@import "https://fonts.googleapis.com/css2?family=Archivo:wght@400;600;800&family=IBM+Plex+Mono:wght@400;600&display=swap";:root{--bg:#f5f1e8;--ink:#1b1f26;--muted:#5e6570;--panel:#fffdf8;--line:#d3cab6;--accent:#14532d;--accent-soft:#d9f4dd;--danger:#8f2121;--danger-soft:#ffe7e7;--shadow:0 18px 40px #1821242e;--shadow-sm:0 4px 12px #1821241a}*{box-sizing:border-box}html,body,#root{min-height:100%;margin:0}body{color:var(--ink);background:radial-gradient(circle at 10% 20%, #f7e8d0 0, transparent 38%), radial-gradient(circle at 92% 7%, #dbeed8 0, transparent 33%), var(--bg);font-family:Archivo,sans-serif}.auth-shell{place-items:center;min-height:100vh;padding:32px;display:grid}.auth-card{background:var(--panel);border:1px solid var(--line);width:min(520px,96vw);box-shadow:var(--shadow);border-radius:20px;padding:36px 32px}.auth-logo{align-items:center;gap:12px;margin-bottom:4px;display:flex}.auth-logo-icon{color:var(--accent);font-size:2rem;line-height:1}.auth-logo h1{letter-spacing:.02em;margin:0;font-size:2rem}.subtitle{color:var(--muted);margin:10px 0 20px;font-size:.93rem}.form-stack{gap:14px;display:grid}.login-submit{transition:transform .18s ease-out}.login-submit--evasive{will-change:transform}.easter-egg-hint{color:#7a4b00;background:linear-gradient(#fff3cd 0%,#ffe8a3 100%);border:1px solid #e2bf6f;border-radius:12px;margin:2px 0 0;padding:10px 12px;font-size:.86rem;font-weight:700;line-height:1.35;box-shadow:0 6px 16px #7a4b001f}.api-hint{color:var(--muted);margin-top:16px;font-family:IBM Plex Mono,monospace;font-size:.77rem;display:block}label{gap:6px;font-size:.87rem;font-weight:600;display:grid}input,select,button{font:inherit}input,select{border:1px solid var(--line);background:#fff;border-radius:10px;padding:10px 12px;transition:border-color .15s,box-shadow .15s}input:focus,select:focus{border-color:var(--accent);outline:none;box-shadow:0 0 0 3px #14532d1f}button{cursor:pointer;background:var(--accent);color:#fff;border:0;border-radius:10px;padding:10px 16px;font-weight:700;transition:opacity .15s,transform .1s}button:hover:not(:disabled){opacity:.88}button:active:not(:disabled){transform:scale(.98)}button:disabled{opacity:.45;cursor:not-allowed}.btn-primary{background:var(--accent);color:#fff}.btn-secondary{color:#ecf5ec;background:#ffffff1f;border:1px solid #b8dbbf4d;font-weight:600}.btn-secondary:hover:not(:disabled){opacity:1;background:#fff3}.btn-logout{background:#8f212140;border-color:#dc78784d}.btn-icon{border:1px solid var(--line);color:var(--muted);background:0 0;border-radius:8px;padding:5px 9px;font-size:1rem;line-height:1}.btn-danger{color:var(--danger);border-color:#efb1b1}.btn-danger:hover:not(:disabled){background:var(--danger-soft);opacity:1}.layout{grid-template-columns:260px 1fr;min-height:100vh;display:grid}.sidebar{color:#ecf5ec;background:#131e25;flex-direction:column;align-self:start;gap:14px;height:100vh;padding:24px 16px;display:flex;position:sticky;top:0}.sidebar-header{align-items:center;gap:10px;display:flex}.sidebar-logo{color:#6fc984;font-size:1.8rem;line-height:1}.sidebar-header h2{letter-spacing:.02em;margin:0;font-size:1.3rem}.sidebar-header .role{color:#7fcf92;text-transform:uppercase;letter-spacing:.05em;margin:0;font-family:IBM Plex Mono,monospace;font-size:.78rem}.sidebar-username{color:#b6d4b7;margin:0;padding:0 4px;font-size:.9rem}.sidebar nav{gap:4px;display:grid}.sidebar nav button{text-align:left;color:#c8e6ca;background:0 0;border:1px solid #0000;border-radius:10px;align-items:center;gap:8px;padding:9px 12px;font-size:.92rem;font-weight:600;display:flex}.sidebar nav button:hover:not(:disabled){opacity:1;background:#ffffff12}.sidebar nav button.active{color:#fff;background:#4b995d59;border-color:#baecc780}.nav-icon{opacity:.8;text-align:center;width:18px;font-size:1rem}.sidebar-actions{gap:8px;margin-top:auto;display:grid}.sidebar-copyright{color:#9ebaa6;margin:4px 2px 0;font-size:.72rem;line-height:1.35}.panel{padding:28px 32px;overflow:auto}.section-title{margin:0 0 6px;font-size:1.35rem}.section-hint{color:var(--muted);margin:0 0 18px;font-size:.88rem}.grid-cards{grid-template-columns:repeat(4,minmax(140px,1fr));gap:14px;margin-top:16px;display:grid}.stat-card{background:var(--panel);border:1px solid var(--line);box-shadow:var(--shadow-sm);border-radius:16px;align-items:center;gap:14px;padding:18px 20px;display:flex}.stat-card--green{background:#f3fbf4;border-color:#a7d7af}.stat-icon{opacity:.5;font-size:1.6rem;line-height:1}.stat-card h4{color:var(--muted);margin:0;font-size:.85rem;font-weight:600}.stat-card strong{margin-top:4px;font-size:2.1rem;font-weight:800;line-height:1;display:block}.inline-form{flex-wrap:wrap;align-items:flex-end;gap:10px;margin-bottom:16px;display:flex}.inline-actions{align-items:center;gap:8px;display:inline-flex}.inline-form input,.inline-form select{min-width:170px}.table-tools{justify-content:flex-end;margin-bottom:10px;display:flex}.search-input{width:min(440px,100%)}.table-footer{justify-content:space-between;align-items:center;gap:12px;margin-top:10px;display:flex}.page-size-control{color:var(--muted);align-items:center;gap:8px;font-size:.82rem;font-weight:600;display:inline-flex}.page-size-control select{border-radius:8px;min-width:74px;padding:6px 8px}.checkbox{align-items:center;gap:8px;font-size:.9rem;font-weight:600;display:inline-flex}.policy-form-card{background:var(--panel);border:1px solid var(--line);box-shadow:var(--shadow-sm);border-radius:16px;margin-bottom:24px;padding:20px 24px}.policy-form-card h4{color:var(--accent);margin:0 0 16px;font-size:1.05rem}.policy-form-grid{grid-template-columns:1fr 1fr minmax(84px,96px);gap:12px 16px;display:grid}.priority-field{justify-self:end;width:96px}.priority-field input{width:100%;min-width:0}.col-span-2{grid-column:span 2}.col-span-3{grid-column:span 3}.policy-form-actions{grid-column:span 3;justify-content:space-between;align-items:center;padding-top:4px;display:flex}table{border-collapse:collapse;background:var(--panel);border:1px solid var(--line);border-radius:12px;width:100%;overflow:hidden}.table-responsive{-webkit-overflow-scrolling:touch;border-radius:12px;width:100%;overflow-x:auto}.table-responsive table{min-width:760px}.table-responsive .policies-table{min-width:980px}.policies-table{table-layout:auto}.policies-table td{vertical-align:middle}.pagination-bar{justify-content:flex-end;align-items:center;gap:10px;margin-top:10px;display:flex}.pagination-label{color:var(--muted);text-align:center;min-width:110px;font-size:.84rem}th,td{text-align:left;border-bottom:1px solid var(--line);padding:10px 12px;font-size:.88rem}thead{background:var(--accent-soft)}th{text-transform:uppercase;letter-spacing:.04em;color:var(--accent);font-size:.82rem;font-weight:700}tbody tr:last-child td{border-bottom:none}tbody tr:hover{background:#f9f6ef}.th-priority{text-align:center;width:56px}.row-disabled td{opacity:.5}.comment-cell{white-space:nowrap;text-overflow:ellipsis;max-width:240px;color:var(--muted);font-size:.85rem;overflow:hidden}.actions-cell{white-space:nowrap}.actions-cell .btn-icon{margin-right:6px}.actions-cell .btn-icon:last-child{margin-right:0}.hostname-cell{align-items:center;gap:8px;display:inline-flex}.hostname-cell .btn-icon{padding:3px 7px}.row-editor td{background:#f5fbf6;border-bottom:1px solid #cde3d2}.policy-inline-editor{padding:8px 4px}.mono{font-family:IBM Plex Mono,monospace;font-size:.82rem}.ip-list{flex-wrap:wrap;gap:4px;display:flex}.ip-chip{color:#14532d;background:#ecfdf3;border:1px solid #bfe9cf;border-radius:99px;padding:1px 7px;display:inline-block}.muted{color:var(--muted);font-style:italic}.audit-policy-name{color:var(--ink);margin-bottom:2px;font-size:.8rem;font-weight:600;line-height:1.2}.audit-policy-comment{color:var(--muted);font-size:.76rem;line-height:1.3}.audit-policy-cell{min-width:240px;max-width:340px}.audit-device-cell{white-space:normal;overflow-wrap:anywhere;word-break:break-word;min-width:280px;max-width:420px;line-height:1.35}.audit-policy-id{white-space:normal;overflow-wrap:anywhere;word-break:break-word;max-width:100%;line-height:1.25;display:inline-block}.audit-actor-cell,.audit-details-cell{white-space:normal;overflow-wrap:anywhere;word-break:break-word;min-width:220px;max-width:320px;line-height:1.35}.badge{letter-spacing:.04em;text-transform:uppercase;border-radius:99px;padding:2px 9px;font-size:.76rem;font-weight:700;display:inline-block}.badge-allow{color:#065f46;background:#d1fae5}.badge-deny{color:#991b1b;background:#fee2e2}.badge-active{color:#1e40af;background:#dbeafe}.badge-inactive{color:#64748b;background:#f1f5f9}.badge-role-admin{color:#92400e;background:#fef3c7}.badge-role-viewer{color:#5b21b6;background:#ede9fe}.log-allow{background:#f0fdf4!important}.log-deny{background:#fff5f5!important}.field-hint{color:var(--muted);margin-bottom:6px;font-size:.78rem;font-weight:400;display:block}.field-hint kbd{border:1px solid var(--line);background:#f5f1e8;border-radius:4px;padding:1px 5px;font-size:.75rem;display:inline-block}.tag-input{border:1px solid var(--line);cursor:text;background:#fff;border-radius:10px;flex-wrap:wrap;align-items:center;gap:6px;min-height:42px;padding:8px 10px;transition:border-color .15s,box-shadow .15s;display:flex}.tag-input:focus-within{border-color:var(--accent);box-shadow:0 0 0 3px #14532d1f}.tag{background:var(--accent-soft);color:var(--accent);white-space:nowrap;border-radius:6px;align-items:center;gap:4px;padding:2px 8px;font-size:.82rem;font-weight:600;display:inline-flex}.tag-remove{color:inherit;opacity:.7;cursor:pointer;background:0 0;border:none;border-radius:3px;padding:0 1px;font-size:.95rem;line-height:1}.tag-remove:hover{opacity:1;background:#14532d26}.tag-inner-input{background:0 0;flex:1;min-width:160px;font-size:.88rem;box-shadow:none!important;border:none!important;outline:none!important;padding:0!important}.detail-cell{white-space:normal;flex-wrap:wrap;align-items:flex-start;gap:4px;max-width:100%;display:flex;overflow:visible}.detail-device{color:#475569;overflow-wrap:anywhere;word-break:break-word;background:#f8fafc;border:1px solid #d7dfeb;border-radius:999px;flex:1 0 100%;max-width:100%;padding:1px 8px;font-family:IBM Plex Mono,monospace;font-size:.74rem;line-height:1.25;display:inline-block}.mini-tag{white-space:normal;overflow-wrap:anywhere;word-break:break-word;border-radius:99px;align-items:center;max-width:100%;padding:1px 7px;font-size:.74rem;font-weight:600;line-height:1.25;display:inline-flex}.mini-tag--user{color:#5b21b6;background:#ede9fe}.mini-tag--host{color:#1e40af;background:#dbeafe}.error{background:var(--danger-soft);color:var(--danger);border:1px solid #efb1b1;border-radius:10px;margin-bottom:16px;padding:10px 14px}.toast-layer{z-index:30;pointer-events:none;position:fixed;top:18px;right:18px}.toast{pointer-events:auto;border:1px solid var(--line);min-width:300px;max-width:min(460px,100vw - 36px);box-shadow:var(--shadow);border-radius:14px;align-items:center;gap:10px;padding:12px 14px;animation:.22s ease-out toast-in;display:flex}.toast-success{color:#0f4c2b;background:linear-gradient(135deg,#eefaf0 0%,#d9f4dd 100%);border-color:#9ad1a6}.toast-error{color:#7f1d1d;background:linear-gradient(135deg,#fff0f0 0%,#ffe7e7 100%);border-color:#efb1b1}.toast-dot{opacity:.75;background:currentColor;border-radius:999px;flex-shrink:0;width:10px;height:10px}.toast-close{color:inherit;background:0 0;border:1px solid;border-radius:8px;width:28px;height:28px;margin-left:auto;padding:0;font-size:1.1rem;font-weight:700;line-height:1}.confirm-overlay{z-index:40;background:#131e2559;place-items:center;padding:18px;display:grid;position:fixed;inset:0}.confirm-balloon{border:1px solid var(--line);width:min(430px,100%);box-shadow:var(--shadow);background:linear-gradient(170deg,#fffdf8 0%,#f6efe0 100%);border-radius:18px;padding:18px 18px 16px;animation:.2s ease-out toast-in}.confirm-balloon h4{color:var(--accent);margin:0;font-size:1.05rem}.confirm-balloon p{color:var(--ink);margin:8px 0 0}.confirm-actions{justify-content:flex-end;gap:8px;margin-top:14px;display:flex}@keyframes toast-in{0%{opacity:0;transform:translateY(-8px)scale(.98)}to{opacity:1;transform:translateY(0)scale(1)}}@media (width<=980px){.layout{grid-template-columns:1fr}.sidebar{z-index:2;flex-flow:wrap;gap:8px;height:auto;padding:12px 16px;position:sticky;top:0}.sidebar-header,.sidebar-username{display:none}.sidebar nav{-webkit-overflow-scrolling:touch;flex-wrap:nowrap;flex:1;gap:6px;padding-bottom:2px;display:flex;overflow-x:auto}.sidebar nav button{white-space:nowrap;flex:none}.sidebar-actions{grid-template-columns:1fr 1fr;margin-top:0}.grid-cards{grid-template-columns:repeat(2,minmax(120px,1fr))}.policy-form-grid{grid-template-columns:1fr 1fr}.table-tools{justify-content:stretch}.panel{padding:18px 14px}.search-input{width:100%}.pagination-bar{justify-content:space-between}.table-footer{flex-direction:column;align-items:stretch}.page-size-control{justify-content:space-between}.col-span-2,.col-span-3,.policy-form-actions{grid-column:span 2}}@media (width<=640px){.auth-shell{padding:16px}.auth-card{border-radius:16px;padding:22px 16px}.grid-cards{grid-template-columns:1fr}.inline-form{flex-direction:column;align-items:stretch}.inline-form input,.inline-form select,.inline-form button{width:100%;min-width:0}.policy-form-grid{grid-template-columns:1fr}.col-span-2,.col-span-3,.policy-form-actions{grid-column:span 1}.policy-form-actions{flex-direction:column;align-items:stretch;gap:10px}.inline-actions{grid-template-columns:1fr 1fr;display:grid}.table-responsive table{min-width:640px}.table-responsive .policies-table{min-width:840px}.toast-layer{top:10px;left:10px;right:10px}.toast{min-width:0;max-width:100%}}