/* School Suite front door - page-level styles on top of components.css.
   Mobile-first checks: no rule here introduces horizontal scroll below
   390px -- long content (tables, JWT payloads) scrolls in its OWN
   overflow-x container, the page body never does. */

.skip-link {
  position: absolute; left: -9999px; top: 0; z-index: 100;
  background: var(--brand-deep); color: var(--white);
  padding: 0.6rem 1rem; border-radius: 0 0 var(--radius-sm) 0;
}
.skip-link:focus { left: 0; }

.visually-hidden {
  position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px;
  overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0;
}

img, svg { max-width: 100%; }

/* Grid items default to min-width:auto, so a wide descendant (the trust
   schools table's inline appoint-manager form has a 200px-min-width field)
   refuses to shrink and blows the WHOLE PAGE out horizontally at mobile
   widths, even though .wl-table-scroll has its own overflow-x:auto -- that
   inner scroll container can only do its job once its own box is allowed
   to be narrower than its content. This was a real bug found testing at
   390px on the trust view (Your schools table); fixed by letting every
   grid item that can contain a table shrink properly. */
.split-main > * { min-width: 0; }
.suite-apps-grid > *, .suite-org-type-grid > *, .suite-proposition-grid > * { min-width: 0; }

/* ---------------- Auth shell (CEC3 split-screen landing) ----------------
   Full-bleed split screen: a dark brand panel with the wordmark, an
   editorial headline, a lede and a real-numbers stat row, plus a quiet
   footnote; a calm pale right panel holding one floating white card with
   the route options. Used ONLY by landing.html (base_auth.html has no
   header/footer chrome of its own -- this pattern styles the whole page). */
.wl-auth-shell { min-height: 100vh; display: grid; grid-template-columns: 1.05fr 1fr; }
@media (max-width: 940px) { .wl-auth-shell { grid-template-columns: 1fr; min-height: auto; } }

.wl-auth-brand {
  background: linear-gradient(160deg, var(--brand-deep) 0%, color-mix(in srgb, var(--brand-deep) 78%, black) 100%);
  color: var(--white);
  padding: 3rem 3rem 2.5rem;
  display: flex; flex-direction: column; justify-content: space-between;
  position: relative; isolation: isolate;
}
@media (max-width: 940px) { .wl-auth-brand { min-height: 300px; padding: 2.25rem 1.5rem; } }
/* Phone: the dark panel becomes a COMPACT header, not a full screen the
   visitor has to scroll past before reaching the actual choice -- the
   lede and footnote (both restated, less urgently, elsewhere/nowhere
   essential) drop out, the headline shrinks, and the stat row (the one
   piece of the panel that carries real credibility, not just mood) stays
   but tightens up. */
@media (max-width: 640px) {
  .wl-auth-brand { min-height: 0; padding: 1.5rem 1.25rem 1.35rem; }
  .wl-auth-mid h1 { font-size: 1.5rem; max-width: none; margin-bottom: 0.3rem; }
  .wl-auth-mid .lede { display: none; }
  .wl-auth-stats { margin-top: 0.9rem; gap: 1.35rem; }
  .wl-auth-stats .n { font-size: 1.3rem; }
  .wl-auth-bottom { display: none; }
}
/* Subtle large-scale hex texture, matching CEC3's own quiet brand mark --
   decorative only, z-index kept below all real content. */
.wl-hex-texture::before {
  content: ""; position: absolute; inset: 0; pointer-events: none;
  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='84' height='96' viewBox='0 0 84 96'%3E%3Cpath d='M42 0L84 24V72L42 96L0 72V24Z' fill='none' stroke='%23ffffff' stroke-opacity='0.05' stroke-width='1.5'/%3E%3C/svg%3E");
  background-size: 84px 96px; z-index: 0;
}
.wl-hex-texture > * { position: relative; z-index: 1; }
.wl-auth-wordmark { display: flex; align-items: center; gap: 0.55rem; color: var(--white); text-decoration: none; font-weight: var(--w-numeral); font-size: 1.05rem; }
.wl-auth-mid h1 { color: var(--white); font-size: var(--text-display); font-weight: var(--w-display); max-width: 16ch; }
.wl-auth-mid .lede { color: rgba(255,255,255,0.86); max-width: 54ch; }
.wl-auth-stats { display: flex; gap: 2rem; margin-top: 2.25rem; flex-wrap: wrap; }
.wl-auth-stats .n { font-size: 1.9rem; font-weight: var(--w-display); display: block; color: var(--white); }
.wl-auth-stats .l { font-size: 0.72rem; text-transform: uppercase; letter-spacing: var(--tracking-label); color: rgba(255,255,255,0.62); }
.wl-auth-bottom { font-size: 0.8rem; color: rgba(255,255,255,0.55); margin-top: 1.5rem; max-width: 62ch; }

.wl-auth-form-side {
  display: flex; align-items: center; justify-content: center;
  padding: 3rem 2.5rem; background: color-mix(in srgb, var(--brand) 5%, var(--paper));
  min-width: 0;
}
@media (max-width: 940px) { .wl-auth-form-side { padding: 2.25rem 1.5rem 3rem; } }
.wl-auth-card { width: 100%; max-width: 460px; min-width: 0; }
.wl-auth-card .wl-card { box-shadow: var(--shadow-lg); }

.wl-role-grid { display: grid; grid-template-columns: 1fr; gap: 1rem; margin-top: 1.5rem; }
a.wl-role-card, details.wl-role-card summary, button.wl-role-card {
  display: flex; align-items: center; gap: 0.9rem;
  padding: 1rem 1.1rem; border: 1.5px solid var(--line-strong); border-radius: var(--radius);
  text-decoration: none; cursor: pointer; background: var(--white); list-style: none;
  transition: border-color var(--dur) var(--ease), transform var(--dur) var(--ease), box-shadow var(--dur) var(--ease);
}
/* button.wl-role-card: the two demo cards are real <button type="submit">
   elements inside a <form method="post">, not links -- minting a demo
   session is a write (a new session row, an audit event), so it must never
   be a bare GET (see service/app/routers/demo.py). Reset the handful of
   default <button> properties the shared rule above does not already
   override, so it is visually and behaviourally identical to the <a>
   variant used by the three routes above it. */
button.wl-role-card { width: 100%; margin: 0; font: inherit; color: inherit; }
details.wl-role-card summary::-webkit-details-marker { display: none; }
details.wl-role-card { border: none; padding: 0; background: none; }
a.wl-role-card:hover, a.wl-role-card:focus-visible,
details.wl-role-card summary:hover, details.wl-role-card summary:focus-visible,
button.wl-role-card:hover, button.wl-role-card:focus-visible {
  border-color: var(--brand); transform: translateY(-2px) translateX(2px); box-shadow: var(--shadow-md);
}
details.wl-role-card[open] summary { border-color: var(--brand); border-radius: var(--radius) var(--radius) 0 0; margin-bottom: 0; }
.wl-role-icon {
  display: flex; align-items: center; justify-content: center; flex: none;
  width: 2.75rem; height: 2.75rem; border-radius: 50%; background: var(--tint); color: var(--brand-deep);
}
.wl-role-icon svg { width: 22px; height: 22px; }
.wl-role-body { flex: 1; min-width: 0; }
.wl-role-body h3 { color: var(--brand-deep); margin: 0 0 0.2rem; font-size: 1rem; }
.wl-role-body p { margin: 0; font-size: 0.82rem; }
.wl-role-go { color: var(--brand); flex: none; font-weight: 900; font-size: 1.1rem; }
details.wl-role-card[open] .wl-role-go-toggle { transform: rotate(90deg); }
.wl-role-card-expand {
  border: 1.5px solid var(--brand); border-top: none; border-radius: 0 0 var(--radius) var(--radius);
  padding: 1.1rem 1.1rem 1.25rem; background: var(--white);
}
.suite-note.quiet { background: none; border: none; padding: 0.4rem 0 0; font-size: 0.78rem; }

/* ---------------- Demo accounts (landing page) ----------------
   "A similar layer but single button below this one" (Jason) -- visually
   distinct from the three real registration/sign-in routes above it: a
   dashed divider, a plainly-worded heading, and a dashed card border so it
   never reads as a fourth, equally-weighted way to register for real. */
.wl-demo-section { margin-top: 2rem; padding-top: 1.75rem; border-top: 1.5px dashed var(--line-strong); }
.wl-demo-heading h2 { margin-bottom: 0.25rem; }
.wl-demo-heading p { margin-top: 0; }
.wl-role-card-demo { border-style: dashed; }
.wl-role-card-demo .wl-role-icon { background: color-mix(in srgb, var(--need-medium) 30%, white); color: var(--need-medium-ink); }
.wl-role-tag {
  display: inline-block; margin-left: 0.5rem; padding: 0.15rem 0.55rem; border-radius: var(--radius-pill);
  background: color-mix(in srgb, var(--need-medium) 45%, white); color: var(--need-medium-ink);
  font-size: 0.66rem; font-weight: 800; text-transform: uppercase; letter-spacing: 0.04em; vertical-align: middle;
}

/* ---------------- Demo-account banner (signed-in chrome) ---------------- */
.suite-demo-banner {
  display: flex; align-items: center; gap: 0.55rem;
  background: color-mix(in srgb, var(--need-medium) 30%, white);
  color: var(--need-medium-ink);
  border-bottom: 1px solid color-mix(in srgb, var(--need-medium) 55%, white);
  padding: 0.55rem 1rem; font-size: 0.82rem;
}
.suite-demo-banner svg { flex: none; width: 18px; height: 18px; }

/* ---------------- Chrome extras ---------------- */
.suite-chrome-right { display: flex; align-items: center; gap: 0.65rem; margin-left: auto; flex-wrap: wrap; }
.suite-context-switcher select {
  background: rgba(255,255,255,0.12); color: var(--white); border: 1px solid rgba(255,255,255,0.24);
  border-radius: var(--radius-pill); padding: 0.4rem 2rem 0.4rem 0.85rem; font-size: 0.78rem; font-weight: 700;
  font-family: var(--font); max-width: 46vw;
}
.wl-btn.small { padding: 0.4rem 0.85rem; font-size: 0.78rem; }
/* Bug fix: this was a BARE .wl-btn.secondary selector, so it overrode the
   shared kit's own visible secondary button (white background, brand-deep
   text - components.css) everywhere in this app, not only in the dark
   chrome bar it was written for - a secondary button anywhere on an
   ordinary white card (org.html's Reject/Appoint buttons; this pass's new
   quiet "Get suite token" button on a held-but-not-integrated app card)
   rendered white text on transparent, i.e. invisible on white. Scoped to
   .suite-chrome-right, the one place this light-on-dark treatment is
   actually correct; every other .wl-btn.secondary now falls through to
   the shared kit's own default. */
.suite-chrome-right .wl-btn.secondary {
  background: transparent; color: var(--white); border: 1px solid rgba(255,255,255,0.32);
}
.suite-chrome-right .wl-btn.secondary:hover { background: rgba(255,255,255,0.12); }

/* ---------------- Hero / proposition ---------------- */
.suite-hero-actions { display: flex; gap: var(--space-md); flex-wrap: wrap; margin-top: var(--space-lg); }
.suite-proposition-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: var(--space-md); margin: var(--space-xl) 0; }
@media (max-width: 900px) { .suite-proposition-grid { grid-template-columns: 1fr; } }
.suite-proposition-grid .wl-card { margin-bottom: 0; }
.suite-proposition-grid h3 { display: flex; align-items: center; gap: 0.5rem; }
.suite-proposition-grid svg { flex: none; width: 22px; height: 22px; color: var(--brand-deep); }

.suite-signin-card { max-width: 460px; }
.suite-note {
  background: var(--tint); border: 1px solid var(--line); border-radius: var(--radius-sm);
  padding: 0.85rem 1rem; font-size: 0.85rem; color: var(--ink); margin-top: var(--space-md);
}
.suite-note.warn { background: color-mix(in srgb, var(--need-medium) 30%, white); border-color: var(--need-medium); }
/* Rhythm: a plain FYI note reads as a lightweight strip, not a third
   identically-weighted white card in a row (section 8.2's "vary the shape
   going down the page") -- no border/shadow, just enough visual separation
   to read as a footnote to the card above it. */
.suite-note.quiet-strip { background: none; border: none; border-left: 3px solid var(--line-strong); border-radius: 0; padding: 0.2rem 0 0.2rem 1rem; margin-top: var(--space-md); }

/* ---------------- Register ---------------- */
.suite-org-type-grid { display: grid; grid-template-columns: 1fr 1fr; gap: var(--space-md); margin: var(--space-md) 0 var(--space-lg); }
@media (max-width: 700px) { .suite-org-type-grid { grid-template-columns: 1fr; } }
.suite-org-type-card {
  display: block; text-align: left; width: 100%; background: var(--white); border: 1.5px solid var(--line-strong);
  border-radius: var(--radius-lg); padding: var(--space-lg); cursor: pointer; font-family: var(--font);
  transition: border-color var(--dur) var(--ease), box-shadow var(--dur) var(--ease);
}
.suite-org-type-card:hover, .suite-org-type-card:focus-visible { border-color: var(--brand); box-shadow: var(--shadow-sm); }
.suite-org-type-card.active { border-color: var(--brand); background: var(--tint); box-shadow: var(--shadow-md); }
.suite-org-type-card h3 { margin-bottom: 0.3rem; }
.suite-org-type-card p { margin: 0; font-size: 0.85rem; }

.suite-group-subtypes { display: none; margin-bottom: var(--space-lg); }
.suite-group-subtypes.shown { display: block; }

.suite-search-row { display: flex; gap: var(--space-sm); flex-wrap: wrap; margin-bottom: var(--space-md); }
.suite-search-row input[type=search] { flex: 1 1 260px; }

.suite-results-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 0.6rem; }
.suite-result-item {
  border: 1px solid var(--line); border-radius: var(--radius); padding: 0.9rem 1.1rem;
  display: flex; justify-content: space-between; align-items: center; gap: var(--space-md); flex-wrap: wrap;
  background: var(--white);
}
.suite-result-item .suite-result-name { font-weight: 700; color: var(--ink); }
.suite-result-item .suite-result-meta { font-size: 0.82rem; color: var(--grey); }
.suite-result-item button { flex: none; }

.suite-step { display: none; }
.suite-step.active { display: block; }

.suite-domain-hint { font-size: 0.82rem; color: var(--grey); margin-top: 0.3rem; }

/* ---------------- Verification ladder ----------------
   Bug fix (packages/README.md section 8.2): this used to be four
   identical grey boxes (.suite-ladder/.suite-ladder-step, now unused -
   kept out of the DOM rather than the CSS below so a stray reference
   elsewhere would not silently render unstyled). Redesigned as ONE
   connected sequence, reusing components.css's own .wl-timeline dot+line
   primitive (already exactly the "read as one" shape this needed) with
   three state modifiers this page adds on top of it - scoped to
   .suite-verify-timeline so this stays a front-door page-level extension,
   not a change to the shared component every suite app also uses. */
.suite-verify-timeline li.done::before { background: var(--brand-deep); }
.suite-verify-timeline li.done::after { background: var(--brand-deep); }
.suite-verify-timeline li.current::before {
  background: var(--brand); width: 13px; height: 13px; top: 0;
  box-shadow: 0 0 0 5px var(--brand-20, rgba(0,0,0,0.12));
}
.suite-verify-timeline li.current strong { color: var(--brand-deep); }
.suite-verify-timeline li.current span { color: var(--brand); font-weight: 700; }
.suite-verify-timeline li.upcoming::before { background: var(--white); border: 1.5px solid var(--line-strong); box-shadow: none; }
.suite-verify-timeline li.upcoming::after { background: var(--line); }
.suite-verify-timeline li.upcoming strong { color: var(--grey); }
.suite-verify-current {
  background: var(--white); border: 1px solid var(--line); border-radius: var(--radius);
  padding: 0.9rem 1rem; margin-top: 0.9rem;
}
.suite-verify-current p { margin: 0; font-size: 0.86rem; }
.suite-verify-current p + p { margin-top: 0.55rem; }
.suite-verify-next strong { color: var(--brand-deep); }

/* ---------------- Org profile ---------------- */
.suite-detail-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 0.9rem 1.5rem; }
@media (max-width: 700px) { .suite-detail-grid { grid-template-columns: 1fr 1fr; } }
@media (max-width: 460px) { .suite-detail-grid { grid-template-columns: 1fr; } }
.suite-detail-item dt { font-size: 0.7rem; text-transform: uppercase; letter-spacing: 0.05em; font-weight: 900; color: var(--brand-deep); margin: 0; }
.suite-detail-item dd { margin: 0.2rem 0 0; font-size: 0.92rem; color: var(--ink); }

.suite-gap-note {
  border: 1.5px dashed var(--line-strong); border-radius: var(--radius); padding: 1rem 1.1rem;
  color: var(--grey); font-size: 0.85rem; background: var(--surface-tint);
}

/* ---------------- Apps catalogue ---------------- */
.suite-group-heading {
  font-size: 0.78rem; text-transform: uppercase; letter-spacing: var(--tracking-label);
  font-weight: var(--w-numeral); color: var(--brand-deep); margin: var(--space-lg) 0 var(--space-sm);
}
.suite-group-heading:first-of-type { margin-top: var(--space-sm); }
.suite-apps-grid { display: grid; grid-template-columns: repeat(2, 1fr); gap: var(--space-md); }
@media (max-width: 800px) { .suite-apps-grid { grid-template-columns: 1fr; } }
.suite-app-card { display: flex; flex-direction: column; gap: 0.6rem; position: relative; overflow: hidden; }
/* Depth + colour: the accent bar only appears on a held, live app - the
   one thing on this page actually worth a click today. Everything else
   (held-but-not-integrated, not-held) stays the plain white card. */
.suite-app-card-live { border-color: var(--brand); box-shadow: var(--shadow-md); }
.suite-app-card-live::before {
  content: ""; position: absolute; left: 0; top: 0; bottom: 0; width: 4px; background: var(--brand);
}
.suite-app-card-unheld { background: var(--surface-tint); }
.suite-app-card-unheld h3, .suite-app-card-unheld .muted { color: var(--grey); }
.suite-app-card-head { display: flex; justify-content: space-between; align-items: flex-start; gap: 0.6rem; }
.suite-app-actions { margin-top: auto; display: flex; flex-direction: column; gap: 0.5rem; }
/* Bug/quality fix: this used to be a heavy near-black terminal block
   (var(--ink) background, neon-green text) on every app regardless of
   whether it was held-and-live or held-but-not-integrated - "a heavy dark
   block" for what is, honestly, a debug curiosity (the suite has no real
   launch flow yet - see apps.js's own comment). Lightened to a quiet
   tinted code panel that still reads as raw/technical (monospace, its own
   scroll box) without shouting at the page. */
.suite-token-panel {
  background: var(--tint); color: var(--ink); border: 1px solid var(--line-strong); border-radius: var(--radius-sm);
  padding: 0.85rem; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 0.76rem;
  white-space: pre-wrap; word-break: break-word; overflow-x: auto; max-height: 260px; overflow-y: auto;
}

/* ---------------- Admin ---------------- */
.suite-admin-key-row { display: flex; gap: 0.6rem; flex-wrap: wrap; align-items: flex-end; margin-bottom: var(--space-lg); }
.suite-admin-key-row .wl-field { flex: 1 1 320px; margin: 0; }
.suite-claim-row { display: flex; justify-content: space-between; align-items: center; gap: var(--space-md); flex-wrap: wrap; padding: 0.7rem 0; border-bottom: 1px solid var(--line); }
.suite-claim-row:last-child { border-bottom: none; }
.suite-claim-actions { display: flex; gap: 0.5rem; flex-wrap: wrap; align-items: center; }
.suite-claim-note-input { width: 220px; max-width: 100%; padding: 0.45rem 0.6rem; border: 1.5px solid var(--line-strong); border-radius: var(--radius-sm); font-family: var(--font); font-size: 0.82rem; }

.suite-admin-whoami { display: flex; align-items: center; gap: 0.7rem; flex-wrap: wrap; }

/* Suite health strip: one chip per app, coloured by reachability, grouped
   visually by category via a subtle divider rather than a second grid --
   at eighteen apps a single wrapping row of chips stays scannable, while a
   full card-per-app grid would not. */
.suite-health-strip { display: flex; flex-wrap: wrap; gap: 0.55rem; margin-top: var(--space-sm); }
.suite-health-chip {
  display: inline-flex; align-items: center; gap: 0.4rem; font-size: 0.78rem; font-weight: 700;
  padding: 0.4rem 0.75rem; border-radius: var(--radius-pill); border: 1px solid var(--line);
  background: var(--white);
}
.suite-health-chip .suite-health-dot { width: 9px; height: 9px; border-radius: 50%; flex: none; }
.suite-health-chip.up .suite-health-dot { background: var(--need-low); }
.suite-health-chip.integrating .suite-health-dot { background: var(--need-medium); }
.suite-health-chip.down .suite-health-dot { background: var(--grey); }
.suite-health-chip .suite-health-meta { color: var(--grey); font-weight: 400; }

.suite-app-group { margin-bottom: var(--space-lg); }
.suite-app-group h3 { font-size: 0.78rem; text-transform: uppercase; letter-spacing: var(--tracking-label); color: var(--brand-deep); margin-bottom: 0.5rem; }
.suite-app-link-note { font-size: 0.78rem; color: var(--grey); background: var(--tint); border-left: 3px solid var(--brand); padding: 0.5rem 0.75rem; border-radius: var(--radius-sm); margin: 0.4rem 0 0.9rem; }

/* Shared-kit gap found live, worked around here rather than forked: an
   <a class="wl-kpi-tile kpi-clickable"> (kpi_row.html's own documented
   "href makes a tile a real link" option, added 3rd August 2026 with "zero
   uses across the estate" per packages/README.md section 8.1) has no
   text-decoration:none anywhere in components.css - nothing needed one
   until this page used it, so the anchor's default underline leaked onto
   the label AND the numeral. This is a one-line fix components.css itself
   should carry (every future clickable KPI tile in any app will hit it),
   flagged to the kit owner rather than duplicated as a redefinition of the
   component's look - this rule only resets a browser default the kit
   forgot, it does not restyle anything the kit intentionally set. */
a.wl-kpi-tile { text-decoration: none; }

/* ---------------- Generic helpers ---------------- */
.suite-inline-form { display: flex; gap: 0.6rem; flex-wrap: wrap; align-items: flex-end; }
.suite-inline-form .wl-field { margin: 0; min-width: 200px; flex: 1 1 200px; }
.suite-status-msg { padding: 0.7rem 0.9rem; border-radius: var(--radius-sm); font-size: 0.85rem; margin: 0.6rem 0; }
.suite-status-msg.success { background: color-mix(in srgb, var(--need-low) 55%, white); color: var(--need-low-ink); }
.suite-status-msg.error { background: color-mix(in srgb, var(--need-very-high) 12%, white); color: #7f1d1d; border: 1px solid color-mix(in srgb, var(--need-very-high) 40%, white); }
.suite-status-msg.pending { background: color-mix(in srgb, var(--need-medium) 45%, white); color: var(--need-medium-ink); }

.suite-badge { display: inline-flex; align-items: center; gap: 0.35rem; font-size: 0.76rem; font-weight: 700; padding: 0.28rem 0.7rem; border-radius: var(--radius-pill); }
.suite-badge.ok { background: color-mix(in srgb, var(--need-low) 55%, white); color: var(--need-low-ink); }
.suite-badge.warn { background: color-mix(in srgb, var(--need-medium) 55%, white); color: var(--need-medium-ink); }
.suite-badge.off { background: var(--surface-tint); color: var(--grey); }

/* Org-level identity theme picker (/org's "Identity colour" card, spine
   migration 009). Each swatch is a real <label>+radio (keyboard/screen-
   reader operable, not a div with a click handler) -- the coloured dot is
   decorative only, the visible text label is what a screen reader and a
   colour-blind viewer both rely on. static/js/org.js toggles .selected on
   click and posts the chosen key; nothing here decides whether the save
   succeeds -- that is always the spine's answer (org admin only, demo
   sessions refused), relayed through app/api.py. */
.suite-theme-picker { display: flex; flex-wrap: wrap; gap: 0.6rem; align-items: center; margin-top: var(--space-sm); }
.suite-theme-swatch {
  display: inline-flex; align-items: center; gap: 0.5rem; padding: 0.5rem 0.9rem 0.5rem 0.6rem;
  border: 1.5px solid var(--line-strong); border-radius: var(--radius-pill); cursor: pointer;
  font-size: 0.85rem; font-weight: 700; color: var(--ink); background: var(--white);
  transition: border-color var(--dur) var(--ease), background var(--dur) var(--ease);
}
.suite-theme-swatch:hover { border-color: var(--brand-deep); }
.suite-theme-swatch input[type="radio"] { position: absolute; opacity: 0; width: 1px; height: 1px; }
.suite-theme-swatch input[type="radio"]:focus-visible ~ .suite-theme-swatch-dot { outline: 2px solid var(--brand-deep); outline-offset: 2px; }
.suite-theme-swatch.selected { border-color: var(--brand-deep); background: var(--tint); }
.suite-theme-swatch-dot { width: 18px; height: 18px; border-radius: 50%; flex: none; border: 1px solid rgba(0,0,0,0.15); }
.suite-theme-swatch-label { white-space: nowrap; }

@media (max-width: 620px) {
  .wl-chrome-bar { flex-direction: column; align-items: stretch; }
  .nav-row { margin-left: 0; }
  .suite-chrome-right { margin-left: 0; width: 100%; justify-content: space-between; }
  .suite-context-switcher select { max-width: 60vw; }
}

/* Per-colleague, per-app access roll-up (/org's Colleagues card) -- see
   app/org_access.py's own module docstring for the three-state design.
   A wrapping flex grid, never a table with one column per app: a real
   org can hold up to fourteen spine-native apps, and a fixed-column table
   would force horizontal scroll on any narrow viewport (measured against
   this page's own 390px rule, same one the rest of /org's layout pass
   already holds itself to) -- each app's own cell simply wraps onto the
   next line instead. */
.org-access-cells { display: flex; flex-wrap: wrap; gap: 0.6rem; padding: 0.6rem 0; }
.org-access-cell {
  flex: 1 1 160px;
  min-width: 160px;
  max-width: 220px;
  padding: 0.55rem 0.7rem;
  border: 1px solid var(--line);
  border-radius: var(--radius-sm);
  background: var(--surface-tint);
}
.org-access-app-name { font-size: 0.78rem; font-weight: 700; color: var(--brand-deep); margin-bottom: 0.3rem; }
.org-access-elevated { font-size: 0.76rem; margin-top: 0.25rem; }
.org-access-col { width: 1%; white-space: nowrap; }