/* Additions for the real app (things the prototype didn't have: sign-in page, sign-out button). */
.userbox .username { font-size:13px; font-weight:500; padding:0 4px; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; max-width:260px; }
.userbox form { margin:0; display:flex; }
.userbox .signout { width:34px; height:34px; min-height:0; border-radius:50%; }
.loginpage { min-height:100vh; display:flex; align-items:center; justify-content:center; padding:16px; }
.logincard { width:100%; max-width:420px; }
.loginbrand { display:flex; align-items:center; gap:14px; margin-bottom:16px; }
.loginbrand .logoimg { width:64px; height:64px; }
.loginbrand h1 { margin:0; font-size:18px; font-weight:600; color:var(--teal); }
.logincard .actions button { width:100%; }
@media (max-width:760px) { .userbox .username { display:none; } }
/* Phone: the prototype's user box held a full-width user picker; ours holds only the initials and sign-out. */
@media (max-width:760px) { .userbox { flex:0 0 auto; padding-right:4px; } .apprt { justify-content:flex-start; } }

/* Two-step sign-in */
.logincard.mfa-wide { max-width:520px; }
.mfa-title { font-size:16px; font-weight:600; margin:4px 0 8px; }
.mfa-steps { padding-left:20px; line-height:1.5; }
.mfa-steps li { margin-bottom:10px; }
.mfa-qr { margin:10px 0 6px; }
.mfa-qr svg { display:block; width:200px; height:auto; background:#fff; }
.mfa-secret { word-break:break-all; font-size:13px; }
.mfa-codes { list-style:none; padding:0; display:grid; grid-template-columns:repeat(2, minmax(0, 1fr)); gap:6px 16px; font-size:15px; }
.mfa-codes code { letter-spacing:1px; }