:root {
  color-scheme: light;
  --page: #f9f9f7;
  --surface: #fcfcfb;
  --raised: #ffffff;
  --ink: #0b0b0b;
  --ink-2: #52514e;
  --muted: #898781;
  --grid: #e1e0d9;
  --axis: #c3c2b7;
  --ring: rgba(11, 11, 11, 0.10);
  --wash: rgba(11, 11, 11, 0.04);
  --accent: #2a78d6;
  --s-allow: #2a78d6;
  --s-deny: #eb6834;
  --s-change: #1baf7a;
  --good: #0ca30c;
  --warning: #fab219;
  --critical: #d03b3b;
  --font: system-ui, -apple-system, "Segoe UI", sans-serif;
}
@media (prefers-color-scheme: dark) {
  :root:where(:not([data-theme="light"])) {
    color-scheme: dark;
    --page: #0d0d0d; --surface: #1a1a19; --raised: #222220; --ink: #f0efec; --ink-2: #c3c2b7;
    --grid: #2c2c2a; --axis: #383835; --ring: rgba(255, 255, 255, 0.10); --wash: rgba(255, 255, 255, 0.05);
    --accent: #3987e5; --s-allow: #3987e5; --s-deny: #d95926; --s-change: #199e70;
  }
}
:root[data-theme="dark"] {
  color-scheme: dark;
  --page: #0d0d0d; --surface: #1a1a19; --raised: #222220; --ink: #f0efec; --ink-2: #c3c2b7;
  --grid: #2c2c2a; --axis: #383835; --ring: rgba(255, 255, 255, 0.10); --wash: rgba(255, 255, 255, 0.05);
  --accent: #3987e5; --s-allow: #3987e5; --s-deny: #d95926; --s-change: #199e70;
}

* { box-sizing: border-box; }
body { margin: 0; background: var(--page); color: var(--ink); font: 14px/1.45 var(--font); }
a { color: var(--accent); text-decoration: none; }
a:hover { text-decoration: underline; }
h1 { font-size: 20px; margin: 0 0 16px; font-weight: 600; }
h2 { font-size: 14px; margin: 0 0 12px; font-weight: 600; color: var(--ink-2); }
code, .mono { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 12px; }

.top { display: flex; align-items: center; gap: 24px; padding: 10px 24px; background: var(--surface); border-bottom: 1px solid var(--ring); position: sticky; top: 0; z-index: 5; flex-wrap: wrap; }
.brand { font-weight: 700; color: var(--ink); }
nav { display: flex; gap: 4px; flex: 1; flex-wrap: wrap; }
nav a { color: var(--ink-2); padding: 6px 10px; border-radius: 6px; }
nav a.on { background: var(--wash); color: var(--ink); font-weight: 600; }
nav a:hover { text-decoration: none; background: var(--wash); }
.who { display: flex; align-items: center; gap: 8px; color: var(--ink-2); }
main { padding: 24px; max-width: 1400px; margin: 0 auto; }

.grid { display: grid; gap: 16px; grid-template-columns: repeat(12, 1fr); }
.card { background: var(--surface); border: 1px solid var(--ring); border-radius: 10px; padding: 16px; min-width: 0; }
.span-12 { grid-column: span 12; } .span-8 { grid-column: span 8; } .span-6 { grid-column: span 6; } .span-4 { grid-column: span 4; }
@media (max-width: 900px) { .span-8, .span-6, .span-4 { grid-column: span 12; } main { padding: 16px; } }

.kpis { display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 16px; }
.kpi { background: var(--surface); border: 1px solid var(--ring); border-radius: 10px; padding: 14px 16px; display: block; color: inherit; }
.kpi:hover { text-decoration: none; border-color: var(--axis); }
.kpi .v { font-size: 28px; font-weight: 600; line-height: 1.1; }
.kpi .l { color: var(--ink-2); font-size: 12px; margin-top: 4px; }

table { width: 100%; border-collapse: collapse; }
th { text-align: left; font-weight: 600; color: var(--ink-2); font-size: 12px; padding: 8px; border-bottom: 1px solid var(--grid); white-space: nowrap; }
td { padding: 8px; border-bottom: 1px solid var(--grid); vertical-align: top; font-variant-numeric: tabular-nums; }
tr.click { cursor: pointer; }
tr.click:hover td { background: var(--wash); }
tr.detail td { background: var(--wash); }
.wrap { overflow-x: auto; }
.nw { white-space: nowrap; }
.trunc { max-width: 420px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }

.chip { display: inline-flex; align-items: center; gap: 4px; padding: 1px 8px; border-radius: 99px; font-size: 12px; border: 1px solid var(--ring); color: var(--ink-2); white-space: nowrap; }
.chip::before { content: ""; width: 7px; height: 7px; border-radius: 50%; background: var(--muted); }
.chip.active::before, .chip.allow::before { background: var(--good); }
.chip.expired::before { background: var(--warning); }
.chip.revoked::before, .chip.deny::before { background: var(--critical); }
.chip.change::before { background: var(--s-change); }
.chip.admin { color: var(--accent); }
.chip.admin::before { background: var(--accent); }

.filters { display: flex; gap: 8px; flex-wrap: wrap; align-items: end; margin-bottom: 16px; }
label.f { display: flex; flex-direction: column; gap: 4px; font-size: 12px; color: var(--ink-2); }
input, select, button { font: inherit; color: var(--ink); }
input, select { background: var(--raised); border: 1px solid var(--ring); border-radius: 6px; padding: 6px 8px; min-width: 0; }
input:focus, select:focus, button:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
button { background: var(--accent); color: #fff; border: 0; border-radius: 6px; padding: 7px 14px; cursor: pointer; font-weight: 600; }
button.ghost, a.ghost { background: transparent; color: var(--ink-2); border: 1px solid var(--ring); padding: 5px 10px; border-radius: 6px; font-weight: 400; }
button.danger { background: var(--critical); }
button:disabled { opacity: 0.5; cursor: default; }
.row { display: flex; gap: 12px; flex-wrap: wrap; align-items: center; }
.checks { display: flex; gap: 12px; flex-wrap: wrap; }
.checks label { display: flex; gap: 6px; align-items: center; }
.hint { color: var(--muted); font-size: 12px; }
.err { color: var(--critical); }
.ok { color: var(--good); }
dl.kv { display: grid; grid-template-columns: max-content 1fr; gap: 6px 16px; margin: 0; }
dl.kv dt { color: var(--ink-2); }
dl.kv dd { margin: 0; overflow-wrap: anywhere; }

.legend { display: flex; gap: 16px; font-size: 12px; color: var(--ink-2); margin-bottom: 8px; }
.legend span::before { content: ""; display: inline-block; width: 12px; height: 2px; vertical-align: middle; margin-right: 6px; background: var(--c); }
svg text { fill: var(--muted); font-size: 11px; font-family: var(--font); }
.hbar { display: grid; grid-template-columns: minmax(80px, 40%) 1fr max-content; gap: 6px 10px; align-items: center; font-size: 13px; }
.hbar .bar { height: 8px; border-radius: 0 4px 4px 0; background: var(--s-allow); min-width: 2px; }
.hbar .bar.deny { background: var(--s-deny); }
.hbar .n { color: var(--ink-2); font-variant-numeric: tabular-nums; }
.tip { position: fixed; pointer-events: none; background: var(--raised); border: 1px solid var(--ring); border-radius: 8px; padding: 8px 10px; font-size: 12px; box-shadow: 0 4px 16px rgba(0, 0, 0, 0.12); z-index: 10; }
.tip .k::before { content: ""; display: inline-block; width: 10px; height: 2px; vertical-align: middle; margin-right: 6px; background: var(--c); }
.empty { color: var(--muted); padding: 24px; text-align: center; }
.sentinel { height: 1px; }
td button.ghost { padding: 0 6px; font-size: 12px; margin-left: 4px; }