/* =============================================================================
   IIS Log Analyzer — shared stylesheet
   -----------------------------------------------------------------------------
   Every page links this file FIRST and keeps only its own page-specific rules
   in its inline <style> block afterwards, so a page can still override anything
   here without touching this file.

   Edit the knobs in the ":root" block below to restyle the whole app at once:
   page width, spacing, radii, font family, font sizes and every colour.
   ============================================================================= */

:root{
  color-scheme: light;

  /* ---------- layout knobs ---------- */
  --wrap-max: 1400px;          /* content width of every standard page       */
  --wrap-max-narrow: 560px;    /* .wrap.wrap-narrow (docs.php menu page)     */
  --wrap-max-wide: 1920px;     /* .wrap.wrap-wide (every page except docs.php) */
  --wrap-pad-x: 20px;
  --wrap-pad-top: 28px;
  --wrap-pad-bottom: 100px;
  --table-min: 640px;          /* below this a table scrolls sideways        */
  --radius-card: 15px;
  --radius-control: 9px;
  --radius-btn: 8px;

  /* ---------- type ---------- */
  --font-ui: "IBM Plex Sans", system-ui, -apple-system, "Segoe UI", sans-serif;
  --font-mono: "IBM Plex Mono", ui-monospace, "SFMono-Regular", Menlo, Consolas, monospace;
  /* Named by role, not by size — change one value here and every place that
     plays that role follows (tables, labels, buttons, headings, …). */
  --fs-label: 10.5px;          /* uppercase field labels, table headers      */
  --fs-micro: 11px;            /* pills, tiny meta                          */
  --fs-meta: 11.5px;           /* footnotes, meta rows                      */
  --fs-small: 12px;            /* dense mono cells, small buttons           */
  --fs-body: 12.5px;           /* default UI text, table body               */
  --fs-ui: 13px;               /* buttons, brand strapline                  */
  --fs-lead: 13.5px;           /* intro / empty-state text                  */
  --fs-input-lg: 14px;         /* login-style inputs and buttons            */
  --fs-title: 14.5px;          /* card headings                             */
  --fs-title-lg: 15px;         /* admin card headings                       */
  --fs-h1-sm: 18px;            /* login / docs page heading                 */
  --fs-h1: 19px;               /* brand heading                             */
  --fs-kpi: 22px;
  --fs-kpi-hero: 26px;

  /* ---------- colour ---------- */
  --page:#f9f9f7; --surface:#fcfcfb; --surface-2:#f2f1ec; --surface-3:#ececE6;
  --ink:#0b0b0b; --ink-2:#52514e; --muted:#898781;
  --grid:#e1e0d9; --baseline:#c3c2b7;
  --border:rgba(11,11,11,0.10); --border-strong:rgba(11,11,11,0.16);
  --accent:#2a78d6; --accent-ink:#ffffff; --accent-wash:rgba(42,120,214,0.10); --accent-wash-strong:rgba(42,120,214,0.18);
  --series-2:#eb6834;          /* second chart series, pairs with --accent (CVD-validated) */
  --good:#0ca30c; --warning:#fab219; --serious:#ec835a; --critical:#d03b3b;
  --good-wash:rgba(12,163,12,0.12); --warning-wash:rgba(250,178,25,0.20); --serious-wash:rgba(236,131,90,0.16); --critical-wash:rgba(208,59,59,0.12);
  /* admin.php's older names for the same two roles — kept as aliases so its
     markup doesn't need rewriting. */
  --warn:var(--warning); --warn-wash:var(--warning-wash);
  /* categorical series colours (charts, method chips) */
  --cat-1:#2a78d6; --cat-2:#eb6834; --cat-3:#1baf7a; --cat-4:#eda100; --cat-5:#e87ba4; --cat-6:#008300; --cat-7:#4a3aa7; --cat-8:#e34948;
  --shadow: 0 1px 2px rgba(11,11,11,0.04), 0 6px 20px -8px rgba(11,11,11,0.10);
}

/* Dark palette. Two blocks on purpose: the media query follows the OS unless
   the page is explicitly forced light, the attribute block wins when a theme
   is pinned on <html data-theme="dark">. Only colours change — every size,
   radius and font knob above is shared by both themes. */
@media (prefers-color-scheme: dark){
  :root:not([data-theme="light"]){
    color-scheme: dark;
    --page:#0d0d0d; --surface:#1a1a19; --surface-2:#212120; --surface-3:#282827;
    --ink:#ffffff; --ink-2:#c3c2b7; --muted:#8f8d87;
    --grid:#2c2c2a; --baseline:#383835;
    --border:rgba(255,255,255,0.10); --border-strong:rgba(255,255,255,0.16);
    --accent:#3987e5; --accent-ink:#ffffff; --accent-wash:rgba(57,135,229,0.16); --accent-wash-strong:rgba(57,135,229,0.26);
    --series-2:#d95926;
    --good:#0ca30c; --warning:#fab219; --serious:#ec835a; --critical:#d03b3b;
    --good-wash:rgba(12,163,12,0.18); --warning-wash:rgba(250,178,25,0.16); --serious-wash:rgba(236,131,90,0.18); --critical-wash:rgba(208,59,59,0.20);
    --cat-1:#3987e5; --cat-2:#d95926; --cat-3:#199e70; --cat-4:#c98500; --cat-5:#d55181; --cat-6:#3fbf3f; --cat-7:#9085e9; --cat-8:#e66767;
    --shadow: 0 1px 2px rgba(0,0,0,0.3), 0 10px 30px -10px rgba(0,0,0,0.5);
  }
}
:root[data-theme="dark"]{
  color-scheme: dark;
  --page:#0d0d0d; --surface:#1a1a19; --surface-2:#212120; --surface-3:#282827;
  --ink:#ffffff; --ink-2:#c3c2b7; --muted:#8f8d87;
  --grid:#2c2c2a; --baseline:#383835;
  --border:rgba(255,255,255,0.10); --border-strong:rgba(255,255,255,0.16);
  --accent:#3987e5; --accent-ink:#ffffff; --accent-wash:rgba(57,135,229,0.16); --accent-wash-strong:rgba(57,135,229,0.26);
  --series-2:#d95926;
  --good:#0ca30c; --warning:#fab219; --serious:#ec835a; --critical:#d03b3b;
  --good-wash:rgba(12,163,12,0.18); --warning-wash:rgba(250,178,25,0.16); --serious-wash:rgba(236,131,90,0.18); --critical-wash:rgba(208,59,59,0.20);
  --cat-1:#3987e5; --cat-2:#d95926; --cat-3:#199e70; --cat-4:#c98500; --cat-5:#d55181; --cat-6:#3fbf3f; --cat-7:#9085e9; --cat-8:#e66767;
  --shadow: 0 1px 2px rgba(0,0,0,0.3), 0 10px 30px -10px rgba(0,0,0,0.5);
}

/* ============================= base ============================= */
*{ box-sizing:border-box; }
html,body{ margin:0; padding:0; }
body{ background:var(--page); color:var(--ink); font-family:var(--font-ui); -webkit-font-smoothing:antialiased; }
::selection{ background:var(--accent-wash-strong); }
@media (prefers-reduced-motion: reduce){ *{ animation-duration:0.001ms !important; transition-duration:0.001ms !important; } }
.mono{ font-family:var(--font-mono); }
.ip-long{ font-size:var(--fs-label); letter-spacing:-0.02em; } /* full-length IPv6 in table cells (ipCell) */
.sr-only{ position:absolute; width:1px; height:1px; padding:0; margin:-1px; overflow:hidden; clip:rect(0,0,0,0); white-space:nowrap; border:0; }

/* ============================= page shell ============================= */
.wrap{ max-width:var(--wrap-max); margin:0 auto; padding:var(--wrap-pad-top) var(--wrap-pad-x) var(--wrap-pad-bottom); }
.wrap-narrow{ max-width:var(--wrap-max-narrow); padding-bottom:var(--wrap-pad-top); }
.wrap-wide{ max-width:var(--wrap-max-wide); }
.wrap-wide td.trunc{ max-width:560px; }

.topbar{ display:flex; align-items:flex-end; justify-content:space-between; gap:16px; flex-wrap:wrap; margin-bottom:14px; }
.brand{ display:flex; align-items:center; gap:12px; }
.brand-mark{ width:38px; height:38px; border-radius:var(--radius-control); background:var(--ink); color:var(--page); display:flex; align-items:center; justify-content:center; font-family:var(--font-mono); font-weight:600; font-size:var(--fs-input-lg); flex:none; text-decoration:none; }
.brand h1{ margin:0; font-size:var(--fs-h1); font-weight:700; letter-spacing:-0.01em; }
.brand p{ margin:2px 0 0; font-size:var(--fs-ui); color:var(--ink-2); }
.topbar-actions{ display:flex; gap:8px; align-items:center; }

/* ============================= tab navigation ============================= */
/* Shared across every page via includes/nav.php (except docs.php, which
   stays a minimal link-only page) — one definition here keeps all pages
   in sync instead of each hand-rolling its own topbar-actions link row. */
.tabnav{ display:flex; gap:4px; align-items:center; overflow-x:auto; border-bottom:1px solid var(--border); margin-bottom:22px; }
.tabnav .tab{ font-family:var(--font-ui); font-size:var(--fs-ui); font-weight:600; color:var(--ink-2); text-decoration:none; white-space:nowrap; padding:10px 14px; border-bottom:2px solid transparent; transition:color .12s,border-color .12s; }
.tabnav .tab:hover{ color:var(--ink); }
.tabnav .tab:focus-visible{ outline:2px solid var(--accent); outline-offset:-2px; }
.tabnav .tab.active{ color:var(--ink); border-bottom-color:var(--accent); }

/* ============================= buttons ============================= */
.btn{ font-family:var(--font-ui); font-size:var(--fs-ui); font-weight:600; border-radius:var(--radius-btn); border:1px solid var(--border-strong); background:var(--surface); color:var(--ink); padding:8px 14px; cursor:pointer; display:inline-flex; align-items:center; gap:7px; transition:background .12s,border-color .12s; text-decoration:none; }
.btn:hover{ background:var(--surface-2); }
.btn:focus-visible{ outline:2px solid var(--accent); outline-offset:2px; }
.btn:disabled{ opacity:.5; cursor:not-allowed; }
.btn-primary{ background:var(--accent); border-color:var(--accent); color:var(--accent-ink); }
.btn-primary:hover{ filter:brightness(1.06); background:var(--accent); }
.btn-ghost{ background:transparent; border-color:transparent; color:var(--ink-2); }
.btn-ghost:hover{ background:var(--surface-2); color:var(--ink); }
.btn-danger{ background:transparent; border-color:var(--critical); color:var(--critical); }
.btn-danger:hover{ background:var(--critical-wash); }
.btn-sm{ padding:5px 10px; font-size:var(--fs-small); }
.linklike{ background:none; border:none; padding:0; color:var(--accent); font-weight:600; font-size:var(--fs-small); cursor:pointer; font-family:var(--font-ui); text-decoration:underline; }

/* ============================= forms ============================= */
.field{ display:flex; flex-direction:column; gap:4px; }
.field label{ font-size:var(--fs-label); text-transform:uppercase; letter-spacing:.06em; color:var(--muted); font-weight:600; }
select, input[type="text"], input[type="password"], input[type="datetime-local"]{ font-family:var(--font-ui); font-size:var(--fs-body); padding:7px 10px; border-radius:var(--radius-control); border:1px solid var(--border-strong); background:var(--surface); color:var(--ink); }
select:focus-visible, input:focus-visible{ outline:2px solid var(--accent); outline-offset:1px; }
/* Shared yyyy-MM-dd HH:mm:ss datetime field (js/dt-input.js): mono text input + calendar button that pops the off-screen native picker. */
.dt-wrap{ position:relative; display:inline-flex; align-items:stretch; }
.dt-wrap input.dt-text{ font-family:var(--font-mono); width:186px; padding-right:34px; }
.dt-wrap input.dt-text.dt-date{ width:126px; }
.dt-wrap input.dt-text.dt-invalid{ border-color:var(--critical); }
.dt-wrap .dt-btn{ position:absolute; right:4px; top:50%; transform:translateY(-50%); width:26px; height:26px; display:inline-flex; align-items:center; justify-content:center; border:none; border-radius:6px; background:transparent; color:var(--muted); cursor:pointer; padding:0; }
.dt-wrap .dt-btn:hover{ background:var(--surface-2); color:var(--ink); }
.dt-wrap .dt-btn:focus-visible{ outline:2px solid var(--accent); outline-offset:1px; }
.dt-wrap .dt-native{ position:absolute; right:4px; bottom:0; width:1px; height:1px; opacity:0; pointer-events:none; border:0; padding:0; margin:0; }
.field input[type="date"], .field input[type="time"]{ font-family:var(--font-mono); font-size:var(--fs-body); padding:6.5px 9px; border-radius:7px; border:1px solid var(--border-strong); background:var(--surface); color:var(--ink); }

/* segmented control (bucket size, date presets) */
.seg{ display:inline-flex; border:1px solid var(--border-strong); border-radius:var(--radius-control); overflow:hidden; background:var(--surface); }
.seg button{ font-family:var(--font-mono); font-size:var(--fs-small); font-weight:500; padding:7px 11px; border:none; background:transparent; color:var(--ink-2); cursor:pointer; border-right:1px solid var(--border); }
.seg button:last-child{ border-right:none; }
.seg button.active{ background:var(--accent); color:var(--accent-ink); font-weight:600; }
.seg button:hover:not(.active){ background:var(--surface-2); }

/* ============================= toolbar / chips ============================= */
.toolbar{ display:flex; align-items:center; gap:10px; flex-wrap:wrap; margin:0 0 18px; }
.toolbar .spacer{ flex:1 1 auto; }
.chip{ display:inline-flex; align-items:center; gap:6px; padding:6px 11px; border-radius:999px; background:var(--surface-2); border:1px solid var(--border); font-size:var(--fs-body); color:var(--ink-2); font-family:var(--font-mono); }

/* ============================= cards ============================= */
.card{ background:var(--surface); border:1px solid var(--border); border-radius:var(--radius-card); box-shadow:var(--shadow); margin-bottom:20px; overflow:hidden; }
.card-head{ display:flex; align-items:flex-start; justify-content:space-between; gap:14px; padding:18px 20px 4px; flex-wrap:wrap; }
.card-head h2{ margin:0; font-size:var(--fs-title-lg); font-weight:700; }
.card-head h3{ margin:0; font-size:var(--fs-title); font-weight:700; }
.card-head p{ margin:3px 0 0; font-size:var(--fs-small); color:var(--ink-2); max-width:640px; line-height:1.5; }
.card-head .actions{ display:flex; gap:6px; flex:none; }
.card-body{ padding:14px 20px 20px; }

/* ============================= KPI tiles ============================= */
.kpi-row{ display:grid; grid-template-columns:repeat(auto-fit,minmax(148px,1fr)); gap:8px; margin-bottom:16px; }
.kpi{ background:var(--surface); border:1px solid var(--border); border-radius:11px; padding:9px 14px 10px; }
.kpi .label{ font-size:var(--fs-label); text-transform:uppercase; letter-spacing:.06em; color:var(--muted); font-weight:600; margin-bottom:4px; }
.kpi .value{ font-family:var(--font-mono); font-size:var(--fs-h1-sm); font-weight:600; letter-spacing:-0.01em; line-height:1.1; }
.kpi .value.hero{ font-size:var(--fs-kpi); }
.kpi .sub{ margin-top:3px; font-size:var(--fs-micro); color:var(--ink-2); white-space:pre-line; line-height:1.4; }

/* ============================= tables ============================= */
.table-scroll{ overflow-x:auto; border-radius:10px; border:1px solid var(--border); }
table{ width:100%; border-collapse:collapse; font-size:var(--fs-body); min-width:var(--table-min); }
thead th{ position:sticky; top:0; z-index:2; background:var(--surface-2); text-align:left; font-size:var(--fs-label); text-transform:uppercase; letter-spacing:.05em; color:var(--muted); font-weight:600; padding:9px 12px; border-bottom:1px solid var(--border); white-space:nowrap; }
thead th.num{ text-align:right; }
thead.is-stuck th{ box-shadow:0 1px 0 var(--border-strong), 0 6px 10px -6px rgba(0,0,0,.35); } /* header pinned by js/sticky-thead.js */
thead th .arrow{ margin-left:4px; opacity:.6; }
tbody td{ padding:8px 12px; border-bottom:1px solid var(--border); vertical-align:middle; }
tbody tr:last-child td{ border-bottom:none; }
tbody tr:hover{ background:var(--surface-2); }
td.num, th.num{ text-align:right; font-family:var(--font-mono); font-variant-numeric:tabular-nums; }
td.mono{ font-family:var(--font-mono); font-size:var(--fs-small); }
td.trunc{ max-width:360px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
.table-empty{ padding:26px; text-align:center; color:var(--muted); font-size:var(--fs-body); }
.table-empty-boxed{ padding:34px 20px; border:1px dashed var(--border); border-radius:12px; }
.table-foot-note{ padding:10px 20px 2px; font-size:var(--fs-meta); color:var(--muted); }

/* ============================= pills / chips in tables ============================= */
.pill{ display:inline-flex; align-items:center; padding:2px 8px; border-radius:999px; font-family:var(--font-mono); font-size:var(--fs-micro); font-weight:600; line-height:1.6; }
.pill-good{ background:var(--good-wash); color:var(--good); }
.pill-neutral{ background:var(--surface-3); color:var(--ink-2); }
.pill-warning{ background:var(--warning-wash); color:#8a5a00; }
.pill-cf{ background:var(--accent-wash); color:var(--accent); margin-left:4px; }
.pill-noncf{ background:var(--surface-3); color:var(--ink-2); margin-left:4px; }
:root:not([data-theme="light"]) .pill-warning{ color:var(--warning); }
:root[data-theme="dark"] .pill-warning{ color:var(--warning); }
.pill-critical{ background:var(--critical-wash); color:var(--critical); }
.method-chip{ display:inline-flex; align-items:center; gap:6px; font-family:var(--font-mono); font-size:var(--fs-meta); font-weight:600; }
.method-dot{ width:8px; height:8px; border-radius:2px; flex:none; }

/* ============================= hover-for-detail tooltip ============================= */
.row-detail-tip{
  position:fixed; pointer-events:none; z-index:60; opacity:0; transition:opacity .08s;
  background:var(--surface); border:1px solid var(--border-strong); border-radius:10px;
  padding:11px 14px; box-shadow:var(--shadow); font-family:var(--font-mono); font-size:var(--fs-meta);
  max-width:420px; line-height:1.65;
}
.row-detail-tip.show{ opacity:1; }
.row-detail-tip .rd-row, .row-expand .rd-row{ display:flex; gap:16px; justify-content:space-between; white-space:nowrap; }
.row-detail-tip .rd-label, .row-expand .rd-label{ color:var(--muted); }
.row-detail-tip .rd-row b, .row-expand .rd-row b{ font-weight:600; }
.row-detail-tip .rd-full, .row-expand .rd-full{ margin-top:7px; padding-top:7px; border-top:1px solid var(--border); color:var(--ink-2); white-space:normal; word-break:break-all; }
.row-detail-tip .rd-full b, .row-expand .rd-full b{ color:var(--ink); font-weight:600; }

/* ============================= click-to-expand row (full record, selectable) ============================= */
/* Rows in tables that carry a hover tooltip (live-monitor.php, index.php,
   search_time-range.php) are also click-to-expand: clicking toggles the same field
   list as an ordinary row underneath, so it can be selected/copied — no
   floating overlay involved. */
tr[data-idx]{ cursor:pointer; }
tr[data-idx].expanded{ background:var(--surface-2); }
.rx-chevron{ display:inline-block; width:11px; margin-right:3px; color:var(--muted); font-size:10px; transition:transform .12s; }
tr[data-idx].expanded .rx-chevron{ transform:rotate(90deg); }
.row-detail-row td{ background:var(--surface-2); padding:12px 16px; font-family:var(--font-mono); font-size:var(--fs-meta); line-height:1.65; }
.row-expand{ max-width:900px; }

/* ============================= misc shared bits ============================= */
.warn-line{ display:flex; gap:8px; align-items:flex-start; padding:10px 12px; border-radius:var(--radius-control); background:var(--warning-wash); font-size:var(--fs-body); color:var(--ink); line-height:1.5; }
.icon-btn{ width:26px; height:26px; display:inline-flex; align-items:center; justify-content:center; border-radius:7px; border:1px solid transparent; background:transparent; color:var(--ink-2); cursor:pointer; font-size:var(--fs-ui); padding:0; line-height:1; }
.icon-btn:hover{ background:var(--surface-2); border-color:var(--border); }
.icon-btn:disabled{ opacity:.35; cursor:not-allowed; }
.day-group{ margin-bottom:26px; }
.day-group:last-child{ margin-bottom:0; }
.day-head{ display:flex; align-items:baseline; gap:12px; flex-wrap:wrap; padding-bottom:9px; margin-bottom:8px; border-bottom:1px solid var(--border); }
.day-title{ font-family:var(--font-mono); font-size:var(--fs-input-lg); font-weight:600; }
.day-title .dow{ font-weight:400; color:var(--muted); }
.day-meta{ font-size:var(--fs-meta); color:var(--muted); }
.day-actions{ margin-left:auto; display:flex; gap:10px; }
.entity-tag{ color:var(--accent); font-weight:600; }