handle growing to 24px
   when selected). */
.switch-row { justify-content: space-between; gap: 1rem; }
.switch {
  appearance: none;
  -webkit-appearance: none;
  width: 3.25rem;
  height: 2rem;
  flex: none;
  margin: 0;
  position: relative;
  cursor: pointer;
  border: 2px solid var(--md-outline);
  border-radius: var(--md-shape-full);
  background: var(--md-surface-2);
  transition: background-color .15s, border-color .15s;
}
.switch::before {
  content: "";
  position: absolute;
  top: 50%;
  left: 0.375rem;
  width: 1rem;
  height: 1rem;
  border-radius: 50%;
  background: var(--md-outline);
  transform: translateY(-50%);
  transition: left .15s, width .15s, height .15s, background-color .15s;
}
.switch:checked {
  background: var(--md-primary);
  border-color: var(--md-primary);
}
.switch:checked::before {
  left: 1.375rem;
  width: 1.5rem;
  height: 1.5rem;
  background: var(--md-on-primary);
}
.switch:focus-visible {
  outline: 2px solid var(--md-link);
  outline-offset: 2px;
}
.email-row    { display: flex; align-items: center; gap: 1rem; flex-wrap: wrap; }
.email-addr   { font-weight: 500; font-size: 0.9375rem; }
.email-pending {
  font-size: 0.8125rem;
  color: var(--md-on-warning-container);
  margin-top: 0.5rem;
  padding: 0.5rem 0.75rem;
  background: var(--md-warning-container);
  border-radius: var(--md-shape-sm);
}

/* Sign-in method items */
.method-item {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 1rem;
  padding: 0.875rem 0;
}
.method-name { font-weight: 500; font-size: 0.9375rem; }
.method-meta { font-size: 0.75rem; color: var(--md-on-surface-variant); margin-top: 0.25rem; }

.register-error,
.method-error {
  color: var(--md-error);
  font-size: 0.875rem;
  margin: 0.5rem 0 0;
  display: none;
}

/* Passkey items */
.passkey-item {
  display: flex; align-items: center; justify-content: space-between;
  gap: 1rem; padding: 0.875rem 0; border-bottom: 1px solid var(--md-outline-variant);
}
.passkey-item:last-child { border-bottom: none; }
.passkey-name { font-weight: 500; }
.passkey-meta { font-size: 0.75rem; color: var(--md-on-surface-variant); margin-top: 0.25rem; }
.passkey-delete {
  font-size: 0.75rem; color: var(--md-error); background: none; border: none;
  cursor: pointer; padding: 0.25rem 0.5rem; border-radius: var(--md-shape-sm);
  font-family: inherit;
}
.passkey-delete:hover { background: var(--md-error-container); }

/* ── Info box ─────────────────────────────────────────────────────────────── */
.info-box {
  background: color-mix(in srgb, var(--md-primary) 6%, var(--md-surface));
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-md);
  padding: 0.75rem 1rem;
  font-size: 0.875rem;
  color: var(--md-on-surface-variant);
  margin: 0.5rem 0 1rem;
}

/* ── Sign-in history table ────────────────────────────────────────────────── */
.history-table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.875rem;
  margin-top: 0.5rem;
}
.history-table th {
  text-align: left;
  font-weight: 500;
  font-size: 0.6875rem;
  letter-spacing: 0.06em;
  text-transform: uppercase;
  color: var(--md-on-surface-variant);
  padding: 0.5rem 0.75rem 0.5rem 0;
  border-bottom: 2px solid var(--md-outline-variant);
}
.history-table td {
  padding: 0.625rem 0.75rem 0.625rem 0;
  border-bottom: 1px solid var(--md-surface-1);
  vertical-align: top;
}
.history-table tr:last-child td { border-bottom: none; }
.history-meta { color: var(--md-on-surface-variant); font-size: 0.8125rem; margin-top: 0.125rem; }

/* ── Utility ──────────────────────────────────────────────────────────────── */
.empty   { color: var(--md-on-surface-variant); font-size: 0.875rem; margin: 0.5rem 0 1rem; }
.link    { color: var(--md-link); text-decoration: none; }
.link:hover { text-decoration: underline; }
.summary { color: var(--md-on-surface-variant); font-size: 0.875rem; margin-bottom: 0.75rem; }

/* ── Admin pages ──────────────────────────────────────────────────────────── */
.search-row {
  display: flex;
  gap: 0.5rem;
  align-items: center;
  margin-bottom: 1.5rem;
}
.search-input {
  flex: 1;
  max-width: 24rem;
}

.admin-table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.9375rem;
}
.admin-table th {
  text-align: left;
  padding: 0.5rem 0.75rem;
  border-bottom: 2px solid var(--md-outline-variant);
  font-size: 0.6875rem;
  font-weight: 600;
  color: var(--md-on-surface-variant);
  text-transform: uppercase;
  letter-spacing: 0.06em;
}
.admin-table td {
  padding: 0.625rem 0.75rem;
  border-bottom: 1px solid var(--md-surface-1);
  vertical-align: middle;
}
.admin-table tr:hover td { background: var(--md-surface-1); }

.pager {
  display: flex;
  align-items: center;
  gap: 1rem;
  margin-top: 1.5rem;
  font-size: 0.875rem;
  color: var(--md-on-surface-variant);
}
.pager a {
  padding: 0.375rem 0.875rem;
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-full);
  color: var(--md-link);
  text-decoration: none;
  font-size: 0.875rem;
  font-weight: 500;
}
.pager a:hover { background: color-mix(in srgb, var(--md-primary) 8%, transparent); }

.page-size {
  display: flex;
  align-items: center;
  gap: 0.375rem;
  margin-bottom: 1.25rem;
  font-size: 0.875rem;
  color: var(--md-on-surface-variant);
}
.page-size-btn {
  padding: 0.25rem 0.625rem;
  border: 1px solid var(--md-outline-variant);
  border-radius: var(--md-shape-full);
  color: var(--md-link);
  text-decoration: none;
  font-size: 0.8125rem;
  font-weight: 500;
}
.page-size-btn:hover { background: color-mix(in srgb, var(--md-primary) 8%, transparent); }
.page-size-btn--active {
  background: var(--md-primary-container);
  color: var(--md-on-primary-container);
  border-color: var(--md-primary-container);
}

.info-row {
  display: flex;
  gap: 0.75rem;
  margin-bottom: 0.75rem;
  font-size: 0.9375rem;
  align-items: baseline;
}
.info-label {
  width: 8rem;
  flex-shrink: 0;
  font-weight: 500;
  color: var(--md-on-surface-variant);
  font-size: 0.875rem;
}

.action-row {
  display: flex;
  gap: 0.75rem;
  flex-wrap: wrap;
  margin-top: 2rem;
  padding-top: 1.5rem;
  border-top: 1px solid var(--md-outline-variant);
}

/* ── Dialog ───────────────────────────────────────────────────────────────── */
/* Native <dialog> shown via showModal() — the browser makes the rest of the
   page inert and un-clickable behind ::backdrop, which is the point of using
   it for password add/change. */
dialog {
  border: none;
  border-radius: var(--md-shape-md);
  background: var(--md-surface);
  color: var(--md-on-surface);
  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.28);
  padding: 1.5rem;
  width: calc(100% - 2rem);
  max-width: 26rem;
}
dialog::backdrop { background: rgba(0, 0, 0, 0.4); }
.dialog-title { font-size: 1.125rem; font-weight: 500; margin: 0 0 1rem; }

/* ── Dark mode ────────────────────────────────────────────────────────────── */
/* Redefines the MD3 token set; every rule above reads colors through these
   custom properties, so nothing else needs to change. --md-primary itself is
   left as-is — --md-on-primary text on it still reads fine for filled
   buttons — but it fails 4.5:1 as *text* on these dark surfaces, hence the
   separate --md-link tint used everywhere text/links use var(--md-primary)
   in light mode. account.templ/admin.templ share this stylesheet and are
   covered by the same block. */
@media (prefers-color-scheme: dark) {
  :root {
    --md-on-primary: #FFFFFF;
    --md-primary-container: color-mix(in srgb, var(--md-primary) 30%, #000000);
    --md-on-primary-container: color-mix(in srgb, var(--md-primary) 20%, #FFFFFF);

    --md-link: #7EB6FF;

    --md-surface: #121317;
    --md-surface-1: #1B1C21;
    --md-surface-2: #202127;
    --md-surface-container: #1E1F24;
    --md-on-surface: #E3E2E6;
    --md-on-surface-variant: #C4C6D0;

    --md-outline: #8E9099;
    --md-outline-variant: #44474F;

    --md-error: #FFB4AB;
    --md-on-error: #690005;
    --md-error-container: #93000A;
    --md-on-error-container: #FFDAD6;

    --md-success: #8BD08F;
    --md-success-container: #1B5E20;
    --md-on-success-container: #C8E6C9;

    --md-warning: #FFB870;
    --md-warning-container: #8C4200;
    --md-on-warning-container: #FFDCC0;
  }
}