/* Hoja de estilos del control plane. Sin fuentes ni recursos externos (CSP: style-src 'self'). */
:root {
    --bg: #f3f5f9;
    --surface: #ffffff;
    --text: #0f172a;
    --muted: #475569;
    --primary: #2563eb;
    --primary-text: #ffffff;
    --border: #cbd5e1;
    --danger-bg: #fef2f2;
    --danger-text: #991b1b;
    --focus: #1d4ed8;
    --radius: 10px;
    --font: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
    --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
}

* { box-sizing: border-box; }
body { margin: 0; background: var(--bg); color: var(--text); font: 16px/1.5 var(--font); }
h1 { font-size: 1.5rem; line-height: 1.25; margin: 0 0 .75rem; }
h2 { font-size: 1.125rem; margin: 1.5rem 0 .5rem; }
code, .secret { font-family: var(--mono); }

.skip-link { position: absolute; left: -9999px; }
.skip-link:focus { left: 1rem; top: 1rem; background: var(--surface); padding: .5rem 1rem; z-index: 1; }

.brand { margin: 0; font-weight: 700; }
.brand span { display: block; font-weight: 400; color: var(--muted); font-size: .875rem; }

.auth-header { padding: 1.5rem 2rem; }
.auth-main { display: flex; justify-content: center; padding: 1rem; }
.card { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 2rem; width: 100%; max-width: 32rem; }
.step { margin: 0 0 .25rem; color: var(--muted); font-size: .875rem; }
.hint { color: var(--muted); font-size: .875rem; margin-top: 1rem; }

form { display: grid; gap: .5rem; margin-top: 1rem; }
label { font-weight: 600; }
input { font: inherit; padding: .625rem .75rem; border: 1px solid var(--border); border-radius: 8px; width: 100%; }
input.code { font-family: var(--mono); font-size: 1.25rem; letter-spacing: .2em; }
input[aria-invalid="true"] { border-color: var(--danger-text); }
button { font: inherit; font-weight: 600; padding: .7rem 1rem; border: 0; border-radius: 8px; background: var(--primary); color: var(--primary-text); cursor: pointer; margin-top: .5rem; }
button.link { background: none; color: var(--primary); padding: 0; font-weight: 400; text-decoration: underline; }
:focus-visible { outline: 3px solid var(--focus); outline-offset: 2px; }

.alert { background: var(--danger-bg); color: var(--danger-text); border-radius: 8px; padding: .75rem 1rem; margin: 1rem 0 0; }
.enrol { display: flex; gap: 1.5rem; align-items: center; flex-wrap: wrap; margin-top: 1rem; }
.enrol img { border: 1px solid var(--border); border-radius: 8px; }
.secret { font-size: 1.125rem; letter-spacing: .1em; word-break: break-all; }
.codes { display: grid; grid-template-columns: 1fr 1fr; gap: 1rem; }
.logout { margin-top: 1.5rem; }

.topbar { display: flex; justify-content: space-between; align-items: center; padding: 1rem 2rem; background: var(--surface); border-bottom: 1px solid var(--border); }
.who { display: flex; gap: 1rem; align-items: center; }
.who .logout { margin: 0; }
.panel-main { padding: 2rem; }
.roles { padding-left: 1.25rem; }

@media (max-width: 30rem) {
    .codes { grid-template-columns: 1fr; }
    .card { padding: 1.25rem; }
}

/* Panel: menú lateral, tablas, filtros e insignias de estado (texto e icono de color, nunca solo color). */
.shell { display: grid; grid-template-columns: 14rem 1fr; min-height: calc(100vh - 4rem); }
.sidebar { background: var(--surface); border-right: 1px solid var(--border); padding: 1rem; }
.sidebar ul { list-style: none; margin: 0; padding: 0; display: grid; gap: .25rem; }
.sidebar a { display: block; padding: .5rem .75rem; border-radius: 8px; color: var(--text); text-decoration: none; }
.sidebar a[aria-current="page"] { background: #e0e7ff; color: #1e3a8a; font-weight: 600; }
.page-head { display: flex; justify-content: space-between; align-items: center; gap: 1rem; }
a.button { display: inline-block; font-weight: 600; padding: .6rem 1rem; border-radius: 8px; background: var(--primary); color: var(--primary-text); text-decoration: none; }
button.danger { background: #b91c1c; }
.filters { display: flex; flex-wrap: wrap; gap: .5rem 1rem; align-items: end; background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 1rem; margin: 1rem 0; }
.filters label { font-weight: 600; }
.filters input, .filters select { width: auto; min-width: 9rem; }
select, textarea { font: inherit; padding: .55rem .6rem; border: 1px solid var(--border); border-radius: 8px; }
textarea { width: 100%; }
fieldset { border: 1px solid var(--border); border-radius: 8px; padding: .75rem 1rem; }
label.check { font-weight: 400; display: flex; gap: .5rem; align-items: center; }
label.check input { width: auto; }
table { width: 100%; border-collapse: collapse; background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); font-variant-numeric: tabular-nums; }
th, td { text-align: left; padding: .6rem .75rem; border-bottom: 1px solid var(--border); vertical-align: top; }
th { font-size: .875rem; color: var(--muted); }
td code { font-size: .85rem; }
.details { white-space: pre-wrap; word-break: break-word; }
.nowrap { white-space: nowrap; }
.badge { display: inline-block; border-radius: 999px; padding: .1rem .6rem; font-size: .8rem; font-weight: 600; background: #e2e8f0; }
.badge::before { content: "● "; }
.badge-active, .badge-success { background: #dcfce7; color: #14532d; }
.badge-suspended, .badge-denied, .badge-locked { background: #fee2e2; color: #7f1d1d; }
.badge-mfa_enrollment_required, .badge-failure { background: #fef3c7; color: #78350f; }
.facts { display: grid; grid-template-columns: max-content 1fr; gap: .5rem 1.5rem; }
.facts dt { font-weight: 600; }
.facts dd { margin: 0; }
.notice { background: #ecfdf5; color: #14532d; border-radius: 8px; padding: .75rem 1rem; }
.empty { background: var(--surface); border: 1px dashed var(--border); border-radius: var(--radius); padding: 2rem; text-align: center; }
.pager { text-align: right; }
section { margin-top: 2rem; }
.visually-hidden { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }
@media (max-width: 48rem) { .shell { grid-template-columns: 1fr; } .sidebar { border-right: 0; border-bottom: 1px solid var(--border); } }

/* Campos de contraseña (password-fields.js): botón para ver lo escrito e indicador de fortaleza. */
.password-field { position: relative; }
.password-field input { padding-right: 3rem; }
.password-toggle { position: absolute; right: .25rem; top: 50%; transform: translateY(-50%); margin: 0; padding: .45rem; background: none; color: var(--muted); border-radius: 6px; line-height: 0; }
.password-toggle:hover, .password-toggle[aria-pressed="true"] { color: var(--primary); }
.password-toggle svg { width: 1.25rem; height: 1.25rem; fill: none; stroke: currentColor; stroke-width: 2; stroke-linecap: round; stroke-linejoin: round; }
.strength { display: flex; align-items: center; gap: .5rem; margin: .375rem 0 0; font-size: .875rem; color: var(--muted); }
.strength meter { flex: 0 0 6rem; height: .5rem; }
.strength[data-level="0"] { color: var(--danger-text); }