:root{--bg: #0f172a;--panel: #ffffff;--ink: #0f172a;--muted: #64748b;--line: #e2e8f0;--brand: #15479e;--brand-ink: #0e3576;--ok: #16a34a;--off: #94a3b8;--warn: #b45309;--warn-bg: #fef3c7;--err: #dc2626;--err-bg: #fee2e2;--ok-bg: #dcfce7}*{box-sizing:border-box}body{margin:0;font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;color:var(--ink);background:#f1f5f9}.mono{font-family:ui-monospace,SF Mono,Menlo,monospace}.small{font-size:.8rem}.muted{color:var(--muted)}.center{text-align:center}.splash{display:grid;place-items:center;height:100vh}.login-wrap{display:grid;place-items:center;min-height:100vh;padding:1rem;background:radial-gradient(1200px 600px at 50% -10%,#1e293b,#0f172a)}.login-card{background:var(--panel);width:100%;max-width:380px;padding:2rem;border-radius:14px;box-shadow:0 20px 60px #00000059;display:grid;gap:.9rem}.brand{display:flex;align-items:center;gap:.55rem}.brand>div{display:flex;flex-direction:column;line-height:1.1}.brand-mark{font-weight:800;letter-spacing:.06em;color:var(--brand-ink);font-size:1.3rem}.brand-sub{color:var(--muted);font-weight:600;font-size:.8rem}.brand.small .brand-mark{font-size:1.05rem;color:#fff}.brand.small .brand-sub{color:#94a3b8}.app{display:grid;grid-template-columns:220px 1fr;min-height:100vh}.sidebar{background:var(--bg);color:#cbd5e1;padding:1.1rem .8rem;display:flex;flex-direction:column;gap:1.2rem}.sidebar nav{display:grid;gap:.25rem}.nav-item{background:none;border:0;color:#cbd5e1;text-align:left;padding:.6rem .8rem;border-radius:8px;cursor:pointer;font-size:.95rem}.nav-item:hover{background:#1e293b}.nav-item.active{background:var(--brand);color:#fff;font-weight:600}.sidebar-foot{margin-top:auto}.main{display:flex;flex-direction:column;min-width:0}.topbar{display:flex;justify-content:space-between;align-items:center;padding:.8rem 1.4rem;background:#fff;border-bottom:1px solid var(--line)}.who{display:flex;align-items:center;gap:.6rem}.content{padding:1.4rem}.section-head{display:flex;justify-content:space-between;align-items:center;margin-bottom:1rem}h2{margin:0;font-size:1.25rem}.count{color:var(--muted);font-weight:500;font-size:.9rem;margin-left:.4rem}.panel{background:#fff;border:1px solid var(--line);border-radius:12px;overflow:hidden}.panel.pad{padding:1.2rem}.table{width:100%;border-collapse:collapse;font-size:.92rem}.table th{text-align:left;padding:.7rem .9rem;background:#f8fafc;color:var(--muted);font-weight:600;border-bottom:1px solid var(--line)}.table td{padding:.7rem .9rem;border-bottom:1px solid var(--line)}.table tr:last-child td{border-bottom:0}.row-actions{display:flex;gap:.8rem}.badge{font-size:.74rem;padding:.15rem .5rem;border-radius:999px;font-weight:600}.badge.ok{background:var(--ok-bg);color:var(--ok)}.badge.off{background:#f1f5f9;color:var(--off)}.badge.role{background:#e0e7ff;color:var(--brand-ink)}.form-grid{display:grid;grid-template-columns:1fr 1fr;gap:1rem;padding:1.2rem}.span-2{grid-column:1 / -1}.field{display:grid;gap:.35rem;font-size:.9rem}.field>span{color:var(--muted);font-weight:600}.field.check{flex-direction:row;align-items:center;display:flex;gap:.5rem}input,select{padding:.55rem .65rem;border:1px solid var(--line);border-radius:8px;font:inherit;background:#fff}input:focus,select:focus{outline:2px solid var(--brand);border-color:var(--brand)}.actions{display:flex;justify-content:flex-end;gap:.6rem}.btn{border:1px solid var(--line);background:#fff;padding:.55rem 1rem;border-radius:8px;cursor:pointer;font:inherit;font-weight:600}.btn:hover{background:#f8fafc}.btn.primary{background:var(--brand);color:#fff;border-color:var(--brand)}.btn.primary:hover{background:var(--brand-ink)}.btn.primary:disabled{opacity:.6;cursor:default}.btn.ghost{border:0;background:none;color:var(--muted)}.link{background:none;border:0;color:var(--brand);cursor:pointer;font:inherit;padding:0}.link:hover{text-decoration:underline}.alert{padding:.7rem .9rem;border-radius:8px;font-size:.9rem}.alert.error{background:var(--err-bg);color:var(--err)}.alert.ok{background:var(--ok-bg);color:var(--ok)}.alert.warn{background:var(--warn-bg);color:var(--warn)}.alert.banner{margin:1rem 1.4rem 0}.stat-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:1rem}.stat{background:#fff;border:1px solid var(--line);border-radius:12px;padding:1.2rem}.stat-value{font-size:2rem;font-weight:800;color:var(--brand-ink)}.stat-label{font-weight:600;margin-top:.2rem}.stat-hint{margin-top:.15rem}.stat.good{border-color:#bbf7d0}.stat.good .stat-value{color:var(--ok)}.stat.bad{border-color:#fecaca;background:var(--err-bg)}.stat.bad .stat-value{color:var(--err)}.bars{display:grid;gap:.5rem;margin:.4rem 0}.bar-row{display:grid;grid-template-columns:110px 1fr 40px;align-items:center;gap:.6rem}.bar-label{font-size:.82rem;color:var(--muted);text-transform:capitalize}.bar-track{background:#f1f5f9;border-radius:6px;height:14px;overflow:hidden}.bar-fill{background:linear-gradient(90deg,var(--brand),var(--brand-ink));height:100%;border-radius:6px;min-width:2px}.bar-val{text-align:right;font-weight:700;font-size:.85rem}.sec-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:.8rem}.perm-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:.5rem;margin-top:.4rem}.perm{display:flex;align-items:center;gap:.5rem;font-size:.9rem}.perm code{background:#eef3fb;color:var(--brand-ink);padding:0 .3rem;border-radius:4px;font-size:.78rem}.login-env{display:flex;align-items:center;justify-content:space-between;gap:.5rem}.envswitch{display:flex;align-items:center;gap:.4rem}.envswitch select{padding:.3rem .5rem;font-size:.82rem}.badge.env{font-weight:800;letter-spacing:.05em}.badge.env-dev{background:#e0e7ff;color:var(--brand-ink)}.badge.env-staging{background:#fef3c7;color:var(--warn)}.badge.env-production{background:#dcfce7;color:var(--ok)}.badge.env-dr{background:#fee2e2;color:var(--err)}.two-col{display:grid;grid-template-columns:1fr 1fr;gap:1.2rem;align-items:start}.filters{display:flex;gap:.5rem;align-items:center}.filters input,.filters select{padding:.4rem .6rem}.nav-item.ext{color:#93c5fd;margin-top:.4rem;text-decoration:none;display:block}.nav-item.ext:hover{background:#1e293b}@media (max-width: 820px){.two-col,.form-grid,.app{grid-template-columns:1fr}}.tabs{display:flex;gap:.4rem;margin-bottom:.9rem;border-bottom:2px solid var(--line)}.tab{background:none;border:0;padding:.6rem 1rem;cursor:pointer;font-weight:600;color:var(--muted);border-bottom:2px solid transparent;margin-bottom:-2px}.tab.active{color:var(--brand-ink);border-bottom-color:var(--brand)}.dot{display:inline-grid;place-items:center;width:1.3rem;height:1.3rem;border-radius:50%;font-size:.78rem;font-weight:800}.dot.ok{background:var(--ok-bg);color:var(--ok)}.dot.off{background:var(--err-bg);color:var(--err)}.dot.pending,.badge.pending{background:#f1f5f9;color:var(--off)}.cert-actions{display:flex;align-items:center;gap:.9rem;margin-top:1rem}.cert-doc{margin-top:1rem;border-left:4px solid var(--brand)}.cert-doc .sig{word-break:break-all}.cert-box{background:#f8fafc;border:1px solid var(--line);border-radius:8px;padding:.8rem;display:grid;gap:.3rem;font-size:.85rem;margin:.5rem 0}.cert-box.expired{background:var(--err-bg);border-color:#fecaca}