/* The signed-out card, and nothing else links this sheet.

   It was in portal.css, so every page in the portal paid for a card only the
   six signed-out pages draw: sign in, the TOTP prompt, the reset request and
   the new password, accepting an invitation, and the standalone message page.
   Same call tips.css, tiles.css and tables.css already made, and
   docs/design.md named `.bf-auth` as one of the splits left. It paid for the
   dashboard editor's render memoisation and drag fix (flare#55, flare#60),
   which that page's budget had no room for. */

/* Both selectors, and the child one is the half that does the work. The
   shell backstop at the foot of portal.css is `.bf-main > *`, which scores the
   same (0,1,0) as a bare class: while this rule sat above it in that file a
   plain `.bf-auth` cap lost the cascade outright, and measured at 2560px the
   card filled 2496px and the block button ran 2448px over a 544px input. A
   child combinator adds no specificity of its own, so `.bf-main > .bf-auth`
   is (0,2,0) and wins on specificity rather than on which sheet is linked
   last. The bare selector stays for a card that is ever rendered outside the
   main column. */
.bf-auth,
.bf-main > .bf-auth {
  max-width: var(--app-auth-max);
  margin: 0 auto;
  padding: var(--bf-space-10) var(--bf-gutter);
}

/* The card's submit, the one button that fills its row. */
.bf-btn--block { width: 100%; }
