/* ===== XDR SOC Console — design tokens ===== */
:root {
  /* surfaces (cool neutral, deep blue-black) */
  --bg:        oklch(0.165 0.012 250);
  --bg-1:      oklch(0.195 0.013 250);
  --bg-2:      oklch(0.225 0.014 250);
  --bg-3:      oklch(0.262 0.015 250);
  --panel:     oklch(0.205 0.013 250);
  --panel-hi:  oklch(0.235 0.014 250);

  --border:      oklch(0.305 0.014 250);
  --border-soft: oklch(0.262 0.012 250);

  --text:       oklch(0.945 0.006 250);
  --text-dim:   oklch(0.745 0.012 250);
  --text-faint: oklch(0.575 0.012 250);

  /* accents */
  --accent:    oklch(0.685 0.148 250);   /* blue  */
  --accent-2:  oklch(0.760 0.110 188);   /* teal  */
  --accent-ink: oklch(0.175 0.03 250);

  /* risk scale */
  --critical: oklch(0.635 0.225 25);
  --high:     oklch(0.715 0.175 52);
  --medium:   oklch(0.815 0.145 88);
  --low:      oklch(0.770 0.115 205);
  --clean:    oklch(0.745 0.130 165);

  --shadow: 0 1px 0 oklch(0.30 0.014 250 / .5), 0 8px 24px -12px oklch(0.05 0.02 250 / .8);

  --font: "IBM Plex Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
  --mono: "IBM Plex Mono", ui-monospace, "SFMono-Regular", Menlo, monospace;

  --r: 9px;
  --r-sm: 6px;
}

* { box-sizing: border-box; }
html, body { margin: 0; padding: 0; }
body {
  background: var(--bg);
  color: var(--text);
  font-family: var(--font);
  font-size: 14px;
  line-height: 1.45;
  -webkit-font-smoothing: antialiased;
  text-rendering: optimizeLegibility;
}
#root { min-height: 100vh; }

::-webkit-scrollbar { width: 11px; height: 11px; }
::-webkit-scrollbar-track { background: transparent; }
::-webkit-scrollbar-thumb { background: var(--bg-3); border-radius: 8px; border: 3px solid var(--bg-1); }
::-webkit-scrollbar-thumb:hover { background: var(--border); }

.mono { font-family: var(--mono); font-feature-settings: "tnum" 1; }
.tnum { font-variant-numeric: tabular-nums; }

/* ===== App shell ===== */
.app {
  max-width: 1760px;
  margin: 0 auto;
  padding: 0 26px 48px;
}

/* ===== Top bar ===== */
.topbar {
  position: sticky; top: 0; z-index: 40;
  display: flex; align-items: center; gap: 22px;
  padding: 14px 26px;
  margin: 0 -26px 22px;
  background: oklch(0.175 0.012 250 / 0.82);
  backdrop-filter: blur(14px);
  border-bottom: 1px solid var(--border-soft);
}
.brand { display: flex; align-items: center; gap: 12px; }
.brand-mark {
  width: 30px; height: 30px; border-radius: 7px;
  background: linear-gradient(150deg, var(--accent), var(--accent-2));
  display: grid; place-items: center;
  font-weight: 700; color: var(--accent-ink); font-size: 13px;
  box-shadow: 0 0 0 1px oklch(0.5 0.1 250 / .4), 0 4px 14px -4px var(--accent);
}
.brand-name { font-weight: 600; letter-spacing: .2px; font-size: 15px; }
.brand-name span { color: var(--text-faint); font-weight: 400; }
.brand-sub {
  font-family: var(--mono); font-size: 10.5px; letter-spacing: .12em;
  color: var(--text-faint); text-transform: uppercase; margin-top: 1px;
}
.topbar-spacer { flex: 1; }

.global-search {
  position: relative; width: 320px;
}
.global-search input {
  width: 100%; height: 36px; padding: 0 12px 0 34px;
  background: var(--bg-1); border: 1px solid var(--border-soft);
  border-radius: var(--r-sm); color: var(--text); font-family: var(--mono);
  font-size: 12.5px;
}
.global-search input:focus { outline: none; border-color: var(--accent); background: var(--bg); }
.global-search .si {
  position: absolute; left: 11px; top: 50%; transform: translateY(-50%);
  color: var(--text-faint); pointer-events: none;
}

.status-pill {
  display: flex; align-items: center; gap: 8px;
  padding: 6px 12px; border-radius: 999px;
  background: var(--bg-1); border: 1px solid var(--border-soft);
  font-size: 12px; color: var(--text-dim);
}
.dot { width: 8px; height: 8px; border-radius: 50%; background: var(--clean); position: relative; }
.dot::after {
  content: ""; position: absolute; inset: -4px; border-radius: 50%;
  background: var(--clean); opacity: .35; animation: pulse 2.4s ease-out infinite;
}
@keyframes pulse { 0% { transform: scale(.6); opacity: .5; } 100% { transform: scale(2.4); opacity: 0; } }

.clock { font-family: var(--mono); font-size: 12.5px; color: var(--text-dim); letter-spacing: .03em; }

/* ===== Generic panel ===== */
.panel {
  background: var(--panel);
  border: 1px solid var(--border-soft);
  border-radius: var(--r);
  box-shadow: var(--shadow);
}
.panel-head {
  display: flex; align-items: center; gap: 12px;
  padding: 13px 16px; border-bottom: 1px solid var(--border-soft);
}
.panel-title { font-size: 13px; font-weight: 600; letter-spacing: .2px; }
.panel-eyebrow {
  font-family: var(--mono); font-size: 10px; letter-spacing: .14em;
  text-transform: uppercase; color: var(--text-faint); line-height: 1.3; margin-bottom: 3px;
}
.panel-head .spacer { flex: 1; }

/* ===== KPI row ===== */
.kpi-row {
  display: grid; grid-template-columns: repeat(6, 1fr); gap: 14px; margin-bottom: 18px;
}
.kpi {
  background: var(--panel); border: 1px solid var(--border-soft);
  border-radius: var(--r); padding: 14px 15px 13px; position: relative; overflow: hidden;
}
.kpi::before {
  content: ""; position: absolute; left: 0; top: 0; bottom: 0; width: 3px;
  background: var(--accent); opacity: .85;
}
.kpi.k-crit::before { background: var(--critical); }
.kpi.k-warn::before { background: var(--high); }
.kpi.k-teal::before { background: var(--accent-2); }
.kpi-label {
  font-size: 11px; color: var(--text-faint); text-transform: uppercase;
  letter-spacing: .1em; font-family: var(--mono); display: flex; align-items: center; gap: 6px;
}
.kpi-val {
  font-size: 27px; font-weight: 600; margin-top: 7px; letter-spacing: -.01em;
  font-variant-numeric: tabular-nums; display: flex; align-items: baseline; gap: 5px;
}
.kpi-unit { font-size: 12px; color: var(--text-faint); font-weight: 500; }
.kpi-delta { font-size: 11.5px; margin-top: 5px; display: flex; align-items: center; gap: 5px; color: var(--text-dim); }
.kpi-delta .up { color: var(--clean); }
.kpi-delta .down { color: var(--critical); }
.kpi-spark { position: absolute; right: 10px; bottom: 8px; width: 64px; height: 26px; opacity: .55; }

/* ===== charts grid ===== */
.grid-main {
  display: grid; gap: 18px;
  grid-template-columns: 2fr 1fr;
  margin-bottom: 18px;
}
.charts-col { display: grid; gap: 18px; }
.chart-big { grid-column: 1 / -1; }
.chart-small-grid { display: grid; grid-template-columns: repeat(2, 1fr); gap: 18px; }

.chart-card .panel-head { padding-bottom: 11px; }
.chart-readout { display: flex; align-items: baseline; gap: 8px; }
.chart-readout .val { font-family: var(--mono); font-size: 20px; font-weight: 600; font-variant-numeric: tabular-nums; }
.chart-readout .unit { font-size: 11px; color: var(--text-faint); }
.chart-legend { display: flex; gap: 14px; align-items: center; }
.legend-item { display: flex; align-items: center; gap: 6px; font-size: 11.5px; color: var(--text-dim); }
.legend-swatch { width: 10px; height: 3px; border-radius: 2px; }
.chart-canvas-wrap { padding: 6px 10px 12px; }
canvas.live { display: block; width: 100%; }

.mini-readout { font-family: var(--mono); font-size: 16px; font-weight: 600; }
.mini-sub { font-size: 11px; color: var(--text-faint); }

/* ===== topology ===== */
.topo-wrap { padding: 8px; position: relative; }
.topo-svg { display: block; width: 100%; height: auto; }
.topo-node-label { font-family: var(--mono); font-size: 9.5px; fill: var(--text-dim); }
.topo-tip {
  position: absolute; pointer-events: none; z-index: 5;
  background: var(--bg-3); border: 1px solid var(--border);
  border-radius: var(--r-sm); padding: 8px 10px; font-size: 11.5px;
  box-shadow: var(--shadow); min-width: 150px; transition: opacity .12s;
}
.topo-tip .tt-name { font-family: var(--mono); font-weight: 600; margin-bottom: 4px; }
.topo-tip .tt-row { display: flex; justify-content: space-between; gap: 14px; color: var(--text-dim); }
.topo-tip .tt-row b { color: var(--text); font-family: var(--mono); font-weight: 500; }

/* ===== table ===== */
.table-toolbar {
  display: flex; align-items: center; gap: 12px; flex-wrap: wrap;
  padding: 12px 16px; border-bottom: 1px solid var(--border-soft);
}
.tsearch { position: relative; width: 260px; }
.tsearch input {
  width: 100%; height: 34px; padding: 0 12px 0 32px;
  background: var(--bg-1); border: 1px solid var(--border-soft);
  border-radius: var(--r-sm); color: var(--text); font-family: var(--mono); font-size: 12px;
}
.tsearch input:focus { outline: none; border-color: var(--accent); }
.tsearch .si { position: absolute; left: 10px; top: 50%; transform: translateY(-50%); color: var(--text-faint); }

.risk-chips { display: flex; gap: 7px; }
.chip {
  border: 1px solid var(--border); background: var(--bg-1); color: var(--text-dim);
  border-radius: 999px; padding: 5px 11px; font-size: 11.5px; cursor: pointer;
  display: flex; align-items: center; gap: 6px; user-select: none; transition: all .12s;
  font-family: var(--mono); letter-spacing: .02em;
}
.chip:hover { border-color: var(--text-faint); color: var(--text); }
.chip.on { background: var(--bg-3); color: var(--text); border-color: var(--border); }
.chip .cdot { width: 7px; height: 7px; border-radius: 50%; }
.chip .ccount { color: var(--text-faint); font-size: 10.5px; }

.hostsel {
  height: 34px; padding: 0 30px 0 12px; background: var(--bg-1);
  border: 1px solid var(--border-soft); border-radius: var(--r-sm);
  color: var(--text); font-family: var(--mono); font-size: 12px; cursor: pointer;
  appearance: none;
  background-image: linear-gradient(45deg, transparent 50%, var(--text-faint) 50%), linear-gradient(135deg, var(--text-faint) 50%, transparent 50%);
  background-position: calc(100% - 16px) 14px, calc(100% - 11px) 14px;
  background-size: 5px 5px, 5px 5px; background-repeat: no-repeat;
}
.hostsel:focus { outline: none; border-color: var(--accent); }
.toolbar-spacer { flex: 1; }
.result-count { font-size: 11.5px; color: var(--text-faint); font-family: var(--mono); }

.table-scroll { overflow-x: auto; }
table.proc { width: 100%; border-collapse: collapse; font-size: 12.5px; }
table.proc thead th {
  position: sticky; top: 0; z-index: 2;
  background: var(--panel-hi); text-align: left; padding: 9px 12px;
  font-size: 10.5px; letter-spacing: .08em; text-transform: uppercase;
  color: var(--text-faint); font-family: var(--mono); font-weight: 500;
  border-bottom: 1px solid var(--border); white-space: nowrap; cursor: pointer; user-select: none;
}
table.proc thead th.num { text-align: right; }
table.proc thead th:hover { color: var(--text); }
table.proc thead th .sort-ind { color: var(--accent); margin-left: 4px; }
table.proc tbody td { padding: 9px 12px; border-bottom: 1px solid var(--border-soft); white-space: nowrap; }
table.proc tbody td.num { text-align: right; font-family: var(--mono); font-variant-numeric: tabular-nums; }
table.proc tbody tr { transition: background .1s; cursor: pointer; }
table.proc tbody tr:hover { background: var(--bg-1); }
table.proc tbody tr.expanded { background: var(--bg-1); }
table.proc tbody tr.dim td { opacity: .42; }

.cell-proc { display: flex; align-items: center; gap: 9px; }
.proc-name { font-family: var(--mono); color: var(--text); }
.proc-pid { color: var(--text-faint); font-family: var(--mono); font-size: 11px; }
.host-cell { font-family: var(--mono); color: var(--text-dim); }
.user-cell { color: var(--text-dim); }

.risk-badge {
  display: inline-flex; align-items: center; gap: 6px; padding: 3px 9px; border-radius: 999px;
  font-size: 10.5px; font-family: var(--mono); letter-spacing: .04em; text-transform: uppercase;
  border: 1px solid transparent;
}
.risk-badge .rdot { width: 7px; height: 7px; border-radius: 50%; }
.rb-critical { color: var(--critical); background: oklch(0.635 0.225 25 / .12); border-color: oklch(0.635 0.225 25 / .35); }
.rb-critical .rdot { background: var(--critical); }
.rb-high { color: var(--high); background: oklch(0.715 0.175 52 / .12); border-color: oklch(0.715 0.175 52 / .32); }
.rb-high .rdot { background: var(--high); }
.rb-medium { color: var(--medium); background: oklch(0.815 0.145 88 / .12); border-color: oklch(0.815 0.145 88 / .3); }
.rb-medium .rdot { background: var(--medium); }
.rb-low { color: var(--low); background: oklch(0.770 0.115 205 / .12); border-color: oklch(0.770 0.115 205 / .3); }
.rb-low .rdot { background: var(--low); }
.rb-clean { color: var(--clean); background: oklch(0.745 0.130 165 / .1); border-color: oklch(0.745 0.130 165 / .28); }
.rb-clean .rdot { background: var(--clean); }

.usage-bar { display: flex; align-items: center; gap: 8px; justify-content: flex-end; }
.usage-track { width: 52px; height: 5px; border-radius: 3px; background: var(--bg-3); overflow: hidden; }
.usage-fill { height: 100%; border-radius: 3px; background: var(--accent); transition: width .5s ease; }
.usage-fill.hot { background: var(--high); }
.usage-fill.crit { background: var(--critical); }

.status-tag { font-family: var(--mono); font-size: 11px; display: inline-flex; align-items: center; gap: 6px; }
.status-tag.running { color: var(--clean); }
.status-tag.suspended { color: var(--medium); }
.status-tag.killed { color: var(--text-faint); }
.status-tag.quarantined { color: var(--low); }
.status-tag .stbox { width: 6px; height: 6px; border-radius: 1px; }

.hash-cell { font-family: var(--mono); font-size: 11px; color: var(--text-faint); }

.act-cell { display: flex; gap: 6px; justify-content: flex-end; }
.btn-act {
  border: 1px solid var(--border); background: var(--bg-1); color: var(--text-dim);
  border-radius: var(--r-sm); padding: 4px 9px; font-size: 11px; cursor: pointer;
  font-family: var(--font); transition: all .12s; white-space: nowrap;
}
.btn-act:hover { color: var(--text); border-color: var(--text-faint); }
.btn-act.danger:hover { color: var(--critical); border-color: oklch(0.635 0.225 25 / .5); background: oklch(0.635 0.225 25 / .1); }
.btn-act.warn:hover { color: var(--low); border-color: oklch(0.770 0.115 205 / .5); background: oklch(0.770 0.115 205 / .1); }
.btn-act:disabled { opacity: .3; cursor: default; }

/* expanded detail row */
.detail-row td { padding: 0 !important; background: var(--bg-1); border-bottom: 1px solid var(--border); }
.detail-inner {
  display: grid; grid-template-columns: 1.3fr 1fr; gap: 22px;
  padding: 16px 20px 18px 42px; animation: expand .18s ease;
}
@keyframes expand { from { opacity: 0; transform: translateY(-4px); } to { opacity: 1; transform: none; } }
.detail-block h5 {
  margin: 0 0 9px; font-size: 10.5px; letter-spacing: .12em; text-transform: uppercase;
  color: var(--text-faint); font-family: var(--mono); font-weight: 500;
}
.detail-kv { display: grid; grid-template-columns: 130px 1fr; gap: 4px 14px; font-size: 12px; }
.detail-kv dt { color: var(--text-faint); }
.detail-kv dd { margin: 0; font-family: var(--mono); color: var(--text-dim); word-break: break-all; }
.cmdline {
  font-family: var(--mono); font-size: 11.5px; background: var(--bg);
  border: 1px solid var(--border-soft); border-radius: var(--r-sm);
  padding: 9px 11px; color: var(--text-dim); margin-top: 8px; line-height: 1.55;
  white-space: pre-wrap; word-break: break-all;
}
.conn-list { display: flex; flex-direction: column; gap: 5px; }
.conn-item {
  display: flex; align-items: center; gap: 9px; font-family: var(--mono); font-size: 11.5px;
  color: var(--text-dim); padding: 5px 8px; background: var(--bg); border-radius: var(--r-sm);
  border: 1px solid var(--border-soft);
}
.conn-item .flag-bad { color: var(--critical); margin-left: auto; font-size: 10.5px; }
.tag-mini { font-size: 10px; font-family: var(--mono); padding: 1px 6px; border-radius: 4px; background: var(--bg-3); color: var(--text-faint); }

.empty-state { padding: 50px; text-align: center; color: var(--text-faint); font-family: var(--mono); font-size: 13px; }

/* toast */
.toast-wrap { position: fixed; bottom: 22px; right: 22px; z-index: 100; display: flex; flex-direction: column; gap: 9px; }
.toast {
  background: var(--bg-3); border: 1px solid var(--border); border-left: 3px solid var(--accent);
  border-radius: var(--r-sm); padding: 11px 15px; font-size: 12.5px; box-shadow: var(--shadow);
  min-width: 250px; animation: toastin .2s ease; display: flex; align-items: center; gap: 10px;
}
.toast.danger { border-left-color: var(--critical); }
.toast.warn { border-left-color: var(--low); }
@keyframes toastin { from { opacity: 0; transform: translateX(20px); } to { opacity: 1; transform: none; } }
.toast .tmono { font-family: var(--mono); color: var(--text); }

@media (max-width: 1240px) {
  .grid-main { grid-template-columns: 1fr; }
  .kpi-row { grid-template-columns: repeat(3, 1fr); }
}