:root{--bg: #f4f6fa;--surface: #ffffff;--surface-2: #f8fafc;--border: #e3e8ef;--border-strong: #cbd3de;--text: #111827;--text-2: #4b5563;--muted: #6b7280;--primary: #2563eb;--primary-hover: #1d4ed8;--primary-soft: #e8efff;--success: #15803d;--success-soft: #e7f6ec;--danger: #dc2626;--danger-soft: #fdecec;--warning: #b45309;--warning-soft: #fdf3e2;--shadow: 0 1px 2px rgba(16, 24, 40, .05), 0 1px 3px rgba(16, 24, 40, .06);--shadow-lg: 0 10px 30px rgba(16, 24, 40, .08);--radius: 12px;--radius-sm: 8px;--mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;color-scheme:light}@media (prefers-color-scheme: dark){:root{--bg: #0d1117;--surface: #151b23;--surface-2: #1b222c;--border: #262f3b;--border-strong: #354152;--text: #e6edf3;--text-2: #b4bfcc;--muted: #8b96a5;--primary: #3b82f6;--primary-hover: #60a5fa;--primary-soft: rgba(59, 130, 246, .14);--success: #4ade80;--success-soft: rgba(74, 222, 128, .12);--danger: #f87171;--danger-soft: rgba(248, 113, 113, .12);--warning: #fbbf24;--warning-soft: rgba(251, 191, 36, .12);--shadow: 0 1px 2px rgba(0, 0, 0, .3);--shadow-lg: 0 10px 30px rgba(0, 0, 0, .35);color-scheme:dark}}*{box-sizing:border-box}body{margin:0;font-family:Inter,system-ui,-apple-system,Segoe UI,Roboto,sans-serif;font-size:14px;line-height:1.5;background:var(--bg);color:var(--text);-webkit-font-smoothing:antialiased}h1,h2,h3{margin:0;line-height:1.25}h2{font-size:1.375rem;font-weight:650;letter-spacing:-.01em}h3{font-size:1rem;font-weight:600}code{font-family:var(--mono);font-size:.85em;background:var(--surface-2);border:1px solid var(--border);border-radius:6px;padding:.1rem .4rem;white-space:nowrap}a{color:var(--primary)}.muted{color:var(--muted);font-weight:400}.error{color:var(--danger);background:var(--danger-soft);border-radius:var(--radius-sm);padding:.5rem .75rem;margin:.75rem 0 0}.container{max-width:1200px;margin:0 auto;padding:1.75rem 1.5rem 3rem}input,select{font:inherit;padding:.55rem .75rem;border-radius:var(--radius-sm);border:1px solid var(--border-strong);background:var(--surface);color:var(--text);min-width:0}input:focus,select:focus,button:focus-visible{outline:2px solid var(--primary);outline-offset:1px}button,.btn{font:inherit;font-weight:550;cursor:pointer;padding:.55rem 1rem;border-radius:var(--radius-sm);border:1px solid var(--primary);background:var(--primary);color:#fff;transition:background .15s,border-color .15s,color .15s;white-space:nowrap}button:hover:not(:disabled){background:var(--primary-hover);border-color:var(--primary-hover)}button:disabled{opacity:.55;cursor:default}.btn--block{width:100%}.btn--sm{padding:.35rem .75rem;font-size:.85rem}.btn--ghost{background:transparent;color:var(--text-2);border-color:var(--border-strong)}.btn--ghost:hover:not(:disabled){background:var(--surface-2);border-color:var(--border-strong);color:var(--text)}.btn--danger,button.danger{background:transparent;color:var(--danger);border-color:var(--danger)}.btn--danger:hover:not(:disabled),button.danger:hover:not(:disabled){background:var(--danger-soft);border-color:var(--danger)}.app-header{position:sticky;top:0;z-index:10;background:var(--surface);border-bottom:1px solid var(--border);box-shadow:var(--shadow)}.app-header__bar{max-width:1200px;margin:0 auto;padding:.75rem 1.5rem;display:flex;align-items:center;justify-content:space-between;gap:1rem}.brand{display:flex;align-items:center;gap:.65rem;color:var(--text);text-decoration:none}.brand__mark{display:grid;place-items:center;width:36px;height:36px;border-radius:10px;background:linear-gradient(135deg,#2563eb,#7c3aed);color:#fff;flex-shrink:0}.brand__text{display:flex;flex-direction:column;line-height:1.15}.brand__text strong{font-size:.98rem}.brand__text small{color:var(--muted);font-size:.75rem}.app-header__right{display:flex;align-items:center;gap:.75rem}.area-switch{display:flex;padding:3px;background:var(--surface-2);border:1px solid var(--border);border-radius:10px}.area-switch a{padding:.3rem .8rem;border-radius:7px;color:var(--text-2);text-decoration:none;font-weight:550;font-size:.85rem}.area-switch a.active{background:var(--surface);color:var(--text);box-shadow:var(--shadow)}.user-chip{display:flex;align-items:center;gap:.5rem}.avatar{display:grid;place-items:center;width:32px;height:32px;border-radius:50%;background:var(--primary-soft);color:var(--primary);font-weight:700;font-size:.85rem}.user-chip__text{display:flex;flex-direction:column;line-height:1.15}.user-chip__text strong{font-size:.85rem}.user-chip__text small{color:var(--muted);font-size:.72rem;text-transform:capitalize}.app-nav{max-width:1200px;margin:0 auto;padding:0 1.5rem;display:flex;gap:.25rem;overflow-x:auto;scrollbar-width:none}.app-nav a{padding:.6rem .8rem;color:var(--muted);text-decoration:none;font-weight:550;border-bottom:2px solid transparent;white-space:nowrap}.app-nav a:hover{color:var(--text)}.app-nav a.active{color:var(--primary);border-bottom-color:var(--primary)}.page-head{display:flex;justify-content:space-between;align-items:flex-end;gap:1rem;flex-wrap:wrap;margin-bottom:1.5rem}.page-head p{margin:.35rem 0 0;max-width:560px}.stat-row{display:flex;gap:.75rem}.stat{display:flex;flex-direction:column;gap:.2rem;padding:.6rem .9rem;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius-sm);min-width:120px}.stat small{color:var(--muted);font-size:.72rem;text-transform:uppercase;letter-spacing:.04em}.stat code{background:none;border:0;padding:0;font-size:.95rem;font-weight:600}.target-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(320px,1fr));gap:1.25rem}.db-target-card{display:flex;flex-direction:column;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);overflow:hidden;min-width:0}.db-target-card.is-open{border-color:color-mix(in srgb,var(--success) 45%,var(--border))}.card-head{display:flex;align-items:center;gap:.75rem;padding:1rem 1.1rem;border-bottom:1px solid var(--border)}.card-head__title{flex:1;min-width:0}.card-head__title h3{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.engine{display:grid;place-items:center;width:40px;height:40px;border-radius:10px;font-weight:700;font-size:.8rem;flex-shrink:0}.engine--postgres{background:#e0ecff;color:#2f6fcf}.engine--mysql{background:#fff1dc;color:#c36d06}.engine--mssql{background:#fde7e7;color:#c53030}@media (prefers-color-scheme: dark){.engine--postgres{background:#3b82f629;color:#7fb0ff}.engine--mysql{background:#f59e0b26;color:#fbbf24}.engine--mssql{background:#ef444426;color:#fca5a5}}.pill{font-size:.75rem;font-weight:600;padding:.2rem .6rem;border-radius:999px;white-space:nowrap}.pill--open{background:var(--success-soft);color:var(--success)}.pill--closed{background:var(--surface-2);color:var(--muted);border:1px solid var(--border)}.card-body{display:flex;flex-direction:column;gap:.85rem;padding:1rem 1.1rem 1.1rem;flex:1}.db-target-card .error{margin:0 1.1rem 1.1rem}.field-label{font-size:.8rem;font-weight:600;color:var(--text-2)}.ttl-selector{display:grid;grid-template-columns:repeat(auto-fill,minmax(52px,1fr));gap:.4rem}button.chip{padding:.4rem 0;font-size:.85rem;font-weight:550;background:var(--surface-2);color:var(--text-2);border:1px solid var(--border)}button.chip:hover:not(:disabled){background:var(--primary-soft);border-color:var(--primary);color:var(--primary)}button.chip--active,button.chip--active:hover:not(:disabled){background:var(--primary);border-color:var(--primary);color:#fff}.kv{margin:0;display:grid;gap:.6rem}.kv div{display:flex;justify-content:space-between;align-items:center;gap:.75rem}.kv dt{color:var(--muted);font-size:.82rem}.kv dd{margin:0;font-weight:550;text-align:right}.empty{text-align:center;padding:3rem 1rem;background:var(--surface);border:1px dashed var(--border-strong);border-radius:var(--radius)}.empty p{margin:.35rem 0 0}main>div>h2{margin-bottom:1.25rem}main>div>h2+p.muted{margin:-.75rem 0 1.25rem}main>div>h3{margin:1.5rem 0 .75rem}table{width:100%;border-collapse:separate;border-spacing:0;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);overflow:hidden;margin-bottom:1.5rem}th,td{text-align:left;padding:.7rem .9rem;border-bottom:1px solid var(--border);vertical-align:middle}th{background:var(--surface-2);color:var(--muted);font-size:.75rem;font-weight:600;text-transform:uppercase;letter-spacing:.04em}tbody tr:last-child td{border-bottom:0}tbody tr:hover td{background:var(--surface-2)}td:last-child{text-align:right}td button:not(.btn){padding:.35rem .75rem;font-size:.85rem;background:transparent;color:var(--text-2);border-color:var(--border-strong)}td button:not(.btn):hover:not(:disabled){background:var(--surface-2);border-color:var(--border-strong);color:var(--text)}form{display:flex;gap:.6rem;align-items:center;flex-wrap:wrap}main>div>form{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);padding:1rem;box-shadow:var(--shadow)}.firewall-target{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow);margin-bottom:1.5rem;overflow:hidden}.firewall-target__head{display:flex;align-items:center;gap:.75rem;padding:1rem 1.1rem;border-bottom:1px solid var(--border)}.firewall-target__head h3{flex:1}.firewall-target .table-wrap{overflow-x:auto}.firewall-target table{border:0;border-radius:0;box-shadow:none;margin:0}.firewall-target .empty-row{padding:1rem 1.1rem;margin:0}.firewall-target form{padding:.9rem 1.1rem;background:var(--surface-2);border-top:1px solid var(--border)}.firewall-target form input[name=source]{flex:1 1 260px}.firewall-target form input[name=label]{flex:1 1 180px}.firewall-target .error{margin:0 1.1rem 1rem}.badge{display:inline-block;font-size:.75rem;font-weight:600;padding:.15rem .55rem;border-radius:999px;white-space:nowrap;background:var(--surface-2);color:var(--muted);border:1px solid var(--border)}.badge.permanent{background:var(--primary-soft);color:var(--primary);border-color:transparent}.badge.temporary{background:var(--success-soft);color:var(--success);border-color:transparent}.badge.missing{background:var(--warning-soft);color:var(--warning);border-color:transparent}.badge.open{background:var(--danger-soft);color:var(--danger);border-color:transparent}.danger-text{color:var(--danger)}.server-group+.server-group{margin-top:2rem}.server-heading{display:flex;align-items:center;gap:.5rem;margin:0 0 .75rem;font-size:.8rem;text-transform:uppercase;letter-spacing:.06em;color:var(--muted)}.server-dot{width:8px;height:8px;border-radius:50%;background:var(--success)}input.search{width:240px;max-width:100%}.matrix-wrap{overflow-x:auto;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);box-shadow:var(--shadow)}table.matrix{border:0;border-radius:0;box-shadow:none;margin:0;min-width:100%;width:auto}.matrix th,.matrix td{text-align:center;white-space:nowrap}.matrix td:last-child{text-align:center}.matrix .matrix__user-col{position:sticky;left:0;z-index:1;text-align:left;min-width:200px;background:var(--surface);border-right:1px solid var(--border)}.matrix thead .matrix__user-col{background:var(--surface-2);vertical-align:bottom}.matrix__server{text-transform:none;letter-spacing:0;font-size:.78rem;color:var(--text-2);border-left:1px solid var(--border)}.matrix__server .server-dot{display:inline-block;margin-right:.3rem}.matrix__db{min-width:120px;border-left:1px solid var(--border);vertical-align:top;text-transform:none;letter-spacing:0}.matrix__db-head{display:flex;flex-direction:column;align-items:center;gap:.3rem;color:var(--text);font-size:.82rem;font-weight:600}.engine.engine--sm{width:28px;height:28px;border-radius:8px;font-size:.68rem}.matrix__col-toggle,.matrix__row-toggle{display:inline-flex;align-items:center;gap:.3rem;font-size:.72rem;font-weight:500;color:var(--muted);cursor:pointer}.matrix__all-col{border-left:1px solid var(--border);width:80px}.matrix__cell{border-left:1px solid var(--border)}.matrix__user{display:flex;align-items:center;gap:.6rem}.matrix__user div{display:flex;flex-direction:column;line-height:1.2}.matrix__user small{font-size:.75rem}.matrix tbody tr:hover .matrix__user-col{background:var(--surface-2)}.matrix tr.is-disabled td{opacity:.55}input.grant-check,.matrix input[type=checkbox]{width:18px;height:18px;padding:0;margin:0;accent-color:var(--primary);cursor:pointer}input.grant-check{width:20px;height:20px}.matrix input[type=checkbox]:disabled{cursor:progress;opacity:.5}.login-page{display:flex;align-items:center;justify-content:center;min-height:100vh;padding:1rem}.login-card{display:flex;flex-direction:column;align-items:stretch;gap:.9rem;width:100%;max-width:360px;padding:2rem;background:var(--surface);border:1px solid var(--border);border-radius:16px;box-shadow:var(--shadow-lg)}.brand--center{justify-content:center}.brand--center .brand__mark{width:48px;height:48px;border-radius:14px}.login-card h1{text-align:center;font-size:1.35rem}.login-sub{text-align:center;margin:-.6rem 0 .4rem}.login-card label{display:flex;flex-direction:column;gap:.3rem;font-size:.85rem;font-weight:550;color:var(--text-2)}.login-card .error{margin:0}@media (max-width: 720px){.container{padding:1.25rem 1rem 2.5rem}.app-header__bar{padding:.6rem 1rem}.app-nav{padding:0 1rem}.user-chip__text,.brand__text,.user-chip{display:none}.app-header__right{gap:.5rem}.area-switch a{white-space:nowrap;padding:.3rem .65rem}.rules-table thead{display:none}.rules-table,.rules-table tbody,.rules-table tr,.rules-table td{display:block;width:100%}.rules-table tr{padding:.75rem 1.1rem;border-bottom:1px solid var(--border)}.rules-table td{display:flex;justify-content:space-between;align-items:center;gap:1rem;padding:.2rem 0;border:0;text-align:right}.rules-table td:before{content:attr(data-label);color:var(--muted);font-size:.8rem;text-align:left}.rules-table td:last-child{padding-top:.5rem}.rules-table td:last-child:before{content:none}.rules-table td:last-child .btn{width:100%}.rules-table tbody tr:hover td{background:none}.firewall-target form>*{flex:1 1 100%}.matrix .matrix__user-col{min-width:0;max-width:130px}.matrix__user .avatar,.matrix__user small{display:none}.matrix__db{min-width:96px}.target-grid{grid-template-columns:1fr}.stat-row{width:100%}.stat{flex:1}main>div>table{display:block;overflow-x:auto}}