:root {
  --bg: #F4F5F7;
  --surface: #FFFFFF;
  --border: #E1E4E8;
  --ink: #1A2233;
  --ink-soft: #5B6472;
  --accent: #2F5D9F;
  --accent-ink: #FFFFFF;
  --ok: #1E7A46;
  --ok-bg: #E3F3EA;
  --warn: #9A5B00;
  --warn-bg: #FBEED9;
  --danger: #B23A2E;
  --sidebar-bg: #16233F;
  --sidebar-ink: #C6D0E4;
  --sidebar-active-bg: #24365C;
}

* { box-sizing: border-box; }

body {
  margin: 0;
  background: var(--bg);
  color: var(--ink);
  font-family: -apple-system, "Segoe UI", Roboto, sans-serif;
  line-height: 1.5;
}

code { font-family: "SFMono-Regular", Consolas, monospace; font-size: 0.92em; }

/* --- login --- */
.login-screen {
  min-height: 100vh;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 24px;
}
.login-card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 32px;
  width: 100%;
  max-width: 340px;
  box-shadow: 0 1px 3px rgba(0,0,0,0.06), 0 8px 24px -12px rgba(0,0,0,0.15);
}
.login-card h1 { margin: 0 0 4px; font-size: 22px; }
.login-card .subtitle { margin: 0 0 20px; color: var(--ink-soft); font-size: 14px; }
.login-card label { display: block; font-size: 13px; font-weight: 600; margin: 14px 0 6px; }
.login-card input {
  width: 100%; padding: 10px 12px; border: 1px solid var(--border); border-radius: 6px; font-size: 15px;
}
.login-card button {
  margin-top: 22px; width: 100%; padding: 11px; border: none; border-radius: 6px;
  background: var(--accent); color: var(--accent-ink); font-size: 15px; font-weight: 600; cursor: pointer;
}
.login-card .error { color: var(--danger); font-size: 13px; margin: 0 0 4px; }
.login-card-wide { max-width: 400px; }
.qr-box { display: flex; justify-content: center; margin: 12px 0; }
.qr-box svg { width: 180px; height: 180px; }
.recovery-code-list {
  list-style: none; margin: 16px 0; padding: 14px; background: var(--bg); border: 1px solid var(--border);
  border-radius: 6px; display: grid; grid-template-columns: 1fr 1fr; gap: 8px;
}
.recovery-code-list code { font-size: 13px; }
.error-standalone { max-width: 340px; margin: 0 auto 12px; text-align: center; color: var(--danger); font-size: 13px; }
.auth-switch { text-align: center; margin-top: 14px; }
.auth-switch a { color: var(--accent); text-decoration: none; font-size: 13px; }

/* --- shell layout --- */
.shell {
  display: grid;
  grid-template-columns: 210px 1fr;
  grid-template-rows: 56px 1fr;
  grid-template-areas: "topbar topbar" "sidebar content";
  min-height: 100vh;
}
.topbar {
  grid-area: topbar;
  background: var(--surface);
  border-bottom: 1px solid var(--border);
  display: flex;
  align-items: center;
  gap: 14px;
  padding: 0 20px;
}
.brand { font-weight: 700; }
.logout-form { margin-left: auto; display: flex; align-items: center; gap: 10px; }
.who { color: var(--ink-soft); font-size: 13px; margin-left: auto; display: flex; align-items: center; gap: 8px; }
.twofa-badge { font-size: 11px; }
.link-btn { background: none; border: none; color: var(--accent); cursor: pointer; font-size: 13px; padding: 0; }

.sidebar {
  grid-area: sidebar;
  background: var(--sidebar-bg);
  padding: 16px 0;
  display: flex;
  flex-direction: column;
  gap: 2px;
}
.sidebar a {
  color: var(--sidebar-ink);
  text-decoration: none;
  padding: 10px 20px;
  font-size: 14px;
}
.sidebar a.active { background: var(--sidebar-active-bg); color: #fff; font-weight: 600; }
.sidebar a:hover { background: var(--sidebar-active-bg); }

.content { grid-area: content; padding: 28px 32px; max-width: 1000px; }
.content h1 { margin: 0 0 20px; font-size: 22px; }

.nav-toggle-input { display: none; }
.nav-toggle-btn { display: none; cursor: pointer; font-size: 20px; }

/* --- widgets --- */
.stat-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 14px; }
.stat-card {
  background: var(--surface); border: 1px solid var(--border); border-radius: 8px; padding: 18px;
  display: flex; flex-direction: column; gap: 4px;
}
.stat-card.warn { border-color: var(--warn); }
.stat-value { font-size: 28px; font-weight: 700; font-variant-numeric: tabular-nums; }
.stat-label { color: var(--ink-soft); font-size: 13px; }

.data-table { width: 100%; border-collapse: collapse; background: var(--surface); border: 1px solid var(--border); border-radius: 8px; overflow: hidden; }
.data-table th, .data-table td { text-align: left; padding: 10px 14px; border-bottom: 1px solid var(--border); font-size: 14px; }
.data-table th { background: #FAFBFC; color: var(--ink-soft); font-size: 12px; text-transform: uppercase; letter-spacing: 0.04em; }
.data-table tr:last-child td { border-bottom: none; }
.data-table .empty { text-align: center; color: var(--ink-soft); padding: 28px; }

.pill { display: inline-block; padding: 2px 9px; border-radius: 100px; font-size: 12px; background: #EDEFF2; color: var(--ink-soft); }
.pill-ok { background: var(--ok-bg); color: var(--ok); }
.pill-warn { background: var(--warn-bg); color: var(--warn); }

.filter-row { margin-bottom: 16px; display: flex; align-items: center; gap: 10px; }
.filter-row select { padding: 8px 10px; border: 1px solid var(--border); border-radius: 6px; font-size: 14px; min-width: 240px; }

.panel { background: var(--surface); border: 1px solid var(--border); border-radius: 8px; padding: 20px; margin-top: 20px; }
.panel h2 { margin: 0 0 6px; font-size: 16px; }
.panel-placeholder textarea { width: 100%; margin: 10px 0; border: 1px solid var(--border); border-radius: 6px; padding: 10px; font-family: inherit; }
.panel button[disabled] { padding: 9px 16px; border: 1px solid var(--border); border-radius: 6px; background: #F1F2F4; color: var(--ink-soft); cursor: not-allowed; }

.kv { display: grid; grid-template-columns: 160px 1fr; row-gap: 8px; }
.kv dt { color: var(--ink-soft); font-size: 13px; }
.kv dd { margin: 0; font-size: 14px; }

.hint { color: var(--ink-soft); font-size: 13px; margin-top: 12px; }

.flash { padding: 10px 14px; border-radius: 6px; font-size: 14px; margin-bottom: 16px; }
.flash-ok { background: var(--ok-bg); color: var(--ok); }
.flash-error { background: #FBE7E4; color: var(--danger); }
.flash-warn { background: var(--warn-bg); color: var(--warn); }
.flash a { color: inherit; font-weight: 600; }
.section-heading { font-size: 15px; margin: 24px 0 10px; color: var(--ink-soft); text-transform: uppercase; letter-spacing: 0.04em; }

.inline-form { display: flex; flex-wrap: wrap; align-items: flex-end; gap: 12px; margin-top: 10px; }
.inline-form label { display: flex; flex-direction: column; font-size: 12px; color: var(--ink-soft); gap: 4px; }
.inline-form input, .inline-form select { padding: 8px 10px; border: 1px solid var(--border); border-radius: 6px; font-size: 14px; }
.inline-form button { padding: 9px 16px; border: none; border-radius: 6px; background: var(--accent); color: var(--accent-ink); font-weight: 600; cursor: pointer; }

.actions { display: flex; flex-wrap: wrap; gap: 6px; }
.actions form { display: inline; }
.actions button { padding: 6px 10px; border: 1px solid var(--border); border-radius: 6px; background: var(--surface); cursor: pointer; font-size: 13px; }
.actions a button { padding: 6px 10px; }
.btn-danger { color: var(--danger); border-color: var(--danger) !important; }
.threshold-form { margin: 0; }
.threshold-form input[type=number] { width: 90px; }
.import-textarea-label { flex: 1 1 100%; }
.import-textarea-label textarea { width: 100%; font-family: "SFMono-Regular", Consolas, monospace; padding: 8px 10px; border: 1px solid var(--border); border-radius: 6px; }
.audit-meta { font-size: 12px; color: var(--ink-soft); word-break: break-all; }
.subsection { font-size: 14px; margin: 20px 0 4px; }

/* --- responsive: collapse sidebar under a toggle on small screens --- */
@media (max-width: 720px) {
  .shell { grid-template-columns: 1fr; grid-template-areas: "topbar" "content"; }
  .nav-toggle-btn { display: block; }
  .sidebar {
    position: fixed; top: 56px; left: 0; bottom: 0; width: 210px; transform: translateX(-100%);
    transition: transform 0.15s ease; z-index: 10;
  }
  .nav-toggle-input:checked ~ .shell .sidebar { transform: translateX(0); }
  .content { padding: 20px; }
  .stat-grid { grid-template-columns: repeat(2, 1fr); }
}