/* Atrybut hidden ma wygrywac z kazda regula display ponizej. Bez tego
   .auth-step{display:flex} przykrywa [hidden] i element zostaje na ekranie. */
[hidden]{display:none !important}

/* auth2.css — ekran logowania panelu. Warstwa osobna od admin.css, bo logowanie jest
   jedyna strona, ktora widzi ktos jeszcze niezalogowany: ma wygladac na produkt, nie na
   formularz. Kolory bierze z /brand/theme.css (--brand, --brand-2), wiec kazda instancja
   SaaS dostaje swoj ekran bez zmiany jednej linii kodu. */

.auth2{
  min-height:100dvh;margin:0;
  display:grid;place-items:center;
  padding:24px 18px;
  background:var(--s-0,#0a0c0f);
  overflow-x:hidden;
}

/* ============================ TLO ============================
   Dwie plamy w kolorach marki plus delikatna siatka. Statyczne — ruch na tym ekranie
   nalezy do karty i pol, tlo ma tylko dawac glebie. */
.auth2-bg{position:fixed;inset:0;overflow:hidden;pointer-events:none}
.auth2-bg .glow{position:absolute;width:52vmax;height:52vmax;border-radius:50%;filter:blur(100px);opacity:.28}
.auth2-bg .g1{background:var(--brand,#f5911e);top:-18vmax;left:-12vmax}
.auth2-bg .g2{background:var(--brand-2,#e8481c);bottom:-20vmax;right:-14vmax;opacity:.2}
.auth2-bg .grid{
  position:absolute;inset:0;opacity:.35;
  background-image:linear-gradient(rgba(255,255,255,.035) 1px,transparent 1px),
                   linear-gradient(90deg,rgba(255,255,255,.035) 1px,transparent 1px);
  background-size:56px 56px;
  mask-image:radial-gradient(circle at 50% 42%,#000 0%,transparent 72%);
  -webkit-mask-image:radial-gradient(circle at 50% 42%,#000 0%,transparent 72%);
}
html[data-theme="light"] .auth2-bg .grid{
  background-image:linear-gradient(rgba(12,16,22,.05) 1px,transparent 1px),
                   linear-gradient(90deg,rgba(12,16,22,.05) 1px,transparent 1px);
}

/* ============================ KARTA ============================ */
.auth2-wrap{position:relative;z-index:1;width:100%;max-width:420px}
.auth2-card{
  background:var(--s-glass,rgba(15,18,22,.72));
  backdrop-filter:blur(20px) saturate(140%);
  -webkit-backdrop-filter:blur(20px) saturate(140%);
  border:1px solid var(--line-1,#242c36);
  border-radius:calc(var(--radius,14px) + 6px);
  padding:30px 28px 24px;
  box-shadow:0 30px 70px rgba(0,0,0,.45);
}
html[data-theme="light"] .auth2-card{box-shadow:0 30px 70px rgba(19,23,34,.16)}

.auth2-brand{display:flex;align-items:center;gap:11px;margin-bottom:20px}
.auth2-brand .mark{
  width:38px;height:38px;flex:none;border-radius:11px;
  display:grid;place-items:center;overflow:hidden;
  color:#fff;font:700 16px/1 var(--display,inherit);
  background:linear-gradient(135deg,var(--brand,#f5911e),var(--brand-2,#e8481c));
  box-shadow:0 8px 20px rgb(var(--brand-2-rgb,232 72 28) / .3);
}
.auth2-brand .mark img{width:100%;height:100%;object-fit:contain;padding:3px}
.auth2-brand .nm{font-size:17px;font-weight:650;color:var(--tx-1,#f4f1ea);letter-spacing:-.01em}

.auth2-card h1{
  margin:0 0 4px;font-size:20px;font-weight:650;letter-spacing:-.01em;
  color:var(--tx-1,#f4f1ea);
  /* admin.css nadaje naglowkom panelu font display z wersalikami — na ekranie logowania
     chcemy zdanie, nie szyld, wiec cofamy to tutaj. */
  font-family:inherit;text-transform:none;
}
.auth2-slogan{margin:0 0 20px;font-size:13.5px;color:var(--tx-3,#8d95a1)}
.auth2-card h1 + form,.auth2-card h1 + .auth2-error{margin-top:20px}

/* ============================ POLA (etykieta plywajaca) ============================ */
.field2{position:relative;margin-bottom:16px}
.field2 input{
  width:100%;min-height:52px;
  padding:22px 14px 8px;
  color:var(--tx-1,#f4f1ea);
  background:rgba(127,127,127,.08);
  border:1px solid var(--line-2,#333d4a);
  border-radius:var(--radius,12px);
  font:inherit;font-size:15px;
  transition:border-color .16s ease,background .16s ease;
}
.field2 input:focus{outline:none;border-color:var(--brand,#f5911e);background:rgba(127,127,127,.12)}
.field2 input:focus-visible{outline:2px solid var(--brand,#f5911e);outline-offset:2px}
.field2 label{
  position:absolute;left:15px;top:16px;
  font-size:15px;color:var(--tx-3,#8d95a1);
  pointer-events:none;transform-origin:left top;
  transition:transform .18s cubic-bezier(.22,.61,.36,1),color .18s ease;
}
.field2 input:focus + label,
.field2 input:not(:placeholder-shown) + label{transform:translateY(-9px) scale(.76);color:var(--brand,#f5911e)}
/* Pasek pod polem rosnie od srodka przy skupieniu — sygnal „tu piszesz". */
.field2 .bar{position:absolute;left:14px;right:14px;bottom:1px;height:2px;border-radius:2px;background:var(--brand,#f5911e);transform:scaleX(0);transform-origin:center;transition:transform .22s cubic-bezier(.22,.61,.36,1)}
.field2 input:focus ~ .bar{transform:scaleX(1)}
.field2 .eye{
  position:absolute;right:8px;top:9px;width:36px;height:36px;
  display:grid;place-items:center;background:none;border:0;border-radius:9px;
  color:var(--tx-3,#8d95a1);cursor:pointer;
}
.field2 .eye svg{width:19px;height:19px}
.field2 .eye[aria-pressed="true"]{color:var(--brand,#f5911e)}

/* ============================ PRZYCISK ============================ */
.auth2-submit{
  width:100%;min-height:50px;margin-top:4px;
  display:flex;align-items:center;justify-content:center;gap:9px;
  border:0;border-radius:var(--radius,12px);
  color:#fff;font:inherit;font-size:15px;font-weight:650;cursor:pointer;
  background:linear-gradient(135deg,var(--brand,#f5911e),var(--brand-2,#e8481c));
  box-shadow:0 10px 26px rgb(var(--brand-2-rgb,232 72 28) / .3);
  position:relative;overflow:hidden;
}
.auth2-submit .arw{width:18px;height:18px;transition:transform .18s ease}
.auth2-submit:hover .arw{transform:translateX(3px)}
.auth2-submit[disabled]{cursor:progress;opacity:.9}
.auth2-submit[disabled] .arw{opacity:0}
.auth2-submit[disabled]::after{
  content:"";position:absolute;right:18px;width:16px;height:16px;border-radius:50%;
  border:2px solid rgba(255,255,255,.35);border-top-color:#fff;animation:auth2Spin .7s linear infinite;
}
@keyframes auth2Spin{to{transform:rotate(360deg)}}

/* ============================ KOMUNIKATY I STOPKA ============================ */
.auth2-error{
  margin:0 0 16px;padding:11px 13px;border-radius:12px;font-size:13.5px;
  color:var(--tx-1,#f4f1ea);border:1px solid var(--neg,#ff5f52);background:rgb(255 95 82 / .12);
}
.auth2-langs{display:flex;gap:6px;justify-content:center;margin:18px 0 10px;flex-wrap:wrap}
.auth2-langs a{
  min-width:44px;min-height:32px;display:grid;place-items:center;
  padding:4px 10px;border-radius:9px;text-decoration:none;
  font-size:12px;font-weight:600;color:var(--tx-3,#8d95a1);
  border:1px solid transparent;transition:color .16s ease,border-color .16s ease,background .16s ease;
}
.auth2-langs a:hover{color:var(--tx-1,#f4f1ea);background:rgba(127,127,127,.1)}
.auth2-langs a.on{color:var(--brand,#f5911e);border-color:var(--brand,#f5911e)}
.auth2-foot{margin:0;text-align:center;font-size:11.5px;color:var(--tx-3,#8d95a1)}

/* ============================ KROK 2FA ============================
   Drugi krok logowania (kod z aplikacji albo ratunkowy) zyje w tej samej karcie,
   pod tym samym naglowkiem #authTitle — wlasny mniejszy tytul odroznia krok bez
   przeladowania strony (patrz #authStep1/#authStep2 w login.ejs + admin.js). */
.auth2-step-title{
  margin:0 0 4px;font-size:17px;font-weight:650;letter-spacing:-.01em;
  color:var(--tx-1,#f4f1ea);font-family:inherit;text-transform:none;
}
.auth2-step-title + .auth2-slogan{margin-bottom:20px}
.auth2-links{display:flex;justify-content:space-between;align-items:center;gap:12px;margin-top:14px;flex-wrap:wrap}
.link-btn{
  background:none;border:0;padding:4px 2px;font:inherit;font-size:12.5px;font-weight:600;
  color:var(--tx-3,#8d95a1);cursor:pointer;text-decoration:underline;text-underline-offset:3px;
}
.link-btn:hover,.link-btn:focus-visible{color:var(--brand,#f5911e)}

/* ============================ MOBILE ============================ */
@media (max-width:480px){
  .auth2{padding:16px 12px;align-items:flex-start}
  .auth2-card{padding:24px 18px 18px}
}

/* ============================ DOSTEPNOSC ============================ */
@media (prefers-reduced-motion:reduce){
  .auth2-submit .arw,.field2 label,.field2 .bar,.auth2-langs a{transition:none}
  .auth2-submit[disabled]::after{animation-duration:.001ms}
}