/*
 * admin.css — standalone styling for /admin (SPEC-AUTH-TENANT §5).
 * Vietnamese-first admin console; self-contained (not part of the designer bundle).
 * Light + dark via prefers-color-scheme.
 */
:root {
  --bg: #eef2f7;
  --card: #ffffff;
  --ink: #1e293b;
  --muted: #64748b;
  --border: #d8e0ea;
  --field-bg: #ffffff;
  --field-border: #cbd5e1;
  --primary: #2563eb;
  --primary-ink: #ffffff;
  --primary-hover: #1d4ed8;
  --danger: #dc2626;
  --danger-bg: #fef2f2;
  --ok: #047857;
  --ok-bg: #ecfdf5;
  --ok-border: #a7f3d0;
  --warn-bg: #fffbeb;
  --warn-ink: #92400e;
  --warn-border: #fde68a;
  --alert-bg: #fef2f2;
  --alert-ink: #b91c1c;
  --alert-border: #fecaca;
  --shadow: 0 8px 30px rgba(15, 23, 42, 0.10);
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0b1220; --card: #131c2e; --ink: #e8edf5; --muted: #94a3b8; --border: #24314a;
    --field-bg: #0f1729; --field-border: #334155; --primary: #3b82f6; --primary-hover: #2563eb;
    --danger: #f87171; --danger-bg: #2a1515; --ok: #34d399; --ok-bg: #0f2a20; --ok-border: #14532d;
    --warn-bg: #2a2410; --warn-ink: #fcd34d; --warn-border: #78591c;
    --alert-bg: #2a1515; --alert-ink: #fca5a5; --alert-border: #7f1d1d;
    --shadow: 0 8px 30px rgba(0, 0, 0, 0.4);
  }
}

* { box-sizing: border-box; }
/* `hidden` must win over the layout display of .field / .check (display: grid | flex), otherwise a
   hidden dialog field stays on screen — the station dialogs toggle fields with the attribute. */
[hidden] { display: none !important; }
body { margin: 0; background: var(--bg); color: var(--ink);
  font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; font-size: 14px; }

.adm-top { display: flex; align-items: center; justify-content: space-between; gap: 12px;
  padding: 10px 16px; background: var(--card); border-bottom: 1px solid var(--border); position: sticky; top: 0; z-index: 5; }
.adm-brand { display: flex; align-items: center; gap: 8px; font-weight: 700; color: var(--primary); }
.adm-brand span { color: var(--ink); }
.adm-top-right { display: flex; align-items: center; gap: 8px; }
.adm-who { color: var(--muted); font-size: 13px; }

.btn { appearance: none; border: 1px solid var(--field-border); background: var(--card); color: var(--ink);
  padding: 6px 12px; border-radius: 8px; font-size: 13px; cursor: pointer; text-decoration: none; display: inline-flex; align-items: center; gap: 6px; }
.btn:hover { border-color: var(--primary); }
.btn-primary { background: var(--primary); border-color: var(--primary); color: var(--primary-ink); }
.btn-primary:hover { background: var(--primary-hover); }
.btn-danger { color: var(--danger); border-color: var(--danger); background: transparent; }
.btn-sm { padding: 3px 8px; font-size: 12px; }

.adm-alert { margin: 12px 16px 0; padding: 10px 12px; border-radius: 8px;
  background: var(--alert-bg); color: var(--alert-ink); border: 1px solid var(--alert-border); }
.adm-warn { margin: 12px 16px 0; padding: 10px 12px; border-radius: 8px;
  background: var(--warn-bg); color: var(--warn-ink); border: 1px solid var(--warn-border); font-size: 13px; }
.adm-warn code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }

.adm-main { max-width: 1080px; margin: 0 auto; padding: 16px; display: grid; gap: 16px; }
.adm-card { background: var(--card); border: 1px solid var(--border); border-radius: 12px; box-shadow: var(--shadow); padding: 14px 16px; }
.adm-card-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 10px; }
.adm-card-head h2 { margin: 0; font-size: 15px; }
.adm-head-actions { display: flex; align-items: center; gap: 8px; }
.adm-hint { color: var(--muted); font-size: 12px; margin: 8px 0 0; }
.adm-hint code, .adm-table code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
.adm-muted { color: var(--muted); }

.adm-table-wrap { overflow-x: auto; }
.adm-table { width: 100%; border-collapse: collapse; font-size: 13px; }
.adm-table th, .adm-table td { text-align: left; padding: 7px 10px; border-bottom: 1px solid var(--border); white-space: nowrap; }
.adm-table th { color: var(--muted); font-weight: 600; font-size: 12px; }
.adm-table tbody tr:hover { background: color-mix(in srgb, var(--primary) 6%, transparent); }
.adm-table .row-actions { display: flex; gap: 6px; justify-content: flex-end; }
.adm-log td { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 12px; }
.badge { display: inline-block; padding: 1px 7px; border-radius: 999px; font-size: 11px; border: 1px solid var(--border); }
.badge.admin { color: var(--primary); border-color: var(--primary); }
.badge.viewer { color: var(--muted); }
.badge.on { color: var(--ok); border-color: var(--ok-border); background: var(--ok-bg); }
.badge.off { color: var(--muted); border-color: var(--border); }
.badge.warn { color: var(--warn-ink); border-color: var(--warn-border); background: var(--warn-bg); }

.adm-kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 14px; margin: 0; font-size: 13px; }
.adm-kv dt { color: var(--muted); }
.adm-kv dd { margin: 0; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; word-break: break-all; }
/* [token-attach] SPEC-TOKEN-ATTACH §2: the admin's own data-token state inside the gateway card.
   The badge repeats the state as a word, not only as a colour, because "đã gắn" and "hết hạn" decide
   whether "Kiểm tra kết nối" can work at all. */
.adm-dtok { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap;
  margin-top: 12px; padding: 10px 12px; border: 1px solid var(--border); border-radius: 8px; }
.adm-dtok-line { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; font-size: 13px; }
.badge[data-token-state="none"] { color: var(--muted); border-color: var(--border); }
.badge[data-token-state="ok"] { color: var(--ok); border-color: var(--ok-border); background: var(--ok-bg); }
.badge[data-token-state="expired"] { color: var(--alert-ink); border-color: var(--alert-border); background: var(--alert-bg); }

.adm-gw-result { margin-top: 10px; padding: 8px 10px; border-radius: 8px; font-size: 13px; }
.adm-gw-result.ok { background: var(--ok-bg); color: var(--ok); border: 1px solid var(--ok-border); }
.adm-gw-result.err { background: var(--alert-bg); color: var(--alert-ink); border: 1px solid var(--alert-border); }

.adm-dlg { border: none; border-radius: 12px; box-shadow: var(--shadow); background: var(--card); color: var(--ink); padding: 0; width: min(460px, 92vw); }
.adm-dlg::backdrop { background: rgba(15, 23, 42, 0.45); }
.adm-dlg-form { padding: 16px 18px; display: grid; gap: 10px; }
.adm-dlg h3 { margin: 0 0 4px; font-size: 16px; }
.field { display: grid; gap: 4px; }
.field > span { font-size: 12px; color: var(--muted); }
.field input, .field select, .field textarea { width: 100%; padding: 7px 9px; border-radius: 8px;
  border: 1px solid var(--field-border); background: var(--field-bg); color: var(--ink); font-size: 14px; }
.field textarea { font-family: inherit; resize: vertical; }
.field input:focus, .field select:focus, .field textarea:focus { outline: 2px solid var(--primary); outline-offset: -1px; }
.field input:disabled { color: var(--muted); background: color-mix(in srgb, var(--muted) 10%, var(--field-bg)); }
.check { display: flex; align-items: center; gap: 8px; font-size: 13px; color: var(--muted); }
.adm-dlg-foot { display: flex; justify-content: flex-end; gap: 8px; margin-top: 6px; }
.adm-dlg-foot .btn:disabled { opacity: 0.5; cursor: not-allowed; border-color: var(--field-border); }
/* Inside a modal dialog the page-level alert sits behind the backdrop, so every dialog carries its
   own error line — the admin must see WHY a station write was refused without closing the dialog. */
.adm-dlg .adm-warn, .adm-dlg .adm-hint { margin: 0; }
.adm-dlg-err { margin: 0; padding: 8px 10px; border-radius: 8px; font-size: 13px;
  background: var(--alert-bg); color: var(--alert-ink); border: 1px solid var(--alert-border); }
.adm-del-list { margin: 0; padding-left: 20px; font-size: 13px; display: grid; gap: 2px; }
#fd-lead { margin: 0; font-size: 13px; }