:root{
  --bg:#ffffff;--panel:#f6f7f9;--ink:#1d1d1f;--muted:#6b7280;
  --accent:#2563eb;--accent-weak:#eff4ff;--line:#e6e8ec;
  --ok:#15803d;--ok-bg:#ecfdf3;--ko:#b42318;--ko-bg:#fef3f2;
  --sb:248px;
}
*{box-sizing:border-box}
html,body{margin:0;padding:0}
body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Inter,Roboto,sans-serif;background:var(--bg);color:var(--ink);font-size:14px;line-height:1.5;-webkit-font-smoothing:antialiased}
a{color:var(--accent);text-decoration:none}
a:hover{text-decoration:underline}

/* ---- App shell : sidebar + content ---- */
.layout{display:flex;min-height:100vh}
.sidebar{width:var(--sb);flex:0 0 var(--sb);background:#fff;border-right:1px solid var(--line);display:flex;flex-direction:column;position:sticky;top:0;height:100vh}
.brand{display:flex;align-items:center;gap:.55rem;padding:1.05rem 1.15rem;font-size:1.15rem;font-weight:700;letter-spacing:-.015em;color:var(--ink);border-bottom:1px solid var(--line)}
.brand svg{width:28px;height:28px;flex:0 0 28px;border-radius:7px;display:block}
.nav{display:flex;flex-direction:column;padding:.6rem .55rem;gap:.12rem;flex:1;overflow-y:auto}
.nav a{display:flex;align-items:center;gap:.6rem;padding:.5rem .7rem;border-radius:8px;color:#3f4654;font-weight:500;font-size:.9rem}
.nav a:hover{background:var(--panel);text-decoration:none}
.nav a.active{background:var(--accent-weak);color:var(--accent);font-weight:600}
.nav a .ic{width:17px;height:17px;flex:0 0 17px;opacity:.85}
.nav-foot{padding:.6rem .55rem;border-top:1px solid var(--line);display:flex;flex-direction:column;gap:.3rem}
.content{flex:1;min-width:0;display:flex;flex-direction:column}
.topbar{height:56px;border-bottom:1px solid var(--line);display:flex;align-items:center;justify-content:flex-end;padding:0 1.6rem;gap:1rem;background:#fff;position:sticky;top:0;z-index:5}
.topbar .who{font-weight:600;font-size:.9rem}
.topbar .who small{color:var(--muted);font-weight:400}
main{padding:1.7rem 2rem;max-width:1120px;width:100%}

h1{font-size:1.55rem;font-weight:700;margin:.1rem 0 1.3rem;letter-spacing:-.02em}
h2{font-size:1.05rem;font-weight:650;margin:1.7rem 0 .7rem}

/* ---- Stat cards ---- */
.cards{display:grid;grid-template-columns:repeat(auto-fit,minmax(165px,1fr));gap:1rem;margin:0 0 1.3rem}
.card{background:#fff;border:1px solid var(--line);border-radius:14px;padding:1.1rem 1.2rem}
.cards .card{text-align:left}
.cards .n{font-size:2rem;font-weight:700;color:var(--ink);line-height:1.05}
.cards .card>div:last-child{color:var(--muted);font-size:.82rem;margin-top:.25rem}

/* ---- Tables ---- */
table{width:100%;border-collapse:separate;border-spacing:0;background:#fff;border:1px solid var(--line);border-radius:14px;overflow:hidden;margin:.4rem 0 1.2rem}
th,td{padding:.7rem .95rem;border-bottom:1px solid var(--line);text-align:left;vertical-align:middle}
th{background:#fafbfc;font-weight:600;color:var(--muted);font-size:.74rem;text-transform:uppercase;letter-spacing:.04em}
tbody tr:last-child td,tr:last-child td{border-bottom:0}
tbody tr:hover{background:#fafbfc}

/* ---- Forms ---- */
input,select{padding:.5rem .7rem;border:1px solid var(--line);border-radius:9px;font-size:14px;width:100%;max-width:380px;background:#fff;color:var(--ink)}
input:focus,select:focus{outline:none;border-color:var(--accent);box-shadow:0 0 0 3px var(--accent-weak)}
label{display:block;margin:.75rem 0 .25rem;font-weight:600;font-size:.82rem;color:#3f4654}
button{background:var(--accent);color:#fff;border:0;border-radius:9px;padding:.55rem 1.1rem;cursor:pointer;font-size:14px;font-weight:600}
button:hover{filter:brightness(.96)}
button.danger{background:var(--ko)}
button.ghost{background:#fff;color:var(--ink);border:1px solid var(--line)}
button.ghost:hover{background:var(--panel);filter:none}

/* ---- Misc ---- */
.msg{background:var(--accent-weak);border:1px solid #bfdbfe;color:#1e40af;border-radius:10px;padding:.75rem 1rem;margin:0 0 1.2rem;font-size:.9rem}
.badge{display:inline-block;padding:.16rem .55rem;border-radius:999px;font-size:.74rem;font-weight:600;background:#eef1f5;color:#475569}
.badge.active{background:var(--ok-bg);color:var(--ok)}
.badge.revoked,.badge.locked,.badge.disabled{background:var(--ko-bg);color:var(--ko)}
code{background:var(--panel);padding:.13rem .42rem;border-radius:6px;font-size:.85em;word-break:break-all;font-family:ui-monospace,SFMono-Regular,Menlo,monospace}
.inline{display:inline}
.muted{color:var(--muted);font-size:.85rem}

/* ---- Login ---- */
.login-wrap{display:flex;min-height:100vh;align-items:center;justify-content:center;background:var(--panel)}
.login-box{width:380px;background:#fff;border:1px solid var(--line);border-radius:18px;padding:2rem 2rem 2.2rem;box-shadow:0 10px 30px rgba(16,24,40,.08)}
.login-box .brand{border:0;justify-content:center;padding:0 0 1.3rem;font-size:1.45rem}
.login-box .brand svg{width:34px;height:34px;flex:0 0 34px}
.login-box h1{font-size:1.15rem;text-align:center;margin:.2rem 0 1.2rem;color:var(--muted);font-weight:500}
.login-box button{width:100%;margin-top:1rem;padding:.65rem}
.login-box input{max-width:none}