/* =============================================================================
   OnSiteSafety TrustID — Accounts (Ultimate Member) brand layer
   Scoped to .oss-auth + .um. Field Document tokens only; borders over shadows.
   Source of truth: design/01-design-language.md. No new colours.
   ========================================================================== */

/* ---- Auth page shell -------------------------------------------------------- */
.oss-auth {
  padding: clamp(3rem, 7vw, 5.5rem) 1.25rem;
  background: var(--paper-sunk);
}
.oss-auth__inner {
  max-width: 480px;
  margin: 0 auto;
  text-align: center;
}
.oss-auth__inner > .oss-display { margin: 0.25rem 0 0.75rem; }
.oss-auth__inner > .oss-body-l { margin: 0 0 1.75rem; color: var(--steel); }
.oss-auth__alt { margin-top: 1.5rem; font-size: 0.95rem; color: var(--steel); }

/* ---- UM form container ------------------------------------------------------ */
.oss-auth .um {
  margin: 0 auto;
  text-align: left;
}
.oss-auth .um-form {
  background: var(--paper);
  border: 1px solid var(--hair);
  border-radius: var(--radius-card);
  padding: clamp(1.5rem, 4vw, 2.25rem);
}

/* Labels */
.oss-auth .um-field-label label,
.oss-auth .um-field label {
  font-family: var(--font-body);
  font-weight: 600;
  font-size: 0.9rem;
  color: var(--ink);
}

/* Inputs / selects */
.oss-auth .um-form input[type="text"],
.oss-auth .um-form input[type="email"],
.oss-auth .um-form input[type="password"],
.oss-auth .um-form input[type="search"],
.oss-auth .um-form select,
.oss-auth .um-form textarea {
  background: var(--paper-sunk);
  border: 1px solid var(--hair);
  border-radius: var(--radius-input);
  color: var(--ink);
  font-family: var(--font-body);
  font-size: 1rem;
  padding: 0.7rem 0.85rem;
  box-shadow: none;
}
/* Focus — brand two-tone ring (WCAG 2.2 SC 1.4.11), mirrors frame.css §0.
   A bare brand ring on paper fails 3:1; stack --ink + --brand so the indicator
   contrasts both the surface and itself. UM ships its own input:focus, so we
   win on specificity + !important. The transparent outline is a forced-colors
   fallback (box-shadow is dropped in Windows High-Contrast). */
.oss-auth .um-form input[type="text"]:focus,
.oss-auth .um-form input[type="email"]:focus,
.oss-auth .um-form input[type="password"]:focus,
.oss-auth .um-form input[type="search"]:focus,
.oss-auth .um-form input[type="number"]:focus,
.oss-auth .um-form input[type="tel"]:focus,
.oss-auth .um-form input[type="url"]:focus,
.oss-auth .um-form select:focus,
.oss-auth .um-form textarea:focus {
  border-color: var(--brand-deep) !important;
  outline: 2px solid transparent !important;
  outline-offset: 2px;
  box-shadow:
    0 0 0 2px var(--paper),
    0 0 0 4px var(--ink),
    0 0 0 6px var(--brand) !important;
}

/* Checkbox: the native input is visually collapsed (opacity:0) and the icon
   span is the visual control — so the ring goes on the icon when focused. */
.oss-auth .um-field-checkbox input:focus + .um-field-checkbox-state,
.oss-auth .um-field-checkbox input:focus-visible + .um-field-checkbox-state {
  outline: 2px solid transparent !important;
  border-radius: 3px;
  box-shadow:
    0 0 0 2px var(--paper),
    0 0 0 4px var(--ink),
    0 0 0 6px var(--brand) !important;
}

/* Role field renders as a select2 widget; the focusable control is the
   selection span. Ring it the same way (closed widget sits inside .oss-auth). */
.oss-auth .select2-container--focus .select2-selection,
.oss-auth .select2-selection:focus,
.oss-auth .select2-selection--single:focus {
  border-color: var(--brand-deep) !important;
  outline: 2px solid transparent !important;
  outline-offset: 2px;
  box-shadow:
    0 0 0 2px var(--paper),
    0 0 0 4px var(--ink),
    0 0 0 6px var(--brand) !important;
}

/* Role placeholder text must clear AA too (axe color-contrast). --steel on
   paper-sunk = 5.4:1. */
.oss-auth .select2-selection__placeholder {
  color: var(--steel) !important;
}

/* Buttons (register / login submit) */
.oss-auth .um-button,
.oss-auth .um-form input[type="submit"],
.oss-auth .um-form button[type="submit"] {
  background: var(--brand) !important;
  color: var(--ink) !important;
  border: 1px solid transparent !important;
  border-radius: 6px !important;
  font-family: var(--font-body);
  font-weight: 700;
  text-shadow: none !important;
  box-shadow: none !important;
  transition: background-color 140ms var(--ease), transform 80ms var(--ease);
}
.oss-auth .um-button:hover,
.oss-auth .um-form input[type="submit"]:hover {
  background: var(--brand-deep) !important;
}
.oss-auth .um-button.um-alt {
  background: transparent !important;
  border-color: var(--hair) !important;
  color: var(--ink) !important;
}

/* ---- Consent checkbox: make it read like a printed agreement clause --------- */
.oss-auth .um-field-checkbox.oss_consent_pipa,
.oss-auth .um-field[data-key="oss_consent_pipa"] {
  background: var(--paper-sunk);
  border: 1px solid var(--hair);
  border-left: 3px solid var(--brand);
  border-radius: var(--radius-input);
  padding: 0.9rem 1rem;
}
/* The legal consent wording must read clearly. UM ships a low-contrast grey
   (~#888 → fails 4.5:1); force --ink (>=13:1 on paper-sunk) and win with
   !important. Text sits directly in .um-field-checkbox-option (no inner span). */
.oss-auth .um-field-checkbox-option,
.oss-auth .um-field-checkbox .um-field-checkbox-option,
.oss-auth .um-field[data-key="oss_consent_pipa"] .um-field-checkbox-option {
  font-size: 0.9rem;
  line-height: 1.5;
  color: var(--ink) !important;
}

/* Privacy Policy link wired under the consent clause (accounts.js adds it,
   since UM escapes the option text and can't carry an anchor). --ink underlined
   so it reads as a link and clears AA on the paper-sunk consent panel. */
.oss-auth .oss-consent-policy-link {
  margin: 0.55rem 0 0;
  font-size: 0.85rem;
}
.oss-auth .oss-consent-policy-link a {
  color: var(--ink);
  font-weight: 600;
  text-decoration: underline;
}
.oss-auth .oss-consent-policy-link a:hover,
.oss-auth .oss-consent-policy-link a:focus {
  color: var(--brand-deep);
}

/* Validation / error text uses the functional "expired" red (information). */
.oss-auth .um-field-error,
.oss-auth .um-error,
.oss-auth .um-notice.err {
  color: var(--expired);
  font-size: 0.85rem;
}

/* ---- Profile + account + directory: brand chrome ---------------------------- */
.um-account .um-account-side li a.current,
.um-profile-nav .um-profile-nav-item.active a {
  border-bottom: 2px solid var(--brand);
}

/* Active profile tab: UM fills it with a low-contrast blue (#3BA1DA), so white
   label text on it is ~2.4:1 (axe color-contrast). Drop the fill — the dark nav
   keeps white text at ~9.7:1 and the brand underline above marks "active". */
.um-profile-nav .um-profile-nav-item.active a {
  background: transparent !important;
}

/* Empty-profile note: UM ships #888 (~3.5:1 on white). Lift to --steel (>=5.8:1)
   and give its inline link readable --ink so it clears AA too. */
.um-profile-note,
.um-profile-note > span {
  color: var(--steel) !important;
}
.um-profile-note a {
  color: var(--ink) !important;
  text-decoration: underline;
}
.um .um-name a,
.um-account-name { font-family: var(--font-display); color: var(--ink); }

/* Members directory cards: paper, hairline, no shadow. */
.um-directory .um-members .um-member {
  background: var(--paper);
  border: 1px solid var(--hair);
  border-radius: var(--radius-card);
  box-shadow: none;
}