/* Client mail admin. Visual language follows the Bulwark webmail the same
   clients use: its colour tokens (light and dark), its radii, its quiet borders.
   A brand stylesheet (brands.json "css") loads after this and may override the
   light tokens and fonts; dark mode stays on these tokens, as in the webmail.
   No inline styles anywhere: the CSP forbids them. */

:root{
  --bg:#ffffff;--fg:#0f172a;--muted:#f1f5f9;--muted-fg:#64748b;
  --card:#ffffff;--border:#e2e8f0;--input:#e2e8f0;--ring:#94a3b8;
  --primary:#3b82f6;--primary-fg:#ffffff;--accent:#dbeafe;--accent-fg:#1e40af;
  --sidebar:#f8fafc;--sidebar-accent:#f1f5f9;
  --danger:#ef4444;--danger-bg:#fef2f2;--ok:#16a34a;--ok-bg:#f0fdf4;--warn:#b45309;--warn-bg:#fffbeb;
  --shadow:0 1px 2px rgba(15,23,42,.04),0 8px 24px -12px rgba(15,23,42,.12);
  --radius:12px;--radius-sm:8px;
  --font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
  --font-display:var(--font);
  --login-panel:#0f172a;--login-panel-fg:#f8fafc;
  color-scheme:light;
}
@media (prefers-color-scheme:dark){
  :root{
    --bg:#0a0a0a;--fg:#fafafa;--muted:#262626;--muted-fg:#a3a3a3;
    --card:#141414;--border:rgba(128,128,128,.3);--input:#262626;--ring:#d4d4d4;
    --primary:#fafafa;--primary-fg:#171717;--accent:#1e3a8a;--accent-fg:#dbeafe;
    --sidebar:#0a0a0a;--sidebar-accent:#1a1a1a;
    --danger:#f87171;--danger-bg:rgba(239,68,68,.12);--ok:#4ade80;--ok-bg:rgba(22,163,74,.14);
    --warn:#fbbf24;--warn-bg:rgba(202,138,4,.14);
    --shadow:0 1px 2px rgba(0,0,0,.4),0 8px 24px -12px rgba(0,0,0,.6);
    --login-panel:#141414;--login-panel-fg:#fafafa;
    color-scheme:dark;
  }
}

*{box-sizing:border-box}
html,body{margin:0;height:100%}
body{font:14px/1.55 var(--font);background:var(--bg);color:var(--fg);-webkit-font-smoothing:antialiased}
h1,h2,h3{font-family:var(--font-display);line-height:1.25;margin:0}
h1{font-size:1.5rem;font-weight:700}
h2{font-size:1.05rem;font-weight:600}
h3{font-size:.95rem;font-weight:600}
a{color:inherit}
code{font:12.5px/1.4 "SF Mono",Monaco,Menlo,Consolas,monospace;background:var(--muted);padding:.1rem .35rem;border-radius:6px;word-break:break-all}
.dim{color:var(--muted-fg)}
.small{font-size:12.5px}
.sr-only{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}

/* ---- controls ------------------------------------------------------------ */
.btn{display:inline-flex;align-items:center;justify-content:center;gap:.4rem;height:34px;padding:0 .9rem;
  border:1px solid var(--border);border-radius:var(--radius-sm);background:var(--card);color:var(--fg);
  font:500 13px/1 var(--font);cursor:pointer;text-decoration:none;white-space:nowrap;
  transition:background .15s,border-color .15s,opacity .15s,transform .05s}
.btn:hover{background:var(--muted)}
.btn:active{transform:translateY(1px)}
.btn:focus-visible,.input:focus-visible,select:focus-visible{outline:2px solid var(--ring);outline-offset:2px}
.btn-primary{background:var(--primary);color:var(--primary-fg);border-color:transparent}
.btn-primary:hover{background:var(--primary);opacity:.9}
.btn-ghost{background:transparent;border-color:transparent}
.btn-danger{color:var(--danger)}
.btn-danger:hover{background:var(--danger-bg);border-color:transparent}
.btn-sm{height:28px;padding:0 .65rem;font-size:12.5px}
.btn-block{width:100%;height:40px;font-size:14px}
.btn[disabled],.btn.htmx-request{opacity:.55;pointer-events:none}
.input,select{height:36px;padding:0 .7rem;border:1px solid var(--input);border-radius:var(--radius-sm);
  background:var(--bg);color:var(--fg);font:14px var(--font);width:100%}
.field{display:flex;flex-direction:column;gap:.35rem;margin-bottom:.9rem}
.field label{font-weight:500;font-size:13px}
.inline{display:flex;gap:.5rem;align-items:center;flex-wrap:wrap}
.inline .input{width:auto;flex:1 1 12rem}
.suffix{color:var(--muted-fg);font-size:13px}
.checks{display:flex;flex-direction:column;gap:.45rem;margin:.25rem 0 1rem}
.checks label{display:flex;gap:.5rem;align-items:center;font-size:13px}

/* ---- app shell (sidebar like the webmail's folder rail) ------------------- */
.shell{display:grid;grid-template-columns:248px 1fr;min-height:100vh}
.sidebar{background:var(--sidebar);border-right:1px solid var(--border);display:flex;flex-direction:column;
  padding:1rem .75rem;position:sticky;top:0;height:100vh}
.brand{display:flex;align-items:center;gap:.6rem;padding:.25rem .5rem 1rem;text-decoration:none}
.brand img{height:32px;width:auto}
.brand-name{font:700 15px/1.2 var(--font-display)}
.brand-sub{font-size:11.5px;color:var(--muted-fg)}
.nav{display:flex;flex-direction:column;gap:2px}
.nav a{display:flex;align-items:center;gap:.6rem;padding:.5rem .65rem;border-radius:var(--radius-sm);
  text-decoration:none;color:var(--fg);font-weight:500;font-size:13.5px}
.nav a:hover{background:var(--sidebar-accent)}
.nav a[aria-current="page"]{background:var(--accent);color:var(--accent-fg)}
.nav svg{width:16px;height:16px;flex:none}
.sidebar-foot{margin-top:auto;border-top:1px solid var(--border);padding-top:.75rem;display:flex;flex-direction:column;gap:.5rem}
.who{padding:0 .5rem;font-size:12.5px;color:var(--muted-fg);overflow:hidden;text-overflow:ellipsis}
.content{padding:2rem 2.25rem 4rem;max-width:1080px;width:100%}
.page-head{display:flex;align-items:flex-end;justify-content:space-between;gap:1rem;margin-bottom:1.5rem;flex-wrap:wrap}
.page-head p{margin:.3rem 0 0}

/* ---- cards ---------------------------------------------------------------- */
.card{background:var(--card);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);margin-bottom:1.25rem}
.card-head{display:flex;align-items:center;justify-content:space-between;gap:.75rem;padding:1rem 1.25rem;border-bottom:1px solid var(--border);flex-wrap:wrap}
.card-body{padding:1rem 1.25rem}
.card-foot{padding:.85rem 1.25rem;border-top:1px solid var(--border);background:color-mix(in srgb,var(--muted) 45%,transparent);border-radius:0 0 var(--radius) var(--radius)}
.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:1rem;margin-bottom:1.25rem}
.stat{padding:1rem 1.25rem}
.stat-label{font-size:12px;color:var(--muted-fg);font-weight:500;text-transform:uppercase;letter-spacing:.04em}
.stat-value{font:700 1.6rem/1.2 var(--font-display);margin:.35rem 0 .5rem}
progress{appearance:none;width:100%;height:6px;border:0;border-radius:99px;background:var(--muted);overflow:hidden;display:block}
progress::-webkit-progress-bar{background:var(--muted);border-radius:99px}
progress::-webkit-progress-value{background:var(--primary);border-radius:99px;transition:width .4s}
progress::-moz-progress-bar{background:var(--primary);border-radius:99px}
progress.over::-webkit-progress-value{background:var(--danger)}
progress.over::-moz-progress-bar{background:var(--danger)}

/* ---- tables --------------------------------------------------------------- */
.table{width:100%;border-collapse:collapse}
.table th{text-align:left;font-weight:500;font-size:12px;color:var(--muted-fg);padding:.55rem 1.25rem;border-bottom:1px solid var(--border)}
.table td{padding:.7rem 1.25rem;border-bottom:1px solid var(--border);vertical-align:middle}
.table tr:last-child td{border-bottom:0}
.table .actions{text-align:right;white-space:nowrap}
.table tr{transition:opacity .2s,background .2s}
.table tr.is-pending{opacity:.5}
.table tr.is-pending td{pointer-events:none}
.table tr.is-new{animation:flash 1.2s ease-out}
@keyframes flash{from{background:var(--accent)}to{background:transparent}}
.addr{font-weight:500}
.avatar{display:inline-grid;place-items:center;width:28px;height:28px;border-radius:99px;background:var(--accent);
  color:var(--accent-fg);font-size:12px;font-weight:600;margin-right:.6rem;vertical-align:middle;text-transform:uppercase}
.empty{padding:1.5rem 1.25rem;color:var(--muted-fg);text-align:center}

/* ---- badges, notices, toasts --------------------------------------------- */
.badge{display:inline-flex;align-items:center;gap:.25rem;padding:.1rem .5rem;border-radius:99px;font-size:11.5px;font-weight:500;background:var(--muted);color:var(--muted-fg);margin-left:.4rem}
.badge-warn{background:var(--warn-bg);color:var(--warn)}
.badge-ok{background:var(--ok-bg);color:var(--ok)}
.badge-danger{background:var(--danger-bg);color:var(--danger)}
.notice{padding:.8rem 1rem;border-radius:var(--radius-sm);margin-bottom:1rem;font-size:13.5px;border:1px solid transparent}
.notice-warn{background:var(--warn-bg);color:var(--warn)}
.notice-ok{background:var(--ok-bg);color:var(--ok)}
.notice-danger{background:var(--danger-bg);color:var(--danger)}
.secret{border:1px dashed var(--primary);background:color-mix(in srgb,var(--accent) 50%,transparent);padding:1rem;border-radius:var(--radius-sm);margin:0 1.25rem 1rem}
.secret-row{display:flex;gap:.5rem;align-items:center;flex-wrap:wrap;margin-top:.5rem}
#toast{position:fixed;top:1rem;right:1rem;z-index:50;display:flex;flex-direction:column;gap:.5rem;max-width:min(380px,calc(100vw - 2rem))}
.toast{background:var(--card);border:1px solid var(--border);border-left:3px solid var(--danger);box-shadow:var(--shadow);
  border-radius:var(--radius-sm);padding:.75rem 1rem;font-size:13.5px;animation:toast-in .2s ease-out}
.toast-ok{border-left-color:var(--ok)}
@keyframes toast-in{from{opacity:0;transform:translateY(-6px)}to{opacity:1;transform:none}}
.settings{display:grid;grid-template-columns:max-content 1fr;gap:.55rem 1.5rem;margin:0}
.settings dt{color:var(--muted-fg);font-size:13px}
.settings dd{margin:0}
.dns-table td,.dns-table th{padding:.5rem .75rem}
.dns-ok{color:var(--ok)}
.dns-missing,.dns-wrong{color:var(--danger)}
details.more summary{cursor:pointer;color:var(--muted-fg);font-size:13px;list-style:none}
details.more summary::-webkit-details-marker{display:none}
details.more[open] summary{margin-bottom:.75rem}

/* ---- confirm dialog (replaces window.confirm, see portal.js) -------------- */
dialog.confirm{border:1px solid var(--border);border-radius:var(--radius);background:var(--card);color:var(--fg);
  padding:1.25rem;width:min(420px,calc(100vw - 2rem));box-shadow:var(--shadow)}
dialog.confirm::backdrop{background:rgba(0,0,0,.45);backdrop-filter:blur(2px)}
dialog.confirm p{margin:0 0 1.25rem}
dialog.confirm .inline{justify-content:flex-end}

/* ---- builder credit -------------------------------------------------------- */
.built-by{display:inline-flex;align-items:center;gap:.45rem;font-size:11.5px;color:var(--muted-fg);text-decoration:none;opacity:.85;transition:opacity .2s}
.built-by:hover{opacity:1}
.built-by img{height:18px;width:auto;border-radius:4px;display:block}
.sidebar .built-by{padding:0 .5rem}

/* ---- login: split layout (the webmail centres a card; this is the admin) --- */
.login{display:grid;grid-template-columns:minmax(0,1.05fr) minmax(0,1fr);min-height:100vh}
.login-panel{position:relative;overflow:hidden;isolation:isolate;background:var(--login-panel);color:var(--login-panel-fg);
  display:flex;flex-direction:column;justify-content:space-between;padding:2.5rem 3rem}
.login-panel::before{content:"";position:absolute;inset:-460px 0 0 0;z-index:-1;opacity:.09;
  background-image:radial-gradient(currentColor 1.2px,transparent 1.3px);background-size:22px 22px;
  animation:drift 90s linear infinite}
@keyframes drift{to{transform:translateY(460px)}}
.login-panel .brand-name{font-size:17px}
.login-panel .brand img{height:44px}
.login-hero h1{font-size:2.1rem;font-weight:800;max-width:15ch}
.login-hero p{opacity:.75;max-width:38ch;margin:.75rem 0 0;font-size:15px}
.login-facts{display:flex;gap:1.5rem;flex-wrap:wrap;font-size:12.5px;opacity:.7}
.login-main{display:flex;align-items:center;justify-content:center;padding:2rem 1.5rem;position:relative}
.login-form{width:100%;max-width:360px}
.login-form h2{font-size:1.4rem;font-weight:700;margin-bottom:.35rem}
.login-form > p{margin:0 0 1.5rem}
/* Bottom-left: browsers put the install-app prompt bottom-right, over it. */
.login-main .built-by{position:absolute;left:max(16px,env(safe-area-inset-left));bottom:max(14px,env(safe-area-inset-bottom))}
.login-foot{margin-top:1.5rem;font-size:12.5px;color:var(--muted-fg);text-align:center}
.login-foot a{color:var(--muted-fg)}
@media (prefers-reduced-motion:reduce){.login-panel::before{animation:none}*{transition:none!important;animation:none!important}}

/* ---- small screens --------------------------------------------------------- */
@media (max-width:860px){
  .shell{grid-template-columns:1fr}
  .sidebar{position:static;height:auto;flex-direction:row;flex-wrap:wrap;align-items:center;gap:.5rem;padding:.6rem 1rem;border-right:0;border-bottom:1px solid var(--border)}
  .brand{padding:0;margin-right:auto}
  .nav{flex-direction:row;flex-wrap:wrap;width:100%}
  .sidebar-foot{margin:0;border:0;padding:0;flex-direction:row;align-items:center;width:100%;justify-content:space-between}
  .content{padding:1.25rem 1rem 3rem}
  .login{grid-template-columns:1fr}
  .login-panel{padding:1.5rem 1.25rem;min-height:auto;gap:1.25rem}
  .login-hero h1{font-size:1.5rem}
  .login-facts{display:none}
  .table-boxes th:nth-child(2),.table-boxes td:nth-child(2){display:none}
}

/* ---- legacy purchase pages (plan, domain, quote, payment) -----------------
   Reached only by logins holding can_billing, which client logins are not
   given. Kept styled so they still work for an operator-made owner login. */
.stub{background:var(--warn-bg);color:var(--warn);padding:.45rem 1rem;font-size:12.5px;text-align:center}
.content table:not(.table){width:100%;border-collapse:collapse;margin:.5rem 0}
.content table:not(.table) th,.content table:not(.table) td{text-align:left;padding:.45rem .6rem;border-bottom:1px solid var(--border)}
.content label{display:block;margin:.6rem 0}
.content input:not([type=checkbox]):not([type=radio]):not([type=hidden]):not(.input){height:36px;padding:0 .7rem;border:1px solid var(--input);border-radius:var(--radius-sm);background:var(--bg);color:var(--fg);font:14px var(--font)}
.content button:not(.btn){height:34px;padding:0 .9rem;border:1px solid var(--border);border-radius:var(--radius-sm);background:var(--card);color:var(--fg);font:500 13px var(--font);cursor:pointer}
.once{border:1px solid var(--primary);background:color-mix(in srgb,var(--accent) 50%,transparent);padding:.8rem 1rem;border-radius:var(--radius-sm);margin:1rem 0}
.error{color:var(--danger)} .warn{color:var(--warn)} .ok{color:var(--ok)}
.plans{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:1rem;margin:1rem 0}
.plan{border:1px solid var(--border);border-radius:var(--radius);padding:1rem;cursor:pointer;background:var(--card)}
.plan:has(input:checked){border-color:var(--primary);box-shadow:0 0 0 2px var(--accent)}