:root {
  --bg: #f6f7f9;
  --surface: #ffffff;
  --text: #1c1f24;
  --muted: #5d6573;
  --border: #d9dde3;
  --accent: #0b6f8f;
  --accent-text: #ffffff;
  --ok-bg: #e5f4ea;   --ok: #1c6b37;
  --err-bg: #fbe9e9;  --err: #a12a2a;
  color-scheme: light dark;
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #14171c;
    --surface: #1d2128;
    --text: #e6e8eb;
    --muted: #9aa3b0;
    --border: #2f3540;
    --accent: #5fd3f3;
    --accent-text: #0d1117;
    --ok-bg: #16301f;   --ok: #7fd49a;
    --err-bg: #3a1c1c;  --err: #f0a0a0;
  }
}

* { box-sizing: border-box; }
body {
  margin: 0;
  background: var(--bg);
  color: var(--text);
  font: 16px/1.5 system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
}
.top {
  display: flex; align-items: center; justify-content: space-between; gap: 1rem;
  padding: 0.75rem 1rem;
  background: var(--surface);
  border-bottom: 1px solid var(--border);
}
.brand { display: inline-flex; align-items: center; gap: 0.5rem; font-weight: 700; color: var(--text); text-decoration: none; }
.brand img { border-radius: 6px; }
main { margin: 2rem auto; padding: 0 1rem; }
main.narrow { max-width: 26rem; }
main.wide { max-width: 52rem; }
h1 { font-size: 1.6rem; margin: 0 0 1rem; }
h2 { font-size: 1.15rem; margin: 0 0 0.5rem; }

.card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 1.25rem;
  margin-bottom: 1.25rem;
}
label { display: block; font-weight: 600; margin: 0.75rem 0 0.25rem; }
input:not([type=checkbox]) {
  width: 100%;
  padding: 0.55rem 0.7rem;
  font: inherit;
  color: var(--text);
  background: var(--bg);
  border: 1px solid var(--border);
  border-radius: 6px;
}
button {
  margin-top: 1rem;
  padding: 0.55rem 1.1rem;
  font: inherit; font-weight: 600;
  color: var(--accent-text);
  background: var(--accent);
  border: 0; border-radius: 6px;
  cursor: pointer;
}
button.link { background: none; color: var(--accent); padding: 0; margin: 0 0 0 0.75rem; font-weight: 500; }
form.inline { display: flex; align-items: center; }
form.row { display: flex; gap: 0.5rem; align-items: center; }
form.row button { margin-top: 0; white-space: nowrap; }

.muted { color: var(--muted); }
.good { color: var(--ok); font-weight: 600; }
.bad { color: var(--err); font-weight: 600; }
code { font-size: 0.875em; word-break: break-all; }
.alert { padding: 0.65rem 0.85rem; border-radius: 6px; margin: 0.75rem 0; }
.alert.ok { background: var(--ok-bg); color: var(--ok); }
.alert.error { background: var(--err-bg); color: var(--err); }
.alert ul { margin: 0.5rem 0 0; }

dl.kv { display: grid; grid-template-columns: max-content 1fr; gap: 0.35rem 1rem; margin: 0.75rem 0 0; }
dl.kv dt { font-weight: 600; }
dl.kv dd { margin: 0; }

ul.tree { list-style: none; margin: 0; padding-left: 1.4rem; }
form > ul.tree { padding-left: 0; }
ul.tree label { display: flex; align-items: center; gap: 0.5rem; font-weight: 400; margin: 0.2rem 0; }
ul.tree .note { display: none; font-size: 0.8rem; color: var(--muted); }
ul.tree label.inherited .note { display: inline; }
ul.tree label.inherited .ou-name { color: var(--muted); }

@media (max-width: 34rem) {
  dl.kv { grid-template-columns: 1fr; }
  dl.kv dd { margin-bottom: 0.5rem; }
  form.row { flex-direction: column; align-items: stretch; }
}

/* --- forced resets, tables, password policy --- */
:root { --warn-bg: #fdf3dc; --warn: #8a5a00; --danger: #b3261e; }
@media (prefers-color-scheme: dark) { :root { --warn-bg: #3a2e12; --warn: #f0c870; --danger: #e5675f; } }

textarea, select {
  width: 100%;
  padding: 0.55rem 0.7rem;
  font: inherit;
  color: var(--text);
  background: var(--bg);
  border: 1px solid var(--border);
  border-radius: 6px;
}
textarea { resize: vertical; }
button.secondary { background: none; color: var(--accent); border: 1px solid var(--accent); }
button.danger { background: var(--danger); color: #fff; }
.pick { display: grid; grid-template-columns: repeat(auto-fit, minmax(14rem, 1fr)); gap: 1.25rem; }
.pick form { display: flex; flex-direction: column; }
.pick form button { align-self: flex-start; }
fieldset { border: 1px solid var(--border); border-radius: 6px; margin: 1.25rem 0 0; padding: 0.5rem 1rem 0.75rem; }
legend { font-weight: 600; padding: 0 0.25rem; }
label.choice { display: flex; gap: 0.6rem; align-items: flex-start; font-weight: 400; }
label.choice input { margin-top: 0.3rem; }

.scroll { overflow-x: auto; }
table { width: 100%; border-collapse: collapse; font-size: 0.925rem; }
th, td { text-align: left; padding: 0.45rem 0.6rem; border-bottom: 1px solid var(--border); vertical-align: top; }
th { font-weight: 600; color: var(--muted); }
tr.dim td { color: var(--muted); }
td.nowrap { white-space: nowrap; }
code.secret { font-size: 1rem; padding: 0.15rem 0.35rem; background: var(--bg); border: 1px solid var(--border); border-radius: 4px; user-select: all; }

.summary { display: flex; flex-wrap: wrap; gap: 0.5rem; }
.pill { padding: 0.2rem 0.65rem; border-radius: 999px; background: var(--bg); border: 1px solid var(--border); font-size: 0.9rem; }
.pill.ok { background: var(--ok-bg); color: var(--ok); border-color: transparent; }
.pill.warn { background: var(--warn-bg); color: var(--warn); border-color: transparent; }
.pill.bad { background: var(--err-bg); color: var(--err); border-color: transparent; }
.warn-text { color: var(--warn); font-weight: 600; }

.policy { margin-top: 1rem; font-size: 0.925rem; color: var(--muted); }
.policy p { margin: 0; }
.policy ul { margin: 0.25rem 0 0; padding-left: 1.2rem; }