:root{
  --bg:#EEF1F4;--surface:#FFFFFF;--surface-2:#F5F7F9;--line:#D6DDE4;--line-2:#E6EBF0;
  --ink:#15202B;--ink-2:#4B5966;--ink-3:#7C8A97;
  --accent:#1D5FA6;--accent-ink:#FFFFFF;--accent-bg:#E4EEF9;
  --read:#137A5F;--read-bg:#E1F2EC;--act:#B85C0A;--act-bg:#FBEBD9;--crit:#B23A3A;--crit-bg:#F9E3E3;
  --console-bg:#0E1419;--console-ink:#D7E0E8;--console-dim:#6E7E8D;
  --shadow:0 1px 2px rgba(21,32,43,.06),0 4px 16px rgba(21,32,43,.06);
  --s1:#2a78d6;--s2:#eb6834;--s3:#1baf7a;
}
@media (prefers-color-scheme:dark){:root:not([data-theme="light"]){
  --bg:#0D1218;--surface:#151C24;--surface-2:#1B242E;--line:#2A3540;--line-2:#222C36;
  --ink:#E4EAF0;--ink-2:#A9B5C0;--ink-3:#71808E;
  --accent:#6BA5EC;--accent-ink:#0D1218;--accent-bg:#17293D;
  --read:#4FCBA4;--read-bg:#12332A;--act:#F0A050;--act-bg:#3A2610;--crit:#F07070;--crit-bg:#3B1C1C;
  --console-bg:#090D11;--console-ink:#D7E0E8;--console-dim:#5C6B7A;
  --shadow:0 1px 2px rgba(0,0,0,.4),0 4px 16px rgba(0,0,0,.35);
  --s1:#3987e5;--s2:#d95926;--s3:#199e70;
}}
:root[data-theme="dark"]{
  --bg:#0D1218;--surface:#151C24;--surface-2:#1B242E;--line:#2A3540;--line-2:#222C36;
  --ink:#E4EAF0;--ink-2:#A9B5C0;--ink-3:#71808E;
  --accent:#6BA5EC;--accent-ink:#0D1218;--accent-bg:#17293D;
  --read:#4FCBA4;--read-bg:#12332A;--act:#F0A050;--act-bg:#3A2610;--crit:#F07070;--crit-bg:#3B1C1C;
  --console-bg:#090D11;--console-ink:#D7E0E8;--console-dim:#5C6B7A;
  --shadow:0 1px 2px rgba(0,0,0,.4),0 4px 16px rgba(0,0,0,.35);
  --s1:#3987e5;--s2:#d95926;--s3:#199e70;
}
*{box-sizing:border-box}
body{margin:0;background:var(--bg);color:var(--ink);font:14px/1.5 "IBM Plex Sans",system-ui,-apple-system,Segoe UI,sans-serif;-webkit-font-smoothing:antialiased}
h1,h2,h3{margin:0;text-wrap:balance;font-weight:600}
h1{font-size:22px}h2{font-size:17px}h3{font-size:14px}
p{margin:0}
a{color:var(--accent)}
button{font:inherit;color:inherit;background:none;border:0;cursor:pointer}
input,select,textarea{font:inherit;color:var(--ink);background:var(--surface);border:1px solid var(--line);border-radius:4px;padding:7px 10px;width:100%}
input:focus,select:focus,button:focus-visible,textarea:focus{outline:2px solid var(--accent);outline-offset:1px}
code,.mono{font-family:"IBM Plex Mono",ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px}
.cond{font-family:"IBM Plex Sans Condensed","IBM Plex Sans",sans-serif}
.label{font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:11.5px;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3)}
.muted{color:var(--ink-2)}.dim{color:var(--ink-3)}
.tnum{font-variant-numeric:tabular-nums}
[hidden]{display:none!important}

/* ---- login ---- */
#login{min-height:100vh;display:grid;place-items:center;padding:24px}
.gate{width:380px;max-width:100%;background:var(--surface);border:1px solid var(--line);border-radius:8px;box-shadow:var(--shadow);padding:28px}
.gate .brand{display:flex;align-items:center;gap:10px;margin-bottom:22px}
.gate form{display:grid;gap:12px}
.field{display:grid;gap:5px}
.field label{font-size:12.5px;font-weight:500;color:var(--ink-2)}
.steps{display:flex;gap:6px;margin-bottom:18px}
.steps span{flex:1;height:3px;border-radius:2px;background:var(--line)}
.steps span.on{background:var(--accent)}
.hint{font-size:12px;color:var(--ink-3);background:var(--surface-2);border:1px dashed var(--line);border-radius:4px;padding:8px 10px}
.otp{letter-spacing:.35em;font-family:"IBM Plex Mono",monospace;font-size:20px;text-align:center}

/* ---- buttons ---- */
.btn{display:inline-flex;align-items:center;gap:6px;padding:7px 12px;border-radius:4px;border:1px solid var(--line);background:var(--surface);font-weight:500;font-size:13px;white-space:nowrap}
.btn:hover{background:var(--surface-2)}
.btn.primary{background:var(--accent);color:var(--accent-ink);border-color:var(--accent)}
.btn.primary:hover{filter:brightness(1.08)}
.btn.read{border-color:var(--read);color:var(--read)}
.btn.read:hover{background:var(--read-bg)}
.btn.act{border-color:var(--act);color:var(--act)}
.btn.act:hover{background:var(--act-bg)}
.btn.crit{border-color:var(--crit);color:var(--crit)}
.btn.crit:hover{background:var(--crit-bg)}
.btn.sm{padding:4px 9px;font-size:12px}
.btn[disabled]{opacity:.45;cursor:not-allowed}

/* ---- chips ---- */
.chip{display:inline-flex;align-items:center;gap:5px;padding:1px 8px;border-radius:3px;font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:11px;letter-spacing:.06em;text-transform:uppercase;line-height:18px}
.chip.read{background:var(--read-bg);color:var(--read)}
.chip.act{background:var(--act-bg);color:var(--act)}
.chip.crit{background:var(--crit-bg);color:var(--crit)}
.chip.neutral{background:var(--surface-2);color:var(--ink-2);border:1px solid var(--line-2)}
.chip.accent{background:var(--accent-bg);color:var(--accent)}
.tag{display:inline-block;padding:0 6px;border-radius:3px;background:var(--surface-2);border:1px solid var(--line-2);font-family:"IBM Plex Mono",monospace;font-size:11px;color:var(--ink-2)}
.dot{width:8px;height:8px;border-radius:50%;display:inline-block;background:var(--read)}
.dot.off{background:var(--ink-3)}.dot.warn{background:var(--act)}

/* ---- shell ---- */
#app{display:grid;grid-template-columns:216px 1fr;min-height:100vh}
.rail{background:var(--surface);border-right:1px solid var(--line);display:flex;flex-direction:column;position:sticky;top:0;height:100vh}
.rail .brand{display:flex;align-items:center;gap:10px;padding:18px 18px 14px;border-bottom:1px solid var(--line-2)}
.brand b{font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:17px;letter-spacing:.02em}
.brand small{display:block;font-size:11px;color:var(--ink-3);letter-spacing:.06em;text-transform:uppercase;font-family:"IBM Plex Sans Condensed",sans-serif}
.nav{padding:10px;display:grid;gap:2px}
.nav .label{padding:12px 8px 4px}
.nav a{display:flex;align-items:center;gap:9px;padding:7px 9px;border-radius:4px;color:var(--ink-2);text-decoration:none;font-weight:500;font-family:"IBM Plex Sans Condensed",sans-serif;font-size:14px}
.nav a:hover{background:var(--surface-2);color:var(--ink)}
.nav a.on{background:var(--accent-bg);color:var(--accent)}
.nav svg{width:16px;height:16px;flex:none}
.rail .who{margin-top:auto;padding:14px 18px;border-top:1px solid var(--line-2);font-size:12.5px}
.rail .who b{display:block;font-weight:500}
main{padding:26px 30px 40px;min-width:0}
.head{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;margin-bottom:20px}
.head p{color:var(--ink-2);margin-top:3px;max-width:62ch}

/* ---- cards / tables ---- */
.card{background:var(--surface);border:1px solid var(--line);border-radius:6px}
.card .cap{padding:10px 14px;border-bottom:1px solid var(--line-2);display:flex;align-items:center;justify-content:space-between;gap:10px}
table{width:100%;border-collapse:collapse;font-size:13px}
th{text-align:left;padding:8px 12px;font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:11.5px;letter-spacing:.07em;text-transform:uppercase;color:var(--ink-3);border-bottom:1px solid var(--line);white-space:nowrap}
td{padding:9px 12px;border-bottom:1px solid var(--line-2);vertical-align:top}
tr:last-child td{border-bottom:0}
.scroll{overflow-x:auto}

/* ---- servers ---- */
.split{display:grid;grid-template-columns:280px 1fr;gap:18px;align-items:start}
.srv{display:grid;gap:8px}
.srv button{text-align:left;padding:11px 13px;border:1px solid var(--line);border-radius:6px;background:var(--surface);display:grid;gap:4px}
.srv button:hover{border-color:var(--ink-3)}
.srv button.on{border-color:var(--accent);box-shadow:inset 3px 0 0 var(--accent)}
.srv .n{display:flex;align-items:center;gap:8px;font-weight:600}
.srv .d{font-size:12.5px;color:var(--ink-2)}
.srv .t{display:flex;gap:4px;flex-wrap:wrap}
.detail{display:grid;gap:16px}
.meta{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:14px;padding:14px}
.meta div span{display:block}
.meta .v{font-weight:500;margin-top:2px}
.group{padding:0}
.group .cap h3{display:flex;align-items:center;gap:8px}
.arow{display:grid;grid-template-columns:150px 1fr auto;gap:14px;align-items:center;padding:10px 14px;border-bottom:1px solid var(--line-2)}
.arow:last-child{border-bottom:0}
.arow .t{font-weight:500}
.arow .desc{font-size:12.5px;color:var(--ink-2)}
.arow code{display:block;margin-top:4px;color:var(--ink);background:var(--surface-2);border:1px solid var(--line-2);padding:3px 7px;border-radius:3px;overflow-x:auto;white-space:pre}
.arow .param{display:inline-flex;align-items:center;gap:6px;font-size:12px;color:var(--ink-2)}
.arow .param input{width:72px;padding:3px 6px;text-align:right}
.arow .right{display:flex;align-items:center;gap:8px}
.console{background:var(--console-bg);color:var(--console-ink);border-radius:6px;font-family:"IBM Plex Mono",monospace;font-size:12.5px;line-height:1.55;min-height:180px;max-height:420px;overflow:auto;padding:12px 14px;white-space:pre-wrap;word-break:break-word}
.console .cmd{color:var(--console-dim)}
.console .cmd b{color:#8FC7FF;font-weight:500}
.console .ok{color:#7FD6B2}.console .bad{color:#FF8A8A}
.console-wrap{position:sticky;bottom:0;padding-top:10px;background:var(--bg)}
.console-wrap .cap{display:flex;justify-content:space-between;align-items:center;margin-bottom:6px}

/* ---- modal ---- */
.veil{position:fixed;inset:0;background:rgba(10,15,20,.55);display:grid;place-items:center;padding:20px;z-index:20}
.modal{background:var(--surface);border:1px solid var(--line);border-radius:8px;box-shadow:var(--shadow);width:560px;max-width:100%;max-height:90vh;overflow:auto}
.modal .mh{padding:16px 20px;border-bottom:1px solid var(--line-2)}
.modal .mb{padding:18px 20px;display:grid;gap:14px}
.modal .mf{padding:12px 20px;border-top:1px solid var(--line-2);display:flex;justify-content:flex-end;gap:8px}
.callout{padding:10px 12px;border-radius:4px;border:1px solid;font-size:13px}
.callout.act{background:var(--act-bg);border-color:var(--act);color:var(--ink)}
.callout.crit{background:var(--crit-bg);border-color:var(--crit);color:var(--ink)}
.callout code{display:block;margin-top:6px;background:var(--console-bg);color:var(--console-ink);padding:6px 9px;border-radius:3px;white-space:pre-wrap}

/* ---- grants editor ---- */
.grants{display:grid;gap:12px}
.grants .cls{display:grid;gap:6px}
.grants .cls label{display:flex;gap:8px;align-items:flex-start;padding:8px 10px;border:1px solid var(--line);border-radius:4px;cursor:pointer}
.grants .cls label:has(input:checked){border-color:var(--accent);background:var(--accent-bg)}
.grants .cls input{width:auto;margin-top:3px}
.grants .cls small{display:block;color:var(--ink-2);font-size:12px}
.checks{display:grid;grid-template-columns:1fr 1fr;gap:4px}
.checks label{display:flex;gap:8px;align-items:center;padding:5px 8px;border-radius:4px;font-size:13px}
.checks label:hover{background:var(--surface-2)}
.checks input{width:auto}
.fine{border:1px solid var(--line);border-radius:4px;max-height:220px;overflow:auto;padding:6px}
.fine .checks{grid-template-columns:1fr}
.fine label code{color:var(--ink-3);margin-left:auto}
.keyreveal{background:var(--console-bg);color:var(--console-ink);padding:10px 12px;border-radius:4px;font-family:"IBM Plex Mono",monospace;font-size:13px;word-break:break-all}

/* ---- lint ---- */
.lint{display:grid;gap:4px;font-size:12.5px}
.lint div{display:flex;gap:8px;align-items:flex-start;padding:5px 9px;border-radius:3px;border:1px solid}
.lint .e{background:var(--crit-bg);border-color:var(--crit);color:var(--ink)}
.lint .w{background:var(--act-bg);border-color:var(--act);color:var(--ink)}
.lint .i{background:var(--surface-2);border-color:var(--line);color:var(--ink-2)}
.lint .ok{background:var(--read-bg);border-color:var(--read);color:var(--ink)}
.lint b{font-family:"IBM Plex Sans Condensed",sans-serif;font-size:11px;letter-spacing:.06em;text-transform:uppercase;flex:none;padding-top:2px}
.lint code{background:none;padding:0;border:0}
.testrow{display:flex;gap:6px;align-items:center;flex-wrap:wrap}
.testrow select{width:auto}
/* ---- docs ---- */
.tabs{display:flex;gap:2px;border-bottom:1px solid var(--line);margin-bottom:18px}
.tabs button{padding:8px 14px;font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:14px;color:var(--ink-2);border-bottom:2px solid transparent;margin-bottom:-1px}
.tabs button.on{color:var(--accent);border-bottom-color:var(--accent)}
.doc{display:grid;gap:18px;max-width:860px}
.doc h2{margin-top:8px}
.doc p{max-width:70ch;color:var(--ink-2)}
.ep{display:grid;grid-template-columns:70px 1fr;gap:12px;align-items:baseline;padding:8px 0;border-bottom:1px solid var(--line-2)}
.ep .m{font-family:"IBM Plex Mono",monospace;font-weight:500;font-size:12px}
.ep .m.get{color:var(--read)}.ep .m.post{color:var(--act)}.ep .m.del{color:var(--crit)}
.ep .desc{color:var(--ink-2);font-size:12.5px;margin-top:2px}
pre.block{background:var(--console-bg);color:var(--console-ink);padding:12px 14px;border-radius:6px;font-family:"IBM Plex Mono",monospace;font-size:12.5px;overflow-x:auto;margin:0;line-height:1.5}
.two{display:grid;grid-template-columns:1fr 1fr;gap:16px}
.stat{padding:14px 16px}
.stat .n{font-size:26px;font-weight:600;font-variant-numeric:tabular-nums;line-height:1.1;margin-top:4px}
.filters{display:flex;gap:8px;align-items:center;flex-wrap:wrap}
.filters select,.filters input{width:auto}
.empty{padding:28px;text-align:center;color:var(--ink-3)}
.toast{position:fixed;bottom:20px;right:20px;background:var(--ink);color:var(--bg);padding:9px 14px;border-radius:4px;font-size:13px;box-shadow:var(--shadow);z-index:30}
/* ---- metrics ---- */
.win{display:flex;gap:2px;background:var(--surface-2);border:1px solid var(--line);border-radius:4px;padding:2px}
.win button{padding:3px 10px;border-radius:3px;font-family:"IBM Plex Sans Condensed",sans-serif;font-weight:600;font-size:12.5px;color:var(--ink-2)}
.win button.on{background:var(--surface);color:var(--accent);box-shadow:var(--shadow)}
.tiles{display:grid;grid-template-columns:repeat(3,1fr);gap:12px;padding:12px}
.tile{border:1px solid var(--line-2);border-radius:5px;padding:10px 12px;display:grid;gap:4px;background:var(--surface)}
.tile .th{display:flex;justify-content:space-between;align-items:baseline}
.tile .th b{font-weight:500;font-size:13px}
.tile .now{font-variant-numeric:tabular-nums;font-size:15px;font-weight:600}
.tile svg{width:100%;height:96px;display:block;overflow:visible}
.tile .lg{display:flex;gap:10px;font-size:11.5px;color:var(--ink-2)}
.tile .lg i{display:inline-block;width:10px;height:2px;vertical-align:middle;margin-right:4px;border-radius:1px}
.tile .note{font-size:12px;color:var(--ink-2)}
.tt{position:fixed;pointer-events:none;background:var(--ink);color:var(--bg);font-size:11.5px;padding:5px 8px;border-radius:3px;font-variant-numeric:tabular-nums;z-index:15;white-space:nowrap}
.perm{display:inline-flex;gap:4px;flex-wrap:wrap}
.who .sw{margin-top:8px;display:flex;gap:4px}
.who .sw button{flex:1;padding:3px 6px;border:1px solid var(--line);border-radius:3px;font-size:11.5px;color:var(--ink-2)}
.who .sw button.on{border-color:var(--accent);color:var(--accent);background:var(--accent-bg)}
.lock{color:var(--ink-3);font-size:12px}
@media (max-width:900px){.tiles{grid-template-columns:1fr}}
@media (max-width:900px){#app{grid-template-columns:1fr}.rail{position:static;height:auto}.split{grid-template-columns:1fr}.arow{grid-template-columns:1fr}.two{grid-template-columns:1fr}}
@media (prefers-reduced-motion:no-preference){.srv button,.btn{transition:background .12s,border-color .12s}}

/* ---- additions for the live console (not in the mock) ---- */
.banner{padding:10px 14px;border-radius:5px;border:1px solid;font-size:13px;margin-bottom:14px}
.banner.err{background:var(--crit-bg);border-color:var(--crit);color:var(--ink)}
.banner.ok{background:var(--read-bg);border-color:var(--read);color:var(--ink)}
.banner.warn{background:var(--act-bg);border-color:var(--act);color:var(--ink)}
.spinner{display:inline-block;width:12px;height:12px;border:2px solid var(--line);border-top-color:var(--accent);border-radius:50%;animation:spin .7s linear infinite;vertical-align:-2px}
@keyframes spin{to{transform:rotate(360deg)}}
@media (prefers-reduced-motion:reduce){.spinner{animation:none}}
.loading{padding:28px;text-align:center;color:var(--ink-3)}
.gate .err{color:var(--crit);font-size:12.5px}

/* Host key fingerprint: abbreviated by default, wrapped when revealed, so a
   50-character string never runs over the fields beside it. */
.fp { display: inline-flex; align-items: baseline; gap: 6px; flex-wrap: wrap; max-width: 100%; }
.fp-full { word-break: break-all; }
.linkish {
  background: none; border: 0; padding: 0; cursor: pointer;
  font: inherit; font-size: 11px; color: var(--accent, #4a7dff); text-decoration: underline;
}
.linkish:hover { opacity: .8; }
.linkish:focus-visible { outline: 2px solid var(--accent, #4a7dff); outline-offset: 2px; }