:root {
  --bg: #0d1117; --panel: #161b22; --panel2: #1c2330; --border: #30363d;
  --text: #e6edf3; --muted: #8b949e; --accent: #4c8dff; --accent2: #388bfd;
  --green: #3fb950; --amber: #d29922; --red: #f85149; --chip: #21262d;
}
* { box-sizing: border-box; }
body {
  margin: 0; background: var(--bg); color: var(--text);
  font: 14px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
}
a { color: var(--accent); text-decoration: none; }
header {
  display: flex; align-items: center; gap: 16px; padding: 12px 20px;
  background: var(--panel); border-bottom: 1px solid var(--border); position: sticky; top: 0; z-index: 5;
}
header .brand { font-weight: 700; font-size: 18px; letter-spacing: .5px; }
header .brand span { color: var(--accent); }
header .spacer { flex: 1; }
.badge { padding: 3px 10px; border-radius: 999px; font-size: 12px; font-weight: 600; background: var(--chip); border: 1px solid var(--border); }
.badge.leader { color: var(--green); border-color: #1f5c2e; }
.badge.standby { color: var(--amber); border-color: #5c4a1f; }
.muted { color: var(--muted); }
nav { display: flex; gap: 4px; padding: 0 20px; background: var(--panel); border-bottom: 1px solid var(--border); }
nav button {
  background: none; border: none; color: var(--muted); padding: 12px 16px; cursor: pointer;
  font-size: 14px; border-bottom: 2px solid transparent;
}
nav button.active { color: var(--text); border-bottom-color: var(--accent); }
nav button:hover { color: var(--text); }
main { padding: 20px; max-width: 1100px; margin: 0 auto; }
.grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 12px; margin-bottom: 20px; }
.card { background: var(--panel); border: 1px solid var(--border); border-radius: 10px; padding: 16px; }
.card .k { color: var(--muted); font-size: 12px; text-transform: uppercase; letter-spacing: .5px; }
.card .v { font-size: 26px; font-weight: 700; margin-top: 4px; }
.card .v.mono { font-size: 15px; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; word-break: break-all; }
h2 { font-size: 16px; margin: 24px 0 10px; }
table { width: 100%; border-collapse: collapse; background: var(--panel); border: 1px solid var(--border); border-radius: 10px; overflow: hidden; }
th, td { text-align: left; padding: 10px 12px; border-bottom: 1px solid var(--border); font-size: 13px; }
th { color: var(--muted); font-weight: 600; background: var(--panel2); text-transform: uppercase; font-size: 11px; letter-spacing: .5px; }
tr:last-child td { border-bottom: none; }
td.mono, .mono { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
.pill { padding: 2px 8px; border-radius: 6px; font-size: 12px; font-weight: 600; background: var(--chip); border: 1px solid var(--border); }
.pill.ext { color: #ff9e64; } .pill.int { color: #7ee787; } .pill.on { color: var(--green); } .pill.off { color: var(--muted); }
.pill.ok { color: var(--green); border-color: #1f5c2e; } .pill.bad { color: var(--red); border-color: #5c1f1f; }
button.btn {
  background: var(--accent2); color: white; border: none; padding: 8px 14px; border-radius: 8px;
  cursor: pointer; font-weight: 600; font-size: 13px;
}
button.btn:hover { background: var(--accent); }
button.btn.ghost { background: transparent; border: 1px solid var(--border); color: var(--text); }
button.btn.danger { background: transparent; border: 1px solid #5c1f1f; color: var(--red); padding: 4px 10px; }
button.btn.danger:hover { background: #2d1414; }
form.row { display: flex; flex-wrap: wrap; gap: 8px; align-items: end; margin: 12px 0; padding: 14px; background: var(--panel); border: 1px solid var(--border); border-radius: 10px; }
form.row label { display: flex; flex-direction: column; gap: 4px; font-size: 11px; color: var(--muted); }
input, select { background: var(--bg); border: 1px solid var(--border); color: var(--text); padding: 7px 9px; border-radius: 7px; font-size: 13px; }
input[type=checkbox] { width: 16px; height: 16px; }
.toolbar { display: flex; gap: 10px; align-items: center; margin-bottom: 12px; }
.results { margin-top: 12px; }
.toast { position: fixed; bottom: 20px; right: 20px; background: var(--panel2); border: 1px solid var(--border); padding: 12px 16px; border-radius: 10px; box-shadow: 0 8px 24px rgba(0,0,0,.4); z-index: 20; }
.toast.err { border-color: #5c1f1f; color: var(--red); }
.toast.ok { border-color: #1f5c2e; color: var(--green); }
/* login */
#login { position: fixed; inset: 0; background: rgba(6,9,14,.92); display: none; align-items: center; justify-content: center; z-index: 50; }
#login.show { display: flex; }
#login .box { background: var(--panel); border: 1px solid var(--border); border-radius: 14px; padding: 28px; width: 340px; }
#login h1 { margin: 0 0 4px; font-size: 22px; } #login h1 span { color: var(--accent); }
#login p { color: var(--muted); margin: 0 0 18px; font-size: 13px; }
#login label { display: block; font-size: 12px; color: var(--muted); margin-bottom: 4px; }
#login input { width: 100%; margin-bottom: 14px; }
#login button { width: 100%; }
/* SSO login: an <a>, so the ghost/btn styles must not be button-scoped. */
#login a.btn { display: block; width: 100%; box-sizing: border-box; padding: 8px 14px; border-radius: 8px;
  font-weight: 600; font-size: 13px; text-align: center; text-decoration: none; }
#login a.btn.ghost { background: transparent; border: 1px solid var(--border); color: var(--text); }
#login a.btn.ghost:hover { border-color: var(--accent); color: var(--accent); }
/* "or" divider between the local form and the IdP hand-off */
#login .or { display: flex; align-items: center; gap: 10px; margin: 14px 0 10px; color: var(--muted); font-size: 11px; text-transform: uppercase; letter-spacing: .08em; }
#login .or::before, #login .or::after { content: ""; flex: 1; height: 1px; background: var(--border); }
.hidden { display: none !important; }
.empty { padding: 20px; text-align: center; color: var(--muted); }

/* Read-only (member role): hide every mutation control. The server enforces
   RBAC regardless; this just keeps the member UI honest. */
body.readonly .admin-only { display: none !important; }

.nowrap { white-space: nowrap; }

/* Modal (add/edit VIP) */
.modal-backdrop { position: fixed; inset: 0; background: rgba(6,9,14,.72); display: flex; align-items: center; justify-content: center; z-index: 60; padding: 20px; }
.modal-backdrop.hidden { display: none !important; }
.modal { background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 22px; width: min(560px, 100%); max-height: 90vh; overflow-y: auto; box-shadow: 0 20px 60px rgba(0,0,0,.55); }
.modal h3 { margin: 0 0 16px; }
.modal-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
.modal-grid label { display: flex; flex-direction: column; gap: 4px; font-size: 12px; color: var(--muted); }
.modal-grid input, .modal-grid select { width: 100%; }
.modal-actions { display: flex; justify-content: flex-end; gap: 10px; margin-top: 20px; }
.modal input[readonly] { opacity: .6; cursor: not-allowed; }