/* CentralAuth login shell — runtime overlay (layout via skin CSS variables) */

html.ca-auth-active,
html.ca-auth-active body {
  min-height: 100%;
}

html.ca-auth-active body {
  margin: 0;
  font-family: var(--ca-font-stack);
  color: var(--ca-color-ink, var(--ca-ink));
  background: var(--ca-page-bg, #f5f7fb);
}

/* niente zoom doppio-tap / inflate testo: la pagina resta a scala 1 */
html.ca-auth-active,
html.ca-auth-active body {
  touch-action: manipulation;
  -webkit-text-size-adjust: 100%;
  text-size-adjust: 100%;
}

html.ca-auth-active body::after {
  content: "";
  position: fixed;
  inset: auto 0 0;
  height: 22vh;
  background: var(--ca-page-wave, transparent);
  display: var(--ca-page-wave-display, none);
  clip-path: polygon(0 45%, 15% 20%, 29% 55%, 44% 32%, 60% 55%, 75% 28%, 100% 42%, 100% 100%, 0 100%);
  pointer-events: none;
  z-index: 0;
}

html.ca-auth-active .login-footer,
html.ca-auth-active footer,
html.ca-auth-active a[href*="casdoor.io"],
html.ca-auth-active a[href*="casbin.com"],
html.ca-auth-active .side-logo-link,
html.ca-auth-active .github-corner,
html.ca-auth-active .ant-layout-footer,
html.ca-auth-active .nf-login-header,
html.ca-auth-active .side-image {
  display: none !important;
}

html.ca-auth-active .loginBackground,
html.ca-auth-active .loginBackgroundDark {
  min-height: 100vh;
  align-items: center !important;
  justify-content: center !important;
  background: transparent !important;
  background-image: none !important;
}

html.ca-auth-active .login-content {
  position: relative;
  z-index: 1;
  width: 100%;
  min-height: auto;
  display: grid;
  place-items: center;
  padding: var(--ca-shell-padding, 12px);
}

html.ca-auth-active .ca-auth-shell {
  display: flex;
  flex-direction: column;
  align-items: flex-start;
  width: var(--ca-shell-max-width, min(720px, 66vw));
  gap: 8px;
}

html.ca-auth-active .login-content.ca-auth-layout {
  width: 100%;
  min-height: var(--ca-shell-min-height, auto);
  max-height: none;
  grid-template-columns: minmax(0, 1fr) var(--ca-right-col-width, 340px);
  align-items: stretch;
  overflow: hidden;
  border: 1px solid var(--ca-shell-border, rgba(212, 221, 245, .85));
  border-radius: var(--ca-shell-radius, 20px);
  background: var(--ca-shell-surface, rgba(255, 255, 255, .82));
  box-shadow: 0 20px 52px rgba(15, 23, 42, .12);
  backdrop-filter: blur(16px);
  padding: 0;
}

.ca-brand-side {
  position: relative;
  min-width: 0;
  padding: var(--ca-brand-side-padding, 22px);
  display: flex;
  flex-direction: column;
  justify-content: flex-start;
  align-items: stretch;
  min-height: 100%;
  overflow: hidden;
  background: var(--ca-left-column-bg, #fff);
}

.ca-brand-side--centered {
  align-items: center;
  text-align: center;
}

.ca-brand-header,
.ca-brand-side--centered .ca-brand-footer-copy,
.ca-brand-side--app-access,
.ca-brand-side--org-admin {
  width: 100%;
  display: flex;
  flex-direction: column;
  align-items: center;
}

.ca-brand-spacer {
  flex: 1 1 auto;
  min-height: 18px;
  width: 100%;
}

.ca-brand-footer-copy {
  width: 100%;
  margin-top: auto;
}

.ca-brand-side::before {
  content: "";
  position: absolute;
  inset: 0;
  background: var(--ca-left-column-overlay, rgba(255,255,255,.36));
}

.ca-brand-side > * { position: relative; }

.ca-brand-mark {
  width: var(--ca-brand-mark-width, 64px);
  height: auto;
  margin: 0 auto 8px;
  filter: drop-shadow(0 8px 18px rgba(20, 38, 90, .10));
}

.ca-brand-eyebrow {
  margin: 0 0 6px;
  color: var(--ca-color-nf-blue, var(--ca-nfBlue));
  font-size: 10px;
  font-weight: 800;
  letter-spacing: .14em;
  text-transform: uppercase;
}

.ca-brand-title {
  margin: 0;
  color: var(--ca-color-ink, var(--ca-ink));
  font-size: clamp(24px, 3vw, 34px);
  line-height: 1.05;
  letter-spacing: -.04em;
}

.ca-brand-title--compact {
  font-size: clamp(22px, 2.8vw, 30px);
  margin-bottom: 8px;
}

.ca-brand-title span {
  background: var(--ca-gradient-title, linear-gradient(90deg, var(--ca-magenta), var(--ca-violet), var(--ca-cyan)));
  -webkit-background-clip: text;
  background-clip: text;
  color: transparent;
}

.ca-brand-full-name {
  margin: 8px 0 12px;
  color: var(--ca-color-muted-light, #747b94);
  font-size: 13px;
  font-weight: 700;
  letter-spacing: .18em;
}

.ca-brand-slogan {
  margin: 0 0 8px;
  font-size: clamp(15px, 1.6vw, 18px);
  font-weight: 800;
  line-height: 1.25;
}

.ca-brand-slogan--raised {
  color: var(--ca-color-ink, var(--ca-ink));
  text-shadow:
    0 1px 0 rgba(255, 255, 255, .92),
    0 -1px 0 rgba(15, 23, 42, .08),
    0 8px 18px rgba(15, 23, 42, .06);
}

.ca-brand-slogan::first-letter {
  color: var(--ca-color-nf-orange, var(--ca-nfOrange));
}

.ca-brand-description {
  max-width: 360px;
  margin: 0 auto;
  color: var(--ca-color-muted, #687088);
  font-size: 12px;
  line-height: 1.45;
}

.ca-app-logo-stack {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 8px;
  margin-bottom: 8px;
}

.ca-app-logo {
  width: min(120px, 100%);
  max-height: 46px;
  object-fit: contain;
}

.ca-client-logo--access {
  width: min(120px, 100%);
  max-height: 38px;
  object-fit: contain;
  opacity: .92;
}

.ca-app-access-hint {
  margin: 0 0 10px;
  color: var(--ca-color-nf-blue, var(--ca-nfBlue));
  font-size: 11px;
  font-weight: 800;
  letter-spacing: .14em;
  text-transform: uppercase;
}

.ca-form-card-head--app-access img.ca-form-app-logo {
  width: min(150px, 100%);
  max-height: 52px;
  object-fit: contain;
  margin: 0 auto 10px;
  display: block;
}

.ca-form-card-head--app-access img.ca-form-client-logo {
  width: min(120px, 100%);
  max-height: 34px;
  object-fit: contain;
  margin: 0 auto 14px;
  display: block;
  opacity: .88;
}

.ca-form-card-head--app-access h2 {
  font-size: 24px;
}

.ca-client-logo {
  width: min(220px, 100%);
  max-height: 72px;
  object-fit: contain;
  margin-bottom: 18px;
}

.ca-client-slogan {
  margin: 0 0 12px;
  font-size: clamp(18px, 2.2vw, 24px);
  font-weight: 800;
  line-height: 1.25;
  color: var(--ca-color-ink, var(--ca-ink));
}

.ca-client-description {
  margin: 0;
  max-width: 380px;
  color: var(--ca-color-muted, #687088);
  font-size: 15px;
  line-height: 1.55;
}

.ca-brand-side .ca-maintainer {
  display: none !important;
}

.ca-form-card-head--text-only img {
  display: none !important;
}

.ca-shell-footer {
  width: 100%;
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 12px;
  padding: 0 4px;
}

.ca-shell-footer__spacer {
  flex: 1 1 auto;
}

.ca-maintainer {
  position: relative;
  left: 0;
  bottom: auto;
  margin: 0;
  padding: 0;
  display: flex;
  align-items: center;
  justify-content: flex-start;
  gap: 8px;
  color: var(--ca-color-maintainer, #7b8298);
  font-size: 10px;
  font-weight: 700;
}

.ca-maintainer img {
  width: 78px;
  height: auto;
  opacity: .9;
}

.ca-lang {
  position: relative;
  display: inline-flex;
  align-items: center;
  white-space: nowrap;
}

.ca-lang__toggle {
  appearance: none;
  display: inline-flex;
  align-items: center;
  gap: 7px;
  margin: 0;
  padding: 4px 9px;
  cursor: pointer;
  font: inherit;
  font-size: 12px;
  font-weight: 700;
  color: var(--ca-color-maintainer, #7b8298);
  background: var(--ca-form-card-bg, rgba(255, 255, 255, .9));
  border: 1px solid var(--ca-shell-border, rgba(212, 221, 245, .85));
  border-radius: 999px;
  transition: border-color .15s ease, color .15s ease, box-shadow .15s ease;
}

.ca-lang__toggle:hover {
  color: var(--ca-color-ink, var(--ca-ink));
  border-color: var(--ca-color-nf-blue, var(--ca-nfBlue));
}

.ca-lang__icon {
  display: inline-flex;
  align-items: center;
  font-size: 15px;
  color: var(--ca-color-nf-blue, var(--ca-nfBlue));
}

.ca-flag {
  width: 18px;
  height: 12px;
  border-radius: 2px;
  box-shadow: 0 0 0 1px rgba(15, 23, 42, .12);
  display: block;
  object-fit: cover;
}

.ca-lang__flag {
  display: inline-flex;
}

.ca-lang__caret {
  font-size: 9px;
  opacity: .7;
  transition: transform .15s ease;
}

.ca-lang.is-open .ca-lang__caret {
  transform: rotate(180deg);
}

.ca-lang__menu {
  position: absolute;
  right: 0;
  bottom: calc(100% + 8px);
  min-width: 160px;
  display: none;
  flex-direction: column;
  padding: 6px;
  background: var(--ca-form-card-bg, #fff);
  border: 1px solid var(--ca-shell-border, rgba(212, 221, 245, .9));
  border-radius: 12px;
  box-shadow: 0 16px 40px rgba(15, 23, 42, .16);
  z-index: 10005;
}

.ca-lang.is-open .ca-lang__menu {
  display: flex;
}

.ca-lang__item {
  appearance: none;
  display: flex;
  align-items: center;
  gap: 10px;
  width: 100%;
  margin: 0;
  padding: 8px 10px;
  cursor: pointer;
  font: inherit;
  font-size: 13px;
  font-weight: 600;
  text-align: left;
  color: var(--ca-color-ink, var(--ca-ink));
  background: transparent;
  border: 0;
  border-radius: 8px;
  transition: background .12s ease;
}

.ca-lang__item:hover {
  background: var(--ca-color-input-bg, #f1f5ff);
}

.ca-lang__item.is-active {
  background: var(--ca-color-input-bg, #eef3ff);
  color: var(--ca-color-nf-blue, var(--ca-nfBlue));
}

.ca-lang__name {
  flex: 1 1 auto;
}

html.ca-auth-active .login-panel,
html.ca-auth-active .login-panel-dark,
html.ca-auth-active .ca-form-side {
  grid-column: 2;
  align-self: stretch;
  display: grid !important;
  place-items: center;
  margin: 0 !important;
  max-width: none !important;
  width: 100% !important;
  min-width: 0;
  min-height: 100%;
  padding: var(--ca-form-side-padding, 18px) !important;
  border: 0 !important;
  border-left: 1px solid var(--ca-shell-border, rgba(224, 231, 255, .84)) !important;
  border-radius: 0 !important;
  box-shadow: none !important;
  background: var(--ca-right-column-bg, rgba(255, 255, 255, .72)) !important;
  opacity: var(--ca-right-column-opacity, 1);
  overflow: visible;
}

.ca-login-card {
  width: 100%;
  max-width: var(--ca-form-card-max-width, 320px);
  padding: var(--ca-form-card-padding, 18px);
  border: 1px solid var(--ca-form-card-border, rgba(222, 231, 255, .95));
  border-radius: var(--ca-form-card-radius, 18px);
  background: var(--ca-form-card-bg, rgba(255, 255, 255, .88));
  box-shadow: 0 18px 48px rgba(15, 23, 42, .10);
  overflow: visible;
}

html.ca-auth-active .login-panel .panel-logo,
html.ca-auth-active .login-panel-dark .panel-logo,
html.ca-auth-active .login-panel > img:first-child,
html.ca-auth-active .ca-login-card > img.panel-logo {
  display: none !important;
}

html.ca-auth-active .login-form {
  padding: 0 !important;
  text-align: left !important;
}

.ca-form-card-head {
  text-align: center;
  margin-bottom: 14px;
}

.ca-form-card-head--text-only {
  margin-bottom: 12px;
}

.ca-form-card-head img {
  width: min(160px, 100%);
  margin: 0 auto 10px;
  display: block;
}

.ca-form-card-head h2 {
  margin: 0 0 4px;
  font-size: 24px;
  letter-spacing: -.03em;
  background: var(--ca-gradient-title, linear-gradient(90deg, var(--ca-magenta), var(--ca-violet), var(--ca-cyan)));
  -webkit-background-clip: text;
  background-clip: text;
  color: transparent;
}

.ca-form-card-head p {
  margin: 0;
  color: var(--ca-color-muted, #70788f);
  font-size: 13px;
}

.ca-form-microcopy {
  margin: 12px 0 0;
  text-align: center;
  color: var(--ca-color-muted, #7c849a);
  font-weight: 700;
  font-size: 12px;
}

html.ca-auth-active .ant-input,
html.ca-auth-active .ant-input-affix-wrapper,
html.ca-auth-active .ant-input-password {
  min-height: 44px !important;
  border-radius: 12px !important;
  border-color: var(--ca-color-border, #dfe7ff) !important;
  background: var(--ca-color-input-bg, #f8fbff) !important;
}

html.ca-auth-active .ant-btn-primary {
  min-height: 46px !important;
  border: 0 !important;
  border-radius: 12px !important;
  background: var(--ca-gradient-button, linear-gradient(90deg, var(--ca-nfOrange), var(--ca-magenta), var(--ca-violet), var(--ca-cyan))) !important;
  font-size: 14px !important;
  font-weight: 900 !important;
  box-shadow: 0 12px 28px rgba(109, 53, 255, .18) !important;
}

/* ------------------------------------------------------------
   Casdoor renderizza il form con larghezze fisse (es. 300px) e
   NON usa la classe ".login-form"; per questo gli override vanno
   ancorati alla nostra card e alle classi Ant. Forziamo il form
   e i controlli a riadattarsi alla larghezza della card, così la
   colonna destra resta contenuta e completa.
   ------------------------------------------------------------ */
html.ca-auth-active .ca-login-card form,
html.ca-auth-active .ca-login-card .ant-form,
html.ca-auth-active .ca-login-card .ant-row,
html.ca-auth-active .ca-login-card .ant-col,
html.ca-auth-active .ca-login-card .ant-form-item,
html.ca-auth-active .ca-login-card .ant-form-item-row,
html.ca-auth-active .ca-login-card .ant-form-item-control,
html.ca-auth-active .ca-login-card .ant-form-item-control-input,
html.ca-auth-active .ca-login-card .ant-form-item-control-input-content {
  width: 100% !important;
  max-width: 100% !important;
  box-sizing: border-box !important;
}

html.ca-auth-active .ca-login-card .ant-form-item-control-input-content > input,
html.ca-auth-active .ca-login-card .ant-input,
html.ca-auth-active .ca-login-card .ant-input-affix-wrapper,
html.ca-auth-active .ca-login-card .ant-input-password,
html.ca-auth-active .ca-login-card .ant-input-number,
html.ca-auth-active .ca-login-card .ant-input-group,
html.ca-auth-active .ca-login-card .ant-input-group-wrapper,
html.ca-auth-active .ca-login-card .ant-select,
html.ca-auth-active .ca-login-card .ant-btn,
html.ca-auth-active .ca-login-card button[type="submit"] {
  width: 100% !important;
  max-width: 100% !important;
  box-sizing: border-box !important;
}

/* l'input interno all'affix-wrapper non deve aggiungere larghezza */
html.ca-auth-active .ca-login-card .ant-input-affix-wrapper > .ant-input,
html.ca-auth-active .ca-login-card .ant-input-affix-wrapper > input {
  width: 100% !important;
  min-width: 0 !important;
}

/* prefissi/suffissi (icone) non devono espandersi */
html.ca-auth-active .ca-login-card .ant-input-prefix,
html.ca-auth-active .ca-login-card .ant-input-suffix,
html.ca-auth-active .ca-login-card .anticon {
  width: auto !important;
  flex: 0 0 auto !important;
}

/* selettore lingua/tema originale di Casdoor (mappamondo): nascosto,
   lo sostituiamo con il nostro switch nel footer. */
html.ca-auth-active .ca-login-card .select-box {
  display: none !important;
}

html.ca-auth-active .ca-login-card .login-forget-password,
html.ca-auth-active .ca-login-card a {
  max-width: 100%;
}

/* impedisce qualsiasi overflow orizzontale del form */
html.ca-auth-active .ca-login-card {
  overflow-x: clip;
}

.nf-zone-banner {
  position: sticky;
  top: 0;
  z-index: 10000;
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem 1rem;
  align-items: center;
  justify-content: center;
  padding: 0.45rem 0.75rem;
  font-size: 0.78rem;
  color: #2d2a40;
  background: linear-gradient(90deg, rgba(0, 92, 168, 0.10), rgba(20, 151, 255, 0.06));
  border-bottom: 1px solid rgba(0, 92, 168, 0.16);
}

.nf-zone-banner__label { font-weight: 700; }
.nf-zone-banner__role { font-weight: 600; color: var(--ca-nfBlue); }
.nf-zone-banner__url { color: #6b6580; }

.nf-zone-denied {
  position: sticky;
  top: 0;
  z-index: 10001;
  margin: 0;
  padding: 0.65rem 1rem;
  font-size: 0.82rem;
  line-height: 1.45;
  color: #5c1a1a;
  background: #fde8e8;
  border-bottom: 1px solid #f5c2c2;
}

html[data-nf-zone="userauth"].nf-zone-access-blocked #root {
  visibility: hidden;
  pointer-events: none;
}

html[data-nf-zone="userauth"].nf-zone-access-ok #root {
  visibility: visible;
  pointer-events: auto;
}

html[data-nf-zone="platform"] .login-content.ca-auth-layout {
  box-shadow: 0 18px 48px rgba(0, 92, 168, 0.12);
}

html[data-nf-zone="orgadmin"] .login-content.ca-auth-layout {
  box-shadow: 0 18px 48px rgba(109, 53, 255, 0.08);
}

html[data-nf-zone="userauth"] .login-content.ca-auth-layout {
  box-shadow: 0 18px 48px rgba(0, 92, 168, 0.10);
}

/* ============================================================
   TABLET (≤980px): contiene la shell entro il viewport, mantiene
   le due colonne ma più strette così nulla esce dai bordi.
   ============================================================ */
@media (max-width: 980px) {
  html.ca-auth-active .ca-auth-shell {
    width: min(94vw, var(--ca-shell-max-width, 760px));
  }

  html.ca-auth-active .login-content.ca-auth-layout {
    grid-template-columns: minmax(0, 1fr) clamp(280px, 40%, 340px);
  }
}

/* ============================================================
   MOBILE / WEBAPP (≤760px): la maschera diventa una PAGINA PIATTA
   (niente box: nessun bordo, sfondo, ombra o blur), tutto centrato
   e in colonna unica. Selettore lingua ancorato in alto a destra.
   Ordine verticale:
     1) loghi (app + appartenenza)
     2) tipo di accesso (eyebrow)
     3) controlli utente/password (form)
     4) slogan + descrizione
     5) powered-by (in fondo, centrato)
   Usiamo display:contents sul pannello brand così i suoi figli
   entrano nel flusso flex e si riordinano con `order`.
   ============================================================ */
@media (max-width: 760px) {
  html.ca-auth-active .loginBackground,
  html.ca-auth-active .loginBackgroundDark {
    min-height: 100vh;
    align-items: flex-start !important;
    padding: 0;
  }

  html.ca-auth-active .login-content {
    padding: 0;
    align-items: start;
  }

  html.ca-auth-active .ca-auth-shell {
    position: relative;
    width: 100%;
    max-width: 100%;
    align-items: stretch;
    gap: 0;
    padding: 0;
  }

  /* pagina piatta: nessun contenitore */
  html.ca-auth-active .login-content.ca-auth-layout {
    display: flex;
    flex-direction: column;
    align-items: center;
    text-align: center;
    width: 100%;
    min-height: 0;
    max-height: none;
    gap: 6px;
    padding: 52px clamp(18px, 6vw, 30px) 8px;
    border: 0 !important;
    border-radius: 0 !important;
    background: transparent !important;
    box-shadow: none !important;
    backdrop-filter: none !important;
    overflow: visible;
  }

  /* promuove i figli del brand nel flusso flex della shell */
  html.ca-auth-active .ca-brand-side {
    display: contents;
  }

  /* 1) loghi in alto, centrati */
  html.ca-auth-active .ca-brand-header {
    order: 1;
    flex-direction: column;
    align-items: center;
    justify-content: center;
    gap: 12px;
    width: 100%;
    margin: 0 0 2px;
  }

  html.ca-auth-active .ca-app-logo-stack {
    flex-direction: row;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
    gap: 16px;
    margin: 0;
  }

  html.ca-auth-active .ca-brand-mark {
    margin: 0 auto;
  }

  /* 2) tipo di accesso */
  html.ca-auth-active .ca-brand-eyebrow {
    order: 2;
    width: 100%;
    margin: 0 0 4px;
    text-align: center;
  }

  html.ca-auth-active .ca-brand-spacer {
    display: none !important;
  }

  /* 3) controlli di accesso (form a piena larghezza, mai fuori schermo) */
  html.ca-auth-active .login-panel,
  html.ca-auth-active .login-panel-dark,
  html.ca-auth-active .ca-form-side {
    order: 3;
    grid-column: 1 / -1;
    display: block !important;
    width: 100% !important;
    min-height: 0;
    padding: 4px 0 6px !important;
    border: 0 !important;
    background: transparent !important;
  }

  html.ca-auth-active .ca-login-card {
    width: 100%;
    max-width: 360px;
    margin: 0 auto;
    border: 0;
    background: transparent;
    box-shadow: none;
    padding: 0;
  }

  html.ca-auth-active .ca-form-card-head {
    text-align: center;
    margin-bottom: 12px;
  }

  /* 4) slogan + descrizione dopo i controlli, centrati */
  html.ca-auth-active .ca-brand-footer-copy {
    order: 4;
    width: 100%;
    margin-top: 6px;
    padding-top: 12px;
    border-top: 1px solid var(--ca-shell-border, rgba(224, 231, 255, .7));
    text-align: center;
  }

  html.ca-auth-active .ca-brand-slogan,
  html.ca-auth-active .ca-brand-description {
    margin-left: auto;
    margin-right: auto;
    max-width: 340px;
  }

  /* 5) powered-by in fondo, centrato */
  html.ca-auth-active .ca-shell-footer {
    width: 100%;
    justify-content: center;
    padding: 12px 2px 16px;
  }

  html.ca-auth-active .ca-shell-footer__spacer {
    display: none;
  }

  html.ca-auth-active .ca-maintainer {
    justify-content: center;
    padding: 0;
  }

  /* selettore lingua: ancorato in alto a destra della pagina */
  html.ca-auth-active .ca-lang {
    position: absolute;
    top: 10px;
    right: 12px;
    z-index: 10006;
  }

  /* il menu si apre verso il basso (siamo in alto) */
  html.ca-auth-active .ca-lang__menu {
    top: calc(100% + 8px);
    bottom: auto;
  }
}

/* ============================================================
   SMARTPHONE (≤420px): margini minimi, loghi più piccoli.
   ============================================================ */
@media (max-width: 420px) {
  html.ca-auth-active .login-content.ca-auth-layout {
    padding: 50px 16px 8px;
    gap: 4px;
  }

  html.ca-auth-active .ca-login-card {
    max-width: 100%;
  }

  html.ca-auth-active .ca-app-logo {
    max-height: 38px;
  }

  html.ca-auth-active .ca-client-logo--access {
    max-height: 32px;
  }
}