:root{
  --navy:#0B2545; --navy-2:#13315C; --cyan:#13C4D8; --accent:#F4A300;
  --bg:#F5F7FA; --surface:#FFFFFF; --border:#E3E8EE; --text:#1A2533;
  --muted:#5A6B7C; --danger:#C0392B; --ok:#1E8449;
  --shadow:0 1px 2px rgba(11,37,69,.04), 0 1px 1px rgba(11,37,69,.06);
  --radius:6px;
}
*{box-sizing:border-box}
html,body{margin:0;padding:0;background:var(--bg);color:var(--text);
  font:14px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Arial,sans-serif;
  -webkit-font-smoothing:antialiased}
a{color:var(--navy-2);text-decoration:none}
a:hover{text-decoration:underline}
h1{font-size:20px;margin:0 0 16px;font-weight:600;color:var(--navy)}
h2{font-size:15px;margin:0 0 12px;font-weight:600;color:var(--navy);text-transform:uppercase;letter-spacing:.04em}
.layout{display:grid;grid-template-columns:240px 1fr;min-height:100vh}
.sidebar{background:var(--navy);color:#CFE0F2;display:flex;flex-direction:column}
.brand{display:flex;align-items:center;gap:10px;padding:18px 20px;border-bottom:1px solid rgba(255,255,255,.08)}
.brand img{width:36px;height:36px;flex:0 0 auto}
.brand-name{font-weight:600;color:#fff;font-size:15px;line-height:1.1}
.brand-sub{font-size:11px;color:#8FB0D6;letter-spacing:.05em;text-transform:uppercase}
.nav{padding:14px 0;flex:1}
.nav-section{padding:10px 20px 4px;font-size:11px;text-transform:uppercase;letter-spacing:.06em;color:#7493B8}
.nav a{display:block;padding:8px 20px;color:#CFE0F2;border-left:3px solid transparent}
.nav a:hover{background:rgba(255,255,255,.04);text-decoration:none}
.nav a.active{background:rgba(19,196,216,.10);border-left-color:var(--cyan);color:#fff}
.user-foot{padding:14px 20px;border-top:1px solid rgba(255,255,255,.08);font-size:12px;color:#8FB0D6}
.user-foot .who{color:#fff;font-weight:500}
.main{display:flex;flex-direction:column;min-width:0}
.topbar{height:54px;background:#fff;border-bottom:1px solid var(--border);
  display:flex;align-items:center;justify-content:space-between;padding:0 24px}
.crumbs{color:var(--muted);font-size:13px}
.crumbs strong{color:var(--text);font-weight:600}
.topbar-actions{display:flex;gap:8px;align-items:center}
.content{padding:24px;max-width:1200px;width:100%}
.card{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);margin-bottom:16px}
.card-head{padding:14px 18px;border-bottom:1px solid var(--border);display:flex;align-items:center;justify-content:space-between}
.card-head h2{margin:0}
.card-body{padding:18px}
.kpis{display:grid;grid-template-columns:repeat(4,1fr);gap:14px;margin-bottom:18px}
.kpi{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);padding:16px;box-shadow:var(--shadow)}
.kpi .label{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.06em}
.kpi .value{font-size:24px;font-weight:600;color:var(--navy);margin-top:6px}
.kpi .delta{font-size:12px;color:var(--ok);margin-top:2px}
table{width:100%;border-collapse:collapse;font-size:13px}
th{text-align:left;padding:10px 14px;background:#F8FAFC;border-bottom:1px solid var(--border);
  font-weight:600;color:var(--muted);text-transform:uppercase;font-size:11px;letter-spacing:.05em}
td{padding:11px 14px;border-bottom:1px solid var(--border);color:var(--text)}
tr:last-child td{border-bottom:none}
tr:hover td{background:#FAFCFE}
.table-scroll{max-height:min(70vh,640px);overflow:auto}
.table-scroll table{border-collapse:separate;border-spacing:0}
.table-scroll thead th{position:sticky;top:0;z-index:1;background:#F8FAFC}
.badge{display:inline-block;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:600;letter-spacing:.02em}
.badge.ok{background:#E6F4EC;color:var(--ok)}
.badge.warn{background:#FEF3D9;color:#9A6300}
.badge.bad{background:#FBE7E4;color:var(--danger)}
.badge.role{background:#E8EEF7;color:var(--navy-2)}
.btn{display:inline-flex;align-items:center;gap:6px;padding:7px 14px;border-radius:var(--radius);
  font-size:13px;font-weight:500;border:1px solid var(--border);background:#fff;color:var(--text);cursor:pointer}
.btn:hover{background:#F8FAFC}
.btn.primary{background:var(--navy);color:#fff;border-color:var(--navy)}
.btn.primary:hover{background:var(--navy-2)}
.btn.danger{background:#fff;color:var(--danger);border-color:#F0C8C2}
.btn.danger:hover{background:#FBE7E4}
.btn.small{padding:4px 10px;font-size:12px}
.row{display:flex;gap:10px;align-items:center}
.row.between{justify-content:space-between}
.input,select,textarea{width:100%;padding:8px 10px;border:1px solid var(--border);border-radius:var(--radius);
  font:inherit;background:#fff;color:var(--text)}
.input:focus,select:focus,textarea:focus{outline:none;border-color:var(--cyan);box-shadow:0 0 0 3px rgba(19,196,216,.15)}
label{display:block;font-size:12px;font-weight:500;color:var(--muted);margin-bottom:4px;text-transform:uppercase;letter-spacing:.04em}
.field{margin-bottom:14px}
.hint{font-size:12px;color:var(--muted);margin-top:4px;line-height:1.45}
.muted{color:var(--muted)}
.mono{font-family:Consolas,"Cascadia Mono",monospace;font-size:12px;color:var(--navy-2)}
hr{border:none;border-top:1px solid var(--border);margin:18px 0}

/* Login */
.login-wrap{min-height:100vh;display:flex;align-items:center;justify-content:center;
  background:linear-gradient(160deg,#0B2545 0%,#13315C 60%,#0E2A4F 100%);padding:24px;
  background-attachment:fixed}
.login-card{background:#fff;border-radius:10px;width:420px;padding:36px 40px 28px;
  box-shadow:0 20px 60px rgba(0,0,0,.28),0 2px 6px rgba(0,0,0,.10)}
.login-card--wide{width:100%;max-width:600px}
.login-brand{display:flex;flex-direction:column;align-items:center;gap:10px;margin-bottom:24px;text-align:center}
.login-brand img{display:block;margin:0 auto;height:128px;width:auto;max-width:90%}
.login-brand .portal-tag{font-size:10px;font-weight:700;color:var(--cyan);
  letter-spacing:.18em;text-transform:uppercase;
  padding:3px 12px;border:1px solid rgba(19,196,216,.35);border-radius:999px;
  background:rgba(19,196,216,.06)}
.login-card h1{font-size:20px;margin:0 0 8px;text-align:center;color:var(--navy)}
.login-card .sub{color:var(--muted);font-size:13px;margin-bottom:22px;text-align:center;line-height:1.55}
.login-foot{margin-top:22px;padding-top:18px;border-top:1px solid var(--border);
  font-size:12px;color:var(--muted);text-align:center;line-height:1.7}
.code-input{font:600 22px/1.2 Consolas,"Cascadia Mono",monospace;letter-spacing:8px;text-align:center}
.grid-2{display:grid;grid-template-columns:1fr 1fr;gap:14px}
@media (max-width:560px){.grid-2{grid-template-columns:1fr}.login-card{padding:28px 22px;width:100%}.login-brand img{height:108px}}
.alert{padding:10px 12px;border-radius:var(--radius);font-size:13px;margin-bottom:14px}
.alert.err{background:#FBE7E4;color:var(--danger);border:1px solid #F0C8C2}
.alert.info{background:#E8F4F6;color:#0E6A77;border:1px solid #B7E2E8}

/* Target catalog picker */
.target-picker{border:1px solid var(--border);border-radius:var(--radius);background:#fff;margin-top:6px}
.target-picker-head{display:flex;gap:8px;align-items:center;padding:10px 12px;border-bottom:1px solid var(--border);position:sticky;top:0;background:#fff;border-radius:var(--radius) var(--radius) 0 0;z-index:1;flex-wrap:wrap}
.target-picker-head .picker-search{flex:1;min-width:160px;padding:8px 10px;border:1px solid var(--border);border-radius:var(--radius);font:13px inherit;color:var(--text);background:#fff}
.target-picker-head .picker-search:focus{outline:0;border-color:var(--cyan);box-shadow:0 0 0 3px rgba(19,196,216,.15)}
.target-picker-head .picker-count{font-size:12px;color:var(--muted);white-space:nowrap}
.target-picker-head .picker-btn{font-size:12px;background:none;border:1px solid var(--border);border-radius:4px;padding:6px 10px;cursor:pointer;color:var(--navy-2)}
.target-picker-head .picker-btn:hover{background:#F4F8FE;border-color:var(--cyan)}
.target-picker-body{padding:12px;max-height:min(60vh,520px);overflow-y:auto}
.target-picker-section{margin-bottom:14px}
.target-picker-section:last-child{margin-bottom:0}
.target-picker-section-head{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.06em;font-weight:600;margin:0 0 8px;position:sticky;top:-12px;background:#fff;padding:4px 0}
.target-picker-empty{padding:24px;text-align:center;color:var(--muted);font-size:13px}
.target-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:8px}
.target-pick{display:flex;gap:10px;align-items:flex-start;padding:10px 12px;border:1px solid var(--border);
  border-radius:var(--radius);background:#fff;cursor:pointer;transition:border-color .12s,background .12s;text-transform:none;letter-spacing:0;font-weight:400;color:var(--text);margin-bottom:0}
.target-pick:hover{border-color:var(--cyan);background:#F8FCFD}
.target-pick input[type=checkbox]{margin-top:3px;flex:0 0 auto;width:16px;height:16px;accent-color:var(--navy)}
.target-pick:has(input:checked){border-color:var(--navy);background:#F4F8FE}
.target-pick .t-name{font-weight:600;color:var(--navy);font-size:13px;line-height:1.3}
.target-pick .t-cidr{font-size:12px;color:var(--navy-2);margin-top:1px}
.target-pick .t-desc{font-size:11px;color:var(--muted);margin-top:4px;line-height:1.4}
.target-pick.hidden{display:none}

/* Mobile / tablet responsive layout */
.menu-toggle{display:none;background:none;border:0;color:var(--navy);font-size:24px;cursor:pointer;padding:6px 10px;line-height:1;margin-right:4px}
.menu-toggle:hover{background:rgba(0,0,0,.05);border-radius:6px}
.scrim{display:none}
@media (max-width:900px){
  .layout{grid-template-columns:1fr}
  .sidebar{position:fixed;inset:0 auto 0 0;width:260px;z-index:50;transform:translateX(-100%);transition:transform .18s ease;box-shadow:0 0 24px rgba(0,0,0,.35)}
  .sidebar.open{transform:translateX(0)}
  .menu-toggle{display:inline-flex;align-items:center;justify-content:center}
  .topbar{padding:0 12px;position:sticky;top:0;z-index:20;justify-content:flex-start;gap:6px}
  .crumbs{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
  .content{padding:16px;max-width:100%}
  .kpis{grid-template-columns:repeat(2,1fr)}
  .grid-2{grid-template-columns:1fr}
  .card-head{flex-wrap:wrap;gap:8px}
  .scrim{position:fixed;inset:0;background:rgba(0,0,0,.4);z-index:40;display:none}
  .scrim.show{display:block}
  /* Tap targets — bigger nav links on touch */
  .nav a{padding:12px 20px;font-size:15px}
  /* Make wide tables horizontally scrollable instead of breaking layout */
  .card-body table, .content > table{display:block;overflow-x:auto;white-space:nowrap}
  .card-body table th, .card-body table td{white-space:nowrap}
  /* Prevent body scroll when drawer open */
  body.drawer-open{overflow:hidden}
}
@media (max-width:520px){
  .kpis{grid-template-columns:1fr}
  h1{font-size:18px}
  .btn{padding:8px 12px}
  .topbar{height:50px}
  .target-grid{grid-template-columns:1fr}
}
