/* Signer-portal design tokens.
 *
 * One declaration per line, on purpose: test/portal-contrast.test.js parses this
 * file with a `--token: value;` regex and measures the pairs. styles.css carries
 * no colour literals, so this file is the only place a colour can enter the
 * portal -- which is what makes "every colour is measured" a checkable claim
 * rather than an intention.
 *
 * Light only. `color-scheme: light` is declared below and nothing in the
 * mobile-web qualification requires a dark ceremony; adding one doubles the
 * pairs that must be proven, so it is a deliberate V1 omission, not an oversight.
 */
:root {
  /* Surfaces */
  --bg: #f3f6f4;
  --surface-card: #fff;
  --surface-header: #123c31;
  --surface-check: #eef6f2;
  --surface-document: #f7f8f8;
  --surface-frame: #eee;

  /* Ink */
  --ink: #172026;
  --ink-on-dark: #fff;
  --ink-eyebrow: #49655d;
  --ink-label: #5f706b;
  --ink-link: #134f91;
  --ink-step-todo: #60706b;
  --ink-step-current: #123c31;
  --ink-step-done: #315a4d;

  /* Actions */
  --action: #185d49;
  --action-emphasis: #0d694e;
  --action-secondary: #586762;
  --action-danger: #9e2c25;

  /* Boundaries that identify a control or carry state (WCAG 1.4.11, 3:1).
     Measured on --surface-card. */
  --border-control: #7d8f89;      /* 3.41 — text inputs and selects */
  --border-canvas: #768983;       /* 3.70 — the signature area */
  --border-step-todo: #7d8f89;    /* 3.41 — a step not yet reached */
  --border-step-done: #4a8b74;    /* 4.01 — a completed step */
  --border-step-current: #185d49; /* 7.78 — the step in progress */
  --border-header-action: #d8eee6;/* 10.07 on --surface-header */

  /* Decorative boundaries. These do not gate 1.4.11: each component is
     identifiable without them (the card by its background and shadow, the
     fieldset by its legend, the document shell by the frame it wraps). */
  --border-card: #d7dfdc;
  --border-fieldset: #c5d0cc;
  --border-document: #aebbb7;
  --shadow-card: #123c3110;
  --spinner-track: #d7e4df;

  /* Focus. Two rings, because no single colour clears 3:1 against BOTH the dark
     header and the white card. The previous single amber ring measured 1.77-1.94
     against the three surfaces it actually landed on -- outline-offset puts the
     ring OUTSIDE the control, so it never touched the button fills it did pass
     against. Worst case for this pair is 5.95. */
  --focus-inner: #123c31;
  --focus-outer: #fff;
}
