*{box-sizing:border-box}:root{--bg:#f4f6f8;--surface:#fff;--border:#dde3ea;--text:#1a2530;--muted:#64748b;--primary:#0f5da8;--primary-hover:#0b4a87;--danger:#b42318;--tier1:#dbeafe;--tier1-text:#1e40af;--tier2:#fef3c7;--tier2-text:#92400e;--tier3:#fee2e2;--tier3-text:#991b1b}body{background:var(--bg);color:var(--text);margin:0;font-family:Segoe UI,system-ui,-apple-system,sans-serif;font-size:15px}.centered{flex-direction:column;justify-content:center;align-items:center;gap:.5rem;min-height:100vh;display:flex}.login-card h1{margin-bottom:0}.login-card p{color:var(--muted);margin-top:.25rem}.app{min-height:100vh}header{background:var(--surface);border-bottom:1px solid var(--border);z-index:5;align-items:center;gap:1.5rem;padding:.6rem 1.25rem;display:flex;position:sticky;top:0}.brand{white-space:nowrap;font-size:1.05rem;font-weight:700}nav{gap:.25rem;display:flex}.tab{cursor:pointer;color:var(--muted);background:0 0;border:none;border-radius:6px;padding:.45rem .9rem;font-size:.95rem}.tab.active{background:var(--bg);color:var(--text);font-weight:600}.header-right{align-items:center;gap:.5rem;margin-left:auto;display:flex}.user-chip{align-items:center;gap:.35rem;font-size:.9rem;display:inline-flex}.role-badge{white-space:nowrap;border-radius:999px;padding:.1rem .45rem;font-size:.72rem;font-weight:600}.role-badge.tier1{background:var(--tier1);color:var(--tier1-text)}.role-badge.tier2{background:var(--tier2);color:var(--tier2-text)}.role-badge.tier3{background:var(--tier3);color:var(--tier3-text)}main{max-width:1100px;margin:0 auto;padding:1.25rem}.panel{background:var(--surface);border:1px solid var(--border);border-radius:10px;padding:1rem}.toolbar{align-items:center;gap:.6rem;margin-bottom:.9rem;display:flex}.search{flex:1}input,select,textarea{font:inherit;border:1px solid var(--border);color:var(--text);background:#fff;border-radius:6px;padding:.45rem .6rem}input:focus,select:focus,textarea:focus{outline:2px solid var(--primary);outline-offset:0;border-color:var(--primary)}button{font:inherit;cursor:pointer;border:1px solid #0000;border-radius:6px;padding:.45rem .9rem}button.primary{background:var(--primary);color:#fff}button.primary:hover:not(:disabled){background:var(--primary-hover)}button.primary.danger{background:var(--danger)}button.ghost{border-color:var(--border);color:var(--text);background:0 0}button.ghost:hover{background:var(--bg)}button.ghost.danger{color:var(--danger);border-color:var(--danger)}button.small{padding:.15rem .5rem;font-size:.85rem}button:disabled{opacity:.55;cursor:default}table{border-collapse:collapse;width:100%}th{text-align:left;text-transform:uppercase;letter-spacing:.03em;color:var(--muted);border-bottom:1px solid var(--border);padding:.4rem .6rem;font-size:.8rem}td{border-bottom:1px solid var(--border);padding:.55rem .6rem}tbody tr{cursor:pointer}tbody tr:hover{background:#f0f5fa}.denied-row{background:#fef2f2}.type-icon{margin-right:.3rem}.grant-count{color:var(--muted);margin-left:.3rem;font-size:.75rem}.muted{color:var(--muted)}.small{font-size:.85rem}.empty{color:var(--muted);text-align:center;padding:2rem 0}.banner.error{color:var(--danger);cursor:pointer;background:#fef2f2;border-bottom:1px solid #fecaca;padding:.5rem 1.25rem}.banner .dismiss{float:right}.error-text{color:var(--danger)}.overlay{z-index:10;background:#0f172a73;justify-content:center;align-items:flex-start;padding:4rem 1rem 2rem;display:flex;position:fixed;inset:0;overflow-y:auto}.dialog{background:var(--surface);border-radius:12px;width:100%;max-width:560px;padding:1.25rem;box-shadow:0 20px 50px #0f172a40}.dialog-header{justify-content:space-between;align-items:center;margin-bottom:.75rem;display:flex}.dialog-header h2{margin:0;font-size:1.15rem}.dialog form,.dialog fieldset{flex-direction:column;gap:.7rem;display:flex}.dialog label{flex-direction:column;gap:.25rem;font-size:.9rem;font-weight:600;display:flex}.dialog label.checkbox,label.inline{flex-direction:row;align-items:center;gap:.45rem;font-weight:400}fieldset{border:1px solid var(--border);border-radius:8px;padding:.75rem}legend{padding:0 .3rem;font-size:.9rem;font-weight:600}.dialog-actions{justify-content:flex-end;gap:.5rem;margin-top:.5rem;display:flex}.manage-actions{border-top:1px solid var(--border);padding-top:.75rem}.spacer{flex:1}.hint{color:var(--muted);margin:0;font-size:.82rem;font-weight:400}.required{color:var(--danger)}.detail-meta{align-items:center;gap:.4rem;margin-bottom:.5rem;display:flex}.pill{background:var(--bg);border:1px solid var(--border);border-radius:999px;padding:.1rem .5rem;font-size:.75rem}.pill.allowed{color:#047857;background:#ecfdf5;border-color:#a7f3d0}.pill.denied{color:var(--danger);background:#fef2f2;border-color:#fecaca}.notes{white-space:pre-wrap}.value-block{background:var(--bg);border:1px solid var(--border);border-radius:8px;margin:.75rem 0;padding:.75rem}.value-table td{border:none;padding:.3rem .5rem}.value-table tr{cursor:default}.value-table tr:hover{background:0 0}.field-label{white-space:nowrap;width:1%;font-weight:600}.mono{word-break:break-all;font-family:Consolas,Courier New,monospace}.mono pre{white-space:pre-wrap;max-height:160px;margin:0;overflow-y:auto}.grant-list{flex-direction:column;gap:.3rem;margin:0;padding:0;list-style:none;display:flex}.grant-list li{justify-content:space-between;align-items:center;display:flex}.grant-add{gap:.4rem;display:flex}.grant-add input{flex:1}