*{box-sizing:border-box;margin:0;padding:0}
:root{
  --bg:#f5f6f8;
  --surface:#ffffff;
  --border:#e6e8ec;
  --border-2:#eef0f3;
  --text:#0f1729;
  --text-2:#4a5568;
  --text-3:#8b95a7;
  --accent:#4f46e5;
  --accent-soft:#eef0ff;
  --ok:#0d9f6e;
  --ok-soft:#e6f7f0;
  --warn:#c77700;
  --warn-soft:#fdf2e0;
  --crit:#e5484d;
  --crit-soft:#fdecec;
  --mono:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;
  --rail:#0b0f19;
}
html,body{height:100%}
body{
  font-family:ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",Inter,Roboto,Helvetica,Arial,sans-serif;
  background:var(--bg);color:var(--text);font-size:13px;line-height:1.45;
  -webkit-font-smoothing:antialiased;
}
.ico{width:15px;height:15px;flex:none}

/* ============ LAYOUT ============ */
.app{display:grid;grid-template-columns:238px minmax(0,1fr);min-height:100vh}

/* ============ RAIL ============ */
.rail{
  background:var(--rail);color:#8b95a8;display:flex;flex-direction:column;
  padding:14px 12px;gap:4px;position:sticky;top:0;height:100vh;overflow-y:auto;
}
.brand{display:flex;align-items:center;gap:10px;padding:6px 6px 12px}
.brand-mark{
  width:30px;height:30px;border-radius:9px;flex:none;
  background:linear-gradient(140deg,#6366f1,#4338ca);
  display:grid;place-items:center;color:#fff;
  box-shadow:0 4px 12px rgba(79,70,229,.35);
}
.brand-mark svg{width:17px;height:17px}
.brand-name{color:#f2f4f8;font-size:13.5px;font-weight:650;letter-spacing:-.01em;line-height:1.2}
.brand-sub{font-size:9.5px;letter-spacing:.12em;text-transform:uppercase;color:#5d687d;font-weight:600}

.ws{
  display:flex;align-items:center;gap:8px;width:100%;cursor:pointer;
  background:rgba(255,255,255,.045);border:1px solid rgba(255,255,255,.07);
  border-radius:8px;padding:7px 9px;color:#c3cad8;font:inherit;text-align:left;
  transition:background .15s;
}
.ws:hover{background:rgba(255,255,255,.08)}
.ws-dot{width:6px;height:6px;border-radius:50%;background:#22c55e;box-shadow:0 0 0 3px rgba(34,197,94,.15);flex:none}
.ws-name{font-family:var(--mono);font-size:11.5px;flex:1;letter-spacing:-.01em}
.ws-chev{width:13px;height:13px;color:#5d687d;flex:none}

.nav-label{
  font-size:9.5px;text-transform:uppercase;letter-spacing:.11em;
  color:#4d5769;font-weight:650;padding:15px 8px 6px;
}
.nav-item{
  display:flex;align-items:center;gap:9px;padding:7px 8px;border-radius:7px;
  color:#98a2b5;font-size:12.5px;font-weight:500;cursor:pointer;
  text-decoration:none;margin-bottom:1px;transition:background .12s,color .12s;
}
.nav-item svg{opacity:.85}
.nav-item:hover{background:rgba(255,255,255,.05);color:#e2e6ee}
.nav-item.active{
  background:linear-gradient(90deg,rgba(99,102,241,.24),rgba(99,102,241,.08));
  color:#c7d0ff;box-shadow:inset 0 0 0 1px rgba(99,102,241,.18);
}
.nav-item.active svg{opacity:1}
.nav-count{
  margin-left:auto;font-size:10.5px;font-family:var(--mono);
  background:rgba(255,255,255,.07);color:#8b95a8;padding:1px 6px;border-radius:20px;
}
.nav-count.warn{background:rgba(247,144,9,.16);color:#f7b955}

.rail-foot{
  margin-top:auto;padding-top:12px;display:flex;flex-direction:column;gap:10px;
  border-top:1px solid rgba(255,255,255,.06);
}
.sys-status{display:flex;align-items:center;gap:7px;font-size:11px;color:#6f7a8e;padding:0 8px}
.pulse{width:6px;height:6px;border-radius:50%;background:#22c55e;position:relative;flex:none}
.pulse::after{
  content:"";position:absolute;inset:-3px;border-radius:50%;
  border:1px solid #22c55e;animation:pulse 2.2s ease-out infinite;
}
@keyframes pulse{0%{transform:scale(.5);opacity:.8}100%{transform:scale(1.6);opacity:0}}
.user{
  display:flex;align-items:center;gap:9px;padding:8px;border-radius:9px;cursor:pointer;
  background:rgba(255,255,255,.04);border:1px solid rgba(255,255,255,.06);
}
.user:hover{background:rgba(255,255,255,.07)}
.avatar{
  width:26px;height:26px;border-radius:50%;flex:none;
  background:linear-gradient(140deg,#6366f1,#8b5cf6);color:#fff;
  display:grid;place-items:center;font-size:10.5px;font-weight:650;letter-spacing:.02em;
}
.avatar.sm{width:22px;height:22px;font-size:9.5px}
.user-name{font-size:12px;color:#e2e6ee;font-weight:600;line-height:1.25}
.user-role{font-size:10.5px;color:#6f7a8e}

/* ============ TOPBAR ============ */
.topbar{
  position:sticky;top:0;z-index:20;display:flex;align-items:center;gap:10px;
  padding:0 22px;height:58px;background:rgba(255,255,255,.86);
  backdrop-filter:blur(10px);-webkit-backdrop-filter:blur(10px);
  border-bottom:1px solid var(--border);
}
.tb-title{display:flex;align-items:baseline;gap:8px}
.tb-title h1{font-size:15px;font-weight:650;letter-spacing:-.015em}
.tb-sub{font-size:11.5px;color:var(--text-3)}
.search{position:relative;width:280px;margin-left:10px}
.search>svg{position:absolute;left:10px;top:50%;transform:translateY(-50%);width:14px;height:14px;color:var(--text-3)}
.search input{
  width:100%;height:32px;border-radius:8px;border:1px solid var(--border);
  background:#f7f8fa;padding:0 46px 0 30px;font:inherit;font-size:12.5px;
  color:var(--text);outline:none;transition:.15s;
}
.search input::placeholder{color:var(--text-3)}
.search input:focus{background:#fff;border-color:#c7cbf5;box-shadow:0 0 0 3px rgba(99,102,241,.1)}
.search kbd{
  position:absolute;right:8px;top:50%;transform:translateY(-50%);
  font-family:var(--mono);font-size:10px;color:var(--text-3);
  background:#fff;border:1px solid var(--border);border-radius:4px;padding:1px 5px;
}
.spacer{flex:1}
.seg{display:flex;background:#f1f2f5;border-radius:8px;padding:2px;gap:2px}
.seg button{
  border:0;background:transparent;font:inherit;font-size:11.5px;color:var(--text-2);
  padding:5px 10px;border-radius:6px;cursor:pointer;font-weight:550;transition:.12s;
}
.seg button.active{background:#fff;color:var(--text);box-shadow:0 1px 2px rgba(16,24,40,.08)}
.seg a{
  border:0;background:transparent;font:inherit;font-size:11.5px;color:var(--text-2);
  padding:5px 10px;border-radius:6px;cursor:pointer;font-weight:550;transition:.12s;
  text-decoration:none;display:inline-block;
}
.seg a:hover{color:var(--text)}
.seg a.active{background:#fff;color:var(--text);box-shadow:0 1px 2px rgba(16,24,40,.08)}
.icon-btn{
  width:32px;height:32px;border-radius:8px;border:1px solid var(--border);
  background:#fff;display:grid;place-items:center;cursor:pointer;
  color:var(--text-2);position:relative;transition:.12s;
}
.icon-btn:hover{background:#f7f8fa}
.icon-btn .dot{position:absolute;top:6px;right:7px;width:6px;height:6px;border-radius:50%;background:var(--crit);border:1.5px solid #fff}
.btn-primary{
  display:flex;align-items:center;gap:6px;height:32px;padding:0 13px;border-radius:8px;
  border:0;background:var(--accent);color:#fff;font:inherit;font-size:12.5px;
  font-weight:600;cursor:pointer;box-shadow:0 1px 2px rgba(79,70,229,.3);transition:.12s;
}
.btn-primary:hover{background:#4338ca}
.btn-primary svg{width:14px;height:14px}

/* ============ CONTENT ============ */
.content{padding:20px 22px 44px;display:flex;flex-direction:column;gap:14px}
.card{
  background:var(--surface);border:1px solid var(--border);border-radius:11px;
  box-shadow:0 1px 2px rgba(16,24,40,.04);
}

/* ---- KPIs ---- */
.kpis{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:14px}
.kpi{padding:14px 16px 13px;display:flex;flex-direction:column;gap:9px}
.kpi-top{display:flex;align-items:center;justify-content:space-between;gap:8px}
.kpi-label{font-size:11.5px;color:var(--text-2);font-weight:550}
.kpi-ico{width:26px;height:26px;border-radius:7px;display:grid;place-items:center;background:#f4f5f8;color:var(--text-2);flex:none}
.kpi-ico svg{width:14px;height:14px}
.kpi-val{font-size:25px;font-weight:650;letter-spacing:-.03em;line-height:1;display:flex;align-items:baseline;gap:6px}
.kpi-val small{font-size:12px;font-weight:500;color:var(--text-3);letter-spacing:0}
.kpi-foot{display:flex;align-items:center;gap:6px;font-size:11px;color:var(--text-3)}
.delta{display:inline-flex;align-items:center;gap:3px;font-weight:600;font-size:11px;padding:1px 6px;border-radius:5px;white-space:nowrap}
.delta.up{background:var(--ok-soft);color:var(--ok)}
.delta.down{background:var(--crit-soft);color:var(--crit)}
.delta.warn{background:var(--warn-soft);color:var(--warn)}
.spark{margin-left:auto;width:66px;height:22px;flex:none;color:var(--text-3)}
.spark.i{color:#8b8ff0}
.spark.g{color:#5fc9a3}
.spark.a{color:#e8b463}
.spark.r{color:#ef8a8d}

/* ---- ROWS ---- */
.row{display:grid;gap:14px;align-items:start}
.row-a{grid-template-columns:minmax(0,1.7fr) minmax(0,1fr)}
.row-b{grid-template-columns:minmax(0,1.7fr) minmax(0,1fr)}

.card-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;padding:14px 16px 12px}
.card-head h2{font-size:13px;font-weight:650;letter-spacing:-.01em}
.card-head p{font-size:11.5px;color:var(--text-3);margin-top:2px}
.link{font-size:11.5px;color:var(--accent);font-weight:600;cursor:pointer;text-decoration:none;white-space:nowrap}
.link:hover{text-decoration:underline}

/* ---- CHART ---- */
.legend{display:flex;gap:14px;font-size:11px;color:var(--text-2);padding-top:2px}
.legend span{display:flex;align-items:center;gap:6px;white-space:nowrap}
.sw{width:8px;height:8px;border-radius:2.5px;display:block;flex:none}
.chart-body{padding:0 16px 10px}
.chart-plot{
  position:relative;height:160px;display:flex;align-items:flex-end;
  background:repeating-linear-gradient(to top,var(--border-2) 0 1px,transparent 1px 40px);
  border-bottom:1px solid var(--border-2);
}
.bars{display:flex;align-items:flex-end;gap:5px;width:100%;height:100%}
.bar-col{
  flex:1;height:100%;display:flex;flex-direction:column;justify-content:flex-end;
  gap:1.5px;cursor:pointer;min-width:0;
}
.bar{border-radius:2px}
.bar.ok{background:linear-gradient(180deg,#6d6ff0,#4f46e5)}
.bar.no{background:#f04438;min-height:3px}
.bar-col:hover .bar.ok{background:linear-gradient(180deg,#818cf8,#4338ca)}
.chart-x{
  display:flex;justify-content:space-between;font-family:var(--mono);
  font-size:10px;color:var(--text-3);padding-top:8px;
}
.chart-foot{display:flex;gap:26px;padding:12px 16px 14px;border-top:1px solid var(--border-2);margin-top:2px}
.chart-foot>div{display:flex;flex-direction:column;gap:1px}
.chart-foot span{font-size:10.5px;color:var(--text-3)}
.chart-foot b{font-size:13px;font-weight:650;font-family:var(--mono);letter-spacing:-.02em}

/* ---- APPROVALS ---- */
.approval-list{list-style:none;padding:0 12px 12px;display:flex;flex-direction:column;gap:8px}
.approval-list li{
  border:1px solid var(--border);border-radius:9px;padding:10px 11px;
  background:#fcfcfd;display:flex;flex-direction:column;gap:8px;
}
.ap-top{display:flex;align-items:center;gap:8px}
.ap-who{
  font-size:11.5px;color:var(--text-2);flex:1;min-width:0;
  overflow:hidden;text-overflow:ellipsis;white-space:nowrap;
}
.ap-who b{color:var(--text);font-weight:600}
.ap-who em{font-style:normal;font-family:var(--mono);font-size:11px;color:var(--accent)}
.ap-secret{
  font-family:var(--mono);font-size:11.5px;color:var(--text);background:#f4f5f8;
  border:1px solid var(--border-2);padding:5px 8px;border-radius:6px;
  overflow:hidden;text-overflow:ellipsis;white-space:nowrap;
}
.ap-actions{display:flex;gap:6px}
.ap-actions form{flex:1;display:flex}
.btn-ghost,.btn-approve{
  flex:1;height:28px;border-radius:7px;font:inherit;font-size:11.5px;font-weight:600;
  cursor:pointer;border:1px solid var(--border);background:#fff;color:var(--text-2);
  transition:.12s;white-space:nowrap;
}
.btn-ghost:hover{background:#fdf4f4;color:var(--crit);border-color:#f6c9ca}
.btn-approve{background:var(--accent);border-color:var(--accent);color:#fff}
.btn-approve:hover{background:#4338ca}

.chip{
  font-family:var(--mono);font-size:10px;padding:2px 6px;border-radius:5px;
  background:#f1f2f5;color:var(--text-2);white-space:nowrap;flex:none;
}
.chip.amber{background:var(--warn-soft);color:var(--warn)}
.chip.green{background:var(--ok-soft);color:var(--ok)}
.chip.red{background:var(--crit-soft);color:var(--crit)}

/* ---- TABLE ---- */
.table-wrap{padding:0 6px 8px;overflow-x:auto}
table{width:100%;border-collapse:collapse;font-size:11.5px}
thead th{
  text-align:left;font-size:9.5px;text-transform:uppercase;letter-spacing:.08em;
  color:var(--text-3);font-weight:650;padding:8px 10px;border-bottom:1px solid var(--border);
  white-space:nowrap;
}
tbody td{padding:8px 10px;border-bottom:1px solid var(--border-2);color:var(--text-2);white-space:nowrap}
tbody tr:last-child td{border-bottom:0}
tbody tr:hover{background:#fafbfc}
td.mono{font-family:var(--mono);font-size:11px;color:var(--text-3)}
td.res{max-width:220px;overflow:hidden;text-overflow:ellipsis;font-family:var(--mono);font-size:11px;color:var(--text)}
.actor{color:var(--text);font-weight:550}
.pill{
  font-size:9.5px;font-weight:700;letter-spacing:.05em;text-transform:uppercase;
  padding:2px 6px;border-radius:4px;display:inline-block;
}
.pill.allow{background:var(--ok-soft);color:var(--ok)}
.pill.deny{background:var(--crit-soft);color:var(--crit)}
.pill.rot{background:var(--accent-soft);color:var(--accent)}
.pill.exp{background:var(--warn-soft);color:var(--warn)}
.live{
  display:flex;align-items:center;gap:6px;font-size:10px;font-weight:700;
  letter-spacing:.07em;text-transform:uppercase;color:var(--ok);
  background:var(--ok-soft);padding:3px 9px;border-radius:20px;
}

/* ---- EXPIRING ---- */
.exp-list{list-style:none;padding:0 14px 10px}
.exp-list li{padding:11px 2px;border-bottom:1px solid var(--border-2)}
.exp-list li:last-child{border-bottom:0;padding-bottom:4px}
.exp-main{display:flex;align-items:center;gap:10px;justify-content:space-between}
.exp-name{
  font-family:var(--mono);font-size:11.5px;color:var(--text);
  overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0;
}
.exp-meta{font-size:10.5px;color:var(--text-3);margin-top:3px}
.bar-track{height:4px;border-radius:3px;background:#eef0f3;margin-top:9px;overflow:hidden}
.bar-track i{display:block;height:100%;border-radius:3px;background:linear-gradient(90deg,#f7a23b,#f04438)}
.bar-track i.cool{background:linear-gradient(90deg,#8b8ff0,#4f46e5)}

/* ============ ALERTS ============ */
.alert{
  padding:10px 14px;border-radius:9px;font-size:12.5px;font-weight:550;
  border:1px solid transparent;
}
.alert.success{background:var(--ok-soft);color:var(--ok);border-color:#bfe9d8}
.alert.error{background:var(--crit-soft);color:var(--crit);border-color:#f6c9ca}
.alert.warning{background:var(--warn-soft);color:var(--warn);border-color:#f5ddb4}
.alert.info{background:var(--accent-soft);color:var(--accent);border-color:#d3d7fb}

/* ============ FORMS ============ */
.form-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:14px;padding:4px 16px 16px}
.form-grid.single{grid-template-columns:minmax(0,1fr)}
.field{display:flex;flex-direction:column;gap:5px;min-width:0}
.field.full{grid-column:1 / -1}
.field label{font-size:11.5px;font-weight:600;color:var(--text-2)}
.field .hint{font-size:10.5px;color:var(--text-3)}
.field input[type=text],
.field input[type=email],
.field input[type=password],
.field input[type=number],
.field input[type=date],
.field select,
.field textarea{
  width:100%;border:1px solid var(--border);border-radius:8px;background:#fff;
  padding:8px 10px;font:inherit;font-size:12.5px;color:var(--text);outline:none;
  transition:border-color .15s,box-shadow .15s;
}
.field textarea{min-height:78px;resize:vertical;line-height:1.5}
.field input:focus,.field select:focus,.field textarea:focus{
  border-color:#c7cbf5;box-shadow:0 0 0 3px rgba(99,102,241,.1);
}
.field input:disabled,.field select:disabled{background:#f7f8fa;color:var(--text-3)}
.form-actions{
  display:flex;gap:8px;align-items:center;padding:12px 16px;
  border-top:1px solid var(--border-2);
}
.btn-secondary{
  height:32px;padding:0 13px;border-radius:8px;border:1px solid var(--border);
  background:#fff;color:var(--text-2);font:inherit;font-size:12.5px;font-weight:600;
  cursor:pointer;display:inline-flex;align-items:center;gap:6px;text-decoration:none;
}
.btn-secondary:hover{background:#f7f8fa}
.btn-danger{
  height:32px;padding:0 13px;border-radius:8px;border:1px solid #f6c9ca;
  background:#fff;color:var(--crit);font:inherit;font-size:12.5px;font-weight:600;
  cursor:pointer;display:inline-flex;align-items:center;gap:6px;
}
.btn-danger:hover{background:var(--crit-soft)}
.btn-link{
  border:0;background:transparent;color:var(--accent);font:inherit;font-size:11.5px;
  font-weight:600;cursor:pointer;padding:0;text-decoration:none;
}
.btn-link:hover{text-decoration:underline}
.btn-link.danger{color:var(--crit)}

/* ============ TABLE EXTRAS ============ */
.table-wrap form{display:inline}
td.actions{white-space:nowrap;text-align:right}
td.actions a,td.actions button{margin-left:8px}
.empty-state{
  padding:34px 16px;text-align:center;color:var(--text-3);font-size:12.5px;
}
.empty-state b{display:block;color:var(--text-2);font-size:13px;margin-bottom:4px}

/* ============ HINTS OFF ============ */
/* An administrator can hide the explanations from the Settings page. The
   pages keep working the same, they just show less text. */
body.hints-off .card-head p{display:none}
body.hints-off .login-hint{display:none}
.pager{display:flex;align-items:center;gap:8px;padding:10px 16px;border-top:1px solid var(--border-2);font-size:11.5px;color:var(--text-3)}
.pager a{color:var(--accent);font-weight:600;text-decoration:none}
.pager a:hover{text-decoration:underline}
.pager .spacer{flex:1}

/* ============ DETAIL PAGE ============ */
.detail-list{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:0 18px;padding:4px 16px 16px}
.detail-list .item{padding:9px 0;border-bottom:1px solid var(--border-2);min-width:0}
.detail-list .item .k{font-size:10.5px;text-transform:uppercase;letter-spacing:.06em;color:var(--text-3);font-weight:650}
.detail-list .item .v{font-size:12.5px;color:var(--text);margin-top:3px;word-break:break-word}
.detail-list .item.full{grid-column:1 / -1}

/* ============ LOGIN PAGE ============ */
.login-page{
  min-height:100vh;display:grid;place-items:center;background:var(--bg);padding:24px;
}
.login-card{
  width:100%;max-width:390px;background:var(--surface);border:1px solid var(--border);
  border-radius:13px;box-shadow:0 10px 30px rgba(16,24,40,.07);padding:26px;
}
.login-brand{display:flex;align-items:center;gap:11px;margin-bottom:18px}
.login-brand .brand-mark{width:36px;height:36px;border-radius:11px}
.login-brand .brand-mark svg{width:20px;height:20px}
.login-brand h1{font-size:16px;font-weight:650;letter-spacing:-.015em;color:var(--text)}
.login-brand p{font-size:11.5px;color:var(--text-3);margin-top:2px}
.login-card .field{margin-bottom:13px}
.login-card .btn-primary{width:100%;justify-content:center;height:36px;font-size:13px}
.login-hint{
  margin-top:16px;padding-top:14px;border-top:1px solid var(--border-2);
  font-size:11px;color:var(--text-3);line-height:1.6;
}
.login-hint code{font-family:var(--mono);font-size:11px;color:var(--text-2)}

/* ============ MISC ============ */
.stack{display:flex;flex-direction:column;gap:14px}
.inline-stats{display:flex;gap:22px;padding:12px 16px;border-top:1px solid var(--border-2);flex-wrap:wrap}
.inline-stats>div{display:flex;flex-direction:column;gap:1px}
.inline-stats span{font-size:10.5px;color:var(--text-3)}
.inline-stats b{font-size:13px;font-weight:650;font-family:var(--mono);letter-spacing:-.02em}
.avatar.pick{
  background:#eef0f3;color:var(--text-2);font-weight:600;
}
tr.row-flagged{background:#fffaf3}
.mono-cell{font-family:var(--mono);font-size:11px;color:var(--text-3)}
.wrap-cell{white-space:normal;max-width:320px}

/* ============ CODE EDITOR ============ */
.code-box{
  font-family:var(--mono);font-size:12px;line-height:1.65;
  background:#fbfbfd;tab-size:2;white-space:pre;overflow-wrap:normal;
  overflow-x:auto;
}
.code-box:focus{background:#fff}

/* ============ COPY ROW ============ */
.copy-row{display:flex;gap:8px;align-items:stretch}
.copy-row input{
  flex:1;min-width:0;border:1px solid var(--border);border-radius:8px;
  background:#f7f8fa;padding:8px 10px;font-family:var(--mono);font-size:11.5px;
  color:var(--text);outline:none;
}
.copy-row input:focus{background:#fff;border-color:#c7cbf5;box-shadow:0 0 0 3px rgba(99,102,241,.1)}
.copy-row .btn-secondary{flex:none;height:auto}

/* ============ RESPONSIVE ============ */
@media (max-width:1180px){
  .kpis{grid-template-columns:repeat(2,minmax(0,1fr))}
  .row-a,.row-b{grid-template-columns:minmax(0,1fr)}
  .search{width:190px}
}
@media (max-width:860px){
  .app{grid-template-columns:1fr}
  .rail{display:none}
  .topbar{flex-wrap:wrap;height:auto;padding:10px 14px;gap:8px}
  .search{width:100%;margin-left:0;order:5}
  .content{padding:14px}
  .form-grid,.detail-list{grid-template-columns:minmax(0,1fr)}
}