:root{--bg:#f5f6fb;--surface:#fff;--text:#121536;--muted:#5c6285;--line:#e3e6f1;--accent:#3b36d6;--accent-text:#fff;--danger:#c4162a;--ok:#0f7a4a;--side-bg:#1b1464;--side-text:#e8e9ff;--side-muted:#a9acf0;--side-hover:#ffffff14;--side-active:#ffffff2e;--side-w:280px;--top-h:66px}:root[data-theme=dark]{--bg:#0e1020;--surface:#171a33;--text:#eceeff;--muted:#9ba0cc;--line:#2a2e55;--accent:#8b87ff;--accent-text:#0e1020;--danger:#ff6b7a;--ok:#4ad295;--side-bg:#0a0c24}*{box-sizing:border-box}html,body{margin:0}body{background:var(--bg);color:var(--text);font:16px/1.5 system-ui,-apple-system,Segoe UI,Roboto,sans-serif}a{color:inherit}button,select,input{font:inherit;color:inherit}button{cursor:pointer}:focus-visible{outline:2px solid var(--accent);outline-offset:2px}.only-dark{display:none}:root[data-theme=dark] .only-dark{display:inline-flex}:root[data-theme=dark] .only-light{display:none}.only-light{display:inline-flex}.shell{min-height:100dvh}.sidebar{width:var(--side-w);background:var(--side-bg);color:var(--side-text);z-index:30;flex-direction:column;transition:transform .2s;display:flex;position:fixed;inset:0 auto 0 0}.brand{border-bottom:1px solid #ffffff1a;justify-content:space-between;align-items:center;padding:22px 16px 16px;display:flex}.brand-name{font-size:22px;font-weight:700}.brand-sub{color:var(--side-muted);font-size:14px}.nav{flex:1;padding:12px 8px;overflow-y:auto}.group{margin-bottom:8px}.group-head{background:var(--side-hover);width:100%;color:var(--side-text);text-transform:uppercase;letter-spacing:.02em;text-align:left;border:0;border-radius:12px;align-items:center;gap:12px;padding:12px 14px;font-size:15px;font-weight:700;display:flex}.group-head .chev{margin-left:auto;transition:transform .15s;display:inline-flex}.group-head .chev[data-open=false]{transform:rotate(-90deg)}.group ul{margin:6px 0 0;padding:0;list-style:none}.nav-link{color:var(--side-text);border-radius:12px;align-items:center;gap:12px;margin:2px 0;padding:11px 14px;font-size:15px;font-weight:600;text-decoration:none;display:flex}.nav-link:hover{background:var(--side-hover)}.nav-link[aria-current=page]{background:var(--side-active)}.side-foot{border-top:1px solid #ffffff1a;justify-content:space-between;align-items:center;gap:8px;padding:14px 16px;display:flex}.who{flex-direction:column;min-width:0;font-size:14px;display:flex}.who strong{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.who span{color:var(--side-muted);font-size:13px}.linkbtn{color:var(--side-muted);background:0 0;border:0;padding:6px;text-decoration:underline}.scrim{display:none}.main{margin-left:var(--side-w);min-width:0;transition:margin .2s}.shell[data-collapsed=true] .main{margin-left:0}.shell[data-collapsed=true] .sidebar{transform:translate(-100%)}.topbar{z-index:10;height:var(--top-h);background:var(--surface);border-bottom:1px solid var(--line);align-items:center;gap:12px;padding:0 20px;display:flex;position:sticky;top:0}.page-title{white-space:nowrap;text-overflow:ellipsis;margin:0;font-size:20px;overflow:hidden}.spacer{flex:1}.whoami{color:var(--muted);white-space:nowrap;font-size:14px}.iconbtn{background:var(--surface);border:1px solid var(--line);width:42px;height:42px;color:var(--text);border-radius:10px;flex:none;justify-content:center;align-items:center;display:inline-flex}.iconbtn.on-dark{color:var(--side-text);background:0 0;border-color:#ffffff40}.only-mobile{display:none}.select{background:var(--surface);border:1px solid var(--line);height:42px;color:var(--text);border-radius:10px;padding:0 10px}.content{max-width:1200px;padding:28px 24px 48px}h2.section{margin:0 0 4px;font-size:28px}.lead{color:var(--muted);margin:0 0 24px}.cards{grid-template-columns:repeat(auto-fit,minmax(190px,1fr));gap:16px;display:grid}.card{background:var(--surface);border:1px solid var(--line);border-radius:14px;padding:18px}.card .num{font-size:34px;font-weight:700;line-height:1.1}.card .cap{color:var(--muted);font-size:14px}.panel{background:var(--surface);border:1px solid var(--line);border-radius:14px;margin-bottom:20px;padding:18px}.table-wrap{background:var(--surface);border:1px solid var(--line);border-radius:14px;overflow-x:auto}table{border-collapse:collapse;width:100%;min-width:640px;font-size:14px}th,td{text-align:left;border-bottom:1px solid var(--line);white-space:nowrap;padding:10px 14px}th{color:var(--muted);font-size:13px;font-weight:600}tr:last-child td{border-bottom:0}td.mono{text-overflow:ellipsis;max-width:220px;font-family:ui-monospace,Cascadia Mono,Consolas,monospace;font-size:13px;overflow:hidden}.empty{color:var(--muted);text-align:center;padding:24px}.badge{background:var(--line);border-radius:999px;padding:2px 10px;font-size:12px;font-weight:600;display:inline-block}.badge.active{background:color-mix(in srgb, var(--ok) 20%, transparent);color:var(--ok)}.badge.denied{background:color-mix(in srgb, var(--danger) 18%, transparent);color:var(--danger)}.form{flex-wrap:wrap;align-items:end;gap:10px;margin-bottom:20px;display:flex}.form label{color:var(--muted);flex-direction:column;gap:4px;font-size:13px;display:flex}.input{background:var(--surface);border:1px solid var(--line);min-width:0;height:42px;color:var(--text);border-radius:10px;padding:0 12px}.btn{background:var(--accent);height:42px;color:var(--accent-text);border:0;border-radius:10px;padding:0 18px;font-weight:600}.btn.ghost{border:1px solid var(--line);color:var(--text);background:0 0;height:34px;padding:0 12px}.msg{font-size:14px}.msg.err{color:var(--danger)}.msg.ok{color:var(--ok)}.switch{align-items:flex-start;gap:12px;display:flex}.switch input{width:22px;height:22px;accent-color:var(--accent);flex:none;margin-top:3px}.help{color:var(--muted);margin:4px 0 0;font-size:14px}.login-wrap{place-items:center;min-height:100dvh;padding:20px;display:grid;position:relative}.login-card{background:var(--surface);border:1px solid var(--line);border-radius:18px;width:100%;max-width:400px;padding:28px}.login-card h1{margin:0;font-size:28px}.login-card .slogan{color:var(--muted);margin:2px 0 22px}.login-card form{gap:14px;display:grid}.login-card label{color:var(--muted);gap:4px;font-size:14px;display:grid}.login-card .input{width:100%}.login-tools{gap:8px;display:flex;position:absolute;top:16px;right:16px}@media (max-width:1023px){.sidebar{width:min(86vw,320px);transform:translate(-100%)}.shell[data-drawer=true] .sidebar{transform:none;box-shadow:8px 0 30px #00000059}.scrim{z-index:20;background:#080a1e8c;position:fixed;inset:0}.shell[data-drawer=true] .scrim{display:block}.main,.shell[data-collapsed=true] .main{margin-left:0}.only-mobile{display:inline-flex}.whoami{display:none}.content{padding:20px 16px 40px}.topbar{gap:8px;padding:0 12px}}@media (max-width:480px){h2.section{font-size:24px}.select{max-width:112px}.form>*{flex:100%}.form .btn{width:100%}}@media (prefers-reduced-motion:reduce){.sidebar,.main,.group-head .chev{transition:none}}