:root {
    color-scheme: dark;
    --bg:#14161a; --panel:#1d2026; --line:#2c3038; --fg:#e6e8eb; --dim:#9aa3ad;
    --acc:#4f8ff7; --ok:#3fb96f; --warn:#e0a93f; --bad:#e0563f;
}
* { box-sizing: border-box; }
body { margin:0; background:var(--bg); color:var(--fg); font:14px/1.5 "Segoe UI", system-ui, sans-serif; }
a { color:var(--acc); text-decoration:none; }
code { background:#15171b; padding:2px 6px; border-radius:4px; font-family:Consolas, monospace; }

/* ---- shell / nav ---- */
.shell { display:flex; min-height:100vh; }
.sidebar { width:210px; background:var(--panel); border-right:1px solid var(--line); display:flex; flex-direction:column; padding:14px 10px; }
.brand { font-size:17px; font-weight:600; padding:6px 10px 16px; }
.brand span { color:var(--acc); }
.nav-item { display:block; padding:8px 12px; border-radius:7px; color:var(--dim); margin-bottom:2px; }
.nav-item:hover { background:#23262d; color:var(--fg); }
.nav-item.active { background:#23262d; color:var(--fg); }
.nav-spacer { flex:1; }
.nav-who { padding:6px 12px; color:var(--dim); font-size:12px; word-break:break-all; }
.nav-logout { width:100%; background:transparent; border:1px solid var(--line); color:var(--dim); padding:7px; border-radius:7px; cursor:pointer; }
.nav-logout:hover { color:var(--fg); }
main { flex:1; overflow:auto; }
article { max-width:1040px; margin:0 auto; padding:22px 26px 60px; }

h1 { font-size:20px; margin:0 0 4px; }
h2 { font-size:14px; text-transform:uppercase; letter-spacing:.06em; color:var(--dim); margin:24px 0 10px; }
.muted { color:var(--dim); }
.muted.details, .fp { font-size:12px; }

/* ---- tables ---- */
table { width:100%; border-collapse:collapse; margin-top:10px; }
th, td { text-align:left; padding:8px 9px; border-bottom:1px solid var(--line); font-size:13px; vertical-align:middle; }
th { color:var(--dim); font-weight:500; }
.dot { display:inline-block; width:8px; height:8px; border-radius:99px; background:#555; }
.dot.on { background:var(--ok); }
.pill { display:inline-block; padding:1px 9px; border-radius:99px; font-size:12px; }
.pill.pending { background:#3a3320; color:var(--warn); }
.pill.active { background:#1f3527; color:var(--ok); }
.pill.revoked, .pill.quarantined { background:#3a2420; color:var(--bad); }

/* ---- controls ---- */
button { background:var(--acc); border:0; color:#fff; padding:5px 12px; border-radius:6px; cursor:pointer; font-size:13px; }
button.ghost { background:transparent; border:1px solid var(--line); color:var(--dim); }
button.danger { background:var(--bad); }
button + button { margin-left:6px; }
input, select, textarea { background:#15171b; border:1px solid var(--line); color:var(--fg); padding:6px 9px; border-radius:6px; font:inherit; }
.tagbox { width:170px; }
.num-in { width:70px; }
.row { display:flex; gap:12px; align-items:center; flex-wrap:wrap; margin-top:12px; }
.chk { display:flex; align-items:center; gap:6px; }
.banner { background:#1c2430; border:1px solid #2a3a52; border-radius:8px; padding:10px 12px; margin-top:14px; }
.err { color:var(--bad); }
.ok { color:var(--ok); }
.warns { color:var(--warn); font-size:12px; margin-top:10px; }
.warns div { padding:2px 0; }

textarea.policy { width:100%; min-height:300px; margin-top:12px; font:12px/1.5 Consolas, monospace; }

/* ---- dashboard cards ---- */
.cards { display:grid; grid-template-columns:repeat(4,1fr); gap:14px; margin:16px 0; }
.card { background:var(--panel); border:1px solid var(--line); border-radius:10px; padding:16px 18px; }
.card .num { font-size:26px; font-weight:600; }
.card .lbl { color:var(--dim); font-size:12px; }

/* ---- login ---- */
.login-wrap { min-height:100vh; display:flex; align-items:center; justify-content:center; }
.login-card { background:var(--panel); border:1px solid var(--line); border-radius:12px; padding:30px; width:360px; display:flex; flex-direction:column; gap:10px; }
.login-card h1 { font-size:22px; margin:0; }
.login-card .sub { color:var(--dim); margin:0 0 6px; }
.login-card input { width:100%; }
.login-card button { padding:9px; margin-top:4px; }
.login-card .lbl { color:var(--dim); font-size:12px; margin-top:6px; }
.login-card .secret { display:block; font-size:15px; letter-spacing:1px; user-select:all; }
.login-card .uri { font-size:11px; color:var(--dim); word-break:break-all; }