:root{--bg: #f6f7f9;--panel: #ffffff;--border: #d8dde3;--text: #1c2127;--muted: #6b7480;--accent: #2563eb;--accent-text: #ffffff;--accent-soft: #e8eefc;--accent-soft-text: #1d4ed8;--danger: #dc2626;--good: #16a34a;--warn: #b45309;--bad: #b91c1c;--radius: 6px;--mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace}*{box-sizing:border-box}html,body{margin:0;padding:0}body{font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;font-size:14px;line-height:1.5;color:var(--text);background:var(--bg)}code{font-family:var(--mono);font-size:.92em}h1{font-size:1.4rem;margin:0}h2{font-size:1.1rem;margin:0 0 .5rem}h4{margin:0 0 .25rem;font-size:.85rem;text-transform:uppercase;letter-spacing:.04em;color:var(--muted)}a{color:var(--accent);text-decoration:none}a:hover{text-decoration:underline}.muted{color:var(--muted)}.small{font-size:.85em}.hint{color:var(--muted);font-size:.9em;margin:.25rem 0 0}.app-shell{display:grid;grid-template-columns:220px 1fr;min-height:100vh}.sidebar{background:var(--panel);border-right:1px solid var(--border);padding:1.25rem .75rem 1rem;display:flex;flex-direction:column;gap:1rem;position:sticky;top:0;height:100vh}.sidebar .brand{display:flex;flex-direction:column;gap:1px;padding:0 .5rem .75rem;border-bottom:1px solid var(--border)}.sidebar .brand-name{font-weight:700;font-size:1.15rem;letter-spacing:-.01em}.sidebar .brand-sub{font-size:.72rem;font-weight:600;text-transform:uppercase;letter-spacing:.08em;color:var(--muted)}.sidebar nav{display:flex;flex-direction:column;gap:1px;overflow-y:auto}.sidebar .nav-group{display:flex;flex-direction:column;gap:1px}.sidebar .nav-item{display:block;color:var(--text);font-weight:500;padding:.45rem .6rem;border-radius:var(--radius);transition:background .12s ease,color .12s ease}.sidebar .nav-item:hover{background:var(--bg);text-decoration:none}.sidebar .nav-item.active{background:var(--accent);color:var(--accent-text)}.sidebar .nav-item.section-active{background:var(--accent-soft);color:var(--accent-soft-text)}.sidebar .subnav{display:flex;flex-direction:column;gap:1px;margin:1px 0 1px .85rem;padding-left:.6rem;border-left:2px solid var(--border)}.sidebar .nav-subitem{display:block;color:var(--muted);font-size:.9em;padding:.35rem .55rem;border-radius:var(--radius);transition:background .12s ease,color .12s ease}.sidebar .nav-subitem:hover{background:var(--bg);color:var(--text);text-decoration:none}.sidebar .nav-subitem.active{background:var(--accent);color:var(--accent-text);font-weight:500}.sidebar .me{margin-top:auto;border-top:1px solid var(--border);padding:.75rem .5rem 0;display:flex;flex-direction:column;gap:2px;font-size:.85em}.me-label{font-weight:600}.me-warn{color:var(--warn)}.content{padding:1.5rem 2rem;max-width:1100px;width:100%}.loading{color:var(--muted);padding:2rem}.gate-screen{max-width:640px;margin:4rem auto;padding:2rem;background:var(--panel);border:1px solid var(--border);border-radius:var(--radius)}.page-head{margin-bottom:1.25rem}.page-head-row{display:flex;align-items:center;gap:.75rem}.subtitle{margin-top:.25rem}section{margin:1.5rem 0}.toolbar{display:flex;align-items:center;gap:.75rem;margin:1rem 0;flex-wrap:wrap}.toolbar .count{margin-left:auto}.pager{display:flex;align-items:center;margin-top:1rem}.pager .pull{flex:1}.panel{background:var(--panel);border:1px solid var(--border);border-radius:var(--radius);padding:1rem;margin:1rem 0}.form{display:flex;flex-direction:column;gap:.75rem;max-width:540px}.form.inline{flex-direction:row;flex-wrap:wrap;align-items:flex-end;max-width:none}.form.wide{max-width:820px}.form.wide>label{max-width:460px}.form label,.filters label{display:flex;flex-direction:column;gap:.25rem;font-weight:600;font-size:.9em}.form label.checkbox{flex-direction:row;align-items:center;font-weight:400}.form .nested{border-left:2px solid var(--border);padding-left:.75rem;display:flex;flex-direction:column;gap:.75rem}.form-actions,.filter-actions{display:flex;gap:.5rem}.filters{display:flex;gap:.75rem;flex-wrap:wrap;align-items:flex-end}input,select{font:inherit;padding:.4rem .5rem;border:1px solid var(--border);border-radius:var(--radius);background:#fff;color:var(--text)}input:focus,select:focus{outline:2px solid var(--accent);outline-offset:-1px}button{font:inherit;padding:.4rem .8rem;border:1px solid var(--border);border-radius:var(--radius);background:#fff;color:var(--text);cursor:pointer}button:hover:not(:disabled){background:var(--bg)}button:disabled{opacity:.5;cursor:not-allowed}button.primary{background:var(--accent);border-color:var(--accent);color:var(--accent-text)}button.primary:hover:not(:disabled){filter:brightness(1.05);background:var(--accent)}button.danger{color:var(--danger);border-color:var(--danger)}button.danger:hover:not(:disabled){background:#fef2f2}button.small{padding:.25rem .5rem;font-size:.85em}button.link-btn,button.icon-btn{border:none;background:none;color:var(--accent);padding:0 .25rem}button.icon-btn{font-size:1.2rem;line-height:1;color:var(--muted)}.table-wrap{overflow-x:auto;border:1px solid var(--border);border-radius:var(--radius);background:var(--panel)}table{width:100%;border-collapse:collapse}th,td{text-align:left;padding:.5rem .75rem;border-bottom:1px solid var(--border);vertical-align:top}th{font-size:.8em;text-transform:uppercase;letter-spacing:.04em;color:var(--muted);background:var(--bg)}tbody tr:last-child td{border-bottom:none}td.empty{color:var(--muted);text-align:center;padding:1.5rem}.row-actions{white-space:nowrap}tr.row-warn td{background:#fffbeb}.inline-edit{display:flex;gap:.4rem;align-items:center;flex-wrap:wrap}.detail-row td{background:var(--bg)}.detail-grid{display:grid;grid-template-columns:1fr 1fr;gap:1rem}.json-view{margin:0;font-family:var(--mono);font-size:.82em;background:#fff;border:1px solid var(--border);border-radius:var(--radius);padding:.5rem;max-height:280px;overflow:auto;white-space:pre-wrap;word-break:break-word}.badge{display:inline-block;padding:.1rem .45rem;border-radius:999px;font-size:.78em;font-weight:600;border:1px solid transparent;line-height:1.4}.badge-neutral{background:#eef2ff;color:#3730a3}.badge-good{background:#dcfce7;color:#166534}.badge-warn{background:#fef3c7;color:var(--warn)}.badge-bad{background:#fee2e2;color:var(--bad)}.badge-muted{background:#f1f5f9;color:var(--muted)}.grant-chip{font-size:.9em}.perm-chip{display:inline-block;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius);padding:.05rem .35rem;margin:0 .25rem .25rem 0}.scope-picker{border:1px solid var(--border);border-radius:var(--radius);padding:.5rem .75rem;display:flex;flex-direction:column;gap:.4rem}.scope-picker legend{font-weight:600;font-size:.9em;padding:0 .25rem}.scope-picker label{flex-direction:row;align-items:center;gap:.4rem;font-weight:400}.scope-fields{display:flex;gap:.5rem;flex-wrap:wrap}.scope-fields select,.scope-fields input{flex:1 1 8rem}.grant-mode{border:1px solid var(--border);border-radius:var(--radius);padding:.5rem .75rem;display:flex;gap:1rem;flex-wrap:wrap}.grant-mode legend{font-weight:600;font-size:.9em;padding:0 .25rem}.grant-mode label.radio,.scope-picker label{cursor:pointer}.grant-mode label.radio{display:inline-flex;flex-direction:row;align-items:center;gap:.4rem;font-weight:400}.action-picker{border:1px solid var(--border);border-radius:var(--radius);padding:.5rem .75rem}.action-picker legend{font-weight:600;font-size:.9em;padding:0 .25rem}.action-list{display:grid;grid-template-columns:repeat(auto-fill,minmax(14rem,1fr));gap:.3rem .75rem;max-height:16rem;overflow-y:auto}.action-list label.checkbox{display:flex;flex-direction:row;align-items:baseline;gap:.4rem;font-weight:400}.inline-actions{display:inline-flex;flex-wrap:wrap;gap:.25rem}.inline-edit-form{display:flex;flex-direction:column;gap:.5rem;padding:.5rem 0}.grant-rows{display:flex;flex-direction:column;gap:.4rem}.grant-rows-head,.grant-row{display:grid;grid-template-columns:1fr 1fr 1fr 1fr auto;gap:.5rem;align-items:center}.grant-rows-head>*,.grant-row>*{min-width:0}.grant-rows-head{font-size:.8em;color:var(--muted);text-transform:uppercase;letter-spacing:.03em}.error-text{color:var(--danger);font-size:.9em;margin:0}.warn-text{color:var(--warn);font-size:.9em;margin:0 0 .75rem}.modal-backdrop{position:fixed;inset:0;background:#0f172a73;display:flex;align-items:center;justify-content:center;padding:1rem;z-index:50}.modal{background:var(--panel);border-radius:var(--radius);border:1px solid var(--border);max-width:560px;width:100%;max-height:90vh;overflow:auto;box-shadow:0 20px 50px #00000040}.modal-head{display:flex;align-items:center;justify-content:space-between;padding:1rem 1.25rem;border-bottom:1px solid var(--border)}.modal-head h2{margin:0}.modal-body{padding:1.25rem;display:flex;flex-direction:column;gap:.75rem}.modal-actions{display:flex;justify-content:flex-end;gap:.5rem;margin-top:.5rem}.modal-note{border-top:1px solid var(--border);padding-top:.75rem}.copy-field{display:flex;flex-direction:column;gap:.25rem}.copy-field label{font-weight:600;font-size:.85em}.copy-row{display:flex;gap:.5rem;align-items:stretch}.copy-value{flex:1;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius);padding:.4rem .5rem;overflow-wrap:anywhere}.copy-value.block{white-space:pre-wrap}