Phase 7: deployment, data import, UI hardening and security fixes

Docker/prod deployment:
- multi-stage Dockerfile (JDK21 build, JRE21 run), docker-compose.prod.yml,
  nginx config for lms.our-place.ru, deploy.sh; DEPLOY/IMPORT guides (UI flow)
- Fix Docker 401: LMS_JWT_JWK_SET_URI for academic/progress; forward-headers

Variant distribution (lab page only):
- round-robin by student level, shared random queue across selected groups,
  least-used variants, manual pins always preserved; occupied/dup labels
- setup page: single form + one «Сохранить всё», batch level/variant for
  selected students (checkboxes)

Grades, defense, materials:
- publication gate + comment lists; defense CSV import (2/3 cols, quotes)
- additional task after defense ("начать заново"); enroll/unenroll students
  from group page; temporary-password lock (no navigation until changed) and
  persistent "Смена пароля"; forced change once
- chapter page /learn/{c}; header: LMS home, Войти, user -> dashboard,
  compact theme toggle; responsive mobile header
- markdown: single newlines are soft breaks; highlight.js with light/dark themes
- lab/content imports ZIP-only (lab.yaml+README+variants/assets,
  chapters tree+assets); duplicate lab numbers rejected; variant ordering
  and date defaults honored

Fixes:
- 500 on student create (@MapsId set before persist); broken dialogs/JS refs in group page

web/src/main/resources/templates/admin/lab.html

@@ -8,309 +8,189 @@
         <div>
             <h1 class="page-title" th:text="|ЛР ${lab.number}. ${lab.title}|">ЛР 1</h1>
             <p class="text-sm text-muted">
-                Статус: <form class="inline-form" th:action="@{/admin/labs/{id}/toggle-status(id=${lab.id})}" method="post">
+                Статус:
+                <form class="inline-form" th:action="@{/admin/labs/{id}/toggle-status(id=${lab.id})}" method="post">
                     <input type="hidden" name="_csrf" th:value="${csrfToken}">
                     <button class="badge badge-btn" type="submit" onclick="return confirm('Сменить статус лабораторной?')"
-                        th:classappend="${lab.status == 'published'} ? 'badge-ok' : 'badge-warn'" th:text="${lab.status}">—</button>
+                            th:classappend="${lab.status == 'published'} ? 'badge-ok' : 'badge-warn'"
+                            th:text="${lab.status}">draft</button>
                 </form>
                 <span th:if="${deadlineMsk != null}"> · Срок: <span th:text="${deadlineMsk} + ' МСК'"></span></span>
                 <span th:if="${defenseMsk != null}"> · Защита: <span th:text="${defenseMsk} + ' МСК'"></span></span>
                 · Максимум: <span th:text="${lab.pointsMax}"></span> б.
+                <span th:if="${assignedCount > 0}" class="chip chip-neu">Вариантов назначено: <span th:text="${assignedCount}"></span></span>
+                <span th:if="${totalVariants > 0}" class="chip chip-neu">Занято вариантов: <span th:text="${occupiedVariants}"></span> из <span th:text="${totalVariants}"></span></span>
+                <span th:if="${totalVariants > 0}" class="chip chip-pos">Свободно: <span th:text="${freeVariants}"></span></span>
+                <span th:if="${submissionCount > 0}" class="chip chip-pos">Сдано: <span th:text="${submissionCount}"></span></span>
             </p>
         </div>
         <div class="flex gap-2">
-            <button class="btn btn-secondary" type="button" onclick="openModal('modal-meta')">Править описание</button>
-            <form th:action="@{/admin/labs/{id}/distribute(id=${lab.id})}" method="post">
-                <button class="btn btn-primary" type="submit" name="force" value="false">Распределить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
-            <form th:action="@{/admin/labs/{id}/distribute(id=${lab.id})}" method="post">
-                <button class="btn btn-secondary" type="submit" name="force" value="true">Перераспределить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
+            <a class="btn btn-secondary" th:href="@{/admin/labs/{id}/edit(id=${lab.id})}">Редактировать</a>
+            <button class="btn btn-primary" type="button" onclick="openModal('modal-distribute')">Распределить</button>
         </div>
     </div>
     <div th:if="${notice}" class="alert alert-success" th:text="${notice}"></div>
     <div th:if="${error}" class="alert alert-error" th:text="${error}"></div>
 
-    <h2 class="section-title">Условие</h2>
+    <h2 class="section-title">Условие лабораторной</h2>
     <div class="card card-body md-body mb-6" th:utext="${descriptionHtml}"></div>
 
-    <div class="flex items-center justify-between gap-4 mb-4">
-        <h2 class="section-title">Уровни и варианты</h2>
-        <button class="btn btn-secondary" type="button" onclick="openModal('modal-add-level')">+ Уровень</button>
+    <div class="flex flex-wrap items-center justify-between gap-2 mb-2">
+        <h2 class="section-title m-0">Назначения студентов</h2>
+        <p class="text-sm text-muted m-0">
+            Смена уровня сразу подбирает вариант; конкретный вариант можно закрепить вручную.
+        </p>
+    </div>
+    <div th:if="${#lists.isEmpty(assignmentGroups)}" class="card card-body mb-6 text-muted">Нет студентов для назначения.</div>
+
+    <div class="card card-body mb-4" th:if="${!#lists.isEmpty(assignmentGroups)}">
+        <div class="flex flex-wrap items-center gap-4">
+            <label class="tone-label"><input type="checkbox" id="batch-all"
+                onchange="toggleAllStudents(this)"> Выбрать всех</label>
+            <form id="batch-level-form" class="inline-form" method="post"
+                  th:action="@{/admin/labs/{id}/batch-level(id=${lab.id})}"
+                  onsubmit="return collectPicked(this)">
+                <input type="hidden" name="_csrf" th:value="${csrfToken}">
+                <select name="labLevelId" class="input input-sm" th:disabled="${#lists.isEmpty(lab.levels)}">
+                    <option th:each="lv : ${lab.levels}" th:value="${lv.id}" th:text="${lv.title}">Уровень</option>
+                </select>
+                <button class="btn btn-secondary btn-sm" type="submit">Назначить уровень выбранным</button>
+            </form>
+            <form id="batch-variant-form" class="inline-form" method="post"
+                  th:action="@{/admin/labs/{id}/batch-variant(id=${lab.id})}"
+                  onsubmit="return collectPicked(this)">
+                <input type="hidden" name="_csrf" th:value="${csrfToken}">
+                <select name="variantId" class="input input-sm">
+                    <optgroup th:each="lv : ${lab.levels}" th:label="${lv.title}">
+                        <option th:each="v : ${lv.variants}" th:value="${v.id}"
+                                th:text="${(variantUsage[v.id] ?: 0) > 0 ? v.number + ' — ' + v.title + ' (занят ' + (variantUsage[v.id] ?: 0) + ')' : v.number + ' — ' + v.title}">1</option>
+                    </optgroup>
+                </select>
+                <button class="btn btn-secondary btn-sm" type="submit">Закрепить вариант выбранным</button>
+            </form>
+        </div>
     </div>
 
+    <div th:each="g : ${assignmentGroups}" class="card mb-4" th:if="${!#lists.isEmpty(g.students)}">
+        <div class="card-body">
+            <h3 class="group-title" th:text="${g.groupName}">Группа</h3>
+            <div class="scroll-x">
+                <table>
+                    <thead><tr>
+                        <th class="th-w-sm">Выбор</th><th>Студент</th><th class="th-w-md">Уровень</th><th class="th-w-md">Вариант</th>
+                        <th class="th-w-sm">Источник</th><th>Сдача</th>
+                    </tr></thead>
+                    <tbody>
+                    <tr th:each="s : ${g.students}">
+                        <td><input type="checkbox" class="pick-student" th:value="${s.studentId}"></td>
+                        <td>
+                            <div th:text="${s.fullName}">—</div>
+                            <div class="text-sm text-muted font-mono" th:text="${s.studentNo}">—</div>
+                        </td>
+                        <td>
+                            <form class="inline-form" method="post"
+                                  th:action="@{/admin/labs/{id}/set-level(id=${lab.id})}">
+                                <input type="hidden" name="_csrf" th:value="${csrfToken}">
+                                <input type="hidden" name="studentId" th:value="${s.studentId}">
+                                <input type="hidden" name="labId" th:value="${lab.id}">
+                                <select name="labLevelId" class="input input-sm" onchange="this.form.submit()"
+                                        th:disabled="${#lists.isEmpty(lab.levels)}">
+                                    <option th:each="lv : ${lab.levels}" th:value="${lv.id}"
+                                            th:selected="${lv.id == s.levelId}" th:text="${lv.title}">Уровень</option>
+                                </select>
+                            </form>
+                        </td>
+                        <td>
+                            <form class="inline-form" method="post"
+                                  th:action="@{/admin/labs/{id}/assign(id=${lab.id})}">
+                                <input type="hidden" name="_csrf" th:value="${csrfToken}">
+                                <input type="hidden" name="studentId" th:value="${s.studentId}">
+                                <input type="hidden" name="labId" th:value="${lab.id}">
+                                <select name="variantId" class="input input-sm pick-variant" onchange="confirmOccupied(this)">
+                                    <option value="">— авто —</option>
+                                    <optgroup th:each="lv : ${lab.levels}" th:label="${lv.title}">
+                                        <option th:each="v : ${lv.variants}" th:value="${v.id}"
+                                                th:attr="data-taken=${variantUsage[v.id] ?: 0}"
+                                                th:selected="${v.id == s.variantId}"
+                                                th:text="${(variantUsage[v.id] ?: 0) > 1 ? v.number + ' — ' + v.title + ' (занят ' + (variantUsage[v.id] ?: 0) + ')' : v.number + ' — ' + v.title}">1</option>
+                                    </optgroup>
+                                </select>
+                            </form>
+                        </td>
+                        <td>
+                            <span class="badge" th:classappend="${s.source == 'вручную'} ? 'badge-ok' : 'badge-warn'"
+                                  th:text="${s.source}">авто</span>
+                        </td>
+                        <td>
+                            <a th:if="${s.submissionId}" class="cell-link"
+                               th:href="'/admin/submissions/' + ${s.submissionId} + '/download'">
+                                попытка <span th:text="${s.submissionSeq}">1</span> ↓</a>
+                            <span th:unless="${s.submissionId}" class="text-muted">—</span>
+                        </td>
+                    </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+    </div>
+
+    <h2 class="section-title">Уровни и варианты</h2>
+    <div th:if="${#lists.isEmpty(lab.levels)}" class="card card-body text-muted">Уровней пока нет — добавьте на экране настройки.</div>
     <div th:each="level : ${lab.levels}" class="card mb-4">
         <div class="card-body">
-            <div class="flex flex-wrap items-center justify-between gap-4 mb-4">
-                <h3 class="group-title">
-                    <span class="font-mono text-muted" th:text="${level.code}">basic</span> —
-                    <span th:text="${level.title}">Уровень</span>
-                    (<span th:text="${#lists.size(level.variants)}">0</span> вар.)
-                </h3>
-                <div class="flex gap-2">
-                    <button class="btn btn-secondary btn-sm" type="button"
-                            th:attr="data-modal=${'modal-rename-level-' + level.id}" onclick="openModalData(this)">Переименовать</button>
-                    <form th:action="@{/admin/labs/{labId}/levels/{lid}/delete(labId=${lab.id}, lid=${level.id})}" method="post"
-                          onsubmit="return confirm('Удалить уровень без вариантов?')">
-                        <button class="btn btn-danger btn-sm" type="submit">Удалить</button>
-                    <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                    </form>
-                    <button class="btn btn-primary btn-sm" type="button"
-                            th:attr="data-modal=${'modal-add-variant-' + level.id}" onclick="openModalData(this)">+ Вариант</button>
-                </div>
+            <div class="flex flex-wrap items-center justify-between gap-4 mb-2">
+                <h3 class="section-title" th:text="${level.title}">Уровень</h3>
+                <span class="text-sm text-muted" th:text="|Вариантов: ${#lists.size(level.variants)}|">0</span>
+            </div>
+            <div class="scroll-x">
+                <table>
+                    <thead><tr><th class="th-w-sm">№</th><th class="th-w-md">Название</th><th>Условие</th></tr></thead>
+                    <tbody>
+                    <tr th:each="v : ${level.variants}">
+                        <td class="font-mono" th:text="${v.number}">1</td>
+                        <td th:text="${v.title}">—</td>
+                        <td class="text-muted preview" th:text="${#strings.abbreviate(v.statementMd, 70)}">—</td>
+                    </tr>
+                    <tr th:if="${#lists.isEmpty(level.variants)}"><td colspan="3" class="empty">Вариантов нет.</td></tr>
+                    </tbody>
+                </table>
             </div>
-            <table>
-                <thead><tr><th>№</th><th>Название</th><th>Условие</th><th></th></tr></thead>
-                <tbody>
-                <tr th:each="v : ${level.variants}">
-                    <td class="font-mono" th:text="${v.number}">—</td>
-                    <td th:text="${v.title}">—</td>
-                    <td class="text-muted" th:text="${#strings.abbreviate(v.statementMd, 60)}">—</td>
-                    <td class="text-center">
-                        <button class="btn btn-secondary btn-sm" type="button"
-                                th:attr="data-modal=${'modal-edit-variant-' + v.id}" onclick="openModalData(this)">Править</button>
-                        <form class="inline-form" th:action="@{/admin/labs/{labId}/variants/{vid}/delete(labId=${lab.id}, vid=${v.id})}" method="post"
-                              onsubmit="return confirm('Удалить вариант?')">
-                            <button class="btn btn-danger btn-sm" type="submit">Удалить</button>
-                        <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                        </form>
-                    </td>
-                </tr>
-                <tr th:if="${#lists.isEmpty(level.variants)}"><td colspan="4" class="empty">Вариантов пока нет.</td></tr>
-                </tbody>
-            </table>
         </div>
     </div>
 
-    <h2 class="section-title">Студенты и варианты</h2>
-    <div class="flex items-center justify-between gap-4 mb-4">
-        <p class="text-sm text-muted">Уровень по умолчанию — самый простой. Селекты: выдать вариант посложнее или назначить вручную.</p>
-        <label class="text-sm text-muted">Группа:
-            <select id="group-filter" class="input filter-select" onchange="filterGroups(this.value)">
-                <option value="">Все</option>
-                <option th:each="g : ${groups}" th:value="${g.groupName}" th:text="${g.groupName}">—</option>
-            </select>
-        </label>
-    </div>
-    <div class="group-section" th:each="g : ${groups}" th:data-group="${g.groupName}">
-        <h3 class="group-title" th:text="${g.groupName}">Группа</h3>
-        <div class="card card-flush mb-6">
-            <table>
-                <thead><tr><th>Студент</th><th>Логин</th><th>Уровень</th><th>Вариант</th><th>Источник</th><th>Сдача</th><th>Защита</th></tr></thead>
-                <tbody>
-                <tr th:each="s : ${g.students}">
-                    <td th:text="${s.fullName}">—</td>
-                    <td class="font-mono" th:text="${s.studentNo}">—</td>
-                    <td>
-                        <form class="inline-form" th:action="@{/admin/labs/{labId}/set-level(labId=${lab.id})}" method="post">
-                            <input type="hidden" name="studentId" th:value="${s.studentId}">
-                            <select class="input input-sm" name="labLevelId">
-                                <option th:each="level : ${lab.levels}" th:value="${level.id}" th:text="${level.title}"
-                                        th:selected="${level.id == s.levelId}">—</option>
-                            </select>
-                            <button class="btn btn-secondary btn-sm" type="submit">OK</button>
-                        <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                        </form>
-                    </td>
-                    <td>
-                        <form class="inline-form" th:action="@{/admin/labs/{labId}/assign(labId=${lab.id})}" method="post">
-                            <input type="hidden" name="studentId" th:value="${s.studentId}">
-                            <select class="input input-sm" name="variantId">
-                                <optgroup th:each="level : ${lab.levels}" th:label="${level.title}">
-                                    <option th:each="v : ${level.variants}" th:value="${v.id}"
-                                            th:text="|${v.number} — ${v.title}|"
-                                            th:selected="${v.id == s.variantId}">—</option>
-                                </optgroup>
-                            </select>
-                            <button class="btn btn-secondary btn-sm" type="submit">OK</button>
-                        <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                        </form>
-                    </td>
-                    <td><span th:if="${s.variantNumber != null}" class="font-mono" th:text="${s.variantNumber}">—</span></td>
-                    <td><span class="badge" th:classappend="${s.source == 'вручную'} ? 'badge-warn' : 'badge-ok'" th:text="${s.source}">—</span></td>
-                    <td><a th:if="${s.submissionId}" class="badge badge-ok"
-                           th:href="'/admin/submissions/' + ${s.submissionId} + '/download'"
-                           th:text="|попытка ${s.submissionSeq}|">↓</a>
-                        <span th:unless="${s.submissionId}" class="text-muted">не сдано</span></td>
-                    <td>
-                        <span th:if="${s.defenseStatus == null}" class="text-muted">не назначено</span>
-                        <span th:if="${s.defenseStatus == 'waiting' and s.defenseCode != null}" class="badge badge-warn">код <span class="font-mono" th:text="${s.defenseCode}"></span></span>
-                        <span th:if="${s.defenseStatus == 'waiting' and s.defenseCode == null}" class="badge badge-warn">ждёт задания</span>
-                        <span th:if="${s.defenseStatus == 'started'}" class="badge badge-warn">на защите (<span th:text="${s.defenseSecondsLeft}"></span>с)</span>
-                        <span th:if="${s.defenseStatus == 'ready'}" class="badge badge-ok">готов к защите</span>
-                        <form class="inline-form" th:if="${s.defenseSessionId != null}" th:action="'/admin/defenses/' + ${s.defenseSessionId} + '/issue-code'" method="post">
-                            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                            <input type="hidden" name="labId" th:value="${lab.id}">
-                            <button class="btn btn-secondary btn-sm" type="submit" th:if="${s.defenseStatus != 'ready'}">выдать код</button>
-                            <button class="btn btn-secondary btn-sm" type="submit" th:if="${s.defenseStatus == 'ready'}">заново</button>
-                        </form>
-                    </td>
-                </tr>
-                <tr th:if="${#lists.isEmpty(g.students)}"><td colspan="8" class="empty">В группе нет студентов.</td></tr>
-                </tbody>
-            </table>
-        </div>
-    </div>
-
-
-    <h2 class="section-title mt-8">Индивидуальные задания для защиты</h2>
-    <div class="flex flex-wrap gap-2 mb-4">
-        <button class="btn btn-primary" type="button" onclick="openModal('modal-defense-assign')">Выдать / изменить задание</button>
-        <form class="inline-form" th:action="'/admin/labs/' + ${lab.id} + '/defense/import'" method="post" enctype="multipart/form-data">
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            <input class="input input-sm" type="file" name="file" accept=".csv" required>
-            <button class="btn btn-secondary btn-sm" type="submit">Импорт CSV</button>
-        </form>
-    </div>
-    <p class="text-sm text-muted mb-4">CSV: строки «студенческий номер;текст задания»; переносы внутри задания — как \n. Первая строка с заголовком игнорируется.</p>
-
-    <dialog id="modal-defense-assign" class="modal">
+    <dialog id="modal-distribute" class="modal">
         <div class="modal-header">
-            <h2 class="modal-title">Индивидуальное задание</h2>
-            <button class="modal-close" type="button" onclick="closeModal('modal-defense-assign')">✕</button>
+            <h2 class="modal-title">Распределение вариантов</h2>
+            <button class="modal-close" type="button" onclick="closeModal('modal-distribute')">✕</button>
         </div>
         <div class="modal-body">
-            <form class="form-stack" th:action="'/admin/labs/' + ${lab.id} + '/defense/assign'" method="post">
+            <form class="form-stack" th:action="@{/admin/labs/{id}/distribute(id=${lab.id})}" method="post">
                 <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                <div><label class="label">Студент</label>
-                    <select class="input" id="defense-student" name="studentId" required onchange="fillAssignment(this)">
-                        <option value="">— выберите студента —</option>
-                        <optgroup th:each="g : ${groups}" th:label="${g.groupName}">
-                            <option th:each="s : ${g.students}" th:value="${s.studentId}"
-                                    th:attr="data-md=${s.adminAssignmentMd}"
-                                    th:text="${s.fullName}">—</option>
-                        </optgroup>
-                    </select></div>
-                <div><label class="label">Задание (markdown)</label>
-                    <textarea class="input" id="defense-md" name="assignmentMd" rows="8" required></textarea></div>
-                <button class="btn btn-primary" type="submit">Сохранить задание</button>
-            </form>
-        </div>
-    </dialog>
-
-
-    <dialog id="modal-meta" class="modal">
-        <div class="modal-header">
-            <h2 class="modal-title">Правка лабораторной</h2>
-            <button class="modal-close" type="button" onclick="closeModal('modal-meta')">✕</button>
-        </div>
-        <div class="modal-body">
-            <form class="form-stack" th:action="@{/admin/labs/{id}/edit(id=${lab.id})}" method="post">
-                <div><label class="label" for="metaTitle">Название</label>
-                    <input class="input" id="metaTitle" name="title" th:value="${lab.title}" required></div>
-                <div class="grid grid-2">
-                    <div><label class="label" for="metaDeadline">Срок сдачи</label>
-                        <input class="input" id="metaDeadline" name="deadlineAt" type="datetime-local" th:value="${deadlineLocal}"></div>
-                    <div><label class="label" for="metaDefense">Дата защиты</label>
-                        <input class="input" id="metaDefense" name="defenseAt" type="datetime-local" th:value="${defenseLocal}"></div>
-                </div>
-                <div class="grid grid-2">
-                    <div><label class="label" for="metaPoints">Максимум баллов</label>
-                        <input class="input" id="metaPoints" name="pointsMax" type="number" step="0.1" min="0" th:value="${lab.pointsMax}" required></div>
-                    <div><label class="label" for="metaStatus">Статус</label>
-                        <select class="input" id="metaStatus" name="status">
-                            <option value="draft" th:selected="${lab.status == 'draft'}">draft</option>
-                            <option value="published" th:selected="${lab.status == 'published'}">published</option>
-                            <option value="archived" th:selected="${lab.status == 'archived'}">archived</option>
-                        </select></div>
-                </div>
-                <div><label class="label" for="metaDesc">Условие (markdown)</label>
-                    <textarea class="input" id="metaDesc" name="descriptionMd" rows="12" th:text="${lab.descriptionMd}"></textarea></div>
-                <button class="btn btn-primary" type="submit">Сохранить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
-        </div>
-    </dialog>
-
-    <dialog id="modal-add-level" class="modal">
-        <div class="modal-header">
-            <h2 class="modal-title">Добавить уровень</h2>
-            <button class="modal-close" type="button" onclick="closeModal('modal-add-level')">✕</button>
-        </div>
-        <div class="modal-body">
-            <form class="form-stack" th:action="@{/admin/labs/{labId}/levels/save(labId=${lab.id})}" method="post">
-                <div class="grid grid-2">
-                    <div><label class="label" for="lvlCode">Код</label>
-                        <input class="input" id="lvlCode" name="code" placeholder="pro" required></div>
-                    <div><label class="label" for="lvlTitle">Название</label>
-                        <input class="input" id="lvlTitle" name="title" placeholder="Профессиональный" required></div>
-                </div>
-                <button class="btn btn-primary" type="submit">Добавить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
-        </div>
-    </dialog>
-
-    <dialog th:each="level : ${lab.levels}" th:id="|modal-rename-level-${level.id}|" class="modal">
-        <div class="modal-header">
-            <h2 class="modal-title">Переименовать уровень</h2>
-            <button class="modal-close" type="button" th:attr="data-modal=${'modal-rename-level-' + level.id}" onclick="closeModalData(this)">✕</button>
-        </div>
-        <div class="modal-body">
-            <form class="form-stack" th:action="@{/admin/labs/{labId}/levels/save(labId=${lab.id})}" method="post">
-                <input type="hidden" name="levelId" th:value="${level.id}">
-                <input type="hidden" name="code" th:value="${level.code}">
-                <div><label class="label">Название</label>
-                    <input class="input" name="title" th:value="${level.title}" required></div>
-                <button class="btn btn-primary" type="submit">Сохранить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
-        </div>
-    </dialog>
-
-    <dialog th:each="level : ${lab.levels}" th:id="|modal-add-variant-${level.id}|" class="modal">
-        <div class="modal-header">
-            <h2 class="modal-title">Новый вариант — <span th:text="${level.title}">уровень</span></h2>
-            <button class="modal-close" type="button" th:attr="data-modal=${'modal-add-variant-' + level.id}" onclick="closeModalData(this)">✕</button>
-        </div>
-        <div class="modal-body">
-            <form class="form-stack" th:action="@{/admin/labs/{labId}/variants/save(labId=${lab.id})}" method="post">
-                <input type="hidden" name="labLevelId" th:value="${level.id}">
-                <div class="grid grid-2">
-                    <div><label class="label">Номер</label><input class="input" name="number" required></div>
-                    <div><label class="label">Название</label><input class="input" name="title"></div>
-                </div>
-                <div><label class="label">Условие (markdown)</label>
-                    <textarea class="input" name="statementMd" rows="8"></textarea></div>
-                <button class="btn btn-primary" type="submit">Добавить</button>
-            <input type="hidden" name="_csrf" th:value="${csrfToken}">
-            </form>
-        </div>
-    </dialog>
-
-    <th:block th:each="level : ${lab.levels}">
-        <dialog th:each="v : ${level.variants}" th:id="|modal-edit-variant-${v.id}|" class="modal">
-            <div class="modal-header">
-                <h2 class="modal-title">Правка варианта</h2>
-                <button class="modal-close" type="button" th:attr="data-modal=${'modal-edit-variant-' + v.id}" onclick="closeModalData(this)">✕</button>
-            </div>
-            <div class="modal-body">
-                <form class="form-stack" th:action="@{/admin/labs/{labId}/variants/save(labId=${lab.id})}" method="post">
-                    <input type="hidden" name="variantId" th:value="${v.id}">
-                    <input type="hidden" name="labLevelId" th:value="${level.id}">
-                    <div class="grid grid-2">
-                        <div><label class="label">Номер</label><input class="input" name="number" th:value="${v.number}" required></div>
-                        <div><label class="label">Название</label><input class="input" name="title" th:value="${v.title}"></div>
+                <p class="text-sm">
+                    Студенты выбранных групп раздаются одной общей очерёдностью. Каждый получает
+                    вариант <b>со своего уровня</b> (без уровня — с первого уровня лабораторной):
+                    пока внутри уровня есть не выданные никому варианты — они выдаются без повторов,
+                    затем вариант берётся из наименее занятых. Ручные закрепления сохраняются всегда.
+                </p>
+                <div th:if="${!#lists.isEmpty(groups)}">
+                    <label class="label">Группы (ничего не выбрано — все группы)</label>
+                    <div class="check-list">
+                        <label class="tone-label" th:each="g : ${groups}">
+                            <input type="checkbox" name="groupIds" th:value="${g.id}">
+                            <span th:text="${g.name}">—</span>
+                        </label>
                     </div>
-                    <div><label class="label">Условие (markdown)</label>
-                        <textarea class="input" name="statementMd" rows="8" th:text="${v.statementMd}"></textarea></div>
-                    <button class="btn btn-primary" type="submit">Сохранить</button>
-                <input type="hidden" name="_csrf" th:value="${csrfToken}">
-                </form>
-            </div>
-        </dialog>
-    </th:block>
+                </div>
+                <label class="tone-label">
+                    <input type="checkbox" name="force" value="true">
+                    Пересоздать заново (сбросить авто-назначения у выбранных; вручную закреплённые останутся)
+                </label>
+                <button class="btn btn-primary" type="submit">Распределить</button>
+            </form>
+        </div>
+    </dialog>
 
-    <script>
-        function fillAssignment(sel) { document.getElementById("defense-md").value = sel.options[sel.selectedIndex].getAttribute("data-md") || ""; }
-        function filterGroups(name) {
-            document.querySelectorAll('.group-section').forEach(function (el) {
-                el.classList.toggle('hidden', !!name && el.getAttribute('data-group') !== name);
-            });
-        }
-    </script>
+    <script src="/js/admin-lab.js" defer></script>
 </div>
 </body>
-</html>
+</html>