:root{--bg:#0f172a;--ink:#0f172a;--muted:#475569;--brand:#1d4ed8;--ok:#047857;--err:#b91c1c;--line:#e2e8f0;--radius:10px;--focus:#2563eb}*{box-sizing:border-box}body,html{margin:0;padding:0}body{font-family:system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;background:#f1f5f9;line-height:1.5}.visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}.skip-link{position:absolute;left:-999px;top:0;background:var(--brand);color:var(--brand-ink);padding:8px 12px;z-index:100}.skip-link:focus{left:8px;top:8px}:focus-visible{outline:3px solid var(--focus)}.header{background:var(--bg);color:#fff;padding:12px 20px;display:flex;gap:10px}.header .brand{font-weight:700;letter-spacing:.02em}.container{max-width:760px;margin:0 auto;padding:24px 20px}.card{background:var(--surface);border:1px solid var(--line);border-radius:var(--radius);padding:24px;margin:16px 0}.meta{color:var(--muted);font-size:.9rem}.btn{font:inherit;border-radius:8px;padding:10px 16px;cursor:pointer;border:1px solid transparent}.btn-primary{background:var(--brand);color:var(--brand-ink)}.btn-secondary{border-color:var(--brand)}.btn:disabled{opacity:.6;cursor:not-allowed}.field{display:block;margin:12px 0}.field label{display:block;font-weight:600;margin-bottom:4px}.field input,.field textarea{font:inherit;width:100%;padding:10px;border:1px solid var(--line);border-radius:8px}.alert{padding:12px 14px;border-radius:8px;margin:12px 0}.alert-info{background:#eff6ff;color:#1e3a8a}.alert-error{background:#fef2f2;color:var(--err)}.alert-success{background:#ecfdf5;color:var(--ok)}.spinner{display:inline-block;width:18px;height:18px;border:3px solid #cbd5e1;border-top:3px solid var(--brand);border-radius:50%;animation:spin .8s linear infinite;vertical-align:middle}@keyframes spin{to{transform:rotate(1turn)}}.list{list-style:none;padding:0;margin:0}.list li{border-bottom:1px solid var(--line)}.list a{display:block;padding:14px 4px;text-decoration:none;color:var(--ink)}.list a:hover{background:#f8fafc}.unread{font-weight:700}.footer{color:var(--muted);font-size:.85rem;padding:24px 20px;text-align:center}.admin-layout{display:grid;grid-template-columns:240px 1fr;min-height:calc(100vh - 100px)}.sidenav{background:#fff;border-right:1px solid var(--line);padding:16px;display:flex;flex-direction:column}.sidenav .list{flex:1 1}.sidenav .list a{padding:10px 8px;border-radius:8px}.sidenav .list a:hover{background:#f1f5f9}.who{display:flex;flex-direction:column;gap:6px;padding-top:16px;border-top:1px solid var(--line)}.role-badge{display:inline-block;background:#eef2ff;color:#3730a3;border-radius:999px;padding:2px 10px;font-size:.8rem;width:-moz-fit-content;width:fit-content}.admin-main{padding:24px}table.data{border-collapse:collapse;width:100%}table.data td,table.data th{text-align:left;border-bottom:1px solid var(--line);padding:8px 10px}.kpi{display:flex;gap:16px;flex-wrap:wrap}.kpi .card{flex:1 1;min-width:160px;text-align:center}.kpi .num{font-size:2rem;font-weight:700}.modal-backdrop{position:fixed;inset:0;background:rgba(15,23,42,.5);display:grid;place-items:center;z-index:50}.modal{background:#fff;border-radius:var(--radius);padding:24px;max-width:460px;width:90%}.modal-actions{display:flex;gap:10px;margin-top:16px}.tenant-picker{padding:0 1rem .75rem}.tenant-picker label{display:block;margin-bottom:.25rem}.tenant-picker select{width:100%;padding:.35rem;border:1px solid #cbd5e1;border-radius:6px;background:#fff}.linklike{background:none;border:none;padding:0;color:#2563eb;text-decoration:underline;cursor:pointer;font:inherit}.linklike:disabled{color:#94a3b8;cursor:default}:root{--shadow-sm:0 1px 2px rgba(15,23,42,.06),0 1px 3px rgba(15,23,42,.08);--shadow-md:0 4px 12px rgba(15,23,42,.08)}body{background:#eef2f7;-webkit-font-smoothing:antialiased}.header{background:linear-gradient(90deg,#0f172a,#1e293b);border-bottom:3px solid var(--brand);box-shadow:var(--shadow-sm)}.header .brand{font-size:1.05rem}h1{font-size:1.6rem;margin:0 0 1rem}h1,h2{letter-spacing:-.01em}h2{font-size:1.15rem;margin:0 0 .75rem}.card{box-shadow:var(--shadow-sm);border-color:#e6ebf2;transition:box-shadow .15s ease}.card:hover{box-shadow:var(--shadow-md)}.btn{transition:background .12s ease,box-shadow .12s ease,transform .04s ease}.btn-primary{box-shadow:0 1px 2px rgba(29,78,216,.25)}.btn-primary:hover:not(:disabled){background:#1a44bf}.btn-secondary:hover:not(:disabled){background:#f5f8ff}.field input,.field textarea,select{transition:border-color .12s ease,box-shadow .12s ease}.field input:focus,.field textarea:focus,select:focus{border-color:var(--focus);outline:none;box-shadow:0 0 0 3px rgba(37,99,235,.15)}.alert{border-left:4px solid transparent}.alert-info{border-left-color:var(--brand)}.alert-error{border-left-color:var(--err)}.alert-success{border-left-color:var(--ok)}.sidenav .list a{transition:background .12s ease,color .12s ease;font-weight:500;margin-bottom:2px}.sidenav .list a[aria-current=page]{background:#eaf0ff;color:var(--brand);font-weight:700;box-shadow:inset 3px 0 0 var(--brand)}.who .meta{font-weight:600;color:var(--ink)}table.data th{font-size:.72rem;text-transform:uppercase;letter-spacing:.04em;color:var(--muted);background:#f8fafc;border-bottom:2px solid var(--line)}table.data tbody tr{transition:background .1s ease}table.data tbody tr:hover{background:#f8fafc}table.data td code{font-size:.8rem;color:var(--muted)}.kpi .card{border-top:3px solid var(--brand)}.kpi .num{letter-spacing:-.02em}.modal{box-shadow:0 20px 50px rgba(15,23,42,.35);animation:modal-in .14s ease-out}@keyframes modal-in{0%{opacity:0;transform:translateY(8px) scale(.99)}to{opacity:1;transform:none}}.modal input{width:100%;padding:10px;border:1px solid var(--line);border-radius:8px;font:inherit;margin-top:4px}.modal label{display:block;font-weight:600;margin-top:12px}.modal .list li{padding:4px 0;border:none}.totp{margin-top:.5rem}.totp-steps{margin:0 0 1rem;padding-left:1.25rem;color:var(--muted);font-size:.92rem}.totp-steps li{margin:.25rem 0}.totp-scan{display:flex;gap:1.25rem;align-items:center;flex-wrap:wrap;margin-bottom:.5rem}.totp-scan .qr{background:#fff;padding:10px;border:1px solid var(--line);border-radius:10px;line-height:0;box-shadow:var(--shadow-sm)}.totp-manual{flex:1 1;min-width:200px}.totp-manual .secret code{display:inline-block;background:#f1f5f9;border:1px solid var(--line);border-radius:6px;padding:6px 10px;letter-spacing:.08em;font-size:.95rem;word-break:break-all}.recovery-codes{list-style:none;padding:0;margin:.75rem 0;display:grid;grid-template-columns:repeat(2,1fr);grid-gap:6px;gap:6px}.recovery-codes li{border:1px solid var(--line);border-radius:6px;background:#f8fafc;padding:6px 10px;text-align:center}.recovery-codes code{font-size:.95rem;letter-spacing:.06em}.policy-explainer h2{margin-top:0}.policy-explainer p{margin:.5rem 0;color:#334155}.flow-legend{margin-top:1rem;display:grid;grid-gap:.5rem;gap:.5rem}.flow-legend>div{font-size:.92rem;color:var(--muted)}.flow-badge{display:inline-block;border-radius:999px;padding:2px 10px;font-size:.78rem;font-weight:600;margin-right:6px;white-space:nowrap}.flow-nrr{background:#ecfeff;color:#155e75;border:1px solid #a5f3fc}.flow-rr{background:#eef2ff;color:#3730a3;border:1px solid #c7d2fe}.policy-form{max-width:640px}.policy-form select{font:inherit;width:100%;padding:10px;border:1px solid var(--line);border-radius:8px;background:#fff}.field-hint{margin:6px 0 0;font-size:.86rem;color:var(--muted)}.field-hint code{background:#f1f5f9;border-radius:4px;padding:1px 5px}.policy-table{margin-top:.5rem}.policy-table th{font-size:.78rem;text-transform:uppercase;letter-spacing:.04em;color:#64748b;background:#f8fafc}.policy-table td{vertical-align:middle}.policy-table td code{background:#f1f5f9;border-radius:4px;padding:2px 7px;font-size:.9rem}.policy-table tbody tr:hover{background:#f8fafc}.policy-table .row-actions{text-align:right;width:1%;white-space:nowrap}.subhead{margin:1.5rem 0 .5rem;font-size:1rem;color:#334155}.policy-table .btn-secondary{padding:6px 12px;font-size:.88rem}.action-choices{display:grid;grid-gap:10px;gap:10px;margin-top:.5rem}.action-choice{display:flex;gap:12px;align-items:flex-start;padding:14px 16px;border:1px solid var(--line);border-radius:10px;cursor:pointer;background:#fff;transition:border-color .12s ease,box-shadow .12s ease,background .12s ease}.action-choice:hover{border-color:#c7d2fe}.action-choice.selected{background:#f5f8ff}.action-choice input{margin-top:3px}.action-body{display:flex;flex-direction:column;gap:2px}.action-title{font-weight:600}.action-desc{color:var(--muted);font-size:.9rem}:root{--bg:#0b2545;--bg-2:#15396b;--surface:#fff;--ink:#0b2545;--muted:#5a6b7b;--mist:#9aa7b2;--brand:#15396b;--brand-deep:#0b2545;--brand-ink:#fff;--gold:#d4a537;--gold-deep:#b8862a;--line:#e3e8ef;--focus:#d4a537}body{background:#eef1f6;color:var(--ink);font-family:Segoe UI,Helvetica,Arial,system-ui,-apple-system,sans-serif}a{color:var(--brand)}h1,h2,h3{color:var(--brand-deep)}.header{background:linear-gradient(100deg,#0b2545,#15396b);border-bottom:3px solid var(--gold);box-shadow:0 1px 4px rgba(11,37,69,.2);padding:12px 22px;gap:14px;align-items:center}.brand-lockup{display:inline-flex;align-items:center;gap:12px;line-height:1}.brand-lockup svg{display:block;filter:drop-shadow(0 1px 2px rgba(0,0,0,.28))}.brand-words{display:flex;flex-direction:column;gap:3px}.brand-name{font-weight:800;font-size:1.16rem;letter-spacing:.05em;text-transform:uppercase;color:#fff}.brand-name-gold{color:var(--gold)}.brand-tag{font-size:.6rem;font-weight:600;letter-spacing:.2em;text-transform:uppercase;color:#9fb1c6}.brand-primary .brand-name{color:var(--brand-deep)}.brand-primary .brand-tag{color:var(--muted)}.header-context{margin-left:auto;color:#aebfd4;font-size:.78rem;letter-spacing:.14em;text-transform:uppercase;font-weight:600}.btn{border-radius:9px;font-weight:600;transition:background .12s ease,border-color .12s ease,box-shadow .12s ease,transform .04s ease}.btn-primary{background:linear-gradient(180deg,#15396b,#0b2545);color:#fff;border-color:#0b2545;box-shadow:0 1px 2px rgba(11,37,69,.28)}.btn-primary:hover:not(:disabled){background:linear-gradient(180deg,#1c4a86,#102f57)}.btn-secondary{background:#fff;color:var(--brand);border-color:#cdd7e4}.btn-secondary:hover:not(:disabled){border-color:var(--brand);background:#f5f8fc}.btn:active:not(:disabled){transform:translateY(1px)}:focus-visible{outline:3px solid var(--gold);outline-offset:2px}.card{border-color:#e3e8ef;box-shadow:0 1px 2px rgba(11,37,69,.05),0 1px 3px rgba(11,37,69,.06)}.role-badge{background:#fbf3df;color:#876214;border:1px solid #ecd9a4;text-transform:capitalize}.sidenav .list a[aria-current=page]{background:#eef3fb;color:var(--brand-deep);box-shadow:inset 3px 0 0 var(--gold);font-weight:600}.kpi .num{color:var(--brand)}.alert-info{background:#eef4fb;color:#15396b}.flow-badge.flow-nrr{background:#eafaff;color:#155e75;border:1px solid #b9ecf6}.flow-badge.flow-rr{background:#eef2fb;color:#1e3a73;border:1px solid #c7d4ee}.action-choice.selected{border-color:var(--brand);background:#f4f8fd;box-shadow:0 0 0 1px var(--brand) inset}.signin-hero{max-width:480px;margin:7vh auto}.signin-card{background:#fff;border:1px solid #e3e8ef;border-radius:16px;padding:38px 34px;text-align:center;box-shadow:0 12px 34px rgba(11,37,69,.12)}.signin-card .brand-lockup{justify-content:center;margin-bottom:14px}.signin-card h1{font-size:1.4rem;margin:6px 0}.signin-card .lead{color:var(--muted);margin:0 0 22px}.signin-card .btn-primary{width:100%;padding:12px 16px;font-size:1rem}.signin-msbtn{display:inline-flex;align-items:center;justify-content:center;gap:10px}.signin-card .lead{margin-bottom:4px}.provider-list{display:flex;flex-direction:column;gap:10px;margin-top:22px}.provider-btn{display:flex;align-items:center;gap:12px;width:100%;padding:11px 14px;border:1px solid #d6deea;border-radius:10px;background:#fff;color:#1f2a37;font-size:.95rem;font-weight:600;font-family:inherit;cursor:pointer;text-decoration:none;text-align:left;transition:border-color .12s ease,background .12s ease,box-shadow .12s ease}.provider-btn:hover:not(:disabled){border-color:var(--brand);background:#f6f9fd;box-shadow:0 1px 3px rgba(11,37,69,.08)}.provider-btn:disabled,.provider-btn[aria-disabled=true]{opacity:.6;cursor:default;background:#f7f9fc}.provider-icon{display:inline-flex;width:20px;justify-content:center;align-items:center}.provider-label{flex:1 1}.soon{font-size:.62rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;color:var(--muted);background:#eef1f6;border:1px solid #dde3ec;border-radius:999px;padding:2px 9px}.signin-hint{margin-top:20px;padding-top:16px;border-top:1px solid #eef1f6;font-size:.8rem;line-height:1.45;color:var(--muted)}.who .switch-app{display:inline-block;margin:6px 0;font-size:.85rem;font-weight:600;color:var(--brand);text-decoration:none}.who .switch-app:before{content:"↩ ";color:var(--gold)}.who .switch-app:hover{text-decoration:underline}.field label,.modal label,form label{color:var(--brand-deep);font-weight:600}.field input,.field textarea,.policy-form select,.tenant-picker select,input:not([type]),input[type=email],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=url],select,textarea{font:inherit;width:100%;box-sizing:border-box;padding:10px 12px;border:1px solid #d6deea;border-radius:9px;background-color:#fff;color:var(--ink);transition:border-color .12s ease,box-shadow .12s ease,background-color .12s ease}textarea{min-height:88px;resize:vertical}.policy-form select,.tenant-picker select,select{-webkit-appearance:none;-moz-appearance:none;appearance:none;cursor:pointer;padding-right:38px;background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 24 24' fill='none' stroke='%235A6B7B' stroke-width='3' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpolyline points='6 9 12 15 18 9'/%3E%3C/svg%3E");background-repeat:no-repeat;background-position:right 13px center;background-size:12px}input:hover:not(:disabled),select:hover:not(:disabled),textarea:hover:not(:disabled){border-color:#b3c0d4}input:focus,select:focus,textarea:focus{outline:none;border-color:var(--brand);box-shadow:0 0 0 3px rgba(212,165,55,.28)}input:disabled,select:disabled,textarea:disabled{background-color:#f3f5f9;color:var(--muted);cursor:not-allowed}input::placeholder,textarea::placeholder{color:var(--mist)}select option{color:var(--ink)}input[type=checkbox],input[type=radio]{width:auto;accent-color:var(--brand)}.tenant-picker select{padding:8px 34px 8px 12px}.tenant-picker label{color:var(--muted);font-size:.72rem;font-weight:600;letter-spacing:.08em;text-transform:uppercase}.sd-row{display:flex;align-items:center;gap:14px;flex-wrap:wrap}.sd-domain{font-weight:700;font-size:1.05rem;color:var(--brand-deep)}.sd-actions{margin-left:auto;display:flex;gap:8px}.sd-status{font-size:.72rem;font-weight:700;letter-spacing:.04em;text-transform:uppercase;border-radius:999px;padding:3px 10px;border:1px solid transparent}.sd-status-enabled{background:#ecfdf5;color:#047857;border-color:#a7f3d0}.sd-status-pending{background:#fff7e6;color:#8a6314;border-color:#f0dca8}.sd-status-drift{background:#fef2f2;color:#b42318;border-color:#fecaca}.sd-status-disabled{background:#f1f5f9;color:#64748b;border-color:#e2e8f0}.sd-validation{margin-top:14px;padding-top:12px;border-top:1px solid var(--line)}.sd-checks{display:flex;flex-wrap:wrap;gap:8px}.sd-check{font-size:.82rem;border-radius:8px;padding:4px 10px;border:1px solid #e2e8f0}.sd-check strong{text-transform:uppercase;letter-spacing:.03em;font-size:.72rem;margin-right:4px}.sd-check-ok{background:#ecfdf5;color:#047857;border-color:#a7f3d0}.sd-check-bad{background:#fef2f2;color:#b42318;border-color:#fecaca}.sd-issues{margin:10px 0 0;padding-left:18px;color:var(--err,#b42318);font-size:.86rem}.sd-gate{margin:12px 0 0;font-size:.9rem}.sd-gate-ok{color:#047857}.sd-gate-bad{color:#8a6314}.sd-records{margin-top:14px;display:flex;flex-direction:column;gap:14px}.sd-record{background:#f8fafc;border:1px solid var(--line);border-radius:10px;padding:14px}.sd-record-head{font-weight:600;color:var(--brand-deep);margin-bottom:8px}.sd-record-type{display:inline-block;font-size:.68rem;font-weight:700;letter-spacing:.06em;background:var(--brand);color:#fff;border-radius:5px;padding:1px 7px;margin-right:8px;vertical-align:middle}.sd-record label.meta{display:block;margin:8px 0 3px;font-size:.72rem;text-transform:uppercase;letter-spacing:.04em;color:var(--muted)}.sd-copy{display:flex;gap:8px;align-items:stretch}.sd-copy code{flex:1 1;background:#fff;border:1px solid var(--line);border-radius:8px;padding:8px 10px;font-size:.82rem;word-break:break-all;overflow-wrap:anywhere}.sd-copy-btn{padding:6px 12px;white-space:nowrap}.src-type{border:1px solid var(--line);padding:2px 10px}.src-setup{margin-top:14px;padding-top:12px;border-top:1px solid var(--line)}.src-steps{margin:8px 0 14px;padding-left:18px;line-height:1.55}.src-steps li{margin-bottom:6px}.src-secret{margin-top:12px;background:#fff7e6;border:1px solid #f0dca8;border-radius:10px;padding:12px}.src-secret-label{font-size:.82rem;font-weight:600;color:#8a6314;margin-bottom:8px}.msp-actions{display:flex;gap:6px;flex-wrap:wrap}.data td,.data th{vertical-align:middle}.ov-stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));grid-gap:12px;gap:12px}.ov-stat{background:#f8fafc;border:1px solid var(--line);border-radius:10px;padding:14px 16px}.ov-stat-num{font-size:1.5rem;font-weight:800;color:var(--brand-deep);letter-spacing:-.01em}.ov-stat-label{font-size:.78rem;color:var(--muted);margin-top:2px}.page-head{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}.page-head h1{margin:0}.header-identity{position:relative;margin-left:auto}.header-account{display:flex;align-items:center;gap:16px;background:transparent;border:0;cursor:pointer;padding:6px 8px;border-radius:8px;transition:background .12s ease}.header-account:hover{background:hsla(0,0%,100%,.08)}.header-account:focus-visible{outline:2px solid var(--gold);outline-offset:2px}.header-caret{color:#9fb1c6;font-size:.7rem;line-height:1}.header-menu{position:absolute;right:0;top:calc(100% + 8px);min-width:270px;background:#fff;border:1px solid var(--line);border-radius:12px;box-shadow:0 16px 38px rgba(15,23,42,.22);padding:12px;z-index:60;display:flex;flex-direction:column;gap:6px}.header-menu-section{padding-bottom:12px;margin-bottom:4px;border-bottom:1px solid var(--line)}.header-menu-label{display:block;font-size:.7rem;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--muted);margin-bottom:6px}.header-menu-section select{width:100%}.header-menu-item{display:block;width:100%;text-align:left;padding:9px 10px;border-radius:8px;background:transparent;border:0;cursor:pointer;font-size:.9rem;font-weight:500;color:var(--ink);text-decoration:none}.header-menu-item:hover{background:#f1f5f9}.header-menu-item.danger{color:#b42318}.header-menu-item.danger:hover{background:#fef2f2}.header-managing{display:inline-flex;align-items:baseline;gap:7px;background:hsla(0,0%,100%,.08);border:1px solid rgba(212,175,90,.45);border-radius:999px;padding:4px 12px}.header-managing-label{font-size:.6rem;font-weight:700;letter-spacing:.16em;text-transform:uppercase;color:var(--gold)}.header-managing-name{font-size:.86rem;font-weight:600;color:#fff}.header-user{display:inline-flex;flex-direction:column;align-items:flex-end;line-height:1.25}.header-user-email{font-size:.84rem;font-weight:600;color:#fff}.header-user-role{font-size:.62rem;font-weight:600;letter-spacing:.14em;text-transform:uppercase;color:#9fb1c6}.domain-sources{margin-top:18px;padding-top:14px;border-top:1px solid var(--line)}.domain-sources-head{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.domain-sources-head h3{margin:0;font-size:.98rem}.src-add{background:var(--surface-2,#f6f8fb);padding:14px}.src-add,.src-row{border:1px solid var(--line);border-radius:10px;margin:10px 0}.src-row{padding:12px 14px}.src-line{display:flex;align-items:center;gap:12px;flex-wrap:wrap}.src-name,.src-type{font-weight:600}.src-type{font-size:.78rem;letter-spacing:.04em;color:var(--muted);background:rgba(11,37,69,.06);border-radius:999px;padding:2px 9px}.src-steps{margin:8px 0 10px 18px}