/* ============================================================
   Fondament OS · Betreiber-Konsole — Styles
   Corporate Design v1 (docs/tokens.css). Ink-geführt, Ochre nur
   akzentuiert (Create-Buttons + kleine Aktiv-Flächen). Keine
   hartkodierten Marken-Hex-Werte außerhalb dieses Token-Blocks.
   ============================================================ */
:root{
  /* Marke / Ochre (Akzent) */
  --fos-ochre:            #9A7B2E;
  --fos-ochre-deep:       #7C6222;
  --fos-ochre-tint:       rgba(154,123,46,.14);
  --fos-ochre-tint-strong:rgba(154,123,46,.22);
  --fos-ochre-on:         #FFFFFF;

  /* Ink / Neutrals */
  --fos-ink:        #1B1E24;
  --fos-ink-soft:   #565B66;
  --fos-muted:      #8A8F98;
  --fos-surface:    #F7F8FA;
  --fos-panel:      #FFFFFF;
  --fos-line:       #E7E9EC;

  /* Sidebar (neutral hell, fix) */
  --fos-sb:            #FFFFFF;
  --fos-sb-text:       #3A3D42;
  --fos-sb-line:       rgba(0,0,0,.08);
  --fos-sb-hover:      rgba(0,0,0,.045);
  --fos-sb-active-bg:  rgba(154,123,46,.13);
  --fos-sb-field:      #F4F5F7;

  /* Effekte */
  --fos-shadow:      0 16px 34px -20px rgba(30,34,45,.24);
  --fos-shadow-btn:  0 10px 22px -12px rgba(124,98,34,.55);
  --fos-radius:      14px;
  --fos-radius-sm:   10px;
  --fos-radius-pill: 999px;
  --fos-band:        6px;

  /* Semantik (Ochre = Marke/Aktion, NIE Warnung!) */
  --fos-success:    #2F8F5B;  --fos-success-bg:#E7F2EC;
  --fos-warning:    #C46A18;  --fos-warning-bg:#FBEEDD;
  --fos-danger:     #C0392B;  --fos-danger-bg: #FBEAE7;
  --fos-info:       #2E6FA6;  --fos-info-bg:   #E9F1F8;

  /* Typografie */
  --fos-font-ui:    "Public Sans", system-ui, -apple-system, "Segoe UI", sans-serif;
  --fos-font-brand: "Jost", var(--fos-font-ui);
}

*{box-sizing:border-box}
html,body{margin:0}
body{
  background:var(--fos-surface);
  color:var(--fos-ink);
  font-family:var(--fos-font-ui);
  font-size:15px;
  -webkit-font-smoothing:antialiased;
  text-rendering:optimizeLegibility;
}
button{font-family:inherit}
:focus-visible{outline:2px solid var(--fos-ochre);outline-offset:2px;border-radius:4px}
.tnum{font-variant-numeric:tabular-nums}

/* ---------------------------------------------------------------- Marke */
.mk{flex:0 0 auto;display:block}
.brand{display:flex;align-items:center;gap:11px}
.brand .bt{font-family:var(--fos-font-brand);font-weight:600;font-size:20px;line-height:1;color:var(--fos-ink);letter-spacing:.02em}
.brand .bs{font-size:9.5px;color:var(--fos-muted);margin-top:4px;font-weight:500;letter-spacing:.01em}

/* ============================================================ AUTH */
.auth-wrap{min-height:100vh;display:flex;align-items:center;justify-content:center;padding:24px}
.auth-card{
  width:100%;max-width:420px;background:var(--fos-panel);
  border-radius:var(--fos-radius);box-shadow:var(--fos-shadow);
  padding:34px 32px 30px;
}
.auth-card .brand{margin-bottom:22px}
.auth-title{margin:0 0 4px;font-size:20px;font-weight:700;letter-spacing:-.01em}
.auth-sub{margin:0 0 22px;color:var(--fos-muted);font-size:13.5px;line-height:1.45}
.auth-card form{display:flex;flex-direction:column;gap:14px}

/* --- Übertitel Betreiber-Kennung --- */
.op-tag{
  display:inline-flex;align-items:center;gap:7px;
  font-size:11px;font-weight:600;letter-spacing:.05em;text-transform:uppercase;
  color:var(--fos-ochre-deep);background:var(--fos-ochre-tint);
  padding:4px 10px;border-radius:var(--fos-radius-pill);margin-bottom:14px;
}

/* --- Felder --- */
.field{display:flex;flex-direction:column;gap:6px}
.field label{font-size:12.5px;font-weight:600;color:var(--fos-ink-soft)}
.input{
  width:100%;background:#fff;border:1px solid var(--fos-line);
  border-radius:var(--fos-radius-sm);padding:11px 13px;font-size:14.5px;color:var(--fos-ink);
  transition:border-color .12s, box-shadow .12s;
}
.input:focus{outline:none;border-color:var(--fos-ochre);box-shadow:0 0 0 3px var(--fos-ochre-tint)}
.input::placeholder{color:var(--fos-muted)}
.input.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:.14em;text-align:center;font-size:20px}

/* ============================================================ BUTTONS */
.btn{
  border-radius:var(--fos-radius-sm);padding:11px 18px;font-size:14px;font-weight:600;
  cursor:pointer;border:1px solid transparent;transition:filter .12s, background .12s, box-shadow .12s;
  display:inline-flex;align-items:center;justify-content:center;gap:7px;line-height:1;
}
.btn:disabled{opacity:.6;cursor:progress}
.btn-block{width:100%}
.btn-primary{background:var(--fos-ochre-deep);color:var(--fos-ochre-on);box-shadow:var(--fos-shadow-btn)}
.btn-primary:not(:disabled):hover{filter:brightness(1.07)}
.btn-ghost{background:var(--fos-panel);color:var(--fos-ink);border-color:var(--fos-line)}
.btn-ghost:not(:disabled):hover{background:var(--fos-sb-hover)}
.btn .plus{font-size:16px;font-weight:700;line-height:1}

/* kleine Aktions-Buttons (Tabellen/Detail) */
.btn-sm{
  border-radius:8px;padding:6px 11px;font-size:12.5px;font-weight:600;cursor:pointer;
  border:1px solid transparent;line-height:1;transition:background .12s, filter .12s;
}
.btn-sm:disabled{opacity:.6;cursor:progress}
.btn-sm.ghost{background:var(--fos-panel);color:var(--fos-ink-soft);border-color:var(--fos-line)}
.btn-sm.ghost:not(:disabled):hover{background:var(--fos-sb-hover)}
.btn-sm.warn{background:var(--fos-warning-bg);color:var(--fos-warning);border-color:transparent}
.btn-sm.warn:not(:disabled):hover{filter:brightness(.97)}
.btn-sm.warn-solid{background:var(--fos-warning);color:#fff}
.btn-sm.success{background:var(--fos-success-bg);color:var(--fos-success)}
.btn-sm.success-solid{background:var(--fos-success);color:#fff}
.btn-sm.primary{background:var(--fos-ochre-deep);color:#fff}
.confirm-wrap{display:inline-flex;gap:6px;align-items:center}

/* Link-artiger Textbutton */
.linkbtn{background:none;border:0;color:var(--fos-ochre-deep);font-weight:600;font-size:13px;cursor:pointer;padding:0}
.linkbtn:hover{text-decoration:underline}

/* ============================================================ MELDUNGEN */
.msg{border-radius:var(--fos-radius-sm);padding:10px 13px;font-size:13.5px;line-height:1.4}
.msg-error{background:var(--fos-danger-bg);color:var(--fos-danger)}
.msg-info{background:var(--fos-info-bg);color:var(--fos-info)}
.msg-warn{background:var(--fos-warning-bg);color:var(--fos-warning)}
.msg-success{background:var(--fos-success-bg);color:var(--fos-success)}

/* ============================================================ SHELL */
.app{display:flex;min-height:100vh}
.side{
  width:250px;flex:0 0 250px;background:var(--fos-sb);color:var(--fos-sb-text);
  display:flex;flex-direction:column;padding:20px 14px;border-right:1px solid var(--fos-sb-line);
  position:sticky;top:0;height:100vh;
}
.side .brand{padding:2px 6px 16px}
.side .create{margin-bottom:16px}
nav.navlist{display:flex;flex-direction:column;gap:2px}
.nav{
  display:flex;align-items:center;gap:11px;padding:9px 12px;border-radius:9px;
  color:var(--fos-sb-text);opacity:.92;font-size:14px;font-weight:500;
  text-decoration:none;cursor:pointer;background:none;border:0;text-align:left;width:100%;
}
.nav:hover{background:var(--fos-sb-hover)}
.nav.active{background:var(--fos-sb-active-bg);color:var(--fos-ink);opacity:1;font-weight:600;box-shadow:inset 3px 0 0 var(--fos-ochre)}
.nav .ic{width:16px;height:16px;flex:0 0 auto;display:flex;align-items:center;justify-content:center}
.nav .ic svg{width:16px;height:16px;stroke:currentColor;stroke-width:1.8;fill:none}
.nav.active .ic{color:var(--fos-ochre)}
.side .sep{height:1px;background:var(--fos-sb-line);margin:14px 6px}
.side .role{font-size:10px;letter-spacing:.06em;text-transform:uppercase;color:var(--fos-muted);padding:0 6px 8px}
.side .foot{margin-top:auto;display:flex;flex-direction:column;gap:2px;padding-top:14px}

.main{flex:1;min-width:0;display:flex;flex-direction:column}
.band{height:var(--fos-band);background:var(--fos-ochre)}
.content{padding:28px 34px;max-width:1400px;width:100%}

.head{display:flex;align-items:flex-end;justify-content:space-between;gap:16px;margin-bottom:22px;flex-wrap:wrap}
.head h1{margin:0;font-size:26px;font-weight:700;letter-spacing:-.02em;color:var(--fos-ink)}
.head .sub{margin:6px 0 0;color:var(--fos-muted);font-size:14px}
.head .actions{display:flex;gap:10px}

/* Init-Passwort-Banner */
.topbanner{
  display:flex;align-items:center;justify-content:space-between;gap:14px;flex-wrap:wrap;
  background:var(--fos-warning-bg);color:var(--fos-warning);
  border-radius:var(--fos-radius-sm);padding:11px 15px;margin-bottom:20px;font-size:13.5px;
}

/* ============================================================ STATS */
.stats{display:grid;grid-template-columns:repeat(4,1fr);gap:18px;margin-bottom:22px}
.stat{background:var(--fos-panel);border-radius:var(--fos-radius);padding:20px;box-shadow:var(--fos-shadow)}
.stat .l{font-size:11px;letter-spacing:.07em;text-transform:uppercase;color:var(--fos-muted);font-weight:600}
.stat .v{font-size:32px;font-weight:700;letter-spacing:-.02em;margin-top:12px;line-height:1;color:var(--fos-ink)}
.stat .v.accent{color:var(--fos-ochre-deep)}
.stat .n{font-size:12.5px;color:var(--fos-muted);margin-top:8px}

/* ============================================================ CARD / TABELLE */
.card{background:var(--fos-panel);border-radius:var(--fos-radius);box-shadow:var(--fos-shadow);overflow:hidden}
.card-pad{padding:24px 26px}
.card-head{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:20px 26px 16px}
.card-head h2{margin:0;font-size:16px;font-weight:600;color:var(--fos-ink)}
.card-head .hint{font-size:12.5px;color:var(--fos-muted)}

.table-scroll{overflow-x:auto}
table.grid{width:100%;border-collapse:collapse;font-size:13.5px}
table.grid th{
  text-align:left;font-size:10.5px;letter-spacing:.05em;text-transform:uppercase;
  color:var(--fos-muted);font-weight:600;padding:10px 14px;border-bottom:1px solid var(--fos-line);
  white-space:nowrap;position:sticky;top:0;background:var(--fos-panel);
}
table.grid th.num,table.grid td.num{text-align:right}
table.grid td{padding:13px 14px;border-bottom:1px solid var(--fos-line);color:var(--fos-ink-soft);vertical-align:middle;white-space:nowrap}
table.grid tr:last-child td{border-bottom:0}
table.grid tbody tr:hover{background:#FbFbFc}
table.grid tr.gesperrt td{opacity:.55}
.cell-name{font-weight:600;color:var(--fos-ink)}
.cell-sub{font-size:11.5px;color:var(--fos-muted);margin-top:2px}
.actioncell{display:flex;gap:6px;align-items:center;justify-content:flex-end;white-space:nowrap}

/* Status-Chip */
.chip{display:inline-flex;align-items:center;gap:6px;font-size:11.5px;font-weight:600;padding:3px 9px;border-radius:var(--fos-radius-pill)}
.chip.ok{background:var(--fos-success-bg);color:var(--fos-success)}
.chip.blocked{background:var(--fos-warning-bg);color:var(--fos-warning)}
.chip .dot{width:6px;height:6px;border-radius:50%;background:currentColor}

/* ============================================================ FORM-KARTE */
.formcard{background:var(--fos-panel);border-radius:var(--fos-radius);box-shadow:var(--fos-shadow);padding:26px 28px;max-width:620px}
.formgrid{display:grid;grid-template-columns:1fr 1fr;gap:16px}
.formgrid .full{grid-column:1 / -1}
.formcard .actions{display:flex;gap:10px;margin-top:6px}

/* Ergebnis: Initial-Passwort groß */
.secret-box{
  background:var(--fos-ochre-tint);border-radius:var(--fos-radius-sm);
  padding:18px 20px;margin:6px 0 4px;text-align:center;
}
.secret-box .lbl{font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--fos-ochre-deep);font-weight:600}
.secret-box .val{
  font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:26px;font-weight:600;
  color:var(--fos-ink);margin:10px 0 12px;word-break:break-all;letter-spacing:.02em;
}

/* Recovery-Codes-Raster */
.codes{
  display:grid;grid-template-columns:1fr 1fr;gap:8px 18px;
  background:var(--fos-surface);border:1px solid var(--fos-line);border-radius:var(--fos-radius-sm);
  padding:16px 18px;margin:4px 0;
  font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:15px;letter-spacing:.06em;color:var(--fos-ink);
}

/* QR / TOTP-Enrollment */
.enroll-row{display:flex;gap:22px;align-items:flex-start;flex-wrap:wrap}
.qr-frame{background:#fff;border:1px solid var(--fos-line);border-radius:var(--fos-radius-sm);padding:12px;width:196px;height:196px;flex:0 0 auto;display:flex;align-items:center;justify-content:center}
.qr-frame img{width:100%;height:100%;object-fit:contain}
.secret-tip{flex:1;min-width:220px;font-size:13.5px;color:var(--fos-ink-soft);line-height:1.5}
.secret-tip code{display:inline-block;background:var(--fos-surface);border:1px solid var(--fos-line);border-radius:6px;padding:4px 8px;font-size:13px;letter-spacing:.12em;margin-top:6px;word-break:break-all}

/* ============================================================ MODAL */
.overlay{position:fixed;inset:0;background:rgba(27,30,36,.42);display:flex;align-items:flex-start;justify-content:center;padding:40px 20px;z-index:40;overflow-y:auto}
.modal{background:var(--fos-panel);border-radius:var(--fos-radius);box-shadow:0 30px 70px -30px rgba(0,0,0,.5);width:100%;max-width:560px;overflow:hidden}
.modal .m-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;padding:22px 24px 14px}
.modal .m-head h3{margin:0;font-size:18px;font-weight:700;letter-spacing:-.01em}
.modal .m-head .k{font-size:12.5px;color:var(--fos-muted);margin-top:3px}
.modal .m-body{padding:4px 24px 22px}
.modal .m-foot{padding:16px 24px;border-top:1px solid var(--fos-line);display:flex;justify-content:flex-end;gap:10px}
.iconbtn{background:none;border:0;cursor:pointer;color:var(--fos-muted);font-size:22px;line-height:1;padding:2px 6px;border-radius:6px}
.iconbtn:hover{background:var(--fos-sb-hover);color:var(--fos-ink)}

/* Detail-Kennzahlen-Raster */
.kpi{display:grid;grid-template-columns:1fr 1fr;gap:1px;background:var(--fos-line);border:1px solid var(--fos-line);border-radius:var(--fos-radius-sm);overflow:hidden;margin:4px 0 16px}
.kpi .cell{background:var(--fos-panel);padding:12px 14px}
.kpi .cell .l{font-size:10.5px;letter-spacing:.05em;text-transform:uppercase;color:var(--fos-muted);font-weight:600}
.kpi .cell .v{font-size:18px;font-weight:700;margin-top:4px;color:var(--fos-ink)}
.kpi .cell .v.small{font-size:14px;font-weight:600}

.subhead{font-size:12px;letter-spacing:.05em;text-transform:uppercase;color:var(--fos-muted);font-weight:600;margin:18px 0 10px}
.util-row{display:flex;gap:8px;align-items:center;flex-wrap:wrap}
.util-row .input{flex:1;min-width:180px}

/* ============================================================ TOAST */
.toast-wrap{position:fixed;right:20px;bottom:20px;display:flex;flex-direction:column;gap:10px;z-index:60}
.toast{
  min-width:240px;max-width:360px;border-radius:var(--fos-radius-sm);padding:12px 15px;
  font-size:13.5px;font-weight:500;box-shadow:0 16px 34px -18px rgba(30,34,45,.4);
  display:flex;gap:10px;align-items:flex-start;background:var(--fos-panel);color:var(--fos-ink);
  border-left:4px solid var(--fos-ink);
}
.toast.success{border-left-color:var(--fos-success)}
.toast.error{border-left-color:var(--fos-danger)}
.toast .t-ic{font-weight:700}
.toast.success .t-ic{color:var(--fos-success)}
.toast.error .t-ic{color:var(--fos-danger)}

/* ============================================================ SICHERHEIT */
.sec-grid{display:grid;grid-template-columns:1fr;gap:18px;max-width:640px}
.kv{display:flex;justify-content:space-between;gap:12px;padding:9px 0;border-bottom:1px solid var(--fos-line);font-size:14px}
.kv:last-child{border-bottom:0}
.kv .k{color:var(--fos-muted)}
.kv .v{font-weight:600;color:var(--fos-ink)}

/* Ladeanzeige */
.loading{display:flex;align-items:center;justify-content:center;min-height:60vh;color:var(--fos-muted);font-size:14px;gap:10px}
.spinner{width:18px;height:18px;border:2.5px solid var(--fos-line);border-top-color:var(--fos-ochre);border-radius:50%;animation:spin .7s linear infinite}
@keyframes spin{to{transform:rotate(360deg)}}
.empty{text-align:center;color:var(--fos-muted);font-size:14px;padding:40px 20px}

.hint-text{font-size:12.5px;color:var(--fos-muted);line-height:1.5}

/* ============================================================ RESPONSIVE */
@media (max-width:1080px){.stats{grid-template-columns:repeat(2,1fr)}}
@media (max-width:820px){
  .app{flex-direction:column}
  .side{width:100%;flex:none;height:auto;position:static;border-right:0;border-bottom:1px solid var(--fos-sb-line);flex-direction:row;flex-wrap:wrap;align-items:center;gap:8px}
  .side .brand{padding:2px 6px}
  .side .create{margin-bottom:0;order:3}
  nav.navlist{flex-direction:row;flex-wrap:wrap;order:4;width:100%}
  .side .sep,.side .role{display:none}
  .side .foot{margin:0 0 0 auto;padding:0;flex-direction:row;order:2}
  .content{padding:22px 18px}
  .formgrid{grid-template-columns:1fr}
  .kpi{grid-template-columns:1fr}
}