D4 Part 2: hub style.css v2 + template sweep

- style.css: slate tokens -> the canonical navy block + @font-face
  (self-hosted, latin-ext for Hungarian customer names); single 2px
  radius; hairline table rows (--line-soft dividers, density kept);
  status classes re-expressed per the design-system addendum:
  .status-badge = outline tag + CSS ::before dot keyed by the raw
  status the templates emit (ok=blue, warn/blocked/stale=amber,
  down/fail=red, pending/disabled=quiet neutral); .status-dot =
  class-based 8px dot; severity badges stay filled amber/red
  (exceptions stay loud); config badges = filled informational chips
  in v2 colors; row tint only for warn/down (warn-dim/crit-dim).
- Two-tone brand heading on all 8 'Felhom Hub' pages
  (<h1>Felhom <span>Hub</span></h1>, span = blue-bright).
- app_detail chart retinted: avg #2EA8F5 (primary data), peak #8E7CE8
  (secondary DATA series — not status red), catalog-limit line #E0A93E
  (threshold marker); legend/tick/grid -> v2 literals.
- customer_unified: JS status-message colors (success -> blue-bright,
  error -> crit), all inline slate hexes -> tokens.
- Login page inline HTML retinted (#0088cc -> #0083D8).
- Grep gate: every slate hex (#0f172a #1e293b #334155 #60a5fa #4ade80
  #facc15 #f87171 #94a3b8 #64748b #475569 #e2e8f0) at ZERO across
  hub/internal/web (non-test); statusIcon 0; inline statusColor
  style 0. go build/vet/test green; api/ + store/ untouched.

hub/internal/web/embed.go

@@ -10,3 +10,6 @@ var defaultControllerTemplate string
 
 //go:embed static/chart.min.js
 var chartJS []byte
+
+//go:embed static/fonts/*.woff2
+var fontFS embed.FS

hub/internal/web/funcmap_test.go

@@ -0,0 +1,56 @@
+package web
+
+import (
+	"html/template"
+	"testing"
+)
+
+// TASK-D4 §7B: statusColor maps every OverallStatus value the hub emits (server.go
+// handleDashboard + configs.go + the hosts stale state) to a v2 semantic token consumed
+// as a class suffix — never an inline color. Exception-color: healthy fleet = blue/neutral.
+func TestStatusColorTruthTable(t *testing.T) {
+	cases := []struct {
+		status string
+		want   string
+	}{
+		{"ok", "nominal"},        // operating normally — blue
+		{"warn", "warn"},         // degraded / stale report — amber
+		{"stale", "warn"},        // host stale state
+		{"down", "crit"},         // outage — red
+		{"fail", "crit"},         // health=fail — red
+		{"pending", "neutral"},   // not-yet-provisioned customer is a NORMAL fleet state
+		{"disabled", "neutral"},  // deliberately paused — not a deviation
+		{"blocked", "warn"},      // operator cut-off: intentional but attention-worthy
+		{"bogus", "neutral"},     // unknown values stay quiet
+		{"", "neutral"},
+	}
+	for _, c := range cases {
+		if got := statusColor(c.status); got != c.want {
+			t.Errorf("statusColor(%q) = %q, want %q", c.status, got, c.want)
+		}
+	}
+}
+
+// TestTemplatesParseWithFuncmap parses all hub templates with the production funcmap —
+// catches a typo'd function name introduced during the D4 sweep (did not exist before).
+func TestTemplatesParseWithFuncmap(t *testing.T) {
+	s := New(nil, "", "", "test", 0, nil)
+	_ = s // New itself template.Must-parses; reaching here means parse succeeded
+	// belt and braces: parse again explicitly
+	if _, err := template.New("").Funcs(template.FuncMap{
+		"timeAgo":       timeAgo,
+		"timeAgoPtr":    func(v interface{}) string { return "" },
+		"statusColor":   statusColor,
+		"formatFloat":   func(f float64) string { return "" },
+		"joinStrings":   func(s []string, sep string) string { return "" },
+		"json":          func(v interface{}) template.JS { return "" },
+		"hubVersion":    func() string { return "" },
+		"add":           func(a, b int) int { return 0 },
+		"mapGet":        func(m map[string]int, k string) int { return 0 },
+		"memoryColor":   memoryColor,
+		"accuracyClass": accuracyClass,
+		"gt":            func(a, b int) bool { return false },
+	}).ParseFS(templateFS, "templates/*.html"); err != nil {
+		t.Fatalf("templates failed to parse: %v", err)
+	}
+}

hub/internal/web/server.go

@@ -73,7 +73,6 @@ func New(store *store.Store, passwordHash, apiKey, version string, staleThreshol
 			return timeAgo(*t)
 		},
 		"statusColor": statusColor,
-		"statusIcon":  statusIcon,
 		"formatFloat": func(f float64) string { return fmt.Sprintf("%.0f", f) },
 		"joinStrings": func(s []string, sep string) string { return strings.Join(s, sep) },
 		"json": func(v interface{}) template.JS {
@@ -204,6 +203,17 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Content-Type", "application/javascript")
 		w.Header().Set("Cache-Control", "public, max-age=86400")
 		w.Write(chartJS)
+	case strings.HasPrefix(path, "/static/fonts/"):
+		// Vendored brand fonts (design system v2) — embedded, no CDN.
+		name := strings.TrimPrefix(path, "/static/fonts/")
+		data, err := fontFS.ReadFile("static/fonts/" + name)
+		if err != nil {
+			http.NotFound(w, r)
+			return
+		}
+		w.Header().Set("Content-Type", "font/woff2")
+		w.Header().Set("Cache-Control", "public, max-age=31536000, immutable")
+		w.Write(data)
 	case path == "/configuration":
 		if r.Method == http.MethodPost {
 			s.handleConfigurationAction(w, r)
@@ -424,11 +434,11 @@ func (s *Server) handleLogin(w http.ResponseWriter, r *http.Request) {
 		}
 		// Render login with error
 		w.WriteHeader(http.StatusUnauthorized)
-		w.Write([]byte(`<html><head><title>Felhom Hub — Bejelentkezés</title></head><body style="font-family:sans-serif;display:flex;justify-content:center;padding-top:4rem"><form method="post" style="display:flex;flex-direction:column;gap:.75rem;width:300px"><h2>Felhom Hub</h2><p style="color:red">Hibás jelszó</p><input type="password" name="password" placeholder="Jelszó" autofocus style="padding:.5rem;border:1px solid #ccc;border-radius:4px"><button type="submit" style="padding:.5rem;background:#0088cc;color:#fff;border:none;border-radius:4px;cursor:pointer">Bejelentkezés</button></form></body></html>`))
+		w.Write([]byte(`<html><head><title>Felhom Hub — Bejelentkezés</title></head><body style="font-family:sans-serif;display:flex;justify-content:center;padding-top:4rem"><form method="post" style="display:flex;flex-direction:column;gap:.75rem;width:300px"><h2>Felhom Hub</h2><p style="color:red">Hibás jelszó</p><input type="password" name="password" placeholder="Jelszó" autofocus style="padding:.5rem;border:1px solid #ccc;border-radius:4px"><button type="submit" style="padding:.5rem;background:#0083D8;color:#fff;border:none;border-radius:4px;cursor:pointer">Bejelentkezés</button></form></body></html>`))
 		return
 	}
 	w.WriteHeader(http.StatusOK)
-	w.Write([]byte(`<html><head><title>Felhom Hub — Bejelentkezés</title></head><body style="font-family:sans-serif;display:flex;justify-content:center;padding-top:4rem"><form method="post" style="display:flex;flex-direction:column;gap:.75rem;width:300px"><h2>Felhom Hub</h2><input type="password" name="password" placeholder="Jelszó" autofocus style="padding:.5rem;border:1px solid #ccc;border-radius:4px"><button type="submit" style="padding:.5rem;background:#0088cc;color:#fff;border:none;border-radius:4px;cursor:pointer">Bejelentkezés</button></form></body></html>`))
+	w.Write([]byte(`<html><head><title>Felhom Hub — Bejelentkezés</title></head><body style="font-family:sans-serif;display:flex;justify-content:center;padding-top:4rem"><form method="post" style="display:flex;flex-direction:column;gap:.75rem;width:300px"><h2>Felhom Hub</h2><input type="password" name="password" placeholder="Jelszó" autofocus style="padding:.5rem;border:1px solid #ccc;border-radius:4px"><button type="submit" style="padding:.5rem;background:#0083D8;color:#fff;border:none;border-radius:4px;cursor:pointer">Bejelentkezés</button></form></body></html>`))
 }
 
 // validateCSRF checks the CSRF token for a session-based request.
@@ -608,25 +618,32 @@ func timeAgo(t time.Time) string {
 	return fmt.Sprintf("%dd ago", days)
 }
 
+// statusColor maps a status value to a design-system-v2 semantic token, consumed as a
+// class suffix (status-dot-nominal, tag-nominal, …) — never as an inline color (D4).
+// Exception-color principle: a healthy fleet is blue/neutral; amber/red only on deviation.
+//   ok           -> nominal (blue — operating normally)
+//   warn, stale  -> warn    (amber — degraded / stale report)
+//   down, fail   -> crit    (red — outage)
+//   pending      -> neutral (a not-yet-provisioned customer is a normal fleet state)
+//   disabled     -> neutral (deliberately paused — not a deviation)
+//   blocked      -> warn    (an operator cut a customer off: intentional but attention-worthy)
 func statusColor(status string) string {
 	switch status {
 	case "ok":
-		return "#4ade80" // green
+		return "nominal"
-	case "warn":
+	case "warn", "stale":
-		return "#facc15" // yellow
+		return "warn"
 	case "down", "fail":
-		return "#f87171" // red
+		return "crit"
-	case "disabled", "pending", "blocked":
+	case "blocked":
-		return "#94a3b8" // gray
+		return "warn"
+	case "disabled", "pending":
+		return "neutral"
 	default:
-		return "#94a3b8" // gray
+		return "neutral"
 	}
 }
 
-func statusIcon(status string) string {
-	return "●"
-}
-
 // handleConfiguration renders the Configuration page.
 func (s *Server) handleConfiguration(w http.ResponseWriter, r *http.Request) {
 	csrfToken := s.getCSRFToken(r)

hub/internal/web/templates/app_detail.html

@@ -8,9 +8,10 @@
     <script src="/static/chart.min.js"></script>
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>
@@ -107,8 +108,8 @@
                     {
                         label: 'Avg Memory (MB)',
                         data: chartData.avg_memory,
-                        borderColor: '#60a5fa',
+                        borderColor: '#2EA8F5',
-                        backgroundColor: 'rgba(96,165,250,0.1)',
+                        backgroundColor: 'rgba(46,168,245,0.1)',
                         fill: true,
                         tension: 0.3,
                         pointRadius: 2
@@ -116,7 +117,7 @@
                     {
                         label: 'Peak Memory (MB)',
                         data: chartData.peak_memory,
-                        borderColor: '#f87171',
+                        borderColor: '#8E7CE8',
                         backgroundColor: 'transparent',
                         fill: false,
                         tension: 0.3,
@@ -128,7 +129,7 @@
                     datasets.push({
                         label: 'Catalog Limit',
                         data: chartData.labels.map(function() { return chartData.catalog_limit; }),
-                        borderColor: '#4ade80',
+                        borderColor: '#E0A93E',
                         backgroundColor: 'transparent',
                         fill: false,
                         pointRadius: 0,
@@ -143,11 +144,11 @@
                         responsive: true,
                         maintainAspectRatio: false,
                         plugins: {
-                            legend: { labels: { color: '#94a3b8', font: { size: 11 } } }
+                            legend: { labels: { color: '#94A6BF', font: { size: 11 } } }
                         },
                         scales: {
-                            x: { ticks: { color: '#64748b', font: { size: 10 }, maxTicksLimit: 10 }, grid: { color: 'rgba(100,116,139,0.15)' } },
+                            x: { ticks: { color: '#5E7392', font: { size: 10 }, maxTicksLimit: 10 }, grid: { color: 'rgba(34,52,79,.5)' } },
-                            y: { ticks: { color: '#64748b', font: { size: 10 } }, grid: { color: 'rgba(100,116,139,0.15)' }, title: { display: true, text: 'MB', color: '#64748b' } }
+                            y: { ticks: { color: '#5E7392', font: { size: 10 } }, grid: { color: 'rgba(34,52,79,.5)' }, title: { display: true, text: 'MB', color: '#5E7392' } }
                         }
                     }
                 });

hub/internal/web/templates/apps.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>

hub/internal/web/templates/config_form.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link active">Customers</a>

hub/internal/web/templates/configs.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link active">Customers</a>

hub/internal/web/templates/configuration.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>

hub/internal/web/templates/customer_unified.html

@@ -9,6 +9,7 @@
     <script>function csrfHeaders(){var el=document.querySelector('meta[name="csrf-token"]');return el?{'X-CSRF-Token':el.content}:{};}</script>
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
             <nav class="nav-links" style="margin-bottom: 0.5rem;">
@@ -20,7 +21,7 @@
             </nav>
             <a href="/configs" class="back-link">&larr; All Customers</a>
             <h1>
-                <span class="status-dot" style="color: {{statusColor .OverallStatus}}">{{statusIcon .OverallStatus}}</span>
+                <span class="status-dot status-dot-{{statusColor .OverallStatus}}"></span>
                 {{if .CustomerName}}{{.CustomerName}}{{else}}{{.CustomerID}}{{end}}
             </h1>
             {{if .HasReports}}
@@ -271,7 +272,7 @@
                 {{if index . "last_sync_error"}}
                 <div class="info-item">
                     <span class="label">Szinkron hiba</span>
-                    <span class="value" style="color: #f87171">{{index . "last_sync_error"}}</span>
+                    <span class="value" style="color: var(--crit)">{{index . "last_sync_error"}}</span>
                 </div>
                 {{end}}
             </div>
@@ -438,9 +439,9 @@
                     <span class="value">
                         v{{.LatestVersion}}
                         {{if .UpdateAvailable}}
-                        <span style="color: #4ade80; margin-left: 0.3em;">● update available</span>
+                        <span style="color: var(--blue-bright); margin-left: 0.3em;">● update available</span>
                         {{else}}
-                        <span style="color: #94a3b8; margin-left: 0.3em;">— up to date</span>
+                        <span style="color: var(--text-2); margin-left: 0.3em;">— up to date</span>
                         {{end}}
                     </span>
                 </div>
@@ -448,24 +449,24 @@
                 {{if .ControllerURL}}
                 <div class="info-item">
                     <span class="label">Controller URL</span>
-                    <span class="value"><a href="{{.ControllerURL}}" target="_blank" style="color: #60a5fa;">{{.ControllerURL}}</a></span>
+                    <span class="value"><a href="{{.ControllerURL}}" target="_blank" style="color: var(--blue-bright);">{{.ControllerURL}}</a></span>
                 </div>
                 {{end}}
             </div>
             <!-- Phase 2 managed-update floor (operator-enforced minimum) -->
-            <div class="info-grid" style="margin-top: 0.75rem; border-top: 1px solid #334155; padding-top: 0.75rem;">
+            <div class="info-grid" style="margin-top: 0.75rem; border-top: 1px solid var(--line); padding-top: 0.75rem;">
                 <div class="info-item">
                     <span class="label">Effective floor (min. version)</span>
                     <span class="value">
                         {{if .EffectiveFloor}}v{{.EffectiveFloor}}
                             {{if .BelowFloor}}<span style="color: #f59e0b; margin-left: 0.3em;">● below floor — will auto-update</span>
-                            {{else}}<span style="color: #94a3b8; margin-left: 0.3em;">— at/above floor</span>{{end}}
+                            {{else}}<span style="color: var(--text-2); margin-left: 0.3em;">— at/above floor</span>{{end}}
-                        {{else}}<span style="color: #94a3b8;">none (Phase 2 inert)</span>{{end}}
+                        {{else}}<span style="color: var(--text-2);">none (Phase 2 inert)</span>{{end}}
                     </span>
                 </div>
                 <div class="info-item">
                     <span class="label">Global floor</span>
-                    <span class="value">{{if .GlobalFloor}}v{{.GlobalFloor}}{{else}}<span style="color: #94a3b8;">unset</span>{{end}}</span>
+                    <span class="value">{{if .GlobalFloor}}v{{.GlobalFloor}}{{else}}<span style="color: var(--text-2);">unset</span>{{end}}</span>
                 </div>
             </div>
             <form method="POST" action="/customers/{{.CustomerID}}/floor" style="margin-top: 0.5rem; display: flex; gap: 0.5rem; align-items: center; flex-wrap: wrap;">
@@ -473,7 +474,7 @@
                 <label style="font-size: 0.85em; color: #cbd5e1;">Per-customer override</label>
                 <input type="text" name="min_controller_version" value="{{.FloorOverride}}" placeholder="e.g. 0.87.0 (blank = use global)" style="padding: 0.3em 0.5em; font-size: 0.85em; width: 14em;">
                 <button class="btn btn-outline btn-sm" type="submit">Save floor</button>
-                <span style="font-size: 0.8em; color: #94a3b8;">Boxes below the effective floor auto-update on their next report. Blank clears the override.</span>
+                <span style="font-size: 0.8em; color: var(--text-2);">Boxes below the effective floor auto-update on their next report. Blank clears the override.</span>
             </form>
             <p class="text-muted" style="margin-top: 0.75em; font-size: 0.8em;">
                 Controller updates are agent-driven (the version floor above) and config is delivered by the
@@ -704,12 +705,12 @@
             if (data.ok) {
                 msg.textContent = data.message || 'Geo-korlátozás eltávolítva';
                 msg.style.display = 'inline';
-                msg.style.color = '#4ade80';
+                msg.style.color = '#2EA8F5';
                 setTimeout(function() { location.reload(); }, 2000);
             } else {
                 msg.textContent = data.error || 'Hiba történt';
                 msg.style.display = 'inline';
-                msg.style.color = '#f87171';
+                msg.style.color = '#E5534B';
                 btn.disabled = false;
                 btn.textContent = 'Összes geo-korlátozás eltávolítása';
             }
@@ -717,7 +718,7 @@
         .catch(function() {
             msg.textContent = 'Kapcsolódási hiba';
             msg.style.display = 'inline';
-            msg.style.color = '#f87171';
+            msg.style.color = '#E5534B';
             btn.disabled = false;
             btn.textContent = 'Összes geo-korlátozás eltávolítása';
         });
@@ -752,7 +753,7 @@
         position: relative;
         width: 32px;
         height: 18px;
-        background: #475569;
+        background: var(--bg-2);
         border-radius: 9px;
         transition: background 0.2s;
     }
@@ -763,7 +764,7 @@
         left: 2px;
         width: 14px;
         height: 14px;
-        background: #94a3b8;
+        background: var(--text-2);
         border-radius: 50%;
         transition: transform 0.2s, background 0.2s;
     }
@@ -774,7 +775,7 @@
         transform: translateX(14px);
         background: #fff;
     }
-    .toggle-label { color: #94a3b8; }
+    .toggle-label { color: var(--text-2); }
     </style>
     <script>
     (function() {

hub/internal/web/templates/dashboard.html

@@ -8,9 +8,10 @@
     <meta http-equiv="refresh" content="60">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link active">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>
@@ -45,7 +46,7 @@
                 {{range .}}
                 <tr class="status-{{.OverallStatus}}" onclick="window.location='/customers/{{.CustomerID}}'">
                     <td class="customer-name">
-                        <span class="status-dot" style="color: {{statusColor .OverallStatus}}">{{statusIcon .OverallStatus}}</span>
+                        <span class="status-dot status-dot-{{statusColor .OverallStatus}}"></span>
                         {{if .CustomerName}}{{.CustomerName}}{{else}}{{.CustomerID}}{{end}}
                     </td>
                     <td>

hub/internal/web/templates/host_detail.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>

hub/internal/web/templates/hosts.html

@@ -7,9 +7,10 @@
     <link rel="stylesheet" href="/style.css">
 </head>
 <body>
+    {{template "icon_sprite"}}
     <div class="container">
         <header>
-            <h1>Felhom Hub</h1>
+            <h1>Felhom <span>Hub</span></h1>
             <nav class="nav-links">
                 <a href="/" class="nav-link">Dashboard</a>
                 <a href="/configs" class="nav-link">Customers</a>

hub/internal/web/templates/icons.html

@@ -0,0 +1,13 @@
+{{define "icon_sprite"}}<svg xmlns="http://www.w3.org/2000/svg" style="display:none" aria-hidden="true">
+<symbol id="i-triangle-alert" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3" /> <path d="M12 9v4" /> <path d="M12 17h.01" /></symbol>
+<symbol id="i-check" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M20 6 9 17l-5-5" /></symbol>
+<symbol id="i-server" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect width="20" height="8" x="2" y="2" rx="2" ry="2" /> <rect width="20" height="8" x="2" y="14" rx="2" ry="2" /> <line x1="6" x2="6.01" y1="6" y2="6" /> <line x1="6" x2="6.01" y1="18" y2="18" /></symbol>
+<symbol id="i-settings" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9.671 4.136a2.34 2.34 0 0 1 4.659 0 2.34 2.34 0 0 0 3.319 1.915 2.34 2.34 0 0 1 2.33 4.033 2.34 2.34 0 0 0 0 3.831 2.34 2.34 0 0 1-2.33 4.033 2.34 2.34 0 0 0-3.319 1.915 2.34 2.34 0 0 1-4.659 0 2.34 2.34 0 0 0-3.32-1.915 2.34 2.34 0 0 1-2.33-4.033 2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915" /> <circle cx="12" cy="12" r="3" /></symbol>
+<symbol id="i-x" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M18 6 6 18" /> <path d="m6 6 12 12" /></symbol>
+<symbol id="i-info" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10" /> <path d="M12 16v-4" /> <path d="M12 8h.01" /></symbol>
+<symbol id="i-hard-drive" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 16h.01" /> <path d="M2.212 11.577a2 2 0 0 0-.212.896V18a2 2 0 0 0 2 2h16a2 2 0 0 0 2-2v-5.527a2 2 0 0 0-.212-.896L18.55 5.11A2 2 0 0 0 16.76 4H7.24a2 2 0 0 0-1.79 1.11z" /> <path d="M21.946 12.013H2.054" /> <path d="M6 16h.01" /></symbol>
+<symbol id="i-cpu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 20v2" /> <path d="M12 2v2" /> <path d="M17 20v2" /> <path d="M17 2v2" /> <path d="M2 12h2" /> <path d="M2 17h2" /> <path d="M2 7h2" /> <path d="M20 12h2" /> <path d="M20 17h2" /> <path d="M20 7h2" /> <path d="M7 20v2" /> <path d="M7 2v2" /> <rect x="4" y="4" width="16" height="16" rx="2" /> <rect x="8" y="8" width="8" height="8" rx="1" /></symbol>
+<symbol id="i-clock" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10" /> <path d="M12 6v6l4 2" /></symbol>
+<symbol id="i-boxes" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2.97 12.92A2 2 0 0 0 2 14.63v3.24a2 2 0 0 0 .97 1.71l3 1.8a2 2 0 0 0 2.06 0L12 19v-5.5l-5-3-4.03 2.42Z" /> <path d="m7 16.5-4.74-2.85" /> <path d="m7 16.5 5-3" /> <path d="M7 16.5v5.17" /> <path d="M12 13.5V19l3.97 2.38a2 2 0 0 0 2.06 0l3-1.8a2 2 0 0 0 .97-1.71v-3.24a2 2 0 0 0-.97-1.71L17 10.5l-5 3Z" /> <path d="m17 16.5-5-3" /> <path d="m17 16.5 4.74-2.85" /> <path d="M17 16.5v5.17" /> <path d="M7.97 4.42A2 2 0 0 0 7 6.13v4.37l5 3 5-3V6.13a2 2 0 0 0-.97-1.71l-3-1.8a2 2 0 0 0-2.06 0l-3 1.8Z" /> <path d="M12 8 7.26 5.15" /> <path d="m12 8 4.74-2.85" /> <path d="M12 13.5V8" /></symbol>
+<symbol id="i-users" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2" /> <path d="M16 3.128a4 4 0 0 1 0 7.744" /> <path d="M22 21v-2a4 4 0 0 0-3-3.87" /> <circle cx="9" cy="7" r="4" /></symbol>
+</svg>{{end}}

hub/internal/web/templates/style.css

@@ -1,27 +1,58 @@
 /* Felhom Hub — Dark theme */
+/* Felhom Hub — design system v2 (TASK-D4). Canonical tokens:
+   documentation/design/design-system.md */
+
+@font-face {
+    font-family: 'Plus Jakarta Sans';
+    font-style: normal;
+    font-weight: 400 800;
+    font-display: swap;
+    src: url('/static/fonts/pjs-latin.woff2') format('woff2');
+    unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+    font-family: 'Plus Jakarta Sans';
+    font-style: normal;
+    font-weight: 400 800;
+    font-display: swap;
+    src: url('/static/fonts/pjs-latin-ext.woff2') format('woff2');
+    unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+    font-family: 'JetBrains Mono';
+    font-style: normal;
+    font-weight: 400 500;
+    font-display: swap;
+    src: url('/static/fonts/jbm-latin.woff2') format('woff2');
+    unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+    font-family: 'JetBrains Mono';
+    font-style: normal;
+    font-weight: 400 500;
+    font-display: swap;
+    src: url('/static/fonts/jbm-latin-ext.woff2') format('woff2');
+    unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
 :root {
-    --bg-primary: #0f172a;
+  --bg-0: #0A1220;   --bg-1: #0F1B2E;   --bg-2: #16263F;
-    --bg-secondary: #1e293b;
+  --line: #22344F;   --line-soft: #1A2A42;
-    --bg-card: #1e293b;
+  --text-1: #EDF2F9; --text-2: #94A6BF; --text-3: #5E7392;
-    --bg-hover: #334155;
+  --blue: #0083D8;   --blue-bright: #2EA8F5; --blue-dim: rgba(0,131,216,.13);
-    --text-primary: #f1f5f9;
+  --warn: #E0A93E;   --warn-dim: rgba(224,169,62,.12);
-    --text-secondary: #94a3b8;
+  --crit: #E5534B;   --crit-dim: rgba(229,83,75,.12);
-    --text-muted: #64748b;
+  --radius: 2px;
-    --border: #334155;
+  --font-ui: 'Plus Jakarta Sans', -apple-system, sans-serif;
-    --accent: #60a5fa;
+  --font-data: 'JetBrains Mono', monospace;
-    --green: #4ade80;
-    --yellow: #facc15;
-    --red: #f87171;
-    --font-mono: 'JetBrains Mono', 'Fira Code', 'Cascadia Code', monospace;
-    --font-sans: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
 }
 
 * { margin: 0; padding: 0; box-sizing: border-box; }
 
 body {
-    font-family: var(--font-sans);
+    font-family: var(--font-ui);
-    background: var(--bg-primary);
+    background: var(--bg-0);
-    color: var(--text-primary);
+    color: var(--text-1);
     line-height: 1.6;
     min-height: 100vh;
 }
@@ -40,17 +71,17 @@ header {
 header h1 {
     font-size: 1.75rem;
     font-weight: 700;
-    color: var(--text-primary);
+    color: var(--text-1);
 }
 
 .subtitle {
-    color: var(--text-secondary);
+    color: var(--text-2);
     font-size: 0.9rem;
     margin-top: 0.25rem;
 }
 
 .back-link {
-    color: var(--accent);
+    color: var(--blue-bright);
     text-decoration: none;
     font-size: 0.9rem;
     display: inline-block;
@@ -65,26 +96,26 @@ header h1 {
 .dashboard-table {
     width: 100%;
     border-collapse: collapse;
-    background: var(--bg-card);
+    background: var(--bg-1);
-    border-radius: 8px;
+    border-radius: var(--radius);
     overflow: hidden;
 }
 
 .dashboard-table th {
     text-align: left;
     padding: 0.75rem 1rem;
-    background: var(--bg-secondary);
+    background: var(--bg-1);
-    color: var(--text-secondary);
+    color: var(--text-2);
     font-size: 0.8rem;
     font-weight: 600;
     text-transform: uppercase;
     letter-spacing: 0.05em;
-    border-bottom: 1px solid var(--border);
+    border-bottom: 1px solid var(--line);
 }
 
 .dashboard-table td {
     padding: 0.75rem 1rem;
-    border-bottom: 1px solid var(--border);
+    border-bottom: 1px solid var(--line);
     font-size: 0.9rem;
 }
 
@@ -94,7 +125,7 @@ header h1 {
 }
 
 .dashboard-table tbody tr:hover {
-    background: var(--bg-hover);
+    background: var(--bg-2);
 }
 
 .dashboard-table tbody tr:last-child td {
@@ -106,48 +137,72 @@ header h1 {
 }
 
 .status-dot {
-    font-size: 0.85rem;
+    display: inline-block;
-    margin-right: 0.25rem;
+    width: 8px;
+    height: 8px;
+    border-radius: 50%;
+    margin-right: 0.35rem;
+    vertical-align: baseline;
+    background: var(--text-3);
 }
+.status-dot-nominal { background: var(--blue); }
+.status-dot-warn { background: var(--warn); }
+.status-dot-crit { background: var(--crit); }
+.status-dot-neutral { background: transparent; border: 1px solid var(--text-3); }
 
 /* Status badges */
 .status-badge {
     display: inline-block;
     padding: 0.15rem 0.5rem;
-    border-radius: 4px;
+    border-radius: var(--radius);
     font-size: 0.75rem;
     font-weight: 700;
     text-transform: uppercase;
     letter-spacing: 0.05em;
 }
 
-.status-badge-ok { background: rgba(74, 222, 128, 0.15); color: var(--green); }
+/* Status = STATE -> tag semantics (outline + dot; design-system addendum). Keyed by the
-.status-badge-warn { background: rgba(250, 204, 21, 0.15); color: var(--yellow); }
+   raw status value the templates emit; exception-color: ok is blue, pending/disabled quiet. */
-.status-badge-down, .status-badge-fail { background: rgba(248, 113, 113, 0.15); color: var(--red); }
+.status-badge { border: 1px solid var(--line); background: transparent; color: var(--text-2); }
-.status-badge-disabled { background: #475569; color: #e2e8f0; }
+.status-badge::before {
-.status-badge-pending { background: rgba(148, 163, 184, 0.15); color: #94a3b8; }
+    content: '';
-.status-badge-blocked { background: rgba(248, 113, 113, 0.15); color: #f87171; }
+    display: inline-block;
+    width: 6px;
+    height: 6px;
+    border-radius: 50%;
+    margin-right: 0.35rem;
+    background: var(--text-3);
+    vertical-align: 0.05em;
+}
+.status-badge-ok { border-color: rgba(0,131,216,.45); color: var(--blue-bright); }
+.status-badge-ok::before { background: var(--blue); }
+.status-badge-warn, .status-badge-blocked, .status-badge-stale { border-color: var(--warn); color: var(--warn); background: var(--warn-dim); }
+.status-badge-warn::before, .status-badge-blocked::before, .status-badge-stale::before { background: var(--warn); }
+.status-badge-down, .status-badge-fail { border-color: var(--crit); color: var(--crit); background: var(--crit-dim); }
+.status-badge-down::before, .status-badge-fail::before { background: var(--crit); }
+.status-badge-disabled, .status-badge-pending { color: var(--text-3); }
+.status-badge-disabled::before, .status-badge-pending::before { background: transparent; border: 1px solid var(--text-3); }
 
 /* Config badges */
 .config-badge {
     display: inline-block;
     padding: 0.15em 0.5em;
-    border-radius: 4px;
+    border-radius: var(--radius);
     font-size: 0.75rem;
     font-weight: 600;
     letter-spacing: 0.03em;
 }
-.config-badge-managed { background: rgba(74, 222, 128, 0.15); color: #4ade80; }
+.config-badge-managed { background: var(--blue-dim); color: var(--blue-bright); }
-.config-badge-manual { background: #475569; color: #e2e8f0; }
+.config-badge-manual { background: var(--bg-2); color: var(--text-2); }
-.config-badge-blocked { background: rgba(248, 113, 113, 0.2); color: #f87171; }
+.config-badge-blocked { background: var(--crit-dim); color: var(--crit); }
 
 /* Blocked banner */
 .flash-blocked {
-    background: rgba(248, 113, 113, 0.1);
+    background: var(--crit-dim);
-    border: 1px solid rgba(248, 113, 113, 0.3);
+    border: 1px solid rgba(229,83,75,.3);
-    color: #fca5a5;
+    color: var(--crit);
     padding: 0.75rem 1rem;
-    border-radius: 6px;
+    border-radius: var(--radius);
     margin-bottom: 1rem;
     font-size: 0.9rem;
 }
@@ -157,9 +212,9 @@ header h1 {
 
 /* Cards */
 .card {
-    background: var(--bg-card);
+    background: var(--bg-1);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 8px;
+    border-radius: var(--radius);
     padding: 1.25rem;
     margin-bottom: 1rem;
 }
@@ -168,7 +223,7 @@ header h1 {
     font-size: 1.1rem;
     font-weight: 600;
     margin-bottom: 1rem;
-    color: var(--text-primary);
+    color: var(--text-1);
 }
 
 .card h3 {
@@ -176,7 +231,7 @@ header h1 {
     font-weight: 600;
     margin-top: 0.75rem;
     margin-bottom: 0.5rem;
-    color: var(--text-secondary);
+    color: var(--text-2);
 }
 
 /* Info grid */
@@ -189,14 +244,14 @@ header h1 {
 .info-item .label {
     display: block;
     font-size: 0.75rem;
-    color: var(--text-muted);
+    color: var(--text-3);
     text-transform: uppercase;
     letter-spacing: 0.05em;
 }
 
 .info-item .value {
     font-size: 0.9rem;
-    color: var(--text-primary);
+    color: var(--text-1);
 }
 
 /* Metrics */
@@ -215,31 +270,31 @@ header h1 {
 
 .metric-label {
     font-size: 0.8rem;
-    color: var(--text-secondary);
+    color: var(--text-2);
 }
 
 .metric-value {
     font-size: 1.25rem;
     font-weight: 700;
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
 }
 
 .metric-detail {
     font-size: 0.8rem;
-    color: var(--text-muted);
+    color: var(--text-3);
 }
 
 .bar {
     height: 6px;
-    background: var(--border);
+    background: var(--line);
-    border-radius: 3px;
+    border-radius: var(--radius);
     overflow: hidden;
 }
 
 .bar-fill {
     height: 100%;
-    background: var(--accent);
+    background: var(--blue-bright);
-    border-radius: 3px;
+    border-radius: var(--radius);
     transition: width 0.3s ease;
 }
 
@@ -253,11 +308,11 @@ header h1 {
 .container-table th {
     text-align: left;
     padding: 0.5rem 0.75rem;
-    color: var(--text-muted);
+    color: var(--text-3);
     font-size: 0.75rem;
     font-weight: 600;
     text-transform: uppercase;
-    border-bottom: 1px solid var(--border);
+    border-bottom: 1px solid var(--line);
 }
 
 .container-table td {
@@ -270,9 +325,9 @@ header h1 {
     font-weight: 600;
 }
 
-.container-state-running { color: var(--green); }
+.container-state-running { color: var(--blue-bright); }
-.container-state-stopped, .container-state-exited { color: var(--red); }
+.container-state-stopped, .container-state-exited { color: var(--crit); }
-.container-state-unhealthy { color: var(--yellow); }
+.container-state-unhealthy { color: var(--warn); }
 
 /* Health */
 .health-status {
@@ -281,17 +336,17 @@ header h1 {
     text-transform: uppercase;
 }
 
-.health-status-ok { color: var(--green); }
+.health-status-ok { color: var(--blue-bright); }
-.health-status-warn { color: var(--yellow); }
+.health-status-warn { color: var(--warn); }
-.health-status-fail { color: var(--red); }
+.health-status-fail { color: var(--crit); }
 
 .issue-list, .warning-list {
     list-style: none;
     padding-left: 0;
 }
 
-.issue-list li::before { content: "● "; color: var(--red); }
+.issue-list li::before { content: "● "; color: var(--crit); }
-.warning-list li::before { content: "● "; color: var(--yellow); }
+.warning-list li::before { content: "● "; color: var(--warn); }
 
 .issue, .warning {
     padding: 0.25rem 0;
@@ -309,9 +364,9 @@ header h1 {
 .history-table th {
     text-align: left;
     padding: 0.4rem 0.5rem;
-    color: var(--text-muted);
+    color: var(--text-3);
     font-size: 0.75rem;
-    border-bottom: 1px solid var(--border);
+    border-bottom: 1px solid var(--line);
 }
 
 .history-table td {
@@ -321,7 +376,7 @@ header h1 {
 
 details summary {
     cursor: pointer;
-    color: var(--accent);
+    color: var(--blue-bright);
     font-size: 0.9rem;
 }
 
@@ -329,20 +384,20 @@ details summary {
 .empty-state {
     text-align: center;
     padding: 4rem 2rem;
-    color: var(--text-secondary);
+    color: var(--text-2);
 }
 
 .empty-state .hint {
     margin-top: 0.5rem;
     font-size: 0.85rem;
-    color: var(--text-muted);
+    color: var(--text-3);
 }
 
 .empty-state code {
-    background: var(--bg-hover);
+    background: var(--bg-2);
     padding: 0.15rem 0.4rem;
-    border-radius: 4px;
+    border-radius: var(--radius);
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
     font-size: 0.85rem;
 }
 
@@ -350,22 +405,22 @@ details summary {
 footer {
     margin-top: 2rem;
     padding-top: 1rem;
-    border-top: 1px solid var(--border);
+    border-top: 1px solid var(--line);
     text-align: center;
     font-size: 0.8rem;
-    color: var(--text-muted);
+    color: var(--text-3);
 }
 
 footer a {
-    color: var(--accent);
+    color: var(--blue-bright);
     text-decoration: none;
 }
 
 /* Code */
 code {
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
     font-size: 0.85em;
-    color: var(--accent);
+    color: var(--blue-bright);
 }
 
 /* Navigation */
@@ -376,7 +431,7 @@ code {
 }
 
 .nav-link {
-    color: var(--text-secondary);
+    color: var(--text-2);
     text-decoration: none;
     font-size: 0.9rem;
     padding-bottom: 2px;
@@ -385,12 +440,12 @@ code {
 }
 
 .nav-link:hover {
-    color: var(--text-primary);
+    color: var(--text-1);
 }
 
 .nav-link.active {
-    color: var(--accent);
+    color: var(--blue-bright);
-    border-bottom-color: var(--accent);
+    border-bottom-color: var(--blue-bright);
     font-weight: 600;
 }
 
@@ -398,10 +453,10 @@ code {
 .btn {
     display: inline-block;
     padding: 0.5rem 1rem;
-    background: var(--accent);
+    background: var(--blue-bright);
-    color: #0f172a;
+    color: var(--bg-0);
     border: none;
-    border-radius: 6px;
+    border-radius: var(--radius);
     font-size: 0.85rem;
     font-weight: 600;
     cursor: pointer;
@@ -413,17 +468,17 @@ code {
 
 .btn-outline {
     background: transparent;
-    color: var(--text-secondary);
+    color: var(--text-2);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
 }
 
 .btn-outline:hover {
-    color: var(--text-primary);
+    color: var(--text-1);
-    border-color: var(--text-secondary);
+    border-color: var(--text-2);
 }
 
 .btn-danger {
-    background: var(--red);
+    background: var(--crit);
     color: #fff;
 }
 
@@ -448,25 +503,25 @@ code {
 .form-group label {
     font-size: 0.8rem;
     font-weight: 600;
-    color: var(--text-secondary);
+    color: var(--text-2);
     text-transform: uppercase;
     letter-spacing: 0.03em;
 }
 
 .form-group input[type="text"],
 .form-group input[type="email"] {
-    background: var(--bg-primary);
+    background: var(--bg-0);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 6px;
+    border-radius: var(--radius);
     padding: 0.5rem 0.75rem;
-    color: var(--text-primary);
+    color: var(--text-1);
     font-size: 0.9rem;
     font-family: inherit;
 }
 
 .form-group input:focus {
     outline: none;
-    border-color: var(--accent);
+    border-color: var(--blue-bright);
 }
 
 .form-group input[readonly] {
@@ -476,7 +531,7 @@ code {
 
 .form-hint {
     font-size: 0.75rem;
-    color: var(--text-muted);
+    color: var(--text-3);
 }
 
 /* Credentials */
@@ -488,9 +543,9 @@ code {
     display: flex;
     align-items: center;
     gap: 0.5rem;
-    background: var(--bg-primary);
+    background: var(--bg-0);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 6px;
+    border-radius: var(--radius);
     padding: 0.5rem 0.75rem;
     margin-top: 0.25rem;
     overflow-x: auto;
@@ -500,14 +555,14 @@ code {
     flex: 1;
     font-size: 0.8rem;
     word-break: break-all;
-    color: var(--text-primary);
+    color: var(--text-1);
 }
 
 .copy-btn {
     background: transparent;
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 4px;
+    border-radius: var(--radius);
-    color: var(--text-secondary);
+    color: var(--text-2);
     cursor: pointer;
     padding: 0.2rem 0.5rem;
     font-size: 0.85rem;
@@ -516,44 +571,44 @@ code {
 }
 
 .copy-btn:hover {
-    color: var(--accent);
+    color: var(--blue-bright);
-    border-color: var(--accent);
+    border-color: var(--blue-bright);
 }
 
 /* Flash messages */
 .flash {
     padding: 0.75rem 1rem;
-    border-radius: 6px;
+    border-radius: var(--radius);
     margin-bottom: 1rem;
     font-size: 0.9rem;
 }
 
 .flash-success {
-    background: rgba(74, 222, 128, 0.1);
+    background: var(--blue-dim);
-    color: var(--green);
+    color: var(--blue-bright);
     border: 1px solid rgba(74, 222, 128, 0.3);
 }
 
 .flash-error {
-    background: rgba(248, 113, 113, 0.1);
+    background: var(--crit-dim);
-    color: var(--red);
+    color: var(--crit);
-    border: 1px solid rgba(248, 113, 113, 0.3);
+    border: 1px solid rgba(229,83,75,.3);
 }
 
 /* YAML Preview */
 .yaml-preview {
-    background: var(--bg-primary);
+    background: var(--bg-0);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 6px;
+    border-radius: var(--radius);
     padding: 1rem;
     max-height: 500px;
     overflow: auto;
 }
 
 .yaml-preview pre {
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
     font-size: 0.8rem;
-    color: var(--text-secondary);
+    color: var(--text-2);
     white-space: pre-wrap;
     word-break: break-word;
     margin: 0;
@@ -561,14 +616,14 @@ code {
 
 /* Muted text */
 .text-muted {
-    color: var(--text-muted);
+    color: var(--text-3);
 }
 
 /* Severity badges */
 .severity-badge {
     display: inline-block;
     padding: 0.15em 0.5em;
-    border-radius: 4px;
+    border-radius: var(--radius);
     font-size: 0.8em;
     font-weight: 600;
     line-height: 1.4;
@@ -597,9 +652,9 @@ code {
 }
 
 .event-filter.active {
-    background: var(--accent);
+    background: var(--blue-bright);
     color: #fff;
-    border-color: var(--accent);
+    border-color: var(--blue-bright);
 }
 
 /* Notification channel badges */
@@ -622,18 +677,18 @@ code {
 .badge {
     display: inline-block;
     padding: 0.15rem 0.5rem;
-    border-radius: 0.25rem;
+    border-radius: var(--radius);
     font-size: 0.8rem;
     font-weight: 600;
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
 }
 .badge-error {
-    background: rgba(248, 113, 113, 0.2);
+    background: var(--crit-dim);
-    color: var(--red);
+    color: var(--crit);
 }
 .badge-warn {
     background: rgba(250, 204, 21, 0.2);
-    color: var(--yellow);
+    color: var(--warn);
 }
 
 /* Summary cards row */
@@ -646,21 +701,21 @@ code {
 .summary-card {
     flex: 1;
     min-width: 160px;
-    background: var(--bg-card);
+    background: var(--bg-1);
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 0.5rem;
+    border-radius: var(--radius);
     padding: 1rem 1.25rem;
 }
 .summary-card .card-number {
     font-size: 2rem;
     font-weight: 700;
-    color: var(--text-primary);
+    color: var(--text-1);
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
     line-height: 1.1;
 }
 .summary-card .card-label {
     font-size: 0.8rem;
-    color: var(--text-muted);
+    color: var(--text-3);
     margin-top: 0.25rem;
 }
 
@@ -680,19 +735,19 @@ code {
 }
 .period-btn {
     padding: 0.3rem 0.75rem;
-    border: 1px solid var(--border);
+    border: 1px solid var(--line);
-    border-radius: 0.25rem;
+    border-radius: var(--radius);
-    background: var(--bg-secondary);
+    background: var(--bg-1);
-    color: var(--text-secondary);
+    color: var(--text-2);
     font-size: 0.85rem;
     text-decoration: none;
     cursor: pointer;
     transition: background 0.15s, color 0.15s;
 }
 .period-btn:hover, .period-btn.active {
-    background: var(--accent);
+    background: var(--blue-bright);
-    color: var(--bg-primary);
+    color: var(--bg-0);
-    border-color: var(--accent);
+    border-color: var(--blue-bright);
 }
 
 /* Accuracy dot */
@@ -703,14 +758,14 @@ code {
     border-radius: 50%;
     margin-left: 0.25rem;
 }
-.accuracy-ok   { background: var(--green); }
+.accuracy-ok   { background: var(--blue-bright); }
-.accuracy-warn { background: var(--yellow); }
+.accuracy-warn { background: var(--warn); }
-.accuracy-danger { background: var(--red); }
+.accuracy-danger { background: var(--crit); }
 
 /* Memory color classes */
-.mem-ok     { color: var(--green); }
+.mem-ok     { color: var(--blue-bright); }
-.mem-warn   { color: var(--yellow); }
+.mem-warn   { color: var(--warn); }
-.mem-danger { color: var(--red); }
+.mem-danger { color: var(--crit); }
 
 /* Data table (apps page) */
 .data-table {
@@ -722,37 +777,37 @@ code {
     text-align: left;
     padding: 0.6rem 0.75rem;
     font-weight: 600;
-    color: var(--text-secondary);
+    color: var(--text-2);
     font-size: 0.8rem;
     text-transform: uppercase;
     letter-spacing: 0.04em;
-    border-bottom: 1px solid var(--border);
+    border-bottom: 1px solid var(--line);
     white-space: nowrap;
 }
 .data-table td {
     padding: 0.6rem 0.75rem;
     border-bottom: 1px solid rgba(100,116,139,0.15);
-    color: var(--text-primary);
+    color: var(--text-1);
-    font-family: var(--font-mono);
+    font-family: var(--font-data);
     font-size: 0.875rem;
 }
 .data-table td a {
-    color: var(--accent);
+    color: var(--blue-bright);
     text-decoration: none;
     font-family: var(--font-sans, sans-serif);
 }
 .data-table td a:hover { text-decoration: underline; }
 .data-table th a {
-    color: var(--text-secondary);
+    color: var(--text-2);
     text-decoration: none;
 }
-.data-table th a:hover { color: var(--text-primary); }
+.data-table th a:hover { color: var(--text-1); }
 .data-table tr:hover td { background: rgba(96,165,250,0.04); }
 .data-table input[type="checkbox"] {
     width: 1rem;
     height: 1rem;
     cursor: pointer;
-    accent-color: var(--accent);
+    accent-color: var(--blue-bright);
 }
 
 /* Responsive */
@@ -763,3 +818,23 @@ code {
     .info-grid { grid-template-columns: 1fr 1fr; }
     .metrics-grid { grid-template-columns: 1fr; }
 }
+
+
+/* Row tint — exception rule: only warn/crit rows carry a wash; ok/pending stay quiet. */
+.dashboard-table tbody tr.status-warn { background: var(--warn-dim); }
+.dashboard-table tbody tr.status-down { background: var(--crit-dim); }
+
+/* Two-tone brand heading */
+header h1 span { color: var(--blue-bright); }
+
+/* Inline icon (Lucide sprite) */
+.ico { width: 16px; height: 16px; flex-shrink: 0; vertical-align: -0.18em; }
+
+/* Hairline table rows (v2): soft dividers, header underline stays --line. */
+.dashboard-table td, .data-table td { border-bottom: 1px solid var(--line-soft); }
+
+:focus-visible { outline: 2px solid var(--blue-bright); outline-offset: 1px; }
+
+@media (prefers-reduced-motion: reduce) {
+    *, *::before, *::after { animation: none !important; transition: none !important; }
+}