:root, body.theme-dark {
  --bg: #0f1420; --panel: #151c2b; --panel2: #1c2436; --line: #29334c; --text: #e8ecf5; --muted: #8a95ad;
  --brand: #1f9d57; --brand-2: #2fae6a; --brand-soft: rgba(31,157,87,.16);
  --ok: #34d399; --ok-soft: rgba(52,211,153,.14); --warn: #fbbf24; --warn-soft: rgba(251,191,36,.14); --bad: #f87171; --bad-soft: rgba(248,113,113,.14);
  --radius: 10px; --shadow: 0 6px 18px rgba(0,0,0,.35);
  --font: "Segoe UI", Tahoma, system-ui, sans-serif;
}
body.theme-light {
  --bg: #f3f6fb; --panel: #ffffff; --panel2: #f4f7fc; --line: #e3e9f2; --text: #1c2733; --muted: #667085;
  --brand: #1f9d57; --brand-2: #1f9d57; --brand-soft: #e4f6ec;
  --ok: #059669; --ok-soft: #d1fae5; --warn: #b45309; --warn-soft: #fef3c7; --bad: #dc2626; --bad-soft: #fee2e2;
  --shadow: 0 6px 16px rgba(30,50,90,.08);
}
* { box-sizing: border-box; }
html, body { height: 100%; }
body { margin: 0; background: var(--bg); color: var(--text); font: 14px/1.5 var(--font); }
button, input, select, textarea { font: inherit; color: inherit; }
a { color: var(--brand); text-decoration: none; }
.hidden { display: none !important; }
.mono { font-family: Consolas, "Courier New", monospace; direction: ltr; unicode-bidi: plaintext; }
.muted { color: var(--muted); }
.grow { flex: 1; }
.row { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
.stack { display: flex; flex-direction: column; gap: 10px; }

.tabs { display: flex; gap: 4px; padding: 0 20px; background: var(--panel); border-bottom: 1px solid var(--line); overflow-x: auto; }
.tabs a { padding: 10px 14px; cursor: pointer; border-bottom: 2px solid transparent; color: var(--muted); white-space: nowrap; }
.tabs a.on { color: var(--brand); border-color: var(--brand); font-weight: 600; }
.content { padding: 20px; }

.content.full { padding: 0; overflow: hidden; }
.frame { width: 100%; height: 100%; border: 0; display: block; background: var(--bg); }

/* controls */
.btn { border: 1px solid var(--line); background: var(--panel); padding: 7px 14px; border-radius: 8px; cursor: pointer; display: inline-flex; gap: 6px; align-items: center; }
.btn:hover { background: var(--panel2); }
.btn.primary { background: var(--brand); border-color: var(--brand); color: #fff; }
.btn.primary:hover { filter: brightness(1.08); }
.btn.danger { color: var(--bad); border-color: var(--bad-soft); }
.btn.sm { padding: 3px 9px; font-size: 12px; }
.btn:disabled { opacity: .5; cursor: not-allowed; }
input[type=text], input[type=password], input[type=number], input[type=search], input[type=date], select, textarea {
  width: 100%; padding: 8px 10px; border: 1px solid var(--line); border-radius: 8px; background: var(--panel); outline: none;
}
input:focus, select:focus, textarea:focus { border-color: var(--brand-2); box-shadow: 0 0 0 3px var(--brand-soft); }
textarea { min-height: 90px; resize: vertical; }
label.f { display: flex; flex-direction: column; gap: 4px; font-size: 12px; color: var(--muted); }
label.chk { display: inline-flex; align-items: center; gap: 6px; cursor: pointer; }
.grid2 { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
.grid3 { display: grid; grid-template-columns: repeat(3, 1fr); gap: 12px; }
@media (max-width: 800px) { .grid2, .grid3 { grid-template-columns: 1fr; } }

/* cards / table */
.card { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); box-shadow: var(--shadow); }
.card .hd { padding: 12px 16px; border-bottom: 1px solid var(--line); display: flex; align-items: center; gap: 10px; font-weight: 600; }
.card .bd { padding: 16px; }
.tiles { display: grid; grid-template-columns: repeat(auto-fill, minmax(190px, 1fr)); gap: 14px; }
.tile { padding: 18px; cursor: pointer; text-align: center; transition: transform .1s; }
.tile:hover { transform: translateY(-2px); }
.tile .big { font-size: 30px; }
.tbl { width: 100%; border-collapse: collapse; }
.tbl th { text-align: start; font-size: 12px; color: var(--muted); font-weight: 600; padding: 9px 12px; border-bottom: 1px solid var(--line); background: var(--panel2); position: sticky; top: 0; }
.tbl td { padding: 9px 12px; border-bottom: 1px solid var(--line); vertical-align: middle; }
.tbl tr:hover td { background: var(--panel2); }
.tblwrap { overflow: auto; border: 1px solid var(--line); border-radius: var(--radius); background: var(--panel); }
.chip { white-space: nowrap; display: inline-flex; align-items: center; gap: 4px; padding: 2px 9px; border-radius: 99px; font-size: 12px; background: var(--brand-soft); color: var(--brand); margin: 1px; }
.chip.ok { background: var(--ok-soft); color: var(--ok); }
.chip.bad { background: var(--bad-soft); color: var(--bad); }
.chip.warn { background: var(--warn-soft); color: var(--warn); }
.chip.gray { background: var(--panel2); color: var(--muted); border: 1px solid var(--line); }
.empty { padding: 40px; text-align: center; color: var(--muted); }
.kbd { font-family: Consolas, monospace; font-size: 12px; background: var(--panel2); border: 1px solid var(--line); border-radius: 5px; padding: 0 5px; }

/* modal / toast */
.ovl { position: fixed; inset: 0; background: rgba(2,6,23,.55); display: grid; place-items: center; z-index: 50; padding: 16px; }
.modal { background: var(--panel); border-radius: 14px; width: min(560px, 100%); max-height: 92vh; display: flex; flex-direction: column; box-shadow: 0 20px 60px rgba(0,0,0,.4); }
.modal.wide { width: min(980px, 100%); }
.modal .mh { padding: 14px 18px; border-bottom: 1px solid var(--line); display: flex; align-items: center; gap: 10px; font-weight: 700; font-size: 15px; }
.modal .mb { padding: 16px 18px; overflow: auto; flex: 1; }
.modal .mf { padding: 12px 18px; border-top: 1px solid var(--line); display: flex; gap: 8px; justify-content: flex-end; }
#toasts { position: fixed; bottom: 18px; inset-inline-start: 18px; display: flex; flex-direction: column; gap: 8px; z-index: 99; }
.toast { background: var(--text); color: var(--bg); padding: 10px 16px; border-radius: 10px; box-shadow: var(--shadow); max-width: 380px; }
.toast.bad { background: var(--bad); color: #fff; } .toast.ok { background: var(--ok); color: #fff; }

/* login / blocked */
.center { min-height: 100vh; display: grid; place-items: center; padding: 20px; }
.logincard { width: min(400px, 100%); padding: 28px; }
.logincard h2 { margin: 0 0 4px; }
.err { color: var(--bad); font-size: 13px; min-height: 18px; }

/* permission matrix */
.pm-mod { border: 1px solid var(--line); border-radius: var(--radius); margin-bottom: 10px; overflow: hidden; background: var(--panel); }
.pm-mod > .pm-h { padding: 10px 14px; background: var(--panel2); display: flex; align-items: center; gap: 10px; cursor: pointer; font-weight: 600; }
.pm-res { padding: 8px 14px 4px; }
.pm-res .rn { font-size: 12px; color: var(--muted); margin: 6px 0 2px; font-weight: 600; }
.pm-act { display: flex; align-items: center; gap: 10px; padding: 5px 0; border-bottom: 1px dashed var(--line); }
.pm-act:last-child { border-bottom: 0; }
.pm-act .lbl { flex: 1; min-width: 0; }
.pm-act .key { font-size: 11px; color: var(--muted); }
.seg { display: inline-flex; border: 1px solid var(--line); border-radius: 8px; overflow: hidden; }
.seg button { border: 0; background: var(--panel); padding: 3px 10px; font-size: 12px; cursor: pointer; }
.seg button + button { border-inline-start: 1px solid var(--line); }
.seg button.on { background: var(--brand); color: #fff; }
.seg button.on.grant { background: var(--ok); } .seg button.on.deny { background: var(--bad); }
.eff { width: 10px; height: 10px; border-radius: 50%; background: var(--line); flex: none; }
.eff.on { background: var(--ok); }
.keybox { font-family: Consolas, monospace; direction: ltr; font-size: 20px; letter-spacing: 1px; padding: 14px; background: var(--panel2); border: 2px dashed var(--brand-2); border-radius: 10px; text-align: center; user-select: all; }
pre.json { background: var(--panel2); padding: 10px; border-radius: 8px; overflow: auto; direction: ltr; text-align: left; font-size: 12px; margin: 0; }
