/* Metta Certificate Management — giao diện quản trị. Sáng/tối do người dùng chọn (data-theme), không theo hệ điều hành.
   Nhận diện Metta: navy #0D2341, gradient cyan #0FCFE4 → #18A9D7, xám slate.
   Font Be Vietnam Pro nhúng sẵn (bản on-premise chạy không cần internet; CSP chỉ cho phép 'self'). */

@font-face { font-family: "Be Vietnam Pro"; font-weight: 400; font-style: normal; font-display: swap; src: url(fonts/be-vietnam-pro-regular.woff2) format("woff2"); }
@font-face { font-family: "Be Vietnam Pro"; font-weight: 500; font-style: normal; font-display: swap; src: url(fonts/be-vietnam-pro-medium.woff2) format("woff2"); }
@font-face { font-family: "Be Vietnam Pro"; font-weight: 600; font-style: normal; font-display: swap; src: url(fonts/be-vietnam-pro-semibold.woff2) format("woff2"); }
@font-face { font-family: "Be Vietnam Pro"; font-weight: 700; font-style: normal; font-display: swap; src: url(fonts/be-vietnam-pro-bold.woff2) format("woff2"); }
@font-face { font-family: "JetBrains Mono"; font-weight: 400; font-style: normal; font-display: swap; src: url(fonts/jetbrains-mono-regular.woff2) format("woff2"); }
@font-face { font-family: "JetBrains Mono"; font-weight: 500; font-style: normal; font-display: swap; src: url(fonts/jetbrains-mono-medium.woff2) format("woff2"); }

:root {
  /* brand */
  --navy: #0D2341;
  --navy-deep: #0B1A30;
  --cyan: #0FCFE4;
  --cyan-2: #18A9D7;
  --grad: linear-gradient(90deg, var(--cyan), var(--cyan-2));
  /* surfaces & ink */
  --paper: #F4F6FA;
  --surface: #FFFFFF;
  --surface-2: #F6F8FB;
  --ink: #0D2341;
  --ink-2: #4A5B73;
  --ink-3: #6E7E94;
  --line: #E1E7EF;
  --line-2: #EBEFF5;
  /* actions: primary = navy; accent (links, selection, focus) = cyan family */
  --brand: #0D2341;
  --brand-2: #1A3A63;
  --brand-ink: #FFFFFF;
  --brand-soft: #E3F6FB;
  --accent: #0A7AA8;
  --accent-2: #075E82;
  --focus: #18A9D7;
  /* status */
  --expired: #C4281C;
  --expired-soft: #FDECEA;
  --critical: #C2410C;
  --critical-soft: #FEF0E6;
  --warning: #8F5B00;
  --warning-soft: #FDF3DC;
  --ok: #157A4A;
  --ok-soft: #E3F5EB;
  --info: #0A7AA8;
  --info-soft: #E3F4FA;
  /* chrome */
  --side-bg: #0B1A30;
  --side-ink: rgba(255, 255, 255, .72);
  --side-dim: rgba(255, 255, 255, .45);
  --side-hover: rgba(255, 255, 255, .06);
  --side-line: rgba(255, 255, 255, .08);
  --shadow-sm: 0 1px 2px rgba(13, 35, 65, .04);
  --shadow-md: 0 4px 10px -2px rgba(13, 35, 65, .07);
  --shadow-pop: 0 20px 48px -12px rgba(13, 35, 65, .28), 0 4px 10px rgba(13, 35, 65, .08);
  --sans: "Be Vietnam Pro", "Segoe UI", system-ui, -apple-system, Roboto, "Noto Sans", Arial, sans-serif;
  --mono: "JetBrains Mono", ui-monospace, "Cascadia Mono", "SF Mono", Menlo, Consolas, monospace;
  --r-s: 6px;
  --r-m: 12px;
  --r-l: 14px;
  --side-w: 260px;
  color-scheme: light;
}

:root[data-theme="dark"] {
  --paper: #081426;
  --surface: #0E1F37;
  --surface-2: #132845;
  --ink: #E8EEF6;
  --ink-2: #A9B7CA;
  --ink-3: #7F91A9;
  --line: #1F385A;
  --line-2: #19304F;
  --brand: #16C2E2;
  --brand-2: #4FD6EE;
  --brand-ink: #06182C;
  --brand-soft: rgba(22, 194, 226, .14);
  --accent: #5AD3EE;
  --accent-2: #8BE2F4;
  --focus: #4FD6EE;
  --expired: #FF8A80;
  --expired-soft: rgba(255, 138, 128, .13);
  --critical: #FFA06B;
  --critical-soft: rgba(255, 160, 107, .13);
  --warning: #F2C25B;
  --warning-soft: rgba(242, 194, 91, .12);
  --ok: #6FD39A;
  --ok-soft: rgba(111, 211, 154, .12);
  --info: #5AD3EE;
  --info-soft: rgba(90, 211, 238, .12);
  --side-bg: #06101F;
  --shadow-sm: 0 1px 2px rgba(0, 0, 0, .3);
  --shadow-md: 0 6px 16px -4px rgba(0, 0, 0, .5);
  --shadow-pop: 0 24px 56px -12px rgba(0, 0, 0, .7), 0 4px 10px rgba(0, 0, 0, .4);
  color-scheme: dark;
}

/* ---------- base ---------- */
*, *::before, *::after { box-sizing: border-box; }
html { -webkit-text-size-adjust: 100%; }
body {
  margin: 0;
  font: 15px/1.55 var(--sans);
  background: var(--paper);
  color: var(--ink);
  -webkit-font-smoothing: antialiased;
  text-rendering: optimizeLegibility;
}
[hidden] { display: none !important; }
a { color: var(--accent); text-underline-offset: 3px; text-decoration-thickness: 1px; }
a:hover { color: var(--accent-2); }
h1, h2, h3 { margin: 0; line-height: 1.25; }
h1 { font-size: 28px; font-weight: 700; letter-spacing: -.025em; }
h2 { font-size: 17px; font-weight: 600; letter-spacing: -.01em; }
h3 { font-size: 15px; font-weight: 600; }
p { margin: 0; }
code, .mono { font-family: var(--mono); font-size: 13.5px; }
.num, td.num { font-variant-numeric: tabular-nums; }
.muted { color: var(--ink-2); }
.subtle { color: var(--ink-3); }
.small { font-size: 13.5px; }
.nowrap { white-space: nowrap; }
.break { overflow-wrap: anywhere; }
.sr { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }

:focus { outline: none; }
:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: 6px; }

.skip { position: absolute; left: 12px; top: -60px; z-index: 100; background: var(--surface); padding: 8px 12px; border-radius: var(--r-s); }
.skip:focus { top: 12px; box-shadow: var(--shadow-pop); }

svg.i { width: 18px; height: 18px; flex: none; stroke: currentColor; fill: none; stroke-width: 1.75; stroke-linecap: round; stroke-linejoin: round; }
svg.i.sm { width: 16px; height: 16px; }

/* ---------- controls ---------- */
.btn {
  display: inline-flex; align-items: center; justify-content: center; gap: 7px;
  min-height: 40px; padding: 8px 16px;
  font: inherit; font-weight: 600; font-size: 14.5px; line-height: 1.2;
  color: var(--ink); background: var(--surface);
  border: 1px solid var(--line); border-radius: 10px;
  box-shadow: var(--shadow-sm);
  cursor: pointer; text-decoration: none; white-space: nowrap;
  transition: background .15s, border-color .15s, box-shadow .15s, transform .05s;
}
.btn:hover { background: var(--surface-2); border-color: color-mix(in srgb, var(--ink-3) 55%, var(--line)); color: var(--ink); }
.btn:active { transform: translateY(1px); }
.btn[disabled], .btn[aria-busy="true"] { opacity: .5; cursor: not-allowed; transform: none; }
/* nút chính: gradient cyan, chữ navy — như bộ sản phẩm Metta */
.btn.primary { background: var(--brand); color: var(--brand-ink); border-color: var(--brand); font-weight: 600; box-shadow: none; }
.btn.primary:hover { background: var(--brand-2); color: var(--brand-ink); border-color: var(--brand-2); }
.btn.danger { color: var(--expired); }
.btn.danger:hover { background: var(--expired-soft); border-color: color-mix(in srgb, var(--expired) 40%, transparent); }
.btn.danger.solid { background: var(--expired); color: #fff; border-color: var(--expired); }
.btn.ghost { background: transparent; border-color: transparent; box-shadow: none; }
.btn.ghost:hover { background: var(--surface-2); border-color: transparent; }
.btn.sm { min-height: 32px; padding: 5px 12px; font-size: 13.5px; border-radius: 8px; }
.btn.lg { min-height: 46px; padding: 10px 20px; font-size: 15px; border-radius: 12px; }
.btn.xl { min-height: 54px; padding: 12px 22px; font-size: 16.5px; border-radius: 12px; }
.btn.icon { padding: 8px; min-width: 40px; }
.btn[aria-busy="true"]::after {
  content: ""; width: 12px; height: 12px; border-radius: 50%;
  border: 2px solid currentColor; border-right-color: transparent;
  animation: spin .7s linear infinite;
}
@keyframes spin { to { transform: rotate(360deg); } }

.field { display: grid; gap: 6px; }
.field > span, .field > label { font-weight: 600; font-size: 14px; }
.field .hint { color: var(--ink-3); font-size: 13.5px; font-weight: 400; }
.input, select.input, textarea.input {
  width: 100%; min-height: 44px; padding: 9px 13px;
  font: inherit; color: var(--ink); background: var(--surface);
  border: 1px solid var(--line); border-radius: 10px;
  transition: border-color .15s, box-shadow .15s;
}
.input::placeholder { color: color-mix(in srgb, var(--ink-3) 80%, transparent); }
.input:hover { border-color: color-mix(in srgb, var(--ink-3) 60%, var(--line)); }
.input:focus-visible { outline: none; border-color: var(--focus); box-shadow: 0 0 0 4px color-mix(in srgb, var(--focus) 18%, transparent); border-radius: 10px; }
.input[aria-invalid="true"] { border-color: var(--expired); box-shadow: 0 0 0 4px var(--expired-soft); }
.input[disabled] { background: var(--surface-2); color: var(--ink-3); }
select.input { padding-right: 30px; }
textarea.input { min-height: 96px; resize: vertical; }
.check { display: inline-flex; gap: 9px; align-items: flex-start; cursor: pointer; }
.check input { margin: 3px 0 0; width: 16px; height: 16px; accent-color: var(--cyan-2); flex: none; }
.form { display: grid; gap: 16px; }
.form-row { display: grid; gap: 14px; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); align-items: start; }
/* các trường trong một hàng dùng chung 3 dòng lưới: nhãn | ô nhập | gợi ý — nhãn dài xuống dòng không làm lệch ô nhập */
.form-row > * { grid-row: span 3; }
.form-row > .field { grid-template-rows: subgrid; row-gap: 6px; align-content: start; }
.form-row > .field > span:first-child, .form-row > .field > label:first-child { align-self: end; }
.form-error { color: var(--expired); font-size: 14px; font-weight: 500; }
.form-actions { display: flex; gap: 8px; justify-content: flex-end; flex-wrap: wrap; padding-top: 6px; }

.search { position: relative; min-width: 220px; flex: 1 1 260px; max-width: 380px; }
.search svg { position: absolute; left: 12px; top: 50%; transform: translateY(-50%); color: var(--ink-3); pointer-events: none; }
.search .input { padding-left: 38px; }

/* segmented status filter */
.seg { display: inline-flex; flex-wrap: wrap; gap: 4px; padding: 4px; background: var(--surface-2); border: 1px solid var(--line-2); border-radius: 12px; }
.seg button {
  display: inline-flex; align-items: center; gap: 6px;
  font: inherit; font-size: 13px; font-weight: 600; color: var(--ink-2);
  background: transparent; border: 0; border-radius: 8px; padding: 5px 11px; min-height: 30px; cursor: pointer;
}
.seg button:hover { color: var(--ink); }
.seg button[aria-pressed="true"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-sm); }
.seg .count { font-variant-numeric: tabular-nums; color: var(--ink-3); font-weight: 500; }

/* ---------- status ---------- */
.st { display: inline-flex; align-items: center; gap: 7px; font-weight: 600; white-space: nowrap; }
.st::before { content: ""; width: 8px; height: 8px; border-radius: 50%; background: currentColor; flex: none; box-shadow: 0 0 0 3px color-mix(in srgb, currentColor 18%, transparent); }
.st.expired { color: var(--expired); }
.st.critical { color: var(--critical); }
.st.warning { color: var(--warning); }
.st.ok { color: var(--ok); }
.st.inactive { color: var(--ink-3); }

.clamp2 { display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; overflow-wrap: anywhere; }
.tag { white-space: nowrap;
  display: inline-flex; align-items: center; gap: 4px;
  padding: 1px 10px; border-radius: 999px; font-size: 13px; font-weight: 600; line-height: 20px;
  background: var(--surface-2); color: var(--ink-2); border: 1px solid var(--line-2);
}
.tag.critical { background: var(--critical-soft); color: var(--critical); border-color: transparent; }
.tag.warning { background: var(--warning-soft); color: var(--warning); border-color: transparent; }
.tag.info { background: var(--info-soft); color: var(--info); border-color: transparent; }
.tag.expired { background: var(--expired-soft); color: var(--expired); border-color: transparent; }
.tag.ok { background: var(--ok-soft); color: var(--ok); border-color: transparent; }
/* tiến trình cấp chứng chỉ */
.issue-steps { list-style: none; display: flex; flex-wrap: wrap; gap: 4px; margin: 8px 0 0; padding: 0; font-size: 12px; line-height: 18px; }
.issue-steps li { padding: 1px 8px; border-radius: 999px; border: 1px solid var(--line-2); color: var(--ink-3); white-space: nowrap; }
.issue-steps li.done { background: var(--ok-soft); color: var(--ok); border-color: transparent; }
.issue-steps li.done::before { content: "✓ "; }
.issue-steps li.active { background: var(--info-soft); color: var(--info); border-color: transparent; font-weight: 600; }
.issue-steps li.err { background: var(--critical-soft); color: var(--critical); border-color: transparent; }
.issue-steps li.err::before { content: "✗ "; }
.tag.brand { background: var(--brand-soft); color: var(--accent); border-color: transparent; }

/* ---------- boot ---------- */
.boot { min-height: 100vh; display: grid; place-content: center; justify-items: center; gap: 14px; color: var(--ink-3); }
.boot img { animation: breathe 1.6s ease-in-out infinite; }
@keyframes breathe { 50% { opacity: .55; transform: scale(.96); } }

/* ---------- công cụ: ngôn ngữ, sáng/tối ---------- */
.tools { display: flex; align-items: center; gap: 6px; }
.lang-sel { position: relative; display: inline-flex; }
.lang-btn { display: inline-flex; align-items: center; gap: 6px; height: 34px; padding: 0 8px 0 10px; border-radius: 10px; background: var(--surface-2); border: 1px solid var(--line); color: var(--ink-3); font: inherit; font-size: 13px; font-weight: 600; cursor: pointer; }
.lang-btn .lang-cur { color: var(--ink); max-width: 150px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.lang-btn:hover, .lang-btn[aria-expanded="true"] { color: var(--ink); border-color: var(--ink-3); }
.lang-btn:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
.lang-btn > svg:last-child { transition: transform .15s; }
.lang-btn[aria-expanded="true"] > svg:last-child { transform: rotate(180deg); }
.lang-menu { min-width: 220px; padding: 6px; }
.lang-menu .menu-label { padding: 6px 12px 8px; }
.lang-menu button { padding: 8px 10px; font-weight: 500; }
.lang-menu button.on { color: var(--accent); background: var(--brand-soft); font-weight: 600; }
.lang-menu button:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
.lang-menu .lang-code { width: 30px; height: 22px; display: inline-grid; place-items: center; border-radius: 6px; background: var(--surface-2); color: var(--ink-3); font-size: 11px; font-weight: 700; letter-spacing: .04em; font-family: var(--mono); }
.lang-menu button.on .lang-code { background: var(--accent); color: #fff; }
.sr-only { position: absolute; width: 1px; height: 1px; margin: -1px; padding: 0; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; }
html.i18n-loading body { visibility: hidden; }
.tool-btn { color: var(--ink-2); border: 1px solid var(--line); background: var(--surface); }
.tool-btn:hover { color: var(--ink); background: var(--surface-2); border-color: var(--line); }

/* ---------- login (theo bộ nhận diện sản phẩm Metta: Metta Speech) ---------- */
.login { min-height: 100vh; display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); background: var(--paper); }
.login-hero {
  position: relative; overflow: hidden; color: #fff;
  display: flex; flex-direction: column; gap: 48px;
  padding: 48px clamp(36px, 4.5vw, 72px) 40px;
  background: var(--side-bg); border-right: 1px solid var(--side-line);
}
.hero-deco { display: none; }
.hero-brand { position: relative; display: flex; align-items: center; gap: 12px; font-size: 19px; letter-spacing: -.005em; color: rgba(255, 255, 255, .7); }
.hero-brand img { border-radius: 10px; box-shadow: 0 0 0 1px rgba(255, 255, 255, .14); }
.hero-brand b { color: #fff; font-weight: 700; }
.login-pitch { position: relative; margin: auto 0; max-width: 620px; }
.login-pitch h2 { font-size: clamp(32px, 3.1vw, 46px); font-weight: 700; letter-spacing: -.025em; line-height: 1.16; }
.accent-bar { display: block; width: 56px; height: 3px; border-radius: 2px; background: var(--cyan); margin: 26px 0 36px; }
.login-points { list-style: none; padding: 0; margin: 0; display: grid; gap: 26px; }
.login-points li { display: flex; gap: 16px; align-items: flex-start; }
.login-points b { display: block; font-weight: 700; font-size: 17px; line-height: 1.4; }
.login-points span { display: block; margin-top: 4px; color: rgba(255, 255, 255, .72); font-size: 16px; line-height: 1.55; }
.pt-ico { flex: none; width: 24px; height: 24px; margin-top: 1px; stroke: var(--cyan); fill: none; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
.hero-foot { position: relative; display: flex; align-items: center; justify-content: space-between; gap: 16px; color: rgba(255, 255, 255, .6); font-size: 14.5px; }
.hero-foot .by { display: inline-flex; align-items: center; gap: 12px; }
.hero-foot .by img { height: 34px; width: auto; }

.login-side { position: relative; display: grid; place-items: center; padding: 88px 32px 48px; background: var(--paper); }
.login-tools { position: absolute; top: 24px; right: 28px; }
.login-card { width: 100%; max-width: 480px; }
.login-logo-sm { display: none; width: 240px; height: auto; margin-bottom: 36px; }
.login-logo-sm.on-dark { display: none !important; }
:root[data-theme="dark"] .login-logo-sm:not(.on-dark) { display: none !important; }
.login h1 { font-size: 36px; font-weight: 700; letter-spacing: -.025em; margin-bottom: 10px; }
.login .lead { color: var(--ink-2); font-size: 16px; margin-bottom: 36px; }
.login .form { gap: 22px; }
.login .field { gap: 9px; }
.login .field > span, .login .field > label { font-weight: 600; font-size: 15px; }
.login .input { min-height: 50px; padding: 12px 16px; font-size: 16px; border-radius: 12px; }
.pw-wrap { position: relative; display: block; }
.pw-wrap .input { padding-right: 76px; }
.pw-toggle { position: absolute; right: 8px; top: 50%; transform: translateY(-50%); font: inherit; font-size: 14.5px; font-weight: 600; color: var(--ink-2); background: none; border: 0; padding: 8px 10px; border-radius: 8px; cursor: pointer; }
.pw-toggle:hover { color: var(--ink); background: var(--surface-2); }
.forgot-row { display: flex; justify-content: flex-end; }
.link-btn { font: inherit; font-size: 15px; font-weight: 600; color: var(--accent); background: none; border: 0; padding: 0; cursor: pointer; text-decoration: none; }
.link-btn.back { margin-top: 26px; }
.login .btn.xl { margin-top: 10px; }
.login-alt { margin-top: 28px; text-align: center; color: var(--ink-2); font-size: 15px; }
.login-alt span { color: var(--ink); font-weight: 500; }
.form-ok { color: var(--ok); background: var(--ok-soft); border-radius: 12px; padding: 12px 14px; font-size: 14.5px; font-weight: 500; }
.login .form-error { font-size: 14.5px; }
.login .or { display: flex; align-items: center; gap: 12px; color: var(--ink-3); font-size: 14px; margin: 22px 0 16px; }
.login .or::before, .login .or::after { content: ""; flex: 1; height: 1px; background: var(--line); }
.w100 { width: 100%; }

/* ---------- shell ---------- */
.shell { display: grid; grid-template-columns: var(--side-w) minmax(0, 1fr); min-height: 100vh; background: linear-gradient(to right, var(--side-bg) var(--side-w), transparent var(--side-w)); }
.side {
  position: sticky; top: 0; height: 100vh; overflow-y: auto;
  display: flex; flex-direction: column; gap: 4px;
  background: var(--side-bg); color: var(--side-ink); padding: 18px 14px;
  background-image: radial-gradient(420px 260px at 0% 100%, rgba(24, 169, 215, .16), transparent 70%);
}
.side .brand { display: flex; align-items: center; gap: 11px; padding: 4px 8px 18px; text-decoration: none; color: #fff; }
.side .brand > img { border-radius: 10px; box-shadow: 0 0 0 1px rgba(255, 255, 255, .14), 0 4px 12px rgba(0, 0, 0, .25); }
.brand-text { display: grid; gap: 3px; }
.brand-text img { display: block; height: 18px; width: auto; }
.brand-text small { font-size: 10px; font-weight: 600; letter-spacing: .14em; text-transform: uppercase; color: rgba(255, 255, 255, .55); white-space: nowrap; }
.nav-group { margin-top: 14px; }
.nav-group > p { padding: 0 12px 6px; font-size: 11.5px; font-weight: 600; letter-spacing: .12em; text-transform: uppercase; color: var(--side-dim); }
.nav a {
  position: relative; display: flex; align-items: center; gap: 11px;
  padding: 9px 12px; margin: 1px 0; border-radius: 10px; font-size: 15px;
  color: var(--side-ink); text-decoration: none; font-weight: 500;
  transition: background .15s, color .15s;
}
.nav a svg.i { opacity: .8; }
.nav a:hover { background: var(--side-hover); color: #fff; }
.nav a[aria-current="page"] { background: rgba(15, 207, 228, .1); color: #fff; font-weight: 600; }
.nav a[aria-current="page"] svg.i { color: var(--cyan); opacity: 1; }
.nav a[aria-current="page"]::before { content: ""; position: absolute; left: -14px; top: 8px; bottom: 8px; width: 3px; border-radius: 0 3px 3px 0; background: var(--cyan); }
.nav a .badge { margin-left: auto; min-width: 20px; padding: 0 6px; border-radius: 999px; font-size: 11.5px; line-height: 20px; text-align: center; font-weight: 700; font-variant-numeric: tabular-nums; color: #fff; background: #E5484D; }
.side :focus-visible { outline-color: var(--cyan); }
.side-foot { margin-top: auto; padding: 14px 10px 0; font-size: 12px; color: var(--side-dim); border-top: 1px solid var(--side-line); }

.col { min-width: 0; display: flex; flex-direction: column; }
.top {
  position: sticky; top: 0; z-index: 20;
  display: flex; align-items: center; gap: 12px;
  min-height: 64px; padding: 12px max(32px, calc((100% - var(--content-w)) / 2 + 32px));
  background: color-mix(in srgb, var(--paper) 82%, transparent);
  backdrop-filter: saturate(1.6) blur(12px);
  border-bottom: 1px solid var(--line-2);
}
.top .grow { flex: 1; }
.menu-btn { display: none; }
.who { position: relative; }
.who-btn { display: inline-flex; align-items: center; gap: 9px; }
.avatar {
  width: 30px; height: 30px; border-radius: 50%; display: grid; place-items: center; flex: none;
  background: var(--cyan); color: var(--navy); font-size: 12px; font-weight: 700;
}
.menu {
  position: absolute; right: 0; top: calc(100% + 8px); min-width: 260px; z-index: 40;
  background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-m);
  box-shadow: var(--shadow-pop); padding: 6px;
  animation: pop .14s ease-out;
}
.menu .who-info { padding: 10px 12px 12px; border-bottom: 1px solid var(--line-2); margin-bottom: 6px; }
.menu .who-info b { display: block; word-break: break-all; }
.menu button, .menu a {
  display: flex; width: 100%; align-items: center; gap: 10px;
  padding: 8px 12px; border-radius: 8px;
  font: inherit; color: var(--ink); background: none; border: 0; text-align: left; cursor: pointer; text-decoration: none;
}
.menu button:hover, .menu a:hover { background: var(--surface-2); }

/* nội dung tối đa 1680px, căn giữa; thanh trên cùng thẳng hàng với nội dung */
:root { --content-w: 1680px; }
main { padding: 28px 32px 72px; max-width: var(--content-w); width: 100%; margin-inline: auto; }
main:focus { outline: none; }

.page-head { display: flex; align-items: flex-end; gap: 16px; flex-wrap: wrap; margin-bottom: 22px; }
.page-head .grow { flex: 1; min-width: 240px; }
.page-head p { color: var(--ink-2); margin-top: 6px; max-width: 76ch; }
.actions { display: flex; gap: 8px; flex-wrap: wrap; }

.panel { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-m); box-shadow: var(--shadow-sm); }
.panel + .panel, .panel + .grid2, .grid2 + .panel { margin-top: 18px; }
.panel-head { display: flex; align-items: center; gap: 12px; padding: 16px 20px; border-bottom: 1px solid var(--line-2); }
.panel-head .grow { flex: 1; }
.panel-body { padding: 18px 20px; }
.grid2 { display: grid; gap: 18px; grid-template-columns: minmax(0, 1.4fr) minmax(0, 1fr); align-items: start; }

.toolbar { display: flex; flex-wrap: wrap; gap: 10px; align-items: center; padding: 14px 16px; border-bottom: 1px solid var(--line-2); }
.toolbar .grow { flex: 1; }
.toolbar select.input { width: auto; min-width: 160px; }
.top .search { max-width: 460px; flex: 0 1 460px; }
.top .search .input { background: var(--surface); border-radius: 999px; min-height: 40px; box-shadow: var(--shadow-sm); }

/* ---------- tables ---------- */
.table-wrap { overflow-x: auto; }
table.t { width: 100%; border-collapse: collapse; }
.t th, .t td { text-align: left; padding: 12px 16px; border-bottom: 1px solid var(--line-2); vertical-align: top; }
.t th { font-size: 12px; font-weight: 600; letter-spacing: .05em; text-transform: uppercase; color: var(--ink-3); background: var(--surface-2); position: sticky; top: 0; z-index: 1; white-space: nowrap; }
.t thead tr:first-child th:first-child { border-top-left-radius: var(--r-m); }
.t thead tr:first-child th:last-child { border-top-right-radius: var(--r-m); }
.t tbody tr:last-child td { border-bottom: 0; }
.t tbody tr { transition: background .12s; }
.t tbody tr:hover td { background: color-mix(in srgb, var(--surface-2) 70%, transparent); }
.t tr.row-link { cursor: pointer; }
.t.t-fixed { table-layout: fixed; min-width: 960px; } .t.t-fixed td { overflow-wrap: anywhere; }
.t .w-path { min-width: 200px; }
.t td.act.act-wrap { white-space: normal; width: auto; min-width: 190px; } .t td.act.act-wrap .btn, .t td.act.act-wrap .kebab { margin: 0 0 4px 4px; display: inline-flex; vertical-align: middle; } .t .w-cert { width: 24%; } .t .w-score { width: 200px; } .t .w-opt { width: 130px; } .t .w-exp { width: 140px; }
.t td.num, .t th.num { text-align: right; }
.t .sort { font: inherit; color: inherit; letter-spacing: inherit; text-transform: inherit; background: none; border: 0; padding: 0; cursor: pointer; display: inline-flex; gap: 4px; align-items: center; }
.t .sort:hover { color: var(--ink); }
.t .sort[aria-sort] { color: var(--ink); }
.t .sort .arrow { font-size: 10px; opacity: .8; }
.t .name { color: var(--ink); background: none; border: 0; padding: 0; font: inherit; font-weight: 600; text-align: left; cursor: pointer; word-break: break-word; }
.t .name:hover { color: var(--accent); text-decoration: underline; text-underline-offset: 3px; }
.t a b { color: var(--ink); }
.t a:hover b { color: var(--accent); }
.t .sub { color: var(--ink-3); font-size: 13.5px; margin-top: 2px; }
.t .tags { display: flex; flex-wrap: wrap; gap: 4px; margin-top: 6px; }
.t .tags .tag { border-radius: 8px; }
.t td select.input { width: auto; min-width: 130px; }
.t td.act { white-space: nowrap; text-align: right; width: 1%; }
.t td.act .btn + .btn { margin-left: 4px; }
.t td.edge { padding-left: 0; padding-right: 0; width: 4px; }
.edge-bar { display: block; width: 3px; min-height: 36px; height: 100%; border-radius: 0 3px 3px 0; }
.edge-bar.expired { background: var(--expired); }
.edge-bar.critical { background: var(--critical); }
.edge-bar.warning { background: var(--warning); }
.edge-bar.ok { background: transparent; }
.left-cell { display: block; }
.days { font-weight: 600; font-variant-numeric: tabular-nums; }
.days.expired { color: var(--expired); }
.days.critical { color: var(--critical); }
.days.warning { color: var(--warning); }

.pager { display: flex; align-items: center; gap: 10px; justify-content: space-between; padding: 12px 16px; border-top: 1px solid var(--line-2); color: var(--ink-2); font-size: 13px; flex-wrap: wrap; }
.pager .actions { gap: 6px; }

.skeleton td { padding: 16px; }
.skeleton .bar { height: 12px; border-radius: 6px; background: linear-gradient(90deg, var(--line-2), var(--surface-2), var(--line-2)); background-size: 200% 100%; animation: shimmer 1.2s linear infinite; }
@keyframes shimmer { to { background-position: -200% 0; } }

.empty { padding: 48px 20px; text-align: center; display: grid; justify-items: center; gap: 8px; }
.empty .ico { width: 52px; height: 52px; border-radius: 16px; display: grid; place-items: center; background: var(--brand-soft); color: var(--accent); margin-bottom: 6px; }
.empty .ico svg.i { width: 22px; height: 22px; }
.empty h3 { font-size: 16px; }
.empty p { color: var(--ink-2); max-width: 54ch; }
.empty .actions { margin-top: 10px; justify-content: center; }

.alert-box { display: flex; gap: 10px; align-items: flex-start; padding: 12px 16px; border-radius: 12px; background: var(--info-soft); color: var(--ink); border: 1px solid color-mix(in srgb, var(--info) 18%, transparent); }
.alert-box.warn { background: var(--warning-soft); border-color: color-mix(in srgb, var(--warning) 22%, transparent); }
.alert-box.err { background: var(--expired-soft); border-color: color-mix(in srgb, var(--expired) 22%, transparent); }
.alert-box svg { color: var(--info); margin-top: 2px; }
.alert-box.warn svg { color: var(--warning); }
.alert-box.err svg { color: var(--expired); }

/* ---------- overview: expiry runway ---------- */
.hero { padding: 26px 26px 20px; }
.hero-line { display: flex; flex-wrap: wrap; align-items: baseline; gap: 6px 14px; }
.hero h2 { font-size: clamp(24px, 2.8vw, 32px); font-weight: 700; letter-spacing: -.025em; line-height: 1.2; }
/* tiêu đề giữ màu chữ thường; mức khẩn cấp thể hiện bằng chấm màu ở đầu dòng (đỏ cả câu quá chói) */
.hero h2.expired::before, .hero h2.critical::before {
  content: ""; display: inline-block; width: 12px; height: 12px; margin: 0 14px 0 4px; border-radius: 50%;
  vertical-align: .18em; background: var(--expired); box-shadow: 0 0 0 5px var(--expired-soft);
}
.hero h2.critical::before { background: var(--critical); box-shadow: 0 0 0 5px var(--critical-soft); }
.hero .lead { color: var(--ink-2); margin-top: 8px; }
.runway { position: relative; margin: 26px 4px 0; padding-bottom: 34px; }
.runway-track { position: relative; height: var(--rw-h, 120px); }
.runway-zone { position: absolute; top: 0; bottom: 0; border-radius: 6px; }
.runway-zone.expired { background: repeating-linear-gradient(135deg, var(--expired-soft) 0 6px, transparent 6px 12px); }
.runway-zone.soon { background: linear-gradient(90deg, var(--critical-soft), transparent); opacity: .7; }
.runway-axis { position: absolute; left: 0; right: 0; bottom: 0; height: 1px; background: var(--line); }
.runway-tick { position: absolute; top: 100%; transform: translateX(-50%); display: grid; justify-items: center; gap: 2px; font-size: 13px; color: var(--ink-3); white-space: nowrap; font-variant-numeric: tabular-nums; pointer-events: none; }
.runway-tick::before { content: ""; width: 1px; height: 8px; background: var(--line); margin-bottom: 4px; }
.runway-tick.today { color: var(--ink); font-weight: 600; }
.runway-tick.today::before { height: 12px; background: var(--ink); }
.runway-today { position: absolute; top: 0; bottom: 0; width: 1px; background: var(--ink); opacity: .5; }
.runway-notch { position: absolute; bottom: -4px; width: 2px; height: 8px; background: var(--cyan-2); border-radius: 1px; transform: translateX(-50%); }
.dot {
  position: absolute; width: 14px; height: 14px; border-radius: 50%; padding: 0; cursor: pointer;
  border: 2px solid var(--surface); transform: translate(-50%, 50%); box-shadow: 0 1px 2px rgba(13, 35, 65, .2);
}
.dot.expired { background: var(--expired); }
.dot.critical { background: var(--critical); }
.dot.warning { background: var(--warning); }
.dot.ok { background: var(--ok); opacity: .8; }
.dot.signing { border-radius: 4px; }
.dot:hover, .dot:focus-visible { transform: translate(-50%, 50%) scale(1.35); z-index: 3; opacity: 1; outline-offset: 1px; }
.dot-more { position: absolute; transform: translate(-50%, 50%); font-size: 11px; font-weight: 600; color: var(--ink-2); }
.tip {
  position: absolute; z-index: 5; pointer-events: none; transform: translate(-50%, calc(-100% - 12px));
  background: var(--navy); color: #fff; padding: 7px 10px; border-radius: 8px; font-size: 12.5px; white-space: nowrap; max-width: 320px; overflow: hidden; text-overflow: ellipsis; box-shadow: var(--shadow-md);
}
.runway-legend { display: flex; flex-wrap: wrap; gap: 6px 18px; margin-top: 4px; padding: 0 26px 20px; font-size: 13.5px; color: var(--ink-2); }
.runway-legend .k { display: inline-flex; align-items: center; gap: 6px; }
.runway-legend .sw { width: 10px; height: 10px; border-radius: 50%; }
.runway-legend .sw.c-expired { background: var(--expired); }
.runway-legend .sw.c-critical { background: var(--critical); }
.runway-legend .sw.c-warning { background: var(--warning); }
.runway-legend .sw.c-ok { background: var(--ok); opacity: .8; }
.runway-legend .sw.sq { border-radius: 3px; background: var(--ink-3); }
.runway-legend .sw.notch { width: 2px; height: 10px; border-radius: 1px; background: var(--cyan-2); }

.strip { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); border-top: 1px solid var(--line-2); }
.strip a { display: grid; gap: 2px; padding: 16px 26px; text-decoration: none; color: var(--ink-2); border-right: 1px solid var(--line-2); transition: background .15s; }
.strip a:last-child { border-right: 0; }
.strip a:hover { background: var(--surface-2); color: var(--ink); }
.strip b { font-size: 26px; font-weight: 700; letter-spacing: -.02em; color: var(--ink); font-variant-numeric: tabular-nums; line-height: 1.2; }
.strip a.expired b { color: var(--expired); }
.strip a.critical b { color: var(--critical); }
.strip a.warning b { color: var(--warning); }
.strip a.zero b { color: var(--ink-3); }

.issues { list-style: none; margin: 0; padding: 0; }
.issues li { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; gap: 4px 12px; align-items: start; padding: 13px 20px; border-bottom: 1px solid var(--line-2); }
.issues li:last-child { border-bottom: 0; }
.issues .st { margin-top: 1px; }
.issues .what { min-width: 0; }
.issues .what .name { font: inherit; font-weight: 600; color: var(--ink); background: none; border: 0; padding: 0; cursor: pointer; text-align: left; word-break: break-word; }
.issues .what .name:hover { color: var(--accent); text-decoration: underline; }
.issues .why { color: var(--ink-2); font-size: 14px; }

.facts { list-style: none; margin: 0; padding: 0; }
.facts li { display: flex; align-items: center; gap: 14px; padding: 14px 20px; border-bottom: 1px solid var(--line-2); }
.facts li:last-child { border-bottom: 0; }
.facts .ico { width: 38px; height: 38px; border-radius: 11px; display: grid; place-items: center; background: var(--brand-soft); color: var(--accent); flex: none; }
.facts .grow { flex: 1; min-width: 0; }
.facts b { display: block; }
.facts span { color: var(--ink-2); font-size: 14px; }

.steps { list-style: none; margin: 0; padding: 6px 0; counter-reset: s; }
.steps li { display: grid; grid-template-columns: 30px minmax(0, 1fr) auto; gap: 14px; align-items: center; padding: 13px 20px; counter-increment: s; }
.steps li::before {
  content: counter(s); width: 28px; height: 28px; border-radius: 50%; display: grid; place-items: center;
  font-weight: 600; font-size: 13px; border: 1.5px solid var(--line); color: var(--ink-2);
}
.steps li.done::before { content: "✓"; background: var(--ok); border-color: var(--ok); color: #fff; }
.steps li.done b { color: var(--ink-2); text-decoration: line-through; text-decoration-color: var(--ink-3); }
.steps span { color: var(--ink-2); font-size: 14px; display: block; }

/* ---------- dialogs & drawer ---------- */
dialog {
  border: 1px solid var(--line); border-radius: var(--r-l); padding: 0;
  background: var(--surface); color: var(--ink); box-shadow: var(--shadow-pop);
  width: min(560px, calc(100vw - 24px)); max-height: calc(100vh - 48px);
}
dialog::backdrop { background: rgba(8, 20, 38, .55); backdrop-filter: blur(3px); }
dialog.wide { width: min(740px, calc(100vw - 24px)); }
.dlg-head { display: flex; align-items: flex-start; gap: 12px; padding: 22px 24px 0; }
.dlg-head .grow { flex: 1; min-width: 0; }
.dlg-head h2 { font-size: 20px; font-weight: 700; letter-spacing: -.01em; }
.dlg-head p { color: var(--ink-2); margin-top: 6px; font-weight: 400; font-size: 15px; }
.dlg-body { padding: 18px 24px 24px; }
dialog[open] { animation: pop .18s ease-out; }
@keyframes pop { from { opacity: 0; transform: translateY(8px) scale(.98); } }

dialog.drawer {
  margin: 0 0 0 auto; height: 100vh; max-height: 100vh; width: min(640px, 100vw);
  border-radius: var(--r-l) 0 0 var(--r-l); border-width: 0 0 0 1px; display: flex; flex-direction: column;
}
dialog.drawer:not([open]) { display: none; }
dialog.drawer[open] { animation: slide .22s ease-out; }
@keyframes slide { from { transform: translateX(28px); opacity: 0; } }
.drawer-head { padding: 22px 26px 18px; border-bottom: 1px solid var(--line-2); display: flex; gap: 12px; align-items: flex-start; }
.drawer-head .grow { flex: 1; min-width: 0; }
.drawer-head h2 { font-size: 20px; font-weight: 700; letter-spacing: -.015em; word-break: break-word; }
.drawer-head .meta { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; margin-top: 8px; }
.drawer-body { padding: 20px 26px 30px; overflow-y: auto; flex: 1; display: grid; gap: 24px; align-content: start; }
.drawer-foot { padding: 14px 26px; border-top: 1px solid var(--line-2); display: flex; gap: 8px; justify-content: space-between; flex-wrap: wrap; }

.validity { display: grid; gap: 8px; }
.validity .track { position: relative; height: 8px; border-radius: 4px; background: var(--line-2); overflow: hidden; }
.validity .used { position: absolute; left: 0; top: 0; bottom: 0; border-radius: 4px; background: var(--ok); }
.validity .used.warning { background: var(--warning); }
.validity .used.critical { background: var(--critical); }
.validity .used.expired { background: var(--expired); }
.validity .ends { display: flex; justify-content: space-between; font-size: 12.5px; color: var(--ink-2); font-variant-numeric: tabular-nums; }

.kv { display: grid; grid-template-columns: 160px minmax(0, 1fr); gap: 12px 18px; margin: 0; }
.kv dt { color: var(--ink-3); font-size: 14px; }
.kv dd { margin: 0; min-width: 0; word-break: break-word; }
.chips { display: flex; flex-wrap: wrap; gap: 6px; }
.chip { display: inline-block; padding: 3px 10px; border-radius: 999px; background: var(--surface-2); border: 1px solid var(--line-2); font-size: 13px; word-break: break-all; }
.sect h3 { margin-bottom: 12px; }
details.sect > summary { cursor: pointer; font-weight: 600; padding: 6px 0; list-style-position: inside; }
details.sect[open] > summary { margin-bottom: 10px; }
.copy-line { display: flex; gap: 8px; align-items: flex-start; }
.copy-line code { flex: 1; min-width: 0; word-break: break-all; padding: 8px 10px; border-radius: 10px; background: var(--surface-2); border: 1px solid var(--line-2); }

.tabs { display: flex; gap: 4px; border-bottom: 1px solid var(--line); margin-bottom: 16px; }
.tabs button { font: inherit; font-weight: 600; color: var(--ink-2); background: none; border: 0; padding: 9px 14px; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer; }
.tabs button:hover { color: var(--ink); }
.tabs button[aria-selected="true"] { color: var(--accent); border-bottom-color: var(--cyan-2); }
/* trang Cài đặt: thẻ dạng liên kết, nội dung thẻ là trang con với tiêu đề nhỏ hơn */
.settings-tabs { margin-bottom: 20px; flex-wrap: wrap; }
.settings-tabs a { font-weight: 600; color: var(--ink-2); text-decoration: none; padding: 9px 14px; border-bottom: 2px solid transparent; margin-bottom: -1px; }
.settings-tabs a:hover { color: var(--ink); }
.settings-tabs a[aria-current="page"] { color: var(--accent); border-bottom-color: var(--cyan-2); }
.tab-main > .page-head { margin-bottom: 16px; }
.tab-main > .page-head h1 { font-size: 1.2rem; }
pre.cmd { margin: 0; padding: 14px 16px; border-radius: 12px; background: #0B1A30; color: #DCE6F2; font: 12.5px/1.65 var(--mono); white-space: pre-wrap; word-break: break-all; border: 1px solid rgba(255, 255, 255, .06); }
.secret-note { display: flex; gap: 8px; align-items: center; color: var(--warning); font-weight: 600; font-size: 13px; margin: 10px 0; }

.progress { height: 6px; border-radius: 3px; background: var(--line-2); overflow: hidden; }
.progress > i { display: block; height: 100%; background: var(--accent); width: var(--p, 0%); transition: width .3s; }

.mt { margin-top: 16px; }
.score { display: inline-grid; grid-template-columns: 34px 90px; align-items: center; gap: 8px; vertical-align: middle; }
.score-n { font-variant-numeric: tabular-nums; font-weight: 700; text-align: right; }
.score-n.critical { color: var(--critical); } .score-n.high { color: var(--warning); } .score-n.medium { color: var(--info); } .score-n.low { color: var(--ok); }
.score .bar { grid-column: auto; }
.score .bar > span.critical { background: var(--critical); } .score .bar > span.high { background: var(--warning); } .score .bar > span.medium { background: var(--info); } .score .bar > span.low { background: var(--ok); }
.risk-head { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; margin-bottom: 10px; }
.risk-factors { list-style: none; margin: 0; padding: 0; display: grid; gap: 8px; }
.risk-factors li { display: flex; gap: 10px; align-items: flex-start; }
.risk-factors .pts { flex: none; min-width: 38px; text-align: right; font-weight: 700; font-variant-numeric: tabular-nums; color: var(--ink-3); }
.policy-env { margin-bottom: 16px; }
tr.row-link { cursor: pointer; }
.plain-list { list-style: none; margin: 0; padding: 0; display: grid; gap: 10px; }
.plain-list li { display: flex; align-items: center; gap: 8px; font-weight: 500; }
.plain-list li a { font-weight: 400; }
main > .alert-box { margin-bottom: 16px; }
.menu-label { padding: 8px 12px 0; font-size: 12px; color: var(--ink-3); }

/* ---------- toasts ---------- */
.toasts { position: fixed; right: 20px; bottom: 20px; z-index: 200; display: grid; gap: 8px; width: min(420px, calc(100vw - 32px)); }
.toast {
  display: flex; gap: 10px; align-items: flex-start; padding: 13px 14px 13px 16px;
  border-radius: 14px; background: var(--navy); color: #fff; box-shadow: var(--shadow-pop);
  border-left: 3px solid var(--cyan);
  animation: pop .18s ease-out;
}
.toast .grow { flex: 1; }
.toast.err { background: var(--expired); border-left-color: rgba(255, 255, 255, .5); }
.toast button { color: inherit; background: none; border: 0; cursor: pointer; padding: 0 2px; opacity: .8; font: inherit; }

/* ---------- cấu hình agent ---------- */
#cfg-body { display: grid; gap: 16px; }
#cfg-form .sect { display: grid; gap: 14px; margin-top: 8px; padding-top: 16px; border-top: 1px solid var(--line-2); }
#cfg-form .sect h3 { margin: 0; }
#cfg-form .panel { box-shadow: none; background: var(--surface-2); }
#cfg-form .panel + .panel { margin-top: 0; }
#cfg-form .form-row { align-items: start; }
#cfg-form .field { align-content: start; }
details.panel > summary { cursor: pointer; list-style-position: inside; }
.grid2 > .panel + .panel { margin-top: 0; }
.mt-xs { margin-top: 4px; }
a.tag { text-decoration: none; }
.t-ok { color: var(--ok); }
.t-err { color: var(--expired); }

/* ---------- responsive ---------- */
.c-opt { }
@media (max-width: 1100px) {
  .grid2 { grid-template-columns: minmax(0, 1fr); }
  .login { grid-template-columns: minmax(0, 1fr); }
  .login-hero { display: none; }
  .login-logo-sm { display: block; }
  :root[data-theme="dark"] .login-logo-sm.on-dark { display: block !important; }
  .login h1 { font-size: 30px; }
}
@media (max-width: 900px) {
  .shell { grid-template-columns: minmax(0, 1fr); background: none; }
  .side {
    position: fixed; left: 0; top: 0; bottom: 0; z-index: 60; width: min(var(--side-w), 86vw);
    transform: translateX(-102%); transition: transform .2s ease-out; box-shadow: var(--shadow-pop);
  }
  .side.open { transform: none; }
  .scrim { position: fixed; inset: 0; z-index: 55; background: rgba(8, 20, 38, .5); }
  .menu-btn { display: inline-flex; }
  .top { padding: 10px 16px; }
  main { padding: 20px 16px 56px; }
  .c-opt { display: none; }
  .strip { grid-template-columns: repeat(2, minmax(0, 1fr)); }
  .runway-tick.minor { display: none; }
  .strip a:nth-child(2) { border-right: 0; }
  .strip a:nth-child(-n+2) { border-bottom: 1px solid var(--line-2); }
}
@media (max-width: 560px) {
  h1 { font-size: 21px; }
  .kv { grid-template-columns: minmax(0, 1fr); gap: 2px 0; }
  .kv dd { margin-bottom: 8px; }
  .who-btn .who-name { display: none; }
  .hero { padding: 20px 16px 16px; }
  .runway-legend { padding: 0 16px 16px; }
  .t th, .t td { padding: 10px 12px; }
  .search { max-width: none; }
  .top .search { display: none; }
  .t td.act { white-space: normal; }
  .t td.act .btn { display: flex; margin: 0 0 4px auto; }
  .t td.act .btn + .btn { margin-left: auto; }
  .login-side { padding: 80px 20px 32px; place-items: start center; }
}
@media (prefers-reduced-motion: reduce) {
  *, *::before, *::after { animation: none !important; transition: none !important; }
}
@media print {
  .side, .top, .toolbar .btn, .actions, .pager { display: none !important; }
  .shell { display: block; }
  .panel { border: 0; box-shadow: none; }
}

/* ---- xác thực hai bước ---- */
.input.otp { font-family: var(--mono); font-size: 22px; letter-spacing: .35em; text-align: center; padding-left: .35em; }
.totp-switch { display: block; margin: 14px auto 0; }
.menu .tag { margin-left: auto; font-size: 12px; }
.menu .grow { flex: 1; }
.totp-setup { display: flex; gap: 28px; align-items: flex-start; }
.qr-box { flex: none; padding: 10px; background: #fff; border: 1px solid var(--line); border-radius: var(--r-m); line-height: 0; }
.qr-box img { display: block; image-rendering: pixelated; }
.totp-steps { margin: 0 0 14px; padding-left: 20px; display: grid; gap: 8px; color: var(--ink-2); }
.totp-manual { margin: 0 0 16px; }
.totp-manual summary { cursor: pointer; color: var(--accent); font-weight: 500; margin-bottom: 10px; }
.totp-manual .kv { grid-template-columns: 90px minmax(0, 1fr); gap: 8px 12px; }
.totp-manual code { font-size: 14px; letter-spacing: .04em; }
.totp-status { display: flex; align-items: center; gap: 12px; margin-bottom: 14px; }
.totp-status .tag { display: inline-flex; align-items: center; gap: 6px; }
.rec-codes { list-style: none; margin: 0 0 6px; padding: 16px; display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px 24px;
  background: var(--surface-2); border: 1px dashed var(--line); border-radius: var(--r-m); }
.rec-codes code { font-size: 15px; letter-spacing: .05em; }
@media (max-width: 640px) {
  .totp-setup { flex-direction: column; align-items: center; }
  .rec-codes { grid-template-columns: minmax(0, 1fr); }
}

/* ---- phê duyệt cấp chứng chỉ ---- */
.nav a .badge.warn { background: #D97706; }
.sect-title { font-size: 16px; font-weight: 600; margin: 28px 0 12px; }
.policy-row { display: flex; align-items: center; gap: 16px; }
.policy-row p { margin: 4px 0 0; }
.ico-circle { flex: none; width: 44px; height: 44px; border-radius: 50%; display: grid; place-items: center; background: var(--surface-2); color: var(--ink-3); }
.ico-circle.on { background: var(--ok-soft); color: var(--ok); }
.ap-list { display: grid; gap: 16px; }
.ap-card .panel-head h2 { margin: 0; }
.ap-card .panel-head p { margin: 2px 0 0; }
.ap-card details pre { max-height: 220px; overflow: auto; margin-top: 8px; }
.ap-card.hl { box-shadow: 0 0 0 2px var(--focus), var(--shadow-md); }
tr.hl td { background: var(--info-soft); }
@media (max-width: 640px) { .policy-row { flex-wrap: wrap; } }

/* ---- tổng quan (bản go-live) ---- */
.page-head p { color: var(--ink-3); }
.kpis { display: grid; grid-template-columns: repeat(auto-fit, minmax(190px, 1fr)); gap: 14px; margin-bottom: 18px; }
.kpi {
  position: relative; display: block; padding: 18px 18px 16px;
  background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-m); box-shadow: var(--shadow-sm);
  color: var(--ink); text-decoration: none; overflow: hidden; transition: border-color .15s, box-shadow .15s, transform .15s;
}
.kpi::after { content: ""; position: absolute; left: 0; right: 0; top: 0; height: 3px; background: var(--line); }
.kpi:hover { border-color: var(--focus); box-shadow: var(--shadow-md); transform: translateY(-1px); }
.kpi-ico { position: absolute; top: 16px; right: 16px; width: 34px; height: 34px; border-radius: 10px; display: grid; place-items: center; background: var(--brand-soft); color: var(--accent); }
.kpi-body { padding-right: 40px; }
.kpi-body { display: grid; gap: 2px; min-width: 0; }
.kpi-v { font-size: 28px; line-height: 1.1; font-weight: 700; letter-spacing: -.02em; font-variant-numeric: tabular-nums; }
.kpi-l { font-size: 14px; font-weight: 600; color: var(--ink-2); }
.kpi-s { font-size: 12.5px; color: var(--ink-3); }
.kpi.expired::after { background: var(--expired); } .kpi.expired .kpi-v { color: var(--expired); } .kpi.expired .kpi-ico { background: var(--expired-soft); color: var(--expired); }
.kpi.critical::after { background: var(--critical); } .kpi.critical .kpi-v { color: var(--critical); } .kpi.critical .kpi-ico { background: var(--critical-soft); color: var(--critical); }
.kpi.warning::after { background: #D99A1E; } .kpi.warning .kpi-v { color: var(--warning); } .kpi.warning .kpi-ico { background: var(--warning-soft); color: var(--warning); }
.kpi.good::after { background: var(--ok); } .kpi.good .kpi-ico { background: var(--ok-soft); color: var(--ok); }
.kpi.calm .kpi-v { color: var(--ink-3); }
.banner { display: flex; align-items: center; gap: 14px; padding: 14px 18px; margin-bottom: 18px; border-radius: var(--r-m); text-decoration: none; color: var(--ink); border: 1px solid; }
.banner > span.grow { display: grid; gap: 2px; }
.banner > span.grow span { font-size: 13.5px; color: var(--ink-2); }
.banner.warn { background: var(--warning-soft); border-color: color-mix(in srgb, var(--warning) 30%, transparent); }
.banner.warn > svg { color: var(--warning); }
.banner.crit { background: var(--critical-soft); border-color: color-mix(in srgb, var(--critical) 30%, transparent); }
.banner.crit > svg { color: var(--critical); }
.banner .btn { pointer-events: none; }
.eyebrow { font-size: 12px; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; color: var(--accent); margin-bottom: 6px; }
.grid-ov { display: grid; gap: 18px; grid-template-columns: minmax(0, 1.25fr) minmax(0, 1fr); align-items: start; margin-top: 18px; }
.stack { display: grid; gap: 18px; }
.stack > .panel, .grid-ov > .panel { margin: 0; }
.panel-head .count { display: inline-block; min-width: 24px; padding: 0 8px; margin-left: 6px; border-radius: 999px; background: var(--surface-2); border: 1px solid var(--line-2); font-size: 12.5px; line-height: 22px; text-align: center; color: var(--ink-2); vertical-align: 2px; }
.panel-foot { padding: 10px 20px 14px; border-top: 1px solid var(--line-2); }
.pill { flex: none; display: inline-block; padding: 2px 10px; border-radius: 999px; font-size: 12.5px; font-weight: 600; line-height: 20px; white-space: nowrap; background: var(--surface-2); color: var(--ink-2); text-decoration: none; }
.pill.ok { background: var(--ok-soft); color: var(--ok); }
.pill.warning { background: var(--warning-soft); color: var(--warning); }
.pill.critical { background: var(--critical-soft); color: var(--critical); }
.pill.expired { background: var(--expired-soft); color: var(--expired); }
.pill.info { background: var(--info-soft); color: var(--info); }
.issues li { align-items: center; }
.mlist { list-style: none; margin: 0; padding: 4px 0; }
.mlist li { display: flex; align-items: center; gap: 12px; padding: 11px 20px; border-bottom: 1px solid var(--line-2); }
.mlist li:last-child { border-bottom: 0; }
.mlist .grow { flex: 1; display: grid; min-width: 0; }
.mlist b { font-weight: 600; }
.mlist span { font-size: 13px; color: var(--ink-3); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.bars { list-style: none; margin: 0; padding: 12px 20px 16px; display: grid; gap: 10px; }
.bars a { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 4px 12px; text-decoration: none; color: var(--ink); }
.bars a:hover .bar-l { color: var(--accent); }
.bar-l { font-size: 14px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.bar-n { font-size: 13px; font-weight: 600; color: var(--ink-2); font-variant-numeric: tabular-nums; }
.bar { grid-column: 1 / -1; height: 6px; border-radius: 999px; background: var(--surface-2); overflow: hidden; }
.bar > span { display: block; height: 100%; border-radius: inherit; background: var(--accent); }
.bar > span.self { background: #D99A1E; }
/* agent: tên không ngắt dòng, thao tác phụ trong menu ⋯ */
.t .nowrap-name b { white-space: nowrap; }
.kebab { position: relative; display: inline-block; }
.kebab > summary { list-style: none; cursor: pointer; }
.kebab > summary::-webkit-details-marker { display: none; }
.kebab .menu { position: absolute; right: 0; top: calc(100% + 6px); min-width: 190px; z-index: 30; }
@media (max-width: 1280px) { .kpis { grid-template-columns: repeat(3, minmax(0, 1fr)); } }
@media (max-width: 1100px) { .grid-ov { grid-template-columns: minmax(0, 1fr); } }
@media (max-width: 640px) {
  .kpis { grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; }
  .kpi { padding: 14px; gap: 10px; }
  .kpi-ico { display: none; }
  .kpi-body { padding-right: 0; }
  .kpi-v { font-size: 24px; }
  .kpis .kpi:first-child { grid-column: 1 / -1; }
}
.menu .danger-item { color: var(--expired); }
.t td.act { white-space: nowrap; }

/* ---- phân trang ---- */
.pager-info { display: flex; align-items: center; gap: 16px; flex-wrap: wrap; }
.pager-size { display: inline-flex; align-items: center; gap: 8px; }
.input.sm { height: 32px; min-height: 0; padding: 0 28px 0 10px; font-size: 13px; width: auto; border-radius: 8px; }
.pages { display: flex; align-items: center; gap: 4px; }
.pages .btn { min-width: 34px; justify-content: center; font-variant-numeric: tabular-nums; }
.pg-gap { padding: 0 4px; color: var(--ink-3); }

/* ---- khóa SSH ---- */
.mb-xs { margin-bottom: 6px; }
.kpis.kpis-4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
@media (max-width: 1100px) { .kpis.kpis-4 { grid-template-columns: repeat(2, minmax(0, 1fr)); } }

/* ---- gói dịch vụ ---- */
.usage { list-style: none; margin: 0; padding: 0; display: grid; gap: 16px; }
.usage-h { display: flex; justify-content: space-between; gap: 12px; margin-bottom: 6px; font-size: 14px; }
.usage-h b { font-variant-numeric: tabular-nums; }
.usage .bar { display: block; height: 8px; }
.usage .bar > span.near { background: #D99A1E; }
.usage .bar > span.full { background: var(--expired); }
.feat-list { list-style: none; margin: 0; padding: 4px 0; }
.feat-list li { display: flex; align-items: center; gap: 12px; padding: 11px 20px; border-bottom: 1px solid var(--line-2); }
.feat-list li:last-child { border-bottom: 0; }
.feat-list .grow { display: grid; gap: 2px; min-width: 0; }
.feat-list .grow span { font-size: 13px; color: var(--ink-3); }
.feat-list li:not(.on) b { color: var(--ink-3); }
.feat-ico { flex: none; width: 26px; height: 26px; border-radius: 50%; display: grid; place-items: center; background: var(--surface-2); color: var(--ink-3); }
.feat-list li.on .feat-ico { background: var(--ok-soft); color: var(--ok); }

/* ---- thanh toán ---- */
.price-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); gap: 16px; }
.price { display: flex; flex-direction: column; }
.price .panel-body { flex: 1; display: flex; flex-direction: column; gap: 8px; }
.price .eyebrow { display: flex; align-items: center; gap: 8px; min-height: 26px; margin: 0; }
.price .eyebrow .pill { font-size: 11.5px; letter-spacing: .06em; line-height: 18px; }
.price .btn { margin-top: auto; }
.plan-list { margin: 0; padding-left: 18px; font-size: 13px; line-height: 1.45; color: var(--ink-2); display: grid; gap: 3px; }
.plan-lead { margin: 0; font-size: 13.5px; color: var(--ink-2); }
.price .panel-body > .small { margin: 0; }
.sect-head { margin: 28px 0 12px; display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; }
.sect-head .sect-title { margin-bottom: 0; }
.seg { display: inline-flex; padding: 3px; border: 1px solid var(--line); border-radius: 10px; background: var(--bg-2, var(--bg)); }
.seg-b { border: 0; background: transparent; padding: 5px 12px; border-radius: 8px; font: inherit; font-size: 13px; font-weight: 600; color: var(--ink-3); cursor: pointer; display: inline-flex; align-items: center; gap: 6px; }
.seg-b.on { background: var(--panel, #fff); color: var(--ink); box-shadow: var(--shadow-sm, 0 1px 2px rgba(0,0,0,.08)); }
.plan-buy { margin-top: auto; display: grid; gap: 6px; }
.plan-buy .btn { margin-top: 0; }
.price.best { border-color: var(--focus); box-shadow: 0 0 0 1px var(--focus), var(--shadow-md); }
.price-v { font-size: 24px; font-weight: 700; letter-spacing: -.02em; font-variant-numeric: tabular-nums; margin: 0; }
.price-v span { font-size: 13px; font-weight: 500; color: var(--ink-3); margin-left: 4px; }
.pay { display: flex; gap: 24px; align-items: flex-start; }
.pay-kv { grid-template-columns: 120px minmax(0, 1fr); gap: 10px 14px; margin-bottom: 14px; }
.pay-kv dd { display: flex; align-items: center; gap: 6px; flex-wrap: wrap; }
.pay-code { font-size: 17px; font-weight: 700; letter-spacing: .06em; color: var(--accent); }
.pay-status { display: flex; align-items: center; gap: 10px; margin-top: 14px; font-weight: 500; color: var(--ink-2); }
.spinner { width: 16px; height: 16px; border-radius: 50%; border: 2px solid var(--line); border-top-color: var(--focus); animation: spin .8s linear infinite; }
@keyframes spin { to { transform: rotate(360deg); } }
.pay-done { text-align: center; padding: 12px 0; }
.pay-done > svg { width: 44px; height: 44px; padding: 10px; border-radius: 50%; background: var(--ok-soft); color: var(--ok); }
.pay-done h3 { margin: 10px 0 6px; font-size: 20px; }
@media (max-width: 640px) { .pay { flex-direction: column; align-items: center; } .pay-kv { grid-template-columns: minmax(0, 1fr); } }
/* ---- hỗ trợ ---- */
.contacts { display: flex; flex-wrap: wrap; gap: 18px 40px; }
.contacts > div { display: grid; gap: 2px; }
.contacts .eyebrow { margin: 0; }
.thread { display: grid; gap: 10px; max-height: 46vh; overflow: auto; padding: 2px; }
.msg { padding: 12px 14px; border-radius: 12px; background: var(--surface-2); border: 1px solid var(--line-2); margin-right: 48px; }
.msg.metta { background: var(--brand-soft); border-color: transparent; margin: 0 0 0 48px; }
.msg-h { display: flex; justify-content: space-between; gap: 12px; font-size: 13px; margin-bottom: 4px; }
.msg-h span { color: var(--ink-3); }
.msg-b { white-space: pre-wrap; overflow-wrap: anywhere; }
.stats { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 16px; }
.stats > div { display: grid; gap: 2px; }
.stats b { font-size: 22px; font-variant-numeric: tabular-nums; }
.stats span { font-size: 13px; color: var(--ink-3); }

/* ---- chọn gói khi tạo khách hàng ---- */
.plan-pick { border: 0; padding: 0; margin: 0; display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; }
.plan-pick legend { font-size: 14px; font-weight: 600; margin-bottom: 8px; padding: 0; }
.plan-pick .hint { grid-column: 1 / -1; }
.plan-opt { display: flex; gap: 10px; align-items: flex-start; padding: 12px 14px; border: 1px solid var(--line); border-radius: 12px; cursor: pointer; background: var(--surface); }
.plan-opt:has(input:checked) { border-color: var(--focus); box-shadow: 0 0 0 1px var(--focus); background: var(--brand-soft); }
.plan-opt input { margin-top: 3px; accent-color: var(--accent); }
.plan-opt > span { display: grid; gap: 2px; }
.plan-opt > span span { font-size: 12.5px; color: var(--ink-3); }
.plan-line { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; padding: 10px 12px; border-radius: 10px; background: var(--surface-2); border: 1px solid var(--line-2); }
.plan-line > span:first-child { font-weight: 600; }
.plan-line .link-btn { margin-left: auto; }
@media (max-width: 640px) { .plan-pick { grid-template-columns: minmax(0, 1fr); } }
.price-grid > .panel { margin: 0; } /* thẻ giá cùng cao, cùng mép trên */
.hint.block { display: block; margin-top: 2px; }

/* cấp chứng chỉ mới: chọn cách */
.choice-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); gap: 12px; }
.choice { display: flex; flex-direction: column; align-items: flex-start; gap: 8px; padding: 16px; text-align: left; font: inherit; color: var(--ink);
  background: var(--surface); border: 1px solid var(--line-2); border-radius: 12px; cursor: pointer; }
.choice b { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
.choice > span { color: var(--ink-2); font-size: 14px; line-height: 1.5; }
.choice:hover:not([disabled]), .choice:focus-visible { border-color: var(--brand); background: var(--brand-soft); outline: none; }
.choice[disabled] { opacity: .6; cursor: not-allowed; }
.win-steps { margin: 12px 0; padding-left: 20px; display: grid; gap: 4px; }

/* tiếng Nhật / Hàn: font hệ thống có chữ CJK (Be Vietnam Pro không có) */
:root:lang(ja) { --sans: "Be Vietnam Pro", "Hiragino Sans", "Hiragino Kaku Gothic ProN", "Yu Gothic UI", "Yu Gothic", Meiryo, "Noto Sans JP", "Noto Sans CJK JP", system-ui, sans-serif; }
:root:lang(ko) { --sans: "Be Vietnam Pro", "Apple SD Gothic Neo", "Malgun Gothic", "Noto Sans KR", "Noto Sans CJK KR", system-ui, sans-serif; }

/* chẩn đoán agent */
.form-actions.start { justify-content: flex-start; align-items: center; flex-wrap: wrap; }
.diag-log { max-height: 360px; overflow: auto; }

/* đăng ký: mã quốc gia trước số điện thoại; trường bẫy bot ngoài màn hình */
.tel-wrap { display: flex; align-items: stretch; width: 100%; min-width: 0; }
.tel-wrap select.tel-dial { flex: 0 0 92px; width: 92px; min-width: 0; padding-right: 26px; border-top-right-radius: 0; border-bottom-right-radius: 0; border-right: 0; background-color: var(--surface-2); font-variant-numeric: tabular-nums; }
.tel-wrap input.input { flex: 1 1 0; width: 0; min-width: 0; border-top-left-radius: 0; border-bottom-left-radius: 0; }
.hp { position: absolute !important; left: -10000px; width: 1px; height: 1px; overflow: hidden; }
.legal-links { margin: -6px 0 0 28px; }


/* ---- card lists (risk, services, compliance) ---- */
.cards { display: grid; gap: 10px; }
.cards.in-panel { padding: 12px; }
.rcard { display: grid; grid-template-columns: 56px minmax(0, 1.2fr) minmax(0, 1.5fr) minmax(150px, 220px); gap: 18px; min-width: 0; align-items: center; padding: 14px 18px; background: var(--surface); border: 1px solid var(--line); border-radius: 16px; transition: border-color .15s, box-shadow .15s, transform .15s; }
.rcard[data-act] { cursor: pointer; }
.rcard[data-act]:hover, .rcard[data-act]:focus-visible { border-color: var(--focus); box-shadow: var(--shadow-md); transform: translateY(-1px); outline: none; }
.rc-title { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; font-size: 15px; }
.rc-title b { overflow-wrap: anywhere; }
.rc-sub { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 6px; align-items: center; }
.rc-why b { display: flex; align-items: flex-start; gap: 6px; font-size: 14px; }
.rc-why b svg { flex: none; margin-top: 3px; color: var(--ink-3); }
.rcard .lvl-critical ~ .rc-why b svg, .rcard.critical .rc-why b svg { color: var(--critical); }
.rc-why p { margin: 4px 0 0 22px; font-size: 13.5px; color: var(--ink-3); line-height: 1.45; }
.rc-why.certs .chips { margin-top: 4px; }
.rc-meta { display: flex; flex-direction: column; align-items: flex-end; gap: 6px; text-align: right; }
.mchip { display: inline-flex; align-items: center; gap: 5px; padding: 2px 9px; border-radius: 999px; background: var(--surface-2); border: 1px solid var(--line-2); font-size: 12.5px; color: var(--ink-2); max-width: 100%; }
.mchip > span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.mchip svg { flex: none; width: 13px; height: 13px; color: var(--ink-3); }
.mchip.accent { background: var(--brand-soft); border-color: transparent; color: var(--accent); } .mchip.accent svg { color: var(--accent); }
.mchip.warn { background: var(--warning-soft); border-color: transparent; color: var(--warning); } .mchip.warn svg { color: var(--warning); }
.mchip.err { background: var(--critical-soft); border-color: transparent; color: var(--critical); } .mchip.err svg { color: var(--critical); }
.ring { position: relative; display: inline-grid; place-items: center; flex: none; }
.ring svg { display: block; transform: rotate(-90deg); }
.ring b { position: absolute; font-size: 15px; font-weight: 700; font-variant-numeric: tabular-nums; }
.ring .ring-bg { fill: none; stroke: var(--surface-2); stroke-width: 6; }
.ring .ring-fg { fill: none; stroke-width: 6; stroke-linecap: round; transition: stroke-dashoffset .4s; }
.ring.lvl-critical .ring-fg { stroke: var(--critical); } .ring.lvl-critical b { color: var(--critical); }
.ring.lvl-high .ring-fg { stroke: var(--warning); } .ring.lvl-high b { color: var(--warning); }
.ring.lvl-medium .ring-fg { stroke: var(--info); } .ring.lvl-medium b { color: var(--info); }
.ring.lvl-low .ring-fg { stroke: var(--ok); } .ring.lvl-low b { color: var(--ok); }
.ring.lvl-none .ring-fg { stroke: var(--line); } .ring.lvl-none b { color: var(--ink-3); }
.svc-ico { width: 44px; height: 44px; border-radius: 12px; display: grid; place-items: center; background: var(--brand-soft); color: var(--accent); }
.svc-ico.application { background: var(--brand-soft); } .svc-ico.store, .svc-ico.managed { background: var(--ok-soft); color: var(--ok); } .svc-ico.file { background: var(--surface-2); color: var(--ink-2); }
.svc-ico.warn { background: var(--warning-soft); color: var(--warning); } .svc-ico.crit { background: var(--critical-soft); color: var(--critical); }
.rcard.svc { grid-template-columns: 44px minmax(0, 1.3fr) minmax(0, 1.2fr) minmax(170px, 230px); }
.rcard.vio { grid-template-columns: 44px minmax(0, 1.1fr) minmax(0, 1.6fr) auto; }
.cov { display: grid; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); gap: 12px; margin-bottom: 18px; }
.cov-card { display: flex; align-items: center; gap: 14px; padding: 14px 16px; background: var(--surface); border: 1px solid var(--line); border-radius: 16px; }
.cov-card b { font-size: 15px; }
@media (max-width: 960px) {
  .rcard, .rcard.svc, .rcard.vio { grid-template-columns: 48px minmax(0, 1fr); }
  .rc-why { grid-column: 2; } .rc-meta { grid-column: 2; flex-direction: row; flex-wrap: wrap; align-items: center; justify-content: flex-start; text-align: left; }
}


/* ================= minimal enterprise UI layer =================
   Thanh điều hướng tối cố định, nội dung sáng, thẻ viền mảnh bo 10–14px, bóng rất nhẹ,
   không gradient, số liệu tabular, bảng dày nhưng thoáng, breadcrumb trên topbar. */
body { font-size: 14px; font-variant-numeric: tabular-nums; }
h1 { font-size: 22px; font-weight: 600; letter-spacing: -.015em; }
h2 { font-size: 15px; font-weight: 600; }
.page-head { margin-bottom: 18px; align-items: center; }
.page-head p { font-size: 13.5px; margin-top: 4px; }
.top { min-height: 56px; padding: 0 20px; gap: 12px; border-bottom: 1px solid var(--line); background: var(--surface); }
.crumb { display: flex; align-items: center; gap: 6px; font-size: 13.5px; color: var(--ink-3); white-space: nowrap; }
.crumb b { color: var(--ink); font-weight: 600; }
.crumb svg { width: 14px; height: 14px; opacity: .6; transform: rotate(-90deg); }
#top-search .input { height: 34px; font-size: 13.5px; }
.panel { border-radius: var(--r-m); box-shadow: none; }
.panel-head { padding: 12px 16px; }
.panel-body { padding: 14px 16px; }
.kpis { gap: 12px; margin-bottom: 16px; }
.kpi { padding: 14px 16px 12px; box-shadow: none; border-radius: var(--r-m); }
.kpi::after { height: 2px; }
.kpi:hover { transform: none; box-shadow: var(--shadow-sm); }
.kpi-ico { width: 30px; height: 30px; border-radius: 8px; top: 12px; right: 12px; }
.kpi-v { font-size: 24px; }
.kpi-l { font-size: 13px; }
.kpi-s { font-size: 12px; }
.t th, .t td { padding: 10px 14px; font-size: 13.5px; }
.t th { font-size: 11.5px; letter-spacing: .06em; }
.t .sub { font-size: 12.5px; }
.toolbar { padding: 10px 14px; gap: 8px; }
.btn { min-height: 36px; padding: 6px 14px; font-size: 13.5px; border-radius: 8px; box-shadow: none; }
.btn.sm { min-height: 30px; padding: 4px 10px; font-size: 13px; border-radius: 6px; }
.btn.icon { min-width: 36px; padding: 6px; }
.input, .seg { border-radius: 8px; }
.pill { border-radius: 6px; font-size: 12px; font-weight: 600; line-height: 18px; padding: 2px 8px; }
.tag { border-radius: 6px; }
.chip, .mchip { border-radius: 6px; }
.rcard, .cov-card, .menu, .modal, .drawer-body .panel { border-radius: var(--r-m); }
.rcard { padding: 12px 16px; }
.rcard[data-act]:hover { transform: none; box-shadow: var(--shadow-sm); }
.mono, code, kbd, pre, .ring b, .score-n, .num { font-family: var(--mono); }
.mono, code { font-size: 12.5px; }
.ring b { font-size: 14px; }
.nav a { padding: 7px 12px; font-size: 13.5px; border-radius: 8px; }
.nav .group { font-size: 10.5px; letter-spacing: .14em; }
.side-foot { font-size: 12px; }
.who-btn { min-height: 34px; }
.lang-btn { height: 32px; font-size: 12.5px; }
.empty { padding: 40px 20px; }
.empty .ico { width: 44px; height: 44px; border-radius: 12px; }
.alert-box { border-radius: 10px; }
.login-pitch h2 { font-size: clamp(28px, 2.6vw, 38px); }
.login .lead { font-size: 15px; }


/* ---- overview: priorities, automation, distribution, activity ---- */
.grid-ov.wide { grid-template-columns: minmax(0, 1.6fr) minmax(0, 1fr); margin-top: 0; margin-bottom: 18px; }
.panel-head h2 .sub { font-size: 12.5px; font-weight: 400; color: var(--ink-3); margin-top: 2px; }
.kpi-bar { display: flex; align-items: center; gap: 8px; margin-top: 8px; }
.kpi-bar .bar { flex: 1; height: 5px; }
.kpi-pct { font-size: 12px; color: var(--ink-3); font-weight: 600; }
.kpi.good .kpi-bar .bar > span { background: var(--ok); } .kpi.critical .kpi-bar .bar > span { background: var(--critical); }
.auto-stat { display: grid; gap: 16px; }
.auto-ring { display: flex; align-items: center; gap: 16px; }
.auto-ring .ring b { font-size: 20px; }
.auto-ring .big { font-size: 24px; font-weight: 700; letter-spacing: -.02em; }
.auto-facts { display: grid; grid-template-columns: 1fr 1fr; gap: 10px; }
.auto-facts .fact { display: grid; gap: 2px; padding: 10px 12px; border: 1px solid var(--line-2); border-radius: 10px; background: var(--surface-2); }
.auto-facts .fact b { font-size: 15px; }
.auto-facts .fact .st { font-size: 12.5px; }
.hero-head { display: flex; gap: 16px; align-items: flex-start; flex-wrap: wrap; }
.rw-controls { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
.rw-controls .input { width: auto; height: 34px; font-size: 13px; }
.input.sm { height: 32px; font-size: 13px; padding: 0 10px; width: auto; }
.bars.dist .bar-n .muted { font-weight: 400; }
.bars .bar > span.lv-critical { background: var(--critical); } .bars .bar > span.lv-high { background: var(--warning); } .bars .bar > span.lv-medium { background: var(--info); } .bars .bar > span.lv-low { background: var(--ok); }
.t.prio td, .t.recent td { padding: 9px 14px; }
.t.recent .clamp2 { max-width: 320px; }
.side-org { display: flex; align-items: center; gap: 10px; padding: 10px 8px; margin: 0 -4px 6px; border-radius: 10px; background: var(--side-hover); color: #fff; }
.side-org .avatar { width: 32px; height: 32px; border-radius: 9px; display: grid; place-items: center; background: var(--cyan); color: var(--navy); font-weight: 700; font-size: 12px; flex: none; }
.side-org .grow { min-width: 0; display: grid; }
.side-org b { font-size: 13px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.side-org span { font-size: 11.5px; color: var(--side-dim); }
.side-org .btn { color: var(--side-dim); min-width: 28px; min-height: 28px; padding: 2px; }
.side-org .btn svg { transform: rotate(-90deg); }
.side-foot .ver { display: block; padding-top: 6px; }
@media (max-width: 1100px) { .grid-ov.wide { grid-template-columns: 1fr; } .auto-facts { grid-template-columns: 1fr 1fr; } }
.bars.dist li { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 4px 12px; }
.bars.dist .bar { grid-column: 1 / -1; }
.runway-legend .n { color: var(--ink-3); }
.list-out { margin-top: 12px; }
.list-out .empty { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-m); }
.rc-main, .rc-why { min-width: 0; }
.rc-meta { min-width: 0; }
.rc-meta .mchip, .rc-meta .pill { max-width: 100%; }

/* ---- KPI cards: label on top, value large, note below, icon badge top-right ---- */
.kpi { padding: 18px 20px 16px; border-radius: 16px; }
.kpi::after { display: none; }
.kpi-body { display: grid; gap: 0; padding-right: 48px; }
.kpi-l { order: 1; font-size: 14.5px; font-weight: 500; color: var(--ink-2); line-height: 1.35; min-height: 20px; }
.kpi-v { order: 2; font-size: 30px; font-weight: 700; letter-spacing: -.025em; line-height: 1.15; margin-top: 10px; color: var(--ink); }
.kpi-s { order: 3; font-size: 13.5px; color: var(--ink-3); margin-top: 6px; }
.kpi-bar { order: 4; }
.kpi-ico { top: 16px; right: 16px; width: 38px; height: 38px; border-radius: 11px; }
.kpi-ico svg.i { width: 18px; height: 18px; }
.kpi:hover { border-color: var(--line); box-shadow: var(--shadow-md); }
.kpi.expired .kpi-v, .kpi.critical .kpi-v, .kpi.warning .kpi-v { color: var(--ink); }
.kpi.expired .kpi-l::before, .kpi.critical .kpi-l::before, .kpi.warning .kpi-l::before { content: ""; display: inline-block; width: 8px; height: 8px; border-radius: 50%; margin-right: 7px; vertical-align: middle; }
.kpi.expired .kpi-l::before { background: var(--expired); } .kpi.critical .kpi-l::before { background: var(--critical); } .kpi.warning .kpi-l::before { background: var(--warning); }
.kpi.calm .kpi-v { color: var(--ink); }
.cov-card, .auto-facts .fact { border-radius: 14px; }

/* compact sidebar brand; equal-height panels in two-column rows; flat sidebar */
.side { background-image: none; }
.side .brand { gap: 9px; padding: 2px 6px 14px; }
.side .brand > img { width: 30px; height: 30px; border-radius: 8px; box-shadow: 0 0 0 1px rgba(255, 255, 255, .12); }
.brand-text { gap: 2px; }
.brand-text img { height: 15px; }
.brand-text small { font-size: 9px; letter-spacing: .12em; }
.grid-ov, .grid-ov.wide, .grid2 { align-items: stretch; }
.grid-ov > .panel, .grid-ov.wide > .panel, .grid2 > .panel { display: flex; flex-direction: column; min-width: 0; }
.grid-ov > .panel > .table-wrap, .grid-ov > .panel > .panel-body, .grid-ov > .panel > .empty, .grid-ov > .panel > ul { flex: 1; }
.stack { align-content: start; }

/* narrower sidebar */
:root { --side-w: 228px; }
.side { padding: 14px 10px; gap: 2px; }
.nav a { padding: 6px 10px; font-size: 13px; gap: 9px; }
.nav a svg.i { width: 16px; height: 16px; }
.nav .group { margin: 10px 10px 4px; }
.side .brand { padding: 2px 4px 10px; }
.side-foot { padding: 10px 6px 0; }

/* endpoint table: error message wraps on two lines, host never squeezed */
.t.t-ep .w-host { min-width: 220px; }
.t.t-ep td:first-child { overflow-wrap: anywhere; }
.t.t-ep td.c-opt { white-space: nowrap; }
.err-note { display: inline-flex; align-items: flex-start; gap: 6px; color: var(--critical); font-size: 13px; line-height: 1.4; }
.err-note svg { flex: none; margin-top: 2px; }
.err-note > span { display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; overflow-wrap: anywhere; }
.pager-panel { margin-top: 10px; }
.pager-panel .pager { border-top: 0; }
.pager-size .input.sm { margin-left: 4px; }
.check a { color: var(--accent); font-weight: 600; text-decoration: underline; text-underline-offset: 2px; }