:root {
    --kcm-primary: #14b8b0;
    --kcm-primary-dark: #0f9a93;
    --kcm-bg: #f4f6f8;
    --kcm-surface: #ffffff;
    --kcm-border: #e2e8f0;
    --kcm-text: #1b2733;
    --kcm-muted: #64748b;
    --kcm-sidebar: #16232e;
    --kcm-danger: #d64545;
    --kcm-warn: #c8811a;
    --kcm-ok: #14996b;
    --kcm-radius: 10px;
}

* { box-sizing: border-box; }

html, body {
    margin: 0;
    font-family: "Segoe UI", system-ui, -apple-system, sans-serif;
    background: var(--kcm-bg);
    color: var(--kcm-text);
}

h1 { font-size: 1.6rem; margin: 0 0 1.2rem; }
h2 { font-size: 1.1rem; margin: 0 0 0.8rem; }

.kcm-muted { color: var(--kcm-muted); }
.kcm-mono { font-family: "Cascadia Code", Consolas, monospace; font-size: 0.85em; word-break: break-all; }

/* ── Shell ─────────────────────────────────────────────── */
.kcm-shell { display: flex; min-height: 100vh; }

.kcm-nav {
    width: 240px;
    background: var(--kcm-sidebar);
    color: #cbd5e1;
    display: flex;
    flex-direction: column;
    padding: 20px 16px;
    flex-shrink: 0;
}

.kcm-brand { display: flex; align-items: center; gap: 12px; margin-bottom: 28px; }
.kcm-brand-mark {
    width: 40px; height: 40px; border-radius: 12px;
    background: var(--kcm-primary); color: #fff;
    display: flex; align-items: center; justify-content: center;
    font-weight: 700; font-size: 1.3rem;
}
.kcm-brand-title { font-weight: 700; color: #fff; }
.kcm-brand-sub { font-size: 0.78rem; color: #94a3b8; }

.kcm-nav-links { display: flex; flex-direction: column; gap: 4px; flex: 1; }
.kcm-nav-link {
    display: block; padding: 10px 14px; border-radius: 8px;
    color: #cbd5e1; text-decoration: none; font-size: 0.95rem;
}
.kcm-nav-link:hover { background: rgba(255, 255, 255, 0.06); color: #fff; }
.kcm-nav-link.active { background: var(--kcm-primary); color: #fff; }

.kcm-nav-foot { border-top: 1px solid rgba(255, 255, 255, 0.1); padding-top: 14px; margin-top: 14px; }
.kcm-user { font-weight: 600; color: #fff; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.kcm-role { font-size: 0.78rem; color: #94a3b8; margin-bottom: 10px; }
.kcm-logout {
    background: transparent; border: 1px solid rgba(255, 255, 255, 0.2);
    color: #cbd5e1; padding: 7px 12px; border-radius: 8px; cursor: pointer; width: 100%;
}
.kcm-logout:hover { background: rgba(255, 255, 255, 0.08); }

.kcm-main { flex: 1; overflow-x: auto; }
.kcm-content { max-width: 1100px; margin: 0 auto; padding: 32px; }

/* ── Cards, tiles ──────────────────────────────────────── */
.kcm-card {
    background: var(--kcm-surface);
    border: 1px solid var(--kcm-border);
    border-radius: var(--kcm-radius);
    padding: 22px;
    margin-bottom: 26px;
    box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04);
}

.kcm-tiles { display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 16px; margin-bottom: 30px; }
.kcm-tile {
    background: var(--kcm-surface); border: 1px solid var(--kcm-border);
    border-radius: var(--kcm-radius); padding: 18px;
}
.kcm-tile-num { font-size: 1.9rem; font-weight: 700; color: var(--kcm-primary); }
.kcm-tile-lbl { font-size: 0.82rem; color: var(--kcm-muted); margin-top: 4px; }
.kcm-tile-warn .kcm-tile-num { color: var(--kcm-warn); }

/* ── Forms ─────────────────────────────────────────────── */
.kcm-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 16px; margin-bottom: 16px; }
.kcm-label { display: block; font-size: 0.82rem; color: var(--kcm-muted); margin-bottom: 5px; }
.kcm-input {
    width: 100%; padding: 9px 11px; border: 1px solid var(--kcm-border);
    border-radius: 8px; font-size: 0.95rem; background: #fff; color: var(--kcm-text);
}
.kcm-input:focus { outline: none; border-color: var(--kcm-primary); box-shadow: 0 0 0 3px rgba(20, 184, 176, 0.15); }
.kcm-input-sm { padding: 5px 8px; font-size: 0.85rem; width: auto; }
.kcm-check { display: flex; align-items: center; padding-top: 22px; }
.kcm-check label { display: flex; align-items: center; gap: 8px; }

.kcm-btn {
    padding: 9px 18px; border-radius: 8px; border: 1px solid var(--kcm-border);
    background: #fff; color: var(--kcm-text); font-size: 0.92rem; cursor: pointer;
}
.kcm-btn:hover { background: #f1f5f9; }
.kcm-btn:disabled { opacity: 0.5; cursor: default; }
.kcm-btn-primary { background: var(--kcm-primary); border-color: var(--kcm-primary); color: #fff; }
.kcm-btn-primary:hover { background: var(--kcm-primary-dark); }
.kcm-btn-danger { color: var(--kcm-danger); border-color: #f0c0c0; }
.kcm-btn-danger:hover { background: #fceaea; }
.kcm-btn-sm { padding: 5px 10px; font-size: 0.82rem; }
.kcm-btn-block { width: 100%; margin-top: 6px; }

.kcm-token { margin-top: 16px; }
.kcm-token textarea { margin-top: 6px; }

/* ── Tables ────────────────────────────────────────────── */
.kcm-table { width: 100%; border-collapse: collapse; background: var(--kcm-surface); border: 1px solid var(--kcm-border); border-radius: var(--kcm-radius); overflow: hidden; }
.kcm-table th, .kcm-table td { padding: 11px 14px; text-align: left; font-size: 0.9rem; border-bottom: 1px solid var(--kcm-border); }
.kcm-table th { background: #f8fafc; color: var(--kcm-muted); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }
.kcm-table tr:last-child td { border-bottom: none; }
.kcm-row-actions { display: flex; gap: 8px; }

.kcm-badge { padding: 3px 10px; border-radius: 999px; font-size: 0.78rem; font-weight: 600; }
.kcm-badge-ok { background: #dcfce7; color: var(--kcm-ok); }
.kcm-badge-warn { background: #fef3c7; color: var(--kcm-warn); }
.kcm-badge-danger { background: #fee2e2; color: var(--kcm-danger); }

/* ── Confirmation modal ────────────────────────────────── */
.kcm-modal-backdrop {
    position: fixed; inset: 0; background: rgba(15, 23, 32, 0.55);
    display: flex; align-items: center; justify-content: center; z-index: 50;
}
.kcm-modal {
    background: var(--kcm-surface); border-radius: var(--kcm-radius);
    width: 440px; max-width: calc(100vw - 32px); padding: 26px;
    box-shadow: 0 24px 70px rgba(0, 0, 0, 0.35);
}
.kcm-modal h2 { margin-bottom: 10px; }
.kcm-modal-body { color: var(--kcm-text); font-size: 0.95rem; line-height: 1.5; margin-bottom: 22px; }
.kcm-modal-actions { display: flex; justify-content: flex-end; gap: 10px; }

/* ── Inline upload / file field ────────────────────────── */
.kcm-file { display: block; font-size: 0.9rem; }
.kcm-file input[type=file] { display: block; margin-top: 4px; font-size: 0.88rem; }
.kcm-hint { font-size: 0.82rem; color: var(--kcm-muted); margin-top: 6px; word-break: break-all; }

/* ── Login ─────────────────────────────────────────────── */
.kcm-bare { min-height: 100vh; display: flex; align-items: center; justify-content: center; background: var(--kcm-sidebar); }
.kcm-login-card {
    background: var(--kcm-surface); border-radius: 16px; padding: 40px;
    width: 360px; text-align: center; box-shadow: 0 20px 60px rgba(0, 0, 0, 0.4);
}
.kcm-login-mark { margin: 0 auto 18px; width: 56px; height: 56px; border-radius: 16px; font-size: 1.7rem; }
.kcm-login-card h1 { font-size: 1.3rem; margin-bottom: 4px; }
.kcm-form { text-align: left; margin-top: 22px; }
.kcm-form .kcm-input { margin-bottom: 14px; }
.kcm-error { background: #fee2e2; color: var(--kcm-danger); padding: 10px 12px; border-radius: 8px; font-size: 0.88rem; margin-top: 14px; }

/* ── MFA enrollment ────────────────────────────────────── */
.kcm-enroll-card { width: 420px; text-align: left; }
.kcm-enroll-card h1, .kcm-enroll-card .kcm-login-mark { text-align: center; }
.kcm-enroll-card > .kcm-muted { text-align: center; }
.kcm-enroll-hint { text-align: center; font-size: 0.9rem; color: var(--kcm-text); margin: 18px 0 10px; }
.kcm-qr {
    display: flex; justify-content: center; margin: 0 auto 14px; padding: 12px;
    background: #fff; border: 1px solid var(--kcm-border); border-radius: 12px; width: fit-content;
}
.kcm-qr svg { width: 200px; height: 200px; display: block; }
.kcm-secret {
    font-family: "Cascadia Code", Consolas, monospace; font-size: 1.1rem; letter-spacing: 2px;
    text-align: center; background: #f1f5f9; border: 1px dashed var(--kcm-border);
    border-radius: 8px; padding: 12px; margin: 8px 0 0; user-select: all; word-break: break-all;
}
.kcm-enroll-uri { margin-bottom: 8px; }
.kcm-enroll-uri summary { cursor: pointer; font-size: 0.82rem; text-align: center; }