/* ==========================================================================
   public.css — Phase 25 Plan 25-01.

   Folha custom para o surface PÚBLICO do auth-service (forgot-password,
   reset-password e telas auxiliares). Camada aditiva sobre Pico CSS v2.1.1
   (servida via /admin/static/pico.min.css — reusada deliberadamente para
   não duplicar bytes).

   Esta folha NÃO compartilha state com admin.css. Públicas têm visual
   intencionalmente mais "calmo" (sem topbar, sem nav, sem sidebar) e
   mais centrado no card único. Independência permite alterar uma sem
   regredir a outra.

   Restrições (CLAUDE.md §3 / CSP):
     - Servida de /auth/static/public.css => origem 'self', compatível
       com `style-src 'self' 'nonce-...'`.
     - SEM @import, SEM url() externa, SEM build step.
     - Reaproveita custom properties do Pico (var(--pico-*)).
   ========================================================================== */

:root {
  --public-card-width: 28rem;
  --public-gap: 1rem;
  --public-success: #2d7a3a;
  --public-warning: #b87714;
  --public-danger: #c5283d;
}

/* --------------------------------------------------------------------------
   1. Layout — single card centralizado, sem topbar.
   -------------------------------------------------------------------------- */

body {
  min-height: 100vh;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 1.5rem;
  background: var(--pico-background-color);
}

main.public-wrap {
  width: 100%;
  max-width: var(--public-card-width);
}

/* --------------------------------------------------------------------------
   2. Card — container único centralizado.
   -------------------------------------------------------------------------- */

.auth-card {
  padding: 2rem 1.75rem;
  background: var(--pico-card-background-color);
  border: 1px solid var(--pico-card-border-color, var(--pico-muted-border-color));
  border-radius: var(--pico-border-radius);
  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.08);
}

.auth-card hgroup {
  margin-bottom: 1.5rem;
}

.auth-card hgroup h1 {
  font-size: 1.5rem;
  margin-bottom: 0.5rem;
  line-height: 1.3;
}

.auth-card hgroup p {
  color: var(--pico-muted-color);
  margin: 0;
  font-size: 0.95rem;
}

/* --------------------------------------------------------------------------
   3. Form — labels acima, espaçamento generoso, sem floating labels.
   -------------------------------------------------------------------------- */

.auth-form {
  display: flex;
  flex-direction: column;
  gap: var(--public-gap);
}

.auth-form label {
  font-weight: 600;
  font-size: 0.9rem;
  display: block;
  margin-bottom: 0.25rem;
}

.auth-form input[type="email"],
.auth-form input[type="password"] {
  width: 100%;
  margin-bottom: 0;
}

.auth-form .field-hint {
  font-size: 0.85rem;
  color: var(--pico-muted-color);
  margin: 0.25rem 0 0 0;
}

.auth-form .field-error {
  font-size: 0.85rem;
  color: var(--public-danger);
  margin: 0.25rem 0 0 0;
  font-weight: 500;
}

.auth-form button[type="submit"] {
  width: 100%;
  margin-top: 0.5rem;
}

/* --------------------------------------------------------------------------
   4. Honeypot — campo invisível mas accessible aos screen-readers ignorando.
      SEC-25-F: bots automatizados preenchem; users e screen-readers não.
   -------------------------------------------------------------------------- */

.honeypot-trap {
  position: absolute;
  left: -9999px;
  width: 1px;
  height: 1px;
  opacity: 0;
  pointer-events: none;
}

/* --------------------------------------------------------------------------
   5. Flash / alert.
   -------------------------------------------------------------------------- */

.flash {
  margin-bottom: 1.25rem;
  padding: 0.875rem 1rem;
  border-radius: var(--pico-border-radius);
  border-left: 4px solid;
  font-size: 0.95rem;
}

.flash p {
  margin: 0;
}

.flash-success {
  background: rgba(45, 122, 58, 0.08);
  border-color: var(--public-success);
  color: var(--public-success);
}

.flash-warning {
  background: rgba(184, 119, 20, 0.08);
  border-color: var(--public-warning);
  color: var(--public-warning);
}

.flash-error {
  background: rgba(197, 40, 61, 0.08);
  border-color: var(--public-danger);
  color: var(--public-danger);
}

/* --------------------------------------------------------------------------
   6. Status pages — sucesso e erro com ícones simples (Unicode).
   -------------------------------------------------------------------------- */

.status-icon {
  font-size: 3rem;
  text-align: center;
  margin-bottom: 1rem;
  line-height: 1;
}

.status-icon.success {
  color: var(--public-success);
}

.status-icon.error {
  color: var(--public-danger);
}

.status-icon.info {
  color: var(--pico-primary);
}

/* --------------------------------------------------------------------------
   7. CTAs e links.
   -------------------------------------------------------------------------- */

.auth-card .actions {
  display: flex;
  flex-direction: column;
  gap: 0.75rem;
  margin-top: 1.5rem;
}

.auth-card .actions a.button-primary {
  display: block;
  width: 100%;
  text-align: center;
  padding: 0.75rem 1rem;
  background: var(--pico-primary);
  color: var(--pico-primary-inverse);
  border-radius: var(--pico-border-radius);
  text-decoration: none;
  font-weight: 600;
}

.auth-card .actions a.button-primary:hover {
  background: var(--pico-primary-hover);
}

.auth-card .actions a.button-secondary {
  display: block;
  width: 100%;
  text-align: center;
  padding: 0.75rem 1rem;
  background: transparent;
  color: var(--pico-primary);
  border: 1px solid var(--pico-primary);
  border-radius: var(--pico-border-radius);
  text-decoration: none;
  font-weight: 500;
}

.auth-card .actions a.button-secondary:hover {
  background: rgba(0, 0, 0, 0.04);
}

/* --------------------------------------------------------------------------
   8. Footer.
   -------------------------------------------------------------------------- */

.public-footer {
  margin-top: 1.5rem;
  text-align: center;
  font-size: 0.85rem;
  color: var(--pico-muted-color);
}

.public-footer p {
  margin: 0.25rem 0;
}

/* --------------------------------------------------------------------------
   9. Responsive — mobile portrait.
   -------------------------------------------------------------------------- */

@media (max-width: 480px) {
  body {
    padding: 0.75rem;
  }

  .auth-card {
    padding: 1.5rem 1.25rem;
  }

  .auth-card hgroup h1 {
    font-size: 1.25rem;
  }
}