/* ==========================================================================
   Twee-factor-authenticatie binnen de app-schil (/profile/security).
   Gebruikt de tokens van app-shell.css, zodat het donkere thema meekomt.
   De tweede aanmeldstap staat los hiervan en gebruikt css/auth.css.
   ========================================================================== */

/* Aan/uit-blok bovenaan. */
.tfa-state {
  display: flex;
  align-items: flex-start;
  gap: 14px;
  padding: 16px;
  border: 1px solid var(--border);
  border-radius: var(--radius-md);
  background: var(--bg-elevated);
}

.tfa-state > i {
  font-size: 24px;
  line-height: 1.2;
}

.tfa-state--on {
  border-color: var(--action);
  background: var(--action-ghost);
}
.tfa-state--on > i { color: var(--action-strong); }

.tfa-state--off {
  border-color: var(--warning);
  background: var(--warning-bg);
}
.tfa-state--off > i { color: var(--warning); }

.tfa-state__label {
  margin: 0;
  font-weight: 700;
  color: var(--text);
}
.tfa-state__hint {
  margin: 2px 0 0;
  font-size: 13px;
  color: var(--muted);
}

.tfa-codes-left {
  margin: 16px 0 0;
  font-size: 13px;
  color: var(--muted);
}

/* Bevestiging na een handeling, bv. het vergeten van onthouden toestellen. */
.tfa-status {
  margin: 0 0 16px;
  padding: 10px 14px;
  border-radius: var(--radius-md);
  background: var(--action-ghost);
  border: 1px solid var(--action);
  color: var(--action-strong);
  font-size: 13.5px;
  font-weight: 600;
}

/* Gevolgen in de bevestiging voor het uitzetten. */
.tfa-consequences {
  margin: 16px 0 0;
  padding-left: 20px;
  font-size: 13.5px;
  line-height: 1.7;
  color: var(--text);
}

/* Waarschuwingen en fouten in kaders. */
.tfa-alert {
  margin: 16px 0 0;
  padding: 12px 14px;
  border-radius: var(--radius-md);
  font-size: 13.5px;
  line-height: 1.5;
}
.tfa-alert--warning {
  background: var(--warning-bg);
  border: 1px solid var(--warning);
  color: var(--warning-fg);
}
.tfa-alert--danger {
  background: var(--danger-bg);
  border: 1px solid var(--danger-border);
  color: var(--danger-fg);
}

/* Waarom je 2FA zou aanzetten, op het scherm waar het nog uitstaat. */
.tfa-benefits {
  margin: 16px 0 20px;
  padding-left: 20px;
  font-size: 13.5px;
  line-height: 1.8;
  color: var(--text);
}

/* Actielijst: uitleg links, een echte knop rechts. */
.tfa-actions {
  margin: 20px 0 0;
  display: grid;
  gap: 12px;
}

.tfa-action-row {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 20px;
  padding: 14px 16px;
  border: 1px solid var(--border);
  border-radius: var(--radius-md);
}

.tfa-action-row form {
  margin: 0;
  flex: none;
}
.tfa-action-row > .btn {
  flex: none;
}

.tfa-action-copy {
  min-width: 0;
}

.tfa-action-title {
  margin: 0;
  font-weight: 600;
  color: var(--text);
}

.tfa-action-hint {
  margin: 2px 0 0;
  font-size: 12.5px;
  line-height: 1.5;
  color: var(--muted);
}


/* Genummerde stappen op het koppelscherm. */
.tfa-steps {
  list-style: none;
  counter-reset: tfa-step;
  margin: 0;
  padding: 0;
  display: grid;
  gap: 24px;
}
.tfa-steps > li {
  counter-increment: tfa-step;
  position: relative;
  padding-left: 40px;
}
.tfa-steps > li::before {
  content: counter(tfa-step);
  position: absolute;
  left: 0;
  top: 0;
  width: 28px;
  height: 28px;
  display: inline-flex;
  align-items: center;
  justify-content: center;
  border-radius: 50%;
  background: var(--accent);
  color: #fff;
  font-size: 13px;
  font-weight: 700;
}
.tfa-steps h2 {
  margin: 3px 0 4px;
  font-size: 15px;
  font-weight: 700;
  color: var(--text);
}
.tfa-steps p {
  margin: 0 0 10px;
  font-size: 13.5px;
  line-height: 1.6;
  color: var(--muted);
}

/* De QR staat op wit, ook in het donkere thema: scanners hebben dat contrast nodig. */
.tfa-qr {
  display: inline-flex;
  padding: 12px;
  background: #fff;
  border: 1px solid var(--border);
  border-radius: var(--radius-md);
}
.tfa-qr img {
  display: block;
  width: 200px;
  height: 200px;
}

.tfa-manual {
  margin-top: 12px;
  font-size: 13px;
}
.tfa-manual summary {
  cursor: pointer;
  color: var(--accent);
  font-weight: 600;
}
.tfa-manual__key {
  margin: 8px 0 0;
}
.tfa-manual__key code {
  display: inline-block;
  padding: 8px 12px;
  border-radius: var(--radius-sm);
  background: var(--bg-elevated);
  border: 1px solid var(--border);
  font-family: "JetBrains Mono", "Courier New", Consolas, monospace;
  font-size: 15px;
  letter-spacing: 2px;
  color: var(--text);
  word-break: break-all;
}

.tfa-confirm-form {
  display: grid;
  gap: 10px;
  max-width: 260px;
}

/* Zescijferige code: ruim en uit elkaar, zodat overtypen niet misgaat. */
.tfa-code-input {
  font-size: 24px !important;
  letter-spacing: 8px;
  font-family: "JetBrains Mono", "Courier New", Consolas, monospace;
  text-align: center;
}

.tfa-aftercard {
  margin: 16px 0 0;
  text-align: center;
  font-size: 13px;
}

/* --------------------------------------------------------------------------
   Recovery-codes modal
   Eenmalige weergave: geen sluitknop, geen klik-op-de-achtergrond. De enige
   uitweg is de knop onderaan, en die opent pas na de bevestiging.
   -------------------------------------------------------------------------- */
.tfa-modal .modal-content {
  border: 1px solid var(--border);
  border-radius: var(--radius-lg);
  background: var(--surface);
}
.tfa-modal .modal-header,
.tfa-modal .modal-footer {
  border-color: var(--border);
}
.tfa-modal .modal-title {
  font-weight: 700;
  color: var(--text);
}

.tfa-modal__lede {
  margin: 0 0 16px;
  font-size: 13.5px;
  line-height: 1.6;
  color: var(--muted);
}

.tfa-codes {
  list-style: none;
  margin: 0 0 16px;
  padding: 16px;
  border: 1px solid var(--border);
  border-radius: var(--radius-md);
  background: var(--bg-elevated);
  display: grid;
  grid-template-columns: repeat(2, 1fr);
  gap: 8px 16px;
}
.tfa-codes code {
  font-family: "JetBrains Mono", "Courier New", Consolas, monospace;
  font-size: 14px;
  letter-spacing: 1px;
  color: var(--text);
  user-select: all;
}

/* Downloadknop onder de codes, met bevestiging ernaast. */
.tfa-codes-tools {
  display: flex;
  align-items: center;
  gap: 12px;
  margin: 0 0 16px;
}
.tfa-codes-downloaded {
  display: inline-flex;
  align-items: center;
  gap: 4px;
  font-size: 12.5px;
  font-weight: 600;
  color: var(--action-strong);
}

.tfa-modal__warning {
  margin: 0 0 16px;
  padding: 12px 14px;
  border-radius: var(--radius-md);
  background: var(--warning-bg);
  border: 1px solid var(--warning);
  font-size: 13px;
  line-height: 1.55;
  color: var(--warning-fg);
}
.tfa-modal__warning strong { display: block; }

.tfa-modal__ack {
  display: flex;
  align-items: flex-start;
  gap: 8px;
  margin: 0;
  font-size: 13.5px;
  line-height: 1.5;
  color: var(--text);
  cursor: pointer;
}
/* Expliciete maten: zonder deze regel valt de checkbox terug op de breedte van
   het formulier en duwt hij het label eruit. */
.tfa-modal__ack input[type="checkbox"] {
  width: 16px;
  height: 16px;
  padding: 0;
  flex: 0 0 auto;
  margin-top: 2px;
  cursor: pointer;
  accent-color: var(--accent);
}

@media (max-width: 640px) {
  .tfa-steps > li { padding-left: 34px; }
  .tfa-qr img { width: 168px; height: 168px; }
  .tfa-codes { grid-template-columns: 1fr; }
  .tfa-code-input { font-size: 20px !important; letter-spacing: 6px; }
  .tfa-action-row {
    flex-direction: column;
    align-items: stretch;
  }
}