/* ═══════════════════════════════════════════════════════════
   SIEM & Scheme — Security Operations Console
   Shared Stylesheet — Security Onion SOC Aesthetic
   ═══════════════════════════════════════════════════════════ */

/* ── CSS VARIABLES ── */
:root {
  --bg: #111318;
  --bg-sidebar: #0d0e12;
  --bg-card: #181b22;
  --bg-card-hover: #1d2029;
  --bg-input: #0f1015;
  --bg-row-alt: rgba(255,255,255,0.015);
  --border: #252830;
  --border-active: #17c6b2;
  --teal: #17c6b2;
  --teal-dim: rgba(23, 198, 178, 0.1);
  --teal-glow: rgba(23, 198, 178, 0.2);
  --blue: #3b82f6;
  --blue-dim: rgba(59, 130, 246, 0.1);
  --red: #ef4444;
  --red-dim: rgba(239, 68, 68, 0.1);
  --amber: #f59e0b;
  --amber-dim: rgba(245, 158, 11, 0.1);
  --green: #10b981;
  --green-dim: rgba(16, 185, 129, 0.1);
  --purple: #8b5cf6;
  --purple-dim: rgba(139, 92, 246, 0.1);
  --text: #b8bcc8;
  --text-bright: #e2e5ed;
  --text-dim: #5a5e6e;
  --sidebar-w: 220px;
}

/* ── RESET & BASE ── */
*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
html { scroll-behavior: smooth; }
body {
  font-family: 'Nunito Sans', sans-serif;
  background: var(--bg);
  color: var(--text);
  overflow-x: hidden;
  line-height: 1.6;
}

a { color: var(--teal); text-decoration: none; transition: color 0.2s; }
a:hover { color: #1ee8d0; }

img { max-width: 100%; display: block; }

/* ── SCROLLBAR ── */
::-webkit-scrollbar { width: 6px; }
::-webkit-scrollbar-track { background: transparent; }
::-webkit-scrollbar-thumb { background: var(--border); border-radius: 3px; }

/* ── SIDEBAR ── */
.sidebar {
  position: fixed;
  top: 0; left: 0;
  width: var(--sidebar-w);
  height: 100vh;
  background: var(--bg-sidebar);
  border-right: 1px solid var(--border);
  display: flex;
  flex-direction: column;
  z-index: 200;
  overflow-y: auto;
}

.sidebar-brand {
  padding: 18px 16px;
  border-bottom: 1px solid var(--border);
}

.sidebar-brand a {
  font-family: 'Fira Code', monospace;
  font-weight: 700;
  font-size: 0.9rem;
  color: var(--teal);
  display: flex;
  align-items: center;
  gap: 10px;
}

.sidebar-brand .icon {
  width: 30px; height: 30px;
  background: var(--teal-dim);
  border: 1px solid rgba(23, 198, 178, 0.2);
  border-radius: 6px;
  display: flex;
  align-items: center;
  justify-content: center;
  font-size: 14px;
  flex-shrink: 0;
}

.sidebar-brand .subtext {
  display: block;
  font-family: 'Nunito Sans', sans-serif;
  font-size: 0.55rem;
  font-weight: 400;
  color: var(--text-dim);
  margin-top: 2px;
  letter-spacing: 0;
}

.sidebar-section { padding: 14px 0 6px; }

.sidebar-section-title {
  font-size: 0.55rem;
  font-weight: 700;
  color: var(--text-dim);
  text-transform: uppercase;
  letter-spacing: 1.5px;
  padding: 0 16px 6px;
}

.sidebar-nav { list-style: none; }

.sidebar-nav li a {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 8px 16px;
  font-size: 0.76rem;
  font-weight: 600;
  color: var(--text-dim);
  border-left: 3px solid transparent;
  transition: all 0.15s;
}

.sidebar-nav li a:hover {
  background: rgba(23, 198, 178, 0.04);
  color: var(--text);
  border-left-color: var(--border);
}

.sidebar-nav li a.active {
  background: var(--teal-dim);
  color: var(--teal);
  border-left-color: var(--teal);
}

.sidebar-nav .nav-icon {
  width: 18px;
  text-align: center;
  font-size: 0.82rem;
}

.sidebar-nav .badge-count {
  margin-left: auto;
  font-family: 'Fira Code', monospace;
  font-size: 0.55rem;
  font-weight: 700;
  padding: 1px 6px;
  border-radius: 10px;
  background: var(--red-dim);
  color: var(--red);
}

.sidebar-footer {
  margin-top: auto;
  padding: 16px;
  border-top: 1px solid var(--border);
  font-size: 0.68rem;
}

.sidebar-footer a {
  display: block;
  color: var(--text-dim);
  margin-bottom: 4px;
  font-size: 0.68rem;
}

.sidebar-footer a:hover { color: var(--teal); }

.sidebar-footer .location {
  margin-top: 4px;
  font-size: 0.58rem;
  color: var(--text-dim);
}

/* Mobile sidebar toggle */
.mobile-toggle {
  display: none;
  position: fixed;
  top: 12px; left: 12px;
  z-index: 300;
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 6px;
  padding: 8px 10px;
  cursor: pointer;
  flex-direction: column;
  gap: 4px;
}

/* Mobile backdrop overlay */
.sidebar-backdrop {
  display: none;
  position: fixed;
  top: 0; left: 0;
  width: 100%; height: 100%;
  background: rgba(0, 0, 0, 0.6);
  z-index: 199;
}

.mobile-toggle span {
  display: block;
  width: 20px; height: 2px;
  background: var(--text-dim);
  border-radius: 1px;
}

/* ── MAIN CONTENT AREA ── */
.main {
  margin-left: var(--sidebar-w);
  min-height: 100vh;
}

/* ── PAGE HEADER (sticky) ── */
.page-header {
  padding: 18px 28px;
  border-bottom: 1px solid var(--border);
  display: flex;
  align-items: center;
  justify-content: space-between;
  flex-wrap: wrap;
  gap: 12px;
  position: sticky;
  top: 0;
  background: rgba(17, 19, 24, 0.95);
  backdrop-filter: blur(12px);
  z-index: 50;
}

.page-header h1 {
  font-size: 1.15rem;
  font-weight: 800;
  color: var(--text-bright);
}

.page-header .meta {
  font-size: 0.7rem;
  color: var(--text-dim);
  font-weight: 400;
}

.header-actions {
  display: flex;
  align-items: center;
  gap: 10px;
}

.filter-bar {
  display: flex;
  align-items: center;
  gap: 6px;
  font-family: 'Fira Code', monospace;
  font-size: 0.62rem;
  color: var(--text-dim);
  background: var(--bg-input);
  border: 1px solid var(--border);
  border-radius: 4px;
  padding: 5px 10px;
}

/* ── BUTTONS ── */
.btn-teal {
  background: var(--teal);
  color: var(--bg);
  border: none;
  border-radius: 4px;
  padding: 8px 18px;
  font-family: 'Nunito Sans', sans-serif;
  font-weight: 700;
  font-size: 0.75rem;
  cursor: pointer;
  display: inline-flex;
  align-items: center;
  gap: 6px;
  transition: all 0.2s;
}

.btn-teal:hover { background: #1ad4c0; box-shadow: 0 2px 16px var(--teal-glow); color: var(--bg); }

.btn-outline {
  background: transparent;
  color: var(--teal);
  border: 1px solid var(--border);
  border-radius: 4px;
  padding: 8px 18px;
  font-family: 'Nunito Sans', sans-serif;
  font-weight: 700;
  font-size: 0.75rem;
  cursor: pointer;
  display: inline-flex;
  align-items: center;
  gap: 6px;
  transition: all 0.2s;
}

.btn-outline:hover { border-color: var(--teal); background: var(--teal-dim); color: var(--teal); }

/* ── CONTENT AREA ── */
.content-area {
  padding: 20px 28px;
  display: flex;
  flex-direction: column;
  gap: 20px;
}

/* ── SECTION HEADERS ── */
.section-header {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 12px 0 8px;
  border-bottom: 1px solid var(--border);
  flex-wrap: wrap;
}

.section-header h2 {
  font-size: 0.95rem;
  font-weight: 800;
  color: var(--text-bright);
}

.section-header .tag {
  font-family: 'Fira Code', monospace;
  font-size: 0.55rem;
  padding: 2px 8px;
  border-radius: 3px;
  font-weight: 600;
}

.tag-teal { background: var(--teal-dim); color: var(--teal); }
.tag-blue { background: var(--blue-dim); color: var(--blue); }
.tag-purple { background: var(--purple-dim); color: var(--purple); }
.tag-amber { background: var(--amber-dim); color: var(--amber); }
.tag-red { background: var(--red-dim); color: var(--red); }
.tag-green { background: var(--green-dim); color: var(--green); }

/* ── CARDS ── */
.card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  overflow: hidden;
  transition: all 0.25s;
}

.card:hover {
  border-color: rgba(23, 198, 178, 0.2);
}

.card-header {
  padding: 12px 20px;
  background: rgba(0, 0, 0, 0.2);
  border-bottom: 1px solid var(--border);
  display: flex;
  align-items: center;
  justify-content: space-between;
  font-size: 0.72rem;
  font-weight: 700;
  color: var(--text-dim);
}

.card-body { padding: 22px; }

/* ── STAT CARDS ── */
.stat-card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 20px;
}

.stat-card .label {
  font-size: 0.6rem;
  font-weight: 600;
  text-transform: uppercase;
  letter-spacing: 1px;
  color: var(--text-dim);
  margin-bottom: 6px;
}

.stat-card .value {
  font-family: 'Fira Code', monospace;
  font-size: 1.8rem;
  font-weight: 700;
}

.stat-card .value.teal { color: var(--teal); }
.stat-card .value.green { color: var(--green); }
.stat-card .value.amber { color: var(--amber); }
.stat-card .value.red { color: var(--red); }
.stat-card .value.blue { color: var(--blue); }
.stat-card .value.purple { color: var(--purple); }

.stat-card .sub {
  font-size: 0.6rem;
  color: var(--text-dim);
  margin-top: 4px;
}

/* ── SEVERITY BADGES ── */
.sev-badge {
  font-family: 'Fira Code', monospace;
  font-size: 0.55rem;
  font-weight: 700;
  padding: 2px 7px;
  border-radius: 2px;
  text-align: center;
  text-transform: uppercase;
  display: inline-block;
}

.sev-badge.crit { background: var(--red-dim); color: var(--red); }
.sev-badge.high { background: var(--amber-dim); color: var(--amber); }
.sev-badge.med  { background: var(--blue-dim); color: var(--blue); }
.sev-badge.low  { background: var(--green-dim); color: var(--green); }

.status-pill {
  font-family: 'Fira Code', monospace;
  font-size: 0.55rem;
  font-weight: 700;
  padding: 2px 8px;
  border-radius: 10px;
  text-align: center;
  display: inline-block;
}

.status-pill.blocked { background: var(--green-dim); color: var(--green); }
.status-pill.investigating { background: var(--amber-dim); color: var(--amber); }
.status-pill.escalated { background: var(--red-dim); color: var(--red); }

/* ── ALERT QUEUE ── */
.alert-queue { display: flex; flex-direction: column; gap: 6px; }

.alert-item {
  display: grid;
  grid-template-columns: 80px 52px 1fr 140px 90px;
  gap: 12px;
  align-items: center;
  padding: 10px 14px;
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 5px;
  font-size: 0.72rem;
  transition: border-color 0.2s;
}

.alert-item:hover { border-color: var(--teal); background: var(--bg-card-hover); }

.alert-item .time {
  font-family: 'Fira Code', monospace;
  font-size: 0.65rem;
  color: var(--text-dim);
}

.alert-item .desc { color: var(--text); }
.alert-item .source { font-family: 'Fira Code', monospace; font-size: 0.62rem; color: var(--text-dim); }

/* ── CAPABILITY / SERVICE CARDS ── */
.cap-grid {
  display: grid;
  grid-template-columns: repeat(3, 1fr);
  gap: 14px;
}

.cap-card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 24px;
  transition: all 0.25s;
  border-top: 3px solid transparent;
}

.cap-card:hover {
  border-top-color: var(--teal);
  transform: translateY(-4px);
  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.25);
}

.cap-card .cap-icon { font-size: 1.4rem; margin-bottom: 12px; }

.cap-card h3 {
  font-size: 0.88rem;
  font-weight: 800;
  color: var(--text-bright);
  margin-bottom: 8px;
}

.cap-card p {
  font-size: 0.72rem;
  line-height: 1.7;
  color: var(--text-dim);
  margin-bottom: 12px;
}

.cap-tags {
  display: flex;
  flex-wrap: wrap;
  gap: 4px;
}

.cap-tags span {
  font-family: 'Fira Code', monospace;
  font-size: 0.55rem;
  padding: 2px 7px;
  border-radius: 3px;
  background: var(--bg-input);
  border: 1px solid var(--border);
  color: var(--text-dim);
}

/* ── IR PHASE CARDS ── */
.ir-phases {
  display: grid;
  grid-template-columns: repeat(4, 1fr);
  gap: 2px;
  background: var(--border);
  border-radius: 6px;
  overflow: hidden;
}

.ir-phase-card {
  background: var(--bg-card);
  padding: 24px 18px;
  text-align: center;
}

.ir-phase-card .phase-num {
  font-family: 'Fira Code', monospace;
  font-size: 1.8rem;
  font-weight: 700;
  color: rgba(23, 198, 178, 0.15);
  margin-bottom: 8px;
}

.ir-phase-card h3 {
  font-size: 0.82rem;
  font-weight: 800;
  color: var(--teal);
  margin-bottom: 6px;
}

.ir-phase-card p {
  font-size: 0.68rem;
  line-height: 1.6;
  color: var(--text-dim);
}

/* ── KNOWLEDGE CARDS ── */
.knowledge-cards {
  display: grid;
  grid-template-columns: repeat(2, 1fr);
  gap: 14px;
}

.k-card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 6px;
  padding: 22px;
}

.k-card h4 {
  font-size: 0.8rem;
  font-weight: 800;
  color: var(--teal);
  margin-bottom: 8px;
  display: flex;
  align-items: center;
  gap: 6px;
}

.k-card p {
  font-size: 0.72rem;
  line-height: 1.75;
  color: var(--text-dim);
}

.k-card p + p { margin-top: 10px; }

/* ── FORM STYLES ── */
.form-layout {
  display: grid;
  grid-template-columns: 1fr 1.3fr;
  gap: 28px;
  align-items: start;
}

.form-info h3 {
  font-size: 1.05rem;
  font-weight: 800;
  color: var(--text-bright);
  margin-bottom: 10px;
}

.form-info p {
  font-size: 0.78rem;
  line-height: 1.7;
  color: var(--text-dim);
  margin-bottom: 18px;
}

.form-meta {
  display: flex;
  flex-direction: column;
  gap: 8px;
  margin-bottom: 20px;
}

.form-meta-item {
  display: flex;
  align-items: center;
  gap: 8px;
  font-size: 0.75rem;
}

.form-meta-item .ico {
  width: 26px; height: 26px;
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 4px;
  display: flex;
  align-items: center;
  justify-content: center;
  font-size: 11px;
  flex-shrink: 0;
}

.form-card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  overflow: hidden;
}

.form-card-header {
  padding: 12px 20px;
  background: rgba(0, 0, 0, 0.2);
  border-bottom: 1px solid var(--border);
  display: flex;
  align-items: center;
  justify-content: space-between;
  font-size: 0.72rem;
  font-weight: 700;
  color: var(--text-dim);
}

.form-card-header .active-indicator {
  display: flex;
  align-items: center;
  gap: 5px;
  font-size: 0.6rem;
  color: var(--green);
}

.form-card-header .active-indicator .dot {
  width: 5px; height: 5px;
  background: var(--green);
  border-radius: 50%;
}

.form-card-body { padding: 22px; }

.cf {
  display: flex;
  flex-direction: column;
  gap: 14px;
}

.cf-row {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 14px;
}

.cf-field label {
  display: block;
  font-size: 0.62rem;
  font-weight: 600;
  color: var(--text-dim);
  text-transform: uppercase;
  letter-spacing: 0.5px;
  margin-bottom: 5px;
}

.cf-field input,
.cf-field textarea,
.cf-field select {
  width: 100%;
  padding: 10px 12px;
  background: var(--bg-input);
  border: 1px solid var(--border);
  border-radius: 4px;
  color: var(--text);
  font-family: 'Fira Code', monospace;
  font-size: 0.76rem;
  transition: border-color 0.2s, box-shadow 0.2s;
}

.cf-field input:focus,
.cf-field textarea:focus,
.cf-field select:focus {
  outline: none;
  border-color: var(--teal);
  box-shadow: 0 0 0 3px var(--teal-dim);
}

.cf-field textarea { resize: vertical; min-height: 100px; }

.recaptcha-notice {
  font-size: 0.58rem;
  color: var(--text-dim);
  margin-top: 4px;
  line-height: 1.5;
}

.recaptcha-notice a { color: var(--text-dim); text-decoration: underline; }

/* ── PROSE CONTENT ── */
.prose {
  max-width: 720px;
}

.prose h2 {
  font-size: 1.2rem;
  font-weight: 800;
  color: var(--text-bright);
  margin-bottom: 12px;
  margin-top: 32px;
}

.prose h2:first-child { margin-top: 0; }

.prose h3 {
  font-size: 0.95rem;
  font-weight: 700;
  color: var(--teal);
  margin-bottom: 8px;
  margin-top: 24px;
}

.prose p {
  font-size: 0.82rem;
  line-height: 1.8;
  color: var(--text);
  margin-bottom: 14px;
}

.prose strong { color: var(--text-bright); }

.prose ul, .prose ol {
  padding-left: 20px;
  margin-bottom: 14px;
}

.prose li {
  font-size: 0.8rem;
  line-height: 1.7;
  color: var(--text);
  margin-bottom: 6px;
}

/* ── CTA BANNER ── */
.cta-banner {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 32px;
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 20px;
  flex-wrap: wrap;
}

.cta-banner h3 {
  font-size: 1rem;
  font-weight: 800;
  color: var(--text-bright);
  margin-bottom: 4px;
}

.cta-banner p {
  font-size: 0.78rem;
  color: var(--text-dim);
}

/* ── HERO CARD ── */
.hero-card {
  background: var(--bg-card);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 36px;
  position: relative;
  overflow: hidden;
}

.hero-card::after {
  content: '';
  position: absolute;
  top: 0; right: 0;
  width: 300px; height: 300px;
  background: radial-gradient(circle, var(--teal-dim) 0%, transparent 70%);
  pointer-events: none;
}

.hero-card .eyebrow {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  font-family: 'Fira Code', monospace;
  font-size: 0.65rem;
  font-weight: 500;
  color: var(--teal);
  margin-bottom: 14px;
}

.hero-card .eyebrow .dot {
  width: 6px; height: 6px;
  background: var(--teal);
  border-radius: 50%;
  animation: pulse 2s ease infinite;
}

@keyframes pulse {
  0%, 100% { opacity: 1; }
  50% { opacity: 0.3; }
}

.hero-card h2 {
  font-size: 1.8rem;
  font-weight: 800;
  color: var(--text-bright);
  line-height: 1.15;
  margin-bottom: 14px;
}

.hero-card h2 .teal { color: var(--teal); }

.hero-card > p {
  font-size: 0.88rem;
  line-height: 1.7;
  color: var(--text-dim);
  max-width: 520px;
  margin-bottom: 24px;
}

.hero-card .actions {
  display: flex;
  gap: 10px;
  flex-wrap: wrap;
}

/* ── FOOTER ── */
footer {
  padding: 24px 28px;
  border-top: 1px solid var(--border);
  font-size: 0.65rem;
  color: var(--text-dim);
  text-align: center;
  line-height: 1.8;
}

/* ── ANIMATIONS ── */
@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }
@keyframes fadeSlideUp {
  from { opacity: 0; transform: translateY(12px); }
  to { opacity: 1; transform: translateY(0); }
}

.fade-in { animation: fadeIn 0.6s ease both; }
.fade-up { animation: fadeSlideUp 0.6s ease both; }
.fade-up-1 { animation: fadeSlideUp 0.6s ease 0.1s both; }
.fade-up-2 { animation: fadeSlideUp 0.6s ease 0.2s both; }
.fade-up-3 { animation: fadeSlideUp 0.6s ease 0.3s both; }

/* ── UTILITY ── */
.overview-grid {
  display: grid;
  grid-template-columns: 2fr 1fr;
  gap: 16px;
}

.stats-stack {
  display: flex;
  flex-direction: column;
  gap: 16px;
}

.text-teal { color: var(--teal); }
.text-bright { color: var(--text-bright); }
.text-dim { color: var(--text-dim); }
.mt-0 { margin-top: 0; }
.mb-0 { margin-bottom: 0; }

/* ── RESPONSIVE ── */
@media (max-width: 1000px) {
  .sidebar {
    transform: translateX(-100%) !important;
    transition: transform 0.3s ease;
    box-shadow: none;
  }
  .sidebar.open {
    transform: translateX(0) !important;
    box-shadow: 8px 0 30px rgba(0, 0, 0, 0.5);
  }
  .sidebar-backdrop.open {
    display: block;
  }
  .main { margin-left: 0; }
  .mobile-toggle { display: flex; }

  .page-header {
    padding-left: 60px;
  }

  .cap-grid { grid-template-columns: 1fr; }
  .ir-phases { grid-template-columns: 1fr 1fr; }
  .form-layout { grid-template-columns: 1fr; }
  .alert-item { grid-template-columns: 1fr; gap: 4px; }
  .overview-grid { grid-template-columns: 1fr; }
}

@media (max-width: 600px) {
  .ir-phases { grid-template-columns: 1fr; }
  .knowledge-cards { grid-template-columns: 1fr; }
  .cf-row { grid-template-columns: 1fr; }
  .content-area { padding: 16px; }
  .page-header {
    padding: 14px 16px 14px 60px;
    flex-direction: column;
    align-items: flex-start;
  }
  .page-header h1 { font-size: 1rem; }
  .header-actions { width: 100%; }
}