/* Central auth SPA. The login form itself is styled by the shared
   crates/ui stylesheets (shared.css + web.css); this file only centers
   it on the neutral auth host. */
main {
    max-width: 26rem;
    margin: 4rem auto;
    padding: 0 1rem;
}

/* /rechtliches ist eine Inhaltsseite, keine Login-Karte: Standard-
   Content-Breite (= main in crates/ui/style/web.css) statt der
   schmalen Auth-Spalte. */
main.legal-main {
    max-width: 720px;
    margin: 1.5rem auto;
}

/* Session banner (app.rs SessionBanner): a dezent top strip shown only while a
   central session exists. Surface + bottom border rather than a loud colour;
   flex + gap so the sign-out button never clings to the label
   (controls-never-touch). Styled via a class — the CSP is style-src 'self'. */
.session-banner {
    display: flex;
    flex-wrap: wrap;
    align-items: center;
    justify-content: center;
    gap: 0.75rem;
    padding: 0.5rem 1rem;
    background: var(--pk-surface-2);
    border-block-end: 1px solid var(--border);
    font-size: 0.875rem;
    color: var(--muted);
}
.session-banner__who {
    font-weight: 600;
    color: var(--pk-ink-soft);
}
.session-banner .button-ghost {
    min-height: 2rem;
    padding: 0.3rem 0.8rem;
}