/* Radish auth screens — layout shell only. Controls (.btn, .input, .banner,
 * .field-label) come from components.css; tokens from tokens.css (link both first).
 * Lifted from design_handoff_auth_flow/design/auth-shell.css minus the review-only
 * .auth-switch; the block under "Additions" is what the handoff README specifies
 * in prose but the shell file omits. */
.auth,.auth *,.auth *::before,.auth *::after{box-sizing:border-box}
.auth a.btn,.auth a.btn:hover{text-decoration:none}
.auth{min-height:100vh;display:flex;align-items:stretch;background:var(--bg)}
.auth-brand{flex:1 1 0;min-width:340px;display:flex;flex-direction:column;justify-content:space-between;gap:40px;padding:40px;background:var(--surface-raised);border-right:1px solid var(--border)}
.auth-brand .brand{display:flex;align-items:center;gap:10px}
.auth-brand .logo{width:26px;height:26px;border-radius:7px;background:var(--accent);display:flex;align-items:center;justify-content:center;color:#fff;font-family:var(--font-serif);font-weight:600;font-size:14px}
.auth-brand .wordmark{font-family:var(--font-serif);font-weight:600;font-size:19px;letter-spacing:-.01em}
.auth-pitch{max-width:420px;display:flex;flex-direction:column;gap:18px}
.auth-pitch h1{margin:0;font-family:var(--font-serif);font-weight:600;font-size:34px;line-height:1.15;letter-spacing:-.02em;text-wrap:pretty}
.auth-pitch p{margin:0;max-width:40ch;font-size:14px;line-height:1.6;color:var(--text-2)}
.auth-points{display:flex;flex-direction:column;gap:8px;padding-top:2px}
.auth-points div{display:flex;align-items:center;gap:8px;font-size:12.5px;color:var(--text-muted)}
.auth-points i{width:5px;height:5px;border-radius:999px;background:var(--text-faint)}
.auth-points i.sage{background:var(--sage)}.auth-points i.amber{background:var(--amber)}.auth-points i.blue{background:var(--blue)}
.auth-legal{font-size:11px;letter-spacing:.04em;text-transform:uppercase;color:var(--text-muted)}
.auth-pane{flex:1 1 0;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:18px;padding:40px 24px}
.auth-card{width:100%;max-width:392px;padding:28px;background:var(--surface-elev);border:1px solid var(--border);border-radius:var(--r-md);box-shadow:var(--shadow-2)}
.auth-card h2{margin:0;font-family:var(--font-serif);font-weight:600;font-size:22px;letter-spacing:-.01em}
.auth-card .lede{margin:6px 0 0;font-size:12.5px;line-height:1.6;color:var(--text-muted)}
.auth-card .lede .mono{font-family:var(--font-mono);font-size:12px;color:var(--text-2)}
.auth-back{display:inline-flex;align-items:center;gap:6px;margin-bottom:14px;font-size:11.5px;color:var(--text-muted);text-decoration:none}
.auth-back:hover{color:var(--text)}
.auth-fields{display:flex;flex-direction:column;gap:14px;margin-top:20px}
.auth-fields .input{height:32px}
/* README: inputs fill --surface (same as .pw). components.css's .input is --surface-elev,
   which would render white-on-white next to the cream .pw. :not(.invalid) keeps the
   .input.invalid danger fill winning. */
.auth-fields .input:not(.invalid){background:var(--surface)}
.auth-fields .field-label{margin-bottom:6px;letter-spacing:.06em}
.auth-fields .field-label a{font-size:11.5px;font-weight:400;letter-spacing:0;text-transform:none;color:var(--text-muted);text-decoration:none}
.auth-fields .field-label a:hover{color:var(--accent)}
.btn.block{width:100%;height:36px;justify-content:center;font-size:13px;font-weight:600}
.btn.block.quiet{height:32px;font-size:12.5px;font-weight:500}
.auth-check{display:flex;align-items:center;gap:8px;font-size:12.5px;color:var(--text-2);cursor:pointer}
.auth-check.tight{align-items:flex-start;font-size:12px;line-height:1.5}
.auth-check input{width:14px;height:14px;accent-color:var(--accent);cursor:pointer}
.auth-check.tight input{margin-top:2px}
.auth-foot{margin:20px 0 0;padding-top:16px;border-top:1px solid var(--border-faint);font-size:12.5px;color:var(--text-muted)}
.auth-foot a{font-weight:600}
.auth-mark{width:34px;height:34px;margin-bottom:14px;border-radius:999px;display:flex;align-items:center;justify-content:center;background:var(--sage-soft);color:var(--sage)}
.auth-mark.quiet{background:var(--surface-raised);color:var(--text-muted)}
@media (max-width:880px){.auth-brand{display:none}}

/* ── Additions the handoff specifies in prose but auth-shell.css leaves out ── */
/* Form-level banner (sign-in error, throttle, expired reset link) sits 16px under the lede. */
.auth-card .banner{margin-top:16px}
.auth-card .banner a{color:inherit;font-weight:600;text-decoration:underline}
/* Invalid field: the .input.invalid state lives in components.css; this is its message. */
.auth-err{margin-top:6px;font-size:11.5px;line-height:1.4;color:var(--danger)}
/* Page base (the handoff sets these inline on <body>). */
body.auth-page{margin:0;background:var(--bg);color:var(--text);font:400 13px/1.45 var(--font-sans)}
/* Zero-specificity via :where() so anchor buttons (a.btn.primary etc.) keep their .btn colours on hover. */
:where(.auth-page) a{color:var(--accent)}
:where(.auth-page) a:hover{color:color-mix(in oklch,var(--accent),black 15%)}
/* Locked value (the invited email): reads as fixed, not editable. */
.auth-fields .input[readonly]{background:var(--surface-raised);color:var(--text-2)}