/* Crumble SOC Lab - a simulated Wazuh dashboard for teaching.
 * Own styling, loosely inspired by OpenSearch Dashboards / OUI (Apache-2.0). No Wazuh assets. */
:root {
  --bg: #f5f7fa;
  --panel: #ffffff;
  --panel-2: #f1f4f9;
  --panel-3: #e9edf3;
  --text: #343741;
  --text-2: #69707d;
  --text-3: #98a2b3;
  --border: #d3dae6;
  --border-2: #e3e8f2;
  --primary: #0b64dd;
  --primary-2: #e6f0fc;
  --primary-text: #0057c2;
  --accent: #b6552a;          /* crumble brown */
  --success: #017d73;
  --success-2: #e0f2f0;
  --warning: #b58100;
  --warning-2: #fff4d6;
  --danger: #bd271e;
  --danger-2: #fbe9e7;
  --header: #1d1e24;
  --header-text: #e8eaef;
  --term-bg: #101215;
  --term-fg: #d7dbe0;
  --term-dim: #8a9099;
  --term-ok: #7fd69a;
  --term-warn: #f2c14e;
  --term-err: #ff7b72;
  --term-prompt: #79b8ff;
  --mono: ui-monospace, "SFMono-Regular", "JetBrains Mono", Menlo, Consolas, "Liberation Mono", monospace;
  --sans: "Inter", system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
  --r: 6px;
  --shadow: 0 1px 2px rgba(0,0,0,.06), 0 2px 6px rgba(0,0,0,.05);
  --shadow-2: 0 6px 24px rgba(0,0,0,.18);
  --dock-h: 38vh;
  color-scheme: light;
}
:root[data-theme="dark"] {
  --bg: #15171c;
  --panel: #1d1f25;
  --panel-2: #23262e;
  --panel-3: #2b2f38;
  --text: #dfe5ef;
  --text-2: #a7afbe;
  --text-3: #7a8396;
  --border: #343741;
  --border-2: #2b2e36;
  --primary: #4d9bff;
  --primary-2: #1c2a40;
  --primary-text: #77b0ff;
  --success: #3ecfb8;
  --success-2: #133a35;
  --warning: #f2c14e;
  --warning-2: #3b3115;
  --danger: #ff7b72;
  --danger-2: #3d1f1d;
  --header: #0e0f12;
  color-scheme: dark;
}
* { box-sizing: border-box; }
html, body { height: 100%; }
body { margin: 0; background: var(--bg); color: var(--text); font: 14px/1.45 var(--sans); }
a { color: var(--primary-text); text-decoration: none; }
a:hover { text-decoration: underline; }
button, input, select, textarea { font: inherit; color: inherit; }
code, .mono { font-family: var(--mono); font-size: 12.5px; }
.muted { color: var(--text-2); }
.small { font-size: 12px; }
.hidden { display: none !important; }
.nowrap { white-space: nowrap; }
.grow { flex: 1 1 auto; min-width: 0; }
.row { display: flex; align-items: center; gap: 8px; }
.col { display: flex; flex-direction: column; gap: 8px; }
.wrap { flex-wrap: wrap; }
.sp { flex: 1 1 auto; }

/* ------------------------------------------------------------ buttons & inputs */
.btn { display: inline-flex; align-items: center; gap: 6px; height: 32px; padding: 0 12px; border-radius: var(--r);
  border: 1px solid var(--border); background: var(--panel); color: var(--text); cursor: pointer; white-space: nowrap;
  font-weight: 500; font-size: 13.5px; }
.btn:hover { background: var(--panel-2); text-decoration: none; }
.btn:disabled { opacity: .5; cursor: default; }
.btn.primary { background: var(--primary); border-color: var(--primary); color: #fff; }
.btn.primary:hover { filter: brightness(1.07); }
.btn.danger { color: var(--danger); border-color: var(--danger); }
.btn.ghost { border-color: transparent; background: transparent; color: var(--primary-text); }
.btn.ghost:hover { background: var(--primary-2); }
.btn.sm { height: 26px; padding: 0 8px; font-size: 12.5px; }
.btn.icon { width: 32px; padding: 0; justify-content: center; }
.btn.sm.icon { width: 26px; }
.input, select.input, textarea.input { height: 32px; padding: 0 10px; border: 1px solid var(--border); border-radius: var(--r);
  background: var(--panel); color: var(--text); min-width: 0; }
textarea.input { height: auto; padding: 8px 10px; font-family: var(--mono); font-size: 12.5px; }
.input:focus, textarea:focus, select:focus { outline: 2px solid var(--primary); outline-offset: -1px; }
label.fld { display: flex; flex-direction: column; gap: 4px; font-size: 12.5px; font-weight: 600; color: var(--text-2); }
.switch { display: inline-flex; gap: 8px; align-items: center; cursor: pointer; }
.badge { display: inline-flex; align-items: center; height: 20px; padding: 0 7px; border-radius: 10px; font-size: 11.5px;
  font-weight: 600; background: var(--panel-3); color: var(--text); white-space: nowrap; }
.badge.ok { background: var(--success-2); color: var(--success); }
.badge.warn { background: var(--warning-2); color: var(--warning); }
.badge.err { background: var(--danger-2); color: var(--danger); }
.badge.info { background: var(--primary-2); color: var(--primary-text); }
.dot { display: inline-block; width: 8px; height: 8px; border-radius: 50%; background: var(--text-3); }
.dot.ok { background: #20b26c; } .dot.err { background: var(--danger); } .dot.warn { background: #e7a400; }

/* ------------------------------------------------------------ header */
#hdr { position: fixed; inset: 0 0 auto 0; height: 48px; background: var(--header); color: var(--header-text);
  display: flex; align-items: center; gap: 10px; padding: 0 10px; z-index: 50; }
#hdr .btn.icon { border: 0; background: transparent; color: var(--header-text); }
#hdr .btn.icon:hover { background: rgba(255,255,255,.08); }
.logo { display: flex; align-items: center; gap: 8px; font-weight: 700; letter-spacing: .2px; color: #fff; }
.logo svg { width: 26px; height: 26px; }
.logo small { font-weight: 500; color: #9aa3b2; font-size: 11.5px; }
#crumbs { display: flex; align-items: center; gap: 6px; font-size: 13.5px; color: #c9cfda; min-width: 0; overflow: hidden; white-space: nowrap; }
#crumbs a { color: #c9cfda; }
#crumbs .sep { color: #6c7385; }
#clockbar { display: flex; align-items: center; gap: 4px; background: rgba(255,255,255,.07); border-radius: 18px; padding: 3px 4px 3px 10px; }
#clockbar .t { font-family: var(--mono); font-size: 13px; color: #fff; min-width: 74px; }
#clockbar .lbl { font-size: 11px; color: #9aa3b2; margin-right: 4px; }
#clockbar button { height: 24px; min-width: 30px; border: 0; border-radius: 12px; background: transparent; color: #c9cfda; cursor: pointer; font-size: 12px; padding: 0 6px; }
#clockbar button:hover { background: rgba(255,255,255,.12); }
#clockbar button.on { background: var(--primary); color: #fff; }
#story-pill { font-size: 11.5px; color: #ffd28a; white-space: nowrap; }
.avatar { width: 28px; height: 28px; border-radius: 50%; background: #5a6275; color: #fff; display: grid; place-items: center; font-weight: 700; font-size: 12px; }

/* ------------------------------------------------------------ nav drawer */
#nav { position: fixed; top: 48px; left: 0; bottom: 0; width: 270px; background: var(--panel); border-right: 1px solid var(--border);
  transform: translateX(-100%); transition: transform .16s ease; z-index: 45; overflow-y: auto; padding: 8px 0 24px; box-shadow: var(--shadow-2); }
#nav.open { transform: none; }
#nav.docked { transform: none; box-shadow: none; }
#nav h4 { margin: 14px 16px 4px; font-size: 11.5px; text-transform: uppercase; letter-spacing: .6px; color: var(--text-3); }
#nav a { display: flex; align-items: center; gap: 10px; padding: 6px 16px 6px 22px; color: var(--text); font-size: 13.5px; }
#nav a:hover { background: var(--panel-2); text-decoration: none; }
#nav a.active { background: var(--primary-2); color: var(--primary-text); font-weight: 600; box-shadow: inset 3px 0 0 var(--primary); }
#nav .navsep { height: 1px; background: var(--border-2); margin: 8px 0; }
#scrim { position: fixed; inset: 48px 0 0 0; background: rgba(0,0,0,.18); z-index: 44; }

/* ------------------------------------------------------------ main / page */
#main { position: fixed; top: 48px; left: 0; right: 0; bottom: 0; overflow: auto; }
body.nav-docked #main { left: 270px; }
body.dock-open #main { bottom: var(--dock-h); }
.page { padding: 16px 20px 40px; max-width: 1700px; margin: 0 auto; }
.page.full { max-width: none; }
.page-title { display: flex; align-items: center; gap: 12px; margin: 4px 0 14px; }
.page-title h1 { font-size: 22px; margin: 0; font-weight: 650; }
.tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--border); margin-bottom: 14px; }
.tabs button { border: 0; background: transparent; padding: 9px 14px; cursor: pointer; color: var(--text-2); font-weight: 500; border-bottom: 2px solid transparent; }
.tabs button.on { color: var(--primary-text); border-bottom-color: var(--primary); }
.panel { background: var(--panel); border: 1px solid var(--border); border-radius: var(--r); box-shadow: var(--shadow); }
.panel > .ph { display: flex; align-items: center; gap: 8px; padding: 10px 14px; border-bottom: 1px solid var(--border-2); font-weight: 600; }
.panel > .pb { padding: 12px 14px; }
.grid { display: grid; gap: 14px; }
.g2 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
.g3 { grid-template-columns: repeat(3, minmax(0, 1fr)); }
.g4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
@media (max-width: 1000px) { .g2, .g3, .g4 { grid-template-columns: 1fr; } }
.stat { padding: 14px 16px; }
.stat .v { font-size: 28px; font-weight: 700; }
.stat .l { color: var(--text-2); font-size: 12.5px; }
.callout { border-left: 4px solid var(--primary); background: var(--primary-2); padding: 10px 14px; border-radius: 4px; margin: 0 0 14px; }
.callout.warn { border-color: var(--warning); background: var(--warning-2); }
.callout.err { border-color: var(--danger); background: var(--danger-2); }
.callout.ok { border-color: var(--success); background: var(--success-2); }
.empty { padding: 40px 20px; text-align: center; color: var(--text-2); }
.empty h3 { color: var(--text); margin: 6px 0; }

/* ------------------------------------------------------------ tables */
table.t { width: 100%; border-collapse: collapse; font-size: 13px; }
table.t th { text-align: left; font-weight: 600; color: var(--text-2); padding: 7px 10px; border-bottom: 1px solid var(--border); background: var(--panel); position: sticky; top: 0; z-index: 1; white-space: nowrap; }
table.t td { padding: 6px 10px; border-bottom: 1px solid var(--border-2); vertical-align: top; }
table.t tr:hover td { background: var(--panel-2); }
table.t td.num, table.t th.num { text-align: right; font-variant-numeric: tabular-nums; }
table.t th.sortable { cursor: pointer; }
table.t th.sortable:hover { color: var(--text); }

/* ------------------------------------------------------------ query bar / time picker */
.qbar { display: flex; gap: 8px; align-items: stretch; margin-bottom: 8px; }
.qbar .qwrap { flex: 1 1 auto; display: flex; border: 1px solid var(--border); border-radius: var(--r); background: var(--panel); min-width: 0; position: relative; }
.qbar .qwrap.err { border-color: var(--danger); }
.qbar .qlang { border: 0; border-right: 1px solid var(--border-2); background: var(--panel-2); padding: 0 10px; font-size: 12px; font-weight: 600; color: var(--text-2); border-radius: var(--r) 0 0 var(--r); }
.qbar textarea { flex: 1 1 auto; border: 0; resize: none; background: transparent; padding: 6px 10px; font: 13.5px/20px var(--mono); min-height: 32px; height: 32px; outline: none; white-space: pre-wrap; overflow: hidden; }
.qbar .qerr { position: absolute; left: 0; top: 100%; margin-top: 4px; background: var(--danger); color: #fff; padding: 4px 8px; border-radius: 4px; font-size: 12px; z-index: 5; max-width: 600px; }
.qsugg { position: absolute; left: 40px; top: 100%; margin-top: 2px; background: var(--panel); border: 1px solid var(--border); border-radius: var(--r); box-shadow: var(--shadow-2); z-index: 20; max-height: 280px; overflow: auto; min-width: 320px; }
.qsugg div { padding: 5px 10px; cursor: pointer; font-family: var(--mono); font-size: 12.5px; display: flex; gap: 8px; }
.qsugg div.on, .qsugg div:hover { background: var(--primary-2); }
.qsugg .k { color: var(--text-3); font-family: var(--sans); font-size: 11px; margin-left: auto; }
.tp { position: relative; }
.tp-btn { display: flex; align-items: center; gap: 6px; height: 34px; border: 1px solid var(--border); border-radius: var(--r); background: var(--panel); padding: 0 10px; cursor: pointer; white-space: nowrap; }
.tp-btn:hover { background: var(--panel-2); }
.tp-pop { position: absolute; right: 0; top: 100%; margin-top: 6px; width: 420px; background: var(--panel); border: 1px solid var(--border); border-radius: var(--r); box-shadow: var(--shadow-2); z-index: 30; padding: 12px; }
.tp-pop h5 { margin: 4px 0 8px; font-size: 12px; color: var(--text-2); text-transform: uppercase; letter-spacing: .4px; }
.tp-pop .quick { display: grid; grid-template-columns: 1fr 1fr; gap: 2px 12px; }
.tp-pop .quick a { padding: 3px 0; font-size: 13px; }
.filters { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; margin: 2px 0 10px; }
.pill { display: inline-flex; align-items: center; gap: 4px; height: 26px; padding: 0 4px 0 10px; border-radius: 13px; background: var(--panel-3); font-size: 12.5px; max-width: 420px; }
.pill .pt { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; cursor: pointer; }
.pill.neg { background: var(--danger-2); color: var(--danger); }
.pill.off { opacity: .55; text-decoration: line-through; }
.pill button { border: 0; background: transparent; cursor: pointer; width: 20px; height: 20px; border-radius: 10px; color: inherit; }
.pill button:hover { background: rgba(0,0,0,.08); }
.addf { font-size: 12.5px; }

/* ------------------------------------------------------------ discover */
.disc { display: grid; grid-template-columns: 260px minmax(0, 1fr); gap: 12px; }
@media (max-width: 900px) { .disc { grid-template-columns: 1fr; } }
.fside { font-size: 13px; }
.fside .ip { margin-bottom: 8px; }
.fside .fsearch { width: 100%; margin-bottom: 8px; }
.fside h6 { margin: 10px 0 4px; font-size: 11.5px; text-transform: uppercase; color: var(--text-3); letter-spacing: .5px; }
.frow { display: flex; align-items: center; gap: 6px; padding: 3px 6px; border-radius: 4px; cursor: pointer; }
.frow:hover { background: var(--panel-2); }
.frow .ft { width: 18px; height: 18px; border-radius: 3px; display: grid; place-items: center; font-size: 10px; font-weight: 700; background: var(--panel-3); color: var(--text-2); flex: none; }
.frow .fn { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-family: var(--mono); font-size: 12px; }
.frow .fa { margin-left: auto; visibility: hidden; }
.frow:hover .fa { visibility: visible; }
.fdetail { background: var(--panel); border: 1px solid var(--border); border-radius: var(--r); padding: 8px 10px; margin: 2px 0 6px 20px; box-shadow: var(--shadow); }
.fdetail .bar { height: 4px; background: var(--panel-3); border-radius: 2px; overflow: hidden; margin: 2px 0 6px; }
.fdetail .bar i { display: block; height: 100%; background: var(--primary); }
.fdetail .vrow { display: flex; gap: 6px; align-items: center; font-size: 12px; }
.fdetail .vrow .vv { flex: 1 1 auto; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-family: var(--mono); }
.hits { font-size: 20px; font-weight: 700; }
.histo { height: 120px; margin: 4px 0 8px; }
.dtable { overflow: auto; }
.dtable table.t td { font-family: var(--mono); font-size: 12px; }
.dtable td.src { white-space: pre-wrap; word-break: break-all; }
.dtable td.src b { color: var(--text-2); font-weight: 600; background: var(--panel-3); padding: 0 3px; border-radius: 3px; margin-right: 2px; }
.dtable tr.exp > td { background: var(--panel-2); }
.dtable .tog { width: 26px; cursor: pointer; color: var(--text-3); }
.docview { padding: 8px 4px 12px; }
.docview table td:first-child { width: 280px; color: var(--text-2); }
.docview pre { margin: 0; white-space: pre-wrap; word-break: break-all; font-size: 12px; }
.docview .act { visibility: hidden; white-space: nowrap; }
.docview tr:hover .act { visibility: visible; }
.hl { background: #ffe58f; color: #000; border-radius: 2px; }

/* ------------------------------------------------------------ charts */
svg.chart text { fill: var(--text-2); font-size: 11px; font-family: var(--sans); }
svg.chart .grid line { stroke: var(--border-2); }
svg.chart .bar { fill: #54b399; }
svg.chart .bar:hover { opacity: .8; }
.legend { display: flex; flex-wrap: wrap; gap: 4px 12px; font-size: 12px; }
.legend span { display: inline-flex; gap: 5px; align-items: center; cursor: pointer; }
.legend i { width: 10px; height: 10px; border-radius: 2px; display: inline-block; }
.legend span.off { opacity: .4; }
.tip { position: fixed; pointer-events: none; background: #1d1e24; color: #fff; padding: 6px 9px; border-radius: 4px; font-size: 12px; z-index: 200; max-width: 360px; box-shadow: var(--shadow-2); }

/* ------------------------------------------------------------ dock (terminal, laptop, guide) */
#dock { position: fixed; left: 0; right: 0; bottom: 0; height: var(--dock-h); background: var(--panel); border-top: 1px solid var(--border); z-index: 40; display: flex; flex-direction: column; }
body.nav-docked #dock { left: 270px; }
#dock.min { height: 36px; }
#dock .dtabs { display: flex; align-items: center; gap: 2px; height: 36px; padding: 0 6px; border-bottom: 1px solid var(--border-2); background: var(--panel-2); flex: none; }
#dock .dtabs button.tab { border: 0; background: transparent; padding: 0 12px; height: 34px; cursor: pointer; display: inline-flex; align-items: center; gap: 6px; color: var(--text-2); font-weight: 500; border-bottom: 2px solid transparent; }
#dock .dtabs button.tab.on { color: var(--text); border-bottom-color: var(--accent); }
#dock .dbody { flex: 1 1 auto; min-height: 0; position: relative; }
#dock .dpane { position: absolute; inset: 0; display: none; }
#dock .dpane.on { display: flex; flex-direction: column; }
#dock-grip { position: absolute; left: 0; right: 0; top: -4px; height: 8px; cursor: ns-resize; }
body.dock-closed #dock { display: none; }
#dock-launcher { position: fixed; right: 16px; bottom: 16px; z-index: 39; display: none; gap: 8px; }
body.dock-closed #dock-launcher { display: flex; }

/* terminal */
.term { flex: 1 1 auto; background: var(--term-bg); color: var(--term-fg); font: 13px/1.42 var(--mono); padding: 8px 10px; overflow: auto; outline: none; }
.term .ln { white-space: pre-wrap; word-break: break-all; min-height: 1.42em; }
.term .err { color: var(--term-err); }
.term .ok { color: var(--term-ok); }
.term .warn { color: var(--term-warn); }
.term .dim { color: var(--term-dim); }
.term .pr { color: var(--term-prompt); }
.term .bold { font-weight: 700; color: #fff; }
.term .inrow { display: flex; white-space: pre; }
.term .inrow input { flex: 1 1 auto; background: transparent; border: 0; outline: none; color: var(--term-fg); font: inherit; padding: 0; caret-color: var(--term-fg); }
.term .hint { color: var(--term-dim); }

/* editor overlay (nano-like) */
.editor { position: absolute; inset: 0; display: flex; flex-direction: column; background: var(--term-bg); z-index: 5; }
.editor .ebar { display: flex; gap: 10px; align-items: center; padding: 3px 10px; background: #d7dbe0; color: #101215; font: 12.5px var(--mono); flex: none; }
.editor .ebody { flex: 1 1 auto; display: flex; min-height: 0; overflow: auto; }
.editor .gutter { flex: none; padding: 6px 6px 6px 10px; text-align: right; color: var(--term-dim); font: 13px/1.42 var(--mono); user-select: none; white-space: pre; background: #15181c; }
.editor textarea { flex: 1 1 auto; background: transparent; border: 0; resize: none; outline: none; color: var(--term-fg); font: 13px/1.42 var(--mono); padding: 6px 10px; white-space: pre; overflow: hidden; tab-size: 4; min-height: 100%; }
.editor .ekeys { display: flex; flex-wrap: wrap; gap: 4px 14px; padding: 4px 10px; background: #1b1e23; color: var(--term-fg); font: 12px var(--mono); flex: none; }
.editor .ekeys b { background: #d7dbe0; color: #101215; padding: 0 3px; }
.editor .emsg { padding: 2px 10px; background: #2a2f37; color: var(--term-warn); font: 12px var(--mono); flex: none; }

/* code editor in the dashboard (rules/decoders/ossec.conf) */
.codeed { display: flex; border: 1px solid var(--border); border-radius: var(--r); overflow: auto; background: var(--panel); max-height: 64vh; }
.codeed .gutter { flex: none; padding: 8px 6px 8px 10px; text-align: right; color: var(--text-3); font: 12.5px/1.5 var(--mono); user-select: none; white-space: pre; background: var(--panel-2); border-right: 1px solid var(--border-2); }
.codeed textarea { flex: 1 1 auto; border: 0; resize: none; outline: none; font: 12.5px/1.5 var(--mono); padding: 8px 10px; white-space: pre; overflow: hidden; background: transparent; tab-size: 2; min-height: 300px; }
.codeed .gutter .errl { background: var(--danger); color: #fff; border-radius: 2px; }
pre.code { background: var(--panel-2); border: 1px solid var(--border-2); border-radius: var(--r); padding: 10px 12px; overflow: auto; font: 12.5px/1.5 var(--mono); margin: 0; white-space: pre; }
pre.logtest { background: var(--term-bg); color: var(--term-fg); border-radius: var(--r); padding: 10px 12px; overflow: auto; font: 12.5px/1.45 var(--mono); margin: 0; white-space: pre-wrap; min-height: 160px; }

/* laptop */
.laptop { flex: 1 1 auto; display: grid; grid-template-columns: 220px minmax(0, 1fr); min-height: 0; }
.laptop .desk { background: linear-gradient(160deg, #0f3d6e, #1a6aa8 60%, #3d8fd1); color: #fff; padding: 12px; display: flex; flex-direction: column; gap: 10px; overflow: auto; }
.laptop .desk .tile { background: rgba(255,255,255,.12); border-radius: 6px; padding: 8px 10px; font-size: 12.5px; }
.laptop .desk .tile b { display: block; margin-bottom: 2px; }
.laptop .desk button { background: rgba(255,255,255,.18); border: 1px solid rgba(255,255,255,.3); color: #fff; border-radius: 4px; padding: 5px 8px; cursor: pointer; text-align: left; }
.laptop .desk button:hover { background: rgba(255,255,255,.28); }
.laptop .ps { display: flex; flex-direction: column; min-height: 0; }
.laptop .ps .term { background: #012456; color: #eeedf0; }
.laptop .ps .term .pr { color: #eeedf0; }
.lock { position: absolute; inset: 0; z-index: 8; background: radial-gradient(circle at 30% 30%, #2b6cb0, #0b2545); color: #fff; display: flex; flex-direction: column; align-items: center; justify-content: center; gap: 10px; }
.lock .clock { font-size: 54px; font-weight: 300; }
.lock input { width: 260px; height: 34px; border-radius: 4px; border: 0; padding: 0 10px; color: #000; }

/* guide (markdown) */
.guide { flex: 1 1 auto; overflow: auto; padding: 14px 22px 40px; font-size: 14px; }
.guide h1 { font-size: 21px; } .guide h2 { font-size: 18px; margin-top: 26px; } .guide h3 { font-size: 15.5px; margin-top: 18px; }
.guide pre { background: var(--panel-2); border: 1px solid var(--border-2); border-radius: var(--r); padding: 8px 10px; overflow: auto; position: relative; }
.guide pre code { font-size: 12.5px; }
.guide code { background: var(--panel-3); padding: 0 4px; border-radius: 3px; }
.guide pre code { background: none; padding: 0; }
.guide table { border-collapse: collapse; margin: 8px 0; font-size: 13px; }
.guide th, .guide td { border: 1px solid var(--border); padding: 4px 8px; text-align: left; vertical-align: top; }
.guide blockquote { margin: 10px 0; padding: 6px 12px; border-left: 4px solid var(--primary); background: var(--primary-2); }
.guide .copy { position: absolute; right: 6px; top: 6px; opacity: 0; }
.guide pre:hover .copy { opacity: 1; }
.guide .gnav { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 10px; }

/* ------------------------------------------------------------ modal / toast / loader */
.modal-bg { position: fixed; inset: 0; background: rgba(0,0,0,.35); z-index: 100; display: grid; place-items: center; padding: 20px; }
.modal { background: var(--panel); border-radius: 8px; box-shadow: var(--shadow-2); width: min(640px, 100%); max-height: 88vh; display: flex; flex-direction: column; }
.modal.wide { width: min(1000px, 100%); }
.modal .mh { padding: 14px 18px 8px; font-size: 18px; font-weight: 650; }
.modal .mb { padding: 8px 18px 14px; overflow: auto; }
.modal .mf { padding: 10px 18px 14px; display: flex; gap: 8px; justify-content: flex-end; border-top: 1px solid var(--border-2); }
#toasts { position: fixed; right: 16px; bottom: 16px; z-index: 120; display: flex; flex-direction: column; gap: 8px; width: 360px; }
.toast { background: var(--panel); border: 1px solid var(--border); border-left: 4px solid var(--success); border-radius: 6px; box-shadow: var(--shadow-2); padding: 10px 12px; font-size: 13px; }
.toast.err { border-left-color: var(--danger); }
.toast.warn { border-left-color: var(--warning); }
.toast b { display: block; margin-bottom: 2px; }
#loader { position: fixed; inset: 0; z-index: 300; background: var(--bg); display: grid; place-items: center; }
#loader .box { width: 380px; text-align: center; }
.progress { height: 6px; background: var(--panel-3); border-radius: 3px; overflow: hidden; }
.progress i { display: block; height: 100%; width: 0; background: var(--primary); transition: width .2s; }

/* login */
#login { position: fixed; inset: 0; z-index: 90; background: linear-gradient(135deg, #1d1e24, #2f3542 55%, #7a3b1d); display: grid; place-items: center; }
#login .card { width: 380px; background: var(--panel); border-radius: 10px; padding: 28px; box-shadow: var(--shadow-2); display: flex; flex-direction: column; gap: 14px; }
#login .card h2 { margin: 0; }
.disclaimer { font-size: 11.5px; color: var(--text-3); }

/* misc */
.kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 14px; font-size: 13px; }
.kv dt { color: var(--text-2); } .kv dd { margin: 0; }
.chips { display: flex; flex-wrap: wrap; gap: 4px; }
.split { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); gap: 14px; }
@media (max-width: 1100px) { .split { grid-template-columns: 1fr; } }
.vizgrid { display: grid; grid-template-columns: repeat(12, 1fr); grid-auto-rows: 60px; gap: 12px; }
.vizgrid .panel { display: flex; flex-direction: column; min-height: 0; }
.vizgrid .panel .pb { flex: 1 1 auto; min-height: 0; overflow: auto; }
.mitre-grid { display: grid; grid-template-columns: repeat(14, minmax(120px, 1fr)); gap: 6px; overflow: auto; font-size: 11.5px; }
.mitre-grid .tac { font-weight: 700; padding: 6px; background: var(--panel-3); border-radius: 4px; }
.mitre-grid .tec { padding: 4px 6px; border: 1px solid var(--border-2); border-radius: 4px; background: var(--panel); cursor: default; }
.mitre-grid .tec.hit { background: #fde2d5; border-color: #f0a37c; color: #6a2a0e; font-weight: 600; cursor: pointer; }
:root[data-theme="dark"] .mitre-grid .tec.hit { background: #5a2a14; color: #ffd5c0; }