/* Sign-in + pending pages (public, ADR-002). The tokens, the fonts and the masthead band come from /open/theme.css
   (linked first; docs/design/prism-hct-theme.md §5). These pages run no script, so the theme is pure CSS: dark always. */

* { box-sizing: border-box; }

body {
  margin: 0;
  min-height: 100vh;
  min-height: 100dvh;
  display: flex;
  flex-direction: column;
  font-family: var(--font-ui);
  font-size: 14px;
  line-height: 1.5;
  color: var(--text);
  background: var(--bg);
}
header.masthead { flex: none; }
/* the card sits centred in what the masthead leaves */
.auth-stage { flex: 1 1 auto; display: flex; align-items: center; justify-content: center; padding: 1.5rem 1rem; }

.auth-card {
  width: 100%;
  max-width: 400px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 1.75rem 1.5rem;
  text-align: center;
}
/* The Prism mark leads the card (docs/brand), inlined with currentColor: the mark grey on the dark card (11.81). */
.auth-mark { display: block; width: 84px; height: 84px; margin: 0.25rem auto 0.9rem; color: var(--brand-ink); }
.auth-card h1 {
  font-family: var(--font-display); font-size: 24px; line-height: 1.2; font-weight: 560;
  margin: 0 0 0.25rem; color: var(--text); text-wrap: balance;
}
.auth-sub { color: var(--muted); margin: 0 0 1.25rem; }
#pending-message { color: var(--muted); }

.auth-providers { display: flex; flex-direction: column; gap: 0.6rem; }
.auth-btn {
  display: block;
  width: 100%;
  padding: 0.65rem 1rem;
  border: 1px solid var(--border-strong);
  border-radius: 6px;
  background: var(--panel-2);
  color: var(--text);
  font: inherit;
  font-weight: 500;
  text-decoration: none;
  cursor: pointer;
}
.auth-btn:hover { background: var(--surface-hover-2); }
.auth-btn:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
/* Microsoft Entra (the org path) is the primary door: gold, navy label (8.33). Chosen by its class (routes.mjs
   buildProviders renders auth-btn-<id>), not its position: a server without Entra shows no gold door. */
.auth-btn.auth-btn-entra { background: var(--accent); border-color: var(--accent); color: var(--on-accent); }
.auth-btn.auth-btn-entra:hover { background: var(--accent-hover); border-color: var(--accent-hover); }

.auth-error {
  margin: 0 0 1rem;
  padding: 0.5rem 0.75rem;
  border-radius: 6px;
  background: color-mix(in srgb, var(--danger-line) 12%, transparent);
  box-shadow: inset 3px 0 0 var(--danger-line);
  color: var(--danger);
}
.auth-note { color: var(--muted); font-size: 0.85rem; margin: 1.25rem 0 0; }

.auth-who {
  display: grid;
  grid-template-columns: auto 1fr;
  gap: 0.25rem 0.75rem;
  text-align: left;
  margin: 1.25rem 0;
  padding: 0.75rem;
  border: 1px solid var(--border);
  border-radius: 6px;
}
.auth-who dt { color: var(--muted); }
.auth-who dd { margin: 0; overflow-wrap: anywhere; color: var(--text); }