:root {
  --bg: #f4f5f7;
  --surface: #ffffff;
  --border: #e3e6ea;
  --text: #1f2430;
  --muted: #6b7280;
  --primary: #2f5bea;
  --primary-dark: #2247c4;
  --sidebar: #161b26;
  --sidebar-text: #c3c9d5;
  --sidebar-muted: #6f7789;
  --danger: #dc2b3b;
  --warn: #b8791b;
  --ok: #15925a;
  --radius: 10px;
  --shadow: 0 1px 3px rgba(16, 24, 40, .08), 0 1px 2px rgba(16, 24, 40, .04);
}

* { box-sizing: border-box; }

body {
  margin: 0;
  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
  color: var(--text);
  background: var(--bg);
  font-size: 14px;
  line-height: 1.5;
}

a { color: var(--primary); text-decoration: none; }
a:hover { text-decoration: underline; }

/* ---------- Layout ---------- */
.layout { display: flex; min-height: 100vh; }

.sidebar {
  width: 240px;
  flex-shrink: 0;
  background: var(--sidebar);
  color: var(--sidebar-text);
  display: flex;
  flex-direction: column;
  padding: 20px 0;
}

.brand {
  font-size: 20px;
  font-weight: 700;
  color: #fff;
  padding: 0 20px 20px;
  letter-spacing: -.3px;
}
.brand span { color: var(--primary); }

.sidebar nav { flex: 1; display: flex; flex-direction: column; gap: 2px; }

.sidebar nav a {
  color: var(--sidebar-text);
  padding: 10px 20px;
  font-weight: 500;
  border-left: 3px solid transparent;
  display: flex;
  align-items: center;
  gap: 8px;
}
.sidebar nav a:hover { background: rgba(255, 255, 255, .05); text-decoration: none; }
.sidebar nav a.active {
  color: #fff;
  background: rgba(47, 91, 234, .16);
  border-left-color: var(--primary);
}
.sidebar nav a.disabled { color: var(--sidebar-muted); cursor: default; }
.sidebar nav a.disabled:hover { background: none; }

.nav-section {
  color: var(--sidebar-muted);
  font-size: 11px;
  font-weight: 700;
  text-transform: uppercase;
  letter-spacing: .06em;
  padding: 18px 20px 6px;
}

.soon {
  margin-left: auto;
  font-size: 10px;
  background: rgba(255, 255, 255, .08);
  color: var(--sidebar-muted);
  padding: 1px 7px;
  border-radius: 999px;
  text-transform: uppercase;
  letter-spacing: .04em;
}

.sidebar-footer { padding: 16px 20px 0; border-top: 1px solid rgba(255, 255, 255, .07); margin-top: 12px; }
.user-mini { display: flex; flex-direction: column; margin-bottom: 12px; }
.user-mini strong { color: #fff; font-size: 13px; }
.user-mini span { color: var(--sidebar-muted); font-size: 12px; }

.btn-logout {
  width: 100%;
  background: rgba(255, 255, 255, .07);
  color: var(--sidebar-text);
  border: none;
  padding: 8px;
  border-radius: 8px;
  cursor: pointer;
  font-size: 13px;
}
.btn-logout:hover { background: rgba(255, 255, 255, .12); }

/* ---------- Content ---------- */
.content { flex: 1; display: flex; flex-direction: column; min-width: 0; }

.topbar {
  background: var(--surface);
  border-bottom: 1px solid var(--border);
  padding: 16px 28px;
  display: flex;
  align-items: center;
  justify-content: space-between;
}
.topbar h1 { font-size: 18px; margin: 0; font-weight: 600; }

.container { padding: 28px; max-width: 1040px; width: 100%; }

/* ---------- Cards / grid ---------- */
.card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  box-shadow: var(--shadow);
  padding: 22px;
  margin-bottom: 20px;
}
.card h2 { margin-top: 0; }

.grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(220px, 1fr)); gap: 16px; }
.app-card h3 { margin: 0 0 4px; }
a.app-card:hover { border-color: var(--primary); text-decoration: none; box-shadow: 0 4px 14px rgba(47, 91, 234, .12); }

/* ---------- Tables ---------- */
.table { width: 100%; border-collapse: collapse; }
.table th, .table td { text-align: left; padding: 12px 10px; border-bottom: 1px solid var(--border); }
.table th { font-size: 12px; text-transform: uppercase; letter-spacing: .04em; color: var(--muted); }
.table tr:last-child td { border-bottom: none; }
.row-actions { display: flex; gap: 6px; justify-content: flex-end; }
.row-actions form { margin: 0; }

/* ---------- Badges ---------- */
.badge {
  display: inline-block;
  font-size: 12px;
  font-weight: 600;
  padding: 2px 10px;
  border-radius: 999px;
}
.badge-admin { background: #eae2fb; color: #6b34d6; }
.badge-editor { background: #dcecff; color: #1f5fc4; }
.badge-viewer { background: #eceef1; color: #57606f; }
.badge-active { background: #dcf5e7; color: var(--ok); }
.badge-revoked { background: #fde2e4; color: var(--danger); }

/* ---------- Buttons ---------- */
.btn {
  display: inline-block;
  border: 1px solid var(--border);
  background: var(--surface);
  color: var(--text);
  padding: 8px 14px;
  border-radius: 8px;
  cursor: pointer;
  font-size: 13px;
  font-weight: 500;
}
.btn:hover { background: #f7f8fa; text-decoration: none; }
.btn-primary { background: var(--primary); border-color: var(--primary); color: #fff; }
.btn-primary:hover { background: var(--primary-dark); }
.btn-sm { padding: 5px 10px; font-size: 12px; }
.btn-danger { color: var(--danger); border-color: #f3c2c7; }
.btn-danger:hover { background: #fde8ea; }
.btn-warn { color: var(--warn); border-color: #ecd6ac; }
.btn-warn:hover { background: #fbf1dc; }
.btn-ok { color: var(--ok); border-color: #b6e2ca; }
.btn-ok:hover { background: #e5f6ed; }

.page-actions { display: flex; justify-content: flex-end; margin-bottom: 16px; }

/* ---------- Forms ---------- */
.form-card { max-width: 520px; }
label { display: block; font-weight: 600; margin: 14px 0 6px; font-size: 13px; }
label.checkbox { font-weight: 400; display: flex; align-items: center; gap: 8px; }
input[type=text], input[type=email], input[type=password], select {
  width: 100%;
  padding: 10px 12px;
  border: 1px solid var(--border);
  border-radius: 8px;
  font-size: 14px;
  background: #fff;
}
input:focus, select:focus { outline: none; border-color: var(--primary); box-shadow: 0 0 0 3px rgba(47, 91, 234, .12); }
input[readonly] { background: #f4f5f7; color: var(--muted); }
.form-actions { display: flex; gap: 10px; justify-content: flex-end; margin-top: 22px; }

/* ---------- Alerts ---------- */
.alert { padding: 12px 16px; border-radius: 8px; margin-bottom: 18px; font-size: 13px; }
.alert-success { background: #dcf5e7; color: #0f6b41; border: 1px solid #b6e2ca; }
.alert-error { background: #fde2e4; color: #9b1c28; border: 1px solid #f3c2c7; }
.alert-error ul { margin: 0; padding-left: 18px; }

.muted { color: var(--muted); }

/* ---------- Auth pages ---------- */
.auth-body {
  display: flex;
  align-items: center;
  justify-content: center;
  min-height: 100vh;
  background: linear-gradient(135deg, #1b2233, #2f5bea22), var(--bg);
  padding: 20px;
}
.auth-card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 14px;
  box-shadow: 0 10px 40px rgba(16, 24, 40, .12);
  padding: 34px;
  width: 100%;
  max-width: 400px;
}
.auth-brand { font-size: 22px; font-weight: 700; margin-bottom: 6px; }
.auth-brand span { color: var(--primary); }
.auth-card h2 { margin: 6px 0 20px; font-size: 18px; }
.auth-card .btn-primary { width: 100%; margin-top: 20px; padding: 11px; }
.auth-card .link { display: inline-block; margin-top: 16px; font-size: 13px; }