/* Shared passphrase gate — locked across every hub.
 *
 * Markup: snippets/sign-in.html
 * Do not restyle per hub. Only the brand eyebrow text changes.
 * Forbidden: .sign-in__mark / hub tile (ICONS.md — deleted everywhere).
 * Forbidden: supporting / purpose / privacy copy.
 * Enter submits (form submit, not click-only).
 * Glass density overlays do not apply here.
 */

.sign-in {
  /* Own the viewport so hub body washes (Life blue, Knowledge sage, grids)
     cannot diverge the gate. Matches chrome.css cotton wash. */
  --sign-in-glass-fill: rgba(255, 255, 255, 0.72);
  --sign-in-glass-blur: 22px;

  display: grid;
  place-items: center;
  box-sizing: border-box;
  min-height: 100dvh;
  margin: 0;
  padding: var(--space-8) var(--space-5);
  background-color: var(--cotton);
  background-image:
    radial-gradient(760px 540px at 4% 0%, rgba(207, 223, 241, 0.62), transparent 70%),
    radial-gradient(720px 500px at 98% 8%, rgba(237, 216, 197, 0.5), transparent 72%),
    linear-gradient(145deg, var(--cotton), var(--paper) 48%, var(--cotton));
  color: var(--ink);
}

.sign-in__card {
  box-sizing: border-box;
  width: min(100%, 24rem);
  margin: 0;
  padding: var(--space-8) var(--space-6);
  display: grid;
  gap: var(--space-5);
  overflow: hidden;
  background: var(--sign-in-glass-fill);
  border: 1px solid var(--line);
  border-radius: var(--radius-lg);
  box-shadow: var(--elev-3);
  backdrop-filter: blur(var(--sign-in-glass-blur));
  -webkit-backdrop-filter: blur(var(--sign-in-glass-blur));
}

.sign-in__brand {
  margin: 0;
  font-family: var(--font-ui);
  font-size: var(--text-xs);
  font-weight: var(--weight-semibold);
  letter-spacing: var(--tracking-caps);
  text-transform: uppercase;
  color: var(--muted);
}

.sign-in__title {
  margin: 0;
  font-family: var(--font-ui);
  font-size: var(--text-xl);
  font-weight: var(--weight-semibold);
  line-height: 1.2;
  letter-spacing: var(--tracking-tight);
  color: var(--depth);
}

/* Supporting / purpose lines are forbidden on the gate. Keep the class
   unstyled and unused so hubs cannot revive login marketing copy. */
.sign-in__supporting {
  display: none !important;
}

.sign-in__form {
  display: grid;
  gap: var(--space-4);
}

.sign-in__field {
  display: grid;
  gap: var(--space-2);
}

.sign-in__label {
  font-family: var(--font-ui);
  font-size: var(--text-sm);
  font-weight: var(--weight-medium);
  color: var(--orca);
}

.sign-in__input {
  box-sizing: border-box;
  width: 100%;
  min-height: 2.5rem;
  padding: var(--space-3);
  font: inherit;
  font-family: var(--font-ui);
  font-size: var(--text-base);
  color: var(--ink);
  background: rgba(255, 255, 255, 0.88);
  border: 1px solid var(--line);
  border-radius: var(--radius-md);
}

.sign-in__input::placeholder {
  color: var(--shallow);
}

.sign-in__submit {
  width: 100%;
}

.sign-in__error {
  margin: 0;
  font-family: var(--font-ui);
  font-size: var(--text-sm);
  color: var(--danger);
}

.sign-in__error[hidden] {
  display: none;
}