:root{--bg: #f4f5f7;--card: #ffffff;--border: #e2e4e8;--text: #1f2430;--muted: #6b7280;--primary: #2563eb;--primary-hover: #1d4ed8;--error: #dc2626;font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text)}button{cursor:pointer;border:none;border-radius:6px;padding:10px 16px;font-size:14px;font-weight:600;background:var(--primary);color:#fff}button:hover:not(:disabled){background:var(--primary-hover)}button:disabled{opacity:.6;cursor:not-allowed}.error{color:var(--error);font-size:14px}.login-wrapper{min-height:100vh;display:flex;align-items:center;justify-content:center}.login-card{background:var(--card);border:1px solid var(--border);border-radius:12px;padding:32px;width:320px;display:flex;flex-direction:column;gap:16px;box-shadow:0 6px 24px #0000000d}.login-card h1{margin:0 0 8px;font-size:20px}.login-card label{display:flex;flex-direction:column;gap:6px;font-size:13px;font-weight:600;color:var(--muted)}.login-card input{padding:10px 12px;border:1px solid var(--border);border-radius:6px;font-size:14px}.users-page{max-width:960px;margin:40px auto;padding:0 20px}.page-header{display:flex;align-items:center;justify-content:space-between;margin-bottom:24px}.page-header h1{margin:0;font-size:24px}.page-header-left{display:flex;align-items:center;gap:20px}.page-header-actions{display:flex;align-items:center;gap:10px}.nav{display:flex;gap:8px}.nav a{text-decoration:none;color:var(--muted);font-size:14px;font-weight:600;padding:6px 10px;border-radius:6px}.nav a:hover{background:#eef0f3}.nav a.active{color:var(--primary);background:#e8effe}.logout{background:#e5e7eb;color:var(--text)}.logout:hover:not(:disabled){background:#d1d5db}.filters{display:flex;gap:16px;margin-bottom:16px}.filters label{display:flex;flex-direction:column;gap:6px;font-size:.85rem;color:var(--muted, #6b7280)}.filters select{min-width:200px;padding:8px 10px;border:1px solid var(--border);border-radius:8px;background:var(--card);color:inherit}.user-table{width:100%;border-collapse:collapse;background:var(--card);border:1px solid var(--border);border-radius:10px;overflow:hidden}.user-table th,.user-table td{text-align:left;padding:12px 16px;border-bottom:1px solid var(--border);font-size:14px}.user-table th{background:#f9fafb;color:var(--muted);font-size:12px;text-transform:uppercase;letter-spacing:.04em}.user-table tr:last-child td{border-bottom:none}.user-table .masked{letter-spacing:2px;color:var(--muted)}.empty{color:var(--muted)}.hint{margin:4px 0 0;font-size:12px;color:var(--muted)}.notice{background:#ecfdf5;border:1px solid #a7f3d0;color:#047857;padding:10px 14px;border-radius:8px;font-size:14px;margin:0 0 16px}.secondary{background:#e5e7eb;color:var(--text)}.secondary:hover:not(:disabled){background:#d1d5db}.download-link{display:inline-block;border-radius:6px;padding:10px 16px;font-size:14px;font-weight:600;background:#e5e7eb;color:var(--text);text-decoration:none}.download-link:hover{background:#d1d5db}.danger{background:#fee2e2;color:var(--error)}.danger:hover:not(:disabled){background:#fecaca}.modal-overlay{position:fixed;top:0;right:0;bottom:0;left:0;background:#0f172a73;display:flex;align-items:center;justify-content:center;padding:20px}.modal-card{background:var(--card);border:1px solid var(--border);border-radius:12px;padding:28px;width:380px;display:flex;flex-direction:column;gap:16px;box-shadow:0 12px 40px #0000002e}.modal-card h2{margin:0;font-size:18px}.modal-subtitle{margin:0;font-size:14px;color:var(--muted)}.modal-card label{display:flex;flex-direction:column;gap:6px;font-size:13px;font-weight:600;color:var(--muted)}.modal-card input,.modal-card select{padding:10px 12px;border:1px solid var(--border);border-radius:6px;font-size:14px;width:100%;background:var(--card);color:var(--text)}.row-actions{display:flex;gap:8px;flex-wrap:wrap}.totp-qr{display:block;width:200px;height:200px;align-self:center;border:1px solid var(--border);border-radius:8px}.tag{display:inline-block;margin-left:8px;padding:1px 6px;border-radius:4px;background:#fef3c7;color:#92400e;font-size:11px;font-weight:700;letter-spacing:.03em;text-transform:uppercase}.checkbox-group{border:1px solid var(--border);border-radius:6px;padding:10px 12px;margin:0;display:flex;flex-direction:column;gap:8px}.checkbox-group legend{font-size:13px;font-weight:600;color:var(--muted);padding:0 4px}.checkbox-subgroup{display:flex;flex-direction:column;gap:8px;padding-left:4px}.checkbox-subgroup-title{font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.04em;color:var(--muted)}.checkbox-row{display:flex;flex-direction:row;align-items:center;gap:8px;font-size:14px;font-weight:500;color:var(--text)}.checkbox-subgroup .checkbox-row{padding-left:8px}.checkbox-row input{width:auto}.input-row{display:flex;gap:8px}.input-row input{flex:1}.modal-actions{display:flex;justify-content:flex-end;gap:10px}.page-header{flex-wrap:wrap;gap:16px}.page-header-left{min-width:0;flex:1 1 600px;flex-direction:column;align-items:flex-start;gap:12px}.nav,.page-header-actions{flex-wrap:wrap}.provisioning-page{max-width:1280px}.provisioning-filters{align-items:flex-end;flex-wrap:wrap}.provisioning-search{flex:1 1 280px;min-width:0}.provisioning-filters input{min-width:0;width:100%;padding:9px 10px;border:1px solid var(--border);border-radius:8px;background:var(--card);color:var(--text);font:inherit}.provisioning-table-scroll{margin-top:16px;overflow-x:auto}.provisioning-table-scroll table{min-width:760px}.provisioning-table-scroll .row-actions{align-items:center}.provisioning-id{font-family:ui-monospace,Consolas,monospace;overflow-wrap:anywhere}.provisioning-reason{overflow-wrap:anywhere;max-width:320px}.provisioning-status{display:inline-block;border-radius:20px;padding:4px 9px;font-size:12px;font-weight:600}.provisioning-status.active,.provisioning-status.success{background:#ecfdf5;color:#047857}.provisioning-status.revoked,.provisioning-status.rejected{background:#fee2e2;color:#b91c1c}.provisioning-dialog{width:min(500px,calc(100vw - 32px));max-height:calc(100dvh - 32px);overflow-y:auto;color:var(--text)}.provisioning-dialog:not([open]){display:none}.provisioning-dialog::backdrop{background:#0f172a73}.provisioning-form{display:flex;flex-direction:column;gap:16px}.provisioning-details{display:grid;grid-template-columns:100px minmax(0,1fr);gap:12px;margin:0;font-size:14px}.provisioning-details dt{color:var(--muted)}.provisioning-details dd{margin:0;overflow-wrap:anywhere}.provisioning-confirm{padding:12px;border:1px solid #fecaca;border-radius:8px;background:#fff7f7;font-size:14px}.provisioning-confirm p{margin:0 0 12px}.provisioning-download{overflow-wrap:anywhere}.provisioning-sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}@media (max-width: 600px){.provisioning-page{margin-top:20px;padding:0 12px}.provisioning-filters label,.provisioning-filters select{width:100%;min-width:0}.provisioning-dialog{padding:20px}}