/* security.css - owned by P5a (admin 2FA pages: /admin/login/2fa, /admin/login/recovery, /admin/security…), plus the
   admin account pages /admin/users… (design Rev 9, kk-users-*).
   Linked from App.razor after auth.css. Uses only base.css tokens; login-step pages use AuthLayout and
   P5b's .login-page/.auth-card/.auth-form/.auth-actions/.auth-hint (auth.css); only the extras live here. */

/* ========== Login step (2FA / recovery code) ========== */
.kk-2fa-card .sub {
  line-height: 1.55;
}
.kk-2fa-code {
  font-variant-numeric: tabular-nums;
  letter-spacing: 0.18em;
  font-size: 1.15rem;
  min-height: var(--kk-touch);
}
.kk-2fa-links {
  margin-top: 1.25rem;
  font-size: 0.88rem;
  color: var(--kk-text-secondary);
}
.kk-2fa-links p {
  margin: 0 0 0.4rem;
}
.kk-2fa-links a {
  color: var(--kk-ink);
  text-underline-offset: 3px;
}

/* ========== Management (/admin/security…) ========== */
.kk-sec-back {
  margin: 0 0 0.5rem;
  font-size: 0.88rem;
}
/* A standalone link: a 44px hit area (CLAUDE.md 4) without changing how the line looks. */
.kk-sec-back a {
  display: inline-flex;
  align-items: center;
  min-height: var(--kk-touch);
  color: var(--kk-text-secondary);
  text-decoration: none;
}
.kk-sec-back a:hover,
.kk-sec-back a:focus-visible {
  color: var(--kk-ink);
  text-decoration: underline;
}
.kk-sec-card,
.kk-sec-codes {
  max-width: 640px;
  margin-bottom: 1.25rem;
}
.kk-sec-card-title {
  font-size: 1.05rem;
  font-weight: 650;
  letter-spacing: -0.02em;
  margin: 0 0 0.9rem;
}
.kk-sec-help {
  color: var(--kk-text-secondary);
  font-size: 0.9rem;
  line-height: 1.6;
}
.kk-sec-status {
  display: grid;
  gap: 0.6rem;
  margin: 0 0 1rem;
}
.kk-sec-status > div {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.25rem 1rem;
}
.kk-sec-status dt {
  min-width: 7.5rem;
  font-weight: 500;
  color: var(--kk-text-secondary);
}
.kk-sec-status dd {
  margin: 0;
}
/* Badge text is always --kk-ink (>= 10:1 on the tinted backgrounds, WCAG AA); the state colour is carried by the
   border and the dot, never by the small text itself. */
.kk-sec-badge {
  display: inline-flex;
  align-items: center;
  gap: 0.4rem;
  padding: 0.2rem 0.7rem;
  border: 1px solid transparent;
  border-radius: var(--kk-radius-pill);
  font-size: 0.82rem;
  font-weight: 600;
  color: var(--kk-ink);
}
.kk-sec-badge::before {
  content: "";
  width: 0.5rem;
  height: 0.5rem;
  border-radius: 50%;
  background: currentColor;
  flex: none;
}
.kk-sec-badge-on {
  background: var(--kk-success-bg);
  border-color: var(--kk-success);
}
.kk-sec-badge-on::before {
  background: var(--kk-success);
}
.kk-sec-badge-off {
  background: var(--kk-warn-bg);
  border-color: var(--kk-warn);
}
.kk-sec-badge-off::before {
  background: var(--kk-warn);
}
/* #b02a2a on white is about 6.4:1 (--kk-danger #d64545 is only about 4.4:1). */
.kk-sec-warn {
  color: #b02a2a;
  font-weight: 600;
}
.kk-sec-actions {
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
  margin-top: 0.75rem;
}
.kk-sec-actions .btn {
  min-height: var(--kk-touch);
  display: inline-flex;
  align-items: center;
}
/* Darker than --kk-danger so text/background pairs reach 4.5:1 (#b02a2a vs white is about 6.4:1). */
.kk-sec-danger {
  color: #b02a2a;
  border-color: #b02a2a;
}
.kk-sec-danger:hover,
.kk-sec-danger:focus-visible {
  background: #b02a2a;
  border-color: #b02a2a;
  color: #fff;
}
.btn-dark.kk-sec-danger {
  background: #b02a2a;
  border-color: #b02a2a;
  color: #fff;
}
.btn-dark.kk-sec-danger:hover,
.btn-dark.kk-sec-danger:focus-visible {
  background: #8f2020;
  border-color: #8f2020;
  color: #fff;
}
.kk-sec-inline-form {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.25rem 0.75rem;
  margin-top: 1rem;
  padding-top: 1rem;
  border-top: 1px solid var(--kk-line);
}
.kk-sec-form {
  max-width: 420px;
}

/* Setup steps */
.kk-sec-steps {
  margin: 0;
  padding-left: 1.25rem;
  display: grid;
  gap: 1.25rem;
}
.kk-sec-steps > li > p {
  margin: 0.25rem 0 0.5rem;
  color: var(--kk-text-secondary);
  font-size: 0.92rem;
}
.kk-sec-qr {
  width: min(220px, 100%);
  aspect-ratio: 1;
  padding: 0.5rem;
  background: #fff;
  border: 1px solid var(--kk-line-strong);
  border-radius: var(--kk-radius-sm);
  margin: 0.5rem 0;
}
.kk-sec-qr svg {
  display: block;
  width: 100%;
  height: 100%;
}
.kk-sec-key {
  display: inline-block;
  font-size: 0.95rem;
  letter-spacing: 0.08em;
  padding: 0.4rem 0.65rem;
  background: var(--kk-bg);
  border: 1px solid var(--kk-line);
  border-radius: 6px;
  color: var(--kk-ink);
  word-break: break-all;
  user-select: all;
}

/* Recovery codes */
.kk-sec-code-list {
  display: grid;
  grid-template-columns: repeat(2, minmax(0, 1fr));
  gap: 0.5rem 1.5rem;
  margin: 1rem 0;
  padding-left: 1.5rem;
}
.kk-sec-code-list code {
  font-size: 1rem;
  letter-spacing: 0.06em;
  color: var(--kk-ink);
  user-select: all;
}

/* ========== Admin accounts (/admin/users…, design Rev 9) ========== */
/* Flex, so the full-width rule for 「관리자 추가」 below 576px applies. */
.kk-users-toolbar {
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
  margin: 0 0 1rem;
}
.kk-users-toolbar .btn,
.kk-users-actions .btn {
  min-height: var(--kk-touch);
  display: inline-flex;
  align-items: center;
  justify-content: center;
}
.kk-users-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: grid;
  gap: 1rem;
  max-width: 720px;
}
.kk-users-card {
  margin: 0;
}
.kk-users-email {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.25rem 0.5rem;
  margin: 0 0 0.25rem;
  font-size: 1.05rem;
  font-weight: 650;
  letter-spacing: -0.01em;
  word-break: break-all;
}
.kk-users-self {
  display: inline-flex;
  align-items: center;
  padding: 0.05rem 0.55rem;
  border: 1px solid var(--kk-ink);
  border-radius: var(--kk-radius-pill);
  font-size: 0.75rem;
  font-weight: 600;
  color: var(--kk-ink);
}
.kk-users-name {
  margin: 0 0 0.25rem;
  color: var(--kk-text-secondary);
}
/* Badge text is always --kk-ink (like .kk-sec-badge); the state colour is on the border and the dot only. */
.kk-users-badges {
  list-style: none;
  display: flex;
  flex-wrap: wrap;
  gap: 0.4rem;
  margin: 0.5rem 0 0.75rem;
  padding: 0;
}
.kk-users-badge {
  display: inline-flex;
  align-items: center;
  gap: 0.4rem;
  padding: 0.2rem 0.7rem;
  border: 1px solid var(--kk-line-strong);
  border-radius: var(--kk-radius-pill);
  background: var(--kk-bg);
  font-size: 0.82rem;
  font-weight: 600;
  color: var(--kk-ink);
}
.kk-users-badge::before {
  content: "";
  width: 0.5rem;
  height: 0.5rem;
  border-radius: 50%;
  background: var(--kk-text-secondary);
  flex: none;
}
.kk-users-badge-on {
  background: var(--kk-success-bg);
  border-color: var(--kk-success);
}
.kk-users-badge-on::before {
  background: var(--kk-success);
}
.kk-users-badge-warn {
  background: var(--kk-warn-bg);
  border-color: var(--kk-warn);
}
.kk-users-badge-warn::before {
  background: var(--kk-warn);
}
.kk-users-badge-danger {
  background: var(--kk-danger-bg);
  border-color: #b02a2a;
}
.kk-users-badge-danger::before {
  background: #b02a2a;
}
.kk-users-badge-info {
  background: var(--kk-info-bg);
  border-color: var(--kk-info);
}
.kk-users-badge-info::before {
  background: var(--kk-info);
}
.kk-users-meta,
.kk-users-issued-values {
  display: grid;
  gap: 0.4rem;
  margin: 0 0 0.75rem;
}
.kk-users-meta > div,
.kk-users-issued-values > div {
  display: flex;
  flex-wrap: wrap;
  align-items: baseline;
  gap: 0.15rem 1rem;
}
.kk-users-meta dt,
.kk-users-issued-values dt {
  min-width: 7rem;
  font-weight: 500;
  color: var(--kk-text-secondary);
}
.kk-users-meta dd,
.kk-users-issued-values dd {
  margin: 0;
}
.kk-users-actions {
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
  margin-top: 0.75rem;
}
.kk-users-target {
  margin: 0 0 1rem;
  padding: 0 0 0.75rem;
  border-bottom: 1px solid var(--kk-line);
}
.kk-users-target-label {
  margin: 0 0 0.15rem;
  font-size: 0.82rem;
  color: var(--kk-text-secondary);
}
.kk-users-login-id {
  font-size: 1rem;
  color: var(--kk-ink);
  word-break: break-all;
}
/* user-select: all selects the whole temporary password with one click on a PC and with a long press on a phone (a tap
   never selects on iOS Safari or Android Chrome); the panel says so (.kk-users-copy-hint). No copy button: App.razor
   links every script up front and this page adds none. */
.kk-users-temp-password {
  display: inline-block;
  padding: 0.45rem 0.75rem;
  border: 1px solid var(--kk-line-strong);
  border-radius: 6px;
  background: var(--kk-bg);
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
  font-size: 1.25rem;
  letter-spacing: 0.08em;
  color: var(--kk-ink);
  user-select: all;
  -webkit-user-select: all;
  word-break: break-all;
}
.kk-users-copy-hint {
  margin: 0.35rem 0 0;
  font-size: 0.85rem;
  color: var(--kk-text-secondary);
}
/* Rev 10 「입구 코드」: the ready-to-copy message (code + link, never login details); one click / long press selects it. */
.kk-gate-share-title {
  margin: 1rem 0 0.35rem;
  font-size: 0.95rem;
  font-weight: 650;
}
.kk-users-share-text {
  margin: 0;
  padding: 0.6rem 0.75rem;
  border: 1px solid var(--kk-line-strong);
  border-radius: 6px;
  background: var(--kk-bg);
  color: var(--kk-ink);
  font-family: inherit;
  font-size: 0.92rem;
  line-height: 1.6;
  white-space: pre-wrap;
  word-break: break-all;
  user-select: all;
  -webkit-user-select: all;
}
/* Rev 10 bootstrap banner (Layout/DeviceGateBanner.razor) above every admin page while no gate code exists. */
.kk-gate-banner a {
  margin-left: 0.25rem;
  color: var(--kk-ink);
  font-weight: 600;
  text-underline-offset: 3px;
}
.kk-users-guide {
  margin: 0.5rem 0 0;
  padding-left: 1.25rem;
  display: grid;
  gap: 0.4rem;
  font-size: 0.92rem;
  line-height: 1.6;
}
.kk-users-permission a {
  margin-left: 0.25rem;
  color: var(--kk-ink);
  text-underline-offset: 3px;
}

@media (max-width: 575.98px) {
  .kk-users-actions .btn,
  .kk-users-toolbar .btn {
    flex: 1 1 100%;
  }
}

@media (max-width: 420px) {
  .kk-sec-code-list {
    grid-template-columns: 1fr;
  }
  .kk-sec-actions .btn {
    flex: 1 1 100%;
    justify-content: center;
  }
}

@media print {
  .admin-sidebar,
  .kk-sec-back,
  .kk-sec-actions,
  .alert-success {
    display: none !important;
  }
  .kk-sec-codes {
    border: 0;
    box-shadow: none;
  }
}