/* Sign-in, sign-up and password pages.
   Same tokens, same type, same buttons as everything else — the split layout is
   the only thing specific to being signed out. */

.auth-shell {
  min-height: 100vh; min-height: 100dvh;
  display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 0.85fr);
  background: var(--paper);
}

.auth-panel {
  display: flex; flex-direction: column; justify-content: center;
  padding: clamp(28px, 5vw, 64px) clamp(20px, 5vw, 72px);
  max-width: 620px; width: 100%; margin-inline: auto;
}
.auth-head { margin-bottom: clamp(24px, 3vw, 34px); }
.auth-head .brand { margin-bottom: clamp(28px, 4vw, 44px); }
.auth-head h1 {
  font-family: var(--font-display);
  font-size: clamp(1.75rem, 3.4vw, 2.375rem);
  font-weight: 600; letter-spacing: -0.03em; line-height: 1.08;
  margin-bottom: 10px;
}
.auth-head .lede { font-size: var(--step-sm); }

.auth-panel .form-grid { gap: 14px; }
.auth-panel .btn-primary { width: 100%; }
.auth-foot { margin-top: 26px; padding-top: 20px; border-top: 1px solid var(--line); font-size: var(--step-sm); color: var(--ink-soft); }
.auth-foot a { color: var(--accent-strong); font-weight: 600; text-decoration: none; }
.auth-foot a:hover { text-decoration: underline; }

/* The right-hand panel is decoration. It is aria-hidden and carries nothing a
   person needs, so it can disappear entirely below the breakpoint. */
.auth-aside {
  position: relative; overflow: hidden;
  display: flex; align-items: center;
  padding: clamp(32px, 5vw, 72px);
  background: var(--paper-sunk);
  border-left: 1px solid var(--line);
}
.auth-aside::before {
  content: ''; position: absolute; inset: -30% -20% auto; height: 700px;
  background:
    radial-gradient(52% 44% at 40% 12%, rgba(194, 87, 30, .16), transparent 70%),
    radial-gradient(42% 38% at 82% 40%, rgba(14, 92, 86, .10), transparent 72%);
  pointer-events: none;
}
.auth-aside-inner { position: relative; z-index: 1; max-width: 34ch; }
.auth-quote {
  font-family: var(--font-display);
  font-size: clamp(2rem, 3.6vw, 2.75rem);
  font-weight: 600; letter-spacing: -0.032em; line-height: 1.02;
  margin-bottom: 16px;
}
.auth-sub { font-size: var(--step-sm); color: var(--ink-soft); line-height: 1.6; margin-bottom: 26px; }
.auth-points { display: grid; gap: 11px; }
.auth-points li {
  display: flex; align-items: center; gap: 10px;
  font-size: var(--step-micro); color: var(--ink);
}
.auth-points li::before {
  content: ''; width: 18px; height: 18px; flex: none; border-radius: 50%;
  background: var(--positive-tint);
  box-shadow: inset 0 0 0 1px color-mix(in srgb, var(--positive) 28%, transparent);
}

@media (max-width: 900px) {
  .auth-shell { grid-template-columns: minmax(0, 1fr); }
  .auth-aside { display: none; }
  .auth-panel { justify-content: flex-start; padding-top: clamp(32px, 8vw, 56px); }
}

/* Development-only banner stating that bot protection is off. Deliberately
   plain and slightly ugly: it is a warning label, not decoration, and it must
   never be mistaken for part of the product. It is not rendered in production
   — see src/views/turnstileNotice.js. */
.dev-flag {
  margin: 0;
  padding: 10px 12px;
  border: 1px dashed var(--caution);
  border-radius: var(--radius-xs);
  background: var(--caution-tint);
  color: var(--caution);
  font-family: var(--font-mono);
  font-size: var(--step-micro);
  line-height: 1.45;
}
.dev-flag strong { letter-spacing: .06em; text-transform: uppercase; }