/* admin-login.css - look of the DPStudio admin login page (web/GUI/ADMIN/LOGIN/login.jsp).

   Replaces the page's <style> block, which was a style-src-elem violation under the strict policy
   the Report-Only header is already measuring (CSP phase 2). The <link> sits where the block sat,
   after cardly-base.css and cardly-admin.css, so the cascade order is unchanged.

   Token substitutions, all exact: 24px -> --space-5, 12px -> --space-3, 8px -> --space-2,
   font-size 24px -> --text-xl, #ffffff -> --surface (this page carries no data-face, so --surface
   is #ffffff unconditionally). The 40px padding, the 380px width, the 8px radius, the
   0 4px 12px shadow and the #dc2626 error red have no token and keep their literal value.
   No colour shifted on this page. */

body {
    display: flex;
    align-items: center;
    justify-content: center;
    min-height: 100vh;
}

.login-box {
    background: var(--surface);
    padding: 40px;
    border-radius: 8px;
    box-shadow: 0 4px 12px rgba(0, 0, 0, .08);
    width: 380px;
}
.login-box h1 { margin: 0 0 var(--space-5); font-size: var(--text-xl); text-align: center; }
.login-box .btn { width: 100%; padding: var(--space-3); }
.login-box .err { color: #dc2626; margin-top: var(--space-2); min-height: 20px; }