:root{--navy:#081b45;--blue:#0865b5;--border:#e0e8f2;--bg:#f2f6fb;--text:#122444;--muted:#61718a}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px 'Segoe UI',Arial,sans-serif}a{color:var(--blue);text-decoration:none}.topbar{position:fixed;z-index:20;top:0;left:0;right:0;height:86px;background:white;display:flex;align-items:center;padding:14px 30px;gap:26px;box-shadow:0 2px 12px #12325318}.brand{width:274px;height:71px;object-fit:contain;object-position:left center}.separator{height:50px;border-left:2px solid #d8e2ee}.top-title{display:flex;flex-direction:column;gap:4px}.top-title strong{font-size:27px;letter-spacing:-.6px;color:var(--navy)}.top-title small{font-size:14px;color:#556a85}.top-right{margin-left:auto;display:flex;align-items:center;gap:13px;font-weight:600}.user-bubble{width:32px;height:32px;display:grid;place-items:center;color:white;border-radius:50%;background:#0d558f}.logout{background:#f0f5fb;border:1px solid var(--border);color:#174a75}.sidebar{position:fixed;top:86px;bottom:0;left:0;width:237px;background:linear-gradient(145deg,#04417e,#075aa0 65%,#147ec6);padding:30px 10px 20px;color:white;display:flex;flex-direction:column;justify-content:space-between}.sidebar nav{display:grid;gap:7px}.sidebar nav a{display:flex;align-items:center;gap:16px;padding:13px 17px;color:white;border-radius:9px;font-size:15px}.sidebar nav a:first-letter{font-size:23px}.sidebar nav a.selected,.sidebar nav a:hover{background:#2892d8}.side-footer{padding:18px;color:#c5e9ff}.side-footer span{font-size:11px}main{margin:86px 0 0 237px;padding:20px;min-height:calc(100vh - 86px)}main.no-sidebar{margin-left:0}.hero{display:flex;align-items:center;gap:22px;margin:-20px -20px 18px;padding:22px 35px;background:linear-gradient(110deg,#f7fbff,#c9e2f6 70%,#2c94d4);min-height:105px}.hero h1{font-size:35px;margin:0 0 5px;letter-spacing:-1px}.hero p{font-size:17px;margin:0}.hero-icon,.login-icon{background:linear-gradient(155deg,#279be4,#07569c);color:#fff;font-size:35px;display:grid;place-items:center;width:67px;height:67px;border-radius:13px;box-shadow:0 5px 12px #124d8e55}.quick-grid{display:grid;grid-template-columns:repeat(6,minmax(0,1fr));gap:12px;margin-bottom:20px}.quick-card{display:grid;grid-template-columns:40px auto;grid-template-rows:auto 1fr;gap:7px 12px;min-height:103px;background:white;border:1px solid var(--border);border-radius:13px;padding:18px 12px;box-shadow:0 3px 8px #1232530b;color:var(--navy)}.quick-card>span{font-size:30px;color:#0a70bc;grid-row:span 2}.quick-card>strong{font-size:15px}.quick-card>small{font-size:12px;color:#425776;line-height:1.4}.dashboard-grid{display:grid;grid-template-columns:minmax(0,2fr) minmax(290px,1fr);gap:14px}.panel{background:#fff;border:1px solid var(--border);border-radius:13px;padding:18px;margin-bottom:15px;box-shadow:0 3px 9px #15335b10}.panel h2{font-size:19px;color:var(--navy);margin:0 0 17px}.panel-head{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:14px}.panel-head h2{margin:0}.primary{background:linear-gradient(#0a6dc2,#06559e);border:0;color:#fff;border-radius:6px;padding:10px 16px;display:inline-block;cursor:pointer;font-weight:600}.link{white-space:nowrap;font-size:13px}.panel input[type=search]{width:100%;margin-bottom:12px}.table-wrap{overflow:auto}table{width:100%;border-collapse:collapse;min-width:490px}th{text-align:left;font-size:12px;color:#263852;background:#f2f6fa;padding:13px 10px;border-bottom:1px solid #d8e2ed}td{padding:13px 10px;border-bottom:1px solid #ebf0f5;white-space:normal}tbody tr[hidden]{display:none}td code{font-size:12px}.empty{text-align:center;color:var(--muted);padding:26px}.status{display:inline-block;border-radius:100px;padding:5px 9px;font-size:12px}.green{background:#ddf6e5;color:#147338}.red{background:#ffdfdf;color:#a3232f}.stats{display:grid;grid-template-columns:repeat(5,1fr);gap:10px;margin-bottom:15px}.stats article{background:#fff;border:1px solid var(--border);border-radius:12px;padding:13px;min-height:84px;display:flex;flex-direction:column;gap:9px}.stats article b{font-size:24px;color:#092b60}.stats article span{font-size:11px}.stats .green-text{color:#22a25c}.stats .orange-text{color:#e9a100}.stats .red-text{color:#bd1e25}.backup-panel p,.note,.muted{color:var(--muted);line-height:1.6}.notice{display:flex;align-items:center;gap:18px;padding:12px 17px;margin-bottom:10px;border-radius:8px}.notice>strong{font-size:28px;min-width:23px}.notice div{display:flex;flex-direction:column;gap:5px}.notice small{color:#526078}.rednotice{background:#fff1f1;border-left:5px solid #fa4155}.orangenotice{background:#fff7e8;border-left:5px solid #f5b21e}.activity>div{display:grid;grid-template-columns:14px 95px 1fr;align-items:start;gap:7px;padding:12px 0;border-bottom:1px solid var(--border)}.activity>div:last-child{border:0}.activity-dot{color:#1773ba}.activity small{color:#667792}.activity span:last-child{word-break:break-word}.page-title{padding:14px 0 20px}.page-title h1{font-size:32px;margin:0 0 6px}.page-title p{margin:0;color:var(--muted)}.two-column{display:grid;grid-template-columns:minmax(0,1.7fr) minmax(280px,1fr);gap:16px}label{display:block;font-size:13px;font-weight:600;margin:14px 0;color:#2c3e59}input,select{display:block;width:100%;padding:12px;margin-top:7px;border:1px solid #cbd8e7;border-radius:7px;background:white;font:inherit;color:#172944}input:focus,select:focus{outline:2px solid #67b5ef}.error{padding:12px;background:#fff0f0;border:1px solid #ffb9b9;border-radius:7px;color:#a22c31;margin-bottom:12px}.login-layout{display:grid;place-items:center;min-height:calc(100vh - 140px)}.login-card{background:white;width:min(450px,94vw);padding:40px;border-radius:18px;box-shadow:0 12px 30px #002d5b20;text-align:center}.login-icon{margin:0 auto 17px}.login-card h1{margin:0;font-size:27px}.login-card>p{color:var(--muted)}.login-card form{text-align:left;margin:28px 0}.login-card .wide{width:100%;margin-top:12px}.login-card small{color:var(--muted)}@media(max-width:1300px){.quick-grid{grid-template-columns:repeat(3,1fr)}.stats{grid-template-columns:repeat(3,1fr)}}@media(max-width:980px){.dashboard-grid,.two-column{grid-template-columns:1fr}.top-title strong{font-size:20px}.sidebar{width:190px}main{margin-left:190px}.brand{width:180px;object-fit:contain}.topbar{gap:12px;padding:8px 14px}}@media(max-width:650px){.topbar{height:64px}.brand{width:125px;height:53px}.top-title small,.separator,.top-right .user-bubble{display:none}.top-title strong{font-size:13px}.top-right{gap:4px}.sidebar{top:64px;width:55px;padding:10px 4px}.sidebar a{padding:12px 13px!important}.sidebar nav a span,.side-footer{display:none}main{margin:64px 0 0 55px;padding:10px}.hero{margin:-10px -10px 10px;padding:14px;gap:10px}.hero h1{font-size:19px}.hero p{font-size:11px}.hero-icon{width:44px;height:44px;font-size:25px}.quick-grid{grid-template-columns:repeat(2,1fr)}.quick-card{grid-template-columns:1fr;padding:11px}.quick-card>span{grid-row:auto}.stats{grid-template-columns:repeat(2,1fr)}.panel{padding:12px}}
/* v0.1.1: visible search controls and client detail navigation */
.search-form{display:flex;align-items:center;gap:9px;flex-wrap:wrap;margin-bottom:15px}
.search-form input[type=search]{flex:1;min-width:190px;margin:0;width:auto}
.search-form .primary{min-height:43px}
.clear-link{padding:10px 4px;white-space:nowrap}
.results-count{white-space:nowrap;font-size:12px}
.clickable-row{cursor:pointer}
.clickable-row:hover,.clickable-row:focus-visible{background:#eaf5ff}
.clickable-row:focus-visible{outline:2px solid #0a70bc;outline-offset:-2px}
.client-name-link{font-weight:600}
.breadcrumb{display:inline-block;margin-bottom:14px;font-size:13px}
.filter-info{display:flex;align-items:center;justify-content:space-between;gap:12px;background:#eef6ff;border:1px solid #d2e8ff;border-radius:8px;padding:10px 12px;margin-bottom:14px;flex-wrap:wrap}
.visually-hidden{position:absolute!important;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
@media(max-width:650px){.search-form{display:grid;grid-template-columns:1fr auto}.search-form input[type=search]{min-width:0}.search-form .clear-link{grid-column:1/-1;padding:0}}
/* v0.2.0 - granular access management */
.info{background:#eef6ff;border:1px solid #bbd9f3;padding:12px 15px;border-radius:8px;margin:0 0 15px;color:#084a7a}
.inline-form{display:inline-block;margin:0}.secondary{background:#eef5fc;border:1px solid #b9ccdf;border-radius:6px;padding:10px 15px;cursor:pointer;color:#145489;font-weight:600}.secondary:hover{background:#dfeefa}.small{font-size:12px;padding:6px 9px}
.subheading{margin-top:30px!important}.status{white-space:nowrap}

/* v0.3.0: expiry drill-down, session timer and certificate ACL exceptions */
.idle-indicator{font-size:12px;color:#4c6581;font-weight:500;background:#eff6fc;padding:7px 10px;border-radius:8px;white-space:nowrap}
.stats .stat-link{background:#fff;border:1px solid var(--border);border-radius:12px;padding:13px;min-height:84px;display:flex;flex-direction:column;gap:9px;color:var(--text)}
.stats .stat-link b{font-size:24px}.stats .stat-link span{font-size:11px}.stats .stat-link:hover{outline:2px solid #90c5ef}
.alert-details{scroll-margin-top:108px}.alert-details summary{cursor:pointer;list-style:none;display:flex}
.alert-details summary::-webkit-details-marker{display:none}.alert-details summary>span:nth-child(2){display:flex;flex-direction:column;gap:5px;flex:1}
.alert-details .chevron{align-self:center;font-size:22px;color:#355570;transform:rotate(0deg);transition:transform .2s}
.alert-details[open] .chevron{transform:rotate(180deg)}
.alert-details .alert-list{padding:2px 10px 14px 14px;margin:-4px 0 12px;border:1px solid #e6edf4;border-top:0;border-radius:0 0 9px 9px;background:#fff}
.alert-item{display:block;padding:9px 5px;border-bottom:1px solid #ecf0f4}.alert-item strong{display:block;color:#153c69;overflow-wrap:anywhere}.alert-item small{display:block;color:#5d6f83;margin-top:3px}
.alert-item:hover{background:#f5faff}.alert-all{display:block;text-align:right;padding:10px 2px;font-weight:600}
.filter-select{min-width:210px;width:auto;margin:0}
.grant-form{display:flex;align-items:flex-end;gap:12px;flex-wrap:wrap;margin:12px 0 25px}
.grant-form label{flex:1;min-width:200px;margin:0}.grant-form button{min-height:43px}
@media(max-width:780px){.idle-indicator{display:none}.grant-form{display:block}.grant-form label{margin:12px 0}.filter-select{width:100%}}

/* v0.4.0: grouped permission controls and password confirmations */
.permissions-wide{margin-top:16px}
.matrix-controls{display:grid;grid-template-columns:1fr 1fr;gap:16px;max-width:800px}
.matrix-controls label{margin:0 0 18px}
.matrix-scroll{max-height:520px;overflow:auto;border:1px solid var(--border);border-radius:8px}
.permission-matrix{min-width:460px}
.permission-matrix thead{position:sticky;top:0;z-index:2}
.permission-matrix th{background:#eaf3fd}
.permission-matrix .matrix-all th{background:#d9eafa}
.permission-matrix .matrix-check-col{width:125px;text-align:center}
.permission-matrix td:not(:first-child){text-align:center}
.permission-matrix .check-center{display:flex;justify-content:center;align-items:center;margin:0;padding:0;cursor:pointer}
.permission-matrix input[type=checkbox]{width:19px;height:19px;margin:0;accent-color:#0967b3;cursor:pointer}
.permission-matrix input[type=checkbox]:disabled{opacity:.35;cursor:not-allowed}
.matrix-tax{display:block;color:#61718a;font-size:12px;margin-top:5px}
.matrix-actions{display:flex;align-items:center;justify-content:flex-end;gap:18px;flex-wrap:wrap;padding-top:17px}
.matrix-actions #permissions-summary{margin-right:auto}
.unsaved-indicator{color:#994b00;background:#fff2d7;border-radius:7px;padding:8px 12px;font-size:12px}
[hidden]{display:none!important}
.password-feedback{color:#b22929;font-size:12px;margin:7px 0}
.password-reset-form{max-width:630px}
@media(max-width:720px){.matrix-controls{grid-template-columns:1fr}.matrix-actions{justify-content:stretch}.matrix-actions .primary{width:100%}}
/* v0.8.0 backup destination settings */
.backup-config { padding: 14px 18px; border: 1px solid #dce5f1; border-radius: 12px; background: #f8fafc; }
.backup-config h3 { color: #203963; margin-top: 0; }
.backup-config label { display: block; margin: 12px 0; font-weight: 500; }
.backup-config input[type="text"], .backup-config input:not([type]) , .backup-config input[type="number"] {display:block;width:100%;min-width:0;padding:10px;margin-top:4px;border-radius:7px;border:1px solid #cbd5e1;box-sizing:border-box;}
.backup-config input[readonly] { background: #eff2f6; color: #667085; }
.backup-probe-form {display:flex;gap:10px;flex-wrap:wrap;}

.backup-config input[type="checkbox"]{display:inline-block;width:17px;height:17px;margin:0 8px 0 0;vertical-align:middle;}
.backup-probe-form button,.panel form[action="/backups/settings"] > button{display:inline-block;background:#075eab;color:white;border:0;border-radius:7px;padding:11px 15px;margin:8px 5px 8px 0;cursor:pointer;font-weight:600;}
.backup-probe-form button:hover,.panel form[action="/backups/settings"] > button:hover{background:#054783;}

/* 0.9.0: MFA, audit search and reporting */
.account-link{font-size:12px;color:#075eab;white-space:nowrap;font-weight:600;margin:0 8px}.mfa-key{font-size:1.15rem;letter-spacing:2px;overflow-wrap:anywhere;padding:14px;background:#eef5fc;border-radius:8px}.mfa-codes{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px;list-style:none;padding:0}.mfa-codes li{padding:14px;background:#eef6ff;border-radius:8px;letter-spacing:1px}.recovery-panel{max-width:740px;margin:40px auto}.audit-filters{display:grid;grid-template-columns:2fr 1.5fr 1fr 1fr auto auto;gap:10px;align-items:end;margin-bottom:22px}.audit-filters label{margin:0;font-size:12px}.audit-filters button,.audit-filters a{margin-bottom:0;white-space:nowrap}.action-link{display:inline-block;text-decoration:none;text-align:center}.audit-filters input{width:100%;margin-top:5px}.audit-filters .secondary{height:43px;box-sizing:border-box}@media(max-width:940px){.audit-filters{grid-template-columns:repeat(2,minmax(0,1fr))}.audit-filters button,.audit-filters a{width:100%}}

/* 0.9.1: protected Authenticator QR onboarding */
.mfa-qr-box{display:flex;align-items:center;flex-direction:column;gap:7px;width:max-content;max-width:100%;margin:17px 0;padding:18px 20px;border:1px solid #cbddee;border-radius:12px;background:#fff;box-shadow:0 4px 15px #03397512}
.mfa-qr-box img{display:block;width:244px;height:244px;max-width:100%;object-fit:contain;image-rendering:pixelated}
.mfa-qr-box span{color:#3b5772;font-size:13px;font-weight:600}
.mfa-manual{max-width:520px;margin:12px 0 18px;border:1px solid #d6e3ef;border-radius:9px;padding:12px 15px;background:#f8fbff}
.mfa-manual summary{cursor:pointer;font-weight:600;color:#075eab}
.mfa-manual .mfa-key{margin:11px 0 2px}
@media(max-width:400px){.mfa-qr-box{padding:12px 10px}.mfa-qr-box img{width:216px;height:216px}}
/* v1.1.0 RC1 - Notifications settings */
.notification-columns{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:0 22px}
.notification-columns label{min-width:0}
.notification-columns input,.notification-columns select{box-sizing:border-box}
.notice-checkbox-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px 16px;margin:14px 0 22px}
.notice-option{display:flex;align-items:center;gap:9px;margin:0;padding:13px;border:1px solid #dce5f1;background:#f8fafc;border-radius:9px;font-size:13px;cursor:pointer}
.notice-option input,.notice-days input{flex:none;display:inline-block;width:18px;height:18px;accent-color:#0967b3;margin:0}
.notice-days{display:flex;flex-wrap:wrap;gap:9px;margin:12px 0 20px}
.notice-days label{display:flex;align-items:center;gap:7px;margin:0;padding:9px 12px;border:1px solid #dce5f1;border-radius:8px;cursor:pointer}
@media(max-width:900px){.notice-checkbox-grid,.notification-columns{grid-template-columns:1fr}}