diff --git a/docs/design/artboards/d215/index.html b/docs/design/artboards/d215/index.html
index c15e207cf..25cc3fd20 100644
--- a/docs/design/artboards/d215/index.html
+++ b/docs/design/artboards/d215/index.html
@@ -445,6 +445,16 @@
 .authcard .alt { text-align: center; font-size: 13.5px; color: var(--se); }
 .authcard a { text-decoration: none; }
 .authcard .alt a { color: var(--c-text); font-weight: 600; }
+.authcard .sub { margin: 0; font-size: 13.5px; line-height: 1.5; color: var(--se); }
+.authcard .hint { margin: 0; font-size: 13px; line-height: 1.5; color: var(--se); }
+.authcard .hint a, .authcard .legal a { color: var(--c-text); font-weight: 600; }
+.authcard .legal { font-size: 12px; line-height: 1.5; color: var(--mu); text-align: center; }
+.authcard .fl .lab em { font: 500 11px/1 var(--f-mono); font-style: normal; color: var(--mu); margin-left: 8px; }
+.authcard .fl .help { font-size: 12px; line-height: 1.5; color: var(--mu); }
+.authcard .alrt a { color: var(--c-text); font-weight: 600; }
+.rowa { display: grid; gap: 18px; align-items: start; }
+.shead.sub2 { margin-top: 28px; }
+.shead.sub2 h3 { margin: 0; font: 700 15px/1.2 var(--f-display); letter-spacing: -0.01em; }
 .app.m .authpage { background: var(--sf); place-items: start stretch; padding: 0; }
 .app.m .authcard { width: auto; box-shadow: none; border-radius: 0; padding: 28px 20px; }
 </style>
@@ -560,7 +570,7 @@ <h1>Same look. <em>Less said.</em></h1>
   <li><svg viewBox="0 0 24 24"><use href="#i-grid"/></svg><b>One screen first</b><span>Repeated blocks become a table; rare settings collapse.</span></li>
 </ol>
 <nav class="toc" aria-label="Surfaces">
-  <a href="#s-sidebar">Sidebar controls</a><a href="#s-chat">Pod chat</a><a href="#s-board">Task board</a><a href="#s-memory">Memory</a><a href="#s-agent">Agent settings</a><a href="#s-settings">Settings</a><a href="#s-connectors">Connectors</a><a href="#s-signin">Sign in</a><a href="#s-dark">Dark mode</a>
+  <a href="#s-sidebar">Sidebar controls</a><a href="#s-chat">Pod chat</a><a href="#s-board">Task board</a><a href="#s-memory">Memory</a><a href="#s-agent">Agent settings</a><a href="#s-settings">Settings</a><a href="#s-connectors">Connectors</a><a href="#s-signin">Sign in</a><a href="#s-signup">Sign up</a><a href="#s-dark">Dark mode</a>
 </nav>
 
 <section class="surf" id="s-sidebar">
@@ -787,6 +797,16 @@ <h1>Same look. <em>Less said.</em></h1>
   <div class="row2" style="margin-top:18px"><figure><figcaption><b>Invite-only bounce · 1440</b><span>from an OAuth sign-up that needs an invitation</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signin" data-vp="1440" data-state="error"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Sign in</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Registration is invite-only right now. Use an invitation link to sign up, or join the waitlist.</span></div><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password<a href="#">Forgot password?</a></div><div class="field"><span class="mu">••••••••••</span></div></div><button class="b b-p" type="button">Sign in</button><div class="alt">New to Commonly? <a href="#">Create an account</a></div></div></div></div></div></figure><figure><figcaption><b>Invite-only bounce · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signin" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Sign in</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Registration is invite-only right now. Use an invitation link to sign up, or join the waitlist.</span></div><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password<a href="#">Forgot password?</a></div><div class="field"><span class="mu">••••••••••</span></div></div><button class="b b-p" type="button">Sign in</button><div class="alt">New to Commonly? <a href="#">Create an account</a></div></div></div></div></div></figure></div>
 </section>
 
+<section class="surf" id="s-signup">
+  <div class="shead"><h2>Sign up and account recovery</h2><span class="route">/register + /v2/register, /v2/register/invite-required, /verify-email, /v2/forgot-password, /v2/reset-password</span><div class="nums"><span class="num">register components <b>2</b> → <i>1</i></span><span class="num">fields on the page <b>3</b> → <i>3</i></span><span class="num">subtitles <b>5</b> → <i>1</i></span></div></div>
+<div class="shead sub2"><h3>Sign up</h3><span class="route">/register and /v2/register, one page</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>Sign up · 1440</b><span>providers first, then three fields</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="default"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Create your account</h1><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password</div><div class="field"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Invitation code <em>optional</em></div><div class="field"><span class="mu">Unlocks hiring from the catalog</span></div><div class="help">No code? Leave blank — you can still run an agent here or bring your own, and redeem a code later in Settings.</div></div><button class="b b-p" type="button">Create account</button><div class="legal">By creating an account you agree to the <a href="#">Terms</a> and <a href="#">Privacy</a> policy.</div><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Registration failed · 1440</b><span>server line above the form</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="error"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Create your account</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Registration failed.</span></div><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field bad"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password</div><div class="field bad"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Invitation code <em>optional</em></div><div class="field"><span class="mu">Unlocks hiring from the catalog</span></div><div class="help">No code? Leave blank — you can still run an agent here or bring your own, and redeem a code later in Settings.</div></div><button class="b b-p" type="button">Create account</button><div class="legal">By creating an account you agree to the <a href="#">Terms</a> and <a href="#">Privacy</a> policy.</div><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,300px));margin-top:18px"><figure><figcaption><b>Sign up · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="default"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Create your account</h1><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password</div><div class="field"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Invitation code <em>optional</em></div><div class="field"><span class="mu">Unlocks hiring from the catalog</span></div><div class="help">No code? Leave blank — you can still run an agent here or bring your own, and redeem a code later in Settings.</div></div><button class="b b-p" type="button">Create account</button><div class="legal">By creating an account you agree to the <a href="#">Terms</a> and <a href="#">Privacy</a> policy.</div><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Registration failed · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Create your account</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Registration failed.</span></div><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 40 40"><use href="#lg-github"/></svg>Continue with GitHub</button><button class="b b-s" type="button"><svg class="lgi" viewBox="0 0 18 18"><use href="#lg-google"/></svg>Continue with Google</button><div class="or">or</div><div class="fl"><div class="lab">Email</div><div class="field bad"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Password</div><div class="field bad"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Invitation code <em>optional</em></div><div class="field"><span class="mu">Unlocks hiring from the catalog</span></div><div class="help">No code? Leave blank — you can still run an agent here or bring your own, and redeem a code later in Settings.</div></div><button class="b b-p" type="button">Create account</button><div class="legal">By creating an account you agree to the <a href="#">Terms</a> and <a href="#">Privacy</a> policy.</div><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>One page replaces both,</b> as with sign in. The tagline under the title goes; the page is its own label.</li><li><b>Providers first, then the form.</b> Live draws them below the button; here they follow the sign-in order so the two pages read as one family. The optional code stays, with its one line of help under the field (it says the code is not needed to start).</li><li><b>Errors are one row above the form,</b> both fields ringed in ink, as on sign in. The terms line is muted and sits under the key; the sign-in link is the last line.</li></ul></div>
+<div class="shead sub2"><h3>Invitation required</h3><span class="route">/v2/register/invite-required (and /register/invite-required)</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>Invitation required · 1440</b><span>code first, waitlist below</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="default"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Invitation required</h1><p class="sub">New account registration is invite-only right now. Enter your invitation code to continue, or join the waitlist for admin review.</p><div class="fl"><div class="lab">Invitation code</div><div class="field"><span class="mu">Paste your code</span></div></div><button class="b b-p" type="button">Continue to registration</button><div class="or">Need access? Join the waitlist</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Name <em>optional</em></div><div class="field"><span>Alex Rivera</span></div></div><div class="fl"><div class="lab">Use case <em>optional</em></div><div class="field"><span class="mu">Running agents next to my team</span></div></div><button class="b b-s" type="button">Request waitlist access</button><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Waitlist sent · 1440</b><span>confirmation above the ghost key</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Invitation required</h1><p class="sub">New account registration is invite-only right now. Enter your invitation code to continue, or join the waitlist for admin review.</p><div class="fl"><div class="lab">Invitation code</div><div class="field"><span class="mu">Paste your code</span></div></div><button class="b b-p" type="button">Continue to registration</button><div class="or">Need access? Join the waitlist</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Name <em>optional</em></div><div class="field"><span>Alex Rivera</span></div></div><div class="fl"><div class="lab">Use case <em>optional</em></div><div class="field"><span class="mu">Running agents next to my team</span></div></div><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>Waitlist request submitted.</span></div><button class="b b-s" type="button">Request waitlist access</button><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,300px));margin-top:18px"><figure><figcaption><b>Invitation required · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="default"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Invitation required</h1><p class="sub">New account registration is invite-only right now. Enter your invitation code to continue, or join the waitlist for admin review.</p><div class="fl"><div class="lab">Invitation code</div><div class="field"><span class="mu">Paste your code</span></div></div><button class="b b-p" type="button">Continue to registration</button><div class="or">Need access? Join the waitlist</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Name <em>optional</em></div><div class="field"><span>Alex Rivera</span></div></div><div class="fl"><div class="lab">Use case <em>optional</em></div><div class="field"><span class="mu">Running agents next to my team</span></div></div><button class="b b-s" type="button">Request waitlist access</button><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Waitlist sent · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Invitation required</h1><p class="sub">New account registration is invite-only right now. Enter your invitation code to continue, or join the waitlist for admin review.</p><div class="fl"><div class="lab">Invitation code</div><div class="field"><span class="mu">Paste your code</span></div></div><button class="b b-p" type="button">Continue to registration</button><div class="or">Need access? Join the waitlist</div><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><div class="fl"><div class="lab">Name <em>optional</em></div><div class="field"><span>Alex Rivera</span></div></div><div class="fl"><div class="lab">Use case <em>optional</em></div><div class="field"><span class="mu">Running agents next to my team</span></div></div><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>Waitlist request submitted.</span></div><button class="b b-s" type="button">Request waitlist access</button><div class="alt">Already have an account? <a href="#">Sign in</a></div></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>One filled key on the page:</b> Continue to registration. The waitlist key is bordered, since it is the second path, not the first.</li><li><b>The divider is the existing "or" rule</b> carrying the waitlist line, not a new element. Name and use case are marked optional in the label, not in the field.</li><li><b>Submitted is a status row</b> (check, not green), and the form stays so a second address can be sent.</li></ul></div>
+<div class="shead sub2"><h3>Check your email</h3><span class="route">the register success state, plus /verify-email</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>Signed in, unverified · 1440</b><span>reminder banner follows</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>You're in</h1><p class="sub">Verify your email to join the Community pod — link sent to alex@studio.dev.</p><p class="hint">You can <a href="#">sign in now</a>; a reminder stays visible until you verify.</p><button class="b b-p" type="button">Continue to sign in</button></div></div></div></div></figure><figure><figcaption><b>Verify first · 1440</b><span>team-gated instances</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>You're in</h1><p class="sub">Verify your email to join the Community pod — link sent to alex@studio.dev.</p><p class="hint">Verify your email first, then <a href="#">sign in</a>.</p><button class="b b-p" type="button">Continue to sign in</button></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(3,minmax(0,300px));margin-top:18px"><figure><figcaption><b>Signed in, unverified · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>You're in</h1><p class="sub">Verify your email to join the Community pod — link sent to alex@studio.dev.</p><p class="hint">You can <a href="#">sign in now</a>; a reminder stays visible until you verify.</p><button class="b b-p" type="button">Continue to sign in</button></div></div></div></div></figure><figure><figcaption><b>Verify first · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>You're in</h1><p class="sub">Verify your email to join the Community pod — link sent to alex@studio.dev.</p><p class="hint">Verify your email first, then <a href="#">sign in</a>.</p><button class="b b-p" type="button">Continue to sign in</button></div></div></div></div></figure><figure><figcaption><b>Account created · 390</b><span>no verification step</span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Account created</h1><p class="sub">Your account is ready. Sign in to continue.</p><button class="b b-p" type="button">Continue to sign in</button></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>Two reads of one screen.</b> Instances that allow sign-in before verifying get the first; team-gated ones get the second. The copy is the live copy: only the verify-to-join-the-Community-pod line, not a wall (Sam, TASK-103).</li><li><b>"Account created" is the third case</b> (no email step), kept for completeness; today the screen is picked by matching the server's prose, so this should become a field on the response.</li></ul></div>
+<div class="shead sub2"><h3>Verify email</h3><span class="route">/verify-email?token=…</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>Verifying · 1440</b><span></span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="default"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Verify your email</h1><p class="sub">Verifying your email…</p></div></div></div></div></figure><figure><figcaption><b>Verified · 1440</b><span>server line</span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Verify your email</h1><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>Email verified successfully</span></div><button class="b b-p" type="button">Go to sign in</button></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(3,minmax(0,300px));margin-top:18px"><figure><figcaption><b>Verifying · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="default"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Verify your email</h1><p class="sub">Verifying your email…</p></div></div></div></div></figure><figure><figcaption><b>Verified · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Verify your email</h1><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>Email verified successfully</span></div><button class="b b-p" type="button">Go to sign in</button></div></div></div></div></figure><figure><figcaption><b>Failed · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Verify your email</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Verification failed.</span></div><button class="b b-s" type="button">Go to sign in</button></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>Today this is a navy MUI card on a #0b1220 page,</b> the one dark flash left on the auth routes (Sam ruled no dark flash, 08-24). Here it is the same card as every other auth page, on the page background.</li><li><b>Failure is the shared alert row;</b> the way out is a bordered key, since nothing on this page is the next step to take. The success line is the server's own.</li></ul></div>
+<div class="shead sub2"><h3>Forgot password</h3><span class="route">/v2/forgot-password</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>Forgot password · 1440</b><span></span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="default"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Reset your password</h1><p class="sub">Enter your account email and we'll send you a reset link. If you signed up with Google or GitHub, you can also just sign in with them.</p><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><button class="b b-p" type="button">Send reset link</button><div class="alt">Remembered it? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Reset link sent · 1440</b><span></span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Reset your password</h1><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>If that email has an account, a reset link is on its way. The link is valid for one hour.</span></div><div class="alt">Back to <a href="#">sign in</a></div></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(3,minmax(0,300px));margin-top:18px"><figure><figcaption><b>Forgot password · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="default"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Reset your password</h1><p class="sub">Enter your account email and we'll send you a reset link. If you signed up with Google or GitHub, you can also just sign in with them.</p><div class="fl"><div class="lab">Email</div><div class="field"><span>alex@studio.dev</span></div></div><button class="b b-p" type="button">Send reset link</button><div class="alt">Remembered it? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Failed · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Reset your password</h1><p class="sub">Enter your account email and we'll send you a reset link. If you signed up with Google or GitHub, you can also just sign in with them.</p><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Something went wrong — try again.</span></div><div class="fl"><div class="lab">Email</div><div class="field bad"><span>alex@studio.dev</span></div></div><button class="b b-p" type="button">Send reset link</button><div class="alt">Remembered it? <a href="#">Sign in</a></div></div></div></div></div></figure><figure><figcaption><b>Sent · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="sent"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Reset your password</h1><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>If that email has an account, a reset link is on its way. The link is valid for one hour.</span></div><div class="alt">Back to <a href="#">sign in</a></div></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>The instructions line stays</b> because it carries the one non-obvious fact (provider accounts can just sign in). It is the only prose on the page.</li><li><b>After sending, the form goes</b> and one row says it, with the one-hour validity. Back to sign in is the last line, as everywhere.</li></ul></div>
+<div class="shead sub2"><h3>Choose a new password</h3><span class="route">/v2/reset-password?token=…</span></div><div class="rowa" style="grid-template-columns:repeat(2,minmax(0,1fr));margin-top:14px"><figure><figcaption><b>New password · 1440</b><span></span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="default"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><div class="fl"><div class="lab">New password</div><div class="field"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Confirm password</div><div class="field"><span class="mu">••••••••••</span></div></div><button class="b b-p" type="button">Update password</button></div></div></div></div></figure><figure><figcaption><b>Updated · 1440</b><span></span></figcaption><div class="frame" style="--fw:1440;--fh:900" data-surface="signup" data-vp="1440" data-state="sent"><div class="app d"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><div class="alrt" role="status"><svg class="i" viewBox="0 0 24 24"><use href="#i-check"/></svg><span>Password updated. You can sign in now.</span></div><button class="b b-p" type="button">Go to sign in</button></div></div></div></div></figure></div><div class="rowa" style="grid-template-columns:repeat(4,minmax(0,300px));margin-top:18px"><figure><figcaption><b>New password · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="default"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><div class="fl"><div class="lab">New password</div><div class="field"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Confirm password</div><div class="field"><span class="mu">••••••••••</span></div></div><button class="b b-p" type="button">Update password</button></div></div></div></div></figure><figure><figcaption><b>Mismatch · 390</b><span></span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Passwords do not match.</span></div><div class="fl"><div class="lab">New password</div><div class="field bad"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Confirm password</div><div class="field bad"><span class="mu">••••••••</span></div></div><button class="b b-p" type="button">Update password</button></div></div></div></div></figure><figure><figcaption><b>Link expired · 390</b><span>request a new one inline</span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><div class="alrt" role="alert"><svg class="i" viewBox="0 0 24 24"><use href="#i-alert"/></svg><span>Reset failed — the link may have expired. <a href="#">Request a new link</a></span></div><div class="fl"><div class="lab">New password</div><div class="field"><span class="mu">••••••••••</span></div></div><div class="fl"><div class="lab">Confirm password</div><div class="field"><span class="mu">••••••••••</span></div></div><button class="b b-p" type="button">Update password</button></div></div></div></div></figure><figure><figcaption><b>No token · 390</b><span>page opened without the email link</span></figcaption><div class="frame" style="--fw:390;--fh:844" data-surface="signup" data-vp="390" data-state="error"><div class="app m"><div class="authpage"><div class="authcard"><div class="brand"><span class="logo"><svg class="i" viewBox="0 0 24 24"><use href="#i-mark"/></svg></span>commonly</div><h1>Choose a new password</h1><p class="sub">This page needs the reset link from your email. Request a new one below.</p><button class="b b-p" type="button">Send me a reset link</button></div></div></div></div></figure></div><div class="notes" style="margin-top:18px"><ul><li><b>Both fields ring while an error is up,</b> same as sign in. Too short and mismatch share the row; the expired-link failure carries its recovery link inside the sentence.</li><li><b>No token</b> is a page of its own: one line and one key, no form to fill in.</li></ul></div>
+</section>
+
 <section class="surf" id="s-dark">
   <div class="shead"><h2>Dark mode</h2><span class="route">one dark value per token</span></div>
   <div class="dm">