:root{
  --bg:#f4f6f9; --panel:#ffffff; --line:#e2e8f0; --txt:#1e293b; --muted:#64748b;
  --accent:#2563eb; --accent-d:#1d4ed8; --ok:#15803d; --okbg:#dcfce7; --err:#b91c1c; --errbg:#fee2e2;
  --radius:10px;
}
*{box-sizing:border-box}
body{margin:0;background:var(--bg);color:var(--txt);
  font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5}
a{color:var(--accent);text-decoration:none}
a:hover{text-decoration:underline}

/* ---- auth card ---- */
body.auth{display:flex;align-items:center;justify-content:center;min-height:100vh;padding:20px}
.auth-card{background:var(--panel);border:1px solid var(--line);border-radius:var(--radius);
  padding:28px;width:100%;max-width:360px;box-shadow:0 6px 24px rgba(15,23,42,.06)}
.auth-brand{margin:0;font-size:18px;font-weight:800;letter-spacing:.4px}
.auth-title{margin:.2em 0 1.2em;font-size:14px;font-weight:600;color:var(--muted)}
.auth-card label{display:block;margin:12px 0 4px;font-size:12px;font-weight:600;color:var(--muted)}
.auth-card input{width:100%;padding:9px 11px;border:1px solid var(--line);border-radius:8px;font-size:14px}
.auth-card button{margin-top:16px;width:100%;padding:10px;border:0;border-radius:8px;
  background:var(--accent);color:#fff;font-weight:600;cursor:pointer}
.auth-card button:hover{background:var(--accent-d)}
.auth-card .linkbtn{background:none;color:var(--muted);width:auto;margin-top:8px;padding:4px;font-weight:400}
.auth-card .resend{margin-top:6px}
.muted{color:var(--muted);font-size:13px}
details.muted{margin-top:14px}
.totp-secret{display:block;background:#f1f5f9;padding:8px;border-radius:6px;font-family:monospace;
  word-break:break-all;margin:6px 0 14px}
.reccodes{columns:2;font-family:monospace;background:#f1f5f9;border-radius:8px;padding:12px 28px;margin:10px 0}
.btnlink{display:inline-block;background:var(--accent);color:#fff;padding:8px 14px;border-radius:8px;font-weight:600}
.btnlink:hover{background:var(--accent-d);text-decoration:none}
#qr{display:block;margin:0 auto 6px}

/* ---- flash ---- */
.flash{padding:9px 12px;border-radius:8px;margin:10px 0;font-size:13px}
.flash.err{background:var(--errbg);color:var(--err)}
.flash.ok{background:var(--okbg);color:var(--ok)}

/* ---- app chrome ---- */
.appbar{display:flex;align-items:center;gap:16px;background:var(--panel);border-bottom:1px solid var(--line);
  padding:10px 18px;position:sticky;top:0;z-index:10}
.appbar-brand{font-weight:800;letter-spacing:.4px}
.appbar-nav{display:flex;gap:14px;flex:1}
.appbar-user{color:var(--muted);font-size:13px}
.appmain{max-width:1100px;margin:20px auto;padding:0 18px}
.panel{background:var(--panel);border:1px solid var(--line);border-radius:var(--radius);padding:18px 20px;margin-bottom:16px}
.panel h3{margin:0 0 10px;font-size:15px}
.panel input{padding:8px 10px;border:1px solid var(--line);border-radius:8px;font-size:14px}
.panel button{padding:8px 14px;border:0;border-radius:8px;background:var(--accent);color:#fff;font-weight:600;cursor:pointer}
.panel label{display:block;margin:10px 0 4px;font-size:12px;font-weight:600;color:var(--muted)}

/* ---- tables (admin) ---- */
table.grid{width:100%;border-collapse:collapse;font-size:13px}
table.grid th,table.grid td{border-bottom:1px solid var(--line);padding:6px 8px;text-align:left;vertical-align:middle}
table.grid th{color:var(--muted);font-size:12px;text-transform:uppercase;letter-spacing:.4px}
table.grid td input,table.grid td select,table.grid td textarea{padding:5px 7px;border:1px solid var(--line);border-radius:6px;font-size:13px;width:100%;font-family:inherit}
table.grid td input[type=checkbox]{width:auto}
.actions{display:flex;gap:5px;flex-wrap:wrap;align-items:center}
.actions form{display:inline;margin:0}
.actions button{padding:5px 9px;font-size:12px}
button.ghost{background:#eef2f7;color:var(--txt)}
button.ghost:hover{background:#e2e8f0}
button.danger{background:#fee2e2;color:var(--err)}
.rowform{display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-top:12px;padding-top:12px;border-top:1px dashed var(--line)}
.rowform input,.rowform select{padding:7px 9px;border:1px solid var(--line);border-radius:7px;font-size:13px}
.cb{display:inline-flex;align-items:center;gap:4px;font-size:13px;color:var(--txt)}
.editnav{display:flex;gap:6px;align-items:center;margin-bottom:16px;flex-wrap:wrap}
.editnav a{padding:8px 16px;border:1px solid var(--line);border-radius:8px;background:var(--panel);color:var(--txt);font-weight:600}
.editnav a:hover{text-decoration:none;border-color:var(--accent)}
.editnav a.active{background:var(--accent);color:#fff;border-color:var(--accent)}
.editnav-perm{margin-left:auto;color:var(--muted);font-size:12px}
.seclist-tab{margin:12px 0}
.seclist{display:flex;flex-wrap:wrap;gap:8px;margin-top:6px}
.seclist a{padding:6px 12px;border:1px solid var(--line);border-radius:8px;background:#f8fafc;color:var(--txt)}
.seclist a:hover{border-color:var(--accent);text-decoration:none}
.links-head{display:flex;align-items:center;gap:14px;flex-wrap:wrap;margin-bottom:10px}
.links-head h3{margin:0}
.jump{display:flex;align-items:center;gap:6px;margin:0}
.jump select{padding:6px 8px;border:1px solid var(--line);border-radius:7px}
.moveform{display:flex;gap:4px;align-items:center;margin:0}
.moveform select{flex:1;min-width:90px}
.drag-handle{cursor:grab;color:var(--muted);font-size:15px;width:22px;text-align:center;user-select:none}
.drag-handle:active{cursor:grabbing}
tbody.sortable tr.sortable-ghost{opacity:.4;background:#eef2f7}
tbody.sortable tr.sortable-chosen{background:#f1f5f9}