:root {
  --bg:        #0d0d0d;
  --bgtop:     #0d0d0d;
  --surface:   #161616;
  --surface-2: #1f1f1f;
  --border:    #262626;
  --text:      #ededed;
  --text-mute: #888;
  --accent:    #5eead4;
  --accent-h:  #2dd4bf;
  --danger:    #f87171;
  --font-mono: ui-monospace, "JetBrains Mono", "Cascadia Code", "SF Mono", Menlo, Consolas, monospace;
  --font-sans: ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
  /* Topbar height — overridden in narrow-viewport media queries below so
     the .topbar, .detail-overlay and .detail-panel positioning stay in sync. */
  --topbar-h:  70px;
}
@media (prefers-color-scheme: light) {
  :root {
    --bg:        #fafaf9;
    --bgtop:     #0d0d0d;
    --surface:   #ffffff;
    --surface-2: #f5f5f4;
    --border:    #e7e5e4;
    --text:      #1c1917;
    --text-mute: #78716c;
    --accent:    #0f766e;
    --accent-h:  #115e59;
    --danger:    #b91c1c;
  }
}

*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
html, body { background: var(--bg); color: var(--text); }
body {
  font-family: var(--font-mono);
  font-size: 14px;
  line-height: 1.55;
  min-height: 100vh;
  display: flex; flex-direction: column;
}

/* ===== Top bar (logo strip) ===== */
.topbar {
  /* min-height instead of height so the bar can grow vertically when
     nav items wrap to a second row at narrow viewports. flex-wrap: wrap
     is the actual wrapping enabler — without it items just overflow. */
  min-height: var(--topbar-h);
  flex: 0 0 auto;
  background: var(--bgtop);
  border-bottom: 1px solid var(--border);
  display: flex;
  align-items: center;
  flex-wrap: wrap;
  padding: 0 1.5rem;
}
.topbar-logo {
  display: block;
  height: calc(var(--topbar-h) - 10px);
  line-height: 0;          /* drop the inline-baseline gap under <img> */
  flex-shrink: 0;          /* hold natural size — wrap rather than squeeze */
}
.topbar-logo img {
  height: 100%;
  width: auto;
  display: block;
}

main {
  flex: 1;
  width: 100%;
  max-width: 640px;
  margin: 0 auto;
  padding: 3rem 1.5rem 2rem;  /* tightened top — topbar provides initial spacing */
}

header { margin-bottom: 2.5rem; }
.eyebrow {
  font-family: var(--font-sans);
  font-size: 11px;
  font-weight: 600;
  letter-spacing: 0.14em;
  text-transform: uppercase;
  color: var(--accent);
  margin-bottom: 0.75rem;
}
h1 {
  font-family: var(--font-mono);
  font-size: clamp(1.75rem, 4vw, 2.25rem);
  font-weight: 600;
  letter-spacing: -0.02em;
  line-height: 1.05;
  margin-bottom: 0.6rem;
}
.lede {
  font-family: var(--font-sans);
  font-size: 15px;
  color: var(--text-mute);
}

form { display: flex; flex-direction: column; gap: 1.1rem; margin-bottom: 1.5rem; }
label { display: flex; flex-direction: column; gap: 0.45rem; }
label > span {
  font-family: var(--font-sans);
  font-size: 11px;
  font-weight: 600;
  letter-spacing: 0.1em;
  text-transform: uppercase;
  color: var(--text-mute);
}
input {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 2px;
  color: var(--text);
  font: 14px var(--font-mono);
  padding: 0.7rem 0.9rem;
  width: 100%;
  transition: border-color 120ms;
}
input:focus { outline: none; border-color: var(--accent); }

select {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 2px;
  color: var(--text);
  font: 14px var(--font-mono);
  padding: 0.7rem 0.9rem;
  width: 100%;
  cursor: pointer;
  transition: border-color 120ms;
}
select:focus { outline: none; border-color: var(--accent); }
select:disabled { opacity: 0.5; cursor: not-allowed; }

.row { display: flex; gap: 0.5rem; align-items: stretch; }
.row > *:first-child { flex: 1 1 auto; min-width: 0; }
.row > button { flex: 0 0 auto; align-self: stretch; }

button {
  align-self: flex-start;
  background: var(--accent);
  border: none;
  border-radius: 0;
  color: var(--bg);
  cursor: pointer;
  font: 600 13px var(--font-mono);
  letter-spacing: 0.02em;
  padding: 0.75rem 1.4rem;
  text-transform: lowercase;
  transition: background-color 120ms;
}
button:hover { background: var(--accent-h); }
button:disabled { opacity: 0.4; cursor: not-allowed; }

button.ghost {
  background: transparent;
  border: 1px solid var(--border);
  color: var(--text);
  font-size: 11px;
  padding: 0.4rem 0.75rem;
  letter-spacing: 0.05em;
}
button.ghost:hover { border-color: var(--accent); color: var(--accent); background: transparent; }

/* === Ticket (signature element) === */
.ticket {
  position: relative;
  background: var(--surface);
  border: 1px solid var(--border);
  margin-top: 1.75rem;
}
.ticket-tag {
  position: absolute;
  top: 0;
  left: 1.25rem;
  transform: translateY(-50%);
  background: var(--bg);
  padding: 0 0.55rem;
  font-family: var(--font-sans);
  font-size: 10px;
  font-weight: 700;
  letter-spacing: 0.18em;
  text-transform: uppercase;
  color: var(--accent);
}
.ticket-body { padding: 1.5rem 1.25rem 1.1rem; }
.ticket-meta {
  display: flex;
  flex-wrap: wrap;
  gap: 0.4rem 1.75rem;
  font-family: var(--font-sans);
  font-size: 12px;
  color: var(--text-mute);
  margin-bottom: 1rem;
}
.ticket-meta strong { color: var(--text); font-weight: 500; }
.ticket-perforation {
  border-top: 1px dashed var(--border);
  margin: 1.1rem -1.25rem;
}
.ticket-token {
  background: var(--bg);
  border: 1px solid var(--border);
  padding: 0.9rem 1rem;
  font-family: var(--font-mono);
  font-size: 15px;
  font-weight: 500;
  letter-spacing: 0.01em;
  word-break: break-all;
  margin-bottom: 1rem;
  user-select: all;
}
.ticket-actions { display: flex; gap: 0.5rem; flex-wrap: wrap; }
.ticket pre {
  font: 11px/1.45 var(--font-mono);
  background: var(--bg);
  border: 1px solid var(--border);
  padding: 0.75rem;
  overflow-x: auto;
  white-space: pre;
  max-height: 200px;
  margin-bottom: 0.75rem;
}
.note {
  font-family: var(--font-sans);
  font-size: 12px;
  color: var(--text-mute);
  margin-top: 0.85rem;
  padding-left: 0.85rem;
  border-left: 2px solid var(--accent);
}
.note.warn { border-left-color: var(--danger); color: var(--text); }
/* Descriptive paragraph above the PFX download button on the exchange
   result page. Plain styled, but needs its own class so it doesn't pick
   up the table-cell or ticket-meta defaults. */
.pfx-desc {
  font-family: var(--font-sans);
  font-size: 13px;
  color: var(--text);
  margin-bottom: 0.75rem;
}
.ticket.error { border-color: var(--danger); }
.ticket.error .ticket-tag { color: var(--danger); }
.ticket.error p {
  font-family: var(--font-sans);
  color: var(--text-mute);
}
.expired { color: var(--danger); }

footer {
  font-family: var(--font-sans);
  font-size: 11px;
  letter-spacing: 0.08em;
  text-align: center;
  color: var(--text-mute);
  padding: 2rem 1rem 2.5rem;
}

@media (prefers-reduced-motion: reduce) {
  *, *::before, *::after { transition: none !important; animation: none !important; }
}

/* ===== Top-nav (admin pages) ===== */
.topbar { gap: 0.5rem 1.5rem; }   /* row-gap column-gap when wrapped */
.topbar-nav {
  display: flex;
  gap: 0.5rem 0.75rem;
  margin-left: auto;
  align-items: center;
  flex-wrap: wrap;
  /* flex-shrink: 0 is critical. Without it, the browser shrinks the nav
     instead of wrapping it below the logo — which means items inside the
     nav overflow the right edge instead of moving to a new row. Refusing
     to shrink forces .topbar to actually wrap the nav as a whole. */
  flex-shrink: 0;
  font-family: var(--font-sans);
  font-size: 12px;
  letter-spacing: 0.1em;
  text-transform: uppercase;
}
.topbar-nav a {
  color: var(--text-mute);
  text-decoration: none;
  padding: 0.4rem 0.6rem;
  border-bottom: 1px solid transparent;
  transition: color 0.12s, border-color 0.12s;
}
.topbar-nav a:hover  { color: var(--text); }
.topbar-nav a.active { color: var(--accent); border-bottom-color: var(--accent); }

/* Sign-out lives at the right end of the nav. The small extra margin
   visually separates it from the page-navigation links. It's hidden
   until the user is authenticated. */
.topbar-nav .nav-logout {
  background: none;
  border: 1px solid var(--border);
  color: var(--text-mute);
  font: inherit;
  letter-spacing: inherit;
  text-transform: inherit;
  padding: 0.35rem 0.7rem;
  margin-left: 0.5rem;
  cursor: pointer;
  border-radius: 2px;
  transition: color 0.12s, border-color 0.12s;
}
.topbar-nav .nav-logout:hover {
  color: var(--text);
  border-color: var(--text-mute);
}

/* ===== Certs page: wider main, table layout ===== */
main.wide {
  max-width: 1100px;
}

/* Filter bar */
.filters {
  display: grid;
  grid-template-columns: 2fr 2fr 1fr 1.4fr 1.4fr auto;
  gap: 0.5rem;
  margin-bottom: 1rem;
  align-items: end;
}
.filters label {
  display: flex;
  flex-direction: column;
  gap: 0.25rem;
  font-size: 11px;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--text-mute);
}
.filters input,
.filters select {
  font-family: var(--font-mono);
  font-size: 13px;
  background: var(--surface);
  color: var(--text);
  border: 1px solid var(--border);
  padding: 0.45rem 0.55rem;
  border-radius: 2px;
}
.filters input:focus,
.filters select:focus {
  outline: 2px solid var(--accent);
  outline-offset: -1px;
}
/* The 'search' button in the filter bar — match the input height
   instead of inheriting the much taller default button padding. */
.filters button {
  font-family: var(--font-mono);
  font-size: 13px;
  background: var(--accent);
  color: var(--bg);
  border: none;
  border-radius: 2px;
  padding: 0.5rem 1rem;
  cursor: pointer;
  align-self: end;
  height: auto;
  letter-spacing: 0.02em;
  text-transform: lowercase;
  transition: background-color 120ms;
}
.filters button:hover { background: var(--accent-h); }

/* Toolbar (action buttons + sync meta) */
.toolbar {
  display: flex;
  flex-wrap: wrap;
  gap: 0.75rem;
  align-items: center;
  margin-bottom: 1rem;
  font-family: var(--font-sans);
  font-size: 12px;
  color: var(--text-mute);
}
.toolbar .spacer { flex: 1; }
.toolbar .meta   { font-family: var(--font-mono); }
.toolbar .meta b { color: var(--text); font-weight: 600; }
/* The 'revoke selected' button — match the .ghost buttons next to it
   rather than inheriting the tall default button padding. */
.toolbar button:not(.ghost) {
  font-family: var(--font-mono);
  font-size: 12px;
  padding: 0.4rem 0.9rem;
  letter-spacing: 0.02em;
  align-self: center;
}

/* Cert table */
.certs-table {
  width: 100%;
  border-collapse: collapse;
  font-family: var(--font-mono);
  font-size: 12px;
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 2px;
  overflow: hidden;
}
.certs-table th,
.certs-table td {
  padding: 0.55rem 0.7rem;
  text-align: left;
  vertical-align: top;
  border-bottom: 1px solid var(--border);
}
.certs-table th {
  font-family: var(--font-sans);
  font-size: 11px;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--text-mute);
  background: var(--surface-2);
  font-weight: 600;
}
.certs-table tr:last-child td { border-bottom: none; }
.certs-table tr:hover td       { background: var(--surface-2); }
.certs-table tr.selected td    { background: color-mix(in srgb, var(--accent) 8%, var(--surface)); }
/* col-check is small but must reserve enough room that the checkbox
   doesn't overflow into the table's `overflow: hidden` clip region.
   With box-sizing: border-box, the declared width INCLUDES the cell's
   horizontal padding — so a 32px column with 22.4px of padding left
   only 9.6px for the checkbox, which is narrower than the native
   13–16px control. The override below sets a wider column AND smaller
   horizontal padding so the checkbox always has comfortable space. */
.certs-table th.col-check,
.certs-table td.col-check {
  width: 40px;
  text-align: center;
  padding-left: 0.4rem;
  padding-right: 0.4rem;
}
.certs-table .col-check input[type="checkbox"] {
  width: 16px;
  height: 16px;
  margin: 0;
  vertical-align: middle;
}
.certs-table .col-serial   { font-family: var(--font-mono); color: var(--text-mute); }
.certs-table .col-state    { width: 90px; }
.cn-cell    { color: var(--text); }
.sans-cell  { color: var(--text-mute); font-size: 11px; }

/* State pills */
.pill {
  display: inline-block;
  padding: 1px 8px;
  border-radius: 2px;
  font-family: var(--font-sans);
  font-size: 10px;
  letter-spacing: 0.1em;
  text-transform: uppercase;
  border: 1px solid;
}
.pill-active  { color: var(--accent); border-color: var(--accent); }
.pill-revoked { color: var(--danger); border-color: var(--danger); }
.pill-expired { color: var(--text-mute); border-color: var(--border); }

/* Pagination */
.pagination {
  display: flex;
  align-items: center;
  gap: 0.5rem;
  margin-top: 1rem;
  font-family: var(--font-mono);
  font-size: 12px;
  color: var(--text-mute);
}
.pagination button {
  background: var(--surface);
  color: var(--text);
  border: 1px solid var(--border);
  padding: 0.3rem 0.7rem;
  font-family: var(--font-mono);
  font-size: 12px;
  border-radius: 2px;
  cursor: pointer;
}
.pagination button:disabled { opacity: 0.4; cursor: not-allowed; }
.pagination .count { margin: 0 0.5rem; }

/* Login overlay for the cert page */
.login-wrap {
  max-width: 420px;
  margin: 4rem auto;
}

/* Revoke result block */
.revoke-results {
  margin-top: 1rem;
  padding: 0.75rem;
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 2px;
  font-family: var(--font-mono);
  font-size: 12px;
}
.revoke-results .ok   { color: var(--accent); }
.revoke-results .fail { color: var(--danger); }

@media (max-width: 900px) {
  .filters { grid-template-columns: 1fr 1fr; }
  .certs-table th.col-sans, .certs-table td.col-sans,
  .certs-table th.col-prov, .certs-table td.col-prov { display: none; }
}

/* ===== Utility classes (replace inline color/spacing styles) ===== */
.text-mute   { color: var(--text-mute); }
.text-danger { color: var(--danger); }

/* Empty/loading row inside a table — replaces inline style on the
   <td colspan="..."> placeholder cells. */
.table-placeholder {
  text-align: center;
  color: var(--text-mute);
  padding: 1.5rem;
}
.table-placeholder.error { color: var(--danger); }

/* Chip-row wrapper used inside the detail panel's extensions section,
   formerly built with inline styles in JS. */
.chip-row { margin-bottom: 0.5rem; }
.chip-row-label {
  color: var(--text-mute);
  font-size: 11px;
  margin-bottom: 0.3rem;
}

/* ===== Audit (events) page overrides — replace inline overrides on
        markup that already shares the certs-page filter/list classes. ===== */
.filters.audit-filters {
  grid-template-columns: 1.4fr 2fr 1.4fr auto;
}
#events-list.audit-events {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 2px;
  padding: 0.5rem 1rem;
}

/* Clickable target serial in an audit-event row */
.audit-target-link {
  color: var(--accent);
  text-decoration: none;
}
.audit-target-link:hover { text-decoration: underline; }

/* ===== Detail panel (slide-in from right) ===== */
.detail-overlay {
  position: fixed;
  top: var(--topbar-h); left: 0; right: 0; bottom: 0;
  background: rgba(0, 0, 0, 0.55);
  opacity: 0;
  pointer-events: none;
  transition: opacity 0.18s ease;
  z-index: 90;
}
@media (prefers-color-scheme: light) {
  .detail-overlay { background: rgba(0, 0, 0, 0.3); }
}
.detail-overlay.open {
  opacity: 1;
  pointer-events: auto;
}
.detail-panel {
  position: fixed;
  top: var(--topbar-h); right: 0;
  width: min(680px, 100vw);
  height: calc(100vh - var(--topbar-h));
  background: var(--bg);
  border-left: 1px solid var(--border);
  overflow-y: auto;
  z-index: 100;
  transform: translateX(100%);
  transition: transform 0.2s ease;
  padding: 1.5rem 1.75rem 3rem;
  font-family: var(--font-mono);
  font-size: 13px;
}
.detail-panel.open { transform: translateX(0); }
.detail-head {
  display: flex;
  justify-content: space-between;
  align-items: flex-start;
  gap: 1rem;
  margin-bottom: 1.5rem;
  padding-bottom: 1rem;
  border-bottom: 1px solid var(--border);
}
.detail-head h2 {
  font-family: var(--font-mono);
  font-size: 1.05rem;
  font-weight: 600;
  letter-spacing: -0.01em;
  word-break: break-all;
}
.detail-close {
  background: none;
  border: 1px solid var(--border);
  color: var(--text-mute);
  width: 32px;
  height: 32px;
  display: inline-flex;
  align-items: center;
  justify-content: center;
  font-family: var(--font-sans);
  font-size: 20px;
  line-height: 1;
  cursor: pointer;
  border-radius: 2px;
  flex-shrink: 0;
  transition: color 0.12s, border-color 0.12s, background-color 0.12s;
}
.detail-close:hover {
  color: var(--text);
  border-color: var(--text-mute);
  background: var(--surface);
}

.detail-section { margin-bottom: 1.5rem; }
.detail-section h3 {
  font-family: var(--font-sans);
  font-size: 10px;
  letter-spacing: 0.14em;
  text-transform: uppercase;
  color: var(--accent);
  margin-bottom: 0.6rem;
  font-weight: 600;
}
.detail-section dl {
  display: grid;
  grid-template-columns: max-content 1fr;
  gap: 0.35rem 1rem;
  font-size: 12px;
}
.detail-section dt { color: var(--text-mute); }
.detail-section dd { color: var(--text); word-break: break-all; }
.detail-section .empty { color: var(--text-mute); font-style: italic; }

.pem-block {
  font-family: var(--font-mono);
  font-size: 11px;
  background: var(--surface);
  border: 1px solid var(--border);
  padding: 0.6rem 0.7rem;
  overflow-x: auto;
  max-height: 220px;
  overflow-y: auto;
  white-space: pre;
  color: var(--text-mute);
  border-radius: 2px;
}
.pem-actions { display: flex; gap: 0.5rem; margin-top: 0.5rem; }
.pem-actions button {
  font-family: var(--font-mono);
  font-size: 11px;
  background: var(--surface);
  color: var(--text);
  border: 1px solid var(--border);
  padding: 0.25rem 0.6rem;
  border-radius: 2px;
  cursor: pointer;
}

.ext-list { display: flex; flex-wrap: wrap; gap: 0.3rem; }
.ext-list .chip {
  font-family: var(--font-mono);
  font-size: 11px;
  padding: 1px 7px;
  border: 1px solid var(--border);
  color: var(--text);
  border-radius: 2px;
  background: var(--surface);
}

.audit-events {
  list-style: none;
  padding: 0;
  margin: 0;
}
.audit-events li {
  display: grid;
  grid-template-columns: max-content 1fr;
  gap: 0 0.75rem;
  padding: 0.5rem 0;
  border-bottom: 1px solid var(--border);
  font-size: 12px;
}
.audit-events li:last-child { border-bottom: none; }
.audit-events .ts {
  font-family: var(--font-mono);
  color: var(--text-mute);
  font-size: 11px;
  grid-row: 1 / span 2;
}
.audit-events .head { display: flex; gap: 0.5rem; align-items: center; }
.audit-events .act {
  font-family: var(--font-sans);
  font-size: 10px;
  letter-spacing: 0.1em;
  text-transform: uppercase;
  color: var(--text);
  padding: 1px 6px;
  border: 1px solid var(--border);
  border-radius: 2px;
}
.audit-events .act.ok    { color: var(--accent); border-color: var(--accent); }
.audit-events .act.fail  { color: var(--danger); border-color: var(--danger); }
.audit-events .meta { color: var(--text-mute); font-size: 11px; }
.audit-events .details { color: var(--text-mute); font-size: 11px; font-family: var(--font-mono); word-break: break-all; }

.certs-table tbody tr { cursor: pointer; }
.certs-table tbody tr .col-check { cursor: default; }

/* ===== Responsive — narrow viewports (phones / split-screen) ===== */
@media (max-width: 640px) {
  :root { --topbar-h: 56px; }
  .topbar {
    padding: 0.3rem 0.75rem;
    gap: 0.4rem 0.75rem;
  }
  .topbar-nav {
    font-size: 11px;
    letter-spacing: 0.04em;
    gap: 0.4rem 0.5rem;
  }
  .topbar-nav a {
    padding: 0.3rem 0.45rem;
  }
  .topbar-nav .nav-logout {
    margin-left: 0.5rem;
    padding: 0.3rem 0.55rem;
  }
  main {
    padding: 1.5rem 1rem 2rem;
  }
}

@media (max-width: 400px) {
  :root { --topbar-h: 48px; }
  .topbar {
    padding: 0.25rem 0.5rem;
    gap: 0.3rem 0.5rem;
  }
  .topbar-nav {
    font-size: 10px;
    letter-spacing: 0.02em;
    gap: 0.3rem 0.4rem;
  }
  .topbar-nav a {
    padding: 0.25rem 0.3rem;
  }
  .topbar-nav .nav-logout {
    margin-left: 0.3rem;
    padding: 0.25rem 0.4rem;
  }
  main.wide {
    padding: 1rem 0.5rem 1.5rem;
  }
}