@import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap');

:root {
  /* Paleta CipherSentry Brand v1.0 — alineada con cyber-dark del sitio público */
  --bg:         #08090f;   /* Negro Profundo — brand --bg-primary   */
  --surface:    #0d0e17;   /* Azul Noche     — brand --bg-secondary */
  --surface2:   #12141f;   /* Azul Oscuro    — brand --bg-tertiary  */
  --border:     #1e2235;   /* Borde Oscuro   — brand --border       */
  --text:       #e8eaf0;   /* Blanco Suave   — brand --text         */
  --text-muted: #8891a8;   /* Gris Azulado   — brand --text-muted   */
  --ok:         #22c55e;
  --warning:    #f59e0b;
  --danger:     #ef4444;
  --accent:     #00ff88;   /* Verde Lima     — brand --accent       */
  --accent-2:   #00e5ff;   /* Cian           — brand --accent-2     */
  --font:       'Inter', 'Segoe UI', system-ui, -apple-system, sans-serif;
  --font-mono:  'JetBrains Mono', 'Fira Code', 'Cascadia Code', monospace;
}

* { box-sizing: border-box; margin: 0; padding: 0; }

body {
  background: var(--bg);
  color: var(--text);
  font-family: var(--font);
  font-size: 14px;
  min-height: 100vh;
}

/* ── Header ─────────────────────────────────── */
header {
  display: flex;
  justify-content: space-between;
  align-items: center;
  padding: 16px 24px;
  background: var(--surface);
  border-bottom: 1px solid var(--border);
  flex-wrap: wrap;
  gap: 8px;
}

header h1 {
  font-size: 1.2rem;
  font-weight: 700;
  color: var(--accent);
  letter-spacing: 0.5px;
}

.hostname {
  margin-left: 12px;
  color: var(--text-muted);
  font-size: 0.9rem;
}

.header-right {
  display: flex;
  flex-direction: column;
  align-items: flex-end;
  gap: 2px;
}

.uptime { color: var(--ok); font-size: 0.85rem; }
.last-updated { color: var(--text-muted); font-size: 0.75rem; }

/* ── Main grid ───────────────────────────────── */
main {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(300px, 1fr));
  gap: 16px;
  padding: 20px 24px;
  max-width: 1400px;
  margin: 0 auto;
}

/* ── Cards ───────────────────────────────────── */
.card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 12px;
  padding: 20px;
  transition: border-color 0.3s;
}

.card--wide {
  grid-column: 1 / -1;
}

.card--alert {
  border-color: var(--danger);
  box-shadow: 0 0 0 1px var(--danger);
}

.card h2 {
  font-size: 0.75rem;
  text-transform: uppercase;
  letter-spacing: 1.5px;
  color: var(--text-muted);
  margin-bottom: 14px;
}

.card h3 {
  font-size: 0.75rem;
  text-transform: uppercase;
  letter-spacing: 1px;
  color: var(--text-muted);
  margin: 14px 0 8px;
}

/* ── Metric big number ───────────────────────── */
.metric-big {
  font-size: 2.8rem;
  font-weight: 700;
  line-height: 1;
  margin-bottom: 10px;
}

.unit {
  font-size: 1.2rem;
  color: var(--text-muted);
  margin-left: 2px;
}

/* ── Bars ────────────────────────────────────── */
.bar-container {
  background: var(--surface2);
  border-radius: 4px;
  height: 8px;
  overflow: hidden;
  margin-bottom: 10px;
}

.bar-container--small {
  height: 5px;
}

.bar {
  height: 100%;
  border-radius: 4px;
  transition: width 0.6s ease, background-color 0.3s;
}

.bar--ok      { background: var(--ok); }
.bar--warning { background: var(--warning); }
.bar--danger  { background: var(--danger); }

/* ── CPU cores ───────────────────────────────── */
.cpu-cores {
  display: flex;
  align-items: flex-end;
  gap: 4px;
  height: 50px;
  margin: 12px 0 8px;
}

.core-bar-wrap {
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: flex-end;
  flex: 1;
  height: 100%;
  gap: 3px;
}

.core-bar {
  width: 100%;
  border-radius: 2px 2px 0 0;
  min-height: 2px;
  transition: height 0.4s ease;
}

.core-bar-wrap span {
  font-size: 0.6rem;
  color: var(--text-muted);
}

/* ── Load avg ────────────────────────────────── */
.load-avg {
  font-size: 0.8rem;
  color: var(--text-muted);
  margin-top: 6px;
}

.load-avg span { color: var(--text); font-weight: 600; }

/* ── Memory details ──────────────────────────── */
.mem-details {
  display: flex;
  gap: 16px;
  font-size: 0.8rem;
  color: var(--text-muted);
  flex-wrap: wrap;
}

.mem-details b { color: var(--text); }

/* ── Disk ────────────────────────────────────── */
.disk-item { margin-bottom: 16px; }
.disk-item:last-child { margin-bottom: 0; }

.disk-header {
  display: flex;
  justify-content: space-between;
  margin-bottom: 6px;
}

.disk-mount { font-weight: 600; font-size: 0.9rem; }
.disk-device { font-size: 0.75rem; color: var(--text-muted); }

.disk-stats {
  display: flex;
  justify-content: space-between;
  font-size: 0.75rem;
  color: var(--text-muted);
  margin-top: 4px;
}

/* ── Network ─────────────────────────────────── */
.net-grid {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 12px;
}

.net-item {
  background: var(--surface2);
  border-radius: 8px;
  padding: 12px;
  display: flex;
  flex-direction: column;
  gap: 6px;
}

.net-label { font-size: 0.75rem; color: var(--text-muted); }
.net-value { font-size: 1.1rem; font-weight: 600; }

/* ── Processes tables ────────────────────────── */
.tables-row {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 24px;
}

table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.82rem;
}

thead th {
  text-align: left;
  padding: 6px 8px;
  color: var(--text-muted);
  border-bottom: 1px solid var(--border);
  font-weight: 600;
  font-size: 0.72rem;
  text-transform: uppercase;
  letter-spacing: 0.8px;
}

tbody tr:hover { background: var(--surface2); }

tbody td {
  padding: 6px 8px;
  border-bottom: 1px solid var(--border);
  white-space: nowrap;
  overflow: hidden;
  text-overflow: ellipsis;
  max-width: 140px;
}

/* ── Responsive ──────────────────────────────── */
@media (max-width: 640px) {
  main { padding: 12px; gap: 12px; }
  .tables-row { grid-template-columns: 1fr; }
  .card--wide { grid-column: 1; }
  .metric-big { font-size: 2rem; }
}

/* ── Sidebar ─────────────────────────────────── */
:root {
  --sb-w: 220px;
  --sb-cw: 52px;
}

.sb {
  position: fixed;
  left: 0; top: 0; bottom: 0;
  width: var(--sb-w);
  background: #080a11;
  border-right: 1px solid var(--border);
  display: flex;
  flex-direction: column;
  z-index: 200;
  overflow: hidden;
}

/* Las transiciones del sidebar se activan SOLO tras la primera pintura (clase
   `sb-anim`, añadida por nav.js con requestAnimationFrame). Así no hay animación
   al navegar entre páginas; solo al colapsar/expandir el menú. */
body.sb-anim .sb { transition: width 0.22s ease; }

body.has-sidebar { padding-left: var(--sb-w); }
body.sb-anim.has-sidebar { transition: padding-left 0.22s ease; }
body.has-sidebar.sb-collapsed { padding-left: var(--sb-cw); }

/* Barra de impersonación (admin viendo como cliente) */
.impersonation-bar {
  position: fixed; top: 0; left: 0; right: 0; z-index: 3000;
  background: #7c3aed; color: #fff; padding: 7px 14px;
  font-size: 0.85rem; display: flex; align-items: center; justify-content: center; gap: 14px;
}
.impersonation-bar button {
  background: #fff; color: #7c3aed; border: none; border-radius: 6px;
  padding: 4px 11px; font-weight: 700; cursor: pointer;
}
.impersonation-bar button:hover { opacity: .9; }
body.impersonating { padding-top: 38px; }
body.impersonating .sb { top: 38px; }

/* head */
.sb__head {
  display: flex;
  align-items: center;
  justify-content: space-between;
  padding: 14px 10px 10px 12px;
  border-bottom: 1px solid var(--border);
  flex-shrink: 0;
  min-height: 52px;
}
.sb__brand {
  display: flex;
  align-items: center;
  gap: 8px;
  font-size: 0.85rem;
  font-weight: 700;
  color: var(--accent);
  text-decoration: none;
  white-space: nowrap;
  overflow: hidden;
}
.sb__toggle {
  background: none;
  border: 1px solid var(--border);
  color: var(--text-muted);
  border-radius: 6px;
  width: 24px;
  height: 24px;
  font-size: 1rem;
  cursor: pointer;
  flex-shrink: 0;
  display: flex;
  align-items: center;
  justify-content: center;
  transition: color 0.15s, border-color 0.15s;
  padding: 0;
}
.sb__toggle:hover { color: var(--text); border-color: var(--accent); }

/* nav */
.sb__nav {
  flex: 1;
  overflow-y: auto;
  overflow-x: hidden;
  padding: 10px 0;
  scrollbar-width: thin;
  scrollbar-color: var(--border) transparent;
}
.sb__section { margin-bottom: 6px; }
.sb__section-label {
  display: block;
  font-size: 0.6rem;
  text-transform: uppercase;
  letter-spacing: 1.2px;
  color: var(--text-muted);
  padding: 8px 14px 4px;
  white-space: nowrap;
  overflow: hidden;
  opacity: 1;
  transition: opacity 0.15s;
}
.sb-item {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 8px 12px;
  margin: 1px 6px;
  border-radius: 8px;
  text-decoration: none;
  color: var(--text-muted);
  font-size: 0.84rem;
  white-space: nowrap;
  transition: background 0.13s, color 0.13s;
}
.sb-item:hover { background: var(--surface2); color: var(--text); }
.sb-item--active { background: var(--surface2); color: var(--text); font-weight: 600; }
/* Sub-secciones de la Ayuda (bajo «❓ Ayuda») */
.sb-subnav { display: flex; flex-direction: column; margin: 2px 0 6px; }
.sb-subitem { display: block; padding: 5px 12px 5px 40px; font-size: 0.8rem; color: var(--text-muted);
  text-decoration: none; border-left: 2px solid transparent; }
.sb-subitem:hover { color: var(--text); background: var(--surface2); }
.sb-subitem.active { color: var(--accent); border-left-color: var(--accent); }
.sb--collapsed .sb-subnav { display: none; }
.sb-icon { font-size: 1rem; flex-shrink: 0; width: 20px; text-align: center; color: var(--text-muted); }
.sb-icon svg { width: 20px; height: 20px; display: block; margin: 0 auto; }
.sb-item:hover .sb-icon, .sb-item--active .sb-icon { color: var(--accent); }
.sb__brand .sb-icon, .sb-mobile-brand .sb-icon { color: var(--accent); }
.sb-mobile-brand .sb-icon { display: inline-block; vertical-align: -4px; }
.sb-label { overflow: hidden; white-space: nowrap; }

/* footer */
.sb__footer {
  border-top: 1px solid var(--border);
  padding: 10px;
  display: flex;
  align-items: center;
  gap: 8px;
  flex-shrink: 0;
  min-height: 56px;
  overflow: hidden;
}
.sb__user {
  display: flex;
  align-items: center;
  gap: 8px;
  flex: 1;
  min-width: 0;
  overflow: hidden;
}
.sb__avatar {
  width: 30px;
  height: 30px;
  border-radius: 8px;
  background: var(--accent);
  color: #fff;
  font-size: 0.85rem;
  font-weight: 700;
  display: flex;
  align-items: center;
  justify-content: center;
  flex-shrink: 0;
}
.sb__user-text { min-width: 0; overflow: hidden; }
.sb__user-name { font-size: 0.82rem; font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
.sb__user-sub  { font-size: 0.7rem; color: var(--text-muted); white-space: nowrap; }
.sb__logout {
  background: none;
  border: 1px solid var(--border);
  color: var(--text-muted);
  border-radius: 6px;
  width: 28px;
  height: 28px;
  cursor: pointer;
  font-size: 0.9rem;
  display: flex;
  align-items: center;
  justify-content: center;
  flex-shrink: 0;
  transition: color 0.15s, border-color 0.15s;
}
.sb__logout:hover { color: var(--danger); border-color: var(--danger); }

/* collapsed state */
.sb--collapsed { width: var(--sb-cw); }
.sb--collapsed .sb-label,
.sb--collapsed .sb__section-label,
.sb--collapsed .sb__brand .sb-label,
.sb--collapsed .sb__user-text,
.sb--collapsed .sb__logout { display: none; }
.sb--collapsed .sb__brand { justify-content: center; }
.sb--collapsed .sb-item { justify-content: center; padding: 8px; margin: 1px 4px; }
.sb--collapsed .sb__head { justify-content: center; padding: 10px 4px; flex-direction: column; gap: 6px; }
.sb--collapsed .sb__footer { justify-content: center; }
.sb--collapsed .sb__user { flex: 0; }

/* Expand button shown only when collapsed */
.sb__expand {
  display: none;
  background: none;
  border: none;
  color: var(--text-muted);
  font-size: 1.1rem;
  cursor: pointer;
  padding: 4px;
  border-radius: 6px;
  transition: color 0.15s;
}
.sb--collapsed .sb__expand { display: flex; align-items: center; justify-content: center; }
.sb--collapsed .sb__expand:hover { color: var(--text); }

/* overlay & mobile bar */
.sb-overlay {
  display: none;
  position: fixed;
  inset: 0;
  background: rgba(0,0,0,0.55);
  z-index: 199;
}
.sb-overlay.show { display: block; }

.sb-mobile-bar {
  display: none;
  position: fixed;
  top: 0; left: 0; right: 0;
  height: 48px;
  background: #080a11;
  border-bottom: 1px solid var(--border);
  align-items: center;
  padding: 0 14px;
  gap: 12px;
  z-index: 198;
}
.sb-burger {
  background: none;
  border: none;
  color: var(--text-muted);
  font-size: 1.2rem;
  cursor: pointer;
  padding: 4px;
}
.sb-mobile-brand {
  font-size: 0.9rem;
  font-weight: 700;
  color: var(--accent);
  text-decoration: none;
}

@media (max-width: 768px) {
  .sb {
    transform: translateX(-100%);
    width: var(--sb-w) !important;
    transition: transform 0.22s ease;
  }
  .sb--mobile-open { transform: translateX(0) !important; }
  body.has-sidebar { padding-left: 0 !important; padding-top: 48px; }
  .sb-mobile-bar { display: flex; }
}

/* Collapsed expand click: clicking the collapsed sidebar expands it */
.sb--collapsed:not(.sb--mobile-open) { cursor: pointer; }

/* portal section separator */
.sb__section--portal { margin-top: 4px; padding-top: 4px; border-top: 1px solid var(--border); }

/* ── Mocked badge ────────────────────────────── */
.mocked-badge {
  display: inline-block;
  font-size: 0.6rem;
  padding: 2px 7px;
  border-radius: 4px;
  background: rgba(99,102,241,0.12);
  border: 1px solid rgba(99,102,241,0.25);
  color: var(--accent);
  text-transform: uppercase;
  letter-spacing: 0.6px;
  vertical-align: middle;
  margin-left: 8px;
  font-weight: 600;
}

/* ── Authlog page layout ─────────────────────── */
.page-header {
  display: flex;
  justify-content: space-between;
  align-items: center;
  padding: 14px 24px;
  background: var(--surface);
  border-bottom: 1px solid var(--border);
  flex-wrap: wrap;
  gap: 8px;
}
.page-header h1 { font-size: 1.1rem; font-weight: 700; color: var(--accent); }
.page-header .sub { font-size: 0.8rem; color: var(--text-muted); margin-top: 2px; }
.page-header-right { display: flex; align-items: center; gap: 12px; }

.btn {
  background: var(--surface2);
  border: 1px solid var(--border);
  color: var(--text);
  padding: 6px 14px;
  border-radius: 7px;
  font-size: 0.8rem;
  cursor: pointer;
  transition: border-color 0.15s;
}
.btn:hover { border-color: var(--accent); }
.btn--accent { background: var(--accent); border-color: var(--accent); color: #fff; }

/* ── Tab bar ─────────────────────────────────── */
.tab-bar {
  display: flex;
  gap: 4px;
  padding: 12px 24px 0;
  border-bottom: 1px solid var(--border);
  background: var(--surface);
  position: relative;
  z-index: 10;
}
.tab-btn {
  background: none;
  border: none;
  border-bottom: 2px solid transparent;
  color: var(--text-muted);
  font-size: 0.85rem;
  padding: 8px 16px;
  cursor: pointer;
  margin-bottom: -1px;
  transition: color 0.15s, border-color 0.15s;
  display: inline-flex; align-items: center; gap: 7px;
}
.tab-btn:hover { color: var(--text); }
.tab-ic { display: inline-flex; }
.tab-ic svg { display: block; }
.tab-btn.active { color: var(--accent); border-bottom-color: var(--accent); }

.tab-content { display: none; padding: 20px 24px; max-width: 1400px; margin: 0 auto; }
.tab-content.active { display: block; }

/* ── Period bar ──────────────────────────────── */
.period-bar {
  display: flex;
  gap: 4px;
  margin-bottom: 20px;
  flex-wrap: wrap;
}
.period-btn {
  background: var(--surface);
  border: 1px solid var(--border);
  color: var(--text-muted);
  padding: 5px 14px;
  border-radius: 6px;
  font-size: 0.78rem;
  cursor: pointer;
  transition: all 0.15s;
}
.period-btn:hover { border-color: var(--accent); color: var(--text); }
.period-btn.active { background: var(--accent); border-color: var(--accent); color: #fff; }
.period-btn.estimated { opacity: 0.75; }
.period-btn.estimated::after { content: " ~"; font-size: 0.7em; }

/* ── Stats cards ─────────────────────────────── */
.stats-section { margin-bottom: 24px; }
.section-header { display: flex; align-items: center; margin-bottom: 12px; }
.section-header h2 {
  font-size: 0.72rem;
  text-transform: uppercase;
  letter-spacing: 1.5px;
  color: var(--text-muted);
}
.stats-grid {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));
  gap: 12px;
}
.stat-card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  padding: 16px;
}
.stat-card__label { font-size: 0.7rem; color: var(--text-muted); text-transform: uppercase; letter-spacing: 1px; margin-bottom: 6px; }
.stat-card__value { font-size: 2rem; font-weight: 700; line-height: 1; }
.stat-card__delta { font-size: 0.72rem; margin-top: 4px; }
.stat-card__delta.up { color: var(--danger); }
.stat-card__delta.down { color: var(--ok); }
.stat-card--danger { border-color: rgba(239,68,68,0.4); }
.stat-card--ok    { border-color: rgba(34,197,94,0.3); }
.stat-card--warn  { border-color: rgba(245,158,11,0.3); }

/* ── Chart ───────────────────────────────────── */
.chart-section { margin-bottom: 24px; }
.chart-wrap {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  padding: 16px;
}
.chart-legend {
  display: flex;
  gap: 16px;
  flex-wrap: wrap;
  margin-top: 10px;
}
.legend-item { display: flex; align-items: center; gap: 5px; font-size: 0.75rem; color: var(--text-muted); }
.legend-dot { width: 8px; height: 8px; border-radius: 2px; flex-shrink: 0; }

/* ── Top lists ───────────────────────────────── */
.top-lists {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
  gap: 16px;
  margin-bottom: 24px;
}
.top-list-card {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  padding: 16px;
}
.top-list-card h3 { font-size: 0.72rem; text-transform: uppercase; letter-spacing: 1.5px; color: var(--text-muted); margin-bottom: 12px; }
.top-list-item { display: flex; align-items: center; gap: 8px; margin-bottom: 8px; font-size: 0.82rem; }
.top-list-item__label { flex: 0 0 120px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.top-list-bar-wrap { flex: 1; background: var(--surface2); border-radius: 3px; height: 6px; overflow: hidden; }
.top-list-bar { height: 100%; border-radius: 3px; background: var(--accent); }
.top-list-item__count { flex: 0 0 40px; text-align: right; color: var(--text-muted); font-size: 0.75rem; }

/* ── Map section ─────────────────────────────── */
.map-section { margin-bottom: 24px; }
.map-wrap {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  overflow: hidden;
  height: 380px;
}
#geo-map { height: 100%; }

/* ── IP table ────────────────────────────────── */
.ip-filter-bar {
  display: flex;
  gap: 8px;
  margin-bottom: 12px;
  flex-wrap: wrap;
}
.ip-table-wrap {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  overflow: auto;
  margin-bottom: 16px;
}
.ip-table-wrap table { min-width: 800px; }
.threat-badge {
  display: inline-block;
  padding: 2px 8px;
  border-radius: 4px;
  font-size: 0.7rem;
  font-weight: 600;
  text-transform: uppercase;
}
.threat-high   { background: rgba(239,68,68,0.15);  color: #ef4444; }
.threat-medium { background: rgba(245,158,11,0.15); color: #f59e0b; }
.threat-low    { background: rgba(34,197,94,0.12);  color: #22c55e; }
.threat-none   { background: rgba(100,116,139,0.15);color: #64748b; }
tr.selected-row td { background: rgba(99,102,241,0.08); }

/* ── IP detail panel ─────────────────────────── */
.ip-detail {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  padding: 20px;
  margin-bottom: 24px;
}
.ip-detail-header { display: flex; justify-content: space-between; align-items: flex-start; margin-bottom: 16px; }
.ip-detail-header h3 { font-size: 1rem; font-weight: 700; }
.ip-detail-meta { font-size: 0.8rem; color: var(--text-muted); margin-top: 3px; }
.ip-detail-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 20px; }
.ip-detail-section h4 { font-size: 0.7rem; text-transform: uppercase; letter-spacing: 1px; color: var(--text-muted); margin-bottom: 10px; }
.sparkline { font-family: var(--font-mono); font-size: 0.85rem; letter-spacing: 1px; color: var(--accent); word-break: break-all; }
.cred-item { display: flex; align-items: center; gap: 8px; margin-bottom: 6px; font-size: 0.8rem; }
.cred-bar-wrap { flex: 1; background: var(--surface2); border-radius: 3px; height: 5px; }
.cred-bar { height: 100%; border-radius: 3px; background: var(--danger); }
.detail-close { background: none; border: none; color: var(--text-muted); font-size: 1.2rem; cursor: pointer; padding: 0 4px; }
.detail-close:hover { color: var(--text); }

/* ── Explorer / log table ────────────────────── */
.filter-bar {
  display: flex;
  gap: 8px;
  margin-bottom: 12px;
  flex-wrap: wrap;
  align-items: center;
}
.filter-input {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 7px;
  color: var(--text);
  padding: 6px 12px;
  font-size: 0.82rem;
  outline: none;
  transition: border-color 0.15s;
}
.filter-input:focus { border-color: var(--accent); }
.filter-input--wide { flex: 1; min-width: 160px; }
/* Buscador con icono de línea (Sprint 007) */
.search-wrap { position: relative; flex: 1; min-width: 160px; display: flex; }
.search-wrap .filter-input { width: 100%; padding-left: 32px; }
.search-ic { position: absolute; left: 11px; top: 50%; transform: translateY(-50%); color: var(--text-muted); pointer-events: none; }

.log-table-wrap {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 10px;
  overflow: auto;
  position: relative;
  margin-bottom: 12px;
}
.log-table-wrap table { min-width: 900px; }

.event-badge {
  display: inline-flex;
  align-items: center;
  gap: 4px;
  padding: 2px 8px;
  border-radius: 4px;
  font-size: 0.72rem;
  font-weight: 600;
}
.ev-failed_login  { background: rgba(239,68,68,0.12);  color: #ef4444; }
.ev-success_login { background: rgba(34,197,94,0.1);   color: #22c55e; }
.ev-sudo          { background: rgba(249,115,22,0.12); color: #f97316; }
.ev-invalid_user  { background: rgba(245,158,11,0.12); color: #f59e0b; }
.ev-disconnect    { background: rgba(99,102,241,0.12); color: #6366f1; }
.ev-other         { background: rgba(100,116,139,0.1); color: #64748b; }

.new-lines-badge {
  position: sticky;
  top: 8px;
  left: 50%;
  transform: translateX(-50%);
  display: inline-block;
  background: var(--accent);
  color: #fff;
  padding: 4px 14px;
  border-radius: 20px;
  font-size: 0.75rem;
  cursor: pointer;
  z-index: 10;
  box-shadow: 0 2px 8px rgba(0,0,0,0.4);
  margin: 8px auto;
  width: fit-content;
}
.new-lines-badge-wrap { text-align: center; }

.pagination {
  display: flex;
  align-items: center;
  justify-content: space-between;
  padding: 8px 0;
  font-size: 0.8rem;
  color: var(--text-muted);
}
.pagination-btns { display: flex; gap: 8px; }

mark { background: rgba(245,158,11,0.25); color: var(--text); border-radius: 2px; padding: 0 2px; }

.text-muted { color: var(--text-muted); }
.hidden { display: none !important; }

@media (max-width: 768px) {
  .top-lists { grid-template-columns: 1fr; }
  .ip-detail-grid { grid-template-columns: 1fr; }
  .tab-content { padding: 14px; }
}

/* ── IP Analysis page ────────────────────────── */
#ipa-root {
  padding: 20px 24px;
  max-width: 1400px;
  margin: 0 auto;
  display: flex;
  flex-direction: column;
  gap: 16px;
}

.ipa-section {
  background: var(--surface);
  border: 1px solid var(--border);
  border-radius: 12px;
  padding: 20px;
}

.ipa-two-col {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 16px;
}

/* Header */
.ipa-header-grid {
  display: grid;
  grid-template-columns: 1fr auto auto;
  gap: 24px;
  align-items: start;
}

.ipa-ip-address {
  font-size: 2rem;
  font-weight: 700;
  font-family: var(--font-mono);
  letter-spacing: -0.5px;
  margin-bottom: 6px;
}

.ipa-geo-row {
  font-size: 1rem;
  margin-bottom: 10px;
}

.ipa-geo-detail {
  display: flex;
  flex-wrap: wrap;
  gap: 14px;
  font-size: 0.8rem;
  color: var(--text-muted);
  margin-bottom: 12px;
}

.ipa-seen-row {
  display: flex;
  gap: 24px;
  font-size: 0.8rem;
  color: var(--text-muted);
  flex-wrap: wrap;
}
.ipa-seen-row b { color: var(--text); }

.ipa-header-stats {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 10px;
  min-width: 210px;
}

.ipa-mini-stat {
  background: var(--surface2);
  border-radius: 8px;
  padding: 10px 14px;
  text-align: center;
}
.ipa-mini-stat__value { font-size: 1.5rem; font-weight: 700; line-height: 1; }
.ipa-mini-stat__label { font-size: 0.62rem; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.8px; margin-top: 4px; }

.ipa-gauge-wrap { min-width: 140px; }

/* Sources */
.ipa-sources-grid {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(190px, 1fr));
  gap: 12px;
}

.ipa-source-card {
  background: var(--surface2);
  border: 1px solid var(--border);
  border-radius: 10px;
  padding: 14px;
}
.ipa-source-name { font-weight: 600; font-size: 0.9rem; margin-bottom: 4px; }
.ipa-source-path { font-size: 0.68rem; color: var(--text-muted); font-family: var(--font-mono); margin-bottom: 8px; word-break: break-all; }
.ipa-source-count { font-size: 1.6rem; font-weight: 700; }
.ipa-source-stats { display: flex; align-items: baseline; gap: 5px; margin-bottom: 4px; }

/* Threat intel */
.ipa-ti-score-wrap { }
.ipa-ti-bar-label { display: flex; justify-content: space-between; margin-bottom: 6px; font-size: 0.8rem; }
.ipa-ti-bar-bg { background: var(--surface2); border-radius: 4px; height: 10px; overflow: hidden; }
.ipa-ti-bar-fill { height: 100%; border-radius: 4px; transition: width 0.6s ease; }

.ipa-cat-badge {
  background: rgba(239,68,68,0.12);
  color: #ef4444;
  border: 1px solid rgba(239,68,68,0.2);
  padding: 3px 10px;
  border-radius: 20px;
  font-size: 0.72rem;
}

.ipa-bl-badge {
  background: rgba(239,68,68,0.08);
  color: var(--danger);
  border: 1px solid rgba(239,68,68,0.15);
  padding: 3px 10px;
  border-radius: 6px;
  font-size: 0.72rem;
}

/* WHOIS */
.ipa-whois-block {
  background: var(--surface2);
  border-radius: 8px;
  padding: 14px 16px;
  font-family: var(--font-mono);
  font-size: 0.8rem;
}
.ipa-whois-row { display: flex; gap: 8px; margin-bottom: 5px; line-height: 1.4; }
.ipa-whois-key { color: var(--accent); min-width: 80px; flex-shrink: 0; }
.ipa-whois-val { color: var(--text); word-break: break-word; }

/* Timeline */
.ipa-timeline { max-height: 460px; overflow-y: auto; padding-right: 4px; }
.ipa-tl-item { display: flex; gap: 10px; margin-bottom: 8px; align-items: flex-start; }
.ipa-tl-dot { width: 10px; height: 10px; border-radius: 50%; flex-shrink: 0; margin-top: 5px; }
.ipa-tl-content { display: flex; flex-wrap: wrap; gap: 5px; align-items: center; }
.ipa-tl-time { color: var(--text-muted); font-family: var(--font-mono); font-size: 0.72rem; }
.ipa-tl-cred { font-size: 0.75rem; color: var(--text-muted); }

/* Credentials */
.ipa-creds-list { max-height: 460px; overflow-y: auto; }
.ipa-cred-row { margin-bottom: 9px; }
.ipa-cred-header { display: flex; align-items: center; gap: 8px; margin-bottom: 3px; font-size: 0.82rem; }
.ipa-cred-user { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.ipa-cred-success { background: rgba(34,197,94,0.12); color: var(--ok); border: 1px solid rgba(34,197,94,0.2); padding: 1px 7px; border-radius: 4px; font-size: 0.65rem; font-weight: 700; flex-shrink: 0; }
.ipa-cred-count { color: var(--text-muted); font-size: 0.75rem; flex-shrink: 0; }

/* Analyze link in IP table */
.ip-analyze-link {
  color: var(--accent);
  text-decoration: none;
  font-size: 0.8rem;
  margin-left: 5px;
  opacity: 0.7;
  transition: opacity 0.15s;
}
.ip-analyze-link:hover { opacity: 1; }

@media (max-width: 900px) {
  .ipa-header-grid { grid-template-columns: 1fr; }
  .ipa-two-col { grid-template-columns: 1fr; }
  .ipa-header-stats { grid-template-columns: repeat(4, 1fr); }
  #ipa-root { padding: 14px; }
}

/* ── Port source badges ──────────────────────────── */
.port-badge {
  display: inline-block;
  padding: 1px 5px;
  border-radius: 4px;
  font-size: 0.65rem;
  font-weight: 700;
  margin-left: 4px;
  vertical-align: middle;
  line-height: 1.4;
}
.port-badge.p20 {
  background: rgba(99,102,241,0.15);
  color: #818cf8;
  border: 1px solid rgba(99,102,241,0.3);
}
.port-badge.p22 {
  background: rgba(245,158,11,0.15);
  color: #f59e0b;
  border: 1px solid rgba(245,158,11,0.3);
}

/* ── Stats source section header ────────────────── */
.stats-source-header {
  grid-column: 1 / -1;
  display: flex;
  align-items: center;
  gap: 6px;
  font-size: 0.72rem;
  color: var(--text-muted);
  text-transform: uppercase;
  letter-spacing: 0.8px;
  padding-bottom: 6px;
  border-bottom: 1px solid var(--border);
  margin-top: 8px;
}
.stats-source-header:first-child { margin-top: 0; }

/* ── TCP Probe badge ────────────────────────────── */
.badge--tcp-probe {
  font-size: 0.62rem;
  font-weight: 700;
  color: #64748b;
  background: rgba(100,116,139,0.12);
  border: 1px solid rgba(100,116,139,0.3);
  border-radius: 3px;
  padding: 1px 5px;
  margin-left: 4px;
  vertical-align: middle;
  letter-spacing: 0.3px;
}

/* ── Clickable IP links ─────────────────────────── */
.ip-link {
  color: var(--text);
  text-decoration: none;
  border-bottom: 1px dashed rgba(99,102,241,0.4);
  transition: color 0.15s, border-color 0.15s;
}
.ip-link:hover {
  color: var(--accent);
  border-bottom-color: var(--accent);
}