/* =========================================================
   Auth overlay: pairing, setup, login grid, PIN pad, lock, user menu
   ========================================================= */
.auth-root { display: none; }
.auth-root.show { display: block; position: fixed; inset: 0; z-index: 90; background: var(--bg); overflow: auto; -webkit-overflow-scrolling: touch; }
.auth-wrap { min-height: 100%; display: flex; flex-direction: column; }
.auth-band { background: linear-gradient(135deg, var(--red-dd), var(--red) 70%); color: #fff; padding: 26px 16px 70px; flex: none; }
.auth-brand { max-width: 760px; margin: 0 auto; display: flex; align-items: center; gap: 14px; }
.auth-logo { width: 56px; height: 56px; border-radius: 16px; background: #fff; color: var(--red); display: grid; place-items: center; overflow: hidden; flex: none; box-shadow: 0 4px 14px rgba(0, 0, 0, .18); }
.auth-logo img { width: 100%; height: 100%; object-fit: contain; padding: 2px; }
.auth-brand b { display: block; font-size: 22px; font-weight: 800; letter-spacing: -.01em; line-height: 1.1; }
.auth-brand span { font-size: 13px; opacity: .85; font-weight: 600; }
.auth-main { flex: 1; padding: 0 16px 24px; margin-top: -48px; }
.auth-card { background: var(--card); border: 1px solid var(--line); border-radius: 20px; box-shadow: var(--shadow-lg); max-width: 520px; margin: 0 auto; padding: 24px 22px 22px; }
.auth-card.wide { max-width: 760px; }
.auth-card h2 { margin: 0 0 4px; font-size: 20px; display: flex; align-items: center; gap: 8px; }
.auth-card h2 .ic { color: var(--red); }
.auth-sub { margin: 0 0 18px; color: var(--muted); line-height: 1.5; }
.auth-head { margin-bottom: 14px; }
.auth-host { display: flex; align-items: center; gap: 10px; background: var(--red-50); border-radius: 12px; padding: 10px 14px; margin-bottom: 16px; font-variant-numeric: tabular-nums; flex-wrap: wrap; }
.auth-host b { font-size: 15px; word-break: break-all; }
.auth-chips { display: flex; flex-wrap: wrap; gap: 6px; margin-bottom: 8px; }
.auth-chips .chip { min-height: 40px; }
.input.lg { height: 52px; font-size: 20px; font-weight: 700; letter-spacing: .08em; text-align: center; }
.auth-err { background: var(--red-50); color: var(--red-d); border: 1.5px solid var(--red-200); border-radius: 10px; padding: 9px 12px; font-weight: 600; margin: 0 0 12px; font-size: 13px; }
.auth-card .btn-lg { margin-top: 4px; }
.auth-backup { margin-bottom: 18px; }
.auth-backup .btn { border-style: dashed; height: 48px; }
.auth-backup-info { margin-top: 8px; background: var(--green-50); color: var(--green); border-radius: 10px; padding: 8px 12px; font-size: 13px; display: flex; gap: 6px; align-items: center; flex-wrap: wrap; }
.auth-code-box { display: flex; align-items: center; gap: 10px; background: var(--red-50); border-radius: 12px; padding: 10px 12px; margin-top: 12px; }
.auth-code-box code { flex: 1; font-size: 20px; font-weight: 800; letter-spacing: .1em; word-break: break-all; color: var(--red-d); }

/* ---- busy / info screens ---- */
.auth-busy { text-align: center; padding: 26px 8px 18px; color: var(--ink-2); }
.auth-busy h2 { justify-content: center; }
.auth-busy b { display: block; margin-top: 14px; font-size: 15px; }
.auth-busy .btn { margin-top: 14px; }
.auth-big-ic { color: var(--red-200); display: inline-block; margin-bottom: 6px; }
.spin { width: 38px; height: 38px; border-radius: 50%; border: 4px solid var(--red-100); border-top-color: var(--red); margin: 0 auto; animation: authspin .8s linear infinite; }
@keyframes authspin { to { transform: rotate(360deg); } }

/* ---- login grid ---- */
.auth-users { display: grid; grid-template-columns: repeat(auto-fill, minmax(150px, 1fr)); gap: 12px; margin-bottom: 14px; }
.auth-user {
  background: #fff; border: 1.5px solid var(--line-2); border-radius: 16px; padding: 16px 10px 14px; min-height: 150px;
  display: flex; flex-direction: column; align-items: center; gap: 6px; text-align: center; color: var(--ink);
  transition: transform .12s, border-color .12s, box-shadow .12s;
}
.auth-user:hover { border-color: var(--red); transform: translateY(-2px); box-shadow: var(--shadow); }
.auth-user:active { transform: scale(.97); }
.auth-user.last { border-color: var(--red); background: var(--red-50); box-shadow: 0 0 0 3px var(--red-100); }
.auth-user b { font-size: 14.5px; line-height: 1.25; overflow-wrap: anywhere; }
.auth-user small { color: var(--muted); font-size: 11.5px; }
.av {
  width: 52px; height: 52px; border-radius: 50%; display: inline-grid; place-items: center; font-weight: 800; font-size: 18px; flex: none;
  background: var(--red-100); color: var(--red-d); letter-spacing: .02em;
}
.av[data-role="superadmin"] { background: var(--red); color: #fff; }
.av[data-role="admin"] { background: var(--ink); color: #fff; }
.av.big { width: 72px; height: 72px; font-size: 26px; }
.badge.role-superadmin { background: var(--red); color: #fff; }
.badge.role-admin { background: var(--ink); color: #fff; }
.badge.role-staff { background: var(--red-50); color: var(--red-d); }
.auth-remember { margin: 6px 0 0; justify-content: center; color: var(--ink-2); font-size: 13px; }
.auth-remember input { width: 20px; height: 20px; }
.auth-who { display: flex; flex-direction: column; align-items: center; gap: 4px; margin: 8px 0 14px; }
.auth-who b { font-size: 18px; }
.auth-who span { color: var(--muted); font-size: 13px; }
.auth-card .notice { margin: 4px 0 12px; }
.auth-card .notice .btn { margin-left: auto; flex: none; }

/* ---- PIN pad ---- */
.pinpad { max-width: 300px; margin: 0 auto; }
.pin-dots { display: flex; justify-content: center; gap: 12px; margin: 4px 0 10px; height: 18px; }
.pin-dots i { width: 16px; height: 16px; border-radius: 50%; border: 2px solid var(--red-200); background: #fff; transition: background .1s, transform .1s; }
.pin-dots i.on { background: var(--red); border-color: var(--red); transform: scale(1.08); }
.pin-msg { min-height: 20px; text-align: center; font-size: 13px; font-weight: 700; color: var(--muted); margin-bottom: 8px; }
.pin-msg.err { color: var(--red); }
.pin-keys { display: grid; grid-template-columns: repeat(3, 1fr); gap: 10px; }
.pin-keys button {
  height: 60px; min-width: 44px; border-radius: 14px; border: 1.5px solid var(--line-2); background: #fff; font-size: 24px; font-weight: 700;
  display: grid; place-items: center; color: var(--ink); transition: background .1s, transform .05s;
}
.pin-keys button:hover { background: var(--red-50); border-color: var(--red-200); }
.pin-keys button:active { background: var(--red-100); transform: scale(.96); }
.pin-keys .k-fn { color: var(--ink-2); background: #FDFAFA; }
.pin-keys .k-ok { background: var(--red); border-color: var(--red); color: #fff; }
.pin-keys .k-ok:hover { background: var(--red-d); }
.pin-keys .k-ok:disabled { background: #E7B9B9; border-color: #E7B9B9; cursor: not-allowed; }
.pinpad.busy .pin-keys button { opacity: .6; pointer-events: none; }
.pinpad.shake { animation: pinshake .4s ease; }
@keyframes pinshake { 20% { transform: translateX(-8px); } 40% { transform: translateX(8px); } 60% { transform: translateX(-5px); } 80% { transform: translateX(5px); } }

/* ---- approver dialog ---- */
.auth-approvers { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; margin-bottom: 14px; }
.auth-approver { display: flex; align-items: center; gap: 10px; border: 1.5px solid var(--line-2); border-radius: 12px; padding: 8px 10px; background: #fff; text-align: left; min-height: 56px; color: var(--ink); }
.auth-approver .av { width: 38px; height: 38px; font-size: 14px; }
.auth-approver span { display: flex; flex-direction: column; min-width: 0; }
.auth-approver b { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
.auth-approver small { color: var(--muted); font-size: 11.5px; }
.auth-approver.active { border-color: var(--red); background: var(--red-50); box-shadow: 0 0 0 2px var(--red-100) inset; }

/* ---- footer ---- */
.auth-foot { flex: none; display: flex; flex-wrap: wrap; justify-content: center; align-items: center; gap: 6px 16px; padding: 10px 16px 18px; color: var(--muted); font-size: 12.5px; }
.auth-foot > span { display: inline-flex; align-items: center; gap: 5px; }
.auth-foot .off { color: var(--red); font-weight: 700; }
.auth-foot .link-btn { font-size: 12.5px; color: var(--ink-2); }

/* ---- user chip popover ---- */
.auth-pop {
  position: fixed; z-index: 80; width: 260px; max-width: calc(100vw - 16px); background: #fff; border: 1px solid var(--line); border-radius: 16px;
  box-shadow: var(--shadow-lg); padding: 6px; animation: tin .15s ease;
}
.auth-pop-head { display: flex; align-items: center; gap: 10px; padding: 10px 10px 12px; border-bottom: 1px solid var(--line); margin-bottom: 4px; }
.auth-pop-head .av { width: 40px; height: 40px; font-size: 15px; }
.auth-pop-head b { display: block; font-size: 14.5px; }
.auth-pop-head span { font-size: 12px; color: var(--muted); display: block; }
.auth-pop > button { display: flex; align-items: center; gap: 10px; width: 100%; border: 0; background: none; text-align: left; padding: 0 12px; height: 44px; border-radius: 10px; font-weight: 600; color: var(--ink); }
.auth-pop > button:hover { background: var(--red-50); color: var(--red); }
.auth-pop > button.danger { color: var(--red-d); }

/* ---- responsive ---- */
@media (max-width: 520px) {
  .auth-band { padding: 18px 16px 58px; }
  .auth-logo { width: 46px; height: 46px; border-radius: 13px; }
  .auth-brand b { font-size: 18px; }
  .auth-main { margin-top: -40px; }
  .auth-card { padding: 18px 16px 16px; border-radius: 16px; }
  .auth-users { grid-template-columns: repeat(2, 1fr); gap: 10px; }
  .auth-user { min-height: 136px; padding: 14px 8px 12px; }
  .pin-keys button { height: 56px; font-size: 22px; }
  .auth-approvers { grid-template-columns: 1fr; }
  .auth-card .row2 { grid-template-columns: 1fr; }
}