@fntio/infra-client 0.0.0-stage → 0.5.0

package/assets/web/styles-R6ZUWC6K.css

@@ -0,0 +1 @@
+@layer properties;@layer theme,base,components,utilities;@layer theme{:root,:host{--font-sans: -apple-system, BlinkMacSystemFont, "Segoe UI", "Inter", sans-serif;--font-mono: ui-monospace, "SF Mono", Menlo, monospace;--color-red-500: oklch(63.7% .237 25.331);--color-amber-400: oklch(82.8% .189 84.429);--color-amber-500: oklch(76.9% .188 70.08);--color-amber-700: oklch(55.5% .163 48.998);--color-green-500: oklch(72.3% .219 149.579);--color-gray-100: oklch(96.7% .003 264.542);--color-gray-400: oklch(70.7% .022 261.325);--color-gray-900: oklch(21% .034 264.665);--color-white: #fff;--spacing: .25rem;--container-xs: 20rem;--container-sm: 24rem;--container-md: 28rem;--container-lg: 32rem;--container-xl: 36rem;--container-2xl: 42rem;--container-3xl: 48rem;--text-xs: .75rem;--text-xs--line-height: calc(1 / .75);--text-sm: .875rem;--text-sm--line-height: calc(1.25 / .875);--text-base: 1rem;--text-base--line-height: 1.5 ;--text-xl: 1.25rem;--text-xl--line-height: calc(1.75 / 1.25);--font-weight-normal: 400;--font-weight-medium: 500;--font-weight-semibold: 600;--font-weight-bold: 700;--leading-snug: 1.375;--leading-relaxed: 1.625;--radius-md: calc(var(--radius) - .125rem);--radius-lg: var(--radius);--radius-xl: calc(var(--radius) + .25rem);--radius-2xl: calc(var(--radius) * 2);--radius-4xl: calc(var(--radius) * 3);--ease-out: cubic-bezier(0, 0, .2, 1);--ease-in-out: cubic-bezier(.4, 0, .2, 1);--animate-spin: spin 1s linear infinite;--animate-pulse: pulse 2s cubic-bezier(.4, 0, .6, 1) infinite;--blur-2xl: 40px;--default-transition-duration: .15s;--default-transition-timing-function: cubic-bezier(.4, 0, .2, 1);--default-font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Inter", sans-serif;--default-mono-font-family: ui-monospace, "SF Mono", Menlo, monospace;--shadow-card: var(--card-shadow);--shadow-pill: var(--pill-shadow);--ease-standard: cubic-bezier(.2, 0, 0, 1);--ease-emphasized: cubic-bezier(.3, 0, 0, 1)}}@layer base{*,:after,:before,::backdrop,::file-selector-button{box-sizing:border-box;margin:0;padding:0;border:0 solid}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;tab-size:4;font-family:var(--default-font-family, ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings, normal);font-variation-settings:var(--default-font-variation-settings, normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings, normal);font-variation-settings:var(--default-mono-font-variation-settings, normal);font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea,::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;border-radius:0;background-color:transparent;opacity:1}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not (-webkit-appearance: -apple-pay-button)) or (contain-intrinsic-size: 1px){::placeholder{color:currentcolor}@supports (color: color-mix(in lab,red,red)){::placeholder{color:color-mix(in oklab,currentcolor 50%,transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit,::-webkit-datetime-edit-year-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]),::file-selector-button{appearance:button}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:0}.inset-x-0{inset-inline:0}.-top-0\.5{top:calc(var(--spacing) * -.5)}.-top-1{top:calc(var(--spacing) * -1)}.top-0{top:0}.top-0\.5{top:calc(var(--spacing) * .5)}.top-1\/2{top:50%}.top-2{top:calc(var(--spacing) * 2)}.top-4{top:calc(var(--spacing) * 4)}.top-\[3px\]{top:3px}.top-full{top:100%}.-right-0\.5{right:calc(var(--spacing) * -.5)}.-right-1{right:calc(var(--spacing) * -1)}.right-0{right:0}.right-2{right:calc(var(--spacing) * 2)}.right-4{right:calc(var(--spacing) * 4)}.right-\[3px\]{right:3px}.bottom-2{bottom:calc(var(--spacing) * 2)}.bottom-6{bottom:calc(var(--spacing) * 6)}.bottom-full{bottom:100%}.left-0{left:0}.left-0\.5{left:calc(var(--spacing) * .5)}.left-1\/2{left:50%}.left-2\.5{left:calc(var(--spacing) * 2.5)}.left-3{left:calc(var(--spacing) * 3)}.left-\[1\.125rem\]{left:1.125rem}.left-full{left:100%}.isolate{isolation:isolate}.z-10{z-index:10}.z-20{z-index:20}.z-40{z-index:40}.z-50{z-index:50}.z-\[5\]{z-index:5}.z-\[60\]{z-index:60}.z-\[70\]{z-index:70}.col-span-3{grid-column:span 3 / span 3}.container{width:100%}@media(width>=40rem){.container{max-width:40rem}}@media(width>=48rem){.container{max-width:48rem}}@media(width>=64rem){.container{max-width:64rem}}@media(width>=80rem){.container{max-width:80rem}}@media(width>=96rem){.container{max-width:96rem}}.-mx-1{margin-inline:calc(var(--spacing) * -1)}.-mx-1\.5{margin-inline:calc(var(--spacing) * -1.5)}.-mx-2{margin-inline:calc(var(--spacing) * -2)}.-mx-5{margin-inline:calc(var(--spacing) * -5)}.mx-0\.5{margin-inline:calc(var(--spacing) * .5)}.mx-1{margin-inline:var(--spacing)}.-my-1{margin-block:calc(var(--spacing) * -1)}.-my-px{margin-block:-1px}.my-1\.5{margin-block:calc(var(--spacing) * 1.5)}.-mt-0\.5{margin-top:calc(var(--spacing) * -.5)}.-mt-1{margin-top:calc(var(--spacing) * -1)}.-mt-2{margin-top:calc(var(--spacing) * -2)}.-mt-3{margin-top:calc(var(--spacing) * -3)}.mt-0{margin-top:0}.mt-0\.5{margin-top:calc(var(--spacing) * .5)}.mt-1{margin-top:var(--spacing)}.mt-1\.5{margin-top:calc(var(--spacing) * 1.5)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-2\.5{margin-top:calc(var(--spacing) * 2.5)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-5{margin-top:calc(var(--spacing) * 5)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-\[5px\]{margin-top:5px}.mt-auto{margin-top:auto}.mt-px{margin-top:1px}.mr-0\.5{margin-right:calc(var(--spacing) * .5)}.mr-1{margin-right:var(--spacing)}.mr-auto{margin-right:auto}.-mb-px{margin-bottom:-1px}.mb-1{margin-bottom:var(--spacing)}.mb-1\.5{margin-bottom:calc(var(--spacing) * 1.5)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-2\.5{margin-bottom:calc(var(--spacing) * 2.5)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-5{margin-bottom:calc(var(--spacing) * 5)}.-ml-1\.5{margin-left:calc(var(--spacing) * -1.5)}.ml-1{margin-left:var(--spacing)}.ml-1\.5{margin-left:calc(var(--spacing) * 1.5)}.ml-4{margin-left:calc(var(--spacing) * 4)}.ml-auto{margin-left:auto}.line-clamp-1{overflow:hidden;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:1}.line-clamp-2{overflow:hidden;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2}.block{display:block}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.h-0{height:0}.h-1\.5{height:calc(var(--spacing) * 1.5)}.h-2{height:calc(var(--spacing) * 2)}.h-2\.5{height:calc(var(--spacing) * 2.5)}.h-3{height:calc(var(--spacing) * 3)}.h-3\.5{height:calc(var(--spacing) * 3.5)}.h-4{height:calc(var(--spacing) * 4)}.h-5{height:calc(var(--spacing) * 5)}.h-6{height:calc(var(--spacing) * 6)}.h-7{height:calc(var(--spacing) * 7)}.h-8{height:calc(var(--spacing) * 8)}.h-9{height:calc(var(--spacing) * 9)}.h-10{height:calc(var(--spacing) * 10)}.h-11{height:calc(var(--spacing) * 11)}.h-12{height:calc(var(--spacing) * 12)}.h-16{height:calc(var(--spacing) * 16)}.h-24{height:calc(var(--spacing) * 24)}.h-52{height:calc(var(--spacing) * 52)}.h-56{height:calc(var(--spacing) * 56)}.h-\[3px\]{height:3px}.h-\[9px\]{height:9px}.h-\[15px\]{height:15px}.h-\[17px\]{height:17px}.h-\[18px\]{height:18px}.h-\[19px\]{height:19px}.h-\[22px\]{height:22px}.h-\[30px\]{height:30px}.h-\[720px\]{height:720px}.h-\[760px\]{height:760px}.h-full{height:100%}.h-px{height:1px}.h-screen{height:100vh}.max-h-40{max-height:calc(var(--spacing) * 40)}.max-h-48{max-height:calc(var(--spacing) * 48)}.max-h-56{max-height:calc(var(--spacing) * 56)}.max-h-64{max-height:calc(var(--spacing) * 64)}.max-h-72{max-height:calc(var(--spacing) * 72)}.max-h-96{max-height:calc(var(--spacing) * 96)}.max-h-\[50vh\]{max-height:50vh}.max-h-\[85vh\]{max-height:85vh}.min-h-0{min-height:0}.min-h-24{min-height:calc(var(--spacing) * 24)}.min-h-\[38px\]{min-height:38px}.min-h-\[360px\]{min-height:360px}.min-h-\[380px\]{min-height:380px}.min-h-\[440px\]{min-height:440px}.min-h-full{min-height:100%}.w-1\.5{width:calc(var(--spacing) * 1.5)}.w-1\/2{width:50%}.w-2{width:calc(var(--spacing) * 2)}.w-2\.5{width:calc(var(--spacing) * 2.5)}.w-2\/3{width:calc(2 / 3 * 100%)}.w-3{width:calc(var(--spacing) * 3)}.w-3\.5{width:calc(var(--spacing) * 3.5)}.w-4{width:calc(var(--spacing) * 4)}.w-5{width:calc(var(--spacing) * 5)}.w-6{width:calc(var(--spacing) * 6)}.w-7{width:calc(var(--spacing) * 7)}.w-8{width:calc(var(--spacing) * 8)}.w-9{width:calc(var(--spacing) * 9)}.w-11{width:calc(var(--spacing) * 11)}.w-20{width:calc(var(--spacing) * 20)}.w-28{width:calc(var(--spacing) * 28)}.w-44{width:calc(var(--spacing) * 44)}.w-56{width:calc(var(--spacing) * 56)}.w-64{width:calc(var(--spacing) * 64)}.w-80{width:calc(var(--spacing) * 80)}.w-96{width:calc(var(--spacing) * 96)}.w-\[3px\]{width:3px}.w-\[9px\]{width:9px}.w-\[15px\]{width:15px}.w-\[17px\]{width:17px}.w-\[18px\]{width:18px}.w-\[19px\]{width:19px}.w-\[22px\]{width:22px}.w-\[30px\]{width:30px}.w-\[260px\]{width:260px}.w-\[280px\]{width:280px}.w-\[352px\]{width:352px}.w-\[480px\]{width:480px}.w-auto{width:auto}.w-full{width:100%}.w-max{width:max-content}.w-px{width:1px}.max-w-2xl{max-width:var(--container-2xl)}.max-w-3xl{max-width:var(--container-3xl)}.max-w-44{max-width:calc(var(--spacing) * 44)}.max-w-\[18rem\]{max-width:18rem}.max-w-\[65ch\]{max-width:65ch}.max-w-\[70\%\]{max-width:70%}.max-w-\[88vw\]{max-width:88vw}.max-w-\[118px\]{max-width:118px}.max-w-\[260px\]{max-width:260px}.max-w-\[420px\]{max-width:420px}.max-w-\[480px\]{max-width:480px}.max-w-\[520px\]{max-width:520px}.max-w-full{max-width:100%}.max-w-lg{max-width:var(--container-lg)}.max-w-md{max-width:var(--container-md)}.max-w-sm{max-width:var(--container-sm)}.max-w-xl{max-width:var(--container-xl)}.max-w-xs{max-width:var(--container-xs)}.min-w-0{min-width:0}.min-w-4{min-width:calc(var(--spacing) * 4)}.min-w-5{min-width:calc(var(--spacing) * 5)}.min-w-\[10rem\]{min-width:10rem}.min-w-\[124px\]{min-width:124px}.min-w-\[560px\]{min-width:560px}.min-w-\[680px\]{min-width:680px}.min-w-\[720px\]{min-width:720px}.min-w-\[760px\]{min-width:760px}.flex-1{flex:1}.flex-shrink{flex-shrink:1}.flex-shrink-0{flex-shrink:0}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.shrink-\[4\]{flex-shrink:4}.shrink-\[60\]{flex-shrink:60}.shrink-\[400\]{flex-shrink:400}.flex-grow,.grow{flex-grow:1}.border-collapse{border-collapse:collapse}.-translate-x-1\/2{--tw-translate-x: -50% ;translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-y-1\/2{--tw-translate-y: -50% ;translate:var(--tw-translate-x) var(--tw-translate-y)}.-rotate-90{rotate:-90deg}.rotate-90{rotate:90deg}.rotate-180{rotate:180deg}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.animate-\[\.\.\.\]{animation:...}.animate-pulse{animation:var(--animate-pulse)}.animate-spin{animation:var(--animate-spin)}.cursor-grab{cursor:grab}.cursor-pointer{cursor:pointer}.resize{resize:both}.\[scrollbar-gutter\:stable_both-edges\]{scrollbar-gutter:stable both-edges}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.grid-cols-5{grid-template-columns:repeat(5,minmax(0,1fr))}.grid-cols-\[6\.5rem_minmax\(0\,1fr\)_max-content\]{grid-template-columns:6.5rem minmax(0,1fr) max-content}.grid-cols-\[26\%_20\%_30\%_13\%_minmax\(0\,1fr\)\]{grid-template-columns:26% 20% 30% 13% minmax(0,1fr)}.grid-cols-\[40px_22\%_18\%_30\%_minmax\(0\,1fr\)\]{grid-template-columns:40px 22% 18% 30% minmax(0,1fr)}.grid-cols-\[120px_minmax\(0\,1fr\)\]{grid-template-columns:120px minmax(0,1fr)}.grid-cols-\[220px_minmax\(0\,1fr\)_minmax\(0\,1fr\)_100px\]{grid-template-columns:220px minmax(0,1fr) minmax(0,1fr) 100px}.grid-cols-\[280px_minmax\(0\,1fr\)\]{grid-template-columns:280px minmax(0,1fr)}.grid-cols-\[auto_1fr\]{grid-template-columns:auto 1fr}.grid-cols-\[minmax\(0\,12fr\)_minmax\(0\,20fr\)_minmax\(0\,52fr\)_minmax\(0\,16fr\)\]{grid-template-columns:minmax(0,12fr) minmax(0,20fr) minmax(0,52fr) minmax(0,16fr)}.grid-cols-\[minmax\(0\,19fr\)_minmax\(0\,13fr\)_minmax\(0\,21fr\)_minmax\(0\,21fr\)_minmax\(0\,19fr\)_minmax\(0\,24fr\)\]{grid-template-columns:minmax(0,19fr) minmax(0,13fr) minmax(0,21fr) minmax(0,21fr) minmax(0,19fr) minmax(0,24fr)}.grid-cols-\[minmax\(0\,20fr\)_minmax\(0\,55fr\)_minmax\(0\,9fr\)_minmax\(0\,26fr\)\]{grid-template-columns:minmax(0,20fr) minmax(0,55fr) minmax(0,9fr) minmax(0,26fr)}.grid-cols-\[minmax\(0\,26fr\)_minmax\(0\,18fr\)_minmax\(0\,32fr\)\]{grid-template-columns:minmax(0,26fr) minmax(0,18fr) minmax(0,32fr)}.grid-cols-\[repeat\(auto-fill\,minmax\(300px\,1fr\)\)\]{grid-template-columns:repeat(auto-fill,minmax(300px,1fr))}.flex-col{flex-direction:column}.flex-nowrap{flex-wrap:nowrap}.flex-wrap{flex-wrap:wrap}.place-items-center{place-items:center}.items-baseline{align-items:baseline}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.justify-end{justify-content:flex-end}.justify-start{justify-content:flex-start}.gap-0\.5{gap:calc(var(--spacing) * .5)}.gap-1{gap:var(--spacing)}.gap-1\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-2\.5{gap:calc(var(--spacing) * 2.5)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-\[7px\]{gap:7px}:where(.space-y-1>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(var(--spacing) * var(--tw-space-y-reverse));margin-block-end:calc(var(--spacing) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-2>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(calc(var(--spacing) * 2) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 2) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-2\.5>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(calc(var(--spacing) * 2.5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 2.5) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-3>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(calc(var(--spacing) * 3) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 3) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-4>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(calc(var(--spacing) * 4) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 4) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-5>:not(:last-child)){--tw-space-y-reverse: 0;margin-block-start:calc(calc(var(--spacing) * 5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 5) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-1{column-gap:var(--spacing)}.gap-x-1\.5{column-gap:calc(var(--spacing) * 1.5)}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-x-4{column-gap:calc(var(--spacing) * 4)}.gap-x-\[26px\]{column-gap:26px}.gap-y-0\.5{row-gap:calc(var(--spacing) * .5)}.gap-y-1{row-gap:var(--spacing)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.gap-y-4{row-gap:calc(var(--spacing) * 4)}.gap-y-\[7px\]{row-gap:7px}:where(.divide-y>:not(:last-child)){--tw-divide-y-reverse: 0;border-bottom-style:var(--tw-border-style);border-top-style:var(--tw-border-style);border-top-width:calc(1px * var(--tw-divide-y-reverse));border-bottom-width:calc(1px * calc(1 - var(--tw-divide-y-reverse)))}:where(.divide-border>:not(:last-child)){border-color:var(--border)}.self-center{align-self:center}.self-start{align-self:flex-start}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.overflow-auto{overflow:auto}.overflow-clip{overflow:clip}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.\!rounded-md{border-radius:calc(var(--radius) - .125rem)!important}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:calc(var(--radius) * 2)}.rounded-3xl{border-radius:calc(var(--radius) * 2.5)}.rounded-4xl{border-radius:calc(var(--radius) * 3)}.rounded-\[5px\]{border-radius:5px}.rounded-full{border-radius:calc(infinity * 1px)}.rounded-lg{border-radius:var(--radius)}.rounded-md{border-radius:calc(var(--radius) - .125rem)}.rounded-xl{border-radius:calc(var(--radius) + .25rem)}.rounded-t-lg{border-top-left-radius:var(--radius);border-top-right-radius:var(--radius)}.rounded-b-lg{border-bottom-right-radius:var(--radius);border-bottom-left-radius:var(--radius)}.border{border-style:var(--tw-border-style);border-width:1px}.border-0{border-style:var(--tw-border-style);border-width:0px}.border-2{border-style:var(--tw-border-style);border-width:2px}.border-\[1\.5px\]{border-style:var(--tw-border-style);border-width:1.5px}.border-x{border-inline-style:var(--tw-border-style);border-inline-width:1px}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-t-2{border-top-style:var(--tw-border-style);border-top-width:2px}.border-t-\[2\.5px\]{border-top-style:var(--tw-border-style);border-top-width:2.5px}.border-r{border-right-style:var(--tw-border-style);border-right-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-b-2{border-bottom-style:var(--tw-border-style);border-bottom-width:2px}.border-l-2{border-left-style:var(--tw-border-style);border-left-width:2px}.border-l-\[2\.5px\]{border-left-style:var(--tw-border-style);border-left-width:2.5px}.border-dashed{--tw-border-style: dashed;border-style:dashed}.border-none{--tw-border-style: none;border-style:none}.\!border-brand{border-color:var(--brand)!important}.border-border{border-color:var(--border)}.border-border-strong,.border-border-strong\/50{border-color:var(--border-strong)}@supports (color: color-mix(in lab,red,red)){.border-border-strong\/50{border-color:color-mix(in oklab,var(--border-strong) 50%,transparent)}}.border-border\/70{border-color:var(--border)}@supports (color: color-mix(in lab,red,red)){.border-border\/70{border-color:color-mix(in oklab,var(--border) 70%,transparent)}}.border-brand{border-color:var(--brand)}.border-brand-muted{border-color:var(--brand-muted)}.border-brand\/20{border-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.border-brand\/20{border-color:color-mix(in oklab,var(--brand) 20%,transparent)}}.border-brand\/50{border-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.border-brand\/50{border-color:color-mix(in oklab,var(--brand) 50%,transparent)}}.border-brand\/60{border-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.border-brand\/60{border-color:color-mix(in oklab,var(--brand) 60%,transparent)}}.border-current{border-color:currentcolor}.border-danger{border-color:var(--danger)}.border-placeholder{border-color:var(--placeholder)}.border-success\/30{border-color:var(--success)}@supports (color: color-mix(in lab,red,red)){.border-success\/30{border-color:color-mix(in oklab,var(--success) 30%,transparent)}}.border-transparent{border-color:transparent}.border-warning\/30{border-color:var(--warning)}@supports (color: color-mix(in lab,red,red)){.border-warning\/30{border-color:color-mix(in oklab,var(--warning) 30%,transparent)}}.border-t-brand{border-top-color:var(--brand)}.border-t-transparent{border-top-color:transparent}.bg-\[\#10b981\]{background-color:#10b981}.bg-\[\#f59e0b\]{background-color:#f59e0b}.bg-\[var\(--dot-active\)\]{background-color:var(--dot-active)}.bg-\[var\(--dot-active\,\#10b981\)\]{background-color:var(--dot-active,#10b981)}.bg-\[var\(--dot-expiring\)\]{background-color:var(--dot-expiring)}.bg-\[var\(--dot-expiring\,\#f59e0b\)\]{background-color:var(--dot-expiring,#f59e0b)}.bg-\[var\(--wiz-panel\)\]{background-color:var(--wiz-panel)}.bg-amber-500{background-color:var(--color-amber-500)}.bg-border{background-color:var(--border)}.bg-border-strong{background-color:var(--border-strong)}.bg-brand{background-color:var(--brand)}.bg-brand-muted{background-color:var(--brand-muted)}.bg-brand-muted-2{background-color:var(--brand-muted-2)}.bg-brand\/5{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.bg-brand\/5{background-color:color-mix(in oklab,var(--brand) 5%,transparent)}}.bg-brand\/10{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.bg-brand\/10{background-color:color-mix(in oklab,var(--brand) 10%,transparent)}}.bg-brand\/12{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.bg-brand\/12{background-color:color-mix(in oklab,var(--brand) 12%,transparent)}}.bg-brand\/20{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.bg-brand\/20{background-color:color-mix(in oklab,var(--brand) 20%,transparent)}}.bg-card-bg{background-color:var(--card-bg)}.bg-current{background-color:currentcolor}.bg-danger{background-color:var(--danger)}.bg-danger-muted{background-color:var(--danger-muted)}.bg-gray-400{background-color:var(--color-gray-400)}.bg-gray-900{background-color:var(--color-gray-900)}.bg-gray-900\/40{background-color:color-mix(in srgb,oklch(21% .034 264.665) 40%,transparent)}@supports (color: color-mix(in lab,red,red)){.bg-gray-900\/40{background-color:color-mix(in oklab,var(--color-gray-900) 40%,transparent)}}.bg-green-500{background-color:var(--color-green-500)}.bg-muted{background-color:var(--muted)}.bg-muted-foreground\/40{background-color:var(--muted-foreground)}@supports (color: color-mix(in lab,red,red)){.bg-muted-foreground\/40{background-color:color-mix(in oklab,var(--muted-foreground) 40%,transparent)}}.bg-muted\/40{background-color:var(--muted)}@supports (color: color-mix(in lab,red,red)){.bg-muted\/40{background-color:color-mix(in oklab,var(--muted) 40%,transparent)}}.bg-notif{background-color:var(--notif)}.bg-placeholder{background-color:var(--placeholder)}.bg-popover{background-color:var(--popover-bg)}.bg-red-500{background-color:var(--color-red-500)}.bg-state-hover{background-color:var(--state-hover)}.bg-success-muted{background-color:var(--success-muted)}.bg-surface,.bg-surface\/60{background-color:var(--surface)}@supports (color: color-mix(in lab,red,red)){.bg-surface\/60{background-color:color-mix(in oklab,var(--surface) 60%,transparent)}}.bg-transparent{background-color:transparent}.bg-warning{background-color:var(--warning)}.bg-warning-muted{background-color:var(--warning-muted)}.bg-white{background-color:var(--color-white)}.object-contain{object-fit:contain}.\!p-0{padding:0!important}.p-0{padding:0}.p-0\.5{padding:calc(var(--spacing) * .5)}.p-2{padding:calc(var(--spacing) * 2)}.p-2\.5{padding:calc(var(--spacing) * 2.5)}.p-3{padding:calc(var(--spacing) * 3)}.p-4{padding:calc(var(--spacing) * 4)}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.p-10{padding:calc(var(--spacing) * 10)}.p-\[3px\]{padding:3px}.px-1{padding-inline:var(--spacing)}.px-1\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-2\.5{padding-inline:calc(var(--spacing) * 2.5)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.px-7{padding-inline:calc(var(--spacing) * 7)}.px-8{padding-inline:calc(var(--spacing) * 8)}.px-\[9px\]{padding-inline:9px}.px-\[13px\]{padding-inline:13px}.px-\[25px\]{padding-inline:25px}.\!py-0{padding-block:0!important}.py-0{padding-block:0}.py-0\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:var(--spacing)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-5{padding-block:calc(var(--spacing) * 5)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-\[5px\]{padding-block:5px}.py-\[11px\]{padding-block:11px}.pt-1{padding-top:var(--spacing)}.pt-1\.5{padding-top:calc(var(--spacing) * 1.5)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-2\.5{padding-top:calc(var(--spacing) * 2.5)}.pt-3{padding-top:calc(var(--spacing) * 3)}.pt-4{padding-top:calc(var(--spacing) * 4)}.pt-5{padding-top:calc(var(--spacing) * 5)}.pt-6{padding-top:calc(var(--spacing) * 6)}.pt-8{padding-top:calc(var(--spacing) * 8)}.pr-1{padding-right:var(--spacing)}.pr-1\.5{padding-right:calc(var(--spacing) * 1.5)}.pr-3{padding-right:calc(var(--spacing) * 3)}.pr-3\.5{padding-right:calc(var(--spacing) * 3.5)}.pr-7{padding-right:calc(var(--spacing) * 7)}.pr-14{padding-right:calc(var(--spacing) * 14)}.pr-\[5px\]{padding-right:5px}.pb-0{padding-bottom:0}.pb-1{padding-bottom:var(--spacing)}.pb-3{padding-bottom:calc(var(--spacing) * 3)}.pb-3\.5{padding-bottom:calc(var(--spacing) * 3.5)}.pb-4{padding-bottom:calc(var(--spacing) * 4)}.pb-5{padding-bottom:calc(var(--spacing) * 5)}.pb-6{padding-bottom:calc(var(--spacing) * 6)}.pl-1{padding-left:var(--spacing)}.pl-2{padding-left:calc(var(--spacing) * 2)}.pl-2\.5{padding-left:calc(var(--spacing) * 2.5)}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-4{padding-left:calc(var(--spacing) * 4)}.pl-7{padding-left:calc(var(--spacing) * 7)}.pl-9{padding-left:calc(var(--spacing) * 9)}.pl-\[5px\]{padding-left:5px}.pl-\[120px\]{padding-left:120px}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.align-middle{vertical-align:middle}.font-mono{font-family:ui-monospace,SF Mono,Menlo,monospace}.font-sans{font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Inter,sans-serif}.text-base{font-size:var(--text-base);line-height:var(--tw-leading, var(--text-base--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading, var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading, var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading, var(--text-xs--line-height))}.text-\[9px\]{font-size:9px}.text-\[10\.5px\]{font-size:10.5px}.text-\[10px\]{font-size:10px}.text-\[11\.5px\]{font-size:11.5px}.text-\[11px\]{font-size:11px}.text-\[12\.5px\]{font-size:12.5px}.text-\[13\.5px\]{font-size:13.5px}.text-\[13px\]{font-size:13px}.text-\[15px\]{font-size:15px}.leading-\[1\.35\]{--tw-leading: 1.35;line-height:1.35}.leading-\[1\.45\]{--tw-leading: 1.45;line-height:1.45}.leading-\[18px\]{--tw-leading: 18px;line-height:18px}.leading-none{--tw-leading: 1;line-height:1}.leading-relaxed{--tw-leading: var(--leading-relaxed);line-height:var(--leading-relaxed)}.leading-snug{--tw-leading: var(--leading-snug);line-height:var(--leading-snug)}.font-bold{--tw-font-weight: var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-medium{--tw-font-weight: var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-normal{--tw-font-weight: var(--font-weight-normal);font-weight:var(--font-weight-normal)}.font-semibold{--tw-font-weight: var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-\[-0\.01em\]{--tw-tracking: -.01em;letter-spacing:-.01em}.tracking-\[0\.015em\]{--tw-tracking: .015em;letter-spacing:.015em}.text-pretty{text-wrap:pretty}.text-wrap{text-wrap:wrap}.\[overflow-wrap\:anywhere\]{overflow-wrap:anywhere}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.whitespace-normal{white-space:normal}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.text-amber-700{color:var(--color-amber-700)}.text-brand{color:var(--brand)}.text-brand-foreground{color:var(--brand-foreground)}.text-brand-muted-foreground{color:var(--brand-muted-foreground)}.text-brand-text{color:var(--brand-text)}.text-danger{color:var(--danger)}.text-gray-100{color:var(--color-gray-100)}.text-muted-foreground{color:var(--muted-foreground)}.text-placeholder{color:var(--placeholder)}.text-success{color:var(--success)}.text-surface-foreground{color:var(--surface-foreground)}.text-text-secondary{color:var(--text-secondary)}.text-warning{color:var(--warning)}.text-white{color:var(--color-white)}.lowercase{text-transform:lowercase}.uppercase{text-transform:uppercase}.italic{font-style:italic}.tabular-nums{--tw-numeric-spacing: tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.underline{text-decoration-line:underline}.decoration-dotted{text-decoration-style:dotted}.underline-offset-2{text-underline-offset:2px}.opacity-0{opacity:0%}.opacity-50{opacity:50%}.opacity-60{opacity:60%}.opacity-70{opacity:70%}.opacity-80{opacity:80%}.shadow{--tw-shadow: 0 1px 3px 0 var(--tw-shadow-color, rgb(0 0 0 / .1)), 0 1px 2px -1px var(--tw-shadow-color, rgb(0 0 0 / .1));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-\[0_0_0_2px_var\(--surface\)\]{--tw-shadow: 0 0 0 2px var(--tw-shadow-color, var(--surface));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-\[0_1px_2px_rgba\(0\,0\,0\,0\.3\)\]{--tw-shadow: 0 1px 2px var(--tw-shadow-color, rgba(0,0,0,.3));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-\[0_4px_6px_-4px_rgba\(16\,24\,40\,0\.12\)\]{--tw-shadow: 0 4px 6px -4px var(--tw-shadow-color, rgba(16,24,40,.12));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-\[0_10px_30px_-14px_rgba\(0\,0\,0\,\.35\)\]{--tw-shadow: 0 10px 30px -14px var(--tw-shadow-color, rgba(0,0,0,.35));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-\[\2026\]{--tw-shadow: \2026;box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-card{--tw-shadow: var(--card-shadow);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-lg{--tw-shadow: 0 10px 15px -3px var(--tw-shadow-color, rgb(0 0 0 / .1)), 0 4px 6px -4px var(--tw-shadow-color, rgb(0 0 0 / .1));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-md{--tw-shadow: 0 4px 6px -1px var(--tw-shadow-color, rgb(0 0 0 / .1)), 0 2px 4px -2px var(--tw-shadow-color, rgb(0 0 0 / .1));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-none{--tw-shadow: 0 0 #0000;box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-page{--tw-shadow: var(--page-shadow);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-pill{--tw-shadow: var(--pill-shadow);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-toast{--tw-shadow: var(--toast-shadow);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.shadow-xl{--tw-shadow: 0 20px 25px -5px var(--tw-shadow-color, rgb(0 0 0 / .1)), 0 8px 10px -6px var(--tw-shadow-color, rgb(0 0 0 / .1));box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.ring,.ring-1{--tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.ring-2{--tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}.ring-\[var\(--brand\)\]{--tw-ring-color: var(--brand)}.ring-\[var\(--success\)\]{--tw-ring-color: var(--success)}.ring-\[var\(--warning\)\]{--tw-ring-color: var(--warning)}.ring-\[var\(--x\)\]{--tw-ring-color: var(--x)}.ring-border{--tw-ring-color: var(--border)}.ring-border-strong{--tw-ring-color: var(--border-strong)}.ring-brand,.ring-brand\/20{--tw-ring-color: var(--brand)}@supports (color: color-mix(in lab,red,red)){.ring-brand\/20{--tw-ring-color: color-mix(in oklab, var(--brand) 20%, transparent)}}.ring-brand\/25{--tw-ring-color: var(--brand)}@supports (color: color-mix(in lab,red,red)){.ring-brand\/25{--tw-ring-color: color-mix(in oklab, var(--brand) 25%, transparent)}}.ring-danger\/20{--tw-ring-color: var(--danger)}@supports (color: color-mix(in lab,red,red)){.ring-danger\/20{--tw-ring-color: color-mix(in oklab, var(--danger) 20%, transparent)}}.ring-success\/25{--tw-ring-color: var(--success)}@supports (color: color-mix(in lab,red,red)){.ring-success\/25{--tw-ring-color: color-mix(in oklab, var(--success) 25%, transparent)}}.ring-success\/30{--tw-ring-color: var(--success)}@supports (color: color-mix(in lab,red,red)){.ring-success\/30{--tw-ring-color: color-mix(in oklab, var(--success) 30%, transparent)}}.ring-surface{--tw-ring-color: var(--surface)}.ring-warning\/25{--tw-ring-color: var(--warning)}@supports (color: color-mix(in lab,red,red)){.ring-warning\/25{--tw-ring-color: color-mix(in oklab, var(--warning) 25%, transparent)}}.ring-warning\/30{--tw-ring-color: var(--warning)}@supports (color: color-mix(in lab,red,red)){.ring-warning\/30{--tw-ring-color: color-mix(in oklab, var(--warning) 30%, transparent)}}.ring-offset-1{--tw-ring-offset-width: 1px;--tw-ring-offset-shadow: var(--tw-ring-inset,) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.blur{--tw-blur: blur(8px);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.grayscale{--tw-grayscale: grayscale(100%);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.backdrop-blur-2xl{--tw-backdrop-blur: blur(var(--blur-2xl));-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.backdrop-blur-\[2px\]{--tw-backdrop-blur: blur(2px);-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.backdrop-filter{-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-\[grid-template-rows\]{transition-property:grid-template-rows;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-all{transition-property:all;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-opacity{transition-property:opacity;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-shadow{transition-property:box-shadow;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.transition-transform{transition-property:transform,translate,scale,rotate;transition-timing-function:var(--tw-ease, var(--default-transition-timing-function));transition-duration:var(--tw-duration, var(--default-transition-duration))}.duration-150{--tw-duration: .15s;transition-duration:.15s}.duration-200{--tw-duration: .2s;transition-duration:.2s}.duration-\[180ms\]{--tw-duration: .18s;transition-duration:.18s}.ease-in-out{--tw-ease: var(--ease-in-out);transition-timing-function:var(--ease-in-out)}.ease-out{--tw-ease: var(--ease-out);transition-timing-function:var(--ease-out)}.outline-none{--tw-outline-style: none;outline-style:none}.select-all{-webkit-user-select:all;user-select:all}.select-none{-webkit-user-select:none;user-select:none}.\[font\:inherit\]{font:inherit}.ring-inset{--tw-ring-inset: inset}@media(hover:hover){.group-hover\:opacity-100:is(:where(.group):hover *){opacity:100%}}@media(hover:hover){.group-hover\:shadow-card-hover:is(:where(.group):hover *){--tw-shadow: var(--card-shadow-hover);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}}.placeholder\:text-placeholder::placeholder{color:var(--placeholder)}.first\:border-t-0:first-child{border-top-style:var(--tw-border-style);border-top-width:0px}.last\:border-b-0:last-child{border-bottom-style:var(--tw-border-style);border-bottom-width:0px}@media(hover:hover){.hover\:scale-110:hover{--tw-scale-x: 110%;--tw-scale-y: 110%;--tw-scale-z: 110%;scale:var(--tw-scale-x) var(--tw-scale-y)}}@media(hover:hover){.hover\:border-brand:hover{border-color:var(--brand)}}@media(hover:hover){.hover\:border-success\/50:hover{border-color:var(--success)}@supports (color: color-mix(in lab,red,red)){.hover\:border-success\/50:hover{border-color:color-mix(in oklab,var(--success) 50%,transparent)}}}@media(hover:hover){.hover\:border-warning\/50:hover{border-color:var(--warning)}@supports (color: color-mix(in lab,red,red)){.hover\:border-warning\/50:hover{border-color:color-mix(in oklab,var(--warning) 50%,transparent)}}}@media(hover:hover){.hover\:bg-border-strong:hover{background-color:var(--border-strong)}}@media(hover:hover){.hover\:bg-brand-hover:hover{background-color:var(--brand-hover)}}@media(hover:hover){.hover\:bg-brand-muted:hover{background-color:var(--brand-muted)}}@media(hover:hover){.hover\:bg-brand\/12:hover{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.hover\:bg-brand\/12:hover{background-color:color-mix(in oklab,var(--brand) 12%,transparent)}}}@media(hover:hover){.hover\:bg-brand\/15:hover{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.hover\:bg-brand\/15:hover{background-color:color-mix(in oklab,var(--brand) 15%,transparent)}}}@media(hover:hover){.hover\:bg-brand\/18:hover{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.hover\:bg-brand\/18:hover{background-color:color-mix(in oklab,var(--brand) 18%,transparent)}}}@media(hover:hover){.hover\:bg-brand\/20:hover{background-color:var(--brand)}@supports (color: color-mix(in lab,red,red)){.hover\:bg-brand\/20:hover{background-color:color-mix(in oklab,var(--brand) 20%,transparent)}}}@media(hover:hover){.hover\:bg-danger-hover:hover{background-color:var(--danger-hover)}}@media(hover:hover){.hover\:bg-danger-muted:hover{background-color:var(--danger-muted)}}@media(hover:hover){.hover\:bg-danger\/10:hover{background-color:var(--danger)}@supports (color: color-mix(in lab,red,red)){.hover\:bg-danger\/10:hover{background-color:color-mix(in oklab,var(--danger) 10%,transparent)}}}@media(hover:hover){.hover\:bg-muted:hover{background-color:var(--muted)}}@media(hover:hover){.hover\:bg-state-hover:hover{background-color:var(--state-hover)}}@media(hover:hover){.hover\:text-brand-text:hover{color:var(--brand-text)}}@media(hover:hover){.hover\:text-surface-foreground:hover{color:var(--surface-foreground)}}@media(hover:hover){.hover\:underline:hover{text-decoration-line:underline}}@media(hover:hover){.hover\:opacity-100:hover{opacity:100%}}@media(hover:hover){.hover\:shadow-card-hover:hover{--tw-shadow: var(--card-shadow-hover);box-shadow:var(--tw-inset-shadow),var(--tw-inset-ring-shadow),var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}}@media(hover:hover){.hover\:ring-brand\/40:hover{--tw-ring-color: var(--brand)}@supports (color: color-mix(in lab,red,red)){.hover\:ring-brand\/40:hover{--tw-ring-color: color-mix(in oklab, var(--brand) 40%, transparent)}}}@media(hover:hover){.hover\:ring-success\/40:hover{--tw-ring-color: var(--success)}@supports (color: color-mix(in lab,red,red)){.hover\:ring-success\/40:hover{--tw-ring-color: color-mix(in oklab, var(--success) 40%, transparent)}}}@media(hover:hover){.hover\:ring-warning\/40:hover{--tw-ring-color: var(--warning)}@supports (color: color-mix(in lab,red,red)){.hover\:ring-warning\/40:hover{--tw-ring-color: color-mix(in oklab, var(--warning) 40%, transparent)}}}.focus\:outline-none:focus{--tw-outline-style: none;outline-style:none}.focus-visible\:outline:focus-visible{outline-style:var(--tw-outline-style);outline-width:1px}.focus-visible\:outline-2:focus-visible{outline-style:var(--tw-outline-style);outline-width:2px}.focus-visible\:outline-offset-2:focus-visible{outline-offset:2px}.focus-visible\:outline-brand:focus-visible{outline-color:var(--brand)}.focus-visible\:outline-ring:focus-visible{outline-color:var(--ring)}.active\:scale-90:active{--tw-scale-x: 90%;--tw-scale-y: 90%;--tw-scale-z: 90%;scale:var(--tw-scale-x) var(--tw-scale-y)}.active\:bg-border-strong:active{background-color:var(--border-strong)}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:cursor-progress:disabled{cursor:progress}.disabled\:no-underline:disabled{text-decoration-line:none}.disabled\:opacity-50:disabled{opacity:50%}.disabled\:opacity-60:disabled{opacity:60%}@media(hover:hover){.disabled\:hover\:bg-transparent:disabled:hover{background-color:transparent}}.disabled\:active\:scale-100:disabled:active{--tw-scale-x: 100%;--tw-scale-y: 100%;--tw-scale-z: 100%;scale:var(--tw-scale-x) var(--tw-scale-y)}@media(prefers-reduced-motion:reduce){.motion-reduce\:animate-none{animation:none}}@media(prefers-reduced-motion:reduce){.motion-reduce\:transition-none{transition-property:none}}@media(width>=48rem){.md\:mt-0{margin-top:0}}@media(width>=48rem){.md\:flex{display:flex}}@media(width>=48rem){.md\:hidden{display:none}}@media(width>=48rem){.md\:w-44{width:calc(var(--spacing) * 44)}}@media(width>=48rem){.md\:w-56{width:calc(var(--spacing) * 56)}}@media(width>=48rem){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media(width>=48rem){.md\:items-center{align-items:center}}@media(width>=48rem){.md\:gap-4{gap:calc(var(--spacing) * 4)}}@media(width>=64rem){.lg\:flex{display:flex}}@media(prefers-color-scheme:dark){.dark\:text-amber-400{color:var(--color-amber-400)}}.\[\&\:focus-within\:not\(\:has\(\[picker-trailing\]\:focus\)\)\]\:border-transparent:focus-within:not(:has([picker-trailing]:focus)){border-color:transparent}.\[\&\:focus-within\:not\(\:has\(\[picker-trailing\]\:focus\)\)\]\:outline-2:focus-within:not(:has([picker-trailing]:focus)){outline-style:var(--tw-outline-style);outline-width:2px}.\[\&\:focus-within\:not\(\:has\(\[picker-trailing\]\:focus\)\)\]\:-outline-offset-1:focus-within:not(:has([picker-trailing]:focus)){outline-offset:-1px}.\[\&\:focus-within\:not\(\:has\(\[picker-trailing\]\:focus\)\)\]\:outline-\[var\(--ring\)\]:focus-within:not(:has([picker-trailing]:focus)){outline-color:var(--ring)}}:root{--knob-accent: #4f46e5;--radius: .5rem;--brand-primary: #4f46e5;--brand-primary-hover: #4338ca;--brand-accent: #f59e0b;--accent-1: #fbfcff;--accent-2: #f4f6ff;--accent-3: #e9edfe;--accent-4: #dde3fd;--accent-5: #cdd6fb;--accent-6: #b9c4f8;--accent-7: #9fadf3;--accent-8: #7e8fee;--accent-9: #4f46e5;--accent-10: #4338ca;--accent-11: #3f3ba7;--accent-12: #2b2870;--gray-1: #f4f9ff;--gray-2: #eff4fc;--gray-3: #e8ecf4;--gray-4: #dee3ea;--gray-5: #dbe0e8;--gray-6: #d2d7df;--gray-7: #c4c9d0;--gray-8: #a8adb4;--gray-9: #82868e;--gray-10: #787c83;--gray-11: #51555c;--gray-12: #15181e;--background: var(--gray-1);--surface: #ffffff;--surface-foreground: var(--gray-12);--popover-bg: var(--surface);--muted: rgba(15, 18, 25, .06);--muted-foreground: var(--gray-11);--text-secondary: var(--gray-10);--placeholder: var(--gray-8);--border: rgba(15, 18, 25, .04);--border-strong: rgba(15, 18, 25, .08);--checkbox-border: var(--gray-8);--ring: var(--accent-8);--brand: var(--accent-9);--brand-foreground: #ffffff;--brand-hover: var(--accent-10);--brand-muted: var(--accent-3);--brand-muted-foreground: var(--accent-11);--brand-text: var(--accent-11);--brand-muted-2: var(--accent-2);--success: #047857;--success-muted: #bbf7d0;--success-foreground: #ffffff;--warning: #b45309;--warning-muted: #fde68a;--danger: #dc2626;--danger-hover: #b91c1c;--danger-muted: #fee2e2;--notif: #e5484d;--dot-active: #10b981;--dot-expiring: #f59e0b;--state-hover: rgba(15, 18, 25, .03);--state-selected: rgba(15, 18, 25, .06);--pill-shadow: 0 1px 2px rgba(20, 22, 40, .03);--toast-shadow: 0 10px 30px -14px rgba(0, 0, 0, .35);--page-shadow: 0 4px 6px -4px rgba(16, 24, 40, .12);--card-bg: rgba(15, 18, 25, .028);--card-shadow: 0 1px 2px rgba(20, 22, 40, .05);--card-shadow-hover: 0 6px 14px -8px rgba(30, 32, 60, .16);--glass-plate: linear-gradient(165deg, #eef1f6, #dfe3ea);--glass-panel-bg: rgba(255, 255, 255, .84);--glass-panel-glow-mult: 0;--glass-panel-glow-a: var(--accent-9)}@supports (color: color-mix(in lab,red,red)){:root{--glass-panel-glow-a: color-mix( in srgb, var(--accent-9) calc(60% * var(--glass-panel-glow-mult)), transparent )}}:root{--glass-panel-glow-b: var(--accent-9)}@supports (color: color-mix(in lab,red,red)){:root{--glass-panel-glow-b: color-mix( in srgb, var(--accent-9) calc(34% * var(--glass-panel-glow-mult)), transparent )}}@keyframes glass-glow-drift{0%{transform:translate3d(-2%,-1.5%,0) scale(1)}33%{transform:translate3d(1.5%,2%,0) scale(1.035)}66%{transform:translate3d(2%,-1%,0) scale(1.015)}to{transform:translate3d(-2%,-1.5%,0) scale(1)}}:root[data-gray-tone=neutral]{--gray-1: #fcfcfc;--gray-2: #fafafa;--gray-3: #f5f5f5;--gray-4: #efefef;--gray-5: #e5e5e5;--gray-6: #dbdbdb;--gray-7: #d4d4d4;--gray-8: #a3a3a3;--gray-9: #737373;--gray-10: #616161;--gray-11: #525252;--gray-12: #171717}:root[data-gray-tone=warm]{--gray-1: #fcfcfb;--gray-2: #fafaf9;--gray-3: #f5f5f4;--gray-4: #eeedec;--gray-5: #e7e5e4;--gray-6: #dcdad8;--gray-7: #d6d3d1;--gray-8: #a8a29e;--gray-9: #78716c;--gray-10: #66605b;--gray-11: #57534e;--gray-12: #1c1917}:root[data-gray-tone=mauve]{--gray-1: #fdfcfd;--gray-2: #f9f8f9;--gray-3: #f4f2f4;--gray-4: #eeedef;--gray-5: #e9e8ea;--gray-6: #e4e2e4;--gray-7: #dcdbdd;--gray-8: #c9c7cb;--gray-9: #8e8c99;--gray-10: #85828e;--gray-11: #65636d;--gray-12: #211f26}:root[data-gray-tone=sage]{--gray-1: #fbfdfc;--gray-2: #f7f9f8;--gray-3: #eef1f0;--gray-4: #e6e9e8;--gray-5: #dfe2e0;--gray-6: #d7dad9;--gray-7: #cbcecd;--gray-8: #b8bcbb;--gray-9: #868e8b;--gray-10: #7c8481;--gray-11: #63706b;--gray-12: #1a211e}:root[data-gray-tone=olive]{--gray-1: #fcfdfc;--gray-2: #f8faf8;--gray-3: #eff1ef;--gray-4: #e7e9e7;--gray-5: #e0e2df;--gray-6: #d8dad8;--gray-7: #cdcfcd;--gray-8: #b9bbb8;--gray-9: #898e87;--gray-10: #7f847d;--gray-11: #63675f;--gray-12: #1d211c}:root[data-gray-tone=sand]{--gray-1: #fdfdfc;--gray-2: #f9f9f8;--gray-3: #f1f0ef;--gray-4: #e9e8e6;--gray-5: #e2e1de;--gray-6: #dad9d6;--gray-7: #cfceca;--gray-8: #bcbbb5;--gray-9: #8d8d86;--gray-10: #82827c;--gray-11: #63635e;--gray-12: #21201c}:root[data-theme=dark]{--background: #0e1013;--surface: rgba(255, 255, 255, .044);--surface-foreground: #e7ebf2;--popover-bg: #34383f;--muted: rgba(255, 255, 255, .07);--muted-foreground: #9aa3b2;--text-secondary: #7c8698;--placeholder: #6b7484;--border: rgba(255, 255, 255, .05);--border-strong: rgba(255, 255, 255, .09);--checkbox-border: rgba(255, 255, 255, .35);--state-hover: rgba(255, 255, 255, .03);--state-selected: rgba(255, 255, 255, .055);--success: #4ade80;--success-muted: rgba(74, 222, 128, .16);--success-foreground: #0e1013;--warning: #fcd34d;--warning-muted: rgba(252, 211, 77, .18);--danger: #f87171;--danger-hover: #fca5a5;--danger-muted: rgba(248, 113, 113, .18);--notif: #ff6369;--dot-active: var(--success);--dot-expiring: var(--warning);--brand-text: #a5b4fc;--brand-muted-foreground: #a5b4fc;--brand-muted: var(--brand)}@supports (color: color-mix(in lab,red,red)){:root[data-theme=dark]{--brand-muted: color-mix(in oklab, var(--brand) 14%, transparent)}}:root[data-theme=dark]{--brand-muted-2: var(--brand)}@supports (color: color-mix(in lab,red,red)){:root[data-theme=dark]{--brand-muted-2: color-mix(in oklab, var(--brand) 8%, transparent)}}:root[data-theme=dark]{--card-shadow: 0 8px 28px -16px rgba(0, 0, 0, .5);--card-shadow-hover: 0 8px 18px -10px rgba(0, 0, 0, .35);--pill-shadow: 0 4px 14px -10px rgba(0, 0, 0, .35);--card-bg: rgba(255, 255, 255, .035);--glass-plate: linear-gradient(165deg, #23262e, #14161c);--glass-panel-bg: rgba(255, 255, 255, .07);--accent-1: #12141b;--accent-2: #141622;--accent-3: #17192b;--accent-4: #1a1d38;--accent-5: #1f2247;--accent-6: #242759;--accent-7: #2b2d71;--accent-8: #34348f}@layer base{body{color:var(--surface-foreground)}button:not(:disabled),[role=button]:not([aria-disabled=true]){cursor:pointer}fieldset{min-width:0}}*{scrollbar-width:thin;scrollbar-color:rgba(140,150,165,.28) transparent}*::-webkit-scrollbar{width:7px;height:7px}*::-webkit-scrollbar-track{background:transparent}*::-webkit-scrollbar-thumb{background-color:#8c96a547;border-radius:999px;border:2px solid transparent;background-clip:content-box}*::-webkit-scrollbar-thumb:hover{background-color:#8c96a573}@layer components{.ui-title{font-size:1.75rem;font-weight:500;letter-spacing:-.02em;color:var(--surface-foreground)}.ui-subtitle{font-size:.9375rem;font-weight:600;color:var(--surface-foreground)}.ui-microlabel{font-size:11px;font-weight:600}.ui-card-title{font-size:.875rem;font-weight:500;letter-spacing:-.01em;color:var(--surface-foreground)}}@layer components{.role-chip{--chip-c: var(--role-c);background:var(--chip-c)}@supports (color: color-mix(in lab,red,red)){.role-chip{background:color-mix(in oklab,var(--chip-c) 16%,var(--surface))}}.role-chip{color:var(--chip-c)}@supports (color: color-mix(in lab,red,red)){.role-chip{color:color-mix(in oklab,var(--chip-c) 58%,var(--surface-foreground))}}:root[data-theme=dark] .role-chip{color:oklch(from var(--role-c) calc(l + .1) calc(c*1.15) h)}@supports (color: color-mix(in lab,red,red)){:root[data-theme=dark] .role-chip{color:color-mix(in oklab,oklch(from var(--role-c) calc(l + .1) calc(c*1.15) h) 55%,var(--surface-foreground))}}.role-chip:has(>.chip-tag:last-child){padding-right:.125rem}.role-chip:where(button){box-shadow:inset 0 0 0 1px var(--chip-c)}@supports (color: color-mix(in lab,red,red)){.role-chip:where(button){box-shadow:inset 0 0 0 1px color-mix(in oklab,var(--chip-c) 4%,var(--border))}}button.role-chip:hover{background:var(--chip-c)}@supports (color: color-mix(in lab,red,red)){button.role-chip:hover{background:color-mix(in oklab,var(--chip-c) 24%,var(--surface))}}.role-chip-selected{background:var(--chip-c)}@supports (color: color-mix(in lab,red,red)){.role-chip-selected{background:color-mix(in oklab,var(--chip-c) 24%,var(--surface))}}.role-chip-selected{box-shadow:inset 0 0 0 1px var(--chip-c)}.chip-tag{display:inline-block;height:1rem;min-width:0;overflow:hidden;white-space:nowrap;text-overflow:ellipsis;border-radius:9999px;background:var(--muted);padding:0 .375rem;font-size:.625rem;font-weight:600;line-height:1rem;color:var(--muted-foreground)}.ui-input{display:block;width:100%;border-radius:var(--radius);border:1px solid var(--border-strong);background:var(--surface);padding:.375rem .625rem;font-size:.875rem;color:var(--surface-foreground)}.ui-input:focus{outline:2px solid var(--ring);outline-offset:-1px;border-color:transparent}.ui-input::placeholder{color:var(--placeholder)}input.ui-input,select.ui-input{height:2.25rem}.ui-input:disabled{background:var(--muted);border-color:var(--border);color:var(--muted-foreground);cursor:not-allowed}select.ui-input{appearance:none;background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%2394a3b8' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='m6 9 6 6 6-6'/%3E%3C/svg%3E");background-repeat:no-repeat;background-position:right .5rem center;background-size:1rem 1rem;padding-right:2rem}.ui-checkbox{appearance:none;-webkit-appearance:none;display:inline-grid;place-content:center;width:1rem;height:1rem;flex-shrink:0;border-radius:.25rem;border:1px solid var(--checkbox-border);background:var(--surface);cursor:pointer}.ui-checkbox:after{content:"";width:.7rem;height:.7rem;transform:scale(0);background-color:var(--brand-foreground);mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%23000' stroke-width='3' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='m4.5 12.75 6 6 9-13.5'/%3E%3C/svg%3E");mask-repeat:no-repeat;mask-position:center;mask-size:contain}.ui-checkbox:indeterminate:after{mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%23000' stroke-width='3' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M5 12h14'/%3E%3C/svg%3E")}.ui-checkbox:checked,.ui-checkbox:indeterminate{border-color:var(--brand);background:var(--brand)}.ui-checkbox:checked:after,.ui-checkbox:indeterminate:after{transform:scale(1)}.ui-checkbox:focus-visible{outline:2px solid var(--ring);outline-offset:1px}.sticky-th{position:sticky;top:0;z-index:10;background:var(--brand-muted)}:root[data-theme=dark] .sticky-th{background:var(--brand)}@supports (color: color-mix(in lab,red,red)){:root[data-theme=dark] .sticky-th{background:color-mix(in oklab,var(--brand) 14%,var(--popover-bg))}}.group-lid-wrap{background:linear-gradient(var(--glass-panel-bg),var(--glass-panel-bg)),var(--glass-plate)}.group-lid{background:linear-gradient(var(--card-bg),var(--card-bg)),linear-gradient(var(--glass-panel-bg),var(--glass-panel-bg)),var(--glass-plate)}.group-lid:hover{background:linear-gradient(var(--state-hover),var(--state-hover)),linear-gradient(var(--card-bg),var(--card-bg)),linear-gradient(var(--glass-panel-bg),var(--glass-panel-bg)),var(--glass-plate)}.floating-bar{background:var(--popover-bg);border:1px solid var(--border);box-shadow:var(--card-shadow-hover)}.ui-check-row{display:flex;align-items:center;gap:.625rem;padding:.5rem .75rem;cursor:pointer;border-bottom:1px solid var(--muted)}.ui-check-row:last-child{border-bottom:none}.ui-check-row:hover{background:var(--muted)}}.floating-bar button:disabled{opacity:1;color:var(--placeholder);box-shadow:inset 0 0 0 1px var(--border);cursor:not-allowed}.cdk-drag-preview{box-sizing:border-box;border-radius:8px;background:var(--card-bg, var(--surface));box-shadow:0 8px 24px #0000002e;opacity:.95}.cdk-drag-placeholder{opacity:.35}.cdk-drag-animating,.cdk-drop-list-dragging .cdk-drag:not(.cdk-drag-placeholder){transition:transform .2s cubic-bezier(0,0,.2,1)}@property --tw-translate-x{syntax: "*"; inherits: false; initial-value: 0;}@property --tw-translate-y{syntax: "*"; inherits: false; initial-value: 0;}@property --tw-translate-z{syntax: "*"; inherits: false; initial-value: 0;}@property --tw-rotate-x{syntax: "*"; inherits: false;}@property --tw-rotate-y{syntax: "*"; inherits: false;}@property --tw-rotate-z{syntax: "*"; inherits: false;}@property --tw-skew-x{syntax: "*"; inherits: false;}@property --tw-skew-y{syntax: "*"; inherits: false;}@property --tw-space-y-reverse{syntax: "*"; inherits: false; initial-value: 0;}@property --tw-divide-y-reverse{syntax: "*"; inherits: false; initial-value: 0;}@property --tw-border-style{syntax: "*"; inherits: false; initial-value: solid;}@property --tw-leading{syntax: "*"; inherits: false;}@property --tw-font-weight{syntax: "*"; inherits: false;}@property --tw-tracking{syntax: "*"; inherits: false;}@property --tw-ordinal{syntax: "*"; inherits: false;}@property --tw-slashed-zero{syntax: "*"; inherits: false;}@property --tw-numeric-figure{syntax: "*"; inherits: false;}@property --tw-numeric-spacing{syntax: "*"; inherits: false;}@property --tw-numeric-fraction{syntax: "*"; inherits: false;}@property --tw-shadow{syntax: "*"; inherits: false; initial-value: 0 0 #0000;}@property --tw-shadow-color{syntax: "*"; inherits: false;}@property --tw-shadow-alpha{syntax: "<percentage>"; inherits: false; initial-value: 100%;}@property --tw-inset-shadow{syntax: "*"; inherits: false; initial-value: 0 0 #0000;}@property --tw-inset-shadow-color{syntax: "*"; inherits: false;}@property --tw-inset-shadow-alpha{syntax: "<percentage>"; inherits: false; initial-value: 100%;}@property --tw-ring-color{syntax: "*"; inherits: false;}@property --tw-ring-shadow{syntax: "*"; inherits: false; initial-value: 0 0 #0000;}@property --tw-inset-ring-color{syntax: "*"; inherits: false;}@property --tw-inset-ring-shadow{syntax: "*"; inherits: false; initial-value: 0 0 #0000;}@property --tw-ring-inset{syntax: "*"; inherits: false;}@property --tw-ring-offset-width{syntax: "<length>"; inherits: false; initial-value: 0px;}@property --tw-ring-offset-color{syntax: "*"; inherits: false; initial-value: #fff;}@property --tw-ring-offset-shadow{syntax: "*"; inherits: false; initial-value: 0 0 #0000;}@property --tw-outline-style{syntax: "*"; inherits: false; initial-value: solid;}@property --tw-blur{syntax: "*"; inherits: false;}@property --tw-brightness{syntax: "*"; inherits: false;}@property --tw-contrast{syntax: "*"; inherits: false;}@property --tw-grayscale{syntax: "*"; inherits: false;}@property --tw-hue-rotate{syntax: "*"; inherits: false;}@property --tw-invert{syntax: "*"; inherits: false;}@property --tw-opacity{syntax: "*"; inherits: false;}@property --tw-saturate{syntax: "*"; inherits: false;}@property --tw-sepia{syntax: "*"; inherits: false;}@property --tw-drop-shadow{syntax: "*"; inherits: false;}@property --tw-drop-shadow-color{syntax: "*"; inherits: false;}@property --tw-drop-shadow-alpha{syntax: "<percentage>"; inherits: false; initial-value: 100%;}@property --tw-drop-shadow-size{syntax: "*"; inherits: false;}@property --tw-backdrop-blur{syntax: "*"; inherits: false;}@property --tw-backdrop-brightness{syntax: "*"; inherits: false;}@property --tw-backdrop-contrast{syntax: "*"; inherits: false;}@property --tw-backdrop-grayscale{syntax: "*"; inherits: false;}@property --tw-backdrop-hue-rotate{syntax: "*"; inherits: false;}@property --tw-backdrop-invert{syntax: "*"; inherits: false;}@property --tw-backdrop-opacity{syntax: "*"; inherits: false;}@property --tw-backdrop-saturate{syntax: "*"; inherits: false;}@property --tw-backdrop-sepia{syntax: "*"; inherits: false;}@property --tw-duration{syntax: "*"; inherits: false;}@property --tw-ease{syntax: "*"; inherits: false;}@property --tw-scale-x{syntax: "*"; inherits: false; initial-value: 1;}@property --tw-scale-y{syntax: "*"; inherits: false; initial-value: 1;}@property --tw-scale-z{syntax: "*"; inherits: false; initial-value: 1;}@keyframes spin{to{transform:rotate(360deg)}}@keyframes pulse{50%{opacity:.5}}@layer properties{@supports ((-webkit-hyphens: none) and (not (margin-trim: inline))) or ((-moz-orient: inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-translate-x: 0;--tw-translate-y: 0;--tw-translate-z: 0;--tw-rotate-x: initial;--tw-rotate-y: initial;--tw-rotate-z: initial;--tw-skew-x: initial;--tw-skew-y: initial;--tw-space-y-reverse: 0;--tw-divide-y-reverse: 0;--tw-border-style: solid;--tw-leading: initial;--tw-font-weight: initial;--tw-tracking: initial;--tw-ordinal: initial;--tw-slashed-zero: initial;--tw-numeric-figure: initial;--tw-numeric-spacing: initial;--tw-numeric-fraction: initial;--tw-shadow: 0 0 #0000;--tw-shadow-color: initial;--tw-shadow-alpha: 100%;--tw-inset-shadow: 0 0 #0000;--tw-inset-shadow-color: initial;--tw-inset-shadow-alpha: 100%;--tw-ring-color: initial;--tw-ring-shadow: 0 0 #0000;--tw-inset-ring-color: initial;--tw-inset-ring-shadow: 0 0 #0000;--tw-ring-inset: initial;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-offset-shadow: 0 0 #0000;--tw-outline-style: solid;--tw-blur: initial;--tw-brightness: initial;--tw-contrast: initial;--tw-grayscale: initial;--tw-hue-rotate: initial;--tw-invert: initial;--tw-opacity: initial;--tw-saturate: initial;--tw-sepia: initial;--tw-drop-shadow: initial;--tw-drop-shadow-color: initial;--tw-drop-shadow-alpha: 100%;--tw-drop-shadow-size: initial;--tw-backdrop-blur: initial;--tw-backdrop-brightness: initial;--tw-backdrop-contrast: initial;--tw-backdrop-grayscale: initial;--tw-backdrop-hue-rotate: initial;--tw-backdrop-invert: initial;--tw-backdrop-opacity: initial;--tw-backdrop-saturate: initial;--tw-backdrop-sepia: initial;--tw-duration: initial;--tw-ease: initial;--tw-scale-x: 1;--tw-scale-y: 1;--tw-scale-z: 1}}}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+export * from "./lib/access-portal";
+export * from "./lib/access-portal-hub";
+export * from "./lib/project-config";
+export { type AuditConfig, DEFAULT_AUDIT_RETENTION_DAYS } from "./lib/audit-log";
+export * from "./lib/network-validation";
+export * from "./lib/dimensions-validation";
+export * from "./lib/data-stack";
+export * from "./lib/creds-stack";
+export * from "./lib/web-stack";
+export * from "./lib/web-cert-stack";
+export * from "./lib/federation";
+export { WebAcl, type WebAclProps, type WafConfig, type WafLimits } from "./lib/constructs/web-acl";
+export * from "./lib/plugins/registration";
+export { PluginApi, type PluginApiProps } from "./lib/plugins/plugin-api";
+export { PluginCatalogActivation, type PluginCatalogActivationProps } from "./lib/plugins/plugin-catalog-activation";
+export * from "./lib/plugins/runtime";
+export * from "./lib/target-account-stack";
+export * from "./lib/target-account-template";
+export * from "./lib/constructs/web-identity";
+export * from "./lib/constructs/target-account-trust";
+export * from "./lib/network-stack";
+export * from "./lib/connector-stack";
+export * from "./lib/constructs/tailnet-connector";
+export * from "./lib/constructs/sg-manager";
+export * from "./lib/constructs/tailnet-resolver";
+export { CONNECTOR_NAME_RE, DEFAULT_RESOURCE_PREFIX, assertConnectorName, connectorHostname, parseConnectorVpcs, sgManagerFnName, tailnetResolverFnName, deviceKeyMinterFnName, connectorKeyMinterFnName, aclReconcilerRoleName, aclReconcilerFnName, } from "./lambdacode/network/naming";
+export type { ConnectorTarget } from "./lambdacode/network/naming";

package/dist/index.js

@@ -0,0 +1,66 @@
+"use strict";
+// The package's public surface. Everything a consuming CDK app needs is
+// exported here — deep imports into lib/ are not part of the contract.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aclReconcilerFnName = exports.aclReconcilerRoleName = exports.connectorKeyMinterFnName = exports.deviceKeyMinterFnName = exports.tailnetResolverFnName = exports.sgManagerFnName = exports.parseConnectorVpcs = exports.connectorHostname = exports.assertConnectorName = exports.DEFAULT_RESOURCE_PREFIX = exports.CONNECTOR_NAME_RE = exports.PluginCatalogActivation = exports.PluginApi = exports.WebAcl = exports.DEFAULT_AUDIT_RETENTION_DAYS = void 0;
+// Hub
+__exportStar(require("./lib/access-portal"), exports);
+__exportStar(require("./lib/access-portal-hub"), exports);
+__exportStar(require("./lib/project-config"), exports);
+var audit_log_1 = require("./lib/audit-log");
+Object.defineProperty(exports, "DEFAULT_AUDIT_RETENTION_DAYS", { enumerable: true, get: function () { return audit_log_1.DEFAULT_AUDIT_RETENTION_DAYS; } });
+__exportStar(require("./lib/network-validation"), exports);
+__exportStar(require("./lib/dimensions-validation"), exports);
+__exportStar(require("./lib/data-stack"), exports);
+__exportStar(require("./lib/creds-stack"), exports);
+__exportStar(require("./lib/web-stack"), exports);
+__exportStar(require("./lib/web-cert-stack"), exports);
+__exportStar(require("./lib/federation"), exports);
+var web_acl_1 = require("./lib/constructs/web-acl");
+Object.defineProperty(exports, "WebAcl", { enumerable: true, get: function () { return web_acl_1.WebAcl; } });
+// Customer plugins (Epic 5): registrations feed addAccessPortal; the constructs are exported for custom compositions.
+__exportStar(require("./lib/plugins/registration"), exports);
+var plugin_api_1 = require("./lib/plugins/plugin-api");
+Object.defineProperty(exports, "PluginApi", { enumerable: true, get: function () { return plugin_api_1.PluginApi; } });
+var plugin_catalog_activation_1 = require("./lib/plugins/plugin-catalog-activation");
+Object.defineProperty(exports, "PluginCatalogActivation", { enumerable: true, get: function () { return plugin_catalog_activation_1.PluginCatalogActivation; } });
+__exportStar(require("./lib/plugins/runtime"), exports);
+// Target accounts
+__exportStar(require("./lib/target-account-stack"), exports);
+__exportStar(require("./lib/target-account-template"), exports);
+__exportStar(require("./lib/constructs/web-identity"), exports);
+__exportStar(require("./lib/constructs/target-account-trust"), exports);
+// Private network
+__exportStar(require("./lib/network-stack"), exports);
+__exportStar(require("./lib/connector-stack"), exports);
+__exportStar(require("./lib/constructs/tailnet-connector"), exports);
+__exportStar(require("./lib/constructs/sg-manager"), exports);
+__exportStar(require("./lib/constructs/tailnet-resolver"), exports);
+// The by-name cross-account contracts (names derived from resourcePrefix) — used internally
+// by AccessPortalHub; exported for consumers who need the raw names.
+var naming_1 = require("./lambdacode/network/naming");
+Object.defineProperty(exports, "CONNECTOR_NAME_RE", { enumerable: true, get: function () { return naming_1.CONNECTOR_NAME_RE; } });
+Object.defineProperty(exports, "DEFAULT_RESOURCE_PREFIX", { enumerable: true, get: function () { return naming_1.DEFAULT_RESOURCE_PREFIX; } });
+Object.defineProperty(exports, "assertConnectorName", { enumerable: true, get: function () { return naming_1.assertConnectorName; } });
+Object.defineProperty(exports, "connectorHostname", { enumerable: true, get: function () { return naming_1.connectorHostname; } });
+Object.defineProperty(exports, "parseConnectorVpcs", { enumerable: true, get: function () { return naming_1.parseConnectorVpcs; } });
+Object.defineProperty(exports, "sgManagerFnName", { enumerable: true, get: function () { return naming_1.sgManagerFnName; } });
+Object.defineProperty(exports, "tailnetResolverFnName", { enumerable: true, get: function () { return naming_1.tailnetResolverFnName; } });
+Object.defineProperty(exports, "deviceKeyMinterFnName", { enumerable: true, get: function () { return naming_1.deviceKeyMinterFnName; } });
+Object.defineProperty(exports, "connectorKeyMinterFnName", { enumerable: true, get: function () { return naming_1.connectorKeyMinterFnName; } });
+Object.defineProperty(exports, "aclReconcilerRoleName", { enumerable: true, get: function () { return naming_1.aclReconcilerRoleName; } });
+Object.defineProperty(exports, "aclReconcilerFnName", { enumerable: true, get: function () { return naming_1.aclReconcilerFnName; } });

package/dist/lambdacode/api/services/brandingShapes.d.ts

@@ -0,0 +1,5 @@
+export declare const HEX_RE: RegExp;
+export declare const LOGO_MAX = 64000;
+export declare const LOGO_URL_RE: RegExp;
+/** 'mono' is the wizard's mode-aware neutral accent (primary only). */
+export declare function isBrandColor(key: string, value: string): boolean;

package/dist/lambdacode/api/services/brandingShapes.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOGO_URL_RE = exports.LOGO_MAX = exports.HEX_RE = void 0;
+exports.isBrandColor = isBrandColor;
+// One definition of the branding value shapes — the runtime admin API (brandingService) and
+// deploy-time synth validation (WebStack) must agree, or a value one accepts fails in the other.
+exports.HEX_RE = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i;
+// Enough for a ~48 KB image as base64 (or any inline SVG); the whole overlay
+// must stay a quick pre-paint fetch.
+exports.LOGO_MAX = 64_000;
+exports.LOGO_URL_RE = /^(https:\/\/|data:image\/)/;
+/** 'mono' is the wizard's mode-aware neutral accent (primary only). */
+function isBrandColor(key, value) {
+    return exports.HEX_RE.test(value) || (key === "primaryColor" && value === "mono");
+}

package/dist/lambdacode/issuer/objects.d.ts

@@ -0,0 +1,8 @@
+/** The objects the issuer serves. Shared by the publisher Lambda and the
+ *  OidcIssuer construct (whose bucket grant names exactly these keys), so it
+ *  must stay free of SDK imports — the construct ships to consumers. */
+export declare const ISSUER_OBJECTS: {
+    readonly discovery: ".well-known/openid-configuration";
+    readonly jwks: ".well-known/jwks.json";
+    readonly index: "index.html";
+};

package/dist/lambdacode/issuer/objects.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ISSUER_OBJECTS = void 0;
+/** The objects the issuer serves. Shared by the publisher Lambda and the
+ *  OidcIssuer construct (whose bucket grant names exactly these keys), so it
+ *  must stay free of SDK imports — the construct ships to consumers. */
+exports.ISSUER_OBJECTS = {
+    discovery: ".well-known/openid-configuration",
+    jwks: ".well-known/jwks.json",
+    index: "index.html",
+};

package/dist/lambdacode/network/naming.d.ts

@@ -0,0 +1,52 @@
+/** Headscale rejects digit-first user names and ~half of Cognito subs (random hex) start with one — the prefix
+ *  keeps names letter-first. The keyminter (creates users) and ACL reconciler (matches rules) MUST share this mapping. */
+export declare const headscaleUserName: (cognitoSub: string) => string;
+/** SET-ONCE product prefix for every by-name contract (Lambda/role/secret names, the SG rule marker). Config
+ *  `resourcePrefix` may override it only BEFORE the first deploy — renaming later breaks every cross-account by-name invocation and orphans managed SG rules until all stacks in all accounts redeploy in lockstep. */
+export declare const DEFAULT_RESOURCE_PREFIX = "infra-client";
+/** A connector VPC's `name` (config `connectorVpcs`): letters and digits, letter-first, at most 10 — it
+ *  suffixes the connector hostname AND both per-VPC function names, and the longest of those (a 15-char
+ *  prefix, the resolver stem, a 20-char site id, the name) must fit Lambda's 64-char limit. */
+export declare const CONNECTOR_NAME_RE: RegExp;
+export declare const assertConnectorName: (name: string, where: string) => void;
+/** One connector VPC as the hub addresses it: `name` for a named VPC, `region` only outside the hub's region.
+ *  NetworkStack writes `CONNECTOR_VPCS` (accountNumber → ConnectorTarget[]) for the reconciler and its relay. */
+export interface ConnectorTarget {
+    name?: string;
+    region?: string;
+}
+export declare const parseConnectorVpcs: (json: string | undefined) => Map<string, ConnectorTarget[]>;
+/** `connector-<account>[-<name>]` is a CONTRACT: the ACL reconciler maps a node's routes to grants in the
+ *  account it names. The name tells one VPC of an account from another; it coexists with headscale's own
+ *  `-<random>` dedupe suffix, which the reconciler's parser tolerates either way. */
+export declare const connectorHostname: (account: string, name?: string) => string;
+/** Well-known SG-manager function name — one per connector VPC (`-<name>` for a named VPC; an account's
+ *  one unnamed VPC keeps the bare name), invoked BY NAME across accounts (as the key minters are). The
+ *  reconciler builds `arn:aws:lambda:<region>:<account>:function:<this>` from it. */
+export declare const sgManagerFnName: (prefix: string, name?: string) => string;
+/** Well-known key-minter names — invoked BY NAME so stacks deploy in any order. SECURITY SPLIT: the device minter
+ *  (per-user keys, takes a siteId) is granted only to the vending API role; each site's connector minter (machine keys, ignores input) may be granted cross-account — site selection rides on WHICH minter an account may invoke, never on an argument, so a connector can neither impersonate a user nor enroll into another site. */
+export declare const deviceKeyMinterFnName: (prefix: string) => string;
+export declare const connectorKeyMinterFnName: (prefix: string, siteId: string) => string;
+/** Well-known in-VPC DNS resolver — one per connector VPC, named PER SITE (an account may host connector
+ *  VPCs in two sites — colliding CIDRs are the whole reason sites exist — and each VPC has its own private-DNS
+ *  view, so a per-account name would answer with the wrong VPC's IPs) and, for a named VPC, per VPC. Invoked
+ *  BY NAME across accounts like the SG-manager; private-zone names (Cloud Map, RDS) are invisible outside
+ *  their VPC. */
+export declare const tailnetResolverFnName: (prefix: string, siteId: string, name?: string) => string;
+/** Fixed reconciler role name: connector accounts pin their SG-manager's invoke trust to this exact ARN. Lambda
+ *  resolves the principal at permission-attach time, so recreating this role means redeploying every ConnectorStack. */
+export declare const aclReconcilerRoleName: (prefix: string) => string;
+/** The reconciler's out-of-VPC relay (function AND its invoke-only role share the name) — the hub's way
+ *  into connector accounts in OTHER regions. Those accounts pin their SG-manager/resolver trust to the ROLE,
+ *  the way hub-region ones pin it to the reconciler role; same recreate caveat. */
+export declare const aclReconcilerRelayFnName: (prefix: string) => string;
+export declare const aclReconcilerRelayRoleName: (prefix: string) => string;
+/** Site ids: DNS label, letter-first, ≤20 chars — also the per-site resolver name's suffix. */
+export declare const SITE_ID_RE: RegExp;
+/** Fixed reconciler FUNCTION name: the API invokes it by name for the admin "Sync now" button
+ *  (same by-name pattern as the key minters, so CredsStack never references NetworkStack). */
+export declare const aclReconcilerFnName: (prefix: string) => string;
+/** Ownership marker on every SG rule the manager writes — it only ever
+ *  revokes rules carrying it. */
+export declare const managedRuleDesc: (prefix: string) => string;

package/dist/lambdacode/network/naming.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.managedRuleDesc = exports.aclReconcilerFnName = exports.SITE_ID_RE = exports.aclReconcilerRelayRoleName = exports.aclReconcilerRelayFnName = exports.aclReconcilerRoleName = exports.tailnetResolverFnName = exports.connectorKeyMinterFnName = exports.deviceKeyMinterFnName = exports.sgManagerFnName = exports.connectorHostname = exports.parseConnectorVpcs = exports.assertConnectorName = exports.CONNECTOR_NAME_RE = exports.DEFAULT_RESOURCE_PREFIX = exports.headscaleUserName = void 0;
+/** Headscale rejects digit-first user names and ~half of Cognito subs (random hex) start with one — the prefix
+ *  keeps names letter-first. The keyminter (creates users) and ACL reconciler (matches rules) MUST share this mapping. */
+const headscaleUserName = (cognitoSub) => `u-${cognitoSub}`;
+exports.headscaleUserName = headscaleUserName;
+/** SET-ONCE product prefix for every by-name contract (Lambda/role/secret names, the SG rule marker). Config
+ *  `resourcePrefix` may override it only BEFORE the first deploy — renaming later breaks every cross-account by-name invocation and orphans managed SG rules until all stacks in all accounts redeploy in lockstep. */
+exports.DEFAULT_RESOURCE_PREFIX = "infra-client";
+/** A connector VPC's `name` (config `connectorVpcs`): letters and digits, letter-first, at most 10 — it
+ *  suffixes the connector hostname AND both per-VPC function names, and the longest of those (a 15-char
+ *  prefix, the resolver stem, a 20-char site id, the name) must fit Lambda's 64-char limit. */
+exports.CONNECTOR_NAME_RE = /^[a-z][a-z0-9]{0,9}$/;
+const assertConnectorName = (name, where) => {
+    if (!exports.CONNECTOR_NAME_RE.test(name)) {
+        throw new Error(`${where}: name "${name}" is invalid — letters and digits, letter-first, at most 10 ` +
+            `characters (it suffixes the connector's hostname and its function names).`);
+    }
+};
+exports.assertConnectorName = assertConnectorName;
+const parseConnectorVpcs = (json) => new Map(Object.entries(JSON.parse(json ?? "{}")).filter(([, v]) => Array.isArray(v)));
+exports.parseConnectorVpcs = parseConnectorVpcs;
+/** `connector-<account>[-<name>]` is a CONTRACT: the ACL reconciler maps a node's routes to grants in the
+ *  account it names. The name tells one VPC of an account from another; it coexists with headscale's own
+ *  `-<random>` dedupe suffix, which the reconciler's parser tolerates either way. */
+const connectorHostname = (account, name) => name ? `connector-${account}-${name}` : `connector-${account}`;
+exports.connectorHostname = connectorHostname;
+/** Well-known SG-manager function name — one per connector VPC (`-<name>` for a named VPC; an account's
+ *  one unnamed VPC keeps the bare name), invoked BY NAME across accounts (as the key minters are). The
+ *  reconciler builds `arn:aws:lambda:<region>:<account>:function:<this>` from it. */
+const sgManagerFnName = (prefix, name) => name ? `${prefix}-sg-manager-${name}` : `${prefix}-sg-manager`;
+exports.sgManagerFnName = sgManagerFnName;
+/** Well-known key-minter names — invoked BY NAME so stacks deploy in any order. SECURITY SPLIT: the device minter
+ *  (per-user keys, takes a siteId) is granted only to the vending API role; each site's connector minter (machine keys, ignores input) may be granted cross-account — site selection rides on WHICH minter an account may invoke, never on an argument, so a connector can neither impersonate a user nor enroll into another site. */
+const deviceKeyMinterFnName = (prefix) => `${prefix}-tailnet-device-keyminter`;
+exports.deviceKeyMinterFnName = deviceKeyMinterFnName;
+const connectorKeyMinterFnName = (prefix, siteId) => `${prefix}-tailnet-connector-keyminter-${siteId}`;
+exports.connectorKeyMinterFnName = connectorKeyMinterFnName;
+/** Well-known in-VPC DNS resolver — one per connector VPC, named PER SITE (an account may host connector
+ *  VPCs in two sites — colliding CIDRs are the whole reason sites exist — and each VPC has its own private-DNS
+ *  view, so a per-account name would answer with the wrong VPC's IPs) and, for a named VPC, per VPC. Invoked
+ *  BY NAME across accounts like the SG-manager; private-zone names (Cloud Map, RDS) are invisible outside
+ *  their VPC. */
+const tailnetResolverFnName = (prefix, siteId, name) => name ? `${prefix}-tailnet-resolver-${siteId}-${name}` : `${prefix}-tailnet-resolver-${siteId}`;
+exports.tailnetResolverFnName = tailnetResolverFnName;
+/** Fixed reconciler role name: connector accounts pin their SG-manager's invoke trust to this exact ARN. Lambda
+ *  resolves the principal at permission-attach time, so recreating this role means redeploying every ConnectorStack. */
+const aclReconcilerRoleName = (prefix) => `${prefix}-acl-reconciler`;
+exports.aclReconcilerRoleName = aclReconcilerRoleName;
+/** The reconciler's out-of-VPC relay (function AND its invoke-only role share the name) — the hub's way
+ *  into connector accounts in OTHER regions. Those accounts pin their SG-manager/resolver trust to the ROLE,
+ *  the way hub-region ones pin it to the reconciler role; same recreate caveat. */
+const aclReconcilerRelayFnName = (prefix) => `${prefix}-acl-reconciler-relay`;
+exports.aclReconcilerRelayFnName = aclReconcilerRelayFnName;
+const aclReconcilerRelayRoleName = (prefix) => `${prefix}-acl-reconciler-relay`;
+exports.aclReconcilerRelayRoleName = aclReconcilerRelayRoleName;
+/** Site ids: DNS label, letter-first, ≤20 chars — also the per-site resolver name's suffix. */
+exports.SITE_ID_RE = /^[a-z][a-z0-9-]{0,19}$/;
+/** Fixed reconciler FUNCTION name: the API invokes it by name for the admin "Sync now" button
+ *  (same by-name pattern as the key minters, so CredsStack never references NetworkStack). */
+const aclReconcilerFnName = (prefix) => `${prefix}-acl-reconciler`;
+exports.aclReconcilerFnName = aclReconcilerFnName;
+/** Ownership marker on every SG rule the manager writes — it only ever
+ *  revokes rules carrying it. */
+const managedRuleDesc = (prefix) => `${prefix}:managed`;
+exports.managedRuleDesc = managedRuleDesc;

package/dist/lib/access-portal-hub.d.ts

@@ -0,0 +1,53 @@
+import { Construct } from "constructs";
+import * as iam from "aws-cdk-lib/aws-iam";
+import * as lambda from "aws-cdk-lib/aws-lambda";
+/** Identity of a deployed hub, from the consumer's point of view. Everything
+ *  a cross-account stack needs derives from these — no hand-assembled ARNs. */
+export interface AccessPortalHubAttributes {
+    readonly account: string;
+    readonly region: string;
+    /** The hub's issuer host, e.g. "issuer.acme.com". Needed for `issuerUrl`;
+     *  omit when only the network side is consumed. */
+    readonly issuerDomain?: string;
+    /** SET-ONCE product prefix the hub was deployed with. */
+    readonly resourcePrefix?: string;
+    /** The zone + subdomain the hub's network deployed with. Needed for
+     *  `controlUrl()`; omit when the hub has no NetworkStack. */
+    readonly network?: {
+        readonly zoneName: string;
+        readonly subdomain: string;
+    };
+}
+/** The hub consumers point cross-account constructs at. Every contract is a
+ *  WELL-KNOWN NAME from `resourcePrefix`, so plain attributes answer everything. */
+export interface IAccessPortalHub {
+    readonly account: string;
+    readonly region: string;
+    readonly resourcePrefix: string;
+    /** `https://<issuerDomain>` — what target-account trust derives from. */
+    readonly issuerUrl?: string;
+    /** A site's Headscale control-plane URL (`https://<site>.<subdomain>.<zone>`). */
+    controlUrl(siteId: string): string;
+    /** ONE SITE's connector minter — site selection = WHICH minter an account
+     *  may invoke; the hub must reciprocate with grantConnectorAccount. */
+    connectorKeyMinter(scope: Construct, siteId: string): lambda.IFunction;
+    /** The hub's ACL-reconciler role — what an SG-manager/resolver IN THE HUB'S REGION trusts. */
+    aclReconcilerPrincipal(): iam.IPrincipal;
+    /** The reconciler's out-of-VPC relay role — what an SG-manager/resolver in ANY OTHER region
+     *  trusts (the reconciler itself cannot reach that region). */
+    aclReconcilerRelayPrincipal(): iam.IPrincipal;
+}
+export declare class AccessPortalHub implements IAccessPortalHub {
+    /** Locate a hub by identity alone — for apps that don't contain its stacks. */
+    static fromAttributes(attrs: AccessPortalHubAttributes): IAccessPortalHub;
+    readonly account: string;
+    readonly region: string;
+    readonly resourcePrefix: string;
+    readonly issuerUrl?: string;
+    private readonly network?;
+    private constructor();
+    controlUrl(siteId: string): string;
+    connectorKeyMinter(scope: Construct, siteId: string): lambda.IFunction;
+    aclReconcilerPrincipal(): iam.IPrincipal;
+    aclReconcilerRelayPrincipal(): iam.IPrincipal;
+}

package/dist/lib/access-portal-hub.js

@@ -0,0 +1,87 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessPortalHub = void 0;
+const iam = __importStar(require("aws-cdk-lib/aws-iam"));
+const lambda = __importStar(require("aws-cdk-lib/aws-lambda"));
+const naming_1 = require("../lambdacode/network/naming");
+class AccessPortalHub {
+    /** Locate a hub by identity alone — for apps that don't contain its stacks. */
+    static fromAttributes(attrs) {
+        return new AccessPortalHub(attrs);
+    }
+    account;
+    region;
+    resourcePrefix;
+    issuerUrl;
+    network;
+    constructor(attrs) {
+        this.account = attrs.account;
+        this.region = attrs.region;
+        this.resourcePrefix = attrs.resourcePrefix ?? naming_1.DEFAULT_RESOURCE_PREFIX;
+        this.issuerUrl = attrs.issuerDomain
+            ? `https://${attrs.issuerDomain}`
+            : undefined;
+        this.network = attrs.network
+            ? { zoneName: attrs.network.zoneName, subdomain: attrs.network.subdomain }
+            : undefined;
+    }
+    controlUrl(siteId) {
+        if (!this.network) {
+            throw new Error("AccessPortalHub.controlUrl: pass `network: { zoneName, subdomain }` " +
+                "in fromAttributes() — the control-plane hostname derives from them.");
+        }
+        return `https://${siteId}.${this.network.subdomain}.${this.network.zoneName}`;
+    }
+    connectorKeyMinter(scope, siteId) {
+        const id = `HubConnectorMinter-${siteId}`;
+        const existing = scope.node.tryFindChild(id);
+        if (existing)
+            return existing;
+        return lambda.Function.fromFunctionAttributes(scope, id, {
+            functionArn: `arn:aws:lambda:${this.region}:${this.account}:function:${(0, naming_1.connectorKeyMinterFnName)(this.resourcePrefix, siteId)}`,
+            // Cross-account: the resource-policy half lives hub-side
+            // (NetworkStack.grantConnectorAccount) — nothing to attach here.
+            skipPermissions: true,
+        });
+    }
+    aclReconcilerPrincipal() {
+        return new iam.ArnPrincipal(`arn:aws:iam::${this.account}:role/${(0, naming_1.aclReconcilerRoleName)(this.resourcePrefix)}`);
+    }
+    aclReconcilerRelayPrincipal() {
+        return new iam.ArnPrincipal(`arn:aws:iam::${this.account}:role/${(0, naming_1.aclReconcilerRelayRoleName)(this.resourcePrefix)}`);
+    }
+}
+exports.AccessPortalHub = AccessPortalHub;

package/dist/lib/access-portal.d.ts

@@ -0,0 +1,32 @@
+import { Construct } from "constructs";
+import { PluginRegistration } from "./plugins/registration";
+import { DataStack } from "./data-stack";
+import { CredsStack } from "./creds-stack";
+import { WebStack } from "./web-stack";
+import { WebCertStack } from "./web-cert-stack";
+import { NetworkStack } from "./network-stack";
+import type { ProjectConfig } from "./project-config";
+import type { ResolvedSite } from "./network-validation";
+export interface AccessPortalProps {
+    readonly project: ProjectConfig;
+    /** SET ONCE — every by-name cross-account contract derives from it. */
+    readonly resourcePrefix: string;
+    readonly sites?: ResolvedSite[];
+    /** Overrides the bundled web app (tests point it at a stub). */
+    readonly webAssetPath?: string;
+    /** Customer plugins (`definePlugin` results). Requires `project.plugins.enabled`. */
+    readonly plugins?: readonly PluginRegistration[];
+}
+export interface AccessPortal {
+    readonly dataStack: DataStack;
+    readonly credsStack: CredsStack;
+    /** us-east-1 companion: issuer + web certificates and the CloudFront web
+     *  ACL. Always present — CredsStack depends on it. */
+    readonly webCertStack: WebCertStack;
+    readonly webStack: WebStack;
+    /** Present only when `project.network` + `sites` are set. */
+    readonly networkStack?: NetworkStack;
+}
+/** Every hub stack as one unit — NOT a `cdk.Stage`: a Stage prefixes every
+ *  construct path, renaming physical names and replacing live resources. */
+export declare function addAccessPortal(scope: Construct, props: AccessPortalProps): AccessPortal;