/* portal-web stylesheet (ours). No inline styles anywhere (CSP style-src 'self'); charts are
   coloured here through the s0…s7 classes. Light and dark themes; WCAG AA contrast. */
:root {
  --bg: #f6f7fb; --surface: #ffffff; --surface-2: #f1f3f9; --border: #e3e6ef;
  --text: #161a2b; --muted: #5a6175; --accent: #4338ca; --accent-strong: #3730a3;
  --accent-soft: #eef0ff; --danger: #b42318; --danger-soft: #fef3f2; --warn: #9a6700;
  --warn-soft: #fff8e6; --ok: #067647; --ok-soft: #ecfdf3; --focus: #f59e0b;
  --s0: #4e79a7; --s1: #f28e2b; --s2: #59a14f; --s3: #e15759; --s4: #76b7b2; --s5: #b9a032;
  --s6: #b07aa1; --s7: #9c755f; --grid: #e8eaf1; --axis: #9aa1b5;
  --radius: 12px; --shadow: 0 1px 2px rgba(16, 24, 40, .06), 0 1px 3px rgba(16, 24, 40, .08);
  --font: ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
  --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
  color-scheme: light dark;
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0f1220; --surface: #171b2e; --surface-2: #1e2339; --border: #2a3050;
    --text: #e8eaf4; --muted: #a3a9c2; --accent: #8b8cf8; --accent-strong: #a5a6ff;
    --accent-soft: #24284a; --danger: #ff8a80; --danger-soft: #3a1d22; --warn: #f5c451;
    --warn-soft: #3a3020; --ok: #6ee7a8; --ok-soft: #173327; --grid: #262c48; --axis: #5d6589;
    --s0: #7aa6d6; --s1: #ffaa5c; --s2: #82c97a; --s3: #ff8587; --s4: #8fd3cd; --s5: #e3c95a;
    --s6: #d29cc4; --s7: #c49a82; --shadow: 0 1px 2px rgba(0, 0, 0, .4);
  }
}
*, *::before, *::after { box-sizing: border-box; }
html { font-size: 15px; }
body { margin: 0; font-family: var(--font); background: var(--bg); color: var(--text); line-height: 1.5; -webkit-font-smoothing: antialiased; }
a { color: var(--accent); text-decoration: none; }
a:hover { text-decoration: underline; }
:focus-visible { outline: 3px solid var(--focus); outline-offset: 2px; border-radius: 4px; }
h1 { font-size: 1.6rem; margin: 0 0 .25rem; letter-spacing: -.01em; }
h2 { font-size: 1.1rem; margin: 0 0 .75rem; }
h3 { font-size: 1rem; margin: 1rem 0 .5rem; }
p { margin: 0 0 .75rem; }
.muted { color: var(--muted); }
.small { font-size: .87rem; }
.mono { font-family: var(--mono); font-size: .92em; }
.nowrap { white-space: nowrap; }
.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0, 0, 0, 0); border: 0; }
.skip { position: absolute; left: -999px; top: 0; background: var(--accent); color: #fff; padding: .5rem 1rem; z-index: 10; }
.skip:focus { left: 1rem; top: 1rem; }
.env-banner { background: var(--warn-soft); color: var(--warn); text-align: center; font-size: .85rem; padding: .3rem; border-bottom: 1px solid var(--border); }

/* Shell */
.shell { display: grid; grid-template-columns: 240px 1fr; min-height: 100vh; }
.sidebar { background: var(--surface); border-right: 1px solid var(--border); padding: 1.25rem 1rem; display: flex; flex-direction: column; gap: 1rem; position: sticky; top: 0; height: 100vh; overflow-y: auto; }
.brand { display: inline-flex; align-items: center; gap: .55rem; font-weight: 700; font-size: 1.15rem; color: var(--text); }
.brand:hover { text-decoration: none; }
.brand-large { font-size: 1.4rem; margin-bottom: 1rem; }
.logo { width: 28px; height: 28px; }
.logo-ring { fill: var(--accent); }
.logo-p { fill: none; stroke: #fff; stroke-width: 2.4; stroke-linecap: round; stroke-linejoin: round; }
.nav { list-style: none; margin: 0; padding: 0; display: grid; gap: 2px; }
.nav a { display: block; padding: .45rem .7rem; border-radius: 8px; color: var(--text); font-weight: 500; }
.nav a:hover { background: var(--surface-2); text-decoration: none; }
.nav a[aria-current="page"] { background: var(--accent-soft); color: var(--accent-strong); }
.nav-heading { text-transform: uppercase; font-size: .72rem; letter-spacing: .08em; color: var(--muted); margin: 1rem .7rem .35rem; font-weight: 600; }
.me { margin-top: auto; border-top: 1px solid var(--border); padding-top: .9rem; }
.me-name { font-weight: 600; margin: 0; }
.me-detail { color: var(--muted); font-size: .82rem; margin: 0 0 .5rem; word-break: break-all; }
.content { padding: 2rem 2.25rem 4rem; max-width: 1280px; width: 100%; }
.content:focus, .bare:focus { outline: none; }
.bare { min-height: 100vh; display: grid; place-items: center; padding: 2rem 1rem; }
@media (max-width: 860px) {
  .shell { grid-template-columns: 1fr; }
  .sidebar { position: static; height: auto; flex-direction: row; flex-wrap: wrap; align-items: center; padding: .75rem 1rem; }
  .sidebar nav { order: 3; width: 100%; overflow-x: auto; }
  .nav { display: flex; gap: .25rem; }
  .nav a { white-space: nowrap; }
  .nav-heading { display: none; }
  .me { margin: 0 0 0 auto; border: 0; padding: 0; display: flex; align-items: center; gap: .5rem; }
  .me-name, .me-detail { display: none; }
  .content { padding: 1.25rem 1rem 3rem; }
}

/* Page furniture */
.page-head { display: flex; justify-content: space-between; align-items: flex-end; gap: 1rem; flex-wrap: wrap; margin-bottom: 1.25rem; }
.page-head .muted { max-width: 70ch; }
.crumbs { margin: 0 0 .25rem; font-size: .87rem; }
.crumbs a::after { content: " /"; color: var(--muted); }
.card { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 1.25rem; box-shadow: var(--shadow); margin-bottom: 1.25rem; }
.card.narrow { max-width: 440px; width: 100%; margin-left: auto; margin-right: auto; }
.card-head { display: flex; justify-content: space-between; align-items: baseline; gap: .75rem; }
.card-foot { margin: .75rem 0 0; font-size: .9rem; }
.card-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(340px, 1fr)); gap: 1.25rem; margin-bottom: 1.25rem; }
.card-grid .card { margin: 0; }
.two-col-cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(380px, 1fr)); gap: 1.25rem; }
.empty-state { text-align: center; padding: 2.5rem 1rem; }
.empty-state h2, .empty-state h3 { margin-bottom: .35rem; }
.empty-icon { width: 56px; height: 56px; margin-bottom: .5rem; }
.empty-stroke { fill: none; stroke: var(--muted); stroke-width: 2.5; stroke-linecap: round; }
.empty-inline { color: var(--muted); font-style: italic; }
.flash { background: var(--ok-soft); color: var(--ok); border: 1px solid currentColor; border-radius: 10px; padding: .65rem .9rem; margin-bottom: 1rem; font-weight: 500; }
.alert { background: var(--danger-soft); color: var(--danger); border: 1px solid currentColor; border-radius: 10px; padding: .65rem .9rem; margin-bottom: 1rem; }
.alert-warn { background: var(--warn-soft); color: var(--warn); }
.error-card { text-align: center; margin-top: 10vh; }
.facts { display: flex; flex-wrap: wrap; gap: .75rem 2rem; margin: .75rem 0; }
.facts dt { font-size: .75rem; text-transform: uppercase; letter-spacing: .06em; color: var(--muted); }
.facts dd { margin: 0; font-weight: 500; }
.plain { list-style: none; padding: 0; }
.chips { list-style: none; padding: 0; margin: .5rem 0; display: flex; flex-wrap: wrap; gap: .35rem; }
.chip { background: var(--surface-2); border: 1px solid var(--border); border-radius: 999px; padding: .1rem .6rem; font-size: .8rem; font-family: var(--mono); }
.badge { display: inline-block; font-size: .75rem; font-weight: 600; padding: .1rem .5rem; border-radius: 999px; background: var(--surface-2); color: var(--muted); border: 1px solid var(--border); vertical-align: middle; }
.badge-active { background: var(--ok-soft); color: var(--ok); border-color: transparent; }
.badge-revoked, .badge-expired, .badge-deleted, .badge-disabled { background: var(--danger-soft); color: var(--danger); border-color: transparent; }
.badge-warn { background: var(--warn-soft); color: var(--warn); border-color: transparent; }
.key-text { color: var(--muted); word-break: break-all; margin: 0; }
.timeline { list-style: none; padding: 0; margin: 0 0 1rem; border-left: 2px solid var(--border); }
.timeline li { padding: .25rem 0 .75rem 1rem; position: relative; }
.timeline li::before { content: ""; position: absolute; left: -7px; top: .6rem; width: 12px; height: 12px; border-radius: 50%; background: var(--border); }
.timeline li.open::before { background: var(--accent); }
.details-cell { max-width: 420px; word-break: break-all; }

/* Tables */
.table-wrap { overflow-x: auto; }
table { width: 100%; border-collapse: collapse; font-size: .93rem; }
th { text-align: left; font-size: .75rem; text-transform: uppercase; letter-spacing: .06em; color: var(--muted); font-weight: 600; padding: .5rem .6rem; border-bottom: 1px solid var(--border); white-space: nowrap; }
td { padding: .6rem; border-bottom: 1px solid var(--border); vertical-align: top; }
tbody tr:hover { background: var(--surface-2); }
.pager { display: flex; justify-content: space-between; margin-top: .9rem; font-size: .9rem; }

/* Forms */
.stack { display: grid; gap: .9rem; }
.row { display: flex; flex-wrap: wrap; gap: .75rem 1rem; align-items: flex-start; }
.grow { flex: 1 1 220px; }
.field { display: grid; gap: .3rem; min-width: 140px; }
.field.align-end { align-self: end; }
label { font-weight: 600; font-size: .87rem; }
.help { font-size: .8rem; color: var(--muted); margin: 0; }
input[type=text], input[type=email], input[type=password], input[type=search], input[type=date], input:not([type]), select {
  font: inherit; color: var(--text); background: var(--surface); border: 1px solid var(--border); border-radius: 8px; padding: .5rem .65rem; width: 100%; min-height: 2.4rem; }
input:focus, select:focus { border-color: var(--accent); outline: 3px solid var(--accent-soft); outline-offset: 0; }
.check { display: flex; gap: .55rem; align-items: flex-start; font-weight: 400; padding: .35rem 0; cursor: pointer; }
.check input { margin-top: .3rem; width: 1rem; height: 1rem; accent-color: var(--accent); }
fieldset.provider { border: 1px solid var(--border); border-radius: 10px; padding: .5rem 1rem .75rem; margin: 0 0 .9rem; }
fieldset.provider legend { font-weight: 700; padding: 0 .35rem; }
.model-row { display: flex; flex-wrap: wrap; justify-content: space-between; align-items: center; gap: .25rem 1rem; border-bottom: 1px dashed var(--border); padding: .25rem 0; }
.model-row:last-child { border-bottom: 0; }
.limits-box summary { cursor: pointer; color: var(--accent); font-size: .87rem; font-weight: 600; }
.limits-box[open] { flex-basis: 100%; background: var(--surface-2); border-radius: 8px; padding: .5rem .75rem .75rem; }
.inline-form { display: inline-flex; gap: .4rem; align-items: center; flex-wrap: wrap; }
.inline-form input, .inline-form select { width: auto; min-height: 2rem; padding: .3rem .5rem; }
.actions { display: flex; gap: .6rem; align-items: center; flex-wrap: wrap; }
.filters { display: flex; flex-wrap: wrap; gap: .75rem 1rem; align-items: flex-start; }
.btn { display: inline-flex; align-items: center; justify-content: center; gap: .5rem; font: inherit; font-weight: 600; font-size: .93rem; padding: .5rem 1rem; min-height: 2.4rem; border-radius: 8px; border: 1px solid var(--border); background: var(--surface); color: var(--text); cursor: pointer; white-space: nowrap; }
.btn:hover { background: var(--surface-2); text-decoration: none; }
.btn-primary { background: var(--accent); border-color: var(--accent); color: #fff; }
.btn-primary:hover { background: var(--accent-strong); }
@media (prefers-color-scheme: dark) { .btn-primary { color: #0f1220; } }
.btn-danger { color: var(--danger); border-color: currentColor; }
.btn-danger:hover { background: var(--danger-soft); }
.btn-quiet { border-color: transparent; background: transparent; color: var(--accent); }
.btn-small { min-height: 2rem; padding: .25rem .65rem; font-size: .85rem; }
.btn-block { width: 100%; }
.btn-google { width: 100%; background: var(--surface); }
.g-icon { width: 18px; height: 18px; }
.g-blue { fill: #4285f4; } .g-green { fill: #34a853; } .g-yellow { fill: #fbbc05; } .g-red { fill: #ea4335; }
.divider { display: flex; align-items: center; gap: .75rem; color: var(--muted); font-size: .85rem; margin: 1rem 0; }
.divider::before, .divider::after { content: ""; flex: 1; height: 1px; background: var(--border); }
.sign-in h1 { margin-bottom: .25rem; }
.token-card { border-color: var(--accent); }
.token-box { display: flex; gap: .5rem; margin: .5rem 0; }
.token { font-size: .95rem; background: var(--surface-2); }

/* Tabs */
.tabs { display: inline-flex; background: var(--surface-2); border: 1px solid var(--border); border-radius: 10px; padding: 3px; gap: 2px; }
.tabs a { padding: .35rem .8rem; border-radius: 8px; color: var(--muted); font-weight: 600; font-size: .87rem; }
.tabs a:hover { color: var(--text); text-decoration: none; }
.tabs a[aria-current="page"] { background: var(--surface); color: var(--text); box-shadow: var(--shadow); }

/* KPIs and dashboard */
.kpis { list-style: none; padding: 0; margin: 0 0 1.25rem; display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 1rem; }
.kpi { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 1rem 1.1rem .6rem; box-shadow: var(--shadow); display: flex; flex-direction: column; }
.kpi-label { font-size: .78rem; text-transform: uppercase; letter-spacing: .06em; color: var(--muted); margin: 0; font-weight: 600; }
.kpi-value { font-size: 1.75rem; font-weight: 700; margin: .1rem 0 0; letter-spacing: -.02em; font-variant-numeric: tabular-nums; }
.kpi-note { font-size: .8rem; color: var(--muted); margin: 0; }
.kpi-spark { margin-top: auto; padding-top: .35rem; }
.stats-strip { list-style: none; display: flex; flex-wrap: wrap; gap: .5rem 2rem; padding: .65rem 1rem; margin: 0 0 1.25rem; background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); font-size: .9rem; }
.chart-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(440px, 1fr)); gap: 1.25rem; margin-bottom: 1.25rem; }
.chart-grid .card, .top-grid .card { margin: 0; }
.chart-card { margin: 0 0 1.25rem; }
.chart-card figcaption h2 { margin-bottom: 0; }
.chart-box { margin-top: .75rem; }
.top-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(380px, 1fr)); gap: 1.25rem; }
.data-table summary { cursor: pointer; font-size: .85rem; color: var(--accent); margin-top: .5rem; }
.data-table table { font-size: .85rem; margin-top: .5rem; }
@media (max-width: 560px) { .chart-grid, .top-grid, .two-col-cards { grid-template-columns: 1fr; } }

/* Headroom */
.headroom-list { display: grid; gap: .9rem; margin-top: .75rem; }
.headroom-list.two-col { grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); }
.headroom-head, .headroom-foot { display: flex; justify-content: space-between; gap: .5rem; margin: 0 0 .3rem; font-size: .85rem; }
.headroom-foot { color: var(--muted); font-size: .8rem; margin: .3rem 0 0; }
.headroom-label { font-weight: 600; }
.headroom-pct { font-variant-numeric: tabular-nums; font-weight: 700; }
.headroom-warn .headroom-pct { color: var(--warn); }
.headroom-over .headroom-pct { color: var(--danger); }
.headroom-cell { min-width: 260px; }

/* SVG charts */
svg.chart { display: block; width: 100%; height: auto; overflow: visible; font-family: var(--font); }
svg.chart text { fill: var(--muted); font-size: 12px; }
svg.chart .legend { fill: var(--text); }
svg.chart .tick { font-variant-numeric: tabular-nums; }
svg.chart .empty { font-size: 14px; }
svg.chart .grid { stroke: var(--grid); stroke-width: 1; }
svg.chart .axis { stroke: var(--axis); stroke-width: 1; }
svg.chart .hit { fill: transparent; }
svg.chart .hit:hover { fill: var(--text); fill-opacity: .06; }
svg.chart .area { fill-opacity: .82; stroke: none; }
svg.chart .edge { fill: none; stroke: var(--surface); stroke-width: 1.2; }
svg.chart .stroke { fill: none; stroke-width: 2.2; stroke-linejoin: round; stroke-linecap: round; }
svg.chart .dot { stroke: var(--surface); stroke-width: 1.5; }
svg.chart .row-label { fill: var(--text); font-size: 13px; }
svg.chart .row-value { font-size: 12px; font-weight: 600; fill: var(--text); }
svg.chart a:hover .row-label { fill: var(--accent); text-decoration: underline; }
svg.chart .bar:hover { fill-opacity: .85; }
.s0 { fill: var(--s0); stroke: var(--s0); } .s1 { fill: var(--s1); stroke: var(--s1); }
.s2 { fill: var(--s2); stroke: var(--s2); } .s3 { fill: var(--s3); stroke: var(--s3); }
.s4 { fill: var(--s4); stroke: var(--s4); } .s5 { fill: var(--s5); stroke: var(--s5); }
.s6 { fill: var(--s6); stroke: var(--s6); } .s7 { fill: var(--s7); stroke: var(--s7); }
svg.chart .area.s0, svg.chart .area.s1, svg.chart .area.s2, svg.chart .area.s3, svg.chart .area.s4, svg.chart .area.s5, svg.chart .area.s6, svg.chart .area.s7, svg.chart .bar { stroke: none; }
svg.chart .edge { stroke: var(--surface); }
svg.chart .stroke { fill: none; }
svg.spark { max-width: 160px; height: 34px; }
svg.spark .spark-line { fill: none; stroke: var(--accent); stroke-width: 1.8; stroke-linejoin: round; }
svg.spark .spark-area { fill: var(--accent); fill-opacity: .12; stroke: none; }
svg.spark .spark-dot { fill: var(--accent); }
svg.meter { height: 12px; }
svg.meter .track { fill: var(--surface-2); stroke: var(--border); }
svg.meter .fill { fill: var(--ok); }
svg.meter .reserved { fill: var(--ok); fill-opacity: .35; }
svg.meter.warn .fill, svg.meter.warn .reserved { fill: var(--warn); }
svg.meter.over .fill, svg.meter.over .reserved { fill: var(--danger); }
@media (prefers-reduced-motion: no-preference) { .btn, .nav a, .tabs a { transition: background-color .12s ease, color .12s ease; } }
@media print { .sidebar, .tabs, form, .skip { display: none; } .shell { display: block; } }
/* Safety (round 3b): engaged brakes stand out; headroom warnings are told in words too. */
.card-danger { border-color: var(--danger); box-shadow: 0 0 0 1px var(--danger), var(--shadow); }
.headroom-note { margin: .3rem 0 0; font-size: .8rem; font-weight: 600; }
.headroom-warn .headroom-note { color: var(--warn); }
.headroom-over .headroom-note { color: var(--danger); }
.brake-notice strong { font-weight: 700; }
.brakes-banner { border-width: 2px; }
.brakes-banner ul { margin: .4rem 0 0; padding-left: 1.2rem; }
.badge-frozen { background: var(--danger-soft); color: var(--danger); border-color: transparent; }
/* Provider budgets reminder (DESIGN §16 N11, round 3b merge). */
.card-warning { border-color: var(--warn); box-shadow: 0 0 0 1px var(--warn), var(--shadow); }
.card-warning h2 { margin-top: 0; }