/* ========================================
   PacketHunter Enterprise SOC — Main CSS
   ======================================== */

*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }

:root {
    --bg-base: #0a0e1a;
    --bg-surface: #111827;
    --bg-elevated: #1a2236;
    --bg-card: #131c2e;
    --border: #1e3a5f;
    --border-light: #243b55;
    --text-primary: #e2e8f0;
    --text-secondary: #94a3b8;
    --text-muted: #475569;
    --accent: #3b82f6;
    --accent-dark: #1e40af;
    --accent-light: #60a5fa;
    --danger: #ef4444;
    --danger-bg: rgba(239, 68, 68, 0.1);
    --warn: #f59e0b;
    --warn-bg: rgba(245, 158, 11, 0.1);
    --success: #22c55e;
    --success-bg: rgba(34, 197, 94, 0.1);
    --info: #06b6d4;
    --sidebar-width: 220px;
}

html, body {
    height: 100%;
    background: var(--bg-base);
    color: var(--text-primary);
    font-family: 'Segoe UI', system-ui, -apple-system, sans-serif;
    font-size: 14px;
    line-height: 1.5;
}

/* ── LAYOUT ─────────────────────────────── */
.sidebar {
    position: fixed;
    top: 0; left: 0; bottom: 0;
    width: var(--sidebar-width);
    background: var(--bg-surface);
    border-right: 1px solid var(--border);
    display: flex;
    flex-direction: column;
    z-index: 100;
    overflow-y: auto;
}

.main-content {
    margin-left: var(--sidebar-width);
    min-height: 100vh;
    display: flex;
    flex-direction: column;
}

/* ── SIDEBAR ─────────────────────────────── */
.sidebar-brand {
    padding: 20px 16px;
    display: flex;
    align-items: center;
    gap: 12px;
    border-bottom: 1px solid var(--border);
}

.sidebar-logo {
    width: 38px;
    height: 38px;
    background: linear-gradient(135deg, var(--accent-dark), var(--accent));
    border-radius: 10px;
    display: flex;
    align-items: center;
    justify-content: center;
    font-size: 18px;
    flex-shrink: 0;
}

.sidebar-title {
    font-weight: 700;
    font-size: 0.95rem;
    color: var(--text-primary);
}

.sidebar-sub {
    font-size: 0.7rem;
    color: var(--text-muted);
    letter-spacing: 0.06em;
    text-transform: uppercase;
}

.sidebar-nav {
    padding: 12px 8px;
    flex: 1;
}

.nav-item {
    display: flex;
    align-items: center;
    gap: 10px;
    padding: 9px 12px;
    border-radius: 8px;
    color: var(--text-secondary);
    cursor: pointer;
    font-size: 0.87rem;
    font-weight: 500;
    transition: all 0.15s;
    text-decoration: none;
    position: relative;
    margin-bottom: 2px;
}

.nav-item:hover { background: var(--bg-elevated); color: var(--text-primary); }
.nav-item.active { background: rgba(59, 130, 246, 0.15); color: var(--accent-light); }

.nav-icon { font-size: 15px; width: 18px; text-align: center; flex-shrink: 0; }

.nav-badge {
    margin-left: auto;
    background: var(--danger);
    color: white;
    font-size: 0.68rem;
    font-weight: 700;
    padding: 1px 6px;
    border-radius: 999px;
    min-width: 20px;
    text-align: center;
}

.sidebar-footer {
    padding: 16px;
    border-top: 1px solid var(--border);
}

.btn-new-analysis {
    display: block;
    text-align: center;
    padding: 9px;
    background: linear-gradient(135deg, var(--accent-dark), var(--accent));
    color: white;
    border-radius: 8px;
    font-size: 0.83rem;
    font-weight: 600;
    text-decoration: none;
    transition: opacity 0.2s;
}

.btn-new-analysis:hover { opacity: 0.85; }

/* ── TOP BAR ─────────────────────────────── */
.topbar {
    padding: 16px 28px;
    background: var(--bg-surface);
    border-bottom: 1px solid var(--border);
    display: flex;
    align-items: center;
    justify-content: space-between;
    gap: 16px;
    position: sticky;
    top: 0;
    z-index: 50;
}

.topbar-title { font-size: 1.15rem; font-weight: 700; color: var(--text-primary); }
.topbar-meta { font-size: 0.78rem; color: var(--text-muted); margin-top: 2px; }

.topbar-right { display: flex; gap: 8px; align-items: center; }

.severity-pill {
    padding: 4px 12px;
    border-radius: 999px;
    font-size: 0.72rem;
    font-weight: 700;
    letter-spacing: 0.06em;
}

.severity-pill.critical { background: var(--danger-bg); color: #fca5a5; border: 1px solid rgba(239,68,68,0.3); }
.severity-pill.high { background: var(--warn-bg); color: #fcd34d; border: 1px solid rgba(245,158,11,0.3); }
.severity-pill.medium { background: rgba(59,130,246,0.1); color: #93c5fd; border: 1px solid rgba(59,130,246,0.3); }

/* ── SECTIONS ────────────────────────────── */
.content-section { display: none; padding: 28px; flex: 1; }
.content-section.active { display: block; }

.section-header { margin-bottom: 24px; }
.section-header h2 { font-size: 1.2rem; font-weight: 700; color: var(--text-primary); }
.section-subtitle { font-size: 0.82rem; color: var(--text-muted); margin-top: 4px; }

/* ── STAT CARDS ──────────────────────────── */
.stat-grid {
    display: grid;
    grid-template-columns: repeat(4, 1fr);
    gap: 16px;
    margin-bottom: 28px;
}

.stat-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 12px;
    padding: 20px;
    transition: border-color 0.2s;
}

.stat-card:hover { border-color: var(--accent); }
.stat-card.danger { border-color: rgba(239,68,68,0.3); }

.stat-val {
    font-size: 1.8rem;
    font-weight: 700;
    color: var(--accent-light);
    line-height: 1;
    margin-bottom: 6px;
}

.stat-card.danger .stat-val { color: #fca5a5; }
.stat-label { font-size: 0.78rem; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.06em; }

/* ── CHARTS ──────────────────────────────── */
.chart-grid {
    display: grid;
    grid-template-columns: 1fr 1fr;
    gap: 20px;
    margin-bottom: 28px;
}

.chart-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 12px;
    padding: 20px;
}

.chart-card.full-width { grid-column: 1 / -1; }

.chart-title {
    font-size: 0.85rem;
    font-weight: 600;
    color: var(--text-secondary);
    text-transform: uppercase;
    letter-spacing: 0.06em;
    margin-bottom: 16px;
}

/* ── TABLES ──────────────────────────────── */
.data-table {
    width: 100%;
    border-collapse: collapse;
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 10px;
    overflow: hidden;
    font-size: 0.83rem;
}

.data-table th {
    background: var(--bg-elevated);
    padding: 10px 14px;
    text-align: left;
    color: var(--text-muted);
    font-weight: 600;
    text-transform: uppercase;
    font-size: 0.72rem;
    letter-spacing: 0.06em;
    border-bottom: 1px solid var(--border);
    white-space: nowrap;
}

.data-table td {
    padding: 9px 14px;
    border-bottom: 1px solid rgba(30, 58, 95, 0.5);
    color: var(--text-secondary);
    vertical-align: middle;
}

.data-table tr:last-child td { border-bottom: none; }
.data-table tr:hover td { background: rgba(59, 130, 246, 0.04); }

.data-table .mono { font-family: 'Consolas', 'Courier New', monospace; }

/* ── BADGES ──────────────────────────────── */
.badge {
    display: inline-block;
    padding: 2px 8px;
    border-radius: 999px;
    font-size: 0.7rem;
    font-weight: 700;
    letter-spacing: 0.04em;
}

.badge-critical { background: var(--danger-bg); color: #fca5a5; border: 1px solid rgba(239,68,68,0.4); }
.badge-high     { background: var(--warn-bg); color: #fcd34d; border: 1px solid rgba(245,158,11,0.4); }
.badge-medium   { background: rgba(59,130,246,0.12); color: #93c5fd; border: 1px solid rgba(59,130,246,0.3); }
.badge-low      { background: rgba(100,116,139,0.15); color: #94a3b8; border: 1px solid rgba(100,116,139,0.3); }
.badge-internal { background: rgba(34,197,94,0.1); color: #86efac; border: 1px solid rgba(34,197,94,0.3); }
.badge-external { background: rgba(245,158,11,0.1); color: #fcd34d; border: 1px solid rgba(245,158,11,0.3); }
.badge-suspicious { background: var(--danger-bg); color: #fca5a5; border: 1px solid rgba(239,68,68,0.3); }
.badge-clean    { background: rgba(34,197,94,0.08); color: #86efac; border: 1px solid rgba(34,197,94,0.2); }

/* ── DETECTION ALERTS ────────────────────── */
.alert-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-left: 4px solid var(--accent);
    border-radius: 10px;
    padding: 16px 20px;
    margin-bottom: 12px;
    transition: border-color 0.2s;
}

.alert-card.critical { border-left-color: var(--danger); }
.alert-card.high     { border-left-color: var(--warn); }
.alert-card.medium   { border-left-color: var(--accent); }
.alert-card.low      { border-left-color: var(--text-muted); }

.alert-header { display: flex; align-items: center; gap: 12px; margin-bottom: 8px; }
.alert-name { font-weight: 600; font-size: 0.95rem; color: var(--text-primary); flex: 1; }
.alert-confidence { font-size: 0.75rem; color: var(--text-muted); }

.alert-meta { display: flex; gap: 16px; margin-bottom: 10px; flex-wrap: wrap; }
.alert-meta-item { font-size: 0.78rem; color: var(--text-muted); }
.alert-meta-item strong { color: var(--text-secondary); }

.alert-mitre {
    display: inline-block;
    background: rgba(59,130,246,0.1);
    border: 1px solid rgba(59,130,246,0.25);
    color: #93c5fd;
    font-size: 0.72rem;
    padding: 2px 8px;
    border-radius: 4px;
    margin-bottom: 10px;
    font-family: monospace;
}

.alert-evidence { list-style: none; }
.alert-evidence li {
    font-size: 0.8rem;
    color: var(--text-muted);
    padding: 2px 0;
    padding-left: 12px;
    position: relative;
}
.alert-evidence li::before { content: '▸'; position: absolute; left: 0; color: var(--accent); }

/* ── ANOMALY BOXES ───────────────────────── */
.anomaly-list { margin-bottom: 20px; }
.anomaly-item {
    background: var(--bg-elevated);
    border: 1px solid var(--border);
    border-left: 3px solid var(--warn);
    border-radius: 8px;
    padding: 12px 16px;
    margin-bottom: 8px;
    font-size: 0.83rem;
}

.anomaly-item.critical { border-left-color: var(--danger); }
.anomaly-item.high { border-left-color: var(--warn); }
.anomaly-item.medium { border-left-color: var(--accent); }

.anomaly-title { font-weight: 600; color: var(--text-primary); margin-bottom: 4px; }
.anomaly-detail { color: var(--text-muted); }

/* ── SUSPICION SCORE BAR ─────────────────── */
.score-bar { display: flex; align-items: center; gap: 8px; }
.score-track {
    flex: 1;
    height: 6px;
    background: var(--bg-elevated);
    border-radius: 999px;
    overflow: hidden;
}
.score-fill {
    height: 100%;
    border-radius: 999px;
    background: var(--accent);
    transition: width 0.3s;
}
.score-fill.score-high { background: var(--warn); }
.score-fill.score-critical { background: var(--danger); }
.score-num { font-size: 0.78rem; color: var(--text-muted); min-width: 30px; text-align: right; }

/* ── BEACONING CARDS ─────────────────────── */
.beacon-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 10px;
    padding: 20px;
    margin-bottom: 16px;
    display: grid;
    grid-template-columns: 1fr auto;
    gap: 16px;
    align-items: start;
}

.beacon-hosts { font-weight: 600; color: var(--text-primary); font-size: 0.95rem; margin-bottom: 8px; }
.beacon-hosts .arrow { color: var(--accent); margin: 0 8px; }

.beacon-stats {
    display: flex;
    gap: 20px;
    flex-wrap: wrap;
    margin-top: 10px;
}

.beacon-stat { text-align: center; }
.beacon-stat .bs-val { font-size: 1.2rem; font-weight: 700; color: var(--accent-light); }
.beacon-stat .bs-label { font-size: 0.72rem; color: var(--text-muted); }

.beacon-confidence {
    text-align: center;
    padding: 12px 20px;
    border-radius: 10px;
    background: var(--bg-elevated);
}

.confidence-val {
    font-size: 2rem;
    font-weight: 800;
    line-height: 1;
}

.confidence-label { font-size: 0.72rem; color: var(--text-muted); margin-top: 4px; }

/* ── TCP STREAMS ─────────────────────────── */
.streams-layout { align-items: flex-start; }
.stream-list { background: var(--bg-card); border: 1px solid var(--border); border-radius: 10px; overflow: hidden; }
.stream-item {
    padding: 10px 14px;
    border-bottom: 1px solid var(--border);
    cursor: pointer;
    transition: background 0.15s;
    font-size: 0.82rem;
}
.stream-item:hover { background: var(--bg-elevated); }
.stream-item.active { background: rgba(59,130,246,0.1); border-left: 3px solid var(--accent); }
.stream-item:last-child { border-bottom: none; }
.stream-addr { color: var(--text-primary); font-weight: 500; font-family: monospace; font-size: 0.8rem; }
.stream-meta { color: var(--text-muted); font-size: 0.75rem; margin-top: 2px; }

.stream-viewer {
    background: #060d1a;
    border: 1px solid var(--border);
    border-radius: 10px;
    padding: 16px;
    font-family: 'Consolas', 'Courier New', monospace;
    font-size: 0.78rem;
    overflow: auto;
    max-height: 75vh;
    white-space: pre-wrap;
    word-break: break-all;
    color: #a0c4ff;
    line-height: 1.6;
}

.stream-placeholder {
    color: var(--text-muted);
    font-family: system-ui;
    text-align: center;
    padding: 60px 20px;
}

.client-data { color: #86efac; }
.server-data { color: #93c5fd; }

/* ── TWO COLUMN ──────────────────────────── */
.two-col {
    display: grid;
    grid-template-columns: 1fr 1fr;
    gap: 20px;
}

.card-title {
    font-size: 0.82rem;
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.06em;
    color: var(--text-muted);
    margin-bottom: 12px;
}

/* ── TAB BAR ─────────────────────────────── */
.tab-bar { display: flex; gap: 4px; margin-bottom: 16px; }

.tab {
    padding: 6px 14px;
    border: 1px solid var(--border);
    border-radius: 6px;
    background: var(--bg-card);
    color: var(--text-secondary);
    font-size: 0.82rem;
    cursor: pointer;
    transition: all 0.15s;
}

.tab:hover { background: var(--bg-elevated); color: var(--text-primary); }
.tab.active { background: rgba(59,130,246,0.15); border-color: rgba(59,130,246,0.4); color: var(--accent-light); }

/* ── FILTER BAR ──────────────────────────── */
.filter-bar { display: flex; gap: 8px; margin-bottom: 12px; }

.filter-input {
    flex: 1;
    padding: 10px 14px;
    background: var(--bg-elevated);
    border: 1px solid var(--border);
    border-radius: 8px;
    color: var(--text-primary);
    font-family: 'Consolas', monospace;
    font-size: 0.88rem;
    outline: none;
    transition: border-color 0.2s;
}

.filter-input:focus { border-color: var(--accent); }
.filter-input::placeholder { color: var(--text-muted); }

.btn-primary {
    padding: 10px 18px;
    background: linear-gradient(135deg, var(--accent-dark), var(--accent));
    color: white;
    border: none;
    border-radius: 8px;
    font-size: 0.85rem;
    font-weight: 600;
    cursor: pointer;
    white-space: nowrap;
}

.btn-secondary {
    padding: 10px 18px;
    background: var(--bg-elevated);
    color: var(--text-secondary);
    border: 1px solid var(--border);
    border-radius: 8px;
    font-size: 0.85rem;
    cursor: pointer;
}

.filter-examples { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 16px; }

.filter-chip {
    padding: 4px 10px;
    background: var(--bg-elevated);
    border: 1px solid var(--border);
    border-radius: 6px;
    color: var(--accent-light);
    font-family: monospace;
    font-size: 0.78rem;
    cursor: pointer;
    transition: all 0.15s;
}

.filter-chip:hover { background: rgba(59,130,246,0.1); border-color: var(--accent); }

/* ── FILE CARDS ──────────────────────────── */
.file-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 10px;
    padding: 16px 20px;
    display: flex;
    align-items: center;
    gap: 16px;
    margin-bottom: 10px;
}

.file-card.suspicious { border-left: 3px solid var(--danger); }

.file-icon { font-size: 28px; }
.file-info { flex: 1; }
.file-name { font-weight: 600; color: var(--text-primary); font-family: monospace; font-size: 0.88rem; }
.file-meta { font-size: 0.78rem; color: var(--text-muted); margin-top: 4px; }
.file-hash { font-family: monospace; font-size: 0.72rem; color: var(--text-muted); margin-top: 4px; }

.btn-download {
    padding: 7px 14px;
    background: var(--bg-elevated);
    border: 1px solid var(--border);
    border-radius: 7px;
    color: var(--accent-light);
    font-size: 0.82rem;
    cursor: pointer;
    text-decoration: none;
    white-space: nowrap;
    transition: all 0.15s;
}

.btn-download:hover { background: rgba(59,130,246,0.1); border-color: var(--accent); }

/* ── IOC REPORT ──────────────────────────── */
.ioc-card {
    background: var(--bg-card);
    border: 1px solid var(--border);
    border-radius: 10px;
    padding: 20px;
    margin-bottom: 16px;
}

.ioc-card h3 { font-size: 1rem; font-weight: 600; margin-bottom: 12px; color: var(--text-primary); }
.ioc-table { width: 100%; border-collapse: collapse; font-size: 0.82rem; }
.ioc-table td { padding: 6px 8px; border-bottom: 1px solid rgba(30,58,95,0.4); color: var(--text-secondary); }
.ioc-table td:first-child { font-family: monospace; color: var(--text-primary); }
.ioc-table tr:last-child td { border-bottom: none; }

/* ── EMPTY STATE ─────────────────────────── */
.empty-state {
    text-align: center;
    padding: 60px 20px;
    color: var(--text-muted);
}

.empty-state .es-icon { font-size: 40px; margin-bottom: 12px; }
.empty-state .es-text { font-size: 0.9rem; }

/* ── LOADING ─────────────────────────────── */
.loading {
    text-align: center;
    padding: 60px;
    color: var(--text-muted);
    font-size: 1rem;
}

.loading::after {
    content: '';
    display: block;
    width: 32px;
    height: 32px;
    border: 3px solid var(--border);
    border-top-color: var(--accent);
    border-radius: 50%;
    margin: 20px auto 0;
    animation: spin 0.8s linear infinite;
}

@keyframes spin { to { transform: rotate(360deg); } }

/* ── SCROLLBAR ───────────────────────────── */
::-webkit-scrollbar { width: 6px; height: 6px; }
::-webkit-scrollbar-track { background: var(--bg-base); }
::-webkit-scrollbar-thumb { background: var(--border-light); border-radius: 3px; }
::-webkit-scrollbar-thumb:hover { background: var(--accent-dark); }

/* ── RESPONSIVE ──────────────────────────── */
@media (max-width: 900px) {
    .stat-grid { grid-template-columns: repeat(2, 1fr); }
    .chart-grid { grid-template-columns: 1fr; }
    .two-col { grid-template-columns: 1fr; }
}