/* The Tier 1 shell.
 *
 * One stylesheet for one shell. PCS 1 carried three (manage, portal, admin)
 * that were 89 percent the same, and identical only lasts until somebody edits
 * one of them. The visual language is PCS 1's: navy top bar, brass accents,
 * Spectral headings, Inter body, monospace for anything numeric.
 */
:root{
  --ink:#0d1b2a; --paper:#f6f5f1; --card:#ffffff;
  --text:#1a2433; --muted:#5b6675; --faint:#6b7480; --line:#e4e2db;
  --brass:#a8843f; --brass-soft:#f0e6d2; --gold:#f0d9a8;
  --green:#15803d; --blue:#1d4ed8; --amber:#b45309; --orange:#c2410c; --red:#b91c1c;
  --shadow:0 1px 2px rgba(13,27,42,.06),0 4px 14px rgba(13,27,42,.05);
  --r:8px; --r-sm:6px; --r-pill:999px;
}
*{box-sizing:border-box}
body{margin:0;font-family:Inter,system-ui,-apple-system,sans-serif;
  background:var(--paper);color:var(--text);font-size:14px;line-height:1.45}
h1,h2,h3{font-family:Spectral,Georgia,serif;font-weight:600;margin:0}
.mono{font-family:'JetBrains Mono',ui-monospace,Menlo,Consolas,monospace}
a{color:var(--blue)}
.hidden{display:none !important}
/* The browser's own rule for the hidden attribute is display:none, and any
 * display rule of ours outranks it. The top bar and the layout both set
 * display:flex, so without this they stayed on screen while signed out and
 * pushed the sign-in form below the fold. */
[hidden]{display:none !important}

/* ---- top bar ---- */
.topbar{display:flex;align-items:center;gap:14px;color:#fff;padding:10px 20px;
  background:linear-gradient(100deg,#4a7db3 0%,#3a6899 26%,#2f5b8a 55%,#24466b 100%);
  position:sticky;top:0;z-index:100;box-shadow:0 2px 10px rgba(0,0,0,.22)}
.topbar .brand{display:flex;flex-direction:column;line-height:1.15;flex:none}
.topbar .mark{font-family:Spectral,Georgia,serif;font-weight:600;font-size:20px;letter-spacing:.3px}
.topbar .sub{font-size:9.5px;letter-spacing:.15em;text-transform:uppercase;color:#e0c283}
.topbar .co{font-size:13px;font-weight:600;color:#fff;max-width:38ch;
  overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.topbar .right{margin-left:auto;display:flex;align-items:center;gap:16px;font-size:12px}
.topbar select{font:inherit;font-size:12.5px;padding:5px 8px;border-radius:var(--r-sm);
  border:1px solid rgba(240,217,168,.5);background:rgba(255,255,255,.1);color:#fff;max-width:230px}
.topbar select option{color:var(--text)}
.gethelp{display:inline-flex;align-items:center;gap:7px;padding:8px 13px;background:#8A6D1F;
  border:1px solid #A07E24;border-radius:var(--r);color:#FFF7E6;font-weight:700;
  text-decoration:none;letter-spacing:.02em;white-space:nowrap;font-size:12.5px}
.gethelp:hover{background:#9a7d2f;border-color:#b08e34;color:#fff}
.topbar .who{color:var(--gold);font-weight:600;white-space:nowrap}
.topbar .signout{color:var(--gold);font-weight:600;font-size:13px;
  text-decoration:underline;cursor:pointer;white-space:nowrap}
.topbar .signout:hover{color:#fff}

/* ---- the menu, built from pages.json ---- */
.layout{display:flex;align-items:flex-start;gap:0;min-height:calc(100vh - 60px)}
.side{width:216px;flex:none;background:var(--card);border-right:1px solid var(--line);
  padding:14px 10px 40px;position:sticky;top:60px;align-self:stretch}
.navgroup{margin-bottom:4px}
.navgroup>.gh{width:100%;text-align:left;font:inherit;font-size:11px;font-weight:700;
  letter-spacing:.09em;text-transform:uppercase;color:var(--faint);background:none;
  border:0;padding:9px 10px 5px;cursor:default}
.navgroup a{display:block;padding:7px 11px;border-radius:var(--r-sm);color:var(--text);
  font-weight:600;font-size:13.5px;text-decoration:none}
.navgroup a:hover{background:rgba(168,132,63,.12)}
.navgroup a.active{background:var(--ink);color:#fff}
.main{flex:1;min-width:0;padding:22px 24px 60px;max-width:1240px}

/* ---- common page furniture ---- */
.hd{display:flex;align-items:flex-end;gap:14px;margin-bottom:14px;flex-wrap:wrap}
.hd h1{font-size:25px}
.hd .lede{font-size:13px;color:var(--muted);padding-bottom:3px}
.msg{padding:14px 18px;border-radius:var(--r);border:1px solid var(--line);
  background:var(--card);color:var(--muted);box-shadow:var(--shadow)}
.msg.bad{border-color:#e7c9c9;background:#fdf6f6;color:var(--red)}
.msg.good{border-color:#c9e0cd;background:#f6fbf7;color:var(--green)}
h2.sub{font-size:15px;margin:18px 0 8px}
h2.sub .faint{font-size:12px;font-weight:400}
/* Plan steps: the phase is a band across the table, and a completed step
   fades so the eye lands on what is still to do. */
tr.phase td{background:#f4f2ed;font-size:10.5px;letter-spacing:.08em;
  text-transform:uppercase;color:var(--muted);font-weight:700;padding:7px 12px}
tr.stepdone td{opacity:.55}
input.cell,textarea.cell{font:inherit;font-size:12.5px;padding:4px 6px;
  border:1px solid var(--line);border-radius:var(--r-sm);background:#fff;
  width:100%;max-width:100%}
.card{background:var(--card);border:1px solid var(--line);border-radius:var(--r);
  box-shadow:var(--shadow);margin-bottom:12px;overflow:hidden}
.btn{font:inherit;font-size:12.5px;font-weight:600;padding:6px 13px;border-radius:var(--r-sm);
  border:1px solid var(--brass);background:var(--brass-soft);color:#6b5420;cursor:pointer}
.btn:hover{background:#e8dabd}
.btn.plain{border-color:var(--line);background:var(--card);color:var(--muted)}
.btn[disabled]{opacity:.5;cursor:default}
.linkish{background:none;border:0;color:var(--blue);font:inherit;font-size:12px;
  cursor:pointer;text-decoration:underline;padding:0}
.rows{width:100%;border-collapse:collapse;font-size:13px}
.rows th{text-align:left;font-size:10.5px;letter-spacing:.08em;text-transform:uppercase;
  color:var(--faint);font-weight:600;padding:10px 14px;border-bottom:1px solid var(--line);
  background:#fbfaf7}
.rows td{padding:10px 14px;border-bottom:1px solid #f0efea;vertical-align:top}
.rows tr:last-child td{border-bottom:0}
.muted{color:var(--muted)}
.faint{color:var(--faint)}
/* An answer the company still owes, in a table cell. Not a failure: amber,
   because nothing is wrong yet and somebody has to go and find it out. */
.warn{color:var(--amber)}

/* ---- the local admin guide ---- */
.guide-step{display:flex;gap:16px;align-items:flex-start}
.guide-n{flex:0 0 28px;height:28px;border-radius:50%;background:var(--navy,#0D1B2A);
  color:#fff;font-size:13px;font-weight:600;display:flex;align-items:center;
  justify-content:center;margin-top:2px}
.guide-body{flex:1;min-width:0}
.guide-body h2{font-size:15px;margin:0 0 2px}
.guide-body p{font-size:13px;color:var(--muted);margin:0 0 8px;line-height:1.55}
.guide-body p:last-child{margin-bottom:0}
.guide-where{font-size:12px;color:var(--faint);margin-bottom:8px}
.guide-watch{border-left:2px solid var(--amber);padding-left:10px;color:var(--text)}

/* ---- sign in ---- */
.signin{max-width:380px;margin:70px auto;background:var(--card);border:1px solid var(--line);
  border-radius:var(--r);box-shadow:var(--shadow);padding:28px}
.signin h1{font-size:21px;margin-bottom:4px}
.signin .lede{font-size:13px;color:var(--muted);margin-bottom:18px}
.signin label{display:block;font-size:11px;letter-spacing:.08em;text-transform:uppercase;
  color:var(--faint);margin:12px 0 4px}
.signin input{width:100%;font:inherit;font-size:14px;padding:9px 11px;
  border:1px solid var(--line);border-radius:var(--r-sm);background:#fff;color:var(--text)}
.signin button{width:100%;margin-top:18px;font-size:14px;padding:10px}
.signin .err{margin-top:12px;font-size:13px;color:var(--red)}

/* ---- two-factor enrolment, which is a gate rather than a page ---- */
.twofa{max-width:420px}
.twofa .faint{font-size:12px;line-height:1.5;margin-top:6px}
.steps2fa{margin:0 0 16px 18px;padding:0;font-size:13px;color:var(--muted);
  line-height:1.55}
.steps2fa li{margin-bottom:4px}
.qr{display:block;width:180px;height:180px;margin:0 auto 10px;
  border:1px solid var(--line);border-radius:var(--r-sm);background:#fff}
/* Big, spaced and selectable: this gets typed into a phone by hand when the
 * camera will not focus, and a run of 32 characters in a proportional font
 * is where that goes wrong. */
.secret{font-family:ui-monospace,Consolas,monospace;font-size:13px;
  letter-spacing:.12em;word-break:break-all;text-align:center;
  background:var(--bg);border:1px solid var(--line);border-radius:var(--r-sm);
  padding:8px;user-select:all}
.codes2fa{display:grid;grid-template-columns:1fr 1fr;gap:6px 12px;margin:14px 0;
  font-family:ui-monospace,Consolas,monospace;font-size:14px;letter-spacing:.08em;
  background:var(--bg);border:1px solid var(--line);border-radius:var(--r-sm);
  padding:12px;user-select:all}

/* ---- the score strip, on the risk assessment ---- */
.strip{display:flex;align-items:stretch;background:var(--card);border:1px solid var(--line);
  border-radius:var(--r);box-shadow:var(--shadow);overflow:hidden;margin-bottom:18px}
.strip .big{padding:16px 22px;border-right:1px solid var(--line);min-width:210px}
.strip .big .pct{font-family:'JetBrains Mono',ui-monospace,monospace;font-weight:700;
  font-size:44px;line-height:1;letter-spacing:-1px;color:var(--ink)}
.strip .big .of{font-size:12px;color:var(--muted);margin-top:6px}
.strip .stats{display:flex;flex-wrap:wrap;align-items:center;flex:1}
.stat{padding:16px 22px;border-right:1px solid var(--line)}
.stat:last-child{border-right:0}
.stat .k{font-size:11px;letter-spacing:.08em;text-transform:uppercase;color:var(--faint)}
.stat .v{font-family:'JetBrains Mono',ui-monospace,monospace;font-size:19px;font-weight:600;margin-top:3px}
.stat .v.sm{font-size:14px;font-weight:500}
.bar{height:7px;background:var(--line);border-radius:var(--r-pill);overflow:hidden;margin-top:9px}
.bar>i{display:block;height:100%;background:var(--green)}

/* ---- filters ---- */
.filters{display:flex;flex-wrap:wrap;gap:10px;align-items:flex-end;margin-bottom:16px}
.filters label{display:flex;flex-direction:column;gap:4px;font-size:11px;
  letter-spacing:.08em;text-transform:uppercase;color:var(--faint)}
.filters select{font:inherit;font-size:13px;padding:7px 10px;border:1px solid var(--line);
  border-radius:var(--r-sm);background:var(--card);color:var(--text);min-width:190px}
.filters .count{margin-left:auto;font-size:12px;color:var(--muted)}

/* ---- a control group ---- */
.group{background:var(--card);border:1px solid var(--line);border-radius:var(--r);
  box-shadow:var(--shadow);margin-bottom:12px;overflow:hidden}
.group>summary{list-style:none;cursor:pointer;padding:13px 18px;display:flex;
  align-items:center;gap:12px;background:#fbfaf7;border-bottom:1px solid var(--line)}
.group>summary::-webkit-details-marker{display:none}
.group>summary::before{content:"\25B6";color:var(--brass);font-size:9px;
  transition:transform .12s ease;flex:none;line-height:1}
.group[open]>summary::before{transform:rotate(90deg)}
.group .gname{font-family:Spectral,Georgia,serif;font-size:15px;font-weight:600}
.group .gnum{font-family:'JetBrains Mono',ui-monospace,monospace;font-size:12px;
  color:#fff;background:var(--ink);border-radius:var(--r-sm);padding:2px 7px;flex:none}
.group .gcount{margin-left:auto;font-size:12px;color:var(--muted)}
.group.na>summary{background:#f3f2ee}
.group.na .gname{color:var(--muted)}

/* ---- one safeguard, and one policy ---- */
.sg{border-bottom:1px solid var(--line)}
.sg:last-child{border-bottom:0}
.sg>summary{list-style:none;cursor:pointer;padding:12px 18px;display:flex;
  align-items:flex-start;gap:12px}
.sg>summary::-webkit-details-marker{display:none}
.sg>summary:hover{background:#fcfbf9}
.sg .cis{font-family:'JetBrains Mono',ui-monospace,monospace;font-size:12.5px;
  font-weight:600;color:var(--muted);min-width:46px;flex:none;padding-top:2px}
.sg .title{flex:1;min-width:0}
.sg .title .t{font-weight:600}
.sg .title .why{font-size:12.5px;color:var(--muted);margin-top:2px}
.sg .title .det{font-size:12.5px;color:var(--brass);margin-top:3px}
.tag{flex:none;font-size:11px;font-weight:700;letter-spacing:.04em;text-transform:uppercase;
  padding:3px 9px;border-radius:var(--r-pill);color:#fff;white-space:nowrap}
.tag.met{background:var(--green)}
.tag.not_met{background:var(--red)}
.tag.blocked_by_license{background:var(--amber)}
.tag.stale{background:var(--orange)}
.tag.no_evidence{background:#7a8290}
.tag.not_applicable{background:#9aa2ad}
.tag.out_of_tier{background:#9aa2ad}
.tag.adopted{background:var(--green)}
/* Run a scan and Scanned assets. The same pill, said in scan words. */
.tag.ok{background:var(--green)}
.tag.due{background:var(--amber)}
.tag.late{background:var(--red)}
.tag.soon{background:#7a8290}
.tag.manual{background:#9aa2ad}
.tag.none{background:#9aa2ad}
.grace{font-size:11px;color:var(--amber);margin-top:4px;text-align:right}

/* ---- the evidence behind a safeguard, and a policy's body ---- */
.ev{padding:4px 18px 16px 76px;background:#fcfbf9}
.ev table{width:100%;border-collapse:collapse;font-size:12.5px}
.ev th{text-align:left;font-size:10.5px;letter-spacing:.08em;text-transform:uppercase;
  color:var(--faint);font-weight:600;padding:7px 10px 6px 0;border-bottom:1px solid var(--line)}
.ev td{padding:7px 10px 7px 0;border-bottom:1px solid #f0efea;vertical-align:top}
.ev tr:last-child td{border-bottom:0}
.ev .k{font-family:'JetBrains Mono',ui-monospace,monospace;white-space:nowrap}
.ev .req{font-size:10.5px;color:var(--faint);text-transform:uppercase;letter-spacing:.06em}
.ev .req.yes{color:var(--brass);font-weight:700}
.ev .state{font-weight:600;white-space:nowrap}
.ev .state.pass{color:var(--green)}
.ev .state.fail{color:var(--red)}
.ev .state.stale{color:var(--orange)}
.ev .state.no_evidence,.ev .state.unavailable{color:var(--muted)}
.ev .when{color:var(--faint);white-space:nowrap}
.ev .note{color:var(--muted)}
.ev p{margin:8px 0 0}
.ev ul.pol{margin:4px 0 10px;padding-left:20px}
.ev ul.pol li{margin:4px 0;font-size:13px}

/* ---- the vCISO determination, operator only ---- */
.dets{margin-top:12px;padding-top:11px;border-top:1px dashed var(--line);
  display:flex;flex-wrap:wrap;gap:8px;align-items:center}
.dets input{font:inherit;font-size:12.5px;padding:6px 9px;border:1px solid var(--line);
  border-radius:var(--r-sm);min-width:300px;flex:1}
.dets .said{font-size:12px;color:var(--brass);flex-basis:100%}

/* ---- an inventory form ---- */
.invform{padding:16px 18px}
.invform h3{font-size:16px;margin-bottom:12px}
.invform .grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:12px}
.invform label.f{display:flex;flex-direction:column;gap:4px;font-size:11px;
  letter-spacing:.08em;text-transform:uppercase;color:var(--faint)}
.invform input,.invform select,.invform textarea{font:inherit;font-size:13.5px;
  padding:7px 10px;
  border:1px solid var(--line);border-radius:var(--r-sm);background:#fff;
  color:var(--text);text-transform:none;letter-spacing:0}
/* A field that needs the whole width rather than a column of the grid: a
 * pasted key, a long address. Tenant credentials is the first page with one. */
.invform label.wide{grid-column:1 / -1}
.invform textarea{resize:vertical;font-family:ui-monospace,Consolas,monospace;
  font-size:12px}

/* ---- the tier, on the company profile ---- */
.tierbox{padding:16px 18px;margin-bottom:14px}
.tiernow{font-size:19px;font-weight:700;margin-bottom:8px;
  display:flex;align-items:center;gap:10px}
.tierbox .msg{margin:0 0 8px}
h2.sub{font-size:15px;margin:20px 0 8px}

/* ---- signed forms ---- */
.attcard{padding:16px 18px;margin-bottom:14px}
.atthead{display:flex;align-items:center;justify-content:space-between;gap:12px;
  margin-bottom:6px}
.atthead strong{font-size:15px;margin-right:8px}
.attwhen{font-size:12.5px;color:var(--muted);margin-top:8px}
.attbody:not(:empty){margin-top:14px;padding-top:14px;
  border-top:1px solid var(--line)}
.attq{padding:10px 0;border-bottom:1px solid var(--line)}
.attq:last-of-type{border-bottom:0}
.attqt{font-size:13.5px;margin-bottom:7px}
/* Wraps rather than scrolls: three answers and a long question on a narrow
 * screen is the one place this page gets cramped. */
.picks{display:flex;flex-wrap:wrap;gap:8px 18px}
.pick{display:flex;align-items:center;gap:6px;font-size:13px;cursor:pointer}
.pick input{margin:0;cursor:pointer}
.pick input:disabled,.pick:has(input:disabled){cursor:default;color:var(--faint)}
.attsign{display:flex;flex-wrap:wrap;align-items:center;gap:10px 14px;
  margin-top:14px}
.attsign .faint{font-size:12px}

.addwrap{margin-top:22px}
.addwrap h2{font-size:17px;margin-bottom:4px}
.addwrap .lede{font-size:12.5px;color:var(--muted);margin-bottom:10px}

@media (max-width:860px){
  .layout{flex-direction:column}
  .side{width:100%;position:static;border-right:0;border-bottom:1px solid var(--line)}
  .strip{flex-direction:column}
  .strip .big{border-right:0;border-bottom:1px solid var(--line)}
  .ev{padding-left:18px}
  .main{padding:18px 16px 50px}
}