:root{
  --bg:#f4f6f9;--panel:#fff;--panel-subtle:#f8fafc;--line:#dfe4ea;--line-strong:#cbd5e1;
  --text:#18212f;--muted:#667085;--accent:#2157d6;--accent2:#173e9c;--danger:#b42318;
  --danger-bg:#fff1f0;--ok:#067647;--warn:#b54708;--sidebar:#111827;
  --shadow:0 10px 28px rgba(15,23,42,.07);--radius:14px;--content:1900px;
}
*{box-sizing:border-box}
html,body{margin:0;min-height:100%;font:15px/1.5 system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;color:var(--text);background:var(--bg)}
button,input,select,textarea{font:inherit}button{cursor:pointer}.hidden{display:none!important}.muted{color:var(--muted)}.error-text,.error{color:var(--danger)}.ok{color:var(--ok)}.warn{color:var(--warn)}
h1,h2,h3,p{margin-top:0}h2{font-size:18px;line-height:1.3}h3{font-size:15px}

/* Anmeldung / Setup */
.auth-shell{min-height:100vh;display:grid;place-items:center;padding:28px;background:linear-gradient(135deg,#eef3ff,#f7f8fb 55%,#edf5f2)}
.auth-card{width:min(430px,100%);background:var(--panel);padding:34px;border:1px solid var(--line);border-radius:20px;box-shadow:var(--shadow)}
.auth-card h1{margin:28px 0 4px}.brand{display:flex;gap:12px;align-items:center;color:#fff}.brand-auth{color:var(--text)}
.brand strong{display:block;font-size:17px}.brand small{display:block;color:#9da9ba}.brand-auth small{color:var(--muted)}
.brand-mark{width:38px;height:38px;border-radius:10px;background:var(--accent);color:#fff;display:grid;place-items:center;font-weight:800;font-size:19px}
.stack{display:grid;gap:15px;margin-top:24px}.subtle-link{display:inline-block;margin-top:18px;color:var(--muted);text-decoration:none}
.setup-card{width:min(560px,100%)}.setup-card h1{margin-top:18px}.setup-icon{width:58px;height:58px;display:grid;place-items:center;border-radius:16px;background:#eef4ff;color:var(--accent);font-size:28px;margin-top:26px}
.button-link{display:inline-flex;align-items:center;justify-content:center;border-radius:8px;padding:10px 14px;text-decoration:none;font-weight:700}.button-link.primary{background:var(--accent);color:#fff}.button-link.primary:hover{background:var(--accent2)}.setup-help{margin:18px 0 0;font-size:12px;line-height:1.5}

/* App-Rahmen */
.app-shell{min-height:100vh;display:grid;grid-template-columns:250px 1fr}.sidebar{background:var(--sidebar);padding:18px 14px 24px;position:fixed;left:0;top:0;bottom:0;width:250px;overflow:auto;z-index:20}
.sidebar .brand{padding:6px 8px 22px}.sidebar nav{display:grid;gap:4px}.sidebar nav button{border:0;text-align:left;padding:10px 12px;font-size:14px;border-radius:9px;background:transparent;color:#c6cfdd;transition:background .15s,color .15s}
.sidebar nav button:hover,.sidebar nav button.active{background:#243044;color:#fff}.nav-label{font-size:11px;text-transform:uppercase;letter-spacing:.1em;color:#718096;padding:20px 12px 6px}
.main{grid-column:2;min-width:0}.topbar{min-height:74px;background:rgba(255,255,255,.96);border-bottom:1px solid var(--line);display:flex;align-items:center;gap:18px;padding:12px clamp(20px,2.4vw,38px);position:sticky;top:0;z-index:10;backdrop-filter:blur(8px)}
.topbar h1{font-size:21px;margin:0}.topbar p{margin:2px 0 0;max-width:820px}.userbox{margin-left:auto;display:flex;align-items:center;gap:10px}.content{padding:30px clamp(20px,2.4vw,38px) 52px;max-width:var(--content);width:100%;margin:0}.icon-btn{display:none;border:1px solid var(--line);background:#fff;border-radius:8px;padding:7px 10px}

/* Seitenstruktur */
.page-stack{display:grid;gap:22px}.organization-grid{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:22px;align-items:start}.split{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:22px;align-items:start}
.card{background:var(--panel);border:1px solid var(--line);border-radius:var(--radius);box-shadow:0 2px 10px rgba(15,23,42,.03)}.panel,.section-card{padding:22px}.panel{margin-bottom:22px}
.section-heading{display:flex;align-items:flex-start;justify-content:space-between;gap:18px;margin-bottom:18px}.section-heading h2{margin:2px 0 4px}.section-heading p{margin:0;color:var(--muted);max-width:760px}.eyebrow{display:block;font-size:11px;line-height:1.2;font-weight:700;text-transform:uppercase;letter-spacing:.08em;color:#667085;margin-bottom:5px}.section-note{margin-top:14px;padding-top:14px;border-top:1px solid #edf0f3;color:var(--muted);font-size:12px}
.grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:16px;margin-bottom:22px}.metrics-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:16px}.metric{padding:20px;min-height:104px;display:flex;flex-direction:column;justify-content:center}.metric span{display:block;color:var(--muted);font-size:12px}.metric strong{display:block;font-size:26px;line-height:1.2;margin-top:8px;font-variant-numeric:tabular-nums}
.toolbar{display:flex;gap:14px;align-items:center;justify-content:space-between;margin-bottom:18px;flex-wrap:wrap}.toolbar .actions{display:flex;gap:8px;flex-wrap:wrap}.search{min-width:280px}.notice{padding:13px 15px;border-radius:10px;background:#eef4ff;border:1px solid #cddcff;margin:16px 0}.notice.error{background:#fff0ee;border-color:#f4c7c1}.notice.warn{background:#fff7ed;border-color:#fed7aa}

/* Buttons */
button{border:1px solid transparent;border-radius:8px;padding:9px 13px;background:#eef1f5;color:var(--text);font-weight:600}button.primary{background:var(--accent);color:#fff}button.primary:hover{background:var(--accent2)}button.secondary{background:#fff;border-color:var(--line)}button.secondary:hover{background:#f8fafc;border-color:var(--line-strong)}button.danger{background:var(--danger-bg);color:var(--danger);border-color:#ffd4cf}button.danger.solid{background:var(--danger);border-color:var(--danger);color:#fff}button.small{padding:6px 9px;font-size:12px}.badge{display:inline-flex;padding:3px 8px;border-radius:999px;background:#eef1f5;font-size:12px;white-space:nowrap}.link-btn{border:0;background:transparent;padding:6px 4px;color:var(--text);font-weight:600}.link-btn:hover{text-decoration:underline;background:transparent}

/* Formulare */
label{display:grid;gap:6px;font-weight:600;color:#344054}input,select,textarea{width:100%;border:1px solid #cfd6df;border-radius:8px;padding:9px 10px;background:#fff;color:var(--text);min-height:40px;transition:border-color .15s,box-shadow .15s}textarea{resize:vertical;min-height:88px}input:focus,select:focus,textarea:focus{outline:0;border-color:#7ba2ff;box-shadow:0 0 0 3px rgba(33,87,214,.1)}.field-invalid{border-color:#d92d20!important;box-shadow:0 0 0 3px rgba(217,45,32,.08)!important}.field-help{font-weight:400;color:var(--muted);font-size:12px;margin-top:-1px}
.form-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px 18px}.form-grid .wide{grid-column:1/-1}.form-actions{display:flex;gap:9px;justify-content:flex-end;margin-top:20px;padding-top:18px;border-top:1px solid #edf0f3}.form-section-grid{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:24px}.form-section{border:1px solid #e7ebf0;border-radius:12px;padding:18px;margin:0;background:#fbfcfd}.form-section legend{padding:0 8px;font-weight:700;color:#344054}
.line-items{display:grid;gap:10px;margin-top:10px}.line-item{display:grid;grid-template-columns:1.4fr .55fr .7fr .55fr 36px;gap:10px;align-items:end;padding:12px;border:1px solid var(--line);border-radius:10px}.line-item.purchase{grid-template-columns:1.4fr .55fr .7fr .55fr 36px}

/* Tabellen */
.table-wrap{overflow:auto;border:1px solid var(--line);border-radius:12px;background:#fff}.data-table{width:100%;border-collapse:collapse;min-width:720px}.data-table th,.data-table td{padding:12px 14px;text-align:left;border-bottom:1px solid #edf0f3;vertical-align:middle}.data-table th{font-size:12px;color:#657084;background:#fafbfc;position:sticky;top:0;font-weight:700}.data-table tr:last-child td{border-bottom:0}.data-table tbody tr:hover{background:#fafcff}.row-actions{display:flex;gap:6px;align-items:center;flex-wrap:wrap}.money{text-align:right;font-variant-numeric:tabular-nums}.empty-state{min-height:112px;padding:28px;display:grid;place-items:center;text-align:center;color:var(--muted);border:1px dashed #d8dee8;border-radius:11px;background:#fbfcfd}.empty-inline{padding:18px;text-align:center;color:var(--muted)}
.kpi-line{display:flex;justify-content:space-between;gap:16px;padding:10px 0;border-bottom:1px solid var(--line)}.kpi-line:last-child{border-bottom:0}

/* Eigene Dialoge statt Browser-Popups */
.modal{position:fixed;inset:0;z-index:50;display:grid;place-items:center;padding:24px}.modal-backdrop{position:absolute;inset:0;background:rgba(17,24,39,.58)}.modal-card{position:relative;z-index:1;width:min(760px,96vw);max-height:92vh;overflow:auto;background:#fff;border-radius:16px;padding:26px;box-shadow:0 25px 80px rgba(0,0,0,.3)}.modal-card.modal-wide{width:min(1180px,96vw)}.modal-close{position:absolute;right:13px;top:12px;background:transparent;font-size:23px;padding:2px 8px}.modal-heading{padding-right:34px;margin-bottom:20px}.modal-heading h2{margin:2px 0 5px}.modal-heading p{margin:0;color:var(--muted)}.modal-actions{margin-bottom:0}.confirm-dialog{display:grid;grid-template-columns:48px 1fr;gap:16px;align-items:start;padding-right:34px}.confirm-dialog h2{margin:2px 0 6px}.confirm-dialog p{margin:0;color:var(--muted);line-height:1.55}.confirm-icon{width:44px;height:44px;border-radius:50%;display:grid;place-items:center;background:#eef4ff;color:var(--accent);font-size:20px;font-weight:800}.confirm-icon.danger{background:#fff0ee;color:var(--danger)}
.toast{position:fixed;right:20px;bottom:20px;z-index:80;padding:12px 16px;border-radius:10px;background:#172033;color:#fff;box-shadow:var(--shadow);max-width:420px}.toast.error{background:#7a271a;color:#fff}.toast.ok{background:#172033;color:#fff}

/* PDF */
.pdf-text-preview{max-height:340px;overflow:auto;white-space:pre-wrap;word-break:break-word;background:#f6f8fa;border:1px solid var(--line);border-radius:8px;padding:12px;font:12px/1.45 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}.pdf-meta{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px;margin:12px 0}.pdf-meta>div{border:1px solid var(--line);border-radius:9px;padding:10px;background:#fff}.pdf-meta span{display:block;color:var(--muted);font-size:11px}.pdf-meta strong{display:block;margin-top:3px;word-break:break-word}.pdf-viewer-head{padding-right:36px;margin-bottom:14px}.pdf-viewer-head h2{margin-bottom:3px}.pdf-viewer-head p{margin:0}.pdf-viewer{display:block;width:100%;height:min(72vh,900px);border:1px solid var(--line);border-radius:10px;background:#f8fafc}
pre{white-space:pre-wrap;word-break:break-word;background:#f6f8fa;padding:12px;border-radius:8px;max-height:280px;overflow:auto}

@media(max-width:1200px){.grid,.metrics-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.form-section-grid,.organization-grid{grid-template-columns:1fr}.app-shell{grid-template-columns:220px 1fr}.sidebar{width:220px}.content{padding-left:26px;padding-right:26px}}
@media(max-width:780px){.grid{grid-template-columns:1fr}.app-shell{display:block}.sidebar{transform:translateX(-105%);transition:.2s;width:260px}.sidebar.open{transform:none}.main{grid-column:auto}.topbar{padding:10px 14px;min-height:68px}.icon-btn{display:block}.userbox span{display:none}.content{padding:18px 14px 36px}.page-stack{gap:16px}.metrics-grid,.split,.organization-grid,.form-section-grid{grid-template-columns:1fr}.section-card,.panel{padding:16px}.section-heading{flex-direction:column;align-items:stretch;gap:12px}.section-heading>button{align-self:flex-start}.form-grid{grid-template-columns:1fr}.form-grid .wide{grid-column:auto}.form-section{padding:14px}.line-item,.line-item.purchase{grid-template-columns:1fr 1fr}.line-item>*:first-child{grid-column:1/-1}.search{min-width:0;width:100%}.modal{padding:10px}.modal-card{padding:20px}.pdf-meta{grid-template-columns:1fr}.pdf-viewer{height:68vh}}

/* Rollen- und Berechtigungseditor */
.role-editor-head{display:grid;grid-template-columns:minmax(240px,360px) 1fr;gap:18px;align-items:end;margin-bottom:20px}.role-editor-head .section-note{margin:0;padding:0 0 3px;border:0}
.permission-groups{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}.permission-group{border:1px solid var(--line);border-radius:12px;padding:16px;background:#fbfcfd}.permission-group h3{margin:0 0 12px}.permission-list{display:grid;gap:8px}.permission-option{display:flex;grid-template-columns:none;gap:10px;align-items:flex-start;padding:10px;border:1px solid #e7ebf0;border-radius:9px;background:#fff;font-weight:400}.permission-option input{width:18px;min-height:18px;height:18px;margin:2px 0 0;flex:0 0 18px}.permission-option span{display:block;min-width:0}.permission-option strong{display:block;color:var(--text);font-size:13px}.permission-option small{display:block;color:var(--muted);font:11px/1.4 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;margin-top:2px;word-break:break-word}.permission-option.is-disabled{opacity:.65;background:#f5f6f8}
@media(max-width:780px){.role-editor-head,.permission-groups{grid-template-columns:1fr}}

/* Persönliche Benutzerübersicht */
.detail-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px 18px}
.detail-grid>div{padding:12px 14px;border:1px solid var(--line);border-radius:10px;background:var(--panel-subtle);min-width:0}
.detail-grid span{display:block;color:var(--muted);font-size:11px;margin-bottom:3px}
.detail-grid strong{display:block;overflow-wrap:anywhere}
.profile-metrics{grid-template-columns:repeat(3,minmax(0,1fr))}
@media(max-width:900px){.detail-grid{grid-template-columns:repeat(2,minmax(0,1fr))}}
@media(max-width:780px){.detail-grid,.profile-metrics{grid-template-columns:1fr}}

/* rc8: konsistente Verwaltungsoberflächen */
.summary-strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px}
.summary-strip>div{background:var(--panel);border:1px solid var(--line);border-radius:12px;padding:14px 16px;box-shadow:0 2px 8px rgba(15,23,42,.025)}
.summary-strip span{display:block;color:var(--muted);font-size:12px;margin-bottom:4px}
.summary-strip strong{display:block;font-size:22px;font-variant-numeric:tabular-nums}
.filter-bar{display:grid;grid-template-columns:minmax(280px,1fr) minmax(150px,210px) auto;gap:12px;align-items:end;margin:0 0 16px}
.filter-search{max-width:640px}.filter-result{align-self:center;justify-self:end;color:var(--muted);font-size:13px;white-space:nowrap}
.user-table{min-width:1120px}.user-open-link{border:0;background:transparent;padding:0;text-align:left;display:grid;gap:2px;color:var(--text);font-weight:400}
.user-open-link:hover{background:transparent;color:var(--accent)}.user-open-link strong{font-size:14px}.user-open-link small{color:var(--muted);font-weight:400}
.state-pill{display:inline-flex;align-items:center;gap:5px;border-radius:999px;padding:4px 9px;font-size:12px;font-weight:700;white-space:nowrap;background:#eef1f5;color:#475467}
.state-pill.active{background:#ecfdf3;color:#067647}.state-pill.inactive{background:#f2f4f7;color:#475467}.state-pill.archived{background:#f9f5ff;color:#6941c6}.state-pill.pending{background:#fff7ed;color:#b54708}
.user-detail-heading{display:flex;justify-content:space-between;align-items:flex-start;gap:18px}.user-detail-heading .state-pill{margin-right:34px}
.user-security-summary{margin:0 0 20px}.user-edit-form{display:grid;gap:16px}.security-actions,.activity-block{margin-top:22px;padding-top:20px;border-top:1px solid var(--line)}
.action-grid{display:flex;flex-wrap:wrap;gap:9px}.section-heading.compact{margin-bottom:12px}.section-heading.compact h3{margin:0 0 3px}.section-heading.compact p{font-size:13px}
.input-action{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:8px}.input-action button{white-space:nowrap}
.secret-box{display:flex;align-items:center;gap:10px;padding:12px 14px;border:1px solid var(--line);border-radius:10px;background:var(--panel-subtle);overflow:hidden}
.secret-box code{flex:1;min-width:0;overflow-wrap:anywhere;font:13px/1.5 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}
.role-editor-section+ .role-editor-section{margin-top:24px;padding-top:22px;border-top:1px solid var(--line)}
.scope-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px 14px}.scope-option{display:grid;grid-template-columns:minmax(0,1fr) minmax(160px,210px);gap:14px;align-items:center;padding:11px 12px;border:1px solid #e7ebf0;border-radius:10px;background:#fff;font-weight:400}
.scope-option strong,.scope-option small{display:block}.scope-option small{color:var(--muted);font:11px/1.4 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;margin-top:2px}.scope-option select{min-height:36px}
.mfa-enrollment{display:grid;grid-template-columns:minmax(280px,420px) minmax(0,1fr);gap:26px;align-items:start}.qr-panel{display:grid;place-items:center;padding:18px;background:#fff;border:1px solid var(--line);border-radius:12px;min-height:320px}.qr-panel svg{max-width:100%;height:auto}.mfa-steps h3{margin-top:0}
.actions{display:flex;gap:8px;flex-wrap:wrap}
@media(min-width:1900px){.content{padding-right:48px}.topbar{padding-right:48px}}
@media(max-width:1100px){.summary-strip{grid-template-columns:repeat(2,minmax(0,1fr))}.scope-grid{grid-template-columns:1fr}.mfa-enrollment{grid-template-columns:1fr}.qr-panel{min-height:0}}
@media(max-width:780px){.summary-strip{grid-template-columns:1fr 1fr}.filter-bar{grid-template-columns:1fr}.filter-result{justify-self:start}.user-detail-heading{display:block}.user-detail-heading .state-pill{margin:8px 0 0}.scope-option{grid-template-columns:1fr}.input-action{grid-template-columns:1fr}.action-grid{display:grid;grid-template-columns:1fr 1fr}.action-grid button{width:100%}}
@media(max-width:480px){.summary-strip,.action-grid{grid-template-columns:1fr}}