:root {
  --ink: #1a1f26;
  --ink-soft: #3d4654;
  --muted: #6b7380;
  --paper: #f0f2f5;
  --card: #ffffff;
  --line: #d0d5dd;
  --accent: #1e4d8c;
  --accent-2: #2563a8;
  --accent-soft: #e8eef6;
  --danger: #a61b2b;
  --danger-soft: #f5e0e3;
  --ok: #1b6b3a;
  --ok-soft: #e0f0e6;
  --shadow: 0 12px 40px rgba(26, 31, 38, 0.08);
  --radius: 10px;
  --font: "IBM Plex Sans", system-ui, sans-serif;
  --mono: "IBM Plex Mono", ui-monospace, monospace;
}

* { box-sizing: border-box; }
html, body {
  margin: 0;
  min-height: 100%;
  font-family: var(--font);
  color: var(--ink);
  background: var(--paper);
}
.bg {
  position: fixed;
  inset: 0;
  z-index: -1;
  background:
    radial-gradient(800px 400px at 0% 0%, rgba(30, 77, 140, 0.08), transparent 55%),
    linear-gradient(180deg, #e8ebf0 0%, var(--paper) 40%, #e4e7ec 100%);
}
.hidden { display: none !important; }
.brand, .brand-sm {
  font-family: var(--mono);
  font-weight: 500;
  letter-spacing: -0.02em;
  color: var(--accent);
  margin: 0;
}
.brand { font-size: 1.25rem; }
.brand-sm { font-size: 0.85rem; margin-bottom: 0.2rem; }
h1, h2 {
  font-weight: 600;
  letter-spacing: -0.02em;
  margin: 0 0 0.5rem;
}
h1 { font-size: 1.75rem; }
h2 { font-size: 1.05rem; margin-top: 1.75rem; color: var(--ink-soft); }
.lede { color: var(--muted); margin: 0 0 1.25rem; line-height: 1.45; font-size: 0.95rem; }
.login-shell {
  min-height: 100vh;
  display: grid;
  place-items: center;
  padding: 1.5rem;
}
.login-card {
  width: min(420px, 100%);
  background: var(--card);
  border: 1px solid var(--line);
  border-radius: var(--radius);
  box-shadow: var(--shadow);
  padding: 1.75rem;
}
label {
  display: block;
  font-size: 0.85rem;
  font-weight: 500;
  color: var(--ink-soft);
  margin-bottom: 0.85rem;
}
input {
  display: block;
  width: 100%;
  margin-top: 0.35rem;
  padding: 0.55rem 0.7rem;
  border: 1px solid var(--line);
  border-radius: 6px;
  font: inherit;
  background: #fff;
}
input:focus-visible,
button:focus-visible,
a.btn-link:focus-visible {
  outline: 2px solid var(--accent);
  outline-offset: 2px;
}
button {
  font: inherit;
  font-weight: 500;
  padding: 0.55rem 1rem;
  border-radius: 6px;
  border: 1px solid var(--accent);
  background: var(--accent);
  color: #fff;
  cursor: pointer;
}
button:hover { background: var(--accent-2); }
button.ghost {
  background: transparent;
  color: var(--ink-soft);
  border-color: var(--line);
}
button.danger {
  background: var(--danger);
  border-color: var(--danger);
}
button.ok { background: var(--ok); border-color: var(--ok); }
.error { color: var(--danger); font-size: 0.9rem; min-height: 1.2em; }
.mono {
  display: block;
  flex: 1;
  font-family: var(--mono);
  font-size: 0.85rem;
  word-break: break-all;
  background: var(--accent-soft);
  padding: 0.75rem;
  border-radius: 6px;
  margin: 0;
}
.totp-secret-row {
  display: flex;
  gap: 0.5rem;
  align-items: flex-start;
  margin: 0.75rem 0;
}
.totp-secret-row .ghost { flex-shrink: 0; margin-top: 0.25rem; }
.totp-actions {
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
  align-items: center;
  margin-bottom: 1rem;
}
a.btn-link {
  display: inline-block;
  font: inherit;
  font-weight: 500;
  padding: 0.55rem 1rem;
  border-radius: 6px;
  border: 1px solid var(--accent);
  background: var(--accent-soft);
  color: var(--accent);
  text-decoration: none;
}
a.btn-link:hover { background: #dce6f2; }
.totp-setup { margin-top: 1.25rem; padding-top: 1.25rem; border-top: 1px solid var(--line); }
#login-form.hidden { display: none; }
.dash { max-width: 1100px; margin: 0 auto; padding: 1.5rem 1.25rem 3rem; }
.top {
  display: flex;
  justify-content: space-between;
  align-items: flex-start;
  gap: 1rem;
  margin-bottom: 0.5rem;
}
.actions { display: flex; gap: 0.5rem; }
.table-wrap {
  background: var(--card);
  border: 1px solid var(--line);
  border-radius: var(--radius);
  overflow: auto;
}
table { width: 100%; border-collapse: collapse; font-size: 0.9rem; }
th, td {
  text-align: left;
  padding: 0.65rem 0.85rem;
  border-bottom: 1px solid var(--line);
  vertical-align: middle;
}
th {
  font-size: 0.75rem;
  text-transform: uppercase;
  letter-spacing: 0.04em;
  color: var(--muted);
  background: #f7f8fa;
}
td.mono-cell { font-family: var(--mono); font-size: 0.78rem; }
.empty { padding: 1rem; color: var(--muted); margin: 0; }
.grid2 {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 1.25rem;
}
@media (max-width: 800px) {
  .grid2 { grid-template-columns: 1fr; }
  .top { flex-direction: column; }
}
.inline-form {
  display: flex;
  gap: 0.4rem;
  align-items: center;
  flex-wrap: wrap;
}
.inline-form input {
  width: 6.5rem;
  margin: 0;
  padding: 0.35rem 0.5rem;
}
.inline-form button { padding: 0.35rem 0.65rem; font-size: 0.85rem; }
.recovery-codes {
  margin-top: 1.5rem;
  padding-top: 1.25rem;
  border-top: 1px solid var(--line);
}
.recovery-codes h2 { margin-top: 0; color: var(--danger); }
.lede.warn { color: var(--danger); font-weight: 500; }
.recovery-list {
  list-style: none;
  margin: 0 0 1rem;
  padding: 0.75rem;
  background: var(--danger-soft);
  border: 1px solid #e8b4bc;
  border-radius: var(--radius);
  font-size: 0.85rem;
  line-height: 1.8;
}
.recovery-list li { padding: 0.1rem 0; }
.recovery-actions { margin-bottom: 1rem; }
.recovery-ack {
  display: flex;
  align-items: flex-start;
  gap: 0.5rem;
  font-size: 0.9rem;
  margin-bottom: 1rem;
}
.recovery-ack input { width: auto; margin-top: 0.2rem; }
#btn-recovery-continue { width: 100%; }