:root {
  --bg: #f6f7f9;
  --surface: #ffffff;
  --surface-2: #f1f2f5;
  --border: #dfe2e7;
  --text: #1a1d23;
  --text-dim: #5b6270;
  --text-faint: #8891a0;
  --accent: #2b5fb8;
  --accent-weak: #e7eefb;
  --allow: #1e7a4c;
  --allow-bg: #e7f5ee;
  --block: #b3261e;
  --block-bg: #fbe9e8;
  --approval: #9a6400;
  --approval-bg: #fbf1de;
  --focus: #2b5fb8;
  --mono: ui-monospace, "SF Mono", "Cascadia Code", Consolas, monospace;
  --sans: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, Roboto, Helvetica, Arial, sans-serif;
  --radius: 8px;
  --shadow: 0 1px 2px rgba(20, 24, 33, 0.06), 0 1px 1px rgba(20, 24, 33, 0.04);
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0f1115;
    --surface: #171a20;
    --surface-2: #1d2129;
    --border: #2a2f39;
    --text: #e7e9ed;
    --text-dim: #a7adb9;
    --text-faint: #6d7481;
    --accent: #6fa0e8;
    --accent-weak: #17233a;
    --allow: #59c98b;
    --allow-bg: #10281c;
    --block: #f2837c;
    --block-bg: #351615;
    --approval: #e3b04b;
    --approval-bg: #302107;
    --focus: #6fa0e8;
    --shadow: 0 1px 2px rgba(0, 0, 0, 0.4), 0 1px 1px rgba(0, 0, 0, 0.3);
  }
}

* { box-sizing: border-box; }
html, body { margin: 0; padding: 0; }
body {
  background: var(--bg);
  color: var(--text);
  font-family: var(--sans);
  font-size: 14px;
  line-height: 1.45;
  -webkit-font-smoothing: antialiased;
}
a { color: var(--accent); }
button, input { font-family: inherit; font-size: inherit; }
button:focus-visible, [tabindex]:focus-visible, input:focus-visible {
  outline: 2px solid var(--focus);
  outline-offset: 2px;
}

.wrap {
  max-width: 1240px;
  margin: 0 auto;
  padding: 0 20px 48px;
}

/* ---------- header ---------- */
header.top {
  position: sticky;
  top: 0;
  z-index: 10;
  background: var(--surface);
  border-bottom: 1px solid var(--border);
}
.top-inner {
  max-width: 1240px;
  margin: 0 auto;
  padding: 14px 20px;
  display: flex;
  align-items: center;
  gap: 14px;
}
.brand {
  display: flex;
  align-items: center;
  gap: 8px;
  font-weight: 650;
  letter-spacing: -0.01em;
  font-size: 15px;
}
.brand .mark {
  width: 22px; height: 22px;
  border-radius: 6px;
  background: var(--accent);
  display: inline-flex; align-items: center; justify-content: center;
  color: #fff; font-size: 12px; font-weight: 700;
}
.tenant {
  color: var(--text-dim);
  font-family: var(--mono);
  font-size: 13px;
}
.mode-badge {
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 0.05em;
  padding: 4px 9px;
  border-radius: 999px;
  border: 1px solid;
}
.mode-badge.audit { color: var(--approval); background: var(--approval-bg); border-color: transparent; }
.mode-badge.active { color: var(--allow); background: var(--allow-bg); border-color: transparent; }
.spacer { flex: 1; }
.conn-dot {
  width: 7px; height: 7px; border-radius: 50%;
  background: var(--text-faint);
  display: inline-block;
  margin-right: 6px;
}
.conn-dot.live { background: var(--allow); }
.conn-label { color: var(--text-faint); font-size: 12px; }

.btn {
  appearance: none;
  border: 1px solid var(--border);
  background: var(--surface);
  color: var(--text);
  padding: 7px 13px;
  border-radius: 7px;
  font-size: 13px;
  font-weight: 550;
  cursor: pointer;
}
.btn:hover { border-color: var(--text-faint); }
.btn.primary {
  background: var(--accent);
  border-color: var(--accent);
  color: #fff;
}
.btn.primary:hover { filter: brightness(1.06); }
.btn.danger {
  background: var(--block);
  border-color: var(--block);
  color: #fff;
}
.btn.small { padding: 4px 9px; font-size: 12px; border-radius: 6px; }
.btn:disabled { opacity: 0.5; cursor: default; }

.kill-banner {
  background: var(--block-bg);
  color: var(--block);
  font-size: 13px;
  font-weight: 600;
  text-align: center;
  padding: 7px;
  display: none;
}
.kill-banner.show { display: block; }

/* ---------- layout ---------- */
.grid {
  display: grid;
  grid-template-columns: 2fr 1fr;
  gap: 18px;
  margin-top: 20px;
}
.col { display: flex; flex-direction: column; gap: 18px; min-width: 0; }

.card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  box-shadow: var(--shadow);
}
.card > .card-head {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 13px 16px;
  border-bottom: 1px solid var(--border);
}
.card > .card-head h2 {
  font-size: 13px;
  font-weight: 650;
  margin: 0;
  letter-spacing: 0.01em;
}
.card > .card-head .hint { color: var(--text-faint); font-size: 12px; }
.card > .card-body { padding: 14px 16px; }
.card > .card-body.flush { padding: 0; }

/* ---------- top risks ---------- */
.totals {
  display: flex;
  gap: 22px;
  flex-wrap: wrap;
  margin-bottom: 14px;
}
.totals .stat .n {
  font-size: 24px;
  font-weight: 700;
  letter-spacing: -0.02em;
  font-variant-numeric: tabular-nums;
}
.totals .stat .l {
  color: var(--text-dim);
  font-size: 12px;
  margin-top: 2px;
}
.totals .stat.allow .n { color: var(--allow); }
.totals .stat.block .n { color: var(--block); }
.totals .stat.approval .n { color: var(--approval); }

.risk-list { display: flex; flex-direction: column; gap: 1px; }
.risk-row {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 8px 0;
  border-top: 1px solid var(--border);
}
.risk-row:first-child { border-top: none; }
.risk-row .name { flex: 1; font-size: 13px; }
.risk-row .bar {
  height: 6px;
  background: var(--surface-2);
  border-radius: 3px;
  flex-basis: 120px;
  overflow: hidden;
}
.risk-row .bar > i {
  display: block;
  height: 100%;
  background: var(--accent);
  border-radius: 3px;
}
.risk-row .count {
  width: 26px;
  text-align: right;
  font-variant-numeric: tabular-nums;
  font-weight: 600;
  font-size: 13px;
}
.risk-row.zero { opacity: 0.45; }

/* ---------- activity feed ---------- */
table.feed { width: 100%; border-collapse: collapse; font-size: 13px; }
table.feed th {
  text-align: left;
  font-size: 11px;
  text-transform: uppercase;
  letter-spacing: 0.04em;
  color: var(--text-faint);
  font-weight: 600;
  padding: 8px 16px;
  border-bottom: 1px solid var(--border);
  position: sticky;
  top: 0;
  background: var(--surface);
}
table.feed td {
  padding: 9px 16px;
  border-bottom: 1px solid var(--border);
  vertical-align: top;
}
table.feed tr:last-child td { border-bottom: none; }
table.feed tr.new { animation: fadein 0.5s ease-out; }
@keyframes fadein { from { background: var(--accent-weak); } to { background: transparent; } }
.feed-scroll { max-height: 480px; overflow-y: auto; }
.t-agent { font-weight: 600; }
.t-op { font-family: var(--mono); font-size: 12px; color: var(--text-dim); }
.t-time { color: var(--text-faint); font-variant-numeric: tabular-nums; white-space: nowrap; }
.t-reason { color: var(--text-dim); font-size: 12.5px; }
.t-policy { font-family: var(--mono); font-size: 11.5px; color: var(--text-faint); }
.empty { color: var(--text-faint); padding: 24px 16px; text-align: center; font-size: 13px; }

.pill {
  display: inline-block;
  padding: 2px 9px;
  border-radius: 999px;
  font-size: 11.5px;
  font-weight: 650;
  white-space: nowrap;
  border: 1px solid transparent;
}
.pill-allow { color: var(--allow); background: var(--allow-bg); }
.pill-block { color: var(--block); background: var(--block-bg); }
.pill-approval { color: var(--approval); background: var(--approval-bg); }
.pill-would-allow { color: var(--allow); background: transparent; border-color: var(--allow); }
.pill-would-block { color: var(--block); background: transparent; border-color: var(--block); }
.pill-would-approval { color: var(--approval); background: transparent; border-color: var(--approval); }

/* ---------- approvals ---------- */
.approval-row {
  padding: 11px 16px;
  border-top: 1px solid var(--border);
}
.approval-row:first-child { border-top: none; }
.approval-row .line1 { display: flex; justify-content: space-between; gap: 8px; align-items: baseline; }
.approval-row .op { font-family: var(--mono); font-size: 12.5px; }
.approval-row .agent { font-weight: 600; }
.approval-row .reason { color: var(--text-dim); font-size: 12.5px; margin: 4px 0 8px; }
.approval-row .waited { color: var(--text-faint); font-size: 11.5px; }
.approval-actions { display: flex; gap: 8px; }

/* ---------- agents ---------- */
.agent-row {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 10px 16px;
  border-top: 1px solid var(--border);
}
.agent-row:first-child { border-top: none; }
.agent-row .name { font-weight: 600; flex: 1; }
.agent-row .badge-killed {
  font-size: 10.5px;
  font-weight: 700;
  color: var(--block);
  background: var(--block-bg);
  border-radius: 5px;
  padding: 2px 6px;
}
.switch {
  position: relative;
  width: 34px; height: 20px;
  border-radius: 999px;
  background: var(--surface-2);
  border: 1px solid var(--border);
  cursor: pointer;
  flex-shrink: 0;
}
.switch > i {
  position: absolute;
  top: 2px; left: 2px;
  width: 14px; height: 14px;
  border-radius: 50%;
  background: var(--text-faint);
  transition: transform 0.15s ease, background 0.15s ease;
}
.switch.on { background: var(--block-bg); border-color: var(--block); }
.switch.on > i { transform: translateX(14px); background: var(--block); }

/* ---------- evidence ---------- */
.evidence-status { display: flex; align-items: center; gap: 8px; margin-bottom: 10px; font-size: 13px; }
.chip {
  font-size: 11px; font-weight: 700; padding: 2px 8px; border-radius: 999px;
}
.chip.ok { color: var(--allow); background: var(--allow-bg); }
.chip.bad { color: var(--block); background: var(--block-bg); }
pre.json {
  background: var(--surface-2);
  border: 1px solid var(--border);
  border-radius: 6px;
  padding: 12px;
  font-family: var(--mono);
  font-size: 11.5px;
  line-height: 1.5;
  max-height: 340px;
  overflow: auto;
  white-space: pre-wrap;
  word-break: break-word;
}
.evidence-actions { display: flex; gap: 8px; margin-top: 10px; }
.copy-ok { color: var(--allow); font-size: 12px; margin-left: 8px; display: none; }
.copy-ok.show { display: inline; }

footer.foot {
  text-align: center;
  color: var(--text-faint);
  font-size: 12px;
  padding: 28px 0 0;
}

@media (max-width: 900px) {
  .grid { grid-template-columns: 1fr; }
}

/* ---------- console additions ---------- */
[hidden] { display: none !important; }
.is-hidden { display: none; }
.user {
  color: var(--text-dim);
  font-size: 12.5px;
}
.user .role {
  font-family: var(--mono);
  font-size: 11px;
  color: var(--text-faint);
  margin-left: 6px;
}
.export-panel { margin-top: 12px; }

.login-wrap {
  min-height: 100vh;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 20px;
}
.login-card { width: 100%; max-width: 360px; }
.login-card .brand { margin-bottom: 4px; }
.login-card .sub { color: var(--text-dim); font-size: 13px; margin: 0 0 16px; }
.field { display: flex; flex-direction: column; gap: 5px; margin-bottom: 12px; }
.field label { font-size: 12px; font-weight: 600; color: var(--text-dim); }
.field input {
  padding: 8px 10px;
  border: 1px solid var(--border);
  border-radius: 7px;
  background: var(--surface);
  color: var(--text);
}
.login-card .btn { width: 100%; padding: 9px 13px; }
.login-error { color: var(--block); font-size: 12.5px; min-height: 18px; margin-bottom: 8px; }

.usage-notes { margin-top: 10px; font-size: 12px; color: var(--text-faint); display: flex; flex-direction: column; gap: 4px; }
.usage-notes .warn { color: var(--approval); }
