:root {
    --bg: #0d1424;
    --bg-card: #151f33;
    --bg-card-2: #1a2740;
    --border: #223254;
    --text: #e0e6f5;
    --text-dim: #8a96b5;
    --text-faint: #5a6788;
    --accent: #38bdf8;
    --accent-2: #22d3ee;
    --danger: #ef4444;
    --danger-bg: #3b1414;
    --warning: #f59e0b;
    --warning-bg: #3b2a0f;
    --success: #10b981;
    --purple: #a855f7;
    --critical-bg: rgba(239, 68, 68, 0.15);
    --critical-border: #ef4444;
    --font-mono: ui-monospace, SFMono-Regular, 'Courier New', monospace;
    --font-sans: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
}

* { box-sizing: border-box; }

body {
    margin: 0;
    background: var(--bg);
    color: var(--text);
    font: 14px/1.5 var(--font-sans);
    min-height: 100vh;
}

a { color: var(--accent); text-decoration: none; }
a:hover { color: var(--accent-2); }

code, pre, .mono { font-family: var(--font-mono); font-size: 13px; }

/* ─── Layout ───────────────────────────────────────────────────────────── */

.layout { display: flex; min-height: 100vh; }

.sidebar {
    width: 220px;
    background: var(--bg-card);
    border-right: 1px solid var(--border);
    display: flex;
    flex-direction: column;
    padding: 16px 0;
    position: fixed;
    height: 100vh;
}

.sidebar .logo {
    padding: 0 20px 24px;
    font-weight: 700;
    font-size: 15px;
    letter-spacing: 0.3px;
}
.sidebar .logo .sub { display: block; font-size: 11px; color: var(--text-dim); font-weight: 400; margin-top: 2px; }
.sidebar .logo .icon {
    display: inline-flex; width: 28px; height: 28px;
    background: var(--accent); color: #07101e; border-radius: 6px;
    align-items: center; justify-content: center; font-weight: 800;
    margin-right: 8px; vertical-align: middle;
}

.nav { display: flex; flex-direction: column; flex: 1; }
.nav a {
    padding: 10px 20px; color: var(--text-dim); display: flex;
    gap: 10px; align-items: center; border-left: 2px solid transparent;
}
.nav a:hover { background: var(--bg-card-2); color: var(--text); }
.nav a.active { color: var(--accent); background: var(--bg-card-2); border-left-color: var(--accent); }

.sidebar .logout { padding: 12px 20px; color: var(--text-dim); font-size: 13px; border-top: 1px solid var(--border); }
.sidebar .logout a { color: var(--text-dim); }
.sidebar .logout a:hover { color: var(--text); }

.main { flex: 1; margin-left: 220px; padding: 24px 32px; max-width: calc(100vw - 220px); }

.page-header {
    display: flex; align-items: center; justify-content: space-between;
    margin-bottom: 20px;
}
.page-header h1 { margin: 0; font-size: 18px; font-weight: 600; }
.page-header .meta { font-size: 12px; color: var(--text-dim); }
.badge-count {
    padding: 3px 10px; background: var(--bg-card-2); border-radius: 12px;
    font-size: 11px; color: var(--text-dim); border: 1px solid var(--border);
}

/* ─── Cards / Sections ─────────────────────────────────────────────────── */

.card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 10px;
    padding: 16px 20px;
    margin-bottom: 16px;
}
.card h2 { margin: 0 0 14px; font-size: 11px; letter-spacing: 1px; text-transform: uppercase; color: var(--text-dim); font-weight: 600; }

.grid { display: grid; gap: 16px; }
.grid-cols-6 { grid-template-columns: repeat(6, 1fr); }
.grid-cols-4 { grid-template-columns: repeat(4, 1fr); }
.grid-cols-2 { grid-template-columns: 1fr 1fr; }
@media (max-width: 1200px) { .grid-cols-6 { grid-template-columns: repeat(3, 1fr); } }
@media (max-width: 800px)  { .grid-cols-6 { grid-template-columns: repeat(2, 1fr); } .grid-cols-2 { grid-template-columns: 1fr; } }

/* KPI cards */
.kpi { padding: 16px 18px; background: var(--bg-card); border: 1px solid var(--border); border-radius: 10px; }
.kpi .label { font-size: 10px; color: var(--text-dim); letter-spacing: 0.8px; text-transform: uppercase; }
.kpi .value { font-size: 26px; font-weight: 600; margin-top: 6px; font-family: var(--font-mono); }
.kpi .hint { font-size: 11px; color: var(--text-faint); margin-top: 4px; }
.kpi.red .value { color: var(--danger); }
.kpi.yellow .value { color: var(--warning); }
.kpi.purple .value { color: var(--purple); }
.kpi.cyan .value { color: var(--accent); }
.kpi.green .value { color: var(--success); }

/* ─── Forms / Filters ──────────────────────────────────────────────────── */

label.field { display: block; margin-bottom: 12px; font-size: 11px; color: var(--text-dim); text-transform: uppercase; letter-spacing: 0.5px; }
label.field input, label.field select {
    display: block; width: 100%; margin-top: 4px;
    padding: 7px 10px; background: var(--bg); color: var(--text);
    border: 1px solid var(--border); border-radius: 6px; font-size: 13px;
    font-family: inherit;
}
label.field input:focus, label.field select:focus { outline: none; border-color: var(--accent); }

.filter-grid { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; }
@media (max-width: 1100px) { .filter-grid { grid-template-columns: repeat(3, 1fr); } }
@media (max-width: 700px) { .filter-grid { grid-template-columns: repeat(2, 1fr); } }

.btn {
    display: inline-block; padding: 7px 14px; background: var(--accent); color: #07101e;
    border: none; border-radius: 6px; cursor: pointer; font-weight: 600; font-size: 13px;
    font-family: inherit;
}
.btn:hover { background: var(--accent-2); }
.btn.secondary { background: var(--bg-card-2); color: var(--text); border: 1px solid var(--border); }
.btn.secondary:hover { background: var(--border); }
.btn.danger { background: var(--danger); color: white; }
.btn.small { padding: 4px 10px; font-size: 12px; }
.btn + .btn { margin-left: 8px; }

.quick { display: inline-flex; gap: 6px; margin-left: 12px; }
.quick button {
    padding: 6px 12px; background: var(--bg-card-2); color: var(--text);
    border: 1px solid var(--border); border-radius: 6px; cursor: pointer; font-size: 12px;
    font-family: inherit;
}
.quick button:hover, .quick button.active { background: var(--accent); color: #07101e; }

/* ─── Tables ───────────────────────────────────────────────────────────── */

.tbl { width: 100%; border-collapse: collapse; font-size: 13px; }
.tbl thead th {
    text-align: left; padding: 10px 12px; color: var(--text-dim);
    font-size: 10px; letter-spacing: 0.7px; text-transform: uppercase;
    border-bottom: 1px solid var(--border);
    font-weight: 600; background: var(--bg-card);
}
.tbl tbody td { padding: 10px 12px; border-bottom: 1px solid var(--border); }
.tbl tbody tr:hover { background: var(--bg-card-2); cursor: pointer; }
.tbl .right { text-align: right; }
.tbl .mono-sm { font-family: var(--font-mono); font-size: 12px; }

.pager { display: flex; gap: 6px; justify-content: flex-end; padding: 12px 0; }
.pager button { padding: 6px 10px; background: var(--bg-card-2); border: 1px solid var(--border); color: var(--text); border-radius: 6px; cursor: pointer; font-size: 12px; }
.pager button:disabled { opacity: 0.4; cursor: not-allowed; }

/* ─── Badges ───────────────────────────────────────────────────────────── */

.badge {
    display: inline-block; padding: 3px 9px; border-radius: 4px; font-size: 10px;
    font-weight: 600; letter-spacing: 0.4px; text-transform: uppercase;
    border: 1px solid transparent;
}
.badge-critical { background: var(--critical-bg); color: #ff8585; border-color: rgba(239,68,68,0.35); }
.badge-error    { background: rgba(239,68,68,0.1); color: #ff8585; }
.badge-warning  { background: rgba(245,158,11,0.15); color: #ffc06a; }
.badge-notice   { background: rgba(56,189,248,0.12); color: var(--accent); }
.badge-blocked  { background: var(--critical-bg); color: #ff8585; border-color: rgba(239,68,68,0.35); }
.badge-ok       { background: rgba(16,185,129,0.15); color: var(--success); }
.badge-info     { background: rgba(56,189,248,0.12); color: var(--accent); }
.badge-type     { background: var(--bg-card-2); color: var(--text-dim); border: 1px solid var(--border); font-family: var(--font-mono); text-transform: lowercase; letter-spacing: 0; }
.badge-attack   { background: rgba(168,85,247,0.15); color: #d8b4fe; border: 1px solid rgba(168,85,247,0.4); font-family: var(--font-mono); text-transform: lowercase; letter-spacing: 0; }
.badge-tag      { background: var(--bg-card-2); color: var(--text-dim); border: 1px solid var(--border); font-family: var(--font-mono); text-transform: none; letter-spacing: 0; }

.score-bar {
    display: inline-block; width: 60px; height: 4px;
    background: var(--bg-card-2); border-radius: 2px; vertical-align: middle;
}
.score-bar > div { height: 100%; background: var(--accent); border-radius: 2px; }

/* ─── Event detail (tabs) ──────────────────────────────────────────────── */

.evt-head {
    display: grid; grid-template-columns: 1fr auto auto auto auto; gap: 24px;
    padding: 16px 20px; background: var(--bg-card); border: 1px solid var(--border);
    border-radius: 10px; margin-bottom: 16px; align-items: center;
}
.evt-head .tag { font-size: 10px; color: var(--text-dim); letter-spacing: 0.5px; text-transform: uppercase; }
.evt-head .val { font-size: 13px; margin-top: 3px; }

.evt-rule-banner {
    padding: 16px 20px; background: var(--bg-card);
    border: 1px solid var(--border); border-left: 4px solid var(--danger);
    border-radius: 8px; margin-bottom: 20px;
}
.evt-rule-banner .title { font-size: 15px; font-weight: 600; margin-top: 4px; }
.evt-rule-banner .meta { margin-top: 8px; display: flex; gap: 10px; flex-wrap: wrap; align-items: center; }

.tabs { display: flex; border-bottom: 1px solid var(--border); margin-bottom: 16px; gap: 4px; }
.tab {
    padding: 10px 18px; color: var(--text-dim); cursor: pointer;
    border-bottom: 2px solid transparent; font-size: 13px;
}
.tab:hover { color: var(--text); }
.tab.active { color: var(--accent); border-bottom-color: var(--accent); font-weight: 500; }
.tab-panel { display: none; }
.tab-panel.active { display: block; }

.kv { display: grid; grid-template-columns: 140px 1fr; gap: 8px 16px; padding: 4px 0; }
.kv > div:nth-child(odd) { color: var(--text-dim); font-size: 12px; }
.kv > div:nth-child(even) { font-family: var(--font-mono); font-size: 13px; word-break: break-all; }

.rule-card {
    background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px;
    padding: 14px 16px; margin-bottom: 10px;
}
.rule-card .head { display: flex; justify-content: space-between; align-items: center; margin-bottom: 10px; }
.rule-card .head strong { font-size: 13px; }
.rule-card .kv { grid-template-columns: 80px 1fr; }
.rule-card .tags { margin-top: 8px; display: flex; flex-wrap: wrap; gap: 4px; }

pre.raw {
    background: #070d1a; border: 1px solid var(--border); border-radius: 6px;
    padding: 14px; font-family: var(--font-mono); font-size: 12px;
    white-space: pre-wrap; word-break: break-all;
    max-height: 600px; overflow: auto; color: #c5cee0;
}

/* ─── Login ────────────────────────────────────────────────────────────── */

.login-wrap {
    display: flex; align-items: center; justify-content: center;
    min-height: 100vh; background: var(--bg);
}
.login-card {
    width: 380px; background: var(--bg-card); border: 1px solid var(--border);
    border-radius: 12px; padding: 32px;
}
.login-card h1 { margin: 0 0 4px; font-size: 18px; }
.login-card .sub { color: var(--text-dim); font-size: 13px; margin-bottom: 24px; }
.login-card label { display: block; font-size: 11px; color: var(--text-dim); letter-spacing: 0.5px; text-transform: uppercase; margin-top: 14px; margin-bottom: 4px; }
.login-card input {
    display: block; width: 100%; padding: 9px 12px; background: var(--bg);
    color: var(--text); border: 1px solid var(--border); border-radius: 6px;
    font-size: 14px; font-family: inherit;
}
.login-card input:focus { outline: none; border-color: var(--accent); }
.login-card .btn { width: 100%; padding: 10px; margin-top: 20px; font-size: 14px; }
.login-card .error {
    margin-top: 14px; padding: 10px; background: var(--danger-bg);
    border: 1px solid var(--danger); border-radius: 6px;
    color: #ffaaaa; font-size: 13px;
}

/* ─── Modal (TOTP re-prompt para IA) ───────────────────────────────────── */

.modal-backdrop {
    position: fixed; inset: 0; background: rgba(0,0,0,0.7);
    display: flex; align-items: center; justify-content: center; z-index: 100;
}
.modal {
    background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px;
    padding: 24px; width: 420px; max-width: 90vw;
}
.modal h3 { margin: 0 0 6px; font-size: 15px; }
.modal p { color: var(--text-dim); font-size: 13px; margin: 0 0 16px; }
.modal input {
    width: 100%; padding: 10px; background: var(--bg);
    border: 1px solid var(--border); color: var(--text); border-radius: 6px;
    font-family: var(--font-mono); font-size: 18px; text-align: center; letter-spacing: 4px;
}
.modal .actions { display: flex; gap: 8px; margin-top: 16px; justify-content: flex-end; }

/* ─── Diagnostic result ────────────────────────────────────────────────── */

.diag {
    margin-top: 14px; padding: 16px; background: var(--bg-card); border: 1px solid var(--border);
    border-radius: 8px;
}
.diag.false_positive { border-left: 4px solid var(--success); }
.diag.real_attack    { border-left: 4px solid var(--danger); }
.diag.suspicious     { border-left: 4px solid var(--warning); }
.diag.inconclusive   { border-left: 4px solid var(--text-dim); }
.diag .verdict { font-weight: 600; margin-bottom: 6px; text-transform: uppercase; letter-spacing: 0.8px; font-size: 12px; }
.diag.false_positive .verdict { color: var(--success); }
.diag.real_attack .verdict    { color: var(--danger); }
.diag.suspicious .verdict     { color: var(--warning); }
.diag .narrative { line-height: 1.55; margin-bottom: 10px; }
.diag .reco { color: var(--text-dim); font-size: 13px; border-top: 1px solid var(--border); padding-top: 10px; }
.diag .footer-meta { font-size: 11px; color: var(--text-faint); margin-top: 8px; }

.muted { color: var(--text-dim); }
.empty { padding: 40px; text-align: center; color: var(--text-dim); }
.spinner { display: inline-block; width: 14px; height: 14px; border: 2px solid var(--border); border-top-color: var(--accent); border-radius: 50%; animation: spin 0.8s linear infinite; }
@keyframes spin { to { transform: rotate(360deg); } }