.auth-shell.active {
  display: grid;
  grid-template-columns: minmax(0, 1fr) minmax(18rem, .72fr);
  gap: 2rem;
  align-items: start;
}

.auth-shell > div,
.auth-shell > aside {
  background: var(--paper);
  border: 1px solid var(--line);
  border-radius: 1.25rem;
  padding: clamp(1.25rem, 3vw, 2.5rem);
}

.auth-shell form {
  display: grid;
  gap: 1rem;
  max-width: 34rem;
  margin-top: 1.5rem;
}

.auth-shell label {
  display: grid;
  gap: .45rem;
}

.auth-shell input {
  width: 100%;
  padding: .8rem;
  border: 1px solid var(--line);
  background: white;
}

.auth-shell aside ul {
  padding-left: 1.2rem;
  line-height: 1.8;
}

.mfa-state {
  margin: 1rem 0;
  padding: .9rem;
  border-left: .3rem solid var(--accent);
  background: rgba(255, 255, 255, .72);
}

.mfa-qr {
  margin: 1rem 0;
}

.mfa-qr img {
  width: min(16rem, 100%);
  height: auto;
  padding: .75rem;
  background: white;
  border: 1px solid var(--line);
}

.mfa-qr code {
  display: block;
  overflow-wrap: anywhere;
  margin-top: .75rem;
}

.client-security {
  margin: 0 0 1.5rem;
  padding: 1.5rem;
  border: 1px solid var(--line);
  border-radius: 1.25rem;
  background: var(--paper);
}

.client-security form,
.client-security label {
  display: grid;
  gap: .75rem;
}

.client-security form {
  max-width: 34rem;
}

.client-security input {
  width: 100%;
  padding: .8rem;
  border: 1px solid var(--line);
  background: white;
}

.client-mfa-actions {
  display: flex;
  flex-wrap: wrap;
  gap: .75rem;
}

#recoveryButton {
  justify-self: start;
}

.owner-invitation-control {
  margin: 0 0 1.5rem;
  padding: 1.5rem;
  border: 1px solid var(--line);
  border-radius: 1.25rem;
  background: var(--paper);
}

.owner-invitation-control form,
.owner-invitation-control label {
  display: grid;
  gap: .75rem;
}

.owner-invitation-control form {
  max-width: 34rem;
}

.owner-invitation-control input {
  width: 100%;
  padding: .8rem;
  border: 1px solid var(--line);
  background: white;
}

body[data-authenticated="false"] [data-protected] {
  opacity: .78;
}

body[data-portal-role="client"] [data-protected="owner"] {
  display: none;
}

@media (max-width: 760px) {
  .auth-shell.active {
    grid-template-columns: 1fr;
  }
}