/* ============================================================
   Kerberos SSO on Linux — scoped blog-post theme ("ticket stub")
   Everything lives under .krb-post so it cannot touch site chrome.
   Loaded once via <link> in the post body; shared by all 4 languages.
   Dark terminal theme with an amber "ticket" accent — Kerberos tickets
   (TGT / service tickets) are the whole concept, so gold felt right.
   Fonts are the site's self-hosted families (see /assets/css/fonts.css,
   loaded globally in layout.php) — no web-font CDN.
   ============================================================ */
.krb-post {
  --k-sans: 'Geist', system-ui, -apple-system, 'Segoe UI', sans-serif;
  --k-mono: 'JetBrains Mono', ui-monospace, 'SF Mono', Menlo, monospace;
  --k-bg:        #0e0d0a;
  --k-bg-card:   #17140d;
  --k-bg-code:   rgba(214, 168, 92, 0.10);
  --k-bg-warn:   rgba(255, 202, 122, 0.08);
  --k-text:      #f0ecdf;
  --k-muted:     #a89a7c;
  --k-border:    #382f1e;
  --k-gold:      #e0ab4c;
  --k-gold-dim:  rgba(224, 171, 76, 0.35);
  --k-red:       #ff7b72;
  --k-green:     #6ee7a0;

  width: 100vw;
  max-width: 100vw;
  margin-left: calc(50% - 50vw);
  margin-right: calc(50% - 50vw);
  border-top: 1px solid var(--k-border);
  border-bottom: 1px solid var(--k-border);
  background: var(--k-bg);
  color: var(--k-text);
  font-family: var(--k-sans);
  font-size: 18px;
  line-height: 1.65;
  isolation: isolate;
}

.krb-post * { margin: 0; padding: 0; box-sizing: border-box; }

.krb-post a { color: var(--k-gold); text-decoration: none; border-bottom: 1px solid var(--k-gold-dim); }
.krb-post a:hover { border-bottom-color: var(--k-gold); }

.krb-post code {
  font-family: var(--k-mono);
  font-size: 0.88em;
  background: var(--k-bg-code);
  border-radius: 4px;
  padding: 0.08em 0.35em;
  color: var(--k-gold);
  white-space: nowrap;
}

.krb-post strong { color: #fff; }
.krb-post em { color: var(--k-text); }

/* ── Wrapper ───────────────────────────────────────────────── */
.krb-post .kb-wrap { max-width: 760px; margin: 0 auto; padding: 0 32px 64px; }

/* ── Hero ──────────────────────────────────────────────────── */
.krb-post .kb-hero {
  width: 100%;
  background:
    radial-gradient(ellipse 80% 60% at 50% -10%, rgba(224, 171, 76, 0.12), transparent 60%),
    linear-gradient(180deg, #0a0904 0%, var(--k-bg) 100%);
  border-bottom: 1px solid var(--k-border);
  padding: 72px 28px 52px;
  text-align: center;
}

.krb-post .kb-eyebrow {
  font-family: var(--k-mono);
  font-size: 0.70rem;
  letter-spacing: 0.34em;
  text-transform: uppercase;
  color: var(--k-gold);
  margin-bottom: 20px;
  display: block;
}

.krb-post .kb-h1 {
  font-size: clamp(1.7rem, 4.4vw, 2.6rem);
  line-height: 1.16;
  font-weight: 800;
  letter-spacing: -0.015em;
  max-width: 820px;
  margin: 0 auto 18px;
  color: #fff;
}

.krb-post .kb-sub {
  color: var(--k-muted);
  font-size: 1.05rem;
  max-width: 640px;
  margin: 0 auto;
}

/* fake "ticket stub" — evokes a Kerberos TGT */
.krb-post .kb-ticket {
  max-width: 460px;
  margin: 32px auto 0;
  display: flex;
  align-items: center;
  border: 1px dashed var(--k-gold-dim);
  border-radius: 8px;
  background: var(--k-bg-card);
  font-family: var(--k-mono);
  font-size: 0.76rem;
  color: var(--k-muted);
  overflow: hidden;
}
.krb-post .kb-ticket .stub {
  padding: 10px 14px;
  border-right: 1px dashed var(--k-gold-dim);
  color: var(--k-gold);
  white-space: nowrap;
}
.krb-post .kb-ticket .body { padding: 10px 14px; text-align: left; flex: 1; }

/* ── Sections ──────────────────────────────────────────────── */
.krb-post .kb-section { margin-top: 46px; }
.krb-post .kb-h2 {
  font-size: 1.5rem;
  font-weight: 750;
  color: #fff;
  letter-spacing: -0.01em;
  margin-bottom: 16px;
}
.krb-post .kb-section p { margin-bottom: 16px; }
.krb-post .kb-section p:last-child { margin-bottom: 0; }
.krb-post .kb-lede { font-size: 1.1rem; color: var(--k-text); }

/* ── Terminal / file card ──────────────────────────────────── */
.krb-post .kb-term {
  margin: 0 0 18px;
  border: 1px solid var(--k-border);
  border-radius: 10px;
  overflow: hidden;
  background: #0a0906;
}
.krb-post .kb-term-bar {
  display: flex;
  align-items: center;
  gap: 8px;
  padding: 9px 14px;
  background: #1a1610;
  border-bottom: 1px solid var(--k-border);
}
.krb-post .kb-dot { width: 10px; height: 10px; border-radius: 50%; flex: 0 0 auto; }
.krb-post .kb-dot.r { background: #ec6a5f; }
.krb-post .kb-dot.y { background: #f4bf4f; }
.krb-post .kb-dot.g { background: #61c554; }
.krb-post .kb-term-name {
  font-family: var(--k-mono);
  font-size: 0.72rem;
  color: var(--k-muted);
  margin-left: 6px;
  letter-spacing: 0.02em;
}
.krb-post .kb-term pre {
  font-family: var(--k-mono);
  font-size: 0.84rem;
  line-height: 1.65;
  color: var(--k-text);
  padding: 14px 16px;
  overflow-x: auto;
  white-space: pre;
  tab-size: 4;
}
.krb-post .kb-term pre .c { color: var(--k-muted); }
.krb-post .kb-term pre .g { color: var(--k-green); }
.krb-post .kb-term pre .a { color: var(--k-gold); }

/* ── Notes / fine print ────────────────────────────────────── */
.krb-post .kb-note {
  border-radius: 10px;
  padding: 14px 18px;
  font-size: 0.95rem;
  margin: 0 0 16px;
  background: var(--k-bg-warn);
  border: 1px solid rgba(255, 202, 122, 0.3);
  color: var(--k-muted);
}

/* ── Lists ─────────────────────────────────────────────────── */
.krb-post .kb-list {
  list-style: none;
  margin: 0 0 16px;
  display: grid;
  gap: 12px;
}
.krb-post .kb-list li {
  position: relative;
  padding: 12px 16px 12px 40px;
  border: 1px solid var(--k-border);
  background: var(--k-bg-card);
  font-size: 1rem;
  color: var(--k-text);
}
.krb-post .kb-list li::before {
  content: "▸";
  position: absolute;
  left: 15px;
  top: 11px;
  color: var(--k-gold);
  font-size: 1.05rem;
}
.krb-post .kb-list li b { color: #fff; font-weight: 600; }

/* ── Pull quote ────────────────────────────────────────────── */
.krb-post .kb-pull {
  font-size: 1.3rem;
  font-weight: 700;
  line-height: 1.4;
  color: #fff;
  text-align: center;
  max-width: 620px;
  margin: 48px auto 6px;
  padding: 0 10px;
}

/* ── TL;DR box ─────────────────────────────────────────────── */
.krb-post .kb-tldr {
  margin-top: 48px;
  border: 1px solid var(--k-gold-dim);
  border-radius: 12px;
  background: linear-gradient(180deg, rgba(224, 171, 76, 0.08), transparent 70%);
  padding: 24px 26px;
}
.krb-post .kb-tldr-label {
  font-family: var(--k-mono);
  font-size: 0.68rem;
  letter-spacing: 0.3em;
  color: var(--k-gold);
  margin-bottom: 12px;
}
.krb-post .kb-tldr p { margin: 0 0 12px; }
.krb-post .kb-tldr p:last-child { margin: 0; font-style: italic; color: var(--k-muted); }

/* ── Small screens ─────────────────────────────────────────── */
@media (max-width: 640px) {
  .krb-post { font-size: 16.5px; }
  .krb-post .kb-wrap { padding: 0 20px 48px; }
  .krb-post .kb-hero { padding: 56px 18px 40px; }
  .krb-post .kb-pull { font-size: 1.1rem; }
  .krb-post .kb-ticket { flex-direction: column; }
  .krb-post .kb-ticket .stub { border-right: 0; border-bottom: 1px dashed var(--k-gold-dim); width: 100%; }
}