/* Locker dashboard. Self-hosted, no web fonts, no CDN. */
:root {
  --bg: #f6f7f9; --panel: #ffffff; --ink: #1b1f24; --muted: #5b6573; --line: #d9dee5;
  --brand: #1f4fd1; --brand-ink: #ffffff; --ok: #12703b; --ok-bg: #e3f4ea; --danger: #b3261e; --danger-bg: #fbe7e5;
  --warn-bg: #fff4d6; --radius: 10px;
  color-scheme: light dark;
}
@media (prefers-color-scheme: dark) {
  :root { --bg: #111418; --panel: #1a1f25; --ink: #e8ecf1; --muted: #9aa5b3; --line: #2c343d;
    --brand: #6f9bff; --brand-ink: #0b1020; --ok: #6fd69a; --ok-bg: #12301f; --danger: #ff8a80; --danger-bg: #3a1714; --warn-bg: #3a3014; }
}
[hidden] { display: none !important; }
* { box-sizing: border-box; }
html { font-size: 16px; }
body { margin: 0; background: var(--bg); color: var(--ink); line-height: 1.5;
  font-family: system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, sans-serif; }
a { color: var(--brand); }
code, .code, pre { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
.top { display: flex; align-items: center; gap: 1.5rem; padding: .75rem 1.5rem; background: var(--panel);
  border-bottom: 1px solid var(--line); flex-wrap: wrap; }
.brand { display: inline-flex; align-items: center; gap: .5rem; font-weight: 700; color: var(--ink); text-decoration: none; }
.nav { display: flex; gap: 1rem; flex-wrap: wrap; }
.nav a { color: var(--muted); text-decoration: none; padding: .25rem 0; border-bottom: 2px solid transparent; }
.nav a[aria-current="page"] { color: var(--ink); border-bottom-color: var(--brand); }
.top-actions { margin-left: auto; }
main { max-width: 960px; margin: 1.5rem auto; padding: 0 1rem; display: grid; grid-template-columns: minmax(0, 1fr); gap: 1.25rem; }
.panel { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 1.25rem 1.5rem; }
.panel.narrow { max-width: 640px; width: 100%; justify-self: center; }
h1 { font-size: 1.4rem; margin: 0 0 .75rem; }
h2 { font-size: 1.1rem; margin: 0 0 .5rem; }
.lede { color: var(--muted); margin-top: 0; }
.muted { color: var(--muted); }
.warn { background: var(--warn-bg); padding: .5rem .75rem; border-radius: 6px; }
.stack { display: grid; gap: .75rem; }
.row { display: flex; gap: .75rem; align-items: flex-end; flex-wrap: wrap; }
.row.spread { justify-content: space-between; align-items: center; }
.grow { flex: 1 1 14rem; }
.sep { margin-top: 1.25rem; padding-top: 1rem; border-top: 1px solid var(--line); }
label { display: grid; gap: .3rem; font-weight: 600; font-size: .95rem; }
label.check { display: flex; gap: .5rem; align-items: flex-start; font-weight: 400; }
input[type="text"], input[type="password"], select { font: inherit; padding: .55rem .7rem; border: 1px solid var(--line);
  border-radius: 8px; background: var(--bg); color: var(--ink); min-width: 0; }
input:focus-visible, select:focus-visible, .btn:focus-visible, a:focus-visible { outline: 3px solid var(--brand); outline-offset: 2px; }
.btn { font: inherit; font-weight: 600; padding: .55rem 1rem; border-radius: 8px; border: 1px solid var(--line);
  background: var(--panel); color: var(--ink); cursor: pointer; text-decoration: none; display: inline-block; }
.btn:hover { border-color: var(--brand); }
.btn.primary { background: var(--brand); color: var(--brand-ink); border-color: var(--brand); }
.btn.danger { color: var(--danger); border-color: var(--danger); }
.btn.ghost { background: transparent; }
.btn.small { padding: .3rem .65rem; font-size: .9rem; }
.steps { display: flex; gap: .5rem; list-style: none; padding: 0; margin: 0 0 1rem; flex-wrap: wrap; font-size: .85rem; color: var(--muted); }
.steps li { padding: .2rem .6rem; border: 1px solid var(--line); border-radius: 999px; }
.steps li[aria-current="step"] { color: var(--brand-ink); background: var(--brand); border-color: var(--brand); }
.facts { display: grid; grid-template-columns: max-content 1fr; gap: .45rem 1rem; margin: 1rem 0; }
.facts dt { color: var(--muted); font-weight: 600; }
.facts dd { margin: 0; overflow-wrap: anywhere; }
.agent { font-weight: 700; }
.tag { display: inline-block; font-size: .8rem; padding: .05rem .5rem; border-radius: 999px; background: var(--bg);
  border: 1px solid var(--line); color: var(--muted); }
.tag.ok { color: var(--ok); background: var(--ok-bg); border-color: transparent; }
.tag.danger { color: var(--danger); background: var(--danger-bg); border-color: transparent; }
blockquote.untrusted { margin: 0; padding: .4rem .75rem; border-left: 3px solid var(--line); color: var(--muted);
  font-style: italic; white-space: pre-wrap; }
blockquote.untrusted::before { content: "agent says: "; font-style: normal; font-weight: 600; }
.call { font-size: 1rem; font-weight: 700; }
pre.diff { margin: 0; padding: .5rem; background: var(--bg); border-radius: 6px; white-space: pre-wrap; }
.card-full.risky, .card.risky { border-color: var(--danger); border-width: 2px; }
.cards { list-style: none; padding: 0; margin: 0; display: grid; grid-template-columns: minmax(0, 1fr); gap: .75rem; }
.card { border: 1px solid var(--line); border-radius: var(--radius); padding: .9rem 1rem; display: grid; grid-template-columns: minmax(0, 1fr); gap: .35rem; }
.card code { overflow-wrap: anywhere; }
.card p { margin: 0; overflow-wrap: anywhere; } /* a step-up URL or a long id never widens the card (390 px) */
.card .btn { justify-self: start; }
.approve { display: grid; gap: .9rem; margin-top: 1rem; padding-top: 1rem; border-top: 1px solid var(--line); }
.approve > .btn { justify-self: start; }
.ttl { max-width: 100%; }
.ttl select { max-width: 100%; }
.groups { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: .5rem; padding-left: 0; list-style-position: inside;
  font-family: ui-monospace, Menlo, Consolas, monospace; font-size: 1.15rem; }
.code { font-size: 1.05rem; padding: .5rem .75rem; background: var(--bg); border: 1px dashed var(--line); border-radius: 6px;
  overflow-wrap: anywhere; user-select: all; }
.reveal { margin-top: 1rem; }
.table-wrap { overflow-x: auto; position: relative; }
table { border-collapse: collapse; width: 100%; font-size: .93rem; }
th, td { text-align: left; padding: .5rem .6rem; border-bottom: 1px solid var(--line); vertical-align: top; }
th { color: var(--muted); font-weight: 600; }
.sr { position: absolute; width: 1px; height: 1px; overflow: hidden; clip-path: inset(50%); white-space: nowrap; }
.proof { position: fixed; inset: auto 1rem 1rem auto; max-width: 28rem; background: var(--panel); border: 2px solid var(--brand);
  border-radius: var(--radius); padding: 1rem; display: grid; gap: .75rem; box-shadow: 0 8px 30px rgba(0, 0, 0, .25); }
.flash { position: fixed; left: 50%; transform: translateX(-50%); bottom: 1.5rem; max-width: min(40rem, 92vw);
  padding: .7rem 1rem; border-radius: 8px; background: var(--danger-bg); color: var(--danger); font-weight: 600; }
.flash.ok { background: var(--ok-bg); color: var(--ok); }
.foot { max-width: 960px; margin: 2rem auto; padding: 0 1rem; color: var(--muted); font-size: .85rem; }
@media (max-width: 600px) {
  .facts { grid-template-columns: 1fr; }
  .facts dt { margin-top: .4rem; }
  .groups { grid-template-columns: repeat(2, minmax(0, 1fr)); }
  .top { padding: .75rem 1rem; }
}
@media print {
  .top, .foot, .row, form, .flash { display: none !important; }
}
/* service grants (C2 v2): their own section, above the rest, warning style */
.panel.service-grants { border: 2px solid var(--danger); margin-bottom: 1.25rem; }
.panel.service-grants h1 { display: flex; align-items: center; gap: .6rem; }
tr.service td { vertical-align: top; }
/* credential instances (v1.2): name + service first, the lcr_ id small and secondary */
.cred .cred-name { font-weight: 600; }
.cred-id { font-size: .75rem; color: var(--muted); }
.cred.unknown .cred-name { color: var(--danger); }
h2.svc { margin: 1.25rem 0 .5rem; font-size: 1.05rem; }
ul.fields { list-style: none; padding: 0; display: grid; gap: .75rem; }
ul.fields label .tag { justify-self: start; width: max-content; }
/* pairing card: widening the allow-list is shown in red (lockred V2-02) */
.danger-text { color: var(--danger); }
.danger-block { background: var(--danger-bg); color: var(--danger); border: 2px solid var(--danger); padding: .6rem .8rem; border-radius: 6px; }
.danger-block[hidden] { display: none; }
.run-list code { overflow-wrap: anywhere; word-break: break-all; }
fieldset.allow { border: 1px solid var(--line); border-radius: 8px; padding: .75rem 1rem; }
.tpl-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(15rem, 1fr)); gap: .75rem; list-style: none; padding: 0; }

/* federated pairing: the one command */
pre.cmd { margin: .5rem 0; padding: .6rem .75rem; background: var(--bg); border-radius: 6px; white-space: pre-wrap; word-break: break-all; }
.btn.small { padding: .25rem .6rem; font-size: .85rem; }
.audit-table td { overflow-wrap: anywhere; }