/* ==========================================================================
   DFIR ANALYST ASSISTANT — styles.css
   Design language: dark SOC console. Monospace for anything that is
   "evidence" (paths, hashes, event IDs, commands); a quieter sans face
   for UI chrome and prose. Signature element: the terminal-style top bar
   with a live clock + blinking cursor, echoed in card headers as
   `// comment` labels.
   ========================================================================== */

:root{
  /* ---- palette (name every token; do not hardcode hex elsewhere) ---- */
  --bg:            #0a0d12;
  --bg-raised:     #0e131a;
  --panel:         #111820;
  --panel-alt:     #0d1319;
  --border:        #1e2833;
  --border-soft:   #182129;

  --text:          #dfe8ef;
  --text-muted:    #8695a4;
  --text-dim:      #57626e;

  --accent:        #33e0c2;   /* forensic teal — primary */
  --accent-dim:    #1c8f7d;
  --accent-glow:   rgba(51,224,194,0.15);

  --sev-crit:      #ff5c6c;
  --sev-high:      #ff8a4c;
  --sev-med:       #ffc857;
  --sev-low:       #6ee7a0;
  --sev-info:      #5aa7ff;

  --font-mono: 'JetBrains Mono', ui-monospace, 'SFMono-Regular', Menlo, Consolas, monospace;
  --font-sans: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;

  --radius: 4px;
  --sidebar-w: 258px;
  --topbar-h: 52px;
}

*, *::before, *::after{ box-sizing: border-box; }

html, body{
  height: 100%;
  margin: 0;
  background: var(--bg);
  color: var(--text);
  font-family: var(--font-sans);
  font-size: 14px;
  line-height: 1.5;
}

body{
  background-image:
    linear-gradient(var(--border-soft) 1px, transparent 1px),
    linear-gradient(90deg, var(--border-soft) 1px, transparent 1px);
  background-size: 48px 48px;
  background-attachment: fixed;
  background-color: var(--bg);
  background-position: -1px -1px;
}

::selection{ background: var(--accent-glow); color: var(--accent); }

button, input{ font-family: inherit; }

a{ color: var(--accent); }

code, .mono{ font-family: var(--font-mono); }

/* ============================== TOP BAR ============================== */

.topbar{
  height: var(--topbar-h);
  display: flex;
  align-items: center;
  gap: 24px;
  padding: 0 16px;
  background: var(--bg-raised);
  border-bottom: 1px solid var(--border);
  position: sticky;
  top: 0;
  z-index: 40;
}

.topbar-brand{
  display: flex;
  align-items: baseline;
  gap: 8px;
  white-space: nowrap;
  font-family: var(--font-mono);
}
.brand-mark{ color: var(--accent); font-size: 18px; }
.brand-text{ font-weight: 700; letter-spacing: 0.06em; font-size: 13px; }
.brand-sub{ color: var(--text-dim); font-size: 12px; }

.topbar-search{
  flex: 1;
  display: flex;
  align-items: center;
  gap: 8px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 7px 12px;
  max-width: 560px;
  font-family: var(--font-mono);
}
.topbar-search:focus-within{
  border-color: var(--accent-dim);
  box-shadow: 0 0 0 3px var(--accent-glow);
}
.prompt-glyph{ color: var(--accent); font-weight: 700; }
.topbar-search input{
  flex: 1;
  background: transparent;
  border: none;
  outline: none;
  color: var(--text);
  font-size: 13px;
}
.topbar-search input::placeholder{ color: var(--text-dim); }
.cursor-blink{
  color: var(--accent);
  animation: blink 1.1s steps(1) infinite;
}
@keyframes blink{ 50%{ opacity: 0; } }
@media (prefers-reduced-motion: reduce){
  .cursor-blink{ animation: none; }
}

.topbar-status{
  display: flex;
  align-items: center;
  gap: 8px;
  font-family: var(--font-mono);
  font-size: 12px;
  color: var(--text-muted);
  white-space: nowrap;
}
.status-dot{
  width: 7px; height: 7px;
  border-radius: 50%;
  background: var(--sev-low);
  box-shadow: 0 0 6px var(--sev-low);
  animation: pulse 2s ease-in-out infinite;
}
@keyframes pulse{ 0%,100%{ opacity: 1;} 50%{ opacity: .35; } }
.status-divider{ color: var(--border); }
.topbar-status strong{ color: var(--text); }

/* search results dropdown */
.search-results{
  position: fixed;
  top: var(--topbar-h);
  left: 50%;
  transform: translateX(-50%);
  width: min(560px, 90vw);
  max-height: 60vh;
  overflow-y: auto;
  background: var(--panel);
  border: 1px solid var(--border);
  border-top: none;
  border-radius: 0 0 var(--radius) var(--radius);
  z-index: 50;
  box-shadow: 0 12px 24px rgba(0,0,0,0.4);
}
.search-results.hidden{ display: none; }
.search-hit{
  display: block;
  width: 100%;
  text-align: left;
  padding: 10px 14px;
  background: transparent;
  border: none;
  border-bottom: 1px solid var(--border-soft);
  color: var(--text);
  cursor: pointer;
}
.search-hit:hover{ background: var(--panel-alt); }
.search-hit .hit-cat{
  font-family: var(--font-mono);
  font-size: 10px;
  color: var(--accent);
  text-transform: uppercase;
  letter-spacing: 0.05em;
  display: block;
  margin-bottom: 2px;
}
.search-empty{ padding: 14px; color: var(--text-dim); font-family: var(--font-mono); font-size: 12px; }

/* ============================== SHELL ============================== */

.app-shell{
  display: flex;
  min-height: calc(100vh - var(--topbar-h));
}

.sidebar{
  width: var(--sidebar-w);
  flex-shrink: 0;
  background: var(--bg-raised);
  border-right: 1px solid var(--border);
  padding: 16px 10px;
  position: sticky;
  top: var(--topbar-h);
  height: calc(100vh - var(--topbar-h));
  overflow-y: auto;
}

.sidebar-group-label{
  font-family: var(--font-mono);
  font-size: 10px;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--text-dim);
  margin: 18px 10px 6px;
}
.sidebar-group-label:first-child{ margin-top: 4px; }

.nav-item{
  display: block;
  width: 100%;
  text-align: left;
  background: transparent;
  border: none;
  border-left: 2px solid transparent;
  color: var(--text-muted);
  padding: 8px 10px;
  border-radius: var(--radius);
  font-size: 13px;
  cursor: pointer;
  margin-bottom: 2px;
}
.nav-item:hover{ background: var(--panel); color: var(--text); }
.nav-item.active{
  background: var(--panel);
  color: var(--accent);
  border-left-color: var(--accent);
  font-weight: 600;
}

.sidebar-footer{
  margin-top: 24px;
  padding: 12px 10px;
  border-top: 1px solid var(--border-soft);
  font-size: 11px;
  color: var(--text-dim);
}

.content{
  flex: 1;
  padding: 28px 32px 60px;
  max-width: 1180px;
}

/* ============================== TYPOGRAPHY ============================== */

.view-header{ margin-bottom: 22px; }
.view-eyebrow{
  font-family: var(--font-mono);
  font-size: 11px;
  color: var(--accent);
  text-transform: uppercase;
  letter-spacing: 0.08em;
  margin: 0 0 6px;
}
.view-title{ font-size: 22px; font-weight: 700; margin: 0 0 8px; }
.view-desc{ color: var(--text-muted); max-width: 720px; margin: 0; }

h3.section-title{
  font-size: 13px;
  font-family: var(--font-mono);
  color: var(--text-muted);
  text-transform: uppercase;
  letter-spacing: 0.05em;
  margin: 28px 0 12px;
  padding-bottom: 6px;
  border-bottom: 1px solid var(--border-soft);
}
h3.section-title:before{ content: "// "; color: var(--accent-dim); }

/* ============================== CARDS / GRID ============================== */

.card-grid{
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(240px, 1fr));
  gap: 12px;
}

.card{
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 14px 16px;
  cursor: pointer;
  transition: border-color .12s, transform .12s;
}
.card:hover{ border-color: var(--accent-dim); transform: translateY(-1px); }
.card-title{ font-weight: 600; margin: 0 0 4px; font-size: 13.5px; }
.card-sub{ color: var(--text-dim); font-size: 12px; font-family: var(--font-mono); margin: 0; }

/* ============================== TABLES ============================== */

.data-table{
  width: 100%;
  border-collapse: collapse;
  font-size: 13px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  overflow: hidden;
}
.data-table th{
  text-align: left;
  font-family: var(--font-mono);
  font-size: 11px;
  text-transform: uppercase;
  letter-spacing: 0.04em;
  color: var(--text-dim);
  background: var(--panel-alt);
  padding: 9px 12px;
  border-bottom: 1px solid var(--border);
}
.data-table td{
  padding: 9px 12px;
  border-bottom: 1px solid var(--border-soft);
  vertical-align: top;
}
.data-table tr:last-child td{ border-bottom: none; }
.data-table tr.clickable{ cursor: pointer; }
.data-table tr.clickable:hover{ background: var(--panel-alt); }

/* ============================== BADGES ============================== */

.badge{
  display: inline-block;
  font-family: var(--font-mono);
  font-size: 10.5px;
  padding: 2px 7px;
  border-radius: 3px;
  border: 1px solid currentColor;
  text-transform: uppercase;
  letter-spacing: 0.03em;
}
.badge-crit{ color: var(--sev-crit); background: rgba(255,92,108,0.08); }
.badge-high{ color: var(--sev-high); background: rgba(255,138,76,0.08); }
.badge-med{  color: var(--sev-med);  background: rgba(255,200,87,0.08); }
.badge-low{  color: var(--sev-low);  background: rgba(110,231,160,0.08); }
.badge-info{ color: var(--sev-info); background: rgba(90,167,255,0.08); }
.badge-neutral{ color: var(--text-muted); background: var(--panel-alt); }

/* ============================== CODE BLOCKS ============================== */

.code-block{
  position: relative;
  background: var(--panel-alt);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 12px 40px 12px 14px;
  font-family: var(--font-mono);
  font-size: 12.5px;
  color: var(--accent);
  white-space: pre-wrap;
  word-break: break-word;
  margin: 8px 0;
}
.copy-btn{
  position: absolute;
  top: 8px; right: 8px;
  background: var(--panel);
  border: 1px solid var(--border);
  color: var(--text-muted);
  font-family: var(--font-mono);
  font-size: 10px;
  padding: 4px 8px;
  border-radius: 3px;
  cursor: pointer;
}
.copy-btn:hover{ color: var(--accent); border-color: var(--accent-dim); }
.copy-btn.copied{ color: var(--sev-low); border-color: var(--sev-low); }

/* ============================== FORMS ============================== */

.field{ margin-bottom: 14px; }
.field label{
  display: block;
  font-family: var(--font-mono);
  font-size: 11px;
  color: var(--text-muted);
  text-transform: uppercase;
  letter-spacing: 0.04em;
  margin-bottom: 5px;
}
.field input[type=text],
.field input[type=datetime-local],
.field select,
.field textarea{
  width: 100%;
  background: var(--panel-alt);
  border: 1px solid var(--border);
  color: var(--text);
  padding: 8px 10px;
  border-radius: var(--radius);
  font-size: 13px;
  outline: none;
}
.field textarea{ min-height: 70px; resize: vertical; font-family: var(--font-mono); }
.field input:focus, .field select:focus, .field textarea:focus{
  border-color: var(--accent-dim);
  box-shadow: 0 0 0 3px var(--accent-glow);
}
.field-row{ display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }

.btn{
  background: var(--accent);
  color: #04211c;
  border: none;
  font-weight: 700;
  font-size: 13px;
  padding: 9px 16px;
  border-radius: var(--radius);
  cursor: pointer;
}
.btn:hover{ background: #4ceed3; }
.btn-ghost{
  background: transparent;
  border: 1px solid var(--border);
  color: var(--text-muted);
}
.btn-ghost:hover{ color: var(--text); border-color: var(--accent-dim); }
.btn-danger{ background: var(--sev-crit); color: #2a0508; }
.btn-danger:hover{ background: #ff7c88; }
.btn-row{ display: flex; gap: 8px; flex-wrap: wrap; }

/* ============================== CHECKLIST ============================== */

.checklist{ list-style: none; padding: 0; margin: 0; }
.checklist li{
  display: flex;
  align-items: flex-start;
  gap: 9px;
  padding: 7px 0;
  border-bottom: 1px solid var(--border-soft);
}
.checklist li:last-child{ border-bottom: none; }
.checklist input[type=checkbox]{
  margin-top: 3px;
  accent-color: var(--accent);
  width: 15px; height: 15px;
  flex-shrink: 0;
}
.checklist label{ cursor: pointer; }

/* ============================== IR LIFECYCLE ============================== */

.phase-rail{
  display: flex;
  gap: 6px;
  margin-bottom: 20px;
  flex-wrap: wrap;
}
.phase-pill{
  font-family: var(--font-mono);
  font-size: 12px;
  padding: 8px 14px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: 20px;
  color: var(--text-muted);
  cursor: pointer;
  display: flex;
  align-items: center;
  gap: 8px;
}
.phase-pill .num{ color: var(--text-dim); }
.phase-pill:hover{ border-color: var(--accent-dim); color: var(--text); }
.phase-pill.active{
  background: var(--accent-glow);
  border-color: var(--accent);
  color: var(--accent);
}

.two-col{ display: grid; grid-template-columns: 1.3fr 1fr; gap: 20px; }
@media (max-width: 900px){ .two-col{ grid-template-columns: 1fr; } }

.qa-list{ margin: 0; padding-left: 18px; color: var(--text-muted); }
.qa-list li{ margin-bottom: 6px; }

/* ============================== TIMELINE ============================== */

.timeline{ position: relative; margin-top: 20px; padding-left: 24px; }
.timeline:before{
  content: "";
  position: absolute;
  left: 5px; top: 4px; bottom: 4px;
  width: 1px;
  background: var(--border);
}
.timeline-entry{ position: relative; padding-bottom: 20px; }
.timeline-entry:before{
  content: "";
  position: absolute;
  left: -24px; top: 4px;
  width: 9px; height: 9px;
  border-radius: 50%;
  background: var(--bg);
  border: 2px solid var(--accent);
}
.timeline-time{ font-family: var(--font-mono); font-size: 11px; color: var(--accent); }
.timeline-card{
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 10px 14px;
  margin-top: 4px;
}
.timeline-card h4{ margin: 0 0 4px; font-size: 13.5px; }
.timeline-meta{ font-family: var(--font-mono); font-size: 11px; color: var(--text-dim); display: flex; gap: 10px; flex-wrap: wrap; margin-top: 6px; }

/* ============================== NOTEBOOK ============================== */

.note-entry{
  background: var(--panel);
  border: 1px solid var(--border);
  border-left: 3px solid var(--accent-dim);
  border-radius: var(--radius);
  padding: 12px 14px;
  margin-bottom: 10px;
}
.note-meta{ font-family: var(--font-mono); font-size: 11px; color: var(--text-dim); margin-bottom: 6px; }
.note-body{ white-space: pre-wrap; font-size: 13px; }

/* ============================== EMPTY STATES ============================== */

.empty-state{
  border: 1px dashed var(--border);
  border-radius: var(--radius);
  padding: 30px;
  text-align: center;
  color: var(--text-dim);
  font-family: var(--font-mono);
  font-size: 12.5px;
}

/* ============================== MODAL ============================== */

.modal-backdrop{
  position: fixed; inset: 0;
  background: rgba(4,6,9,0.72);
  display: flex; align-items: flex-start; justify-content: center;
  padding: 60px 20px;
  z-index: 100;
  overflow-y: auto;
}
.modal{
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: 6px;
  max-width: 720px;
  width: 100%;
  padding: 26px 28px;
  position: relative;
  box-shadow: 0 20px 60px rgba(0,0,0,0.5);
}
.modal-close{
  position: absolute; top: 14px; right: 16px;
  background: transparent; border: none;
  color: var(--text-muted);
  font-size: 22px;
  cursor: pointer;
  line-height: 1;
}
.modal-close:hover{ color: var(--text); }

.detail-grid{ display: grid; grid-template-columns: 140px 1fr; gap: 8px 14px; margin-top: 16px; }
.detail-grid dt{ font-family: var(--font-mono); font-size: 11px; color: var(--text-dim); text-transform: uppercase; padding-top: 2px; }
.detail-grid dd{ margin: 0; color: var(--text); }

/* ============================== MISC ============================== */

.tag-row{ display: flex; gap: 6px; flex-wrap: wrap; margin-top: 8px; }
.hidden{ display: none !important; }

.ioc-table td.copyable{ font-family: var(--font-mono); font-size: 12.5px; cursor: pointer; }
.ioc-table td.copyable:hover{ color: var(--accent); }

.filter-row{ display: flex; gap: 8px; margin-bottom: 16px; flex-wrap: wrap; }
.filter-chip{
  font-family: var(--font-mono);
  font-size: 11.5px;
  padding: 6px 12px;
  border-radius: 20px;
  background: var(--panel);
  border: 1px solid var(--border);
  color: var(--text-muted);
  cursor: pointer;
}
.filter-chip.active{ background: var(--accent-glow); border-color: var(--accent); color: var(--accent); }

.disclaimer-strip{
  margin-top: 30px;
  padding: 10px 14px;
  border: 1px solid var(--border-soft);
  border-radius: var(--radius);
  color: var(--text-dim);
  font-size: 11.5px;
  font-family: var(--font-mono);
}

/* ============================== SUPPORT WIDGET ============================== */

.support-widget{
  position: fixed;
  right: 18px;
  bottom: 18px;
  z-index: 60;
  display: flex;
  flex-direction: column;
  align-items: flex-end;
  gap: 8px;
}

.support-toggle{
  display: flex;
  align-items: center;
  gap: 7px;
  background: var(--panel);
  border: 1px solid var(--border);
  color: var(--text-muted);
  font-family: var(--font-mono);
  font-size: 11.5px;
  letter-spacing: 0.03em;
  padding: 9px 14px;
  border-radius: 20px;
  cursor: pointer;
  box-shadow: 0 8px 20px rgba(0,0,0,0.35);
}
.support-toggle:hover{
  color: var(--accent);
  border-color: var(--accent-dim);
}
.support-glyph{
  color: var(--sev-crit);
  font-size: 12px;
}

.support-panel{
  width: 240px;
  background: var(--panel);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 14px;
  box-shadow: 0 12px 28px rgba(0,0,0,0.4);
}
.support-panel.hidden{ display: none; }
.support-copy{
  margin: 0 0 12px;
  font-family: var(--font-mono);
  font-size: 11.5px;
  color: var(--text-dim);
  line-height: 1.5;
}
.support-btn{
  display: block;
  width: 100%;
  text-align: center;
  text-decoration: none;
}

@media (max-width: 760px){
  .support-widget{ right: 12px; bottom: 12px; }
  .support-panel{ width: 200px; }
}

@media (max-width: 760px){
  .app-shell{ flex-direction: column; }
  .sidebar{ position: static; width: 100%; height: auto; display: flex; flex-wrap: wrap; }
  .sidebar-group-label{ width: 100%; }
  .content{ padding: 20px; }
  .field-row{ grid-template-columns: 1fr; }
  .topbar{ gap: 10px; }
  .brand-sub{ display: none; }
}