:root{color-scheme:light dark;--ground:#eef2f5;--surface:#ffffff;--surface-2:#f6f9fb;--line:#d3dde4;--line-soft:#e4ebf0;--ink:#0d161e;--ink-2:#2c3e4d;--muted:#5d7285;--accent:#17627e;--accent-soft:#dceaf1;--accent-ink:#0f4a60;--ok:#2c7a57;--ok-soft:#dcefe4;--warn:#8f6410;--warn-soft:#f6ecd6;--crit:#a03728;--crit-soft:#f7e0dc;--on-accent:#ffffff;--shadow:0 1px 2px rgba(13,22,30,0.06),0 8px 24px -16px rgba(13,22,30,0.28);--bg:var(--ground);--panel:var(--surface);--border:var(--line);--text:var(--ink);--danger:var(--crit)}@media (prefers-color-scheme:dark){:root:not([data-theme=light]){--ground:#0a1117;--surface:#111b24;--surface-2:#16222c;--line:#26363f;--line-soft:#1c2a34;--ink:#dfe9f0;--ink-2:#b3c5d2;--muted:#8ba1b1;--accent:#5cb0cd;--accent-soft:#12303d;--accent-ink:#8fcde3;--ok:#57ac80;--ok-soft:#123023;--warn:#c99a3f;--warn-soft:#33270f;--crit:#d97463;--crit-soft:#3a1c17;--on-accent:#08121a;--shadow:0 1px 2px rgba(0,0,0,0.4),0 10px 28px -18px rgba(0,0,0,0.8)}}:root[data-theme=dark]{--ground:#0a1117;--surface:#111b24;--surface-2:#16222c;--line:#26363f;--line-soft:#1c2a34;--ink:#dfe9f0;--ink-2:#b3c5d2;--muted:#8ba1b1;--accent:#5cb0cd;--accent-soft:#12303d;--accent-ink:#8fcde3;--ok:#57ac80;--ok-soft:#123023;--warn:#c99a3f;--warn-soft:#33270f;--crit:#d97463;--crit-soft:#3a1c17;--on-accent:#08121a;--shadow:0 1px 2px rgba(0,0,0,0.4),0 10px 28px -18px rgba(0,0,0,0.8)}*{box-sizing:border-box}body,html{margin:0;padding:0;background:var(--bg);color:var(--text);font-family:ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif;line-height:1.5}a{color:var(--accent)}.wrap{max-width:880px;margin:0 auto;padding:48px 20px}.card{background:var(--panel);border:1px solid var(--border);border-radius:12px;padding:28px}.card--narrow{max-width:380px;margin:10vh auto}h1{font-size:20px;margin:0 0 4px}.sub{margin:0 0 24px}.sub,label{color:var(--muted);font-size:13px}label{display:block;margin-bottom:6px}input{width:100%;padding:10px 12px;margin-bottom:16px;background:var(--surface-2);border:1px solid var(--border);border-radius:8px;color:var(--text);font-size:14px}input:focus{outline:none;border-color:var(--accent)}button{width:100%;padding:10px 14px;background:var(--accent);border:0;border-radius:8px;color:var(--on-accent);font-size:14px;font-weight:500;cursor:pointer}button:disabled{opacity:.6;cursor:default}.err{background:rgba(255,107,107,.1);border:1px solid rgba(255,107,107,.35);color:var(--danger);border-radius:8px;padding:10px 12px;font-size:13px;margin-bottom:16px}.badge{display:inline-block;padding:3px 9px;font-weight:500}.badge--ro{background:rgba(240,180,41,.13);border:1px solid rgba(240,180,41,.4);color:var(--warn)}.topbar{display:flex;align-items:center;justify-content:space-between;gap:16px;margin-bottom:28px}.logout{width:auto;background:transparent;border:1px solid var(--border);padding:7px 14px;font-size:13px}.empty,.logout{color:var(--muted)}.empty{font-size:14px}.empty ul{margin:12px 0 0;padding-left:20px}.empty li{margin-bottom:4px}.wrap--wide{max-width:1240px}.topbar-right{display:flex;align-items:center;gap:12px}.card+.card{margin-top:20px}.card--muted{background:transparent;border-style:dashed}.card-head{margin-bottom:20px}h2{font-size:16px;margin:0 0 4px;display:flex;align-items:center;gap:10px}.orig{font-size:11px;font-weight:400;color:var(--muted);border:1px solid var(--border);border-radius:5px;padding:1px 6px;white-space:nowrap}.filters{display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin-bottom:16px}.filters input,.filters select{width:auto;margin:0;padding:8px 10px;font-size:13px}.filter-search{flex:1 1;min-width:220px}.count{color:var(--muted);font-size:13px;margin-left:auto}.table-scroll{overflow-x:auto;border:1px solid var(--border);border-radius:8px}table{width:100%;border-collapse:collapse;font-size:13px}th{text-align:left;font-weight:500;color:var(--muted);border-bottom:1px solid var(--border);white-space:nowrap;background:var(--surface-2)}td,th{padding:10px 12px}td{border-bottom:1px solid var(--line-soft);vertical-align:middle}tbody tr:last-child td{border-bottom:0}tbody tr:hover td{background:rgba(76,141,255,.05)}.row--off td{opacity:.55}.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px}.none{color:var(--muted);font-style:italic}.badge--on{background:rgba(76,175,118,.13);border:1px solid rgba(76,175,118,.4);color:var(--ok)}.badge--off{background:rgba(139,147,163,.12);border:1px solid var(--border);color:var(--muted)}.stub-list{list-style:none;margin:16px 0 0;padding:0}.stub-list li{display:flex;flex-wrap:wrap;gap:4px 12px;padding:10px 0;border-top:1px solid var(--border);font-size:13px}.stub-name{min-width:190px;color:var(--text)}.summary{display:flex;flex-wrap:wrap;gap:12px;margin-bottom:12px}.stat{flex:1 1;min-width:130px;background:var(--panel);border:1px solid var(--border);border-radius:10px;padding:14px 16px}.stat--total{border-color:rgba(76,141,255,.45)}.stat--warn{border-color:rgba(240,180,41,.45)}.stat-num{font-size:24px;font-weight:600}.stat-lbl{font-size:12px;margin-top:4px}.risk-summary{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:20px}.svc{font-size:12px}.check,.svc{color:var(--muted);white-space:nowrap}.check{display:flex;align-items:center;gap:6px;font-size:13px;margin:0;cursor:pointer}.check input{width:auto;margin:0}.risks{display:flex;flex-wrap:wrap;gap:5px}.badge--risk{font-size:11px}.risk--plaintext_password{background:rgba(255,107,107,.13);border:1px solid rgba(255,107,107,.45);color:var(--danger)}.risk--demo_account{background:rgba(240,180,41,.12);border:1px solid rgba(240,180,41,.38);color:var(--warn)}.risk--inactive{background:rgba(139,147,163,.12);border:1px solid var(--border);color:var(--muted)}.badge--owner{background:rgba(76,141,255,.14);border:1px solid rgba(76,141,255,.5);color:var(--accent);font-size:11px;margin-left:6px}.res--ok{background:rgba(76,175,118,.13);border:1px solid rgba(76,175,118,.4);color:var(--ok)}.res--pending{background:rgba(240,180,41,.12);border:1px solid rgba(240,180,41,.4);color:var(--warn)}.res--denied,.res--error{background:rgba(255,107,107,.12);border:1px solid rgba(255,107,107,.4);color:var(--danger)}.res--timeout{background:rgba(139,147,163,.12);border:1px solid var(--border);color:var(--muted)}.once{background:var(--surface-2);border:1px dashed rgba(76,141,255,.5);border-radius:10px;padding:16px;margin:16px 0}.once-pw{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:18px;letter-spacing:.5px;word-break:break-all;-webkit-user-select:all;-moz-user-select:all;user-select:all}.once-warn{color:var(--warn);font-size:12px;margin-top:10px}.row-actions{flex-wrap:wrap}.btn-sm{width:auto;padding:5px 10px;font-size:12px;font-weight:500;border-radius:6px;white-space:nowrap}.btn-ghost{width:auto;background:transparent;border:1px solid var(--border);color:var(--muted)}.btn-ok{background:rgba(76,175,118,.9)}.btn-danger{background:rgba(220,90,90,.9)}.status-note{display:block;margin-top:4px;font-size:10px;color:var(--muted);font-style:italic;cursor:help}.modal-overlay{position:fixed;inset:0;background:rgba(4,6,10,.66);display:flex;align-items:center;justify-content:center;padding:20px;z-index:50}.modal{background:var(--panel);border:1px solid var(--border);border-radius:12px;padding:22px 22px 18px;width:100%;max-width:460px;box-shadow:0 18px 60px rgba(0,0,0,.55)}.modal h3{margin:0 0 8px;font-size:17px}.modal .sub.small{font-size:12px;margin-top:12px}.modal-input{width:100%;margin:12px 0 0;padding:9px 11px;background:var(--surface-2);border:1px solid var(--border);border-radius:8px;color:var(--text);font-size:13px}.radio-row{flex-direction:column;margin:14px 0 2px}.radio,.radio-row{display:flex;gap:8px}.radio{align-items:center;font-size:14px;color:var(--text);cursor:pointer}.radio input{width:auto;margin:0}.modal-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:18px}.modal-actions button{width:auto;padding:8px 16px}.once .once-pw{font-size:26px;text-align:center;padding:6px 0 14px}.copy-btn{width:100%;background:var(--accent);font-size:14px}.spinner{width:26px;height:26px;margin:6px auto 2px;border:3px solid var(--border);border-top-color:var(--accent);border-radius:50%;animation:spin .8s linear infinite}@keyframes spin{to{transform:rotate(1turn)}}.toast{position:fixed;bottom:22px;left:50%;transform:translateX(-50%);background:var(--panel);border:1px solid var(--border);border-radius:8px;padding:10px 16px;font-size:13px;box-shadow:0 8px 30px rgba(0,0,0,.5);z-index:60}.note-card{background:rgba(76,141,255,.08);border:1px solid rgba(76,141,255,.3);border-radius:10px;padding:12px 14px;font-size:13px;color:var(--text);margin-bottom:20px}.note-card strong{color:var(--accent);font-weight:600}.card-head--row{display:flex;justify-content:space-between;align-items:flex-start;gap:12px}.card-head--row h2{margin-bottom:0}.btn-inline{width:auto;padding:6px 12px;font-size:13px;background:transparent;border:1px solid var(--border);border-radius:7px;color:var(--text)}.btn-inline:hover{border-color:var(--accent);color:var(--accent)}.badge--ok{background:rgba(80,200,120,.14);color:var(--ok)}.add-form{border:1px dashed var(--border);border-radius:10px;padding:16px;margin:14px 0 20px}.form-grid{display:grid;grid-template-columns:repeat(2,1fr);grid-gap:4px 16px;gap:4px 16px}.add-form input,.add-form select{margin-bottom:10px}select{width:100%;padding:10px 12px;background:var(--surface-2);border:1px solid var(--border);border-radius:8px;color:var(--text);font-size:14px}select:focus{outline:none;border-color:var(--accent)}.chk-groups,.edit-groups{display:flex;flex-wrap:wrap;gap:14px;margin-top:6px}.edit-groups{margin-top:10px;padding:10px;background:var(--surface-2);border:1px solid var(--border);border-radius:8px}.chk-block{min-width:150px}.chk-block-title{font-size:11px;text-transform:uppercase;letter-spacing:.04em;color:var(--muted);margin-bottom:4px}.chk{display:flex;align-items:center;gap:6px;font-size:13px;color:var(--text);margin-bottom:3px;cursor:pointer}.chk input{width:auto;margin:0}table.matrix,table.people{width:100%;border-collapse:collapse;font-size:14px}table.matrix th,table.people th{text-align:left;padding:8px 10px;font-size:12px;color:var(--muted);font-weight:500;border-bottom:1px solid var(--border)}table.people td{padding:9px 10px;border-bottom:1px solid var(--border);vertical-align:top}.row-inactive{opacity:.55}.row-actions{display:flex;gap:6px;white-space:nowrap}td.row-actions{display:table-cell}.modal-label{display:block;margin:14px 0 4px;font-size:12px;font-weight:600;color:var(--muted)}.modal-label+.modal-input{margin-top:0}.chips{display:flex;flex-wrap:wrap;gap:4px}.chip{display:inline-block;padding:2px 8px;font-size:12px;background:rgba(76,141,255,.12);color:var(--accent-ink);border:1px solid rgba(76,141,255,.2)}table.matrix td{padding:6px 8px;border-bottom:1px solid var(--border);text-align:center}table.matrix td.matrix-grp,table.matrix th.matrix-grp{text-align:left;white-space:nowrap}.matrix-div td{background:var(--surface-2);font-size:11px;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);font-weight:600;text-align:left!important;padding:6px 10px}.grant-select{padding:4px 6px;min-width:92px}td.cell-off .grant-select{color:var(--muted)}td.cell-on .grant-select{border-color:rgba(80,200,120,.35)}.import-box{background:var(--panel);border:1px solid var(--border);border-radius:12px;padding:18px 20px;margin-top:20px}.import-head{display:flex;justify-content:space-between;align-items:flex-start;gap:14px}.import-plan{margin-top:14px;border-top:1px solid var(--border);padding-top:14px}.import-src{display:flex;flex-wrap:wrap;gap:6px}.import-actions{display:flex;gap:10px;align-items:center;margin-top:14px}.ok-line{margin-top:10px;padding:8px 12px;border-radius:8px;font-size:13px;background:rgba(80,200,120,.12);color:var(--ok);border:1px solid rgba(80,200,120,.3)}.small{font-size:12px}.small .badge{margin-right:4px}.muted-inline{color:var(--muted);font-weight:400}.prov-gaps{margin-top:16px}.prov-h3{font-size:13px;margin:0 0 8px;color:var(--text)}.prov-gap-lists{display:flex;flex-wrap:wrap;gap:24px;font-size:13px}.prov-list{margin:6px 0 0;padding-left:18px}.prov-list li{margin-bottom:3px}.btn-prov{margin:4px 4px 0 0;padding:3px 9px;font-size:12px}.chip--off{opacity:.5;text-decoration:line-through}.prov-banner{display:flex;flex-wrap:wrap;align-items:center;gap:10px;padding:12px 14px;border-radius:10px;margin-bottom:14px;font-size:13px;border:1px solid var(--border);background:var(--surface-2);position:-webkit-sticky;position:sticky;top:8px;z-index:30;box-shadow:0 6px 20px rgba(0,0,0,.35)}.prov-awaiting{border-color:rgba(240,180,41,.4)}.prov-applied{border-color:rgba(80,200,120,.4)}.prov-error,.prov-rejected,.prov-timeout{border-color:rgba(255,107,107,.4)}.prov-pw{width:100%;margin-top:6px}.prov-pw code{background:var(--surface-2);padding:3px 8px;border-radius:6px;font-size:14px}.nav{display:flex;align-items:center;gap:8px;flex-wrap:wrap}.nav-link{width:auto;display:inline-block;background:transparent;border:1px solid var(--border);border-radius:8px;color:var(--muted);padding:7px 14px;font-size:13px;text-decoration:none;white-space:nowrap}.nav-link:hover{border-color:var(--accent);color:var(--accent)}.nav-link--here{border-color:var(--accent);font-weight:500;cursor:default}.nav-link--here,.pw{background:var(--accent-soft);color:var(--accent-ink)}.pw{display:inline-block;padding:2px 8px;border-radius:6px;border:1px solid var(--line);font-size:13px;letter-spacing:.02em;-webkit-user-select:all;-moz-user-select:all;user-select:all}body,html{font-family:Helvetica Neue,Helvetica,Arial,system-ui,sans-serif;font-size:15px;line-height:1.55;-webkit-font-smoothing:antialiased}h1,h2,h3{text-wrap:balance;letter-spacing:-.022em;font-weight:800}.count,.mono,.orig,.stat-num,code,td.login{font-family:ui-monospace,SF Mono,SFMono-Regular,Menlo,Consolas,monospace;font-feature-settings:"tnum";font-variant-numeric:tabular-nums}a{text-decoration-thickness:1px;text-underline-offset:2px}:focus-visible{outline:2px solid var(--accent);outline-offset:2px;border-radius:3px}.card,.import-box,.note-card,.stat{background:var(--surface);border:1px solid var(--line);border-radius:10px;box-shadow:var(--shadow)}.card h2,.card-head h2{font-size:23px}.muted-inline,.small,.sub{color:var(--muted)}.stat-num{font-size:30px;font-weight:700;letter-spacing:-.03em;line-height:1.1}.stat-lbl{font-size:12.5px;color:var(--muted);line-height:1.35}.stat--warn .stat-num{color:var(--warn)}.stat--total .stat-num{color:var(--accent)}.badge{display:inline-flex;align-items:center;gap:7px;padding:4px 11px;border-radius:999px;font-family:ui-monospace,Menlo,monospace;font-size:12px;font-weight:600;border:1px solid transparent}.badge--ok,.badge--on{background:var(--ok-soft);color:var(--ok);border-color:color-mix(in srgb,var(--ok) 28%,transparent)}.badge--risk,.badge--ro{background:var(--warn-soft);color:var(--warn);border-color:color-mix(in srgb,var(--warn) 30%,transparent)}.badge--off{background:var(--crit-soft);color:var(--crit);border-color:color-mix(in srgb,var(--crit) 30%,transparent)}.badge--owner{background:var(--accent-soft);color:var(--accent-ink);border-color:color-mix(in srgb,var(--accent) 35%,transparent)}.chip{padding:7px 12px;border-radius:999px;border:1px solid var(--line);background:var(--surface);color:var(--ink-2);font-size:12.5px;font-weight:600;white-space:nowrap}.chip:hover{border-color:var(--accent)}.chip--off{opacity:1;color:var(--muted)}.table-scroll{overflow:auto;max-height:74vh;background:var(--surface);border:1px solid var(--line);border-radius:10px;box-shadow:var(--shadow);overscroll-behavior:contain}.table-scroll table{border-collapse:collapse;width:100%;font-size:13.5px}.table-scroll td,.table-scroll th{text-align:left;padding:9px 12px;border-bottom:1px solid var(--line-soft);vertical-align:top}.table-scroll thead th{position:-webkit-sticky;position:sticky;top:0;background:var(--surface-2);z-index:5;font-family:ui-monospace,Menlo,monospace;font-size:11px;letter-spacing:.08em;text-transform:uppercase;color:var(--muted);font-weight:700;border-bottom:1px solid var(--line)}.table-scroll tbody tr:last-child td{border-bottom:none}.table-scroll tbody tr:hover{background:var(--surface-2)}.matrix td{text-align:center;padding:6px 8px}.matrix .matrix-grp{position:-webkit-sticky;position:sticky;left:0;background:var(--surface);z-index:4;text-align:left;white-space:nowrap;border-right:1px solid var(--line-soft);font-weight:600;font-size:13px;color:var(--ink)}.matrix thead th{text-align:center}.matrix thead th:first-child{text-align:left}.matrix .matrix-div td{background:var(--surface-2);font-family:ui-monospace,Menlo,monospace;font-size:11px;letter-spacing:.09em;text-transform:uppercase;color:var(--muted);text-align:left;font-weight:700}.grant-select{width:100%;min-width:84px;padding:5px 7px;border-radius:7px;border:1px solid var(--line-soft);background:transparent;color:var(--muted);font:inherit;font-size:12px;font-family:ui-monospace,Menlo,monospace;cursor:pointer}.grant-select:hover{border-color:var(--accent)}.grant-select[data-has="1"]{background:var(--accent-soft);border-color:color-mix(in srgb,var(--accent) 32%,transparent);color:var(--accent-ink);font-weight:700}.grant-select[data-stale="1"]{background:var(--crit-soft);border-color:color-mix(in srgb,var(--crit) 35%,transparent);color:var(--crit);font-weight:700}.grant-select[data-dirty="1"]{border-style:dashed;border-color:var(--warn);box-shadow:0 0 0 2px var(--warn-soft)}.matrix-save{position:-webkit-sticky;position:sticky;bottom:0;z-index:2;display:flex;flex-wrap:wrap;gap:12px;align-items:center;justify-content:space-between;margin-top:14px;padding:12px 14px;border:1px solid color-mix(in srgb,var(--warn) 40%,transparent);border-radius:10px;background:var(--warn-soft);box-shadow:var(--shadow)}.matrix-save-count{font-size:13px;color:var(--warn)}.matrix-save-count strong{font-weight:700}.matrix-save-actions{display:flex;gap:10px;flex-wrap:wrap}.matrix-save-actions button{width:auto}@media (prefers-reduced-motion:reduce){*{animation:none!important;transition:none!important}}.btn-inline.btn-pw{border-color:color-mix(in srgb,var(--warn) 40%,transparent);color:var(--warn)}.btn-inline.btn-pw:hover:not(:disabled){background:var(--warn-soft)}.btn-inline.btn-role{border-color:color-mix(in srgb,var(--accent) 55%,transparent);color:var(--accent-ink);background:var(--accent-soft);margin:4px 4px 0 0;padding:3px 9px;font-size:12px}.btn-inline.btn-role:hover:not(:disabled){background:color-mix(in srgb,var(--accent) 22%,transparent)}.btn-inline.btn-quiet{color:var(--muted);border-style:dashed;margin:4px 4px 0 0;padding:3px 9px;font-size:12px}.chip--muted{opacity:.65;font-style:italic}.warn-inline{color:var(--warn);font-size:12px;font-weight:600;margin-top:2px}.badge--warn{background:var(--warn-soft);color:var(--warn)}.step-open{color:var(--ok)}.step-close{color:var(--warn)}.archive{margin-top:18px;border-top:1px solid var(--line,#d8e2e9);padding-top:12px}.archive-head{background:none;border:0;padding:4px 0;font:inherit;font-weight:600;color:var(--muted);cursor:pointer}.archive-head:hover{color:var(--text)}.note-card--bad{border-color:color-mix(in srgb,var(--crit,#a33) 45%,transparent);background:color-mix(in srgb,var(--crit,#a33) 8%,transparent)}.chip--warn{border-color:color-mix(in srgb,var(--warn) 45%,transparent);background:var(--warn-soft);color:var(--warn)}