/* Matrix and policy editor, promoted from the reviewed /mock design. */
.policy-theme{--policy-blue:#2563eb;--policy-purple:#8b3dc6;--policy-green:#16804e;--policy-red:#c93546;--policy-amber:#966600;--policy-cyan:#008698;--policy-pink:#c13886;--policy-orange:#c05b18;--policy-gray:#68717e}
[data-theme=dark] .policy-theme{--policy-blue:#83adff;--policy-purple:#c39aff;--policy-green:#64d8a0;--policy-red:#ff8e9b;--policy-amber:#f2c15f;--policy-cyan:#62cddb;--policy-pink:#f394c9;--policy-orange:#f3ac73;--policy-gray:#abb2bf}
@media(prefers-color-scheme:dark){
:root:not([data-theme=light]) .policy-theme{--policy-blue:#83adff;--policy-purple:#c39aff;--policy-green:#64d8a0;--policy-red:#ff8e9b;--policy-amber:#f2c15f;--policy-cyan:#62cddb;--policy-pink:#f394c9;--policy-orange:#f3ac73;--policy-gray:#abb2bf}
}
.policy-tone-blue{--tone:var(--policy-blue)}
.policy-tone-purple{--tone:var(--policy-purple)}
.policy-tone-green{--tone:var(--policy-green)}
.policy-tone-red{--tone:var(--policy-red)}
.policy-tone-amber{--tone:var(--policy-amber)}
.policy-tone-cyan{--tone:var(--policy-cyan)}
.policy-tone-pink{--tone:var(--policy-pink)}
.policy-tone-orange{--tone:var(--policy-orange)}
.policy-tone-gray{--tone:var(--policy-gray)}
.policy-sidebar>.policy-row{justify-content:space-between;gap:4px;padding:0 5px}
.policy-heading h1 .policy-row{gap:10px}
.policy-kicker>.policy-row{gap:8px;letter-spacing:0}
.policy-muted{font-size:12px;color:var(--muted);line-height:1.65}
.policy-row{display:flex;align-items:center;gap:10px;min-width:0}
.policy-badge{display:inline-flex;align-items:center;font-size:10px;line-height:1.4;border:1px solid color-mix(in srgb,var(--tone) 20%,transparent);background:color-mix(in srgb,var(--tone) 8%,var(--surface));color:var(--tone);border-radius:6px;padding:4px 7px;font-weight:650;white-space:nowrap}
.policy-grid th .policy-row{gap:8px}
.policy-cell .policy-row{gap:5px}
.policy-cell .policy-row>span{font-size:10px;color:var(--muted)}
.policy-note{display:flex;align-items:flex-start;gap:9px;background:color-mix(in srgb,var(--policy-blue) 5%,var(--surface));border:1px solid color-mix(in srgb,var(--policy-blue) 13%,var(--line));border-radius:9px;padding:12px 14px;font-size:12px;line-height:1.6;color:var(--ink-soft)}
.policy-note svg{color:var(--policy-blue);margin-top:2px}
.policy-note.warning{background:color-mix(in srgb,var(--policy-amber) 7%,var(--surface));border-color:color-mix(in srgb,var(--policy-amber) 25%,var(--line))}
.policy-note.warning svg{color:var(--policy-amber)}
.policy-card{background:var(--surface);border:1px solid var(--line);border-radius:12px;overflow:hidden;flex-shrink:0}
.policy-card-head{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:16px 18px;border-bottom:1px solid var(--line);flex-shrink:0}
.policy-card-head h2{margin:0;font-size:14px;font-weight:650}
.policy-segments{display:inline-grid;grid-auto-flow:column;grid-auto-columns:1fr;position:relative;background:var(--surface-2);border:1px solid var(--line-strong);border-radius:8px;padding:3px;gap:0;min-width:322px;isolation:isolate}
.policy-segments button{border:0;background:none;border-radius:5px;color:var(--muted);font-size:11px;font-weight:500;min-height:30px;padding:5px 12px;z-index:1;white-space:nowrap}
.policy-segments button[aria-pressed=true]{color:var(--tone);font-weight:750}
.policy-selection{position:absolute;top:3px;bottom:3px;left:3px;width:calc((100% - 6px) / var(--options));transform:translateX(calc(var(--selection) * 100%));border:1px solid color-mix(in srgb,var(--tone) 50%,transparent);border-radius:5px;background:color-mix(in srgb,var(--tone) 18%,var(--surface));transition:transform .18s ease,width .18s ease,background .18s ease;box-shadow:0 1px 3px #0000000c}
.policy-rule-tabs{display:flex;align-items:center;gap:8px;overflow:auto;flex-shrink:0;padding:2px 0 8px}
.policy-rule-tab{display:flex;align-items:center;gap:8px;white-space:nowrap;padding:10px 13px;background:var(--surface);border:1px solid var(--line);border-radius:9px;font-size:12px;color:var(--ink-soft)}
.policy-rule-tab.selected{border-color:var(--policy-purple);background:color-mix(in srgb,var(--policy-purple) 7%,var(--surface));color:var(--policy-purple)}
.policy-rule-tab .policy-badge{font-size:9px;padding:2px 5px}
.policy-editor-layout{display:grid;grid-template-columns:minmax(0,1fr) 305px;gap:18px;min-height:0;flex:1}
.policy-editor{display:flex;flex-direction:column;min-height:0;flex-shrink:1}
.policy-editor-middle{overflow:auto;min-height:0;flex:1}
.policy-editor-form{padding:20px;display:flex;flex-direction:column;gap:18px}
.policy-metadata{display:grid;grid-template-columns:minmax(0,1.6fr) minmax(0,1fr);gap:16px}
.policy-field{display:flex;flex-direction:column;gap:7px;min-width:0;font-size:11px;font-weight:600;color:var(--ink-soft)}
.policy-field small{font-weight:400;color:var(--muted)}
.policy-input,.policy-field input,.policy-field select,.policy-condition input,.policy-condition select{width:100%;min-width:0;border:1px solid var(--line-strong);border-radius:7px;background:var(--surface);padding:9px 11px;font-size:12px;color:var(--ink);height:38px}
.policy-input:focus,.policy-field input:focus,.policy-condition input:focus,.policy-code:focus{outline:2px solid color-mix(in srgb,var(--policy-purple) 55%,transparent);outline-offset:1px}
.policy-scope{font-size:11px;color:var(--muted);margin-top:-8px}
.policy-behavior{display:flex;gap:15px;align-items:center;border-top:1px solid var(--line);padding-top:18px}
.policy-behavior>.policy-field{min-width:210px}
.policy-behavior>.policy-muted{padding-top:20px;max-width:350px}
.policy-editor-tabs{display:flex;gap:4px;border-bottom:1px solid var(--line)}
.policy-editor-tabs button{border:none;border-radius:0;background:none;padding:10px 12px;display:flex;align-items:center;gap:7px;font-size:12px;border-bottom:2px solid transparent;color:var(--muted)}
.policy-editor-tabs button.selected{color:var(--policy-purple);border-bottom-color:var(--policy-purple)}
.policy-tab-body{display:flex;flex-direction:column;gap:14px}
.policy-tab-body h3{font-size:13px}
.policy-tab-body>.policy-muted{margin-top:-8px}
.policy-condition-group{padding:13px;border:1px solid var(--line);border-radius:8px;display:flex;flex-direction:column;gap:10px;background:var(--surface-2)}
.policy-condition-group .policy-condition-group{background:var(--surface);border-left:3px solid color-mix(in srgb,var(--policy-purple) 45%,var(--surface))}
.policy-condition-group select{font-size:11px;padding:7px 20px 7px 8px}
.policy-condition{display:grid;grid-template-columns:minmax(90px,1fr) 75px minmax(90px,1fr) 30px;gap:7px}
.policy-condition input{padding:7px;font-size:11px}
.policy-condition .icon-button{width:28px;min-width:28px;padding:4px}
.policy-condition-group .button{font-size:11px;padding:5px 8px;min-height:28px;background:transparent}
.policy-mask-row{display:grid;grid-template-columns:minmax(100px,1fr) auto;align-items:center;gap:14px;border-bottom:1px solid var(--line);padding:13px 0}
.policy-mask-head{font-size:10px;color:var(--muted);letter-spacing:.7px;text-transform:uppercase;padding-top:0}
.policy-mask-row code{font-size:12px}
.policy-mask-row small{display:block;color:var(--muted);font-size:10px}
.policy-mask-row .policy-segments{min-width:230px}
.policy-mask-row .policy-segments button{padding:5px 9px}
.policy-editor-footer{display:flex;justify-content:space-between;gap:10px;padding:14px 18px;border-top:1px solid var(--line);background:var(--surface-2);flex-shrink:0}
.policy-editor-footer .button{font-size:12px;padding:7px 10px;min-height:34px}
.policy-editor-footer .policy-muted{font-size:10px}
.policy-editor-footer .policy-delete{color:var(--policy-red)}
.policy-editor .form-error{padding:0 18px;font-size:12px}
.policy-editor .form-error:not(:empty){padding:10px 18px}
.policy-preview{min-height:0;display:flex;flex-direction:column}
.policy-preview-body{padding:18px;display:flex;flex-direction:column;gap:17px;overflow:auto;min-height:0}
.policy-preview-body>.policy-badge{align-self:flex-start}
.policy-preview .policy-code{font-size:11px}
.policy-code{display:block;width:100%;padding:13px;border:1px solid var(--line-strong);border-radius:8px;background:var(--surface-2);color:var(--ink-soft);font:11px/1.8 var(--font-mono);resize:vertical;white-space:pre-wrap;overflow-wrap:anywhere;tab-size:2}
.policy-preview-button{background:color-mix(in srgb,var(--policy-purple) 9%,var(--surface));color:var(--policy-purple);border-color:color-mix(in srgb,var(--policy-purple) 25%,var(--line));justify-content:center;font-size:12px}
.policy-preview-output{display:flex;flex-direction:column;gap:14px;padding-top:20px;border-top:1px dashed var(--line-strong)}
.policy-preview-output h3{font-size:13px}
.policy-preview-icon{color:var(--policy-purple);background:color-mix(in srgb,var(--policy-purple) 8%,var(--surface));display:grid;place-items:center;width:48px;height:48px;border-radius:12px}
.policy-preview-output .policy-row{flex-wrap:wrap;gap:5px}
.policy-preview-facts{display:grid;grid-template-columns:1fr 1fr;font-size:11px;gap:10px;margin:0}
.policy-preview-facts dt{color:var(--muted)}
.policy-preview-facts dd{margin:0;text-align:right}
@media(min-width:1700px){
.policy-editor-layout{grid-template-columns:minmax(0,1fr) 340px}
}
@media(max-width:1250px){
.policy-sidebar>.policy-row img{width:125px}
.policy-editor-layout{grid-template-columns:minmax(0,1fr) 270px;gap:12px}
.policy-editor-form{padding:16px}
.policy-editor-footer{flex-wrap:wrap}
.policy-editor-footer>.policy-row:last-child{margin-left:auto}
.policy-mask-row{grid-template-columns:1fr}
.policy-mask-head{display:none}
.policy-condition{grid-template-columns:minmax(70px,1fr) 65px minmax(70px,1fr) 25px}
.policy-condition-group{padding:9px}
.policy-behavior{align-items:stretch;flex-direction:column;gap:7px}
.policy-behavior>.policy-muted{padding-top:0}
}
@media(max-width:1050px){
.policy-editor-layout{grid-template-columns:1fr;overflow:auto}
.policy-editor{min-height:650px;max-height:calc(100dvh - 100px);flex-shrink:0}
.policy-preview{max-height:none;overflow:visible}
.policy-preview-body{overflow:visible}
.policy-mask-row{grid-template-columns:1fr auto}
.policy-editor-layout{flex:none;overflow:visible}
.policy-heading>.policy-row{flex-wrap:wrap;justify-content:flex-end}
.policy-metadata{grid-template-columns:1fr 1fr}
.policy-behavior{flex-direction:row;align-items:center}
.policy-behavior>.policy-muted{padding-top:18px}
}
@media(max-width:760px){
.policy-topbar>.policy-row:first-child{flex-direction:column;align-items:flex-start;gap:3px}
.policy-topbar>.policy-row:first-child>span:last-child{font-size:10px}
.policy-topbar>.policy-row:last-child{gap:3px}
.policy-heading h1 .policy-row{flex-wrap:wrap}
.policy-heading .policy-kicker .policy-row{flex-wrap:wrap}
.policy-grid tr>th:first-child .policy-row{align-items:flex-start}
.policy-rule-tabs{max-width:100%}
.policy-editor{min-height:680px}
.policy-metadata{grid-template-columns:1fr}
.policy-mask-row{grid-template-columns:1fr}
.policy-behavior{flex-direction:column;align-items:stretch}
.policy-behavior>.policy-muted{padding-top:0}
.policy-condition{grid-template-columns:1fr 70px 28px}
.policy-condition input:nth-child(3){grid-column:1/3;grid-row:2}
.policy-condition .icon-button{grid-column:3;grid-row:1/3}
.policy-editor-tabs button{font-size:11px;padding:9px 6px;gap:4px}
.policy-editor-tabs button svg{width:13px}
.policy-editor-footer .policy-muted{display:none}
.policy-editor-footer{padding:12px}
.policy-editor-footer>.policy-row{gap:6px}
.policy-editor-footer .button{font-size:11px;padding:6px 8px}
.policy-note{font-size:11px}
}
@media(prefers-reduced-motion:reduce){
.policy-theme *{transition:none!important;scroll-behavior:auto!important}
}
.matrix-main{max-width:1640px;width:100%;min-width:0}
.matrix-page{min-width:0}
.matrix-wrap{overflow-x:auto;isolation:isolate;scrollbar-color:var(--line-strong) var(--surface-2)}
.access-matrix{border-collapse:separate;border-spacing:0;table-layout:fixed;width:max-content;min-width:100%;white-space:normal}
.access-matrix th,.access-matrix td{min-width:155px;width:155px;border-top:0;border-right:1px solid var(--line);border-bottom:1px solid var(--line)}
.access-matrix tr>:last-child{border-right:0}
.access-matrix th{font-size:12px;text-transform:none;letter-spacing:0;color:var(--ink);font-weight:600;white-space:normal}
/* The page scrolls the matrix down; matrix-view.js slides the role row along under the top bar. */
.access-matrix thead th{position:sticky;top:0;z-index:3;background:var(--surface-2);height:78px;transform:translateY(var(--matrix-head-shift,0px));will-change:transform}
.access-matrix .matrix-connection,.access-matrix .matrix-corner{position:sticky;left:0;min-width:220px;width:220px;z-index:2;background:var(--surface)}
.access-matrix thead .matrix-corner{z-index:4;background:var(--surface-2)}
.access-matrix .matrix-role-label{padding:8px 0;white-space:normal;align-items:flex-start}
.access-matrix small{display:block;color:var(--muted);font-size:10px;font-weight:400;margin-top:4px;overflow-wrap:anywhere}
.matrix-connection .matrix-column{display:flex;align-items:center;gap:10px;white-space:normal}
.matrix-connection .connector-logo{width:32px;height:32px;font-size:12px}
.matrix-cell{min-height:72px;border:1px solid transparent}
.matrix-cell:hover,.matrix-cell:focus-visible{border-color:var(--policy-purple);background:color-mix(in srgb,var(--policy-purple) 5%,var(--surface))}
.matrix-none{display:flex;flex-direction:column;justify-content:center;gap:3px;border:1px dashed var(--line-strong)}
.matrix-entities th{font-size:12px}
.matrix-entities td:nth-child(2){min-width:350px}
.matrix-rules-button{display:inline-flex;align-items:center;gap:7px;color:var(--policy-purple);font-size:12px;white-space:nowrap}
.policy-page{display:flex;flex-direction:column;gap:14px;min-height:580px;height:calc(100dvh - 210px)}
.policy-editor-form{border:0;margin:0;min-width:0}
.policy-editor-form:disabled{opacity:.8}
.policy-editor-form>input,.policy-tab-body input,.policy-condition input{font:inherit;color:var(--ink);background:var(--surface);border:1px solid var(--line-strong);border-radius:6px;min-width:0;padding:8px}
.policy-tab-body>.policy-row{flex-wrap:wrap}
.policy-tab-body>.policy-row input{flex:1}
.policy-conditions{display:flex;flex-direction:column;gap:14px}
.policy-preview-facts dd{overflow-wrap:anywhere;white-space:pre-wrap}
.policy-editor-footer>.policy-row{flex-wrap:wrap}
.policy-preview-button:disabled{opacity:.55}
.policy-editor-form .policy-code{font-weight:400}
@media(max-width:1050px){.policy-page{height:auto;min-height:0}.policy-editor-layout{flex:none;overflow:visible;grid-template-columns:minmax(0,1fr)}.policy-editor{min-height:600px;max-height:calc(100dvh - 100px)}.policy-preview{max-height:none}.policy-preview-body{overflow:visible}}
@media(max-width:650px){.access-matrix .matrix-connection,.access-matrix .matrix-corner{width:155px;min-width:155px}.access-matrix th,.access-matrix td{min-width:145px;width:145px}.policy-page>.policy-row{flex-wrap:wrap}.policy-editor-footer .policy-muted{display:none}.policy-mask-row{grid-template-columns:1fr}.policy-row{flex-wrap:wrap}.policy-condition-group{padding:9px}.policy-segments{max-width:100%}.policy-editor{min-height:620px}.policy-rule-tabs{max-width:100%}.policy-preview .policy-row{flex-wrap:wrap}}
@media(prefers-reduced-motion:reduce){.policy-theme *{transition:none!important;scroll-behavior:auto!important}}

.matrix-copy-choice{grid-column:1/-1;display:flex;align-items:center;gap:10px;font-size:13px}.matrix-copy-choice input{width:16px;height:16px;flex:none}

.matrix-copy-preview{border:1px solid var(--line);border-radius:8px;padding:12px 16px;margin:16px 0;font-size:12px}.matrix-copy-preview summary{cursor:pointer}.matrix-copy-preview details,.matrix-copy-preview p{margin-top:12px}.matrix-copy-preview pre{white-space:pre-wrap;overflow-wrap:anywhere;margin-top:8px}

.matrix-preview-dialog{width:min(960px,calc(100vw - 32px));max-width:960px}.matrix-preview-controls{display:flex;align-items:end;gap:16px}.matrix-preview-controls .form-field{flex:1;min-width:0}.matrix-preview-controls select{width:100%}.matrix-preview-json{padding:16px;background:var(--surface-2);border:1px solid var(--line);border-radius:8px;max-height:380px;overflow:auto;white-space:pre-wrap;overflow-wrap:anywhere;font-size:12px}.matrix-preview-results{min-height:100px}.matrix-preview-dialog .profile-note{margin:10px 0}.matrix-entities th:last-child,.matrix-entities td:last-child{width:1%;text-align:right}@media(max-width:620px){.matrix-preview-controls{align-items:stretch;flex-direction:column}}
.matrix-preview-dialog .dialog-fields{display:flex;flex-direction:column;gap:16px}
.matrix-preview-dialog .people-search{width:100%;max-width:none;flex:none;height:40px}
.matrix-preview-dialog .form-error:empty{display:none}
.policy-topbar{display:flex;align-items:center;justify-content:space-between;gap:16px}.matrix-rules-toggle{background:transparent;border:0;cursor:pointer;white-space:nowrap}.matrix-rules-toggle svg{transition:transform .18s}.matrix-rules-toggle[aria-expanded=true] svg{transform:rotate(180deg)}
.matrix-entities .matrix-rule-detail-row>td{padding:0;border:0;text-align:left;width:auto;min-width:0;line-height:0}.matrix-rule-reveal{line-height:1.5;display:grid;grid-template-rows:0fr;transition:grid-template-rows .2s ease;background:var(--surface-2)}.matrix-rule-reveal.expanded{grid-template-rows:1fr}.matrix-rule-reveal-inner{min-height:0;overflow:hidden}.matrix-rule-list{padding:12px 20px 16px;border-top:1px solid var(--line)}.matrix-rule-item{display:grid;grid-template-columns:minmax(120px,1fr) auto auto;align-items:center;gap:16px;padding:10px 0;border-bottom:1px solid var(--line);font-size:12px}.matrix-rule-name{display:flex;align-items:center;gap:8px;color:var(--ink);text-decoration:none;overflow-wrap:anywhere}.matrix-rule-summary{color:var(--ink-soft)}.matrix-new-rule{margin-top:12px}.matrix-rule-list .profile-note{margin:0}.matrix-rule-list .person-actions{justify-content:end}
@media(max-width:620px){.matrix-rule-item{grid-template-columns:minmax(0,1fr) auto auto;gap:10px}.matrix-rule-summary{grid-column:1}.policy-topbar{flex-wrap:wrap}}
@media(prefers-reduced-motion:reduce){.matrix-rule-reveal,.matrix-rules-toggle svg{transition:none}}
.matrix-main:has(.matrix-detail){max-width:1240px}
.matrix-rule-item .enabled-switch{font-size:12px}
.policy-editor-only{grid-template-columns:minmax(0,1fr)}.policy-role-selection{border:1px solid var(--line);border-radius:8px;padding:10px 12px;min-width:0;margin:0}.policy-role-selection legend{font-size:11px;font-weight:600;color:var(--ink-soft);padding:0 4px}.policy-role-option{display:flex;align-items:center;gap:8px;font-size:12px;padding:5px 0}.policy-role-option input{width:15px;height:15px;flex:none}.policy-role-options{max-height:150px;overflow:auto;border-top:1px solid var(--line);margin-top:6px;padding-top:6px}.policy-role-selection:has(input[aria-label="Apply to all roles"]:checked) .policy-role-options{opacity:.6}

/* Guided rule configuration. */
.access-stepper{display:flex;gap:8px;padding:16px 24px;border-bottom:1px solid var(--line,#e5e7eb);flex-wrap:wrap}
.access-stepper .button{border:0;background:transparent;color:#64748b}
.access-stepper [aria-current="step"]{background:#ede9fe;color:#6d28d9;font-weight:600}
.access-review-section{border:1px solid #e5e7eb;border-radius:12px;padding:18px;margin:16px 0;background:#fafafa}
.access-review-section .policy-row{justify-content:space-between}
.access-field-summary{padding-left:22px;line-height:1.9}
@media(max-width:700px){.access-stepper{padding:12px;gap:4px}.access-stepper .button{font-size:12px}.access-review-section{padding:12px}}


.matrix-rule-edit{display:inline-flex;align-items:center;justify-content:center}.matrix-rule-item .matrix-rule-name{min-width:0}

.matrix-mode-control{display:flex;align-items:center;gap:14px;flex-wrap:wrap}.matrix-mode-control .matrix-rules-toggle{display:inline-flex;align-items:center;gap:6px;color:var(--ink-soft);font-size:12px;padding:4px 0}.matrix-mode-control .matrix-rules-toggle:hover{color:var(--ink)}

.matrix-mode-control .policy-segments{box-sizing:border-box;width:364px;min-width:364px;flex:0 0 364px;grid-template-columns:repeat(3,minmax(0,1fr))}.matrix-rules-slot{display:inline-flex;align-items:center}.matrix-rules-slot.is-hidden{visibility:hidden}

/* Rule wizard uses the shared popup frame; only its body scrolls. */
.rule-wizard-dialog{width:min(860px,calc(100vw - 32px));height:calc(100dvh - 40px);max-width:860px}
.rule-wizard-dialog .dialog-header{padding:18px 24px 0}
.rule-wizard-dialog .dialog-title-row h2{font-size:18px}
.rule-wizard-dialog .dialog-title-row .enabled-switch{margin-left:auto}
.rule-wizard-dialog .dialog-close{margin-left:4px}
.rule-wizard-dialog .dialog-description{margin:6px 0 14px;padding:0;font-size:12px}
.rule-wizard-dialog .access-stepper{padding:0 0 12px;border:0;gap:6px}
.rule-wizard-dialog .access-stepper .button{font-size:12px;color:var(--muted);flex:1}
.rule-wizard-dialog .access-stepper [aria-current=step]{background:var(--surface-2);color:var(--ink)}
.rule-wizard-dialog .access-stepper{gap:0;padding:8px 0 18px;flex-wrap:nowrap}
.rule-wizard-step{position:relative;display:flex;flex:1;align-items:center;justify-content:center;gap:10px;border:0;background:none;color:var(--muted);font-size:12px;padding:8px 12px;box-shadow:none}
.rule-wizard-dialog .rule-wizard-step[aria-current=step]{background:none;color:var(--ink);font-weight:650}
.rule-wizard-step:not(:last-child)::after{content:'';position:absolute;right:-12px;width:24px;height:1px;background:var(--line-strong)}
.rule-step-number{display:grid;place-items:center;width:28px;height:28px;flex:none;border-radius:50%;border:1px solid var(--line-strong);background:var(--surface-2);font-weight:600}
.rule-wizard-step[aria-current=step] .rule-step-number{background:var(--ink);border-color:var(--ink);color:var(--surface)}
.rule-wizard-step.is-complete .rule-step-number{background:color-mix(in srgb,var(--allow) 12%,var(--surface));border-color:var(--allow);color:var(--allow)}
.rule-wizard-facts{display:grid;grid-template-columns:1fr 1fr;gap:20px;padding:18px;background:var(--surface-2);border:1px solid var(--line);border-radius:8px}
.rule-wizard-dialog .policy-mask-row .policy-segments{box-sizing:border-box;width:300px;min-width:300px;grid-template-columns:repeat(3,minmax(0,1fr))}
.rule-wizard-dialog .policy-mask-row .policy-segments button{min-width:0;padding:5px 8px}
.rule-wizard-dialog .policy-mask-row .policy-segments button:disabled{opacity:.35;cursor:not-allowed}
.matrix-preview-results:empty{display:none}
.preview-summary{border:1px solid var(--line);border-radius:10px;overflow:hidden;margin-top:16px}
.preview-stats{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));background:var(--surface-2);padding:18px 0}
.preview-stat{display:flex;flex-direction:column;gap:5px;padding:0 18px;border-right:1px solid var(--line)}.preview-stat:last-child{border:0}
.preview-stat strong{font-size:23px;font-weight:600;line-height:1.2}.preview-stat span{font-size:11px;color:var(--muted)}
.preview-summary-details{display:flex;align-items:start;justify-content:space-between;gap:20px;padding:18px;border-top:1px solid var(--line)}
.preview-rules,.preview-exceptions{display:flex;flex-direction:column;gap:8px;font-size:12px}.preview-rules>div{display:flex;gap:6px;flex-wrap:wrap}.preview-detail-label,.preview-muted{font-size:11px;color:var(--muted)}
.preview-sample-note{display:flex;gap:8px;align-items:center;padding:0 18px 16px;color:var(--muted);font-size:11px;line-height:1.6}.preview-sample-note svg{flex:none}
.preview-audit{border-top:1px solid var(--line);padding:12px 18px;font-size:11px;color:var(--muted)}.preview-audit summary{cursor:pointer}.preview-audit code{display:block;margin-top:8px;overflow-wrap:anywhere;color:var(--ink-soft)}
@media(max-width:650px){.rule-wizard-dialog .policy-mask-row .policy-segments{width:100%;min-width:0}.preview-stats{grid-template-columns:repeat(2,minmax(0,1fr));gap:18px 0}.preview-stat:nth-child(2){border:0}.preview-summary-details{flex-wrap:wrap}}
.rule-type-badge{display:inline-flex;align-items:center;width:fit-content;flex:none;font-size:10px;line-height:1.6;font-weight:600;border:1px solid var(--line-strong);border-radius:5px;padding:2px 7px;color:var(--muted);background:var(--surface)}
.matrix-new-rules{display:flex;gap:8px;flex-wrap:wrap}.matrix-rule-name{flex-wrap:wrap}
.matrix-rule-item{grid-template-columns:auto minmax(0,1fr) auto;gap:12px}
.matrix-rule-item>.rule-type-badge{width:52px;justify-content:center}
.matrix-rule-label{display:flex;align-items:center;gap:6px;min-width:0}
.matrix-rule-label .matrix-rule-name{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
/* "Edit label…" appears when the pointer is anywhere on the rule row, or when keyboard focus is inside it. */
.matrix-rule-rename{min-height:26px;padding:2px 8px;font-size:12px;color:var(--muted);white-space:nowrap;opacity:0;pointer-events:none;transition:opacity .12s ease}
.matrix-rule-item:hover .matrix-rule-rename,.matrix-rule-item:focus-within .matrix-rule-rename{opacity:1;pointer-events:auto}
.matrix-rule-rename:hover{color:var(--ink)}
@media(hover:none){.matrix-rule-rename{opacity:1;pointer-events:auto}}
.rule-disabled{display:inline-flex;align-items:center;font-size:11px;line-height:1;color:var(--muted);white-space:nowrap;padding:4px 9px;border:1px solid var(--line);border-radius:999px;background:var(--surface-2);margin-right:4px}
.rule-type-read{--rule-color:var(--policy-blue,#2563eb)}.rule-type-write{--rule-color:var(--policy-purple,#8b3dc6)}
.rule-type-badge.rule-type-read,.rule-type-badge.rule-type-write{color:var(--rule-color);background:color-mix(in srgb,var(--rule-color) 9%,var(--surface));border-color:color-mix(in srgb,var(--rule-color) 25%,var(--line))}
.matrix-new-rule.rule-type-read,.matrix-new-rule.rule-type-write{color:var(--rule-color)}
.rule-wizard-dialog .rule-wizard-step[aria-current=step] .rule-step-number{background:var(--rule-color);border-color:var(--rule-color);color:var(--surface)}
.rule-wizard-dialog .policy-editor-form{margin:0;border:0;padding:22px 24px;min-width:0;gap:18px}
.rule-wizard-dialog .policy-editor-form h3{font-size:14px;font-weight:600}
.rule-wizard-dialog .policy-behavior{padding:0;border:0;display:block}
.rule-wizard-operation{display:grid;grid-template-columns:1fr 1fr;gap:16px}
.rule-wizard-dialog .policy-editor-footer{padding:14px 24px;flex-wrap:nowrap;justify-content:flex-end}
.rule-wizard-dialog .form-error{margin:0;padding:0 24px 18px}
.rule-wizard-dialog .form-error:empty{display:none}
.rule-wizard-dialog .policy-delete{color:var(--ink)}
.rule-wizard-dialog .policy-delete:hover{color:var(--block);background:color-mix(in srgb,var(--block) 9%,var(--surface))}
@media(max-width:650px){
  .rule-wizard-dialog{width:calc(100vw - 20px);height:calc(100dvh - 24px);max-height:calc(100dvh - 24px)}
  .rule-wizard-dialog .dialog-header{padding:16px 16px 0}
  .rule-wizard-dialog .policy-editor-form{padding:18px 16px}
  .rule-wizard-dialog .policy-editor-footer{padding:12px;flex-wrap:wrap;gap:8px}
  .rule-wizard-dialog .policy-editor-footer>.policy-row{gap:6px}
  .rule-wizard-dialog .policy-segments{min-width:0;width:100%}
  .rule-wizard-operation{grid-template-columns:1fr}
  .rule-wizard-step{flex-direction:column;gap:6px;padding:6px;font-size:11px}
  .rule-wizard-step:not(:last-child)::after{right:-10px;width:20px;top:20px}
}

.rule-wizard-dialog .policy-rule-section{display:flex;flex-direction:column;gap:14px;min-width:0}
.rule-wizard-dialog .policy-rule-section+.policy-rule-section{border-top:1px solid var(--line);padding-top:24px;margin-top:6px}
.rule-wizard-dialog .policy-rule-section>h3{color:var(--ink);font-size:16px;margin:0}
.policy-field-body{display:flex;flex-direction:column;gap:14px}

.policy-field-body>.policy-row{flex-wrap:wrap}
.policy-field-body .policy-input{flex:1;min-width:160px}
/* Shared rule library and reuse controls. */
.matrix-tabs{display:flex;gap:24px;border-bottom:1px solid var(--line);margin-bottom:18px;flex-shrink:0}
.matrix-tabs a{padding:12px 2px;color:var(--muted);text-decoration:none;border-bottom:2px solid transparent;font-weight:600}
.matrix-tabs a[aria-current="page"]{color:var(--ink);border-bottom-color:currentColor}
.matrix-library{min-width:0;display:flex;flex-direction:column;gap:16px}
.matrix-library-toolbar{flex-wrap:wrap;gap:10px}
.matrix-library-toolbar select{max-width:240px;min-height:36px}
.matrix-library-table{min-width:850px}
.matrix-library-name,.matrix-library-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
.matrix-library-rule-link{font-weight:600;color:inherit;text-decoration:none}
.matrix-library-rule-link:hover{text-decoration:underline}
.matrix-role-stack-wrap{margin-bottom:6px}
.matrix-role-stack{display:flex;align-items:center;gap:8px;max-width:100%;padding:4px 0;border:0;background:none;border-radius:5px;font-size:11px;text-align:left}
.matrix-role-stack:focus-visible{outline:2px solid var(--policy-blue);outline-offset:3px}
.matrix-role-markers{display:flex;align-items:center;padding-right:2px;flex-shrink:0}
.matrix-role-dot{display:inline-block;width:24px;height:24px;border:2px solid var(--surface);border-radius:50%;flex-shrink:0;box-shadow:0 0 0 1px var(--line)}
.matrix-role-markers .matrix-role-dot+.matrix-role-dot{margin-left:-9px}
.matrix-role-more{white-space:nowrap;color:var(--muted)}
.matrix-role-tooltip[popover]{position:fixed;inset:auto;margin:0;padding:14px;border:1px solid var(--line-strong);border-radius:10px;background:var(--surface);color:var(--ink);box-shadow:var(--shadow-sm);font:12px var(--font-sans);overflow:auto;max-height:320px}
.matrix-role-tooltip ul{list-style:none;padding:0;margin:12px 0 0;display:grid;gap:8px}
.matrix-role-tooltip li{display:flex;align-items:center;gap:9px;overflow-wrap:anywhere}
.matrix-role-tooltip .matrix-role-dot{width:14px;height:14px;border-width:1px}
.matrix-library-table td>small{display:block;color:var(--muted);margin-top:4px}
.matrix-role-options{display:grid;gap:12px;grid-column:1/-1}
.matrix-assignment-dialog .dialog-fields{display:flex;flex-direction:column}
.matrix-assignment-dialog .dialog-fields>input,.matrix-assignment-dialog .dialog-fields>select{width:100%;min-width:0}
.policy-clone-button{margin-right:auto}
.policy-rule-name{margin-bottom:18px}
@media(max-width:600px){.matrix-library-toolbar .people-search{flex-basis:100%}.matrix-library-toolbar select{flex:1;min-width:0}.rule-wizard-dialog .policy-editor-footer{padding:14px 12px;gap:8px}.rule-wizard-dialog .policy-editor-footer .button{padding-left:10px;padding-right:10px}}

/* Natural-language authoring uses the same fixed popup bars as the rule editor. */
.ai-rules-dialog {width:min(920px,calc(100vw - 32px));max-width:920px;}
.ai-rule-composer,.ai-rule-edit {border:0;margin:0;padding:0;min-width:0;display:grid;gap:16px;}
.ai-rule-composer textarea {width:100%;resize:vertical;min-height:100px;}
.ai-rule-review {display:grid;gap:12px;}
.ai-rule-card {border:1px solid var(--border);border-radius:12px;padding:16px;}
.ai-rule-card h4 {margin:0;flex:1;}
.ai-rule-card p {overflow-wrap:anywhere;}
.ai-rule-questions fieldset {border:1px solid var(--border);border-radius:10px;padding:12px;margin-bottom:12px;}
.ai-question-options {display:grid;gap:10px;}
.ai-question-options label {display:flex;gap:10px;align-items:flex-start;cursor:pointer;}
.ai-question-options small {display:block;color:var(--muted);}
.ai-role-choice {display:inline-flex;gap:6px;margin:6px 14px 6px 0;align-items:center;}
.policy-footer-tools {display:flex;flex-wrap:wrap;gap:8px;margin-right:auto;}
.policy-editor-footer .policy-footer-tools .policy-clone-button {margin-right:0;}
.ai-rules-dialog .dialog-body {padding:20px 24px;}
.ai-rules-dialog .dialog-description {padding:0;margin:8px 0 0;}
.ai-rule-composer textarea {box-sizing:border-box;font:inherit;line-height:1.5;padding:12px;border:1px solid var(--line);border-radius:10px;background:var(--surface);color:var(--text);}
.ai-rule-card,.ai-rule-questions fieldset {border-color:var(--line);}
.ai-rule-review h3,.ai-rule-review h4 {margin:4px 0;}
.ai-rule-review p {margin:8px 0;}
.ai-rule-composer .form-error:empty,.ai-rule-composer [role=status]:empty,.ai-rule-questions:empty {display:none;}
@media(max-width:600px){.ai-rules-dialog .dialog-body{padding:16px}.ai-rules-dialog .dialog-footer{flex-wrap:wrap}.policy-footer-tools{flex:1;min-width:0}.policy-footer-tools .button{white-space:nowrap}}
/* One accent and icon for every AI rule creation entry point. */
.button.ai-action-button {color:#6d28d9;background:#f3eaff;border:1px solid #cfb5f6;}
.button.ai-action-button:hover:not(:disabled) {color:#5b21b6;background:#e9d9ff;border-color:#a77ade;}
.button.ai-action-button:focus-visible {outline:2px solid #8b5cf6;outline-offset:3px;}
[data-appearance="dark"] .button.ai-action-button {color:#e2caff;background:#362147;border-color:#755294;}
.matrix-copy-tabs {grid-column:1/-1;display:flex;gap:4px;padding:4px;border-radius:10px;background:var(--surface-2);}
.matrix-copy-tabs [role="tab"] {flex:1;justify-content:center;border:0;box-shadow:none;background:transparent;}
.matrix-copy-tabs [aria-selected="true"] {background:var(--surface);box-shadow:0 1px 3px #0002;}
.matrix-copy-panel {grid-column:1/-1;min-width:0;border:0;padding:0;margin:0;display:grid;gap:14px;}
.matrix-copy-panel[hidden] {display:none;}

/* Preview before saving: greyed, still clickable, and pointing at Save. */
.icon-button.is-unavailable{opacity:.38;cursor:not-allowed}
.icon-button.is-unavailable:hover{opacity:.55}
.transient-hint{position:absolute;z-index:1000;padding:6px 10px;border-radius:6px;background:var(--ink);color:var(--surface,#fff);font-size:12px;font-weight:600;box-shadow:0 4px 14px rgba(0,0,0,.18);pointer-events:none;animation:transient-hint-in .15s ease-out}
@keyframes transient-hint-in{from{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}
.primary-button.needs-attention{animation:needs-attention 1s ease-in-out 2}
@keyframes needs-attention{0%,100%{box-shadow:0 0 0 0 transparent}50%{box-shadow:0 0 0 6px color-mix(in srgb,var(--accent-bright) 45%,transparent)}}
@media(prefers-reduced-motion:reduce){.primary-button.needs-attention{animation:none;outline:3px solid var(--accent-bright);outline-offset:2px}.transient-hint{animation:none}}
.matrix-preview-loading{display:flex;align-items:center;gap:8px;min-height:100px;color:var(--muted)}
.matrix-rule-item .person-actions{align-items:center}

/* Playbook grants share one set of sticky role columns across both groups. */
.playbook-matrix .matrix-corner,.playbook-matrix .matrix-connection{width:320px;min-width:320px;text-align:left}
.playbook-matrix thead th{height:76px}
.playbook-matrix .matrix-role-label{gap:8px;font-size:13px;align-items:center}
.playbook-matrix .profile-swatch{width:9px;height:9px;flex-shrink:0}
.playbook-matrix .playbook-matrix-group th{padding:12px 20px;text-align:left;background:var(--surface-2);border-bottom:1px solid var(--line)}
.playbook-matrix tbody+tbody .playbook-matrix-group th{border-top:1px solid var(--line)}
.playbook-matrix-group-label{position:sticky;left:20px;display:flex;align-items:center;gap:8px;width:max-content;max-width:calc(100% - 20px);font-size:12px}
.playbook-matrix-group-label>svg{color:var(--muted)}
.playbook-matrix-count{display:inline-grid;place-items:center;min-width:22px;height:21px;padding:0 6px;border:1px solid var(--line);border-radius:6px;background:var(--surface);color:var(--ink-soft);font-size:10px;font-variant-numeric:tabular-nums}
.playbook-matrix-group-hint{margin-left:8px;font-size:11px;font-weight:400;color:var(--muted)}
.playbook-matrix .matrix-connection{padding:0;background:var(--surface)}
.playbook-matrix-row td{text-align:center;vertical-align:middle;background:var(--surface);padding:14px 10px}
.playbook-matrix-row:hover>td,.playbook-matrix-row:hover>.matrix-connection{background:color-mix(in srgb,var(--policy-purple) 3%,var(--surface))}
.playbook-matrix-name{display:flex;align-items:center;gap:12px;width:100%;min-height:86px;padding:17px 20px;text-align:left;text-decoration:none;border:0;border-radius:0;background:transparent;color:var(--ink);cursor:pointer}
.playbook-matrix-name:hover{background:transparent}
.playbook-matrix-icon{display:grid;place-items:center;flex-shrink:0;width:34px;height:34px;border:1px solid color-mix(in srgb,var(--policy-purple) 15%,var(--line));border-radius:10px;background:color-mix(in srgb,var(--policy-purple) 7%,var(--surface));color:var(--policy-purple)}
.playbook-matrix-title{flex:1;min-width:0;font-size:13px;font-weight:600;line-height:1.45;overflow-wrap:anywhere}
.playbook-matrix .playbook-matrix-description{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;overflow:hidden;font-size:11px;line-height:1.5}
.playbook-matrix .playbook-matrix-draft{color:var(--policy-amber);font-size:10px}
.playbook-matrix-name>svg{flex-shrink:0;color:var(--muted);opacity:.45}
.playbook-matrix-name:hover>svg,.playbook-matrix-name:focus-visible>svg{opacity:1;color:var(--policy-purple)}
.playbook-matrix .playbook-matrix-grant{display:inline-grid;place-items:center;text-align:center;vertical-align:middle;min-width:124px;min-height:36px;padding:8px 10px;border:1px dashed var(--line-strong);border-radius:8px;box-shadow:none;background:transparent;color:var(--muted);font-size:12px}
.playbook-matrix .playbook-matrix-grant:hover,.playbook-matrix .playbook-matrix-grant:focus-visible{border-style:solid;border-color:var(--policy-green);background:color-mix(in srgb,var(--policy-green) 7%,var(--surface));color:var(--policy-green)}
.playbook-grant-state,.playbook-grant-action{grid-area:1/1;display:flex;align-items:center;justify-content:center;gap:7px}
.playbook-grant-action{visibility:hidden}
.playbook-matrix-grant:hover .playbook-grant-state,.playbook-matrix-grant:focus-visible .playbook-grant-state{visibility:hidden}
.playbook-matrix-grant:hover .playbook-grant-action,.playbook-matrix-grant:focus-visible .playbook-grant-action{visibility:visible}
.playbook-matrix .playbook-matrix-grant.is-allowed{color:#fff;background:#18734b;border:1px solid #18734b;font-weight:650;box-shadow:0 1px 2px #00000012}
.playbook-matrix .playbook-matrix-grant.is-allowed:hover,.playbook-matrix .playbook-matrix-grant.is-allowed:focus-visible{color:#fff;background:#115c3b;border-color:#115c3b}
.playbook-matrix button:focus-visible,.playbook-matrix-name:focus-visible{outline:2px solid var(--policy-purple);outline-offset:3px}
.playbook-matrix-name:focus-visible{outline-offset:-4px}
@media(max-width:650px){
 .playbook-matrix .matrix-corner,.playbook-matrix .matrix-connection{width:170px;min-width:170px}
 .playbook-matrix-name{padding:14px 12px;gap:9px}
 .playbook-matrix-icon{width:28px;height:28px;border-radius:8px}
 .playbook-matrix-name>svg{display:none}
 .playbook-matrix-group-hint{display:none}
}