:root{--bg:#f6f7f9;--surface:#fff;--nav-bg:#0f1a2b;--nav-fg:#c9d3e3;--nav-active:#1d2c45;--text:#142033;--muted:#5b6678;--border:#e2e6ec;--accent:#2563eb;--ok:#15803d;--bad:#b91c1c;--warn-bg:#7f1d1d;--warn-fg:#fff5f5;--radius:10px;color:var(--text);background:var(--bg);font-family:Inter,Segoe UI,system-ui,-apple-system,sans-serif}@media (prefers-color-scheme:dark){:root{--bg:#0b1220;--surface:#111a2c;--nav-bg:#070d18;--nav-active:#18233a;--text:#e6ebf3;--muted:#93a0b5;--border:#1f2a40;--accent:#60a5fa;--ok:#4ade80;--bad:#f87171}}*{box-sizing:border-box}body{background:var(--bg);margin:0}.shell{grid-template-rows:auto 1fr;grid-template-columns:248px 1fr;min-height:100vh;display:grid}.dev-banner{background:var(--warn-bg);color:var(--warn-fg);letter-spacing:.01em;grid-column:1/-1;padding:8px 16px;font-size:13px;font-weight:600}.nav{background:var(--nav-bg);color:var(--nav-fg);flex-direction:column;padding:16px 10px;display:flex}.brand{color:#fff;align-items:center;gap:10px;padding:4px 10px 18px;font-size:16px;font-weight:700;display:flex}.brand-mark{background:linear-gradient(135deg,#3b82f6,#22d3ee);border-radius:6px;width:22px;height:22px}.nav ul{margin:0;padding:0;list-style:none}.nav-item{text-align:left;width:100%;color:inherit;font:inherit;cursor:pointer;background:0 0;border:0;border-radius:7px;padding:8px 10px;font-size:14px}.nav-item:hover{background:var(--nav-active);color:#fff}.nav-item.active{background:var(--nav-active);color:#fff;box-shadow:inset 3px 0 0 var(--accent)}.nav-item:focus-visible{outline:2px solid var(--accent);outline-offset:1px}.nav-foot{opacity:.7;margin-top:auto;padding:12px 10px 0;font-size:12px}.main{min-width:0;padding:28px 32px}.page-head h1{margin:0 0 4px;font-size:22px}.muted{color:var(--muted);margin:0}.page-head{margin-bottom:20px}.grid{grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:16px;display:grid}.card{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);padding:18px 20px}.card h2{text-transform:uppercase;letter-spacing:.06em;color:var(--muted);margin:0 0 12px;font-size:14px}.card.empty p{margin:0}.checks{margin:0;padding:0;list-style:none}.checks li{border-bottom:1px solid var(--border);align-items:center;gap:10px;padding:6px 0;display:flex}.checks li:last-child{border-bottom:0}.check-name{text-transform:capitalize;flex:1}.dot{border-radius:50%;width:9px;height:9px}.dot.ok{background:var(--ok)}.dot.bad{background:var(--bad)}.dot.warn{background:#d97706}.status{font-size:13px;font-weight:600}.status.ok{color:var(--ok)}.status.bad{color:var(--bad)}.status.warn{color:#b45309}.kv{grid-template-columns:auto 1fr;gap:6px 16px;margin:0;display:grid}.kv dt{color:var(--muted)}.kv dd{margin:0}.mono{font-family:ui-monospace,Cascadia Code,Consolas,monospace;font-size:13px}@media (width<=760px){.shell{grid-template-columns:1fr}.nav{padding:10px}.nav ul{gap:4px;display:flex;overflow-x:auto}.nav-item{white-space:nowrap}.nav-foot{display:none}.main{padding:20px 16px}}.auth-page{background:var(--bg);flex-direction:column;align-items:center;min-height:100vh;display:flex}.auth-page>.dev-banner{align-self:stretch}.auth-page>.muted{margin-top:20vh}.auth-card{background:var(--surface);border:1px solid var(--border);border-radius:14px;width:min(420px,100% - 32px);margin-top:12vh;padding:28px;box-shadow:0 12px 40px #0f1a2b14}.auth-card h1{margin:12px 0 6px;font-size:22px}.auth-card form{gap:10px;margin-top:18px;display:grid}.brand.dark{color:var(--text);padding:0}label{color:var(--muted);gap:4px;font-size:13px;display:grid}input,select,textarea{font:inherit;color:var(--text);background:var(--bg);border:1px solid var(--border);border-radius:8px;min-width:0;padding:8px 10px;font-size:14px}input:focus-visible,select:focus-visible,textarea:focus-visible,button:focus-visible{outline:2px solid var(--accent);outline-offset:1px}textarea{resize:vertical;font-family:ui-monospace,Cascadia Code,Consolas,monospace;font-size:12px}button{font:inherit;cursor:pointer;border:1px solid var(--border);background:var(--surface);color:var(--text);border-radius:8px;padding:8px 14px;font-size:14px}button:hover:not(:disabled){border-color:var(--accent)}button:disabled{opacity:.55;cursor:not-allowed}button.primary{background:var(--accent);border-color:var(--accent);color:#fff;font-weight:600}button.danger{color:var(--bad)}button.link{color:var(--accent);background:0 0;border:0;margin-top:8px;padding:6px 0}button.link.light{color:var(--nav-fg);padding:4px 0;font-size:12px}.page-head{justify-content:space-between;align-items:flex-start;gap:16px;display:flex}.form-grid{grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:12px 16px;display:grid}.form-grid .wide{grid-column:1/-1}.card+.card,.card+.stack,.stack+.card{margin-top:16px}.stack{gap:12px;display:grid}.card.flush{padding:0;overflow-x:auto}.card.flush h2.pad,.pad{padding:18px 20px 0}.row{flex-wrap:wrap;gap:8px;margin-top:10px;display:flex}table{border-collapse:collapse;width:100%;font-size:14px}th{text-align:left;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);border-bottom:1px solid var(--border);padding:12px 20px;font-size:12px;font-weight:600}td{border-bottom:1px solid var(--border);vertical-align:middle;padding:10px 20px}tr:last-child td{border-bottom:0}td.actions{text-align:right;white-space:nowrap}td.actions button+button{margin-left:6px}.strong{font-weight:600}.small{font-size:12px}.empty-row{margin:0;padding:18px 20px}.badge{text-transform:capitalize;background:color-mix(in srgb, var(--muted) 14%, transparent);color:var(--muted);border-radius:999px;padding:2px 8px;font-size:12px;font-weight:600;display:inline-block}.badge.ok{background:color-mix(in srgb, var(--ok) 15%, transparent);color:var(--ok)}.badge.warn{color:#b45309;background:#d9770629}.badge.bad{background:color-mix(in srgb, var(--bad) 14%, transparent);color:var(--bad)}.error{color:var(--bad);background:color-mix(in srgb, var(--bad) 8%, transparent);border-radius:8px;margin:0 0 12px;padding:10px 12px}.notice{color:var(--ok);background:color-mix(in srgb, var(--ok) 8%, transparent);border-radius:8px;margin:0 0 12px;padding:10px 12px}.grants{margin:0;padding:8px 0 0;list-style:none}.grants li{border-top:1px solid var(--border);padding:12px 20px 16px}.grant-head{flex-wrap:wrap;justify-content:space-between;align-items:baseline;gap:12px;display:flex}.grant-body{gap:6px;margin-top:10px;display:grid}pre.cert{white-space:pre-wrap;word-break:break-all;background:var(--bg);border:1px solid var(--border);border-radius:8px;margin:8px 0 0;padding:10px;font-size:11px}.reason{margin:8px 0 4px}.kv.top{margin-top:16px}.who{color:#fff;margin-bottom:2px;font-weight:600}.callout{background:#d9770614;border-left:4px solid #d97706;border-radius:8px;margin:0 0 16px;padding:12px 16px}.callout p{margin:4px 0}.callout ol{margin:6px 0 0;padding-left:20px}.history{gap:6px;margin:0;padding:0;list-style:none;display:grid}.callout .kv{margin:8px 0}.callout .kv dd{word-break:break-all}td.actions button{margin-top:2px}.role-grid{grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:4px 16px;margin:8px 0 12px;display:grid}label.check{align-items:center;gap:8px;font-weight:400;display:flex}label.check input{width:auto}.row.wrap{flex-wrap:wrap;margin-top:12px}fieldset.role-grid{border:1px solid var(--border);border-radius:8px;padding:8px 12px}fieldset.role-grid legend{color:var(--muted);padding:0 4px;font-size:13px}