:root {
  --bg: #0b0d12;
  --bg-2: #0e1118;
  --panel: #141821;
  --panel-2: #1a1f2b;
  --border: #242b38;
  --border-soft: #1d2430;
  --text: #e7ecf3;
  --text-dim: #8b95a5;
  --text-faint: #5b6472;
  --accent: #2f81f7;
  --accent-hover: #1f6fe0;
  --accent-soft: rgba(47, 129, 247, 0.14);
  --success: #2ea96f;
  --danger: #e5534b;
  --warn: #d9a62e;
  --radius: 12px;
  --radius-sm: 8px;
  --font: 'Segoe UI', system-ui, -apple-system, sans-serif;
  --mono: 'Cascadia Mono', 'Consolas', ui-monospace, monospace;
}

:root { color-scheme: dark; }

* { box-sizing: border-box; }

html, body {
  margin: 0;
  height: 100%;
  background: var(--bg);
  color: var(--text);
  font-family: var(--font);
  font-size: 14px;
  -webkit-font-smoothing: antialiased;
}

@media (pointer: fine) { html { overscroll-behavior: none; } }

:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }

button, .nav { touch-action: manipulation; -webkit-tap-highlight-color: transparent; }

a { color: var(--accent); }

button {
  font-family: inherit;
  cursor: pointer;
  border: 1px solid var(--border);
  background: var(--panel-2);
  color: var(--text);
  border-radius: var(--radius-sm);
  padding: 7px 14px;
  font-size: 13px;
  transition: background 0.15s, border-color 0.15s;
}
button:hover { border-color: var(--accent); color: var(--accent); }
button.primary { background: var(--accent); border-color: var(--accent); color: #fff; font-weight: 600; }
button.primary:hover { background: var(--accent-hover); color: #fff; }
button.danger:hover { border-color: var(--danger); color: var(--danger); }
button:disabled { opacity: 0.5; cursor: not-allowed; }

input, select {
  font-family: inherit;
  color: var(--text);
  background: var(--bg-2);
  border: 1px solid var(--border);
  border-radius: var(--radius-sm);
  padding: 8px 12px;
  font-size: 13.5px;
  outline: none;
}
input:focus, select:focus { border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-soft); }
label { color: var(--text-dim); font-size: 12.5px; }

/* ---------- login ---------- */
.login-wrap {
  height: 100vh;
  display: grid;
  place-items: center;
  padding: 20px;
  background:
    radial-gradient(ellipse 80% 60% at 50% -10%, rgba(47, 129, 247, 0.08), transparent 60%),
    repeating-linear-gradient(0deg, transparent 0 3px, rgba(255, 255, 255, 0.012) 3px 4px),
    var(--bg);
}
.login-stack {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 18px;
  width: min(560px, 100%);
}
.login-brand {
  display: flex;
  align-items: center;
  gap: 12px;
  font-size: 20px;
  font-weight: 700;
}
.login-brand .mark { width: 34px; height: 34px; flex: 0 0 34px; }
.login-brand .wordmark .w-suffix { font-weight: 500; }
.login-dl { align-self: flex-end; font-size: 11.5px; color: var(--text-faint); text-decoration: none; letter-spacing: 0.04em; }
.login-dl:hover { color: var(--accent); }
.login-term {
  width: min(560px, 100%);
  background: #0c0f15;
  border: 1px solid var(--border);
  border-radius: 10px;
  overflow: hidden;
  box-shadow: 0 24px 64px rgba(0, 0, 0, 0.55), 0 0 0 1px rgba(47, 129, 247, 0.05);
  font-family: var(--mono);
}
.term-head {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 9px 14px;
  background: var(--bg-2);
  border-bottom: 1px solid var(--border-soft);
}
.term-dots { display: flex; gap: 6px; }
.term-dots i {
  width: 10px; height: 10px; border-radius: 50%;
  background: var(--border);
}
.term-dots i:nth-child(1) { background: #e5534b; }
.term-dots i:nth-child(2) { background: #d9a62e; }
.term-dots i:nth-child(3) { background: #2ea96f; }
.term-title { font-size: 12px; color: var(--text-dim); letter-spacing: 0.3px; }
.term-tty { margin-left: auto; font-size: 11px; color: var(--text-faint); }
.term-body {
  padding: 20px 22px 22px;
  display: flex;
  flex-direction: column;
  gap: 10px;
  font-size: 13px;
}
.term-line { white-space: pre-wrap; line-height: 1.5; }
.term-line.dim { color: var(--text-faint); }
.term-line.ok { color: var(--success); }
.term-line.warn { color: var(--warn); }
.term-gap { height: 8px; }
.term-field {
  display: flex;
  align-items: center;
  gap: 10px;
}
.term-prompt {
  flex: 0 0 150px;
  color: var(--accent);
  font-size: 13px;
  text-align: right;
  user-select: none;
}
.term-input {
  flex: 1;
  font-family: var(--mono) !important;
  font-size: 13px !important;
  background: var(--bg-2);
  letter-spacing: 0.4px;
}
.term-err {
  color: var(--danger);
  font-size: 12.5px;
  min-height: 18px;
  font-family: var(--mono);
}
.term-btn {
  align-self: flex-start;
  margin-left: 160px; /* aligns under the input column (150px prompt + 10px gap) */
  font-family: var(--mono);
  font-size: 13px;
  letter-spacing: 1px;
  padding: 8px 18px;
  display: inline-flex;
  align-items: center;
  gap: 2px;
  background: transparent;
  border: 1px solid var(--accent);
  color: var(--accent);
  transition: background 0.15s, border-color 0.15s, color 0.15s, box-shadow 0.2s;
}
.term-btn:hover {
  background: var(--accent-soft);
  color: #fff;
  box-shadow: 0 0 18px rgba(47, 129, 247, 0.25), inset 0 0 12px rgba(47, 129, 247, 0.1);
}
.term-btn:active { transform: translateY(1px); }
.term-btn:disabled { opacity: 0.85; cursor: wait; }
.term-btn-key {
  color: var(--text-faint);
  margin-right: 8px;
  font-size: 12px;
}
.term-btn:hover .term-btn-key { color: var(--accent); }
.term-btn-br { color: var(--text-faint); }
.term-btn:hover .term-btn-br { color: var(--accent); }
.term-btn-dots { display: none; margin-left: 4px; letter-spacing: 2px; }
.term-btn.busy { color: var(--warn); border-color: var(--warn); }
.term-btn.busy .term-btn-br, .term-btn.busy .term-btn-key { color: var(--warn); }
.term-btn.busy .term-btn-dots { display: inline; animation: term-blink 0.9s steps(1) infinite; }
.term-btn.busy .term-cursor { background: var(--warn); }
.term-btn.fail { border-color: var(--danger); color: var(--danger); }
.term-btn.fail .term-btn-br, .term-btn.fail .term-btn-key { color: var(--danger); }
.term-cursor {
  display: inline-block;
  width: 8px; height: 15px;
  margin-left: 10px;
  background: var(--accent);
  animation: term-blink 1.1s steps(1) infinite;
}
@keyframes term-blink { 50% { opacity: 0; } }
.term-foot { margin-top: 6px; font-size: 11px; }
.logo .mark svg { display: block; width: 100%; height: 100%; }
.wordmark { font-weight: 700; }
.wordmark .w-accent { color: #2dd4bf; }
.wordmark .w-suffix { color: var(--text-faint); font-weight: 500; }

/* ---------- app shell ---------- */
.shell { display: flex; height: 100vh; position: relative; }

.sidebar {
  width: 216px;
  flex: 0 0 216px;
  background: #0c0f15;
  border-right: 1px solid var(--border-soft);
  display: flex;
  flex-direction: column;
  padding: 18px 12px;
  gap: 4px;
}
.sidebar .logo {
  display: flex; align-items: center; gap: 10px;
  font-weight: 700; font-size: 15px;
  padding: 0 10px 18px;
}
.sidebar .logo .mark { width: 26px; height: 26px; flex: 0 0 26px; }
.sidebar .nav {
  display: flex; align-items: center; gap: 10px;
  width: 100%;
  padding: 9px 12px;
  border-radius: 6px;
  color: var(--text-dim);
  cursor: pointer;
  border: 1px solid transparent;
  background: none;
  font-family: var(--mono);
  font-size: 12.5px;
  letter-spacing: 0.4px;
  text-align: left;
}
.sidebar .nav::before { content: '>'; color: var(--text-faint); transition: color 0.15s; }
.sidebar .nav:hover { background: var(--panel-2); color: var(--text); }
.sidebar .nav:hover::before { color: var(--accent); }
.sidebar .nav.active {
  background: var(--accent-soft);
  color: var(--accent);
  border-color: rgba(47,129,247,0.25);
  border-left: 2px solid var(--accent);
}
.sidebar .nav.active::before { color: var(--accent); }
.sidebar .nav .icon {
  width: 26px;
  text-align: left;
  font-family: var(--mono);
  font-size: 10.5px;
  color: var(--text-faint);
}
.sidebar .nav .icon::before { content: '['; }
.sidebar .nav .icon::after { content: ']'; }
.sidebar .nav.active .icon { color: var(--accent); }
.sidebar .nav.active::after { content: '▮'; margin-left: auto; font-size: 10px; color: var(--accent); }
.sidebar .side-nav { flex: 1; min-height: 0; overflow-y: auto; display: flex; flex-direction: column; gap: 4px; }
.sidebar .side-group { display: flex; flex-direction: column; gap: 4px; }
.sidebar .side-group + .side-group { margin-top: 10px; }
.sidebar .side-label {
  font-family: var(--mono); font-size: 9.5px; font-weight: 600;
  letter-spacing: 0.14em; text-transform: uppercase;
  color: var(--text-faint); padding: 4px 12px 2px;
}
.sidebar .side-foot {
  flex: 0 0 auto; display: flex; flex-direction: column; gap: 4px;
  border-top: 1px solid var(--border-soft); margin-top: 10px; padding-top: 10px;
}
.sidebar .side-op { font-family: var(--mono); font-size: 11.5px; color: var(--success); padding: 6px 12px 0; }

.main {
  flex: 1;
  overflow: auto;
  padding: 26px 30px;
  display: flex;
  flex-direction: column;
  gap: 18px;
  background:
    radial-gradient(ellipse 80% 60% at 50% -10%, rgba(47, 129, 247, 0.06), transparent 60%),
    repeating-linear-gradient(0deg, transparent 0 3px, rgba(255, 255, 255, 0.008) 3px 4px),
    var(--bg);
}
.main h1 {
  margin: 0;
  font-family: var(--mono);
  font-size: 19px;
  font-weight: 600;
  letter-spacing: 0.5px;
  text-wrap: balance;
}
.main h1::before { content: '> '; color: var(--accent); font-weight: 400; }
.main .sub { color: var(--text-dim); font-size: 12.5px; margin-top: 2px; font-family: var(--mono); }

/* console-flavoured chrome inside the main pane */
.main button, .main select {
  font-family: var(--mono);
  font-size: 12px;
  letter-spacing: 0.5px;
}
.main button { border-radius: 6px; }
.live-pill { font-family: var(--mono); border-radius: 6px; }
.live-text { text-transform: uppercase; font-size: 11px; letter-spacing: 1px; }

/* ---------- overview ---------- */
.ov-header {
  display: flex;
  justify-content: space-between;
  align-items: flex-end;
  gap: 16px;
  flex-wrap: wrap;
}

.live-pill {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  padding: 6px 13px;
  border: 1px solid var(--border);
  border-radius: 999px;
  background: var(--panel);
  font-size: 12px;
  color: var(--text-dim);
  white-space: nowrap;
}
.live-dot {
  width: 7px;
  height: 7px;
  border-radius: 50%;
  background: var(--success);
  animation: live-pulse 2s ease-out infinite;
}
.live-dot.idle { background: var(--text-faint); animation: none; }
.live-dot.warn { background: var(--warn); animation: none; }
.live-text { font-weight: 600; color: var(--text); }
.live-sep { width: 1px; height: 12px; background: var(--border); }
.live-updated { font-variant-numeric: tabular-nums; }

@keyframes live-pulse {
  0% { box-shadow: 0 0 0 0 rgba(46, 169, 111, 0.45); }
  70% { box-shadow: 0 0 0 7px rgba(46, 169, 111, 0); }
  100% { box-shadow: 0 0 0 0 rgba(46, 169, 111, 0); }
}
@media (prefers-reduced-motion: reduce) {
  .live-dot { animation: none; }
}

.stats {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(170px, 1fr));
  gap: 12px;
}
/* Compact card: icon on the left, number + label beside it, caption below. */
.stat {
  position: relative;
  display: grid;
  grid-template-columns: auto minmax(0, 1fr);
  grid-template-areas: "icon value" "icon label" "cap cap" "bar bar";
  column-gap: 12px;
  row-gap: 2px;
  align-items: center;
  padding: 14px 16px;
  background: linear-gradient(160deg, var(--panel), rgba(20, 24, 33, 0.55));
  border: 1px solid var(--border);
  border-radius: var(--radius);
  text-align: left;
  transition: transform 0.15s, border-color 0.15s, box-shadow 0.15s;
}
.stat:hover {
  transform: translateY(-2px);
  border-color: var(--accent);
  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.3);
  color: var(--text);
}
.stat-top { grid-area: icon; display: flex; align-items: center; }
.stat-value { grid-area: value; }
.stat-label { grid-area: label; }
.stat-cap { grid-area: cap; }
.stat-bar { grid-area: bar; }
.stat-arrow { position: absolute; top: 12px; right: 12px; }
.stat-icon {
  width: 34px; height: 34px;
  border-radius: 9px;
  display: grid; place-items: center;
  background: var(--accent-soft);
  color: var(--accent);
}
.stat-icon svg { width: 18px; height: 18px; }
.stat.ok .stat-icon { background: rgba(46, 169, 111, 0.14); color: var(--success); }
.stat.warn .stat-icon { background: rgba(217, 166, 46, 0.14); color: var(--warn); }
.stat.neutral .stat-icon { background: rgba(91, 100, 114, 0.16); color: var(--text-dim); }
.stat-arrow { color: var(--text-faint); opacity: 0; transition: opacity 0.15s, transform 0.15s; }
.stat-arrow svg { width: 16px; height: 16px; display: block; }
.stat:hover .stat-arrow, .stat:focus-visible .stat-arrow { opacity: 1; transform: translateX(2px); }
.stat-value {
  font-family: var(--mono);
  font-variant-numeric: tabular-nums;
  font-size: 22px;
  font-weight: 700;
  line-height: 1.1;
}
.stat.ok .stat-value { color: var(--success); }
.stat.warn .stat-value { color: var(--warn); }
.stat.danger .stat-icon { background: rgba(229, 83, 75, 0.14); color: var(--danger); }
.stat.danger .stat-value { color: var(--danger); }
.stat-label { color: var(--text-dim); font-size: 12px; text-transform: uppercase; letter-spacing: 0.6px; }
.stat-cap { color: var(--text-faint); font-size: 12px; margin-top: 6px; }
.stat-bar {
  height: 4px;
  border-radius: 999px;
  background: var(--panel-2);
  margin-top: 10px;
  overflow: hidden;
}
.stat-bar-fill {
  display: block;
  height: 100%;
  border-radius: 999px;
  background: var(--success);
  transition: width 0.4s ease;
}
.stat.warn .stat-bar-fill { background: var(--warn); }
.stat.accent .stat-bar-fill { background: var(--accent); }

.ov-grid {
  display: grid;
  grid-template-columns: minmax(0, 1.7fr) minmax(300px, 1fr);
  gap: 14px;
  align-items: start;
}
.ov-side, .ov-maincol { display: flex; flex-direction: column; gap: 14px; min-width: 0; }

.count-badge {
  display: inline-block;
  min-width: 20px;
  padding: 1px 7px;
  border-radius: 999px;
  background: var(--accent-soft);
  color: var(--accent);
  font-family: var(--mono);
  font-size: 11px;
  font-weight: 700;
  text-align: center;
  vertical-align: 1px;
}
.attention .count-badge { background: rgba(217, 166, 46, 0.16); color: var(--warn); }

.sess-pair { display: flex; align-items: center; gap: 7px; }
.sess-arrow { display: inline-flex; color: var(--text-faint); flex: 0 0 auto; }
.sess-arrow svg { width: 12px; height: 12px; }
.feed-actor { color: var(--text-dim); }
.feed-target { color: var(--text-faint); }

.ov-empty-sm { color: var(--text-faint); font-size: 12.5px; padding: 8px 2px; }

/* Active-session cards */
.sess-grid {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(320px, 1fr));
  gap: 14px;
  padding: 2px;
}
.sess-grid-empty { grid-column: 1 / -1; }

.sess-card {
  display: flex;
  flex-direction: column;
  gap: 13px;
  padding: 16px;
  border-radius: 14px;
  border: 1px solid rgba(47, 129, 247, 0.28);
  background:
    radial-gradient(ellipse at top right, rgba(47, 129, 247, 0.09), transparent 55%),
    var(--panel-2);
  box-shadow: 0 10px 28px rgba(0, 0, 0, 0.22);
}

.sess-card-head {
  display: flex;
  align-items: center;
  gap: 11px;
  min-width: 0;
}

.sess-live-icon { animation: live-pulse 2s ease-out infinite; }

.sess-card-title {
  flex: 1;
  min-width: 0;
  font-size: 14px;
  font-weight: 600;
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
}
.sess-card-title .sess-pair { overflow: hidden; }
.sess-card-title .sess-pair > span { overflow: hidden; text-overflow: ellipsis; }

.sess-card-meta {
  display: flex;
  align-items: center;
  gap: 8px;
  font-size: 12px;
  color: var(--text-dim);
  min-width: 0;
}
.sess-card-meta .mono { font-size: 11.5px; }
.sess-card-sep {
  width: 3px;
  height: 3px;
  border-radius: 50%;
  background: var(--text-faint);
  flex: 0 0 auto;
}

.sess-card-foot {
  display: flex;
  align-items: flex-end;
  justify-content: space-between;
  gap: 12px;
  padding-top: 13px;
  border-top: 1px solid var(--border-soft);
}

.sess-dur-block { display: flex; flex-direction: column; gap: 3px; }
.sess-dur-label {
  font-size: 10.5px;
  font-weight: 700;
  text-transform: uppercase;
  letter-spacing: 0.8px;
  color: var(--text-faint);
}
.sess-dur-big {
  font-family: var(--mono);
  font-variant-numeric: tabular-nums;
  font-size: 22px;
  font-weight: 600;
  color: var(--text);
  line-height: 1;
}

.sess-dur {
  font-family: var(--mono);
  font-variant-numeric: tabular-nums;
  font-size: 13px;
  min-width: 56px;
  text-align: right;
}
.sess-hist-right { display: flex; align-items: center; gap: 14px; }
.hist-note { text-align: center; color: var(--text-faint); font-size: 12px; padding: 12px 4px 2px; }

@media (prefers-reduced-motion: reduce) {
  .sess-live-icon { animation: none; }
}

/* ---------- audit ---------- */
.audit-cards {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(170px, 1fr));
  gap: 12px;
}
.audit-stat {
  display: flex;
  flex-direction: column;
  align-items: flex-start;
  gap: 3px;
  padding: 14px 16px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: 8px;
  text-align: left;
  cursor: pointer;
  transition: border-color 0.15s, box-shadow 0.15s;
}
.audit-stat:hover { border-color: var(--accent); box-shadow: 0 6px 20px rgba(0,0,0,0.3); }
.audit-stat-num {
  font-family: var(--mono);
  font-size: 24px;
  font-weight: 700;
  font-variant-numeric: tabular-nums;
  line-height: 1.1;
}
.audit-stat.ok .audit-stat-num { color: var(--success); }
.audit-stat.warn .audit-stat-num { color: var(--warn); }
.audit-stat.danger .audit-stat-num { color: var(--danger); }
.audit-stat.accent .audit-stat-num { color: var(--accent); }
.audit-stat-label {
  font-family: var(--mono);
  font-size: 10.5px;
  text-transform: uppercase;
  letter-spacing: 1px;
  color: var(--text-dim);
}
.audit-stat-note {
  font-family: var(--mono);
  font-size: 10px;
  color: var(--text-faint);
}
.audit-entry { border-bottom: 1px solid var(--border-soft); }
.audit-entry:last-child { border-bottom: none; }
.audit-item {
  width: 100%;
  background: none;
  border: none;
  border-radius: 0;
  padding: 10px 4px;
  font-family: var(--font);
  font-size: 13px;
  letter-spacing: 0;
  color: var(--text);
  cursor: pointer;
  text-align: left;
  border-left: 2px solid transparent;
}
.audit-item:hover { background: rgba(255,255,255,0.02); color: var(--text); }
.audit-item.tone-danger { border-left-color: var(--danger); }
.audit-item.tone-warn { border-left-color: var(--warn); }
.audit-caret {
  color: var(--text-faint);
  font-size: 11px;
  transition: transform 0.15s;
  align-self: center;
}
.audit-item.open .audit-caret { transform: rotate(90deg); color: var(--accent); }
/* Expandable enterprise rows (risk views) — the audit-line/row classes
 * carry no layout of their own; without this rule the inline spans run
 * together into unreadable text. */
.audit-row { cursor: pointer; }
.audit-row:hover .audit-line { background: rgba(255,255,255,0.02); }
.audit-line {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 4px 14px;
  padding: 8px 4px;
  font-size: 13px;
}
.audit-time { color: var(--text-faint); font-family: var(--mono); font-size: 11.5px; }
.audit-actor { color: var(--text-dim); }
.audit-act { color: var(--text); }
.audit-detail {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
  gap: 4px 18px;
  padding: 10px 14px 14px 46px;
  background: var(--bg-2);
  border-top: 1px dashed var(--border-soft);
  font-family: var(--mono);
  font-size: 11.5px;
}
.audit-detail[hidden] { display: none; }
.audit-kv { display: flex; gap: 8px; min-width: 0; }
.audit-k { color: var(--text-faint); flex: 0 0 auto; }
.audit-k::after { content: ':'; }
.audit-v { color: var(--text-dim); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.audit-tools {
  display: flex;
  align-items: center;
  gap: 12px;
  flex-wrap: wrap;
  margin-bottom: 8px;
}
.audit-pager {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 12px;
  flex-wrap: wrap;
  padding: 12px 4px 2px;
}
.audit-pager .hist-note { padding: 0; text-align: left; }
.pager-btn {
  padding: 7px 14px;
  border-radius: 999px;
  border: 1px solid var(--border);
  background: var(--bg-2);
  color: var(--text-dim);
  font-size: 12.5px;
}
.pager-btn:hover { color: var(--text); border-color: var(--accent); }
.chip-row { display: flex; flex-wrap: wrap; gap: 8px; }
.chip {
  display: inline-flex;
  align-items: center;
  gap: 7px;
  padding: 6px 13px;
  border-radius: 999px;
  border: 1px solid var(--border);
  background: var(--bg-2);
  color: var(--text-dim);
  font-size: 12.5px;
  transition: border-color 0.15s, background 0.15s, color 0.15s;
}
.chip:hover { border-color: var(--accent); color: var(--text); }
.chip.on {
  background: var(--accent-soft);
  border-color: rgba(47, 129, 247, 0.35);
  color: var(--accent);
  font-weight: 600;
}
.chip-count { font-family: var(--mono); font-size: 11px; opacity: 0.8; }
.audit-search-wrap { flex: 0 1 250px; min-width: 160px; margin-left: auto; }

/* SEC-003 deception view */
.chip.sev-info, .chip.sev-low { border-color: var(--border-soft); color: var(--text-dim); }
.chip.sev-medium { border-color: var(--warn); color: var(--warn); }
.chip.sev-high, .chip.sev-critical { border-color: var(--danger); color: var(--danger); }
.chip.ok { border-color: var(--success); color: var(--success); }
.chip.warn { border-color: var(--warn); color: var(--warn); }
.chip.danger { border-color: var(--danger); color: var(--danger); }
.sec-form { display: grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); gap: 0 22px; padding: 0 14px 6px; }
.sec-form .field { max-width: none; margin-bottom: 10px; }
.sec-form textarea { font-family: inherit; color: var(--text); background: var(--bg-2); border: 1px solid var(--border); border-radius: var(--radius-sm); padding: 8px 12px; font-size: 13.5px; outline: none; resize: vertical; }
.sec-actions { display: flex; gap: 10px; padding: 4px 14px 16px; }
.sec-check { display: flex; align-items: center; gap: 8px; color: var(--text); font-size: 13px; }
.sec-check input { width: auto; }
.feed-tag {
  font-family: var(--mono);
  font-size: 10.5px;
  padding: 3px 8px;
  border-radius: 6px;
  background: var(--bg-2);
  border: 1px solid var(--border-soft);
  color: var(--text-faint);
  white-space: nowrap;
}

.main:not(.ov-entered) > .ov-panel { animation: ov-in 0.3s ease both; }
.main:not(.ov-entered) > .ov-panel:nth-of-type(2) { animation-delay: 0.06s; }

.policy-chips { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 14px; }
.policy-chip {
  display: inline-flex;
  align-items: center;
  gap: 7px;
  font-size: 11.5px;
  padding: 4px 10px;
  border-radius: 999px;
  border: 1px solid var(--border);
  color: var(--text-faint);
}
.policy-chip-dot { width: 6px; height: 6px; border-radius: 50%; background: var(--text-faint); }
.policy-chip.on { color: var(--accent); border-color: rgba(47, 129, 247, 0.3); background: var(--accent-soft); }
.policy-chip.on .policy-chip-dot { background: var(--accent); }
.bw-rates { display: flex; gap: 10px; margin-bottom: 12px; }
.bw-rate { flex: 1; min-width: 0; }
.bw-num { display: block; font-size: 19px; font-weight: 700; color: var(--text); font-variant-numeric: tabular-nums; letter-spacing: -0.3px; }
.bw-num.accent { color: var(--accent); }
.bw-num.dim { color: var(--text-dim); }
.bw-lbl { display: block; font-size: 11px; color: var(--text-faint); margin-top: 2px; }
.bw-spark { margin: 2px 0 10px; }
.bw-spark .spark { display: block; width: 100%; height: 34px; }
.spark-line { fill: none; stroke: var(--accent); stroke-width: 1.5; stroke-linejoin: round; stroke-linecap: round; vector-effect: non-scaling-stroke; }
.spark-area { fill: var(--accent-soft); }
.bw-note { font-size: 11.5px; color: var(--text-faint); line-height: 1.4; }

@keyframes ov-in {
  from { opacity: 0; transform: translateY(6px); }
  to { opacity: 1; transform: none; }
}
.main:not(.ov-entered) .ov-header,
.main:not(.ov-entered) #ov-attention > *,
.main:not(.ov-entered) .ov-grid > *,
.main:not(.ov-entered) .stats .stat { animation: ov-in 0.3s ease both; }
.main:not(.ov-entered) .stats .stat:nth-child(2) { animation-delay: 0.04s; }
.main:not(.ov-entered) .stats .stat:nth-child(3) { animation-delay: 0.08s; }
.main:not(.ov-entered) .stats .stat:nth-child(4) { animation-delay: 0.12s; }
.main:not(.ov-entered) .stats .stat:nth-child(5) { animation-delay: 0.16s; }
.main:not(.ov-entered) .ov-grid > *:nth-child(2) { animation-delay: 0.06s; }
@media (prefers-reduced-motion: reduce) {
  .ov-header, #ov-attention > *, .ov-grid > *, .stats .stat { animation: none; }
}
.panel.ov-panel { padding: 18px; }
.ov-panel-head {
  display: flex;
  justify-content: space-between;
  align-items: flex-start;
  gap: 12px;
  margin-bottom: 14px;
}
.ov-panel-title {
  font-family: var(--mono);
  font-weight: 600;
  font-size: 12px;
  text-transform: uppercase;
  letter-spacing: 1.2px;
  color: var(--text);
}
.ov-panel-title::before { content: '» '; color: var(--accent); }
.ov-panel-sub { color: var(--text-faint); font-size: 11.5px; margin-top: 3px; font-family: var(--mono); }

.ghost-link {
  display: inline-flex;
  align-items: center;
  gap: 5px;
  background: none;
  border: none;
  color: var(--accent);
  padding: 4px 6px;
  font-size: 12.5px;
  font-weight: 600;
  border-radius: 6px;
  white-space: nowrap;
}
.ghost-link:hover { color: var(--accent); background: var(--accent-soft); border-color: transparent; }
.inline-icon svg { width: 14px; height: 14px; display: block; }

.feed { display: flex; flex-direction: column; }
.feed-item {
  display: flex;
  align-items: center;
  gap: 12px;
  padding: 10px 4px;
  border-bottom: 1px solid var(--border-soft);
}
.feed-item:last-child { border-bottom: none; }
.feed-icon {
  flex: 0 0 auto;
  width: 30px; height: 30px;
  border-radius: 8px;
  display: grid; place-items: center;
  background: rgba(91, 100, 114, 0.16);
  color: var(--text-dim);
}
.feed-icon svg { width: 15px; height: 15px; }
.feed-icon.accent { background: var(--accent-soft); color: var(--accent); }
.feed-icon.ok { background: rgba(46, 169, 111, 0.14); color: var(--success); }
.feed-icon.warn { background: rgba(217, 166, 46, 0.14); color: var(--warn); }
.feed-icon.danger { background: rgba(229, 83, 75, 0.14); color: var(--danger); }
.feed-body { flex: 1; min-width: 0; }
.feed-title { font-size: 13px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
.feed-meta { color: var(--text-faint); font-size: 12px; margin-top: 1px; }
.feed-time { color: var(--text-faint); font-size: 12px; white-space: nowrap; font-variant-numeric: tabular-nums; }

.panel.attention {
  border-color: rgba(217, 166, 46, 0.35);
  background: linear-gradient(160deg, rgba(217, 166, 46, 0.07), var(--panel) 45%);
}
.attention-title { display: flex; align-items: center; gap: 12px; }
.attention-list { display: flex; flex-direction: column; }
.attention-row {
  display: flex;
  align-items: center;
  gap: 12px;
  padding: 10px 4px;
  border-top: 1px solid var(--border-soft);
}
.attention-body { flex: 1; min-width: 0; }
.attention-name { font-size: 13px; font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
.attention-meta { color: var(--text-faint); font-size: 12px; margin-top: 1px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
.attention-more { align-self: flex-start; margin-top: 8px; }

.fleet-bar {
  display: flex;
  height: 8px;
  border-radius: 999px;
  overflow: hidden;
  background: var(--panel-2);
  margin-bottom: 16px;
}
.fleet-seg { min-width: 3px; }
.fleet-seg.ok { background: var(--success); }
.fleet-seg.warn { background: var(--warn); }
.fleet-seg.neutral { background: #3a4356; }
.fleet-seg.danger { background: var(--danger); }
.fleet-legend { display: flex; flex-direction: column; }
.fleet-row {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 7px 2px;
  font-size: 13px;
}
.fleet-dot { width: 8px; height: 8px; border-radius: 50%; flex: 0 0 auto; }
.fleet-dot.ok { background: var(--success); }
.fleet-dot.warn { background: var(--warn); }
.fleet-dot.neutral { background: #3a4356; }
.fleet-dot.danger { background: var(--danger); }
.fleet-label { color: var(--text-dim); flex: 1; min-width: 0; }
.fleet-count { font-family: var(--mono); font-variant-numeric: tabular-nums; font-size: 12.5px; }
.fleet-foot { border-top: 1px solid var(--border-soft); margin-top: 8px; padding-top: 8px; }
.fleet-foot .feed-icon { width: 24px; height: 24px; border-radius: 6px; }
.fleet-foot .feed-icon svg { width: 13px; height: 13px; }

@media (max-width: 980px) {
  .ov-grid { grid-template-columns: minmax(0, 1fr); }
}

/* ---------- table ---------- */
.table-wrap { background: var(--panel); border: 1px solid var(--border); border-radius: var(--radius); overflow: auto; }
table { width: 100%; border-collapse: collapse; font-size: 13px; }
th {
  text-align: left; padding: 11px 14px;
  color: var(--text-dim); font-weight: 600;
  font-family: var(--mono);
  font-size: 10.5px; text-transform: uppercase; letter-spacing: 1px;
  border-bottom: 1px solid var(--border);
  white-space: nowrap;
}
td { padding: 10px 14px; border-bottom: 1px solid var(--border-soft); vertical-align: middle; }
tr:last-child td { border-bottom: none; }
tr:hover td { background: rgba(255,255,255,0.015); }
.mono { font-family: var(--mono); letter-spacing: 0.5px; }
.dim { color: var(--text-faint); }
.small { font-size: 12px; }
.actions { display: flex; gap: 6px; flex-wrap: wrap; }
.actions button { padding: 4px 10px; font-size: 12px; }

.badge {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  padding: 3px 8px;
  border-radius: 4px;
  font-family: var(--mono);
  font-size: 10.5px;
  font-weight: 600;
  letter-spacing: 0.6px;
  text-transform: uppercase;
  white-space: nowrap;
}
.badge::before { content: '['; opacity: 0.55; }
.badge::after { content: ']'; opacity: 0.55; }
.badge-dot { width: 6px; height: 6px; border-radius: 50%; background: currentColor; }
.badge.online .badge-dot { box-shadow: 0 0 0 3px rgba(46, 169, 111, 0.18); }
.badge.pending .badge-dot { box-shadow: 0 0 0 3px rgba(217, 166, 46, 0.18); }
.badge.online { background: rgba(46,169,111,0.15); color: var(--success); }
.badge.offline { background: rgba(91,100,114,0.18); color: var(--text-dim); }
.badge.pending { background: rgba(217,166,46,0.15); color: var(--warn); }
.badge.blocked { background: rgba(229,83,75,0.15); color: var(--danger); }
.badge.active { background: rgba(46,169,111,0.15); color: var(--success); }
.badge.ended { background: rgba(91,100,114,0.18); color: var(--text-dim); }

/* ---------- forms ---------- */
.panel {
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 20px;
  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.02);
}
.field { display: flex; flex-direction: column; gap: 6px; margin-bottom: 14px; max-width: 420px; }
.toggle-row { display: flex; align-items: center; gap: 13px; padding: 14px 0; border-bottom: 1px solid var(--border-soft); cursor: pointer; }
.toggle-row:last-child { border-bottom: none; }
.toggle-row:has(+ .toggle-note) { border-bottom: none; }
.toggle-row .label { flex: 1; min-width: 0; }
.toggle-row .label .t { font-size: 13.5px; color: var(--text); display: flex; align-items: center; gap: 7px; }
.toggle-row .label .s { font-size: 12px; color: var(--text-faint); margin-top: 2px; }
.toggle-row.input-row { cursor: default; }
/* vertical form-field: control sits inside the label column below the
   description so wide controls (textarea, selects) can't crush the label */
.toggle-row.field-stack { align-items: flex-start; }
.toggle-row.field-stack .label > .cidr-input,
.toggle-row.field-stack .label > .input { display: block; width: 100%; margin-top: 8px; }
.enf-tag {
  font-size: 9.5px;
  font-weight: 700;
  letter-spacing: 0.5px;
  text-transform: uppercase;
  padding: 1.5px 7px;
  border-radius: 999px;
  background: var(--accent-soft);
  color: var(--accent);
}
.policy-num, .policy-text {
  width: 110px;
  height: 34px;
  padding: 0 10px;
  font-size: 13px;
  font-variant-numeric: tabular-nums;
}
.policy-num { text-align: right; }
.policy-text { width: 130px; }
.policy-text.mono { font-family: var(--mono); }
.toggle-note {
  display: flex;
  align-items: center;
  gap: 8px;
  flex-wrap: wrap;
  margin: -6px 0 4px 43px;
  padding-bottom: 12px;
  border-bottom: 1px solid var(--border-soft);
  color: var(--warn);
  font-size: 12px;
}
.toggle-note .ghost-link { font-size: 12px; padding: 2px 6px; }
.toggle-note[hidden] { display: none; }

.policy-panel { max-width: 680px; }
.policy-banner {
  max-width: 1760px;
  margin-bottom: 0;
}
.policy-foot {
  display: flex;
  align-items: center;
  gap: 12px;
}
.dirty-note { color: var(--warn); font-size: 12px; }
.dirty-note[hidden] { display: none; }

/* Security & access: settings left (~65%), effective-policy summary right (~35%) */
.policy-main { display: grid; gap: 14px; align-content: start; min-width: 0; }
.policy-grid {
  display: grid;
  grid-template-columns: minmax(0, 1.85fr) minmax(280px, 1fr);
  gap: 14px;
  max-width: 1760px;
  align-items: start;
}
.policy-grid .policy-panel { max-width: none; }
.policy-side { position: sticky; top: 14px; display: grid; gap: 14px; }

/* open-access choice cards */
.choice-group { display: grid; gap: 8px; padding: 14px 0; border-bottom: 1px solid var(--border-soft); }
.choice-title { font-size: 13.5px; color: var(--text); font-weight: 600; }
.choice {
  display: flex; gap: 10px; align-items: flex-start;
  padding: 9px 12px; border: 1px solid var(--border); border-radius: 8px;
  cursor: pointer; transition: border-color .15s, background .15s;
}
.choice input { margin-top: 3px; accent-color: var(--accent); }
.choice.sel { border-color: var(--accent); background: var(--accent-soft); }
.choice .ct { font-size: 13px; color: var(--text); }
.choice .cs { font-size: 12px; color: var(--text-faint); margin-top: 1px; }

/* dependent setting shown but inert */
.toggle-row.row-disabled { opacity: .55; }
.toggle-row.row-disabled .switch input { cursor: not-allowed; }
.toggle-note.info { color: var(--text-faint); }

/* contextual technical detail, tucked under the row */
.hint-details { margin: -4px 0 10px 43px; font-size: 12px; color: var(--text-faint); }
.hint-details.flush { margin-left: 0; }
.hint-details summary { cursor: pointer; font-size: 11.5px; color: var(--text-dim); width: fit-content; }
.hint-details .s { padding-top: 4px; }

/* effective-policy summary */
.eff-list { display: grid; gap: 7px; padding: 4px 0 6px; }
.eff-row { display: grid; grid-template-columns: 105px 1fr; gap: 8px; font-size: 12px; align-items: baseline; }
.eff-row .ek { color: var(--text-faint); }
.eff-row .ev { color: var(--text); word-break: break-word; }
.eff-row .eff-next { color: var(--warn); }
.warn-block { border-top: 1px solid var(--border-soft); padding-top: 10px; margin-top: 4px; }
.warn-block[hidden] { display: none; }
.warn-list { display: grid; gap: 8px; }
.warn-item { display: flex; gap: 7px; align-items: flex-start; font-size: 12px; color: var(--warn); }
.warn-item .feed-icon { width: 20px; height: 20px; flex: 0 0 20px; }
.warn-item .feed-icon svg { width: 12px; height: 12px; }
.policy-side .eff-row .ghost-link { font-size: 12px; padding: 0; }

@media (max-width: 980px) {
  .policy-grid { grid-template-columns: 1fr; }
  .policy-side { position: static; }
}

/* ---------- permissions ---------- */
.perm-banner { max-width: 1760px; margin-bottom: 0; }
.perm-form {
  display: flex;
  align-items: center;
  gap: 10px;
  flex-wrap: wrap;
  padding-bottom: 14px;
  margin-bottom: 4px;
  border-bottom: 1px solid var(--border-soft);
}
.perm-select { flex: 1; min-width: 200px; }
.perm-arrow { color: var(--text-faint); display: inline-flex; flex: 0 0 auto; }
.perm-arrow svg { width: 16px; height: 16px; }
.perm-hint { min-height: 16px; font-size: 12px; color: var(--warn); margin-bottom: 4px; }

/* permissions: rules list wide, add-rule form in the side column */
.account-grid.perm-grid { grid-template-columns: minmax(0, 1.85fr) minmax(300px, 1fr); }
.perm-grid .perm-form { flex-direction: column; align-items: stretch; border-bottom: none; padding-bottom: 0; margin-bottom: 0; }
.perm-grid .perm-select { flex: none; }
.perm-grid .perm-arrow { align-self: center; }
.perm-grid .perm-arrow svg { transform: rotate(90deg); }
@media (max-width: 980px) {
  .account-grid.perm-grid { grid-template-columns: 1fr; }
}

/* permissions: grouped viewer detail */
.perm-groups { display: flex; flex-direction: column; }
.perm-group { border-bottom: 1px solid var(--border-soft); padding-bottom: 4px; margin-bottom: 8px; }
.perm-group:last-child { border-bottom: none; margin-bottom: 0; }
.perm-viewer-head {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 10px 4px 8px;
}
.perm-viewer-id { flex: 1; min-width: 0; }
.perm-viewer-name { font-weight: 600; font-size: 13.5px; }
.perm-viewer-count { color: var(--text-faint); font-size: 12px; white-space: nowrap; }
.perm-rule { padding-left: 34px; }
.perm-rule .feed-body { flex: 1; min-width: 0; }
.perm-denied { color: var(--warn); font-weight: 600; }
.perm-select.hidden { display: none; }
.perm-stale-tag {
  margin-left: 8px;
  padding: 0 6px;
  border-radius: 999px;
  font-size: 10px;
  font-weight: 700;
  letter-spacing: 0.04em;
  text-transform: uppercase;
  color: var(--warn);
  border: 1px solid rgba(217, 166, 46, 0.4);
  vertical-align: middle;
}
.perm-scope {
  padding: 2px 8px;
  border-radius: 999px;
  font-size: 11px;
  font-weight: 600;
  color: var(--accent);
  border: 1px solid rgba(47, 129, 247, 0.4);
  white-space: nowrap;
}

/* ---------- account ---------- */
.acct-hero {
  max-width: 1760px;
  display: flex;
  align-items: center;
  gap: 16px;
  padding: 18px 20px;
  background:
    radial-gradient(400px 80px at 15% 0%, var(--accent-soft), transparent 70%),
    var(--panel);
}
.acct-avatar {
  width: 52px;
  height: 52px;
  flex: 0 0 52px;
  border-radius: 50%;
  padding: 2px;
  background: linear-gradient(135deg, var(--accent), var(--success));
  display: grid;
  place-items: center;
}
.acct-avatar span {
  width: 100%;
  height: 100%;
  border-radius: 50%;
  background: var(--bg-2);
  color: var(--accent);
  display: grid;
  place-items: center;
  font-weight: 700;
  font-size: 20px;
}
.acct-id { min-width: 0; }
.acct-name { font-size: 17px; font-weight: 700; color: var(--text); }
.acct-meta { display: flex; align-items: center; gap: 8px; margin-top: 4px; }
.acct-role {
  display: inline-flex;
  align-items: center;
  gap: 5px;
  font-size: 11px;
  font-weight: 600;
  padding: 3px 9px;
  border-radius: 999px;
  background: var(--accent-soft);
  color: var(--accent);
}
.acct-role .inline-icon svg { width: 11px; height: 11px; }
.acct-cap { color: var(--text-faint); font-size: 12px; }
.acct-signout {
  margin-left: auto;
  display: inline-flex;
  align-items: center;
  gap: 7px;
  padding: 7px 14px;
  font-size: 12.5px;
  white-space: nowrap;
}
.acct-signout .inline-icon svg { width: 14px; height: 14px; }
.acct-signout:hover { border-color: var(--danger); color: var(--danger); }
.account-grid {
  display: grid;
  grid-template-columns: minmax(300px, 1fr) minmax(0, 1.85fr);
  gap: 14px;
  max-width: 1760px;
  align-items: start;
}
.acct-col { display: grid; gap: 14px; align-content: start; min-width: 0; }
.acct-col > * { min-width: 0; }
@media (max-width: 980px) {
  .account-grid { grid-template-columns: 1fr; }
}
.field .fl { color: var(--text-dim); font-size: 12px; font-weight: 600; }
.pw-wrap { position: relative; display: flex; }
.pw-wrap input { flex: 1; padding-right: 40px; }
.pw-toggle {
  position: absolute;
  right: 6px;
  top: 50%;
  transform: translateY(-50%);
  background: none;
  border: none;
  color: var(--text-faint);
  padding: 5px;
  border-radius: 6px;
  display: inline-flex;
}
.pw-toggle:hover { color: var(--text); border-color: transparent; }
.pw-toggle .inline-icon svg { width: 16px; height: 16px; }
.form-msg { min-height: 16px; font-size: 12px; margin: -4px 0 8px; }
.form-msg.err { color: var(--danger); }
.form-msg.ok { color: var(--success); }
.pw-strength { display: none; align-items: center; gap: 10px; margin-top: 8px; }
.pw-strength.show { display: flex; }
.pw-meter { display: flex; gap: 4px; flex: 1; max-width: 140px; }
.pw-meter .seg {
  flex: 1;
  height: 4px;
  border-radius: 999px;
  background: var(--border-soft);
  transition: background 0.25s;
}
.pw-meter .seg.on.danger { background: var(--danger); }
.pw-meter .seg.on.warn { background: var(--warn); }
.pw-meter .seg.on.accent { background: var(--accent); }
.pw-meter .seg.on.ok { background: var(--success); }
.meter-label { font-size: 11.5px; font-weight: 600; min-width: 40px; text-align: right; }
.meter-label.danger { color: var(--danger); }
.meter-label.warn { color: var(--warn); }
.meter-label.accent { color: var(--accent); }
.meter-label.ok { color: var(--success); }
.req-list { list-style: none; margin: 8px 0 0; padding: 0; display: grid; gap: 5px; }
.req-item {
  display: flex;
  align-items: center;
  gap: 7px;
  font-size: 12px;
  color: var(--text-faint);
  transition: color 0.2s;
}
.req-item .req-check {
  width: 15px;
  height: 15px;
  flex: 0 0 15px;
  border-radius: 50%;
  border: 1px solid var(--border-soft);
  display: grid;
  place-items: center;
  color: transparent;
  transition: 0.2s;
}
.req-item .req-check svg { width: 9px; height: 9px; stroke-width: 2.4; }
.req-item.met { color: var(--text-dim); }
.req-item.met .req-check { background: var(--success); border-color: var(--success); color: #fff; }
.admin-note {
  display: flex;
  align-items: flex-start;
  gap: 9px;
  margin-top: 14px;
  padding-top: 12px;
  border-top: 1px solid var(--border-soft);
  font-size: 12px;
  color: var(--text-dim);
  line-height: 1.5;
}
.admin-note .inline-icon { color: var(--accent); flex: 0 0 auto; margin-top: 1px; }
.admin-note .inline-icon svg { width: 14px; height: 14px; }
.admin-list { display: grid; gap: 8px; margin-bottom: 4px; }
.admin-row {
  display: flex;
  align-items: center;
  gap: 11px;
  flex-wrap: wrap;
  padding: 9px 11px;
  border: 1px solid var(--border-soft);
  border-radius: var(--radius-sm);
  background: var(--bg-2);
}
.admin-avatar {
  width: 30px;
  height: 30px;
  flex: 0 0 30px;
  border-radius: 50%;
  background: var(--accent-soft);
  color: var(--accent);
  display: grid;
  place-items: center;
  font-weight: 700;
  font-size: 12.5px;
}
.admin-info { min-width: 0; flex: 1; }
.admin-name { display: flex; align-items: center; gap: 7px; font-size: 13.5px; font-weight: 600; color: var(--text); }
.you-badge {
  font-size: 10px;
  font-weight: 700;
  letter-spacing: 0.4px;
  text-transform: uppercase;
  padding: 1.5px 7px;
  border-radius: 999px;
  background: var(--accent-soft);
  color: var(--accent);
}
.admin-meta { font-size: 11.5px; color: var(--text-faint); margin-top: 2px; }
.admin-self-note { font-size: 11.5px; color: var(--text-faint); white-space: nowrap; }
.admin-actions { display: flex; gap: 6px; }
.admin-actions button { padding: 4px 10px; font-size: 12px; }
.admin-actions button.subtle { border-color: transparent; background: transparent; color: var(--text-faint); }
.admin-actions button.subtle:hover { border-color: var(--accent); color: var(--accent); }
.admin-actions button.subtle.danger:hover { border-color: var(--danger); color: var(--danger); }
.admin-reset {
  flex: 1 1 100%;
  display: flex;
  align-items: center;
  gap: 7px;
  flex-wrap: wrap;
  padding-top: 9px;
  margin-top: 9px;
  border-top: 1px solid var(--border-soft);
}
.admin-reset .pw-wrap { flex: 1; min-width: 160px; }
.admin-reset .form-msg { flex: 1 1 100%; margin: 0; }
.admin-reset button { padding: 6px 12px; font-size: 12px; }
.admin-reset select { padding: 6px 10px; font-size: 12px; color: var(--text-dim); background: var(--panel-2); border: 1px solid var(--border); border-radius: 6px; }
.admin-reset select:focus { border-color: var(--accent); outline: none; }
.admin-reset .admin-hint { flex: 1 1 100%; font-size: 11px; color: var(--text-faint); line-height: 1.5; }
/* Expandable per-user grant detail (Users page) */
.user-detail {
  flex: 1 1 100%;
  padding-top: 9px;
  margin-top: 9px;
  border-top: 1px solid var(--border-soft);
}
.user-grants { list-style: none; margin: 0; padding: 0; display: grid; gap: 5px; }
.user-grants li {
  display: flex;
  align-items: baseline;
  gap: 8px;
  font-size: 12px;
}
.grant-target { color: var(--text); font-family: var(--mono); }
.grant-when { color: var(--text-faint); font-size: 11px; margin-left: auto; white-space: nowrap; }
.grant-none { color: var(--text-faint); font-size: 12px; }
.admin-add-head {
  display: flex;
  align-items: center;
  gap: 7px;
  font-size: 12px;
  font-weight: 700;
  color: var(--text-dim);
  letter-spacing: 0.3px;
  margin: 16px 0 10px;
  padding-top: 14px;
  border-top: 1px solid var(--border-soft);
}
.admin-add-head .inline-icon { color: var(--accent); }
.admin-add-head .inline-icon svg { width: 13px; height: 13px; }
.admin-empty { font-size: 12.5px; color: var(--text-faint); padding: 10px 0; }
.switch { position: relative; width: 38px; height: 22px; flex: 0 0 38px; }
.switch input { position: absolute; inset: 0; opacity: 0; width: 100%; height: 100%; margin: 0; cursor: pointer; z-index: 2; }
.switch .slider { position: absolute; inset: 0; background: #2a3342; border-radius: 999px; transition: 0.2s; }
.switch .slider::before { content: ''; position: absolute; width: 16px; height: 16px; left: 3px; top: 3px; background: #8b95a5; border-radius: 50%; transition: 0.2s; }
.switch input:checked + .slider { background: var(--accent); }
.switch input:checked + .slider::before { transform: translateX(16px); background: #fff; }
.switch input:focus-visible + .slider { outline: 2px solid #80b4ff; outline-offset: 3px; }

.banner {
  padding: 12px 14px;
  border-radius: var(--radius-sm);
  font-size: 13px;
  margin-bottom: 14px;
  display: flex;
  align-items: center;
  gap: 10px;
}
.banner .ghost-link { margin-left: auto; }
.banner .feed-icon { width: 26px; height: 26px; flex: 0 0 auto; }
.banner .feed-icon svg { width: 14px; height: 14px; }
.banner[hidden] { display: none; }
.banner.info { background: var(--accent-soft); color: var(--accent); }
.banner.warn { background: rgba(217,166,46,0.12); color: var(--warn); }

.empty {
  color: var(--text-faint);
  padding: 22px;
  text-align: center;
  font-size: 13px;
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 10px;
}
.empty-icon { color: var(--text-faint); opacity: 0.7; display: inline-flex; }
.empty-icon svg { width: 26px; height: 26px; }

.filter-row { display: flex; gap: 10px; align-items: center; margin-bottom: 14px; }

/* ---------- device inventory ---------- */
.devices-heading {
  display: flex;
  justify-content: space-between;
  align-items: flex-end;
  gap: 20px;
}
.devices-heading .sub { margin-top: 6px; }
.device-count {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  color: var(--text-dim);
  border: 1px solid var(--border);
  background: var(--panel);
  border-radius: 999px;
  padding: 7px 13px;
  font-size: 12px;
  white-space: nowrap;
}
.device-summary {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
  gap: 12px;
}
.device-stat {
  display: flex;
  align-items: center;
  gap: 13px;
  padding: 14px 16px;
  background: linear-gradient(160deg, var(--panel), rgba(20, 24, 33, 0.55));
  border: 1px solid var(--border);
  border-radius: var(--radius);
  text-align: left;
  transition: transform 0.15s, border-color 0.15s, box-shadow 0.15s;
}
.device-stat:hover { transform: translateY(-2px); border-color: var(--accent); color: var(--text); }
.device-stat.selected {
  border-color: var(--accent);
  box-shadow: inset 0 0 0 1px var(--accent), 0 8px 24px rgba(0, 0, 0, 0.25);
}
.device-stat-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
.device-stat-value { font: 700 20px var(--mono); font-variant-numeric: tabular-nums; }
.device-stat-label {
  color: var(--text-dim);
  font-size: 12px;
  white-space: nowrap;
  overflow: hidden;
  text-overflow: ellipsis;
}
.device-stat.ok .device-stat-value { color: var(--success); }
.device-stat.warn .device-stat-value { color: var(--warn); }
.device-stat.danger .device-stat-value { color: var(--danger); }
.device-tools { display: flex; gap: 10px; align-items: center; }
.search-wrap { position: relative; flex: 1; min-width: 150px; display: flex; }
.search-icon {
  position: absolute;
  left: 11px;
  top: 50%;
  transform: translateY(-50%);
  color: var(--text-faint);
  pointer-events: none;
  display: inline-flex;
}
.search-icon svg { width: 15px; height: 15px; display: block; }
.search-wrap .device-search { flex: 1; padding-left: 34px; }
.device-tools .device-filter { width: 190px; }
.device-visible {
  margin-left: auto;
  color: var(--text-faint);
  font-size: 12px;
  white-space: nowrap;
  font-variant-numeric: tabular-nums;
}
.device-table-wrap { width: 100%; }
.device-table { min-width: 920px; }
.device-table th, .device-table td { padding: 10px 13px; }
.device-table th { background: rgba(255,255,255,.018); }
.device-table tbody tr { height: 58px; }
.dev-cell { display: flex; align-items: center; gap: 12px; min-width: 0; }
.dev-avatar {
  width: 32px; height: 32px;
  border-radius: 9px;
  display: grid;
  place-items: center;
  font-weight: 700;
  font-size: 13px;
  flex: 0 0 auto;
  background: rgba(91, 100, 114, 0.16);
  color: var(--text-dim);
}
.dev-avatar.online { background: rgba(46, 169, 111, 0.14); color: var(--success); }
.dev-avatar.pending { background: rgba(217, 166, 46, 0.14); color: var(--warn); }
.dev-avatar.blocked { background: rgba(229, 83, 75, 0.14); color: var(--danger); }
.dev-id { min-width: 0; }
.device-table-name { color: var(--text); font-weight: 600; margin-bottom: 3px; white-space: nowrap; }
.device-actions { flex-wrap: nowrap; justify-content: flex-start; }
.actions.device-actions button { min-height: 29px; white-space: nowrap; }
.actions.device-actions button.subtle { border-color: transparent; background: transparent; color: var(--text-faint); }
.actions.device-actions button.subtle:hover { border-color: var(--danger); color: var(--danger); }
.device-table-wrap .empty { padding: 42px 22px; }
.dev-loc-label { font-size: 12.5px; color: var(--text); }
.dev-loc-ip { margin-top: 3px; }

.main:not(.ov-entered) .devices-heading,
.main:not(.ov-entered) .device-tools,
.main:not(.ov-entered) .device-table-wrap,
.main:not(.ov-entered) .device-stat { animation: ov-in 0.3s ease both; }
.main:not(.ov-entered) .device-stat:nth-child(2) { animation-delay: 0.04s; }
.main:not(.ov-entered) .device-stat:nth-child(3) { animation-delay: 0.08s; }
.main:not(.ov-entered) .device-stat:nth-child(4) { animation-delay: 0.12s; }
.main:not(.ov-entered) .device-stat:nth-child(5) { animation-delay: 0.16s; }

@media (max-width: 760px) {
  .device-summary { grid-template-columns: repeat(2, minmax(0,1fr)); }
  .device-table { min-width: 860px; }
}
@media (max-width: 520px) {
  .devices-heading { align-items: flex-start; }
  .devices-heading .device-count { padding: 6px 9px; }
  .device-tools { flex-direction: column; align-items: stretch; }
  .device-tools .device-filter { width: 100%; }
  .device-visible { margin-left: 0; align-self: flex-start; }
  .acct-hero { flex-wrap: wrap; }
  .acct-signout { margin-left: 0; width: 100%; justify-content: center; }
}

/* ---------- toast ---------- */
.toast {
  position: fixed; bottom: 22px; left: 50%; transform: translateX(-50%);
  background: var(--panel-2); border: 1px solid var(--border);
  padding: 11px 18px; border-radius: 10px; font-size: 13px;
  box-shadow: 0 12px 40px rgba(0,0,0,0.45);
  z-index: 100; transition: opacity 0.2s;
}
.toast.hidden { opacity: 0; pointer-events: none; }

::-webkit-scrollbar { width: 10px; height: 10px; }
::-webkit-scrollbar-thumb { background: #2a3342; border-radius: 6px; border: 2px solid var(--bg); }

.term-field.hidden, .term-line.hidden { display: none; }

/* two-factor setup */
.totp-secret { font-family: ui-monospace, Consolas, monospace; letter-spacing: 0.08em; word-break: break-all; user-select: all; padding: 8px 10px; border-radius: 6px; background: rgba(127,127,127,0.12); }
.backup-codes { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 4px 16px; font-family: ui-monospace, Consolas, monospace; margin: 8px 0; padding: 0; list-style: none; user-select: all; }
.totp-status { display: flex; align-items: center; gap: 8px; margin-bottom: 12px; }

/* 2FA QR — always on white so any authenticator app can scan it */
.totp-qr {
  display: inline-block;
  padding: 10px;
  margin: 4px 0 10px;
  background: #fff;
  border-radius: 8px;
  line-height: 0;
}
.totp-qr svg { width: 168px; height: 168px; }

/* overview: security panel */
.sec-list { display: flex; flex-direction: column; gap: 10px; }
.sec-row { display: flex; align-items: center; gap: 10px; min-width: 0; }
.sec-body { flex: 1; min-width: 0; }
.sec-title { font-weight: 600; }
.sec-meta { font-size: 0.85em; opacity: 0.7; overflow-wrap: anywhere; }

/* overview: security alert strip */
.sec-alert {
  display: flex; align-items: center; gap: 12px;
  padding: 10px 14px; margin-bottom: 14px;
  border: 1px solid rgba(229, 83, 75, 0.45);
  background: rgba(229, 83, 75, 0.08);
  border-radius: var(--radius);
}
.sec-alert-body { flex: 1; min-width: 0; overflow-wrap: anywhere; }

/* overview: fleet & policy */
.fleet-inline { display: flex; flex-wrap: wrap; gap: 6px 18px; margin-top: 12px; font-size: 13px; }
.fleet-item { display: inline-flex; align-items: center; gap: 6px; }
.fleet-item .fleet-label { flex: none; }
.fleet-meta { color: var(--text-faint); font-size: 12px; margin-top: 8px; }
.policy-list {
  display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 8px;
  margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--border-soft);
}
.policy-item {
  display: flex; align-items: center; justify-content: space-between; gap: 8px;
  padding: 7px 10px; border: 1px solid var(--border); border-radius: 8px; font-size: 12.5px;
}
.policy-name { color: var(--text-dim); }
.policy-state { font-family: var(--mono); font-size: 11px; font-weight: 700; letter-spacing: 0.08em; flex-shrink: 0; white-space: nowrap; }
.policy-state.ok { color: var(--success); }
.policy-state.warn { color: var(--warn); }
.policy-state.off { color: var(--text-faint); }
.ov-turn { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--border-soft); }
.sidebar .side-ver { font-family: var(--mono); font-size: 10.5px; color: var(--text-faint); padding: 6px 12px 0; }

/* overview: TURN secret reveal */
.turn-secret { margin-top: 10px; }
.turn-secret-value { word-break: break-all; }
.turn-secret-value.revealed { color: var(--text); user-select: all; }
.turn-secret-fp { opacity: 0.6; font-size: 11px; }
.turn-secret-actions { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 6px; }
.turn-secret-form { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; width: 100%; }
.turn-secret-form .pw-wrap, .turn-secret-form input[type=password] { flex: 1 1 160px; min-width: 0; }
.turn-secret-code { width: 110px; }


/* devices: outdated tag */
.update-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--warn); border: 1px solid rgba(217, 166, 46, 0.4); }

/* devices: WoL tag + subnet line */
.wol-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--accent); border: 1px solid rgba(47, 129, 247, 0.4); }
.agent-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--success); border: 1px solid rgba(46, 169, 111, 0.4); }
.pin-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--text-dim); border: 1px dashed var(--border); }
.group-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--warn, #d9a13b); border: 1px solid rgba(217, 161, 59, 0.4); }
.alert-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; color: var(--warn, #d9a13b); border: 1px solid rgba(217, 161, 59, 0.5); display: inline-flex; align-items: center; gap: 3px; vertical-align: middle; }
.alert-tag svg { width: 10px; height: 10px; }
.class-select { padding: 3px 6px; font-size: 11.5px; color: var(--text-dim); background: var(--panel-2); border: 1px solid var(--border); border-radius: 6px; }
.check-col { width: 34px; text-align: center; }
.dev-check, .dev-check-all { width: 15px; height: 15px; accent-color: var(--accent); cursor: pointer; }
.bulk-bar { display: flex; gap: 8px; align-items: center; padding: 9px 13px; margin-bottom: 10px; background: var(--panel-2); border: 1px solid rgba(47, 129, 247, 0.35); border-radius: 10px; flex-wrap: wrap; }
.bulk-bar .bulk-count { font-size: 12.5px; font-weight: 600; color: var(--accent); margin-right: 4px; }
.bulk-bar .spacer { flex: 1; }
.bulk-bar button { font-size: 12.5px; }
.modal-backdrop { position: fixed; inset: 0; background: rgba(5,8,15,.55); display: flex; align-items: center; justify-content: center; z-index: 60; }
.cmd-modal { width: min(680px, 92vw); max-height: 80vh; display: flex; flex-direction: column; background: var(--bg); border: 1px solid var(--border); border-radius: 12px; padding: 16px; box-shadow: 0 18px 50px rgba(0,0,0,.45); }
.cmd-modal-head { display: flex; gap: 12px; align-items: baseline; margin-bottom: 10px; }
.cmd-running { display: flex; align-items: center; gap: 8px; color: var(--text-dim); padding: 18px 4px; }
.cmd-out { flex: 1; overflow: auto; margin: 0; padding: 12px; background: var(--panel-2); border: 1px solid var(--border); border-radius: 8px; font-family: ui-monospace, Consolas, monospace; font-size: 12px; line-height: 1.5; white-space: pre-wrap; word-break: break-word; max-height: 55vh; }
.cmd-modal-foot { display: flex; align-items: center; gap: 10px; margin-top: 12px; }
.dev-loc-sub { opacity: 0.75; }

/* devices: Legacy VNC target registry */
.vnc-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--accent); border: 1px solid rgba(47, 129, 247, 0.4); }
.dup-tag { margin-left: 6px; padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--warn, #d9a13b); border: 1px solid rgba(217, 161, 59, 0.5); }
.vnc-panel { margin-top: 14px; background: var(--panel-2); border: 1px solid var(--border); border-radius: 10px; }
.vnc-panel-head { display: flex; align-items: baseline; gap: 10px; padding: 11px 14px; cursor: pointer; user-select: none; }
.vnc-panel-head svg { width: 14px; height: 14px; vertical-align: -2px; margin-right: 4px; color: var(--accent); }
.vnc-panel-title { font-size: 13px; font-weight: 600; }
.vnc-panel-body { padding: 4px 14px 14px; border-top: 1px solid var(--border-soft, var(--border)); }
.vnc-target-list { display: flex; flex-direction: column; }
.vnc-target-row { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 8px 0; border-bottom: 1px solid var(--border-soft, var(--border)); flex-wrap: wrap; }
.vnc-target-row:last-child { border-bottom: none; }
.vnc-target-main { display: flex; align-items: baseline; gap: 10px; flex-wrap: wrap; min-width: 0; }
.vnc-target-name { font-size: 13px; font-weight: 600; }
.vnc-target-actions { display: flex; gap: 6px; align-items: center; flex-wrap: wrap; }
.vnc-form { display: flex; flex-direction: column; gap: 8px; padding: 10px 0; }
.vnc-form-row { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
.vnc-field { padding: 6px 9px; font-size: 12.5px; color: var(--text); background: var(--bg-0); border: 1px solid var(--border); border-radius: 7px; min-width: 140px; }
.vnc-field:focus { border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-soft); outline: none; }

/* In-console remote workspace — overlay covering the main content area
   (sibling of .main so page re-renders never disturb a live session). */
.remote-work { position: absolute; top: 0; right: 0; bottom: 0; left: 216px; z-index: 40; display: flex; flex-direction: column; background: var(--bg); }
.remote-bar { display: flex; align-items: center; gap: 12px; padding: 8px 14px; border-bottom: 1px solid var(--border); background: var(--panel); flex: 0 0 auto; }
.remote-id { min-width: 0; }
.remote-title { font-size: 13px; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.remote-sub { font-size: 11px; color: var(--text-dim); }
.remote-status { flex: 1; font-size: 12px; color: var(--text-dim); text-align: center; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.remote-status.err { color: var(--danger); }
.remote-controls { display: flex; align-items: center; gap: 6px; }
.remote-extra { display: flex; align-items: center; gap: 6px; }
.remote-stage { flex: 1; position: relative; overflow: hidden; background: #05070a; }
.remote-frame { position: absolute; inset: 0; width: 100%; height: 100%; border: 0; }
.vnc-screen { position: absolute; inset: 0; }
.vnc-screen > div { position: absolute; inset: 0; }
.vnc-row .dev-avatar.offline { opacity: 0.6; }

/* downloads: release cards */
.dl-note { display: flex; gap: 8px; align-items: center; padding: 10px 14px; margin: 4px 0 14px; background: var(--accent-soft); border: 1px solid rgba(47, 129, 247, 0.3); border-radius: 10px; font-size: 12.5px; color: var(--text-dim); }
.dl-note svg { width: 15px; height: 15px; color: var(--accent); flex-shrink: 0; }
.dl-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 12px; padding: 4px 14px 14px; }
.dl-card { display: flex; flex-direction: column; gap: 8px; padding: 13px 14px; background: var(--bg-0); border: 1px solid var(--border); border-radius: 10px; }
.dl-card-head { display: flex; justify-content: space-between; align-items: flex-start; gap: 6px 10px; flex-wrap: wrap; }
.dl-card-head > div:first-child { min-width: 0; flex: 1 1 auto; }
.dl-card-title { font-size: 13.5px; font-weight: 600; display: flex; align-items: center; gap: 7px; }
.dl-reco { padding: 0 6px; border-radius: 999px; font-size: 10px; font-weight: 700; letter-spacing: 0.04em; text-transform: uppercase; color: var(--accent); border: 1px solid rgba(47, 129, 247, 0.4); }
.dl-meta { display: flex; gap: 12px; flex-wrap: wrap; font-size: 12px; }
.dl-meta-item { color: var(--text); }
.dl-sha { display: flex; align-items: center; gap: 8px; }
.dl-card-foot { display: flex; align-items: center; gap: 10px; margin-top: 2px; flex-wrap: wrap; }
.dl-card-foot .btn { text-decoration: none; display: inline-block; }

/* devices: system-health accordion */
.device-detail-row td { background: var(--bg-2); border-bottom: 1px solid var(--border-soft); }
.sysinfo { padding: 14px 10px; }
.sysinfo-loading { padding: 14px 10px; font-size: 12.5px; }
.sysinfo-meters { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 12px 24px; }
.sys-meter-top { display: flex; justify-content: space-between; align-items: baseline; margin-bottom: 5px; }
.sys-meter-label { font-size: 12px; font-weight: 600; }
.sys-meter-pct { font-size: 12px; color: var(--text-dim); }
.meter { height: 6px; border-radius: 999px; background: var(--border); overflow: hidden; }
.meter-fill { height: 100%; border-radius: 999px; background: var(--success); transition: width 0.35s ease; }
.meter-fill.warm { background: var(--warn); }
.meter-fill.hot { background: var(--danger); }
.sys-meter-sub { margin-top: 4px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.sysinfo-meta { display: flex; flex-wrap: wrap; gap: 6px 14px; align-items: center; margin-top: 12px; font-size: 12px; }
.sysinfo-tag { color: var(--text-dim); }
/* A live agent setting that doesn't match the server's managed desired value. */
.sysinfo-tag.drift { color: var(--warn, #e8b13f); border: 1px solid var(--warn, #e8b13f); border-radius: 6px; padding: 1px 5px; }
.linkhist { margin-top: 12px; padding-top: 10px; border-top: 1px solid var(--border-soft); }
.linkhist-head { display: flex; flex-wrap: wrap; gap: 6px 14px; align-items: center; font-size: 12px; }
.linkhist-head .sysinfo-tag:first-child { color: var(--text); font-weight: 600; }
.linkhist-spark { margin-top: 6px; }

/* asset monitoring: inventory + register fields in the device detail */
.asset-inv, .asset-meta { margin-top: 12px; padding-top: 10px; border-top: 1px solid var(--border-soft); }
.asset-inv-title { font-weight: 600; text-transform: uppercase; letter-spacing: 0.04em; margin-bottom: 6px; }
.asset-inv-grid { display: grid; grid-template-columns: auto 1fr; gap: 3px 14px; font-size: 12px; }
.asset-k { font-weight: 600; }
.asset-v { word-break: break-word; }
.asset-form { display: flex; flex-wrap: wrap; gap: 8px 12px; }
.asset-field { display: flex; flex-direction: column; gap: 3px; min-width: 140px; }
.asset-field .input { padding: 5px 8px; font-size: 12.5px; }
.asset-notes { flex: 1 1 100%; }
.asset-notes-in { resize: vertical; font-family: inherit; }
.asset-actions { display: flex; align-items: center; gap: 14px; margin-top: 8px; flex-wrap: wrap; }
.asset-hist details summary { cursor: pointer; font-size: 12px; }
.asset-hist-list { margin: 6px 0 0; padding-left: 18px; font-size: 12px; }
.asset-hist-list li { margin: 2px 0; }
.asset-th { cursor: pointer; user-select: none; white-space: nowrap; }
.asset-th:hover { color: var(--text); }
.asset-th.sorted { color: var(--accent); }
.asset-name { display: flex; align-items: center; gap: 8px; }

/* session password provisioning form (device detail → session security) */
.pwprov-form { margin-top: 8px; }
.pwprov-msg { margin-top: 6px; }
.pwprov-msg.warn { color: var(--warn); }
.asset-table td { vertical-align: top; }

/* sessions: route + interruptions + health */
.route-tag, .intr-tag { margin-left: 8px; padding: 0 7px; border-radius: 999px; font-size: 11px; border: 1px solid var(--border); white-space: nowrap; }
.route-tag.direct { color: var(--success); border-color: rgba(46, 169, 111, 0.35); }
.route-tag.relay { color: var(--accent); border-color: rgba(47, 129, 247, 0.35); }
.intr-tag.warn { color: var(--warn); border-color: rgba(217, 166, 46, 0.4); }
.intr-tag.danger { color: var(--danger); border-color: rgba(229, 83, 75, 0.4); }
.health-table { width: 100%; border-collapse: collapse; font-size: 13px; }
.health-table th { text-align: left; padding: 8px 10px; color: var(--text-dim); font-family: var(--mono); font-size: 10.5px; text-transform: uppercase; letter-spacing: 1px; border-bottom: 1px solid var(--border); }
.health-table td { padding: 8px 10px; border-bottom: 1px solid var(--border-soft); vertical-align: top; }
.tone-warn { color: var(--warn); }
.tone-danger { color: var(--danger); }

/* server tab */
.srv-cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(170px, 1fr)); gap: 12px; margin-bottom: 14px; }
.srv-card { display: flex; flex-direction: column; gap: 2px; padding: 14px 16px; background: var(--panel); border: 1px solid var(--border); border-radius: var(--radius); min-width: 0; }
.srv-card-label { color: var(--text-dim); font-size: 12px; text-transform: uppercase; letter-spacing: 0.6px; }
.srv-card-value { font-size: 18px; font-weight: 700; overflow-wrap: anywhere; }
.srv-card-sub { color: var(--text-faint); font-size: 12px; }
.srv-rows { display: flex; flex-direction: column; gap: 8px; }
.srv-row { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; font-size: 13px; padding: 6px 0; border-bottom: 1px solid var(--border-soft); }
.srv-row-name { flex: 1; min-width: 160px; color: var(--text-dim); }
.srv-row-note { color: var(--text-faint); font-size: 12px; }
.srv-test { margin-top: 12px; }
.ov-panel-head .primary { white-space: nowrap; }

/* sessions: summary, compact empty state, history table */
.sess-stats { display: grid; grid-template-columns: repeat(auto-fit, minmax(160px, 1fr)); gap: 12px; margin-bottom: 14px; }
.sess-stat { display: flex; flex-direction: column; gap: 2px; padding: 12px 16px; background: var(--panel); border: 1px solid var(--border); border-radius: var(--radius); min-width: 0; }
.sess-stat-value { font-family: var(--mono); font-variant-numeric: tabular-nums; font-size: 22px; font-weight: 700; line-height: 1.15; }
.sess-stat-label { color: var(--text-dim); font-size: 12px; text-transform: uppercase; letter-spacing: 0.6px; }
.sess-stat-cap { color: var(--text-faint); font-size: 12px; overflow-wrap: anywhere; }
.sess-stat.accent .sess-stat-value { color: var(--accent); }
.sess-stat.ok .sess-stat-value { color: var(--success); }
.sess-stat.warn .sess-stat-value { color: var(--warn); }
.sess-stat.danger .sess-stat-value { color: var(--danger); }
.sess-grid.is-empty { display: block; }
.sess-empty { display: flex; align-items: center; gap: 10px; padding: 6px 2px; color: var(--text-dim); font-size: 13px; }
.sess-empty .empty-icon { width: 18px; height: 18px; opacity: 0.7; }
.sess-empty .empty-icon svg { width: 18px; height: 18px; }
.sess-table-wrap { border: none; background: none; }
.sess-table { width: 100%; border-collapse: collapse; font-size: 13px; min-width: 760px; }
.sess-table th { text-align: left; padding: 9px 10px; color: var(--text-dim); font-family: var(--mono); font-weight: 600; font-size: 10.5px; text-transform: uppercase; letter-spacing: 1px; border-bottom: 1px solid var(--border); white-space: nowrap; }
.sess-table td { padding: 9px 10px; border-bottom: 1px solid var(--border-soft); vertical-align: middle; }
.sess-table tbody tr:hover { background: rgba(127, 127, 127, 0.05); }
.sess-table .route-tag, .sess-table .intr-tag { margin-left: 0; }
.sess-when { white-space: nowrap; color: var(--text-dim); }
.sess-col-arrow { width: 18px; padding-left: 0 !important; padding-right: 0 !important; color: var(--text-faint); }
.sess-col-arrow svg { width: 14px; height: 14px; display: block; }
.sess-dev-name { white-space: nowrap; }
.sess-dev-id { color: var(--text-faint); font-size: 11px; }
.end-tag { font-size: 12px; white-space: nowrap; }
.end-tag.neutral { color: var(--text-dim); }
.end-tag.warn { color: var(--warn); }
.end-tag.danger { color: var(--danger); }
.dim { color: var(--text-faint); }

/* server tab: enrolment token */
.enroll-token-row { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; margin: 8px 0; }
.enroll-token { font-size: 15px; }
.enroll-help { margin: 6px 0 10px; }

/* server tab: health dashboard */
.srv-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(360px, 1fr)); gap: 14px; }
.srv-grid .ov-panel { margin: 0; }
.srv-head-actions { display: flex; align-items: center; gap: 14px; }
.policy-state.danger { color: var(--danger); }
.util-row .srv-row-name { min-width: 130px; flex: 0 0 130px; }
.util-bar { flex: 1; min-width: 120px; height: 8px; border-radius: 4px; background: var(--bg-2); overflow: hidden; position: relative; }
.util-bar i { display: block; height: 100%; border-radius: 4px; background: var(--accent); transition: width .3s ease; }
.util-bar.util-na i { display: none; }
.util-row .srv-row-note { flex: 0 0 auto; min-width: 0; }
.srv-ends { margin-top: 10px; padding-top: 6px; border-top: 1px solid var(--border-soft); }
.srv-ends .srv-row { border-bottom: none; padding: 3px 0; }
@media (max-width: 780px) {
  .srv-grid { grid-template-columns: 1fr; }
  .util-row .srv-row-name { flex: 1; min-width: 0; }
}

/* Managed settings (device detail) */
.managed-grid .managed-toggle { flex-direction: row; align-items: center; gap: 6px; min-width: 200px; }
.managed-toggle input[type="checkbox"] { margin: 0; }
.check-row { display: flex; align-items: center; gap: 7px; font-size: 12px; color: var(--text-dim); margin: 8px 0 4px; cursor: pointer; }
.check-row input[type="checkbox"] { margin: 0; }
.managed-group { display: flex; flex-wrap: wrap; gap: 8px 14px; width: 100%; padding-top: 10px; }
.managed-group:first-child { padding-top: 0; }
.managed-group-label { width: 100%; font-weight: 700; letter-spacing: 0.08em; text-transform: uppercase; font-size: 10px; color: var(--accent); }

/* Process list (device detail) */
.procs-wrap { margin-top: 8px; }
.procs-table { width: 100%; border-collapse: collapse; font-size: 12px; margin: 6px 0; }
.procs-table th { text-align: left; font-weight: 600; color: var(--text-dim); padding: 3px 8px; border-bottom: 1px solid var(--border); }
.procs-table td { padding: 2px 8px; border-bottom: 1px solid var(--border-soft); }

/* Devices table — edition sections */
.dev-section td { padding: 10px 8px 5px; font-size: 11px; font-weight: 600; text-transform: uppercase; letter-spacing: .05em; color: var(--text-dim); border-bottom: 1px solid var(--border); background: var(--bg-2); }
.dev-section .dev-section-count { font-weight: 400; text-transform: none; letter-spacing: 0; margin-left: 6px; }
.procs-table .num, .procs-table th.num { text-align: right; }
.procs-wrap { max-height: 320px; overflow-y: auto; }

/* remote task manager toolbar + details */
.procs-toolbar { gap: 12px; }
.procs-search { max-width: 220px; }
.procs-auto { display: inline-flex; align-items: center; gap: 5px; cursor: pointer; }
.procs-detail { margin: 8px 0 4px; padding: 8px 10px; border: 1px solid var(--border-soft); border-radius: 6px; font-size: 12px; display: grid; gap: 3px; }
.procs-detail-row { display: flex; gap: 10px; }
.procs-detail-k { flex: 0 0 90px; }
.procs-detail-v { word-break: break-all; }
.procs-menu { z-index: 60; }

/* Agent log viewer — raw main.log tail */
.agent-log {
  margin: 6px 0;
  padding: 8px 10px;
  max-height: 320px;
  overflow: auto;
  background: var(--bg-2);
  border: 1px solid var(--border);
  border-radius: 6px;
  font-size: 11px;
  line-height: 1.45;
  white-space: pre-wrap;
  word-break: break-all;
  user-select: text;
}

/* Updates page — staged installers */
.upd-file { display: flex; align-items: baseline; gap: 8px; flex-wrap: wrap; }
.upd-actions { display: flex; gap: 6px; align-items: center; }
.upd-bar { display: block; width: 100%; height: 4px; margin-top: 6px; background: var(--border-soft); border-radius: 2px; overflow: hidden; }
.upd-bar.hidden { display: none; }
.upd-bar-fill { display: block; height: 100%; width: 0%; background: var(--accent, #3aa0ff); transition: width .2s; }
.roll-live { display: inline-flex; align-items: center; gap: 6px; font-family: var(--mono); font-size: 10px; font-weight: 700; letter-spacing: 0.12em; text-transform: uppercase; color: var(--success); }
.roll-live::before { content: ''; width: 7px; height: 7px; border-radius: 50%; background: var(--success); animation: roll-pulse 1.6s ease-in-out infinite; }
@keyframes roll-pulse { 0%, 100% { opacity: 1; } 50% { opacity: 0.25; } }
.roll-row { align-items: flex-start; }
.roll-state { font-family: var(--mono); font-size: 11px; font-weight: 700; letter-spacing: 0.06em; text-transform: uppercase; }
.roll-state.ok { color: var(--success); }
.roll-state.err { color: var(--danger); }
.roll-state.warn { color: var(--warn); }
.upd-row { align-items: flex-start; }

/* Devices — compact "More" action menu */
.dev-more { padding: 2px 10px; font-size: 14px; line-height: 1.4; letter-spacing: 1px; }
.device-menu {
  position: fixed; z-index: 70; min-width: 172px;
  background: var(--panel-2); border: 1px solid var(--border);
  border-radius: var(--radius-sm); padding: 4px;
  box-shadow: 0 10px 28px rgba(0, 0, 0, .5);
}
.device-menu-item {
  display: flex; align-items: center; gap: 8px;
  width: 100%; padding: 6px 9px; border: 0; background: none;
  color: var(--text); font-size: 12.5px; font-family: var(--font);
  text-align: left; border-radius: 5px; cursor: pointer;
}
.device-menu-item:hover, .device-menu-item:focus-visible {
  background: var(--accent-soft); outline: none;
}
.device-menu-item.warn { color: var(--warn); }
.device-menu-item.danger { color: var(--danger); }
.device-menu-check { flex: 0 0 14px; color: var(--accent); font-size: 11px; }
.device-menu-sep { height: 1px; margin: 4px 6px; background: var(--border-soft); }

/* --- Updates page: release overview, build progress, history --- */
.policy-state.accent { color: var(--accent); }
.upd-grid { grid-template-columns: minmax(0, 1.6fr) minmax(300px, 1fr); }
.upd-grid .ov-panel:last-child { grid-column: 1 / -1; }
@media (max-width: 980px) {
  .upd-grid { grid-template-columns: 1fr; }
}

.upd-bumps { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; padding: 4px 14px 12px; }
.upd-bump { display: flex; flex-direction: column; align-items: flex-start; gap: 4px; padding: 12px 14px; text-align: left; background: var(--panel-2); border: 1px solid var(--border); border-radius: 8px; cursor: pointer; }
.upd-bump:hover:not(:disabled) { border-color: var(--accent); }
.upd-bump:disabled { opacity: 0.55; cursor: not-allowed; }
.upd-bump-name { font-size: 12px; font-weight: 700; letter-spacing: 0.06em; text-transform: uppercase; color: var(--text-dim); }
.upd-bump-ver { font-size: 17px; font-weight: 700; }
.upd-bump-note { font-size: 11.5px; color: var(--text-faint); }

.upd-steps { display: flex; flex-wrap: wrap; gap: 4px; margin-top: 6px; }
.upd-step { font-size: 10.5px; padding: 2px 7px; border-radius: 10px; border: 1px solid var(--border-soft); color: var(--text-faint); }
.upd-step.done { color: var(--success); border-color: var(--success); }
.upd-step.now { color: var(--accent); border-color: var(--accent); }
.upd-step.fail { color: var(--danger); border-color: var(--danger); }

.upd-filters { display: flex; gap: 8px; flex-wrap: wrap; padding: 0 14px 10px; }
.upd-filter { max-width: 180px; }

.upd-detail { margin: 0 14px 12px; padding: 12px; border: 1px solid var(--border-soft); border-radius: 8px; background: var(--panel-2); display: flex; flex-direction: column; gap: 12px; }
.upd-detail-toggle { display: inline-flex; }
.upd-kv { display: grid; grid-template-columns: auto 1fr; gap: 3px 14px; font-size: 12.5px; }
.upd-kv > span:first-child { color: var(--text-faint); }
.upd-timeline { display: flex; flex-direction: column; gap: 4px; }
.upd-tl-row { display: flex; gap: 10px; align-items: center; font-size: 12px; }
.upd-log { max-height: 280px; overflow: auto; font-size: 11px; line-height: 1.45; padding: 10px; border-radius: 6px; background: var(--bg); color: var(--text-dim); white-space: pre-wrap; word-break: break-all; }
.upd-arts, .upd-artlist { display: flex; flex-direction: column; gap: 6px; }
.upd-art { display: flex; align-items: baseline; gap: 10px; flex-wrap: wrap; padding: 6px 10px; border: 1px solid var(--border-soft); border-radius: 6px; }
.upd-artlist { margin: 2px 14px 10px; }
.upd-cand-variants { display: flex; gap: 5px; flex-wrap: wrap; margin-top: 4px; }
.err-text { color: var(--danger); }

/* ---- external console access (trusted devices) ---- */
.cidr-input { width: 100%; min-width: 0; height: auto; min-height: 78px; resize: vertical; font-size: 12px; line-height: 1.5; }
.invite-link { display: flex; align-items: center; gap: 8px; margin-top: 8px; flex-wrap: wrap; }
.invite-link.hidden { display: none; }
.invite-url { font-family: var(--mono); font-size: 11.5px; color: var(--accent, #6ea8ff); word-break: break-all; background: var(--bg); border: 1px solid var(--border-soft); border-radius: 6px; padding: 6px 9px; flex: 1; min-width: 220px; }
.admin-avatar svg { width: 16px; height: 16px; }

/* ---- AI-visit timeline (audit view) ---- */
.ai-sess { border-bottom: 1px solid var(--border-soft); }
.ai-sess:last-child { border-bottom: none; }
.ai-sess .audit-entry { border-bottom: none; }
.ai-sess-head { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; padding: 10px 14px 6px; }
.ai-sess-head .feed-target { font-size: 13px; font-weight: 600; }
.ai-agent { font-size: 11px; }
.ai-chain { display: block; width: 100%; font-size: 11.5px; color: var(--text-faint); padding: 2px 0 4px; }

/* ---- user management (USER-001) ---- */
.um-stats { display: grid; grid-template-columns: repeat(auto-fit, minmax(140px, 1fr)); gap: 10px; margin-bottom: 14px; }
.um-stat { background: var(--panel); border: 1px solid var(--border); border-radius: var(--radius); padding: 12px 14px; }
.um-stat-num { font: 700 22px var(--mono); font-variant-numeric: tabular-nums; }
.um-stat-label { font-size: 11px; text-transform: uppercase; letter-spacing: 0.6px; color: var(--text-dim); margin-top: 2px; }
.um-stat.accent .um-stat-num { color: var(--accent); }
.um-stat.warn .um-stat-num { color: var(--warn); }

.um-tabs { display: flex; gap: 6px; margin-bottom: 14px; }
.um-tab { display: inline-flex; align-items: center; gap: 7px; padding: 8px 14px; border: 1px solid var(--border); border-radius: 999px; background: var(--panel); color: var(--text-dim); font: 600 12.5px var(--font); cursor: pointer; }
.um-tab svg { width: 14px; height: 14px; }
.um-tab:hover { border-color: var(--accent); color: var(--text); }
.um-tab.on { background: var(--accent-soft); border-color: var(--accent); color: var(--text); }
.um-pane.hidden { display: none; }

.um-tools { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; margin-bottom: 12px; }
.um-tools .search-wrap { flex: 1 1 220px; }
.um-tools select { background: var(--bg); border: 1px solid var(--border); border-radius: var(--radius-sm); color: var(--text); font: 500 12px var(--font); padding: 7px 9px; }
.um-tools .chip-row { gap: 6px; }

.um-table { width: 100%; border-collapse: collapse; font-size: 13px; }
.um-table th { text-align: left; font-size: 10.5px; text-transform: uppercase; letter-spacing: 0.6px; color: var(--text-faint); font-weight: 600; padding: 6px 10px; border-bottom: 1px solid var(--border-soft); }
.um-table td { padding: 9px 10px; border-bottom: 1px solid var(--border-soft); vertical-align: middle; }
.um-table tr.um-row:last-child td { border-bottom: none; }
.um-table tr.um-row:hover td { background: rgba(255, 255, 255, 0.02); }
.um-col-act { width: 1%; white-space: nowrap; text-align: right; }
.um-detail-row td { padding: 0; border-bottom: 1px solid var(--border-soft); }
.um-detail-row.hidden { display: none; }
.um-detail { padding: 14px; background: var(--bg); }
.um-facts { display: grid; grid-template-columns: repeat(auto-fit, minmax(160px, 1fr)); gap: 8px 18px; margin-bottom: 12px; }
.um-fact-label { font-size: 10.5px; text-transform: uppercase; letter-spacing: 0.5px; color: var(--text-faint); }
.um-fact-value { font-size: 12.5px; color: var(--text); margin-top: 1px; overflow-wrap: anywhere; }
.um-user { display: flex; align-items: center; gap: 10px; min-width: 0; }
.um-name { font-weight: 600; display: flex; align-items: center; gap: 6px; }
.um-sub { font-size: 11.5px; color: var(--text-dim); }
.um-sub.mono { font-family: var(--mono); }
.um-when { color: var(--text-dim); font-size: 12px; white-space: nowrap; }
.um-grid { grid-template-columns: minmax(0, 1fr) 340px; align-items: start; }
@media (max-width: 1100px) { .um-grid { grid-template-columns: 1fr; } }

/* ---- permissions workspace (PERM-001) ---- */
.perm-groupcard { margin-bottom: 14px; }
.perm-groupcols { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1.2fr); gap: 18px; }
@media (max-width: 1100px) { .perm-groupcols { grid-template-columns: 1fr; } }
.perm-members { display: flex; flex-direction: column; gap: 6px; margin-top: 8px; }
.perm-member { display: flex; align-items: center; gap: 8px; padding: 7px 10px; border: 1px solid var(--border-soft); border-radius: var(--radius-sm); }
.perm-member .um-sub { margin-left: auto; }
.perm-verdict { display: flex; align-items: center; gap: 7px; font-weight: 700; font-size: 14px; margin-bottom: 4px; }
.perm-verdict.ok { color: var(--success); }
.perm-verdict.denied { color: var(--danger); }
.perm-grantlist { margin-top: 8px; display: flex; flex-direction: column; gap: 4px; }
.perm-grantline { font-size: 12px; }
.perm-eval { margin-top: 10px; font-size: 12px; color: var(--text-dim); }
.perm-eval summary { cursor: pointer; }
.perm-grantform { margin-top: 12px; }

/* ---- security center (SEC-001) ---- */
.sec-editor-head { margin-bottom: 12px; }
.sec-editor-head .ov-panel-title { font-size: 14px; font-weight: 700; }

/* ---- asset management (ASSET-001) ---- */
.asset-detail { display: flex; flex-direction: column; gap: 14px; }
.asset-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 8px 14px; }
.asset-kv { display: flex; flex-direction: column; gap: 2px; padding: 6px 8px; border: 1px solid var(--border-soft); border-radius: 6px; }
.asset-kv .asset-k { font-size: 10px; text-transform: uppercase; letter-spacing: 0.5px; color: var(--text-faint); font-weight: 600; }
.asset-kv .asset-v { font-size: 12.5px; display: flex; gap: 6px; align-items: center; flex-wrap: wrap; }
.asset-form { display: flex; flex-wrap: wrap; gap: 4px 18px; margin-top: 8px; }
.asset-form .field { min-width: 200px; flex: 1 1 200px; margin-bottom: 8px; max-width: none; }
.asset-inline { display: flex; flex-wrap: wrap; align-items: flex-end; gap: 8px 18px; margin: 8px 0; }
.asset-inline .field { margin-bottom: 0; min-width: 220px; }
.asset-details { margin-top: 12px; }
.asset-details > summary { cursor: pointer; color: var(--accent); font-size: 12.5px; font-weight: 600; }
.asset-details[open] > summary { margin-bottom: 8px; }
.asset-pager { display: flex; align-items: center; justify-content: space-between; gap: 10px; margin-top: 10px; }
.asset-row { cursor: pointer; }
.ghost-link.danger:hover { color: var(--danger); border-color: var(--danger); }
.hidden { display: none; }