/* =========================================================================
   ianseo Authentication module — professional UI
   Self-contained: no external fonts / CDNs (works fully offline at a venue).
   ========================================================================= */

:root{
  --bg:#eef1f6;
  --surface:#ffffff;
  --surface-2:#f8fafc;
  --ink:#0f172a;
  --ink-soft:#334155;
  --muted:#64748b;
  --line:#e5e7eb;
  --line-2:#eef2f7;
  --accent:#4f46e5;
  --accent-d:#4338ca;
  --accent-soft:#eef2ff;
  --ok:#15803d;       --ok-bg:#dcfce7;
  --warn:#b45309;     --warn-bg:#fef3c7;
  --err:#dc2626;      --err-bg:#fee2e2;
  --bar:#0f172a;
  --radius:12px;
  --radius-sm:9px;
  --shadow:0 1px 2px rgba(15,23,42,.06),0 8px 24px rgba(15,23,42,.06);
  --shadow-sm:0 1px 2px rgba(15,23,42,.08);
  --font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;
}

*{box-sizing:border-box}

.auth-body{
  margin:0;min-height:100vh;font-family:var(--font);color:var(--ink);
  background:var(--bg);-webkit-font-smoothing:antialiased;line-height:1.45;
}

/* ---- generic bits ----------------------------------------------------- */
.auth-brandmark{display:flex;align-items:center;gap:11px}
.auth-brandmark .glyph{
  width:38px;height:38px;border-radius:10px;flex:none;
  background:linear-gradient(135deg,var(--accent),#7c3aed);
  display:flex;align-items:center;justify-content:center;color:#fff;font-weight:800;font-size:16px;letter-spacing:.02em;
}
.auth-brandmark .t1{font-weight:700;font-size:15px;line-height:1.1}
.auth-brandmark .t2{font-size:11.5px;color:var(--muted)}

.pill{display:inline-flex;align-items:center;gap:5px;padding:3px 10px;border-radius:999px;font-size:11.5px;font-weight:700;letter-spacing:.02em;white-space:nowrap}
.pill::before{content:"";width:6px;height:6px;border-radius:50%}
.pill.on{background:var(--ok-bg);color:var(--ok)} .pill.on::before{background:var(--ok)}
.pill.off{background:var(--err-bg);color:var(--err)} .pill.off::before{background:var(--err)}
.pill.root{background:#ede9fe;color:#6d28d9} .pill.root::before{background:#7c3aed}
.pill.scoped{background:#e0f2fe;color:#0369a1} .pill.scoped::before{background:#0ea5e9}
.pill.muted{background:#f1f5f9;color:#64748b} .pill.muted::before{background:#94a3b8}

.tag{display:inline-block;background:var(--surface-2);border:1px solid var(--line);border-radius:7px;padding:2px 9px;font-size:12px;margin:2px 4px 2px 0;color:var(--ink-soft);font-weight:500}

.btn{
  display:inline-flex;align-items:center;justify-content:center;gap:7px;
  padding:10px 16px;font-size:14px;font-weight:600;font-family:var(--font);cursor:pointer;
  color:#fff;background:var(--accent);border:1px solid var(--accent);border-radius:var(--radius-sm);
  transition:background .15s,border-color .15s,box-shadow .15s,transform .04s;white-space:nowrap;text-decoration:none;
}
.btn:hover{background:var(--accent-d);border-color:var(--accent-d)}
.btn:active{transform:translateY(1px)}
.btn:focus-visible{outline:none;box-shadow:0 0 0 3px rgba(79,70,229,.30)}
.btn.sm{padding:7px 13px;font-size:13px}
.btn.ghost{background:#fff;color:var(--ink-soft);border-color:var(--line)}
.btn.ghost:hover{background:var(--surface-2);border-color:#cbd5e1}
.btn.danger{background:var(--err);border-color:var(--err)}
.btn.danger:hover{background:#b91c1c;border-color:#b91c1c}
.btn.danger.ghost{background:#fff;color:var(--err);border-color:#fecaca}
.btn.danger.ghost:hover{background:var(--err-bg)}
.btn.block{width:100%}

.msg{display:flex;gap:9px;align-items:flex-start;padding:12px 15px;border-radius:var(--radius-sm);font-size:13.5px;margin-bottom:20px;line-height:1.45}
.msg::before{font-weight:700;flex:none}
.msg.ok{background:var(--ok-bg);color:var(--ok)} .msg.ok::before{content:"✓"}
.msg.err{background:var(--err-bg);color:var(--err)} .msg.err::before{content:"!"}
.msg.warn{background:var(--warn-bg);color:var(--warn)} .msg.warn::before{content:"!"}

/* =========================================================================
   LOGIN
   ========================================================================= */
.login-wrap{min-height:100vh;display:flex;align-items:center;justify-content:center;padding:24px;
  background:radial-gradient(1200px 600px at 50% -10%,#1e293b,#0b1220);}
.login-card{
  width:100%;max-width:410px;background:var(--surface);border-radius:16px;
  box-shadow:0 20px 50px rgba(2,6,23,.40);overflow:hidden;animation:rise .35s ease;
}
@keyframes rise{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:none}}
.login-head{padding:26px 30px 20px;border-bottom:1px solid var(--line-2)}
.login-body{padding:26px 30px 30px}
.login-body h1{font-size:20px;margin:0 0 4px}
.login-body .sub{color:var(--muted);font-size:13.5px;margin:0 0 22px}

.field{margin-bottom:16px}
.field>label{display:block;font-size:12px;font-weight:600;color:var(--ink-soft);margin-bottom:7px;letter-spacing:.02em}
.input{
  width:100%;padding:11px 13px;font-size:14.5px;color:var(--ink);font-family:var(--font);
  border:1.5px solid var(--line);border-radius:var(--radius-sm);background:var(--surface-2);
  transition:border-color .15s,box-shadow .15s,background .15s;
}
.input::placeholder{color:#9aa6b2}
.input:focus{outline:none;border-color:var(--accent);background:#fff;box-shadow:0 0 0 3px rgba(79,70,229,.16)}

.login-note{margin-top:18px;text-align:center;font-size:13px;color:var(--muted)}
.login-note a{color:var(--accent);text-decoration:none;font-weight:600}
.login-note a:hover{text-decoration:underline}

/* =========================================================================
   MANAGEMENT CONSOLE
   ========================================================================= */
.appbar{
  background:var(--bar);color:#e2e8f0;position:sticky;top:0;z-index:20;
  box-shadow:0 1px 0 rgba(255,255,255,.04);
}
.appbar-in{max-width:1080px;margin:0 auto;padding:14px 24px;display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}
.appbar .auth-brandmark .t1{color:#fff}
.appbar .auth-brandmark .t2{color:#94a3b8}
.appbar .glyph{box-shadow:0 0 0 1px rgba(255,255,255,.06)}
.appbar-right{display:flex;align-items:center;gap:18px;font-size:13px}
.appbar-right .who{color:#cbd5e1}
.appbar-right .who b{color:#fff}
.appbar-right a{color:#93c5fd;text-decoration:none}
.appbar-right a:hover{color:#bfdbfe;text-decoration:underline}
.appbar-sep{width:1px;height:20px;background:rgba(255,255,255,.12)}

.shell{max-width:1080px;margin:0 auto;padding:26px 24px 70px}
.page-title{font-size:13px;text-transform:uppercase;letter-spacing:.06em;color:var(--muted);font-weight:700;margin:2px 0 16px}

/* slim header strip used when embedded in the ianseo template */
.console-head{display:flex;align-items:center;justify-content:space-between;gap:14px;flex-wrap:wrap;margin-bottom:18px}
.console-head .page-title{margin:0}
.console-who{font-size:13px;color:var(--muted)}
.console-who a{color:var(--accent);text-decoration:none;font-weight:600}
.console-who a:hover{text-decoration:underline}

/* stat dashboard */
.stats{display:grid;grid-template-columns:repeat(4,1fr);gap:14px;margin-bottom:22px}
@media(max-width:760px){.stats{grid-template-columns:repeat(2,1fr)}}
.stat{background:var(--surface);border:1px solid var(--line);border-radius:var(--radius);padding:16px 18px;box-shadow:var(--shadow-sm)}
.stat .k{font-size:11.5px;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);font-weight:700;margin-bottom:8px}
.stat .v{font-size:26px;font-weight:800;line-height:1;color:var(--ink)}
.stat .v.small{font-size:15px;display:flex;align-items:center;height:26px}
.stat.accent{background:linear-gradient(135deg,var(--accent),#6d28d9);border-color:transparent;color:#fff}
.stat.accent .k{color:rgba(255,255,255,.8)} .stat.accent .v{color:#fff}

/* cards */
.card{background:var(--surface);border:1px solid var(--line);border-radius:var(--radius);box-shadow:var(--shadow);margin-bottom:20px;overflow:hidden}
.card-head{display:flex;align-items:center;justify-content:space-between;gap:14px;padding:17px 22px;border-bottom:1px solid var(--line-2)}
.card-head h2{font-size:15px;margin:0;font-weight:700;color:var(--ink)}
.card-head .desc{font-size:12.5px;color:var(--muted);margin-top:2px}
.card-body{padding:20px 22px}
.card-body.tight{padding:6px 10px}

/* enforcement row */
.enforce{display:flex;align-items:center;justify-content:space-between;gap:18px;flex-wrap:wrap}
.enforce .lead{font-size:14px;display:flex;align-items:center;gap:10px;flex-wrap:wrap}
.enforce .hint{font-size:12.5px;color:var(--muted);margin-top:6px;max-width:560px}

/* table */
table.tbl{width:100%;border-collapse:collapse;font-size:14px}
table.tbl th{text-align:left;color:var(--muted);font-size:11px;text-transform:uppercase;letter-spacing:.05em;font-weight:700;padding:11px 14px;background:var(--surface-2);border-bottom:1px solid var(--line)}
table.tbl td{padding:13px 14px;border-bottom:1px solid var(--line-2);vertical-align:middle}
table.tbl tr:last-child td{border-bottom:none}
table.tbl tbody tr:hover{background:var(--surface-2)}
table.tbl .u-login{font-weight:700;color:var(--ink)}
table.tbl .u-sub{font-size:12px;color:var(--muted)}
table.tbl .actions{display:flex;gap:8px;justify-content:flex-end;align-items:center}
.scope-cell{max-width:300px}

.empty{text-align:center;color:var(--muted);padding:34px 20px;font-size:14px}
.empty .big{font-size:15px;color:var(--ink-soft);font-weight:600;margin-bottom:4px}

/* editor */
.section{padding:20px 22px;border-bottom:1px solid var(--line-2)}
.section:last-of-type{border-bottom:none}
.section h3{font-size:12px;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);font-weight:700;margin:0 0 4px}
.section .shint{font-size:12.5px;color:var(--muted);margin:0 0 16px}
.grid2{display:grid;grid-template-columns:1fr 1fr;gap:16px 20px}
.grid2 .full{grid-column:1/-1}
@media(max-width:640px){.grid2{grid-template-columns:1fr}}

.choice{display:flex;gap:12px;flex-wrap:wrap}
.choice label{flex:1;min-width:200px;display:flex;gap:11px;align-items:flex-start;padding:13px 15px;border:1.5px solid var(--line);border-radius:var(--radius-sm);cursor:pointer;transition:border-color .15s,background .15s}
.choice label:hover{border-color:#c7cdf5;background:var(--surface-2)}
.choice input{margin-top:2px;width:17px;height:17px;accent-color:var(--accent);flex:none}
.choice .tt{font-weight:600;font-size:14px}
.choice .dd{font-size:12px;color:var(--muted);margin-top:2px}
.choice input:checked ~ .ct .tt{color:var(--accent-d)}
.choice label:has(input:checked){border-color:var(--accent);background:var(--accent-soft)}

.check{display:inline-flex;align-items:center;gap:9px;font-size:14px;color:var(--ink-soft);cursor:pointer}
.check input{width:17px;height:17px;accent-color:var(--accent)}

.comp-box{max-height:240px;overflow:auto;border:1px solid var(--line);border-radius:var(--radius-sm);background:var(--surface-2)}
.comp-box label{display:flex;align-items:center;gap:10px;padding:9px 13px;font-size:13.5px;cursor:pointer;border-bottom:1px solid var(--line-2)}
.comp-box label:last-child{border-bottom:none}
.comp-box label:hover{background:#fff}
.comp-box input{accent-color:var(--accent)}
.comp-box .code{font-weight:700;color:var(--ink)}
.comp-box .nm{color:var(--muted);font-size:12.5px}

.select{padding:8px 30px 8px 11px;border:1.5px solid var(--line);border-radius:8px;background:#fff;font-size:13px;font-family:var(--font);color:var(--ink);
  appearance:none;-webkit-appearance:none;
  background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 24 24' fill='none' stroke='%2364748b' stroke-width='3'%3E%3Cpath d='M6 9l6 6 6-6'/%3E%3C/svg%3E");
  background-repeat:no-repeat;background-position:right 9px center;cursor:pointer}
.select:focus{outline:none;border-color:var(--accent);box-shadow:0 0 0 3px rgba(79,70,229,.14)}

/* permission groups */
.perm-group{margin-bottom:16px}
.perm-group:last-child{margin-bottom:0}
.perm-group .gh{font-size:12px;font-weight:700;color:var(--ink-soft);margin:0 0 9px;display:flex;align-items:center;gap:8px}
.perm-group .gh::after{content:"";flex:1;height:1px;background:var(--line-2)}
.perm-rows{display:grid;grid-template-columns:repeat(auto-fill,minmax(250px,1fr));gap:9px 16px}
.perm-row{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:8px 12px;background:var(--surface-2);border:1px solid var(--line);border-radius:var(--radius-sm)}
.perm-row .pn{font-size:13.5px;color:var(--ink-soft)}

.formbar{display:flex;gap:10px;justify-content:flex-end;padding:18px 22px;background:var(--surface-2);border-top:1px solid var(--line-2);flex-wrap:wrap}
.field-hint{font-size:12px;color:var(--muted);margin-top:7px}
.field-hint code{background:var(--surface-2);border:1px solid var(--line);border-radius:5px;padding:1px 5px;font-size:11.5px}

.inline-form{display:inline}

/* =========================================================================
   STATUS PAGE (no access / messages)
   ========================================================================= */
.status-wrap{min-height:100vh;display:flex;align-items:center;justify-content:center;padding:24px;
  background:radial-gradient(1200px 600px at 50% -10%,#1e293b,#0b1220);}
.status-card{
  width:100%;max-width:470px;background:var(--surface);border-radius:16px;
  box-shadow:0 20px 50px rgba(2,6,23,.40);padding:42px 38px 34px;text-align:center;animation:rise .35s ease;
}
.status-ico{
  width:74px;height:74px;border-radius:50%;margin:0 auto 22px;
  display:flex;align-items:center;justify-content:center;
  background:var(--err-bg);color:var(--err);
}
.status-ico svg{width:34px;height:34px}
.status-card h1{font-size:22px;margin:0 0 8px;color:var(--ink)}
.status-card p.lead{color:var(--muted);font-size:14px;line-height:1.55;margin:0 auto 26px;max-width:360px}
.status-actions{display:flex;gap:10px;justify-content:center;flex-wrap:wrap}
.status-foot{margin-top:24px;padding-top:18px;border-top:1px solid var(--line-2);font-size:12px;color:var(--muted)}