:root {
  --bg: #f4f6f8;
  --card: #ffffff;
  --text: #1a2332;
  --muted: #5c6b7a;
  --accent: #0b6e4f;
  --accent-hover: #095c42;
  --border: #d5dde5;
  --error: #9b1c1c;
  --error-bg: #fde8e8;
  --info-bg: #e8f4fd;
  --radius: 8px;
  --font: "Segoe UI", system-ui, sans-serif;
}

* { box-sizing: border-box; }
body {
  margin: 0;
  font-family: var(--font);
  color: var(--text);
  background: linear-gradient(160deg, #eef3f7 0%, var(--bg) 45%, #e7eef5 100%);
  min-height: 100vh;
}
.container {
  max-width: 1100px;
  width: 100%;
  margin: 0 auto;
  padding: 1rem 1.25rem 3rem;
  overflow-x: clip;
}
.app-header {
  display: flex;
  justify-content: space-between;
  align-items: center;
  gap: 1rem;
  margin-bottom: 1.5rem;
  padding-bottom: 0.75rem;
  border-bottom: 1px solid var(--border);
}
.app-header a { color: var(--text); text-decoration: none; }
.nav-links { display: flex; gap: 0.75rem; align-items: center; }
/* Fixed so short pages still show it; pointer-events off so it never
   swallows clicks on content scrolled underneath. */
.app-footer {
  position: fixed;
  bottom: 0;
  left: 0;
  right: 0;
  padding: 8px 12px;
  font-size: 0.8rem;
  font-variant-numeric: tabular-nums;
  color: var(--muted);
  text-align: center;
  pointer-events: none;
  z-index: 40;
}
.findings-subnav {
  display: flex;
  gap: 1rem;
  margin: 0 0 1rem;
  font-size: 0.95rem;
}
.findings-subnav a { color: var(--muted); text-decoration: none; }
.findings-subnav a:hover { color: var(--text); }
.findings-subnav a[aria-current="page"] {
  color: var(--accent);
  font-weight: 600;
}
.scope-panel {
  display: grid;
  gap: 0.55rem;
  margin: 0 0 1rem;
  padding: 0.75rem 0.9rem;
  border: 1px solid var(--border);
  border-radius: 6px;
  background: #f8fafb;
  font-size: 0.9rem;
}
.scope-row {
  display: grid;
  grid-template-columns: 5.5rem minmax(0, 1fr);
  gap: 0.65rem;
  align-items: start;
}
.scope-label {
  color: var(--muted);
  font-weight: 600;
  font-size: 0.8rem;
  text-transform: uppercase;
  letter-spacing: 0.02em;
  padding-top: 0.15rem;
}
.scope-value {
  color: var(--text);
  word-break: break-word;
}
.scope-source {
  color: var(--muted);
  font-size: 0.8rem;
  margin-left: 0.4rem;
  white-space: nowrap;
}
.scope-source::before {
  content: "from ";
}
.scope-chips {
  display: flex;
  flex-wrap: wrap;
  gap: 0.4rem;
}
.scope-chip {
  display: inline-flex;
  align-items: center;
  gap: 0.35rem;
  padding: 0.2rem 0.55rem;
  border-radius: 999px;
  border: 1px solid var(--border);
  background: #fff;
  font-size: 0.8rem;
  line-height: 1.3;
}
.scope-chip-name {
  color: var(--muted);
  font-weight: 600;
}
.scope-chip-state {
  font-weight: 700;
  text-transform: lowercase;
}
.scope-chip.scope-live {
  border-color: #9dceb8;
  background: #e8f6ef;
}
.scope-chip.scope-live .scope-chip-state { color: #0b6e4f; }
.scope-chip.scope-mock {
  border-color: #c5d4e8;
  background: #eef4fb;
}
.scope-chip.scope-mock .scope-chip-state { color: #2f5f8f; }
.scope-chip.scope-inactive,
.scope-chip.scope-off {
  border-color: #e0c4c4;
  background: #f8ecec;
}
.scope-chip.scope-inactive .scope-chip-state,
.scope-chip.scope-off .scope-chip-state { color: #9b1c1c; }

/* A collector running on a subset of the approved scope. Amber, not green: the
   chip may read "live" while most approved domains go unchecked. */
.scope-chip-scope {
  padding: 0 0.4rem;
  border-radius: 999px;
  border: 1px solid #e6cb92;
  background: #fdf3e2;
  color: #8a5a06;
  font-size: 0.72rem;
  font-weight: 700;
  white-space: nowrap;
}
.scope-count {
  margin-left: 0.4rem;
  padding: 0 0.35rem;
  border-radius: 999px;
  border: 1px solid #e6cb92;
  background: #fdf3e2;
  color: #8a5a06;
  font-size: 0.75rem;
  font-weight: 700;
  white-space: nowrap;
}

/* Job health sits next to the config mode: "what is configured" vs "is it running". */
.scope-chip-job {
  padding: 0 0.4rem;
  border-radius: 999px;
  border: 1px solid transparent;
  font-size: 0.72rem;
  font-weight: 700;
  white-space: nowrap;
}
.scope-chip-job.job-ok {
  background: #e8f6ef;
  border-color: #9dceb8;
  color: #0b6e4f;
}
.scope-chip-job.job-warning {
  background: #fdf3e2;
  border-color: #e6cb92;
  color: #8a5a06;
}
.scope-chip-job.job-critical {
  background: #f8ecec;
  border-color: #e0a4a4;
  color: #9b1c1c;
}
.scope-chip-job.job-unknown,
.scope-chip-job.job-disabled {
  background: #f1f1f0;
  border-color: #d8d8d6;
  color: var(--muted);
}

/* Job chips carry no config mode, only health — keep them visually neutral. */
.scope-chip.scope-job {
  border-color: var(--border);
  background: #fafafa;
}

.bulk-bar {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.4rem;
  margin-bottom: 0.75rem;
  padding-bottom: 0.75rem;
  border-bottom: 1px solid var(--border);
}
.bulk-label {
  color: var(--muted);
  font-size: 0.85rem;
  margin-right: 0.2rem;
}
.card {
  background: var(--card);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 1.25rem 1.5rem;
  box-shadow: 0 1px 2px rgba(26, 35, 50, 0.04);
  max-width: 100%;
  overflow-x: auto;
}
.table-wrap {
  display: block;
  width: 100%;
  max-width: 100%;
  overflow-x: auto;
  -webkit-overflow-scrolling: touch;
}
h1 { margin-top: 0; font-size: 1.4rem; }
label { display: block; margin: 0.75rem 0 0.35rem; font-weight: 600; font-size: 0.9rem; }
input, select {
  max-width: 100%;
  padding: 0.45rem 0.55rem;
  border: 1px solid var(--border);
  border-radius: 6px;
  font: inherit;
  background: #fff;
}
input { width: 100%; }
.btn {
  display: inline-block;
  border: none;
  background: var(--accent);
  color: #fff;
  padding: 0.55rem 1rem;
  border-radius: 6px;
  font: inherit;
  cursor: pointer;
}
.btn:hover { background: var(--accent-hover); }
.btn-ghost {
  background: transparent;
  color: var(--text);
  border: 1px solid var(--border);
}
.btn-ghost:hover { background: var(--border); }
.btn-ghost:disabled { opacity: 0.55; cursor: not-allowed; }
.invite-actions {
  display: flex;
  flex-wrap: wrap;
  gap: 0.4rem;
  white-space: nowrap;
}
.muted { color: var(--muted); font-size: 0.9rem; }
.alert {
  padding: 0.65rem 0.8rem;
  border-radius: 6px;
  margin: 0.75rem 0;
}
.alert-error { background: var(--error-bg); color: var(--error); }
.alert-info { background: var(--info-bg); color: #0b4f7a; }
.table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.85rem;
}
.table-hibp {
  table-layout: fixed;
}
.table th, .table td {
  text-align: left;
  padding: 0.35rem 0.4rem;
  border-bottom: 1px solid var(--border);
  vertical-align: middle;
}
.table-hibp th, .table-hibp td {
  overflow: hidden;
  text-overflow: ellipsis;
}
.table th { white-space: nowrap; color: var(--muted); font-weight: 600; }
.table th.sortable {
  cursor: pointer;
  user-select: none;
}
.table th.sortable:hover { color: var(--text); }
.table th.sortable::after {
  content: " ↕";
  font-size: 0.75em;
  opacity: 0.35;
}
.table th.sortable.sorted-asc::after { content: " ↑"; opacity: 0.8; }
.table th.sortable.sorted-desc::after { content: " ↓"; opacity: 0.8; }
.table .col-email,
.table .col-target { word-break: break-all; }
.table-hibp .col-email,
.table-hibp .col-target { width: 32%; }
.table .col-breach { word-break: break-word; }
.table-hibp .col-breach { width: 26%; }
.table .col-sev { width: 3.5rem; }
.table .col-seen {
  white-space: nowrap;
  font-variant-numeric: tabular-nums;
}
.table-hibp .col-seen { width: 7.25rem; }

.table-ports .col-target { width: 28%; }
.table-ports .col-port { width: 5rem; font-variant-numeric: tabular-nums; }
.table-ports .col-proto { width: 4.5rem; }
.table-ports .col-via { width: 14%; }
.table-tls {
  table-layout: fixed;
}
.table-tls th, .table-tls td {
  vertical-align: top;
}
.table-tls .col-target { width: 22%; }
.table-tls .col-port { width: 5rem; font-variant-numeric: tabular-nums; }
.table-tls .col-issue { width: 18%; word-break: break-word; }
.table-tls .col-detail { width: 28%; word-break: break-word; }
.table-censys {
  table-layout: fixed;
}
.table-censys th, .table-censys td {
  overflow: hidden;
  text-overflow: ellipsis;
}
.table-censys .col-type { width: 9.5rem; }
.table-censys .col-target { width: 42%; }
.table-censys .col-detail { width: 28%; word-break: break-word; }

.table-dns {
  table-layout: fixed;
}
.table-dns th, .table-dns td {
  overflow: hidden;
  text-overflow: ellipsis;
}
.table-dns .col-target { width: 22%; }
.table-dns .col-rrtype {
  width: 4.5rem;
  font-variant-numeric: tabular-nums;
  font-weight: 600;
}
.table-dns .col-rdata { width: 36%; word-break: break-all; }
.table-dns .col-via { width: 12%; }
.table .col-status { width: 6.5rem; }
.table .col-comment { min-width: 10rem; max-width: 16rem; }

/* Inventory tables on the per-service pages. One row is an entity (a hostname,
   an address, a domain), not a single record — the ledger keeps that job. */
.table-overview { table-layout: fixed; }
.table-overview th, .table-overview td {
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
}
.table-overview .col-state { width: 5.5rem; }
.table-overview .col-entity { width: 26%; word-break: break-all; white-space: normal; }
.table-overview .col-sev { width: 5rem; }
.table-overview .col-count { width: 6rem; }
.table-overview .state-row-unchanged .col-entity a { color: var(--text); }
.state-badge {
  display: inline-block;
  padding: 0 0.4rem;
  border-radius: 999px;
  font-size: 0.72rem;
  font-weight: 700;
  border: 1px solid transparent;
}
/* Amber, not red: something appeared, which is a question, not yet a fault. */
.state-new { border-color: #e6cb92; background: #fdf3e2; color: #8a5a06; }
.state-changed { border-color: #bcd7ef; background: #e8f4fd; color: #17457a; }
.state-unchanged { color: var(--muted); }
.sev-critical, .sev-high { color: var(--error); font-weight: 700; }
.sev-medium { color: #8a5a06; font-weight: 600; }
.sev-low { color: var(--muted); }
.inline-check { margin-right: 0.75rem; font-size: 0.9rem; color: var(--muted); }
/* An active filter has to be obvious: an empty list must never be mistaken for
   "there is nothing here". */
#q-filter.filter-active {
  border-color: #e6cb92;
  background: #fdf3e2;
  font-weight: 600;
}
.ledger-truncated { color: #8a5a06; font-weight: 600; }
.table .status-select {
  width: 100%;
  max-width: 100%;
  padding: 0.25rem 0.3rem;
  font-size: 0.8rem;
}
.table textarea.review-comment {
  width: 100%;
  max-width: 100%;
  min-height: 2.4rem;
  resize: vertical;
  padding: 0.3rem 0.4rem;
  border: 1px solid var(--border);
  border-radius: 6px;
  font: inherit;
  font-size: 0.8rem;
  background: #fff;
}
.table a.breach-link {
  color: var(--accent);
  text-decoration: none;
}
.table a.breach-link:hover { text-decoration: underline; }
.table a.host-link {
  color: var(--accent);
  text-decoration: none;
}
.table a.host-link:hover { text-decoration: underline; }
.stack label { display: block; }
fieldset { border: 1px solid var(--border); border-radius: 6px; margin: 0.75rem 0; padding: 0.5rem 0.75rem; }
fieldset label { display: inline-flex; gap: 0.35rem; align-items: center; margin-right: 0.75rem; font-weight: 500; }
fieldset input { width: auto; }