:root {
  --bg: #f6f7f9; --panel: #ffffff; --text: #111827; --muted: #6b7280; --border: #e5e7eb;
  --accent: #2563eb; --accent-text: #ffffff; --soft: #f3f4f6;
  --ok: #15803d; --ok-bg: #dcfce7; --warn: #b45309; --warn-bg: #fef3c7;
  --err: #b91c1c; --err-bg: #fee2e2; --info: #1d4ed8; --info-bg: #dbeafe; --idle-bg: #e5e7eb;
  --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0f1115; --panel: #171a21; --text: #e5e7eb; --muted: #9ca3af; --border: #2a2f3a;
    --accent: #3b82f6; --soft: #1f2430;
    --ok: #4ade80; --ok-bg: #14301f; --warn: #fbbf24; --warn-bg: #3a2c0b;
    --err: #f87171; --err-bg: #3b1416; --info: #93c5fd; --info-bg: #172554; --idle-bg: #2a2f3a;
  }
}
* { box-sizing: border-box; }
body { margin: 0; background: var(--bg); color: var(--text);
  font: 14px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; }
a { color: var(--accent); text-decoration: none; }
a:hover { text-decoration: underline; }
header.top { background: var(--panel); border-bottom: 1px solid var(--border); }
header.top .inner { max-width: 1200px; margin: 0 auto; padding: 0 16px; height: 56px;
  display: flex; align-items: center; gap: 24px; }
.brand { white-space: nowrap; font-weight: 700; font-size: 15px; color: var(--text); display: flex; align-items: center; gap: 8px; }
.brand svg { color: var(--accent); }
nav { display: flex; gap: 4px; flex: 1; }
nav a { color: var(--muted); padding: 6px 10px; border-radius: 6px; }
nav a.active, nav a:hover { color: var(--text); background: var(--soft); text-decoration: none; }
.who { color: var(--muted); font-size: 13px; }
main { max-width: 1200px; margin: 0 auto; padding: 24px 16px 64px; }
h1 { font-size: 22px; margin: 0; }
h2 { font-size: 16px; margin: 0 0 12px; }
.page-head { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-bottom: 20px; flex-wrap: wrap; }
.sub { color: var(--muted); margin-top: 2px; }
.panel { background: var(--panel); border: 1px solid var(--border); border-radius: 10px; padding: 18px; margin-bottom: 20px; }
.panel.flush { padding: 0; overflow: hidden; }
.panel.flush > h2 { padding: 16px 18px 0; }
.grid2 { display: grid; grid-template-columns: 2fr 1fr; gap: 20px; }
@media (max-width: 900px) { .grid2 { grid-template-columns: 1fr; } }
.grid2 > * { min-width: 0; }
.stats { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; margin-bottom: 20px; }
@media (max-width: 700px) { .stats { grid-template-columns: repeat(2, 1fr); } }
.stat { background: var(--panel); border: 1px solid var(--border); border-radius: 10px; padding: 14px 16px; color: var(--text); }
.stat:hover { text-decoration: none; border-color: var(--accent); }
.stat .n { font-size: 24px; font-weight: 600; font-variant-numeric: tabular-nums; }
.stat .l { color: var(--muted); font-size: 12px; text-transform: uppercase; letter-spacing: .05em; }
table { width: 100%; border-collapse: collapse; }
th, td { text-align: left; padding: 10px 14px; border-top: 1px solid var(--border); vertical-align: top; }
th { font-size: 12px; color: var(--muted); font-weight: 600; text-transform: uppercase; letter-spacing: .04em;
  border-top: none; background: var(--soft); }
tr.row-link:hover td { background: var(--soft); }
.table-wrap { overflow-x: auto; }
.mono { font-family: var(--mono); font-size: 12.5px; word-break: break-all; }
.muted { color: var(--muted); }
.small { font-size: 12px; }
.pill { display: inline-block; padding: 2px 9px; border-radius: 999px; font-size: 12px; font-weight: 600; white-space: nowrap; }
.pill.ok, .pill.recovery { background: var(--ok-bg); color: var(--ok); }
.pill.warning, .pill.inconsistency { background: var(--warn-bg); color: var(--warn); }
.pill.error, .pill.failure { background: var(--err-bg); color: var(--err); }
.pill.change { background: var(--info-bg); color: var(--info); }
.pill.pending, .pill.paused, .pill.baseline { background: var(--idle-bg); color: var(--muted); }
.btn { display: inline-flex; align-items: center; gap: 6px; padding: 7px 14px; border-radius: 7px; font: inherit;
  font-weight: 500; border: 1px solid var(--border); background: var(--panel); color: var(--text); cursor: pointer; }
.btn:hover { background: var(--soft); text-decoration: none; }
.btn.primary { background: var(--accent); border-color: var(--accent); color: var(--accent-text); }
.btn.primary:hover { filter: brightness(1.08); }
.btn.danger { color: var(--err); }
.actions { display: flex; gap: 8px; flex-wrap: wrap; }
.actions form { margin: 0; }
.flash { padding: 10px 14px; border-radius: 8px; margin-bottom: 18px; }
.flash.ok { background: var(--ok-bg); color: var(--ok); }
.flash.error { background: var(--err-bg); color: var(--err); }
.filters { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 14px; }
input[type=text], input[type=email], input[type=password], input[type=number], input[type=url], input[type=date], select, textarea {
  font: inherit; color: var(--text); background: var(--panel); border: 1px solid var(--border); border-radius: 7px;
  padding: 7px 10px; width: 100%; }
textarea { font-family: var(--mono); font-size: 13px; }
.filters input, .filters select { width: auto; }
.form-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 16px 20px; }
@media (max-width: 700px) { .form-grid { grid-template-columns: 1fr; } }
.field label { display: block; font-weight: 600; margin-bottom: 5px; }
.field .hint { color: var(--muted); font-size: 12px; margin-top: 4px; }
.field.full { grid-column: 1 / -1; }
.checks { display: flex; flex-wrap: wrap; gap: 6px 14px; }
.checks label { font-weight: 400; display: flex; gap: 6px; align-items: center; margin: 0; }
.kv { display: grid; grid-template-columns: max-content 1fr; gap: 6px 16px; margin: 0; }
.kv dt { color: var(--muted); }
.kv dd { margin: 0; word-break: break-word; }
.cell-err { color: var(--err); }
.cell-mismatch { background: var(--warn-bg); }
.diff-add { color: var(--ok); }
.diff-rem { color: var(--err); }
.timeline { list-style: none; margin: 0; padding: 0; }
.timeline > li { padding: 12px 18px; border-top: 1px solid var(--border); }
.timeline .body td { padding: 6px 10px; }
.timeline .meta { display: flex; gap: 10px; align-items: center; flex-wrap: wrap; }
.timeline .body { margin-top: 6px; }
details summary { cursor: pointer; color: var(--muted); font-size: 12px; }
.empty { padding: 28px; text-align: center; color: var(--muted); }
.login { max-width: 360px; margin: 10vh auto; }
@media (max-width: 600px) {
  header.top .inner { gap: 10px; }
  .who .name { display: none; }
  .filters input[type=text] { min-width: 0 !important; flex: 1 1 100%; }
  th, td { padding: 8px 10px; }
}

/* auth */
.pill.idle, .pill.role-reader { background: var(--idle-bg); color: var(--muted); }
.pill.role-admin { background: var(--info-bg); color: var(--info); }
.who .pill { font-size: 11px; padding: 1px 7px; margin-left: 4px; }
.ms-btn { width: 100%; justify-content: center; gap: 10px; }

/* secret expiry banner + popup */
.banner { display: flex; align-items: center; gap: 12px; padding: 12px 14px; border-radius: 10px; margin-bottom: 18px;
  border: 1px solid transparent; }
.banner > div { flex: 1; min-width: 0; }
.banner > svg { flex: none; }
.banner .btn { flex: none; }
.banner.warning { background: var(--warn-bg); color: var(--warn); border-color: currentColor; }
.banner.critical, .banner.expired { background: var(--err-bg); color: var(--err); border-color: currentColor; }
.banner.info { background: var(--info-bg); color: var(--info); }
@media (max-width: 600px) { .banner { flex-wrap: wrap; } }
.dot { display: inline-block; width: 8px; height: 8px; border-radius: 50%; margin-left: 2px; vertical-align: middle; }
.dot.warning { background: var(--warn); }
.dot.critical, .dot.expired { background: var(--err); }
dialog.modal { border: 1px solid var(--border); border-radius: 12px; padding: 22px; max-width: 460px; width: calc(100% - 32px);
  background: var(--panel); color: var(--text); border-top: 4px solid var(--warn); }
dialog.modal.critical, dialog.modal.expired { border-top-color: var(--err); }
dialog.modal::backdrop { background: rgba(0, 0, 0, .45); }
dialog.modal p { margin: 0 0 12px; }
dialog.modal .actions { display: flex; gap: 8px; margin-top: 16px; }
dialog.modal .actions form { margin: 0; }
@media (max-width: 600px) {
  header.top .inner { height: auto; flex-wrap: wrap; padding: 10px 16px; row-gap: 6px; }
  header.top nav { order: 3; flex: 1 1 100%; overflow-x: auto; }
  header.top nav a { white-space: nowrap; }
  header.top .who { margin-left: auto; }
}