:root{
  /* Derived from tokens.css — see the note in the site's stylesheet. */
  --ground:var(--ez-bg); --surface:var(--ez-surface); --surface-2:var(--ez-surface-2);
  --ink:var(--ez-ink); --ink-soft:var(--ez-ink-soft); --ink-faint:var(--ez-ink-faint);
  --border:var(--ez-border); --accent:var(--ez-accent);
  /* Two different jobs, one letter apart in the shared system, so keep the
     same names here: -text is the accent used AS text on a neutral ground,
     -ink is what sits ON an accent fill. They were both called -ink, which
     is how .btn ended up painting dark navy on the light-mode accent. */
  --accent-text:var(--ez-accent-text); --accent-ink:var(--ez-accent-ink);
  --accent-wash:var(--ez-accent-wash);
  --warn:var(--ez-warn); --warn-wash:var(--ez-warn-wash);
  --good:var(--ez-good); --crit:var(--ez-crit); --crit-ink:var(--ez-crit-ink);
  --shadow:var(--ez-shadow); --radius:var(--ez-r);
}


*{box-sizing:border-box}
body{margin:0;background:var(--ground);color:var(--ink);font-family:"IBM Plex Sans",system-ui,sans-serif;font-size:15px;line-height:1.55;-webkit-font-smoothing:antialiased}
code,.mono{font-family:"IBM Plex Mono",ui-monospace,monospace}
code{font-size:.82em;background:var(--surface-2);border:1px solid var(--border);border-radius:6px;padding:.06em .36em;color:var(--accent-text)}
h1,h2,h3{font-family:"Chivo",sans-serif;letter-spacing:-.01em;margin:0}
a{color:var(--accent-text)}

.app{display:grid;grid-template-columns:236px 1fr;min-height:100vh}
/* Sidebar */
aside{position:sticky;top:0;align-self:start;height:100vh;overflow-y:auto;background:var(--surface);border-right:1px solid var(--border);padding:20px 14px;display:flex;flex-direction:column;gap:4px}
.brand{display:flex;align-items:center;gap:10px;padding:4px 8px 16px}
.brand .logo{width:28px;height:28px;border-radius:8px;display:grid;place-items:center;overflow:hidden}
/* The mark brings its own ground and corners; a tinted tile behind it
   would just be a second frame. */
.brand .logo img{width:100%;height:100%;object-fit:contain;display:block}
.brand b{font-family:"Chivo";font-weight:900;font-size:1.02rem}
.brand span{display:block;font-family:"IBM Plex Mono";font-size:10px;color:var(--ink-faint);letter-spacing:.08em}
nav button{display:flex;align-items:center;gap:10px;width:100%;text-align:left;background:none;border:0;border-radius:9px;padding:9px 11px;color:var(--ink-soft);font:500 .9rem "IBM Plex Sans",sans-serif;cursor:pointer}
nav button .i{width:18px;text-align:center;flex:none}
.icon{width:18px;height:18px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round;display:block;flex:none}
nav button .icon{opacity:.85}
nav button.on .icon{opacity:1}
.h3ic{display:flex;align-items:center;gap:9px}
.h3ic .icon{width:19px;height:19px;color:var(--accent-text)}
.brand .logo .icon{color:var(--accent-text)}
nav button:hover{background:var(--surface-2);color:var(--ink)}
nav button.on{background:var(--accent-wash);color:var(--accent-text);font-weight:600}
nav .navlabel{font-family:"IBM Plex Mono";font-size:10px;letter-spacing:.1em;text-transform:uppercase;color:var(--ink-faint);padding:14px 11px 6px}

/* Main */
main{padding:0 0 80px}
.topbar{position:sticky;top:0;z-index:5;display:flex;align-items:center;gap:14px;padding:16px 30px;background:color-mix(in srgb,var(--ground) 82%,transparent);backdrop-filter:blur(8px);border-bottom:1px solid var(--border)}
.topbar h1{font-size:1.15rem;font-weight:700}
.save-ind{margin-left:auto;font-family:"IBM Plex Mono";font-size:12px;color:var(--ink-faint);display:flex;align-items:center;gap:7px}
.save-ind .d{width:8px;height:8px;border-radius:50%;background:var(--good)}
.save-ind.dirty .d{background:var(--warn)}
.tbtn{font-family:"IBM Plex Mono";font-size:12px;background:var(--surface);color:var(--ink-soft);border:1px solid var(--border);border-radius:999px;padding:6px 12px;cursor:pointer}
.tbtn:hover{color:var(--accent-text);border-color:var(--accent)}
#acctBtn.in{color:var(--accent-text);border-color:var(--accent);background:var(--accent-wash)}
.role-badge{font-family:"IBM Plex Mono";font-size:10px;letter-spacing:.08em;text-transform:uppercase;padding:3px 9px;border-radius:999px;border:1px solid var(--border);color:var(--ink-faint)}
.role-badge.r-admin{color:var(--good);border-color:var(--good)}
.role-badge.r-free{color:var(--accent-text);border-color:var(--accent)}
.role-badge.r-verifying{color:var(--warn);border-color:var(--warn)}
.role-badge.r-2fa-required{color:var(--warn);border-color:var(--warn)}
.skel{background:linear-gradient(90deg,var(--surface-2),var(--border),var(--surface-2));background-size:200% 100%;border-radius:10px;animation:skel 1.2s ease-in-out infinite}
@keyframes skel{0%{background-position:200% 0}100%{background-position:-200% 0}}
.gate-card{max-width:520px}
.acct-dot{display:inline-block;width:7px;height:7px;border-radius:50%;background:var(--good);margin-right:6px;vertical-align:middle}
.acct-menu{position:absolute;top:52px;right:78px;z-index:30;background:var(--surface);border:1px solid var(--border);border-radius:12px;box-shadow:var(--shadow);padding:10px;min-width:220px}
.acct-menu .who{font-size:.82rem;color:var(--ink-soft);padding:6px 8px 10px;border-bottom:1px solid var(--border);margin-bottom:8px;word-break:break-all}
.acct-menu .who b{color:var(--ink)}
.acct-menu button{display:block;width:100%;text-align:left;background:none;border:0;border-radius:8px;padding:9px 8px;color:var(--ink);font:500 .88rem "IBM Plex Sans",sans-serif;cursor:pointer}
.acct-menu button:hover{background:var(--surface-2);color:var(--accent-text)}
.cloud-badge{font-family:"IBM Plex Mono";font-size:11px;padding:3px 9px;border-radius:999px;border:1px solid var(--border)}
.cloud-badge.on{color:var(--good);border-color:var(--good)}
.cloud-badge.off{color:var(--ink-faint)}

.panel{padding:26px 30px;max-width:940px}
.panel-head{margin-bottom:18px}
.panel-head h2{font-size:1.5rem;font-weight:700}
.panel-head p{color:var(--ink-soft);margin:6px 0 0;max-width:70ch}

.card{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);padding:8px 20px;margin-bottom:18px}
.card.pad{padding:20px}
.group-title{font-family:"IBM Plex Mono";font-size:11px;letter-spacing:.09em;text-transform:uppercase;color:var(--ink-faint);margin:22px 0 8px}

/* Field rows */
.field{display:grid;grid-template-columns:1fr auto;gap:16px;align-items:center;padding:14px 0;border-bottom:1px solid var(--border)}
.field:last-child{border-bottom:0}
.field .lab{font-weight:500}
.field .lab code{font-weight:400}
.field .help{color:var(--ink-faint);font-size:.82rem;margin-top:2px;max-width:56ch}
.field .ctl{justify-self:end;display:flex;align-items:center;gap:10px}

input[type=number],input[type=text],select{font:500 .88rem "IBM Plex Mono",monospace;background:var(--surface-2);color:var(--ink);border:1px solid var(--border);border-radius:8px;padding:7px 10px}
input[type=number]{width:96px;text-align:right}
input[type=text]{min-width:180px}
select{cursor:pointer}
input:focus,select:focus,button:focus-visible{outline:2px solid var(--accent);outline-offset:1px}
.val-tag{font-family:"IBM Plex Mono";font-size:.8rem;color:var(--accent-text);min-width:44px;text-align:right}
input[type=range]{width:180px;accent-color:var(--accent)}

/* Switch */
.sw{position:relative;width:44px;height:25px;flex:none}
.sw input{position:absolute;opacity:0;width:100%;height:100%;margin:0;cursor:pointer}
.sw .track{position:absolute;inset:0;background:var(--border);border-radius:999px;transition:background .15s}
.sw .knob{position:absolute;top:3px;left:3px;width:19px;height:19px;background:#fff;border-radius:50%;transition:transform .15s;box-shadow:0 1px 2px rgba(0,0,0,.3)}
.sw input:checked + .track{background:var(--accent)}
.sw input:checked + .track + .knob{transform:translateX(19px)}

.btn{font:600 .85rem "IBM Plex Sans",sans-serif;background:var(--accent);color:var(--accent-ink);border:0;border-radius:9px;padding:9px 16px;cursor:pointer}
.btn:hover{filter:brightness(1.05)}
.btn.ghost{background:var(--surface-2);color:var(--ink);border:1px solid var(--border)}
.btn.danger{background:var(--crit);color:var(--crit-ink)}
.btn.sm{padding:6px 11px;font-size:.8rem}
.row{display:flex;gap:10px;flex-wrap:wrap;align-items:center}
.ref-why{white-space:pre-wrap;color:var(--ink-soft);font-size:.9rem;margin:8px 0}

/* Dashboard bits */
.tiles{display:grid;gap:12px;grid-template-columns:repeat(2,1fr)}
@media(min-width:720px){.tiles{grid-template-columns:repeat(4,1fr)}}
.tile{background:var(--surface-2);border:1px solid var(--border);border-radius:10px;padding:14px 16px}
.tile .v{font-family:"Chivo";font-weight:900;font-size:1.7rem;font-variant-numeric:tabular-nums;line-height:1.1}
.tile .l{font-family:"IBM Plex Mono";font-size:11px;letter-spacing:.05em;text-transform:uppercase;color:var(--ink-faint);margin-top:3px}
.subgrid{display:grid;gap:16px}
@media(min-width:720px){.subgrid.two{grid-template-columns:1fr 1fr}}
.bars{display:flex;flex-direction:column;gap:9px}
.bar-row{display:grid;grid-template-columns:96px 1fr 44px;align-items:center;gap:12px}
.bar-track{background:var(--surface-2);border:1px solid var(--border);border-radius:6px;height:12px;overflow:hidden}
.bar-fill{height:100%;background:linear-gradient(90deg,var(--accent),var(--accent-text))}
.bar-val{font-family:"IBM Plex Mono";font-size:.8rem;text-align:right;font-variant-numeric:tabular-nums;color:var(--ink-soft)}
.kv{display:flex;justify-content:space-between;padding:8px 0;border-bottom:1px solid var(--border);font-size:.9rem}
.kv:last-child{border-bottom:0}
.kv b{font-family:"IBM Plex Mono";font-weight:500;color:var(--ink)}
.pill{font-family:"IBM Plex Mono";font-size:11px;padding:3px 9px;border-radius:999px;border:1px solid var(--border);background:var(--surface-2);color:var(--ink-soft)}
.pill.ok{color:var(--good);border-color:var(--good);background:transparent}
.pill.warn{color:var(--warn);border-color:var(--warn);background:transparent}

/* Locks + raw table */
table{border-collapse:collapse;width:100%;font-size:.88rem}
th{font-family:"IBM Plex Mono";font-size:10px;letter-spacing:.06em;text-transform:uppercase;color:var(--ink-faint);text-align:left;padding:9px 10px;border-bottom:1px solid var(--border)}
td{padding:8px 10px;border-bottom:1px solid var(--border);vertical-align:middle}
td.note{max-width:36ch;white-space:pre-wrap;overflow-wrap:anywhere;vertical-align:top}
td input{width:74px}
.table-scroll{overflow-x:auto}
td input.wide{width:100%}
.callout{border-left:3px solid var(--warn);background:var(--warn-wash);border-radius:0 10px 10px 0;padding:12px 16px;font-size:.86rem;margin:6px 0 0}
.toast{position:fixed;bottom:22px;left:50%;transform:translateX(-50%);background:var(--ink);color:var(--ground);font-family:"IBM Plex Mono";font-size:.85rem;padding:10px 18px;border-radius:999px;box-shadow:var(--shadow);opacity:0;transition:opacity .2s,transform .2s;pointer-events:none;z-index:50}
.toast.show{opacity:1;transform:translateX(-50%) translateY(-4px)}
@media (prefers-reduced-motion:reduce){*{transition:none!important}}
@media(max-width:720px){.app{grid-template-columns:1fr}aside{position:static;height:auto;flex-direction:row;flex-wrap:wrap;overflow:visible}}

/* ---- Auth modal (admin/auth.js) ----
   Lives here, not injected from script: the site's CSP has no 'unsafe-inline',
   so a <style> element created in JS is blocked and the modal would render as
   unstyled plain text. */
.sbm-ov{position:fixed;inset:0;z-index:100;display:flex;align-items:flex-start;justify-content:center;padding:min(12vh,90px) 16px 24px;background:color-mix(in srgb,var(--ink) 45%,transparent);backdrop-filter:blur(4px);overflow-y:auto}
.sbm-card{width:100%;max-width:430px;background:var(--surface);color:var(--ink);border:1px solid var(--border);border-radius:16px;box-shadow:0 24px 64px rgba(16,32,30,.28);overflow:hidden;animation:sbm-in .16s ease-out}
@keyframes sbm-in{from{opacity:0;transform:translateY(-6px)}to{opacity:1;transform:none}}
@media (prefers-reduced-motion:reduce){.sbm-card{animation:none}}
.sbm-head{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:18px 22px;border-bottom:1px solid var(--border)}
.sbm-head h3{font-family:"Chivo",sans-serif;font-weight:700;font-size:1.12rem;margin:0}
.sbm-x{background:none;border:0;color:var(--ink-faint);font-size:19px;line-height:1;cursor:pointer;padding:4px 6px;border-radius:8px}
.sbm-x:hover{background:var(--surface-2);color:var(--ink)}
.sbm-body{padding:20px 22px 24px}
.sbm-sub{color:var(--ink-soft);font-size:.9rem;margin:0 0 4px;line-height:1.5}
.sbm-lab{display:block;font-family:"IBM Plex Mono",monospace;font-size:10px;letter-spacing:.1em;text-transform:uppercase;color:var(--ink-faint);margin:16px 0 6px}
.sbm-inwrap{position:relative;display:flex;align-items:center}
.sbm-ic{position:absolute;left:12px;width:16px;height:16px;stroke:var(--ink-faint);fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round;pointer-events:none}
.sbm-in{width:100%;padding:12px 12px 12px 38px;background:var(--surface-2);border:1px solid var(--border);border-radius:10px;color:var(--ink);font:400 .95rem "IBM Plex Sans",sans-serif}
.sbm-in:focus{outline:2px solid var(--accent);outline-offset:1px;border-color:var(--accent)}
.sbm-code{letter-spacing:.42em;text-align:center;padding-left:38px;font-family:"IBM Plex Mono",monospace;font-size:1.05rem}
.sbm-eye{position:absolute;right:8px;background:none;border:0;cursor:pointer;color:var(--ink-faint);padding:6px;border-radius:6px;display:flex}
.sbm-eye:hover{color:var(--ink)}
.sbm-eye .sbm-ic{position:static;stroke:currentColor}
.sbm-btn{width:100%;margin-top:20px;padding:13px;border:0;border-radius:11px;background:var(--accent);color:#04303d;font:700 1rem "IBM Plex Sans",sans-serif;cursor:pointer;display:flex;align-items:center;justify-content:center;gap:8px}
.sbm-btn:hover:not(:disabled){filter:brightness(.96)}
.sbm-btn:disabled{opacity:.55;cursor:default}
.sbm-btn .sbm-ic{position:static;stroke:currentColor;width:17px;height:17px}
.sbm-danger{background:var(--crit);color:var(--crit-ink)}
.sbm-link{margin-top:8px;color:var(--accent-text);background:none;border:0;cursor:pointer;font:600 .84rem "IBM Plex Sans",sans-serif;padding:2px 0}
.sbm-link:hover{text-decoration:underline}
.sbm-hint{color:var(--ink-faint);font-size:.8rem;margin:8px 0 0;line-height:1.5}
.sbm-secret{font-family:"IBM Plex Mono",monospace;font-size:.92rem;letter-spacing:.06em;word-break:break-all;background:var(--surface-2);border:1px solid var(--border);border-radius:9px;padding:11px 12px;user-select:all}
.sbm-err,.sbm-ok{margin-top:14px;padding:10px 12px;border-radius:9px;font-size:.85rem;line-height:1.45;display:none}
.sbm-err{background:color-mix(in srgb,var(--crit) 12%,transparent);border:1px solid color-mix(in srgb,var(--crit) 45%,transparent);color:var(--crit)}
.sbm-ok{background:color-mix(in srgb,var(--good) 12%,transparent);border:1px solid color-mix(in srgb,var(--good) 45%,transparent);color:var(--good)}
.sbm-err.show,.sbm-ok.show{display:block}
.sbm-hidden{display:none}

/* ---- Users tab ---- */
.sec-sub{color:var(--ink-soft);font-size:.86rem;margin:6px 0 0;line-height:1.5}
.userrow{border-bottom:1px solid var(--border)}
.userrow:last-child{border-bottom:0}
.userrow-head{display:flex;align-items:center;gap:14px;width:100%;padding:13px 2px;background:none;border:0;cursor:pointer;text-align:left;color:var(--ink);font:inherit}
.userrow-head:hover{background:var(--surface-2)}
.userrow-who{display:flex;flex-direction:column;gap:2px;min-width:0;flex:1}
.userrow-who b{font-weight:600;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.userrow-meta{font-family:"IBM Plex Mono",monospace;font-size:11px;color:var(--ink-faint)}
.userrow-tags{display:flex;align-items:center;gap:6px;flex-wrap:wrap;justify-content:flex-end;flex:none}
.utag{font-family:"IBM Plex Mono",monospace;font-size:10px;letter-spacing:.05em;text-transform:uppercase;padding:3px 8px;border-radius:999px;border:1px solid var(--border);color:var(--ink-faint);white-space:nowrap}
.utag-admin{color:var(--good);border-color:var(--good)}
.utag-on{color:var(--accent-text);border-color:var(--accent);background:var(--accent-wash)}
.utag-off{color:var(--crit);border-color:var(--crit)}
.utag-muted{color:var(--ink-faint)}
.userrow-body{padding:6px 2px 20px;border-top:1px dashed var(--border)}
.userrow-body .row{margin-top:10px;flex-wrap:wrap}
@media(max-width:640px){
  .userrow-head{flex-direction:column;align-items:flex-start;gap:8px}
  .userrow-tags{justify-content:flex-start}
}

/* ---- user drawer ----
   A slide-over rather than an inline accordion: the account being edited stays
   pinned in the header, so it can't scroll out of sight mid-change. */
.drawer-ov{position:fixed;inset:0;z-index:60;background:color-mix(in srgb,var(--ink) 42%,transparent);backdrop-filter:blur(3px);display:flex;justify-content:flex-end}
.drawer{width:min(620px,100%);height:100%;background:var(--ground);border-left:1px solid var(--border);box-shadow:-18px 0 48px rgba(0,0,0,.18);display:flex;flex-direction:column;animation:drawer-in .18s ease-out}
@keyframes drawer-in{from{transform:translateX(24px);opacity:.4}to{transform:none;opacity:1}}
@media (prefers-reduced-motion:reduce){.drawer{animation:none}}
/* Grid, not block: the close button sits between the identity and the tags in
   source order, so stacking put it on a row of its own halfway down the
   header. It belongs in the top-right corner, where a close button is. */
.drawer-head{position:sticky;top:0;z-index:2;background:var(--surface);border-bottom:1px solid var(--border);padding:18px 22px 0;
  display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:start;column-gap:12px}
.drawer-head>.drawer-id{grid-area:1/1}
.drawer-head>.sbm-x{grid-area:1/2;justify-self:end}
.drawer-head>.drawer-tags,.drawer-head>.drawer-tabs{grid-column:1/-1}
.drawer-id{display:flex;align-items:center;gap:12px}
.avatar-sm{width:40px;height:40px;border-radius:50%;background:var(--accent-wash);border:1px solid var(--accent);color:var(--accent-text);display:grid;place-items:center;font-weight:900;flex:none}
.drawer-idt{min-width:0;flex:1}
.drawer-idt b{display:block;font-size:1rem;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.drawer-idt span{display:block;font-family:"IBM Plex Mono",monospace;font-size:11px;color:var(--ink-faint);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.drawer-tags{display:flex;flex-wrap:wrap;gap:6px;margin:12px 0 0}
.drawer-tabs{display:flex;gap:2px;margin-top:14px}
.drawer-tabs button{background:none;border:0;border-bottom:2px solid transparent;padding:9px 13px;color:var(--ink-soft);font:600 .86rem "IBM Plex Sans",sans-serif;cursor:pointer}
.drawer-tabs button:hover{color:var(--ink)}
.drawer-tabs button.on{color:var(--accent-text);border-bottom-color:var(--accent)}
.drawer-body{flex:1;overflow-y:auto;padding:18px 22px 40px;display:flex;flex-direction:column;gap:14px}
.drawer-body .card{margin-bottom:0}
.drawer-body .tiles{margin:0}
.utag-warn{color:var(--warn);border-color:var(--warn)}
.callout-warn{border-left:3px solid var(--warn);background:var(--warn-wash)}
.danger-card{border-color:color-mix(in srgb,var(--crit) 45%,var(--border))}
.btn.danger{background:var(--crit);color:var(--crit-ink);border-color:var(--crit)}
.btn.danger:hover{filter:brightness(.94)}
@media(max-width:680px){
  .drawer{width:100%}
  .drawer-head{padding:14px 16px 0}
  .drawer-body{padding:14px 16px 32px}
}

/* Usage chart in the user drawer. Inline SVG — one series of bars, and the
   site's CSP blocks third-party scripts anyway. */
.chart-wrap{margin-top:10px}
.chart{width:100%;height:auto;display:block;overflow:visible}
.chart .bar{fill:var(--accent)}
.chart .bar.zero{fill:var(--border)}