/*
 * Login pages, styled from the tokens maestro-ui already uses.
 *
 * Picasso is a React component library, so its components cannot be imported into
 * a Rust service — this is the Keycloak-theme approach: take the design tokens and
 * restate them. Every value below is copied from maestro-ui/src/host/index.css
 * (--color-brand-blue, --color-text-secondary, --color-grey-*, --radius) and its
 * body font stack, so a page served by identity and a page served by the UI agree
 * without identity depending on the UI.
 *
 * `proxima-nova` is a licensed webfont this service does not load — there is no
 * Node build stage here and no font asset in the image — so the stack falls
 * through to system-ui. That is the deliberate limit of "on-brand" for a page that
 * is a wordmark, a heading and one button.
 *
 * Duplicated by necessity, not oversight: identity has no intra-workspace path
 * dependency (AGP-1596 decision D-A) and adding a build step to share a
 * stylesheet would cost more than the drift risk on eleven values.
 */

:root {
  --brand-blue: #204ecf;
  --text-primary: #262d3d;
  --text-secondary: #455065;
  --surface: #ffffff;
  --page: #fcfcfc;
  --border: #ebeced;
  --danger: #dc2626;
  --radius: 0.5rem;
}

*,
*::before,
*::after {
  box-sizing: border-box;
}

body {
  margin: 0;
  min-height: 100vh;
  display: grid;
  place-items: center;
  padding: 1.5rem;
  background-color: var(--page);
  color: var(--text-primary);
  font-family:
    'proxima-nova', 'Proxima Nova', system-ui, -apple-system, BlinkMacSystemFont,
    'Segoe UI', Roboto, sans-serif;
  line-height: 1.5;
}

.card {
  width: 100%;
  max-width: 24rem;
  padding: 2rem;
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: var(--radius);
}

.brand {
  font-size: 1.125rem;
  font-weight: 700;
  letter-spacing: -0.01em;
  color: var(--brand-blue);
}

.heading {
  margin: 1.5rem 0 0.5rem;
  font-size: 1.5rem;
  font-weight: 600;
  letter-spacing: -0.02em;
}

.muted {
  margin: 0 0 1.5rem;
  color: var(--text-secondary);
}

.providers {
  list-style: none;
  margin: 0;
  padding: 0;
  display: grid;
  gap: 0.75rem;
}

.button {
  display: block;
  width: 100%;
  padding: 0.75rem 1rem;
  border-radius: var(--radius);
  background: var(--brand-blue);
  color: #fff;
  font-size: 1rem;
  font-weight: 600;
  text-align: center;
  text-decoration: none;
}

.button:hover,
.button:focus-visible {
  filter: brightness(0.92);
}

.button:focus-visible {
  outline: 2px solid var(--text-primary);
  outline-offset: 2px;
}

.facts {
  display: grid;
  grid-template-columns: auto 1fr;
  gap: 0.25rem 1rem;
  margin: 0 0 1.5rem;
  font-size: 0.875rem;
}

.facts dt {
  color: var(--text-secondary);
}

.facts dd {
  margin: 0;
  min-width: 0;
}

.facts code,
.token {
  font-family: 'SF Mono', Menlo, Monaco, 'Cascadia Code', 'Consolas', monospace;
  font-size: 0.8125rem;
}

.facts dd code {
  overflow-wrap: anywhere;
}

.label {
  display: block;
  margin-bottom: 0.375rem;
  font-size: 0.875rem;
  color: var(--text-secondary);
}

.token {
  width: 100%;
  padding: 0.75rem;
  border: 1px solid var(--border);
  border-radius: var(--radius);
  background: var(--page);
  color: var(--text-primary);
  resize: vertical;
  overflow-wrap: anywhere;
}