/*
 * cf.css — compact Cloudflare-style design system for xdp-l4-guard.
 * Self-contained (does not depend on app.css). Reuses the existing brand palette
 * but trades the big hero/blur/gradient look for a dense, tabular operator console.
 *
 * Iteration 1 ships the Console model (console-cf.html). The same tokens and
 * components are meant to be reused when the remaining pages are migrated.
 */

:root {
  --bg: #0a0f14;
  --bg-elevated: #0e151c;
  --sidebar: #0b1219;
  --panel: #0e161e;
  --panel-2: #111b24;
  --line: rgba(159, 199, 220, 0.14);
  --line-strong: rgba(159, 199, 220, 0.24);
  --text: #e7f2f8;
  --muted: #8ea7b6;
  --muted-dim: #647d8c;
  --accent: #ff8a3d;
  --accent-soft: rgba(255, 138, 61, 0.14);
  --cool: #4fa8ff;
  --cool-soft: rgba(79, 168, 255, 0.14);
  --ok: #57c79a;
  --ok-soft: rgba(87, 199, 154, 0.14);
  --danger: #ff6a6a;
  --danger-soft: rgba(255, 106, 106, 0.14);
  --warn: #ffc857;
  --radius-lg: 12px;
  --radius: 9px;
  --radius-sm: 6px;
  --radius-xs: 4px;
  --font: "IBM Plex Sans", "Segoe UI", system-ui, sans-serif;
  --mono: "JetBrains Mono", "SFMono-Regular", ui-monospace, "Cascadia Code", monospace;
  --sidebar-w: 216px;
  --topbar-h: 52px;
  /* spacing rhythm */
  --sp-1: 4px; --sp-2: 8px; --sp-3: 12px; --sp-4: 16px; --sp-5: 20px; --sp-6: 24px;
  /* layered depth — Cloudflare-style soft elevation on a dark canvas */
  --shadow-sm: 0 1px 2px rgba(0, 0, 0, 0.30), 0 1px 1px rgba(0, 0, 0, 0.20);
  --shadow: 0 2px 4px rgba(0, 0, 0, 0.28), 0 8px 24px rgba(0, 0, 0, 0.42);
  --shadow-lg: 0 4px 8px rgba(0, 0, 0, 0.30), 0 24px 56px rgba(0, 0, 0, 0.55);
  --accent-glow: 0 2px 10px rgba(255, 138, 61, 0.28);
  /* gradient primary action */
  --accent-grad: linear-gradient(180deg, #ff9b54, var(--accent));
  --accent-grad-hover: linear-gradient(180deg, #ffa869, #ff9148);
  /* interaction surfaces + focus rings (the load-bearing additions) */
  --surface-hover: rgba(255, 255, 255, 0.05);
  --surface-active: rgba(255, 255, 255, 0.025);
  --hairline-top: inset 0 1px 0 rgba(255, 255, 255, 0.06);
  --inset-press: inset 0 2px 4px rgba(0, 0, 0, 0.45);
  --ring: 0 0 0 2px var(--bg), 0 0 0 4px rgba(255, 138, 61, 0.55);
  --ring-cool: 0 0 0 2px var(--bg), 0 0 0 4px rgba(79, 168, 255, 0.55);
  --ring-danger: 0 0 0 2px var(--bg), 0 0 0 4px rgba(255, 106, 106, 0.55);
  --text-strong: #ffffff;
  /* motion */
  --ease: cubic-bezier(0.2, 0, 0, 1);
  --ease-out: cubic-bezier(0.16, 1, 0.3, 1);
  --dur-1: 120ms; --dur-2: 160ms; --dur-3: 200ms;
}

* { box-sizing: border-box; }
[hidden] { display: none !important; }

/* respect reduced-motion: collapse all transitions/animations */
@media (prefers-reduced-motion: reduce) {
  *, *::before, *::after {
    transition-duration: 0.01ms !important;
    animation-duration: 0.01ms !important;
    animation-iteration-count: 1 !important;
    scroll-behavior: auto !important;
  }
}

html, body { height: 100%; }

/* Global links. Without this, bare <a> tags fall back to the browser defaults — blue when
 * unvisited and DARK PURPLE (#551A8B) when visited — which are nearly invisible on the dark
 * canvas. Force a bright, readable accent for every link, kill the purple visited state, and
 * give keyboard users a focus ring. */
a { color: var(--cool); text-decoration: none; transition: color var(--dur-1) var(--ease); }
a:visited { color: var(--cool); }
a:hover { color: #84c4ff; text-decoration: underline; }
a:active { color: #2e90ee; }
a:focus-visible { outline: none; box-shadow: var(--ring-cool); border-radius: var(--radius-xs); }

body.cf {
  margin: 0;
  font-family: var(--font);
  font-size: 13px;
  line-height: 1.5;
  letter-spacing: 0.1px;
  font-feature-settings: "cv05", "ss01";
  color: var(--text);
  /* faint twin glow (warm accent top-right, cool top-left) over the dark canvas */
  background:
    radial-gradient(1100px 520px at 82% -8%, rgba(255, 138, 61, 0.055), transparent 60%),
    radial-gradient(900px 600px at 6% -4%, rgba(79, 168, 255, 0.045), transparent 55%),
    var(--bg);
  background-attachment: fixed;
  -webkit-font-smoothing: antialiased;
}

/* ---------- App shell ---------- */

.cf-app {
  display: grid;
  grid-template-columns: var(--sidebar-w) minmax(0, 1fr);
  min-height: 100vh;
}

/* ---------- Sidebar ---------- */

.cf-sidebar {
  position: sticky;
  top: 0;
  align-self: start;
  height: 100vh;
  display: flex;
  flex-direction: column;
  background: var(--sidebar);
  border-right: 1px solid var(--line);
  overflow-y: auto;
}

.cf-brand {
  display: flex;
  align-items: center;
  gap: 10px;
  height: var(--topbar-h);
  padding: 0 16px;
  border-bottom: 1px solid var(--line);
  flex-shrink: 0;
}

.cf-brand-mark {
  width: 27px;
  height: 27px;
  border-radius: 8px;
  display: grid;
  place-items: center;
  font-weight: 700;
  font-size: 13px;
  color: #1a0e06;
  background: linear-gradient(135deg, var(--accent), #ffb37a);
  box-shadow: var(--accent-glow);
  flex-shrink: 0;
}

.cf-brand-name {
  font-weight: 600;
  letter-spacing: 0.2px;
  font-size: 13px;
}
.cf-brand-name small {
  display: block;
  color: var(--muted-dim);
  font-weight: 500;
  font-size: 10.5px;
  letter-spacing: 0.4px;
  text-transform: uppercase;
}

.cf-nav {
  padding: 8px;
  display: flex;
  flex-direction: column;
  gap: 1px;
}

.cf-nav-group {
  padding: 14px 10px 6px;
  font-size: 10px;
  font-weight: 600;
  letter-spacing: 0.7px;
  text-transform: uppercase;
  color: var(--muted-dim);
}

.cf-nav a {
  position: relative;
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 7px 10px;
  border-radius: var(--radius-sm);
  color: var(--muted);
  text-decoration: none;
  font-weight: 500;
  font-size: 12.5px;
  line-height: 1;
  transition: background 0.13s, color 0.13s;
}
.cf-nav a:hover { background: var(--surface-hover); color: var(--text); }
.cf-nav a:hover .cf-ico { color: var(--muted); }
.cf-nav a:active { background: var(--surface-active); }
.cf-nav a:focus-visible { outline: none; box-shadow: var(--ring); }
.cf-nav a.active { background: var(--accent-soft); color: var(--accent); }
.cf-nav a.active .cf-ico { color: var(--accent); }
/* the Cloudflare-style active accent bar on the left edge of the item */
.cf-nav a.active::before {
  content: "";
  position: absolute;
  left: -2px;
  top: 7px;
  bottom: 7px;
  width: 3px;
  border-radius: 0 3px 3px 0;
  background: var(--accent);
  box-shadow: var(--accent-glow);
}

.cf-ico {
  width: 16px;
  height: 16px;
  flex-shrink: 0;
  color: var(--muted-dim);
  stroke: currentColor;
  fill: none;
  stroke-width: 1.75;
  stroke-linecap: round;
  stroke-linejoin: round;
}

.cf-sidebar-foot {
  margin-top: auto;
  padding: 11px 14px;
  border-top: 1px solid var(--line);
  font-size: 11px;
  color: var(--muted-dim);
  line-height: 1.6;
}
.cf-sidebar-foot #cfConfigPath {
  display: block;
  font-size: 10.5px;
  word-break: break-all;
  color: var(--muted-dim);
  margin-bottom: 3px;
}

/* ---------- Topbar ---------- */

.cf-main { min-width: 0; display: flex; flex-direction: column; }

.cf-topbar {
  position: sticky;
  top: 0;
  z-index: 20;
  height: var(--topbar-h);
  display: flex;
  align-items: center;
  gap: 14px;
  padding: 0 18px;
  background: rgba(10, 15, 20, 0.82);
  backdrop-filter: blur(14px) saturate(1.2);
  border-bottom: 1px solid var(--line);
  box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25);
}

.cf-page-title {
  font-size: 15px;
  font-weight: 650;
  letter-spacing: -0.1px;
  line-height: 1.2;
  margin: 0;
  white-space: nowrap;
}
.cf-page-title small {
  margin-left: 8px;
  font-weight: 500;
  font-size: 11.5px;
  color: var(--muted-dim);
}

.cf-topbar-spacer { flex: 1; }

.cf-topbar-controls {
  display: flex;
  align-items: center;
  gap: 8px;
}

/* ---------- Status pill ---------- */

.cf-pill {
  display: inline-flex;
  align-items: center;
  gap: 7px;
  padding: 5px 11px;
  border-radius: 999px;
  font-size: 11.5px;
  font-weight: 600;
  border: 1px solid var(--line-strong);
  white-space: nowrap;
}
.cf-pill .cf-dot {
  width: 7px; height: 7px; border-radius: 50%;
  background: currentColor;
}
.cf-pill .cf-ico { width: 13px; height: 13px; }
.cf-pill.sm { padding: 2px 9px; font-size: 10px; }
.cf-pill.is-ok { color: var(--ok); background: var(--ok-soft); border-color: rgba(87,199,154,0.3); }
.cf-pill.is-warn { color: var(--warn); background: rgba(255,200,87,0.12); border-color: rgba(255,200,87,0.3); }
.cf-pill.is-danger { color: var(--danger); background: var(--danger-soft); border-color: rgba(255,106,106,0.35); }
.cf-pill.is-danger .cf-dot { animation: cf-pulse 1.2s ease-in-out infinite; }
.cf-pill.is-muted { color: var(--muted); }

@keyframes cf-pulse {
  0%, 100% { box-shadow: 0 0 0 0 rgba(255,106,106,0.6); }
  50% { box-shadow: 0 0 0 5px rgba(255,106,106,0); }
}

/* spinner for live-poll refresh affordances */
@keyframes cf-spin { to { transform: rotate(360deg); } }
.cf-btn.is-loading .cf-ico, .cf-icon-btn.is-loading .cf-ico, .cf-ico.is-spin { animation: cf-spin 0.8s linear infinite; }

/* ---------- Form controls ---------- */

.cf-field {
  display: inline-flex;
  flex-direction: column;
  gap: 3px;
}
.cf-field > span {
  font-size: 10px;
  font-weight: 600;
  letter-spacing: 0.4px;
  text-transform: uppercase;
  color: var(--muted-dim);
}

select.cf-input, input.cf-input {
  appearance: none;
  height: 32px;
  padding: 0 10px;
  border-radius: var(--radius-sm);
  border: 1px solid var(--line-strong);
  background: var(--panel-2);
  color: var(--text);
  font-family: var(--font);
  font-size: 12.5px;
  min-width: 110px;
  box-shadow: var(--inset-press);
  transition: border-color var(--dur-1) var(--ease), box-shadow var(--dur-1) var(--ease);
}
.cf-input:hover { border-color: var(--line-strong); }
select.cf-input {
  padding-right: 26px;
  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='10' height='10' viewBox='0 0 10 10'%3E%3Cpath d='M2 3.5L5 6.5L8 3.5' stroke='%238ea7b6' stroke-width='1.4' fill='none' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
  background-repeat: no-repeat;
  background-position: right 9px center;
}
.cf-input:focus-visible { outline: none; border-color: var(--accent); box-shadow: var(--inset-press), 0 0 0 3px var(--accent-soft); }
.cf-input:focus:not(:focus-visible) { outline: none; border-color: var(--accent); }

.cf-btn {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  gap: 6px;
  height: 32px;
  padding: 0 13px;
  border-radius: var(--radius-sm);
  border: 1px solid var(--line-strong);
  background: linear-gradient(180deg, var(--panel-2), #0d161e);
  color: var(--text);
  font-family: var(--font);
  font-size: 12.5px;
  font-weight: 600;
  cursor: pointer;
  box-shadow: var(--shadow-sm), var(--hairline-top);
  transition: background var(--dur-1) var(--ease), border-color var(--dur-1) var(--ease),
    box-shadow var(--dur-1) var(--ease), transform var(--dur-1) var(--ease);
}
/* the surface lifts on hover — not just a border recolor */
.cf-btn:hover:not(:disabled) {
  background: linear-gradient(180deg, #13202b, #101a23);
  border-color: var(--line-strong);
  box-shadow: var(--shadow), var(--hairline-top);
}
/* a literal 1px drop + inset shadow = mechanical click */
.cf-btn:active:not(:disabled) {
  transform: translateY(1px);
  background: linear-gradient(180deg, #0c141c, #0c141c);
  box-shadow: var(--inset-press);
}
.cf-btn:focus-visible { outline: none; box-shadow: var(--ring), var(--shadow-sm); }
.cf-btn:focus:not(:focus-visible) { outline: none; }
.cf-btn:disabled { opacity: 0.45; cursor: not-allowed; box-shadow: none; transform: none; }
.cf-btn .cf-ico { width: 14px; height: 14px; }

/* primary — gradient, depresses on press */
.cf-btn.is-accent {
  background: var(--accent-grad);
  color: #1a0e06;
  border-color: var(--accent);
  box-shadow: var(--accent-glow), inset 0 1px 0 rgba(255, 255, 255, 0.25);
}
.cf-btn.is-accent:hover:not(:disabled) {
  background: var(--accent-grad-hover);
  border-color: #ff9b57;
  box-shadow: 0 3px 14px rgba(255, 138, 61, 0.4), inset 0 1px 0 rgba(255, 255, 255, 0.25);
}
.cf-btn.is-accent:active:not(:disabled) {
  transform: translateY(1px);
  box-shadow: inset 0 2px 5px rgba(120, 50, 10, 0.5);
}
.cf-btn.is-accent:focus-visible { box-shadow: var(--ring), var(--accent-glow); }

.cf-btn.is-ghost { background: transparent; box-shadow: none; }
.cf-btn.is-ghost:hover:not(:disabled) { background: var(--surface-hover); border-color: var(--accent); box-shadow: none; }
.cf-btn.is-ghost:active:not(:disabled) { background: var(--surface-active); transform: translateY(1px); box-shadow: var(--inset-press); }

.cf-btn.is-danger { color: var(--danger); border-color: rgba(255, 106, 106, 0.45); background: rgba(255, 106, 106, 0.06); box-shadow: var(--shadow-sm); }
.cf-btn.is-danger:hover:not(:disabled) { border-color: var(--danger); background: var(--danger-soft); box-shadow: var(--shadow); }
.cf-btn.is-danger:active:not(:disabled) { transform: translateY(1px); box-shadow: inset 0 2px 4px rgba(120, 20, 20, 0.45); }
.cf-btn.is-danger:focus-visible { box-shadow: var(--ring-danger), var(--shadow-sm); }

/* success — for Save changes (replaces inline-styled buttons) */
.cf-btn.is-ok { color: var(--ok); border-color: rgba(87, 199, 154, 0.5); background: rgba(87, 199, 154, 0.07); box-shadow: var(--shadow-sm); }
.cf-btn.is-ok:hover:not(:disabled) { border-color: var(--ok); background: var(--ok-soft); box-shadow: var(--shadow); }
.cf-btn.is-ok:active:not(:disabled) { transform: translateY(1px); box-shadow: inset 0 2px 4px rgba(20, 90, 60, 0.45); }
.cf-btn.is-ok:focus-visible { box-shadow: 0 0 0 2px var(--bg), 0 0 0 4px rgba(87, 199, 154, 0.55), var(--shadow-sm); }

/* ephemeral mitigation rule card layout */
.er-scope {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 16px;
}
.er-toggles {
  display: flex;
  flex-wrap: wrap;
  gap: 10px 24px;
  margin-top: 16px;
}
.er-toggles .cf-check { flex-direction: row; align-items: center; gap: 8px; }
.er-actionbar {
  display: flex;
  align-items: center;
  gap: 16px;
  flex-wrap: wrap;
  margin-top: 16px;
  padding-top: 16px;
  border-top: 1px solid var(--line);
}
.er-actionbar #erRuleSummary {
  flex: 1;
  min-width: 220px;
  margin: 0;
  font-size: 12.5px;
  line-height: 1.5;
}
.er-actions { display: flex; gap: 10px; flex-shrink: 0; }
@media (max-width: 680px) {
  .er-scope { grid-template-columns: 1fr; }
  .er-actions { width: 100%; }
  .er-actions .cf-btn { flex: 1; }
}

.cf-seg {
  display: inline-flex;
  padding: 3px;
  border-radius: var(--radius-sm);
  border: 1px solid var(--line-strong);
  background: var(--panel-2);
  gap: 2px;
  box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.22);
}
.cf-seg button {
  appearance: none;
  display: inline-flex;
  align-items: center;
  gap: 5px;
  border: none;
  background: transparent;
  color: var(--muted);
  font-family: var(--font);
  font-size: 12px;
  font-weight: 600;
  padding: 5px 12px;
  border-radius: 5px;
  cursor: pointer;
  transition: background var(--dur-1) var(--ease), color var(--dur-1) var(--ease), box-shadow var(--dur-1) var(--ease);
}
.cf-seg button .cf-ico { width: 13px; height: 13px; }
.cf-seg button:hover:not(.active) { color: var(--text); background: rgba(255, 255, 255, 0.04); }
.cf-seg button:active:not(.active) { transform: translateY(0.5px); }
.cf-seg button:focus-visible { outline: none; box-shadow: var(--ring); }
.cf-seg button.active { background: var(--accent-soft); color: var(--accent); box-shadow: 0 1px 2px rgba(0, 0, 0, 0.25); }
/* Protection-mode segments carry their own semantic colour when active. */
.cf-seg button[data-mode-set="always_on"].active { background: var(--ok-soft); color: var(--ok); }
.cf-seg button[data-mode-set="sensor"].active { background: rgba(255, 200, 87, 0.15); color: var(--warn); }
.cf-seg button[data-mode-set="off"].active { background: rgba(159, 199, 220, 0.12); color: var(--muted); }

/* ---------- Content ---------- */

.cf-content {
  padding: 18px 22px;
  display: flex;
  flex-direction: column;
  gap: 16px;
  max-width: 1860px;
  width: 100%;
}

/* Stat row */
.cf-stat-row {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(170px, 1fr));
  gap: 12px;
}
.cf-stat {
  position: relative;
  background: linear-gradient(180deg, var(--panel-2), var(--panel));
  border: 1px solid var(--line);
  border-radius: var(--radius);
  padding: 14px 16px;
  display: flex;
  flex-direction: column;
  gap: 5px;
  box-shadow: var(--shadow-sm);
  overflow: hidden;
  transition: transform var(--dur-2) var(--ease-out), border-color var(--dur-2) var(--ease), box-shadow var(--dur-2) var(--ease);
}
.cf-stat:hover {
  transform: translateY(-1px);
  border-color: var(--line-strong);
  box-shadow: var(--shadow);
}
.cf-stat-label {
  font-size: 11px;
  font-weight: 600;
  letter-spacing: 0.3px;
  text-transform: uppercase;
  color: var(--muted-dim);
  display: flex;
  align-items: center;
  gap: 6px;
}
.cf-stat-label .cf-ico { width: 14px; height: 14px; color: var(--muted); flex-shrink: 0; }
.cf-stat-accent .cf-stat-label .cf-ico { color: var(--accent); }
.cf-stat-danger .cf-stat-label .cf-ico { color: var(--danger); }
.cf-stat-ok .cf-stat-label .cf-ico { color: var(--ok); }
.cf-stat-value {
  font-size: 24px;
  font-weight: 650;
  line-height: 1.05;
  font-variant-numeric: tabular-nums;
  letter-spacing: -0.4px;
}
.cf-stat-value small { font-size: 13px; color: var(--muted); font-weight: 500; margin-left: 2px; }
.cf-stat-sub { font-size: 11px; color: var(--muted); }
/* typed stat cards get a thin coloured edge bar (Cloudflare category cue) */
.cf-stat-accent::before, .cf-stat-danger::before, .cf-stat-ok::before {
  content: "";
  position: absolute;
  left: 0; top: 0; bottom: 0;
  width: 3px;
  transition: width var(--dur-2) var(--ease-out);
}
/* subtle category "tick" — the edge bar widens on hover */
.cf-stat-accent:hover::before, .cf-stat-danger:hover::before, .cf-stat-ok:hover::before { width: 4px; }
.cf-stat-accent { background: linear-gradient(180deg, rgba(255,138,61,0.06), var(--panel)); }
.cf-stat-accent::before { background: var(--accent); }
.cf-stat-accent .cf-stat-value { color: var(--accent); }
.cf-stat-danger::before { background: var(--danger); }
.cf-stat-danger .cf-stat-value { color: var(--danger); }
.cf-stat-ok::before { background: var(--ok); }
.cf-stat-ok .cf-stat-value { color: var(--ok); }

/* Card */
.cf-card {
  background: linear-gradient(180deg, var(--panel), var(--bg-elevated));
  border: 1px solid var(--line);
  border-radius: var(--radius);
  overflow: hidden;
  box-shadow: var(--shadow-sm);
  transition: border-color var(--dur-2) var(--ease), box-shadow var(--dur-2) var(--ease);
}
/* clickable cards (tenant/profile tiles) — the most important objects, now respond */
.cf-card.is-interactive { cursor: pointer; }
.cf-card.is-interactive:hover { border-color: var(--line-strong); box-shadow: var(--shadow); }
.cf-card-head {
  display: flex;
  align-items: center;
  gap: 12px;
  padding: 13px 16px;
  border-bottom: 1px solid var(--line);
  background: linear-gradient(180deg, rgba(255,255,255,0.018), transparent);
}
.cf-card-head h2 {
  font-size: 13px;
  font-weight: 650;
  letter-spacing: -0.05px;
  margin: 0;
  display: flex;
  align-items: center;
  gap: 8px;
}
.cf-card-head h2 .cf-ico { width: 15px; height: 15px; color: var(--muted); }
.cf-card-head .cf-sub {
  font-size: 11.5px;
  color: var(--muted-dim);
  font-weight: 500;
}
.cf-card-head-actions { margin-left: auto; display: flex; align-items: center; gap: 8px; }
.cf-card-body { padding: 14px 15px; }
.cf-card-body.is-flush { padding: 0; }

/* ---------- Activity chart ---------- */

.cf-chart-legend {
  display: flex;
  gap: 14px;
  flex-wrap: wrap;
}
.cf-legend-item {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  font-size: 11.5px;
  color: var(--muted);
  cursor: pointer;
  user-select: none;
}
.cf-legend-item .cf-swatch { width: 9px; height: 9px; border-radius: 2px; }
.cf-legend-item.off { opacity: 0.4; }

.cf-chart {
  position: relative;
  width: 100%;
}
.cf-chart svg { display: block; width: 100%; height: 200px; }
.cf-chart-grid { stroke: var(--line); stroke-width: 1; }
.cf-chart-axis {
  display: flex;
  justify-content: space-between;
  margin-top: 6px;
  font-size: 10.5px;
  color: var(--muted-dim);
  font-variant-numeric: tabular-nums;
}
.cf-chart-empty, .cf-empty {
  padding: 28px 14px;
  text-align: center;
  color: var(--muted-dim);
  font-size: 12.5px;
}
.cf-chart-tip {
  position: absolute;
  pointer-events: none;
  background: var(--bg-elevated);
  border: 1px solid var(--line-strong);
  border-radius: var(--radius-sm);
  padding: 8px 10px;
  font-size: 11.5px;
  min-width: 140px;
  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.5);
  transform: translate(-50%, -100%);
  z-index: 5;
}
.cf-chart-tip .cf-tip-time { color: var(--muted-dim); font-size: 10.5px; margin-bottom: 5px; }
.cf-chart-tip .cf-tip-row { display: flex; align-items: center; gap: 7px; justify-content: space-between; }
.cf-chart-tip .cf-tip-row span { display: inline-flex; align-items: center; gap: 6px; color: var(--muted); }
.cf-chart-tip .cf-tip-row strong { font-variant-numeric: tabular-nums; }

/* ---------- Rules table (Cloudflare "Activity by rule") ---------- */

.cf-table { width: 100%; border-collapse: collapse; font-size: 12.5px; }
.cf-table thead th {
  position: sticky;
  top: 0;
  text-align: left;
  padding: 9px 14px;
  font-size: 10.5px;
  font-weight: 600;
  letter-spacing: 0.4px;
  text-transform: uppercase;
  color: var(--muted-dim);
  background: var(--panel-2);
  border-bottom: 1px solid var(--line);
  white-space: nowrap;
  cursor: pointer;
  user-select: none;
}
.cf-table thead th.no-sort { cursor: default; }
.cf-table thead th .cf-sort-arrow { color: var(--accent); margin-left: 3px; display: inline-flex; vertical-align: middle; }
.cf-table thead th .cf-sort-arrow .cf-ico { width: 12px; height: 12px; }
.cf-ico.xs { width: 12px; height: 12px; vertical-align: -2px; }
.cf-table thead th.num, .cf-table tbody td.num { text-align: right; font-variant-numeric: tabular-nums; }
.cf-table tbody td {
  padding: 10px 14px;
  border-bottom: 1px solid var(--line);
  vertical-align: middle;
}
.cf-table tbody tr:last-child td { border-bottom: none; }
.cf-table tbody tr { transition: background var(--dur-1) var(--ease), box-shadow var(--dur-1) var(--ease); }
.cf-table tbody tr:hover { background: var(--surface-active); box-shadow: inset 2px 0 0 var(--accent); }
/* dense rows: action buttons rest quiet, reveal on row hover */
.cf-table tbody .cf-row-actions { opacity: 0.55; transition: opacity var(--dur-1) var(--ease); }
.cf-table tbody tr:hover .cf-row-actions, .cf-table tbody tr:focus-within .cf-row-actions { opacity: 1; }

.cf-rule-name { font-weight: 600; }
.cf-rule-origin { font-size: 10.5px; color: var(--muted-dim); margin-top: 2px; }

/* Customers (multi-tenant) grid */
.cf-tenant-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(320px, 1fr)); gap: 16px; }
.cf-tenant-card { padding: 0; }
.cf-tenant-head { display: flex; align-items: center; gap: 12px; padding: 14px 16px; border-bottom: 1px solid var(--line); }
.cf-tenant-avatar {
  width: 36px; height: 36px; border-radius: 9px; flex-shrink: 0;
  display: grid; place-items: center; font-weight: 700; font-size: 13px; color: #1a0e06;
  background: linear-gradient(135deg, var(--accent), #ffb37a); box-shadow: var(--accent-glow);
}
.cf-tenant-name { font-weight: 650; font-size: 14px; }
.cf-tenant-sub { font-size: 11px; color: var(--muted-dim); margin-top: 2px; }
.cf-tenant-stats { display: grid; grid-template-columns: repeat(4, 1fr); gap: 1px; background: var(--line); }
.cf-tenant-stat { background: var(--panel); padding: 11px 8px; text-align: center; display: flex; flex-direction: column; gap: 2px; }
.cf-tenant-stat .v { font-size: 17px; font-weight: 650; font-variant-numeric: tabular-nums; letter-spacing: -0.3px; }
.cf-tenant-stat .l { font-size: 10px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px; color: var(--muted-dim); }
.cf-tenant-stat.danger .v { color: var(--danger); }
.cf-tenant-stat.ok .v { color: var(--ok); }
.cf-tenant-fw { font-size: 11px; color: var(--danger); padding: 8px 16px 0; }
.cf-tenant-ips { padding: 12px 16px; display: flex; flex-direction: column; gap: 6px; }
.cf-tenant-ip { display: flex; align-items: center; justify-content: space-between; gap: 8px; font-size: 12px; }
.cf-tenant-ip .cf-mono { font-size: 12px; color: var(--text); }

/* L7 page: protections (wide) + recent activity (narrow) */
.cf-grid-l7 { display: grid; grid-template-columns: minmax(0, 2.3fr) minmax(280px, 1fr); gap: 16px; }
@media (max-width: 1080px) { .cf-grid-l7 { grid-template-columns: 1fr; } }

.cf-l7-event {
  display: flex;
  align-items: flex-start;
  gap: 10px;
  padding: 10px 15px;
  border-bottom: 1px solid var(--line);
  font-size: 12px;
}
.cf-l7-event:last-child { border-bottom: none; }
.cf-l7-event-dot { width: 8px; height: 8px; border-radius: 50%; margin-top: 4px; flex-shrink: 0; background: var(--muted-dim); }
.cf-l7-event.is-engage .cf-l7-event-dot { background: var(--danger); box-shadow: 0 0 0 3px var(--danger-soft); }
.cf-l7-event.is-disengage .cf-l7-event-dot { background: var(--ok); }
.cf-l7-event.is-proxy .cf-l7-event-dot { background: var(--cool); }
.cf-l7-event-body { flex: 1; min-width: 0; }
.cf-l7-event-title { font-weight: 600; }
.cf-l7-event-sub { color: var(--muted-dim); font-size: 11px; margin-top: 1px; word-break: break-all; }
.cf-l7-event-time { color: var(--muted-dim); font-size: 10.5px; white-space: nowrap; font-variant-numeric: tabular-nums; }

/* L7 protection cell — coloured icon badge + label/options */
.cf-l7-cell { display: flex; align-items: center; gap: 10px; }
.cf-l7-ico {
  flex-shrink: 0;
  width: 28px;
  height: 28px;
  border-radius: 7px;
  display: grid;
  place-items: center;
  border: 1px solid var(--line-strong);
}
.cf-l7-ico svg { width: 15px; height: 15px; stroke: currentColor; fill: none; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
.cf-l7-ico.is-web { color: var(--cool); background: var(--cool-soft); border-color: rgba(79,168,255,0.25); }

.cf-badge {
  display: inline-flex;
  align-items: center;
  gap: 4px;
  padding: 2px 8px;
  border-radius: var(--radius-xs);
  font-size: 10px;
  font-weight: 700;
  letter-spacing: 0.5px;
  text-transform: uppercase;
  border: 1px solid transparent;
  box-shadow: var(--hairline-top);
}
.cf-badge .cf-ico { width: 11px; height: 11px; stroke-width: 2; }
.cf-badge.drop { color: var(--danger); background: var(--danger-soft); border-color: rgba(255, 106, 106, 0.28); }
.cf-badge.pass { color: var(--ok); background: var(--ok-soft); border-color: rgba(87, 199, 154, 0.28); }
.cf-chip {
  display: inline-flex;
  align-items: center;
  gap: 5px;
  padding: 2px 7px;
  border-radius: var(--radius-xs);
  font-size: 10.5px;
  font-weight: 600;
  color: var(--muted);
  background: rgba(159, 199, 220, 0.08);
  border: 1px solid var(--line);
}
.cf-chip .cf-ico { width: 12px; height: 12px; }
.cf-chip.is-ok { color: var(--ok); background: var(--ok-soft); border-color: rgba(87, 199, 154, 0.28); }
.cf-chip.is-warn { color: var(--warn); background: rgba(255, 200, 87, 0.1); border-color: rgba(255, 200, 87, 0.28); }
.cf-chip.is-danger { color: var(--danger); background: var(--danger-soft); border-color: rgba(255, 106, 106, 0.28); }
.cf-chip.is-cool { color: var(--cool); background: var(--cool-soft); border-color: rgba(79, 168, 255, 0.28); }

/* per-rule sparkline */
.cf-spark { display: block; width: 96px; height: 26px; }
.cf-spark path.fill { fill: var(--accent-soft); }
.cf-spark path.line { fill: none; stroke: var(--accent); stroke-width: 1.4; }

/* share bar */
.cf-share { display: flex; align-items: center; gap: 8px; min-width: 120px; }
.cf-share-track {
  flex: 1;
  height: 6px;
  border-radius: 3px;
  background: rgba(159, 199, 220, 0.1);
  overflow: hidden;
}
.cf-share-fill { height: 100%; border-radius: 3px; background: var(--accent); }
.cf-share-val { font-size: 11px; color: var(--muted); font-variant-numeric: tabular-nums; min-width: 38px; text-align: right; }

/* ---------- Auth strip / notices ---------- */
.cf-notice {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 10px 14px;
  border-radius: var(--radius);
  border: 1px solid var(--line-strong);
  background: var(--panel-2);
  font-size: 12.5px;
  color: var(--muted);
}
.cf-notice.is-warn { border-color: rgba(255,200,87,0.3); background: rgba(255,200,87,0.07); color: var(--warn); }
.cf-notice .cf-notice-actions { margin-left: auto; display: flex; gap: 8px; }

/* info banner (explains a page / flow in plain language) */
.cf-banner {
  display: flex;
  align-items: flex-start;
  gap: 13px;
  padding: 14px 16px;
  border-radius: var(--radius);
  border: 1px solid var(--cool-soft);
  background: linear-gradient(180deg, rgba(79,168,255,0.07), rgba(79,168,255,0.025));
  box-shadow: var(--shadow-sm);
}
.cf-banner-ico {
  flex-shrink: 0;
  width: 30px;
  height: 30px;
  border-radius: 8px;
  display: grid;
  place-items: center;
  color: var(--cool);
  background: var(--cool-soft);
  border: 1px solid rgba(79, 168, 255, 0.25);
}
.cf-banner-ico svg { width: 17px; height: 17px; stroke: currentColor; fill: none; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
.cf-banner strong { display: block; font-size: 13px; margin-bottom: 2px; }
.cf-banner span { color: var(--muted); font-size: 12.5px; line-height: 1.55; }
.cf-banner a { color: var(--cool); text-decoration: none; font-weight: 600; }
.cf-banner a:hover { text-decoration: underline; }

/* inline help icon with native tooltip */
.cf-help {
  display: inline-grid;
  place-items: center;
  width: 14px; height: 14px;
  border-radius: 50%;
  border: 1px solid var(--line-strong);
  color: var(--muted-dim);
  font-size: 9px; font-weight: 700;
  cursor: help;
  margin-left: 5px;
  vertical-align: middle;
}
.cf-help:hover { color: var(--accent); border-color: var(--accent); }

/* field hint — a small muted caption UNDER an input (distinct from the round ? badge) */
.cf-hint { display: block; margin-top: 4px; font-size: 10.5px; line-height: 1.45; color: var(--muted-dim); }

.cf-muted { color: var(--muted); }
.cf-mono { font-family: var(--mono); font-variant-ligatures: none; }

/* numeric discipline — tabular figures + slashed zero on every metric so
   IPs, ports, counts and rates stay legible and column-aligned */
.cf-stat-value, .cf-table td.num, .cf-tenant-stat .v, .cf-l7-stat b,
.cf-list-val, .cf-pill, .cf-badge, .cf-mono {
  font-variant-numeric: tabular-nums slashed-zero;
  font-feature-settings: "tnum" 1, "zero" 1;
}
/* word-valued stats (Proxy status, Latest signal, Top talker) — retire the
   inline font-size:16/17px overrides with a real modifier */
.cf-stat-value.is-text { font-size: 15px; letter-spacing: 0; font-weight: 600; font-variant-numeric: normal; }

/* two-column grid for lower content */
.cf-grid-2 {
  display: grid;
  grid-template-columns: minmax(0, 1.6fr) minmax(0, 1fr);
  gap: 16px;
}
/* master/detail pages (Profiles, IPs): narrow list, wide detail/rules panel */
.cf-grid-2.cf-grid-detail-wide {
  grid-template-columns: minmax(300px, 1fr) minmax(0, 2.15fr);
}
@media (max-width: 1020px) {
  .cf-grid-2 { grid-template-columns: 1fr; }
  .cf-app { grid-template-columns: 1fr; }
  .cf-sidebar { display: none; }
}

/* ---------- buttons inline / row actions ---------- */
.cf-btn.sm { height: 26px; padding: 0 9px; font-size: 11.5px; }
.cf-row-actions { display: inline-flex; gap: 6px; }
.cf-icon-btn {
  width: 27px; height: 27px; display: inline-grid; place-items: center;
  border-radius: 6px; border: 1px solid var(--line-strong); background: var(--panel-2);
  color: var(--muted-dim); cursor: pointer; font-size: 13px; line-height: 1;
  box-shadow: var(--shadow-sm);
  transition: border-color 0.12s, color 0.12s, background 0.12s, transform 0.08s, box-shadow 0.12s;
}
.cf-icon-btn .cf-ico { width: 14px; height: 14px; }
.cf-icon-btn:hover:not(:disabled) { border-color: var(--accent); color: var(--text); background: var(--panel); transform: translateY(-1px); box-shadow: var(--shadow); }
.cf-icon-btn:active:not(:disabled) { transform: translateY(0); box-shadow: var(--inset-press); }
.cf-icon-btn:focus-visible { outline: none; box-shadow: var(--ring); }
.cf-icon-btn.danger:hover:not(:disabled) { border-color: var(--danger); color: var(--danger); background: var(--danger-soft); }
.cf-icon-btn:disabled { opacity: 0.35; cursor: not-allowed; box-shadow: none; transform: none; }
.cf-icon-btn:disabled:hover { border-color: var(--line-strong); color: var(--muted-dim); background: var(--panel-2); transform: none; }

/* ---------- modal ---------- */
.cf-modal-overlay {
  position: fixed; inset: 0; z-index: 100;
  background: rgba(2, 6, 10, 0.66);
  backdrop-filter: blur(6px);
  display: flex; align-items: flex-start; justify-content: center;
  padding: 40px 16px; overflow-y: auto;
  animation: cf-overlay-in var(--dur-2) var(--ease);
}
@keyframes cf-overlay-in { from { opacity: 0; } to { opacity: 1; } }
.cf-modal {
  width: 100%; max-width: 720px;
  background: var(--panel); border: 1px solid var(--line-strong);
  border-radius: var(--radius-lg); box-shadow: var(--shadow-lg);
  animation: cf-modal-in var(--dur-3) var(--ease-out);
}
@keyframes cf-modal-in {
  from { opacity: 0; transform: translateY(8px) scale(0.985); }
  to { opacity: 1; transform: none; }
}
.cf-modal.wide { max-width: 860px; }
.cf-modal-head {
  display: flex; align-items: center; gap: 12px;
  padding: 14px 18px; border-bottom: 1px solid var(--line);
}
.cf-modal-head h2 { margin: 0; font-size: 14px; font-weight: 600; }
.cf-modal-head .cf-modal-x { margin-left: auto; }
.cf-modal-body { padding: 16px 18px; }
.cf-modal-foot {
  display: flex; align-items: center; gap: 10px; justify-content: flex-end;
  padding: 13px 18px; border-top: 1px solid var(--line);
}
.cf-modal-foot .cf-foot-note { margin-right: auto; font-size: 11.5px; color: var(--muted-dim); }

/* ---------- toasts ---------- */
.cf-toast-wrap {
  position: fixed;
  top: 14px;
  right: 14px;
  z-index: 200;
  display: flex;
  flex-direction: column;
  gap: 8px;
  pointer-events: none;
}
.cf-toast {
  min-width: 240px;
  max-width: 380px;
  padding: 11px 14px;
  border-radius: var(--radius);
  font-size: 12.5px;
  line-height: 1.45;
  font-weight: 500;
  border: 1px solid var(--line-strong);
  background: var(--bg-elevated);
  box-shadow: 0 12px 34px rgba(0, 0, 0, 0.5);
  transform: translateX(120%);
  opacity: 0;
  transition: transform 0.25s ease, opacity 0.25s ease;
}
.cf-toast.show { transform: translateX(0); opacity: 1; }
.cf-toast.is-ok { border-color: rgba(87, 199, 154, 0.4); color: var(--ok); }
.cf-toast.is-err { border-color: rgba(255, 106, 106, 0.4); color: var(--danger); }
.cf-toast.is-info { color: var(--text); }

/* ---------- forms ---------- */
.cf-form-grid {
  display: grid; grid-template-columns: 1fr 1fr; gap: 12px 14px;
}
.cf-form-grid .span-2 { grid-column: 1 / -1; }
.cf-form-grid label { display: flex; flex-direction: column; gap: 4px; }
.cf-form-grid label > span {
  font-size: 10.5px; font-weight: 600; letter-spacing: 0.3px;
  text-transform: uppercase; color: var(--muted-dim);
}
.cf-form-grid input.cf-input, .cf-form-grid select.cf-input { width: 100%; min-width: 0; }
.cf-form-grid input[type="checkbox"] { width: 15px; height: 15px; accent-color: var(--accent); }
.cf-check { flex-direction: row !important; align-items: center; gap: 8px !important; }
.cf-check > span { text-transform: none !important; font-size: 12.5px !important; color: var(--text) !important; letter-spacing: 0 !important; }

.cf-form-section {
  margin-top: 14px; padding-top: 14px; border-top: 1px solid var(--line);
}
.cf-form-section > summary {
  cursor: pointer; font-size: 11px; font-weight: 600; letter-spacing: 0.4px;
  text-transform: uppercase; color: var(--accent); list-style: none; user-select: none;
  display: flex; align-items: center; gap: 7px;
}
.cf-form-section > summary::-webkit-details-marker { display: none; }
.cf-form-section > summary::before { content: "▸"; font-size: 10px; }
.cf-form-section[open] > summary::before { content: "▾"; }
.cf-form-section[open] > summary { margin-bottom: 12px; }

textarea.cf-code-input {
  width: 100%;
  min-height: 280px;
  resize: vertical;
  padding: 11px 12px;
  border-radius: var(--radius-sm);
  border: 1px solid var(--line-strong);
  background: #070d12;
  color: #cfe3ee;
  font-family: var(--mono);
  font-size: 12px;
  line-height: 1.5;
  tab-size: 2;
}
textarea.cf-code-input:focus { outline: none; border-color: var(--accent); }

.cf-validate-out {
  margin-top: 10px; padding: 9px 12px; border-radius: var(--radius-sm);
  font-size: 12px; font-family: var(--mono); white-space: pre-wrap;
}
.cf-validate-out.ok { background: var(--ok-soft); border: 1px solid rgba(87,199,154,0.3); color: var(--ok); }
.cf-validate-out.err { background: var(--danger-soft); border: 1px solid rgba(255,106,106,0.3); color: var(--danger); }

.cf-form-err {
  margin: 10px 0 0; padding: 9px 12px; border-radius: var(--radius-sm);
  background: var(--danger-soft); border: 1px solid rgba(255,106,106,0.3);
  color: var(--danger); font-size: 12px;
}

/* ---------- detail sections (clean, spaced) ---------- */
.cf-section { border-top: 1px solid var(--line); }
.cf-section:first-child { border-top: none; }
.cf-section-head {
  display: flex; align-items: center; gap: 10px;
  padding: 16px 16px 0;
}
.cf-section-head h3 {
  position: relative; padding-left: 11px;
  margin: 0; font-size: 11px; font-weight: 700; letter-spacing: 0.6px;
  text-transform: uppercase; color: var(--muted);
}
.cf-section-head h3::before {
  content: ""; position: absolute; left: 0; top: 50%; transform: translateY(-50%);
  width: 3px; height: 12px; border-radius: 2px; background: var(--accent); opacity: 0.75;
}
.cf-section-head .cf-section-sub { font-size: 10.5px; color: var(--muted-dim); font-weight: 500; }
.cf-section-actions { margin-left: auto; display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
.cf-section-body { padding: 11px 16px 16px; }
.cf-quickadd { display: flex; align-items: center; gap: 7px; flex-wrap: wrap; margin-bottom: 11px; }
.cf-quickadd > span { font-size: 11px; color: var(--muted-dim); margin-right: 2px; }
.cf-quick { display: inline-flex; align-items: center; gap: 7px; }
.cf-qdot { width: 6px; height: 6px; border-radius: 50%; flex-shrink: 0; }
.cf-detail-foot {
  display: flex; gap: 16px; align-items: center;
  padding: 13px 16px; border-top: 1px solid var(--line);
}
.cf-link-btn {
  background: none; border: none; color: var(--muted); font-size: 12px;
  cursor: pointer; padding: 0; font-family: var(--font); font-weight: 500;
  transition: color var(--dur-1) var(--ease);
}
.cf-link-btn:hover { color: var(--text); text-decoration: underline; text-underline-offset: 2px; }
.cf-link-btn:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; border-radius: 4px; }
.cf-link-btn.danger:hover { color: var(--danger); }
.cf-l7-row { display: flex; align-items: center; gap: 11px; padding: 9px 0; border-bottom: 1px solid var(--line); }
.cf-l7-row:last-child { border-bottom: none; }
.cf-l7-stats { display: flex; gap: 16px; }
.cf-l7-stat { text-align: right; min-width: 56px; }
.cf-l7-stat b { display: block; font-size: 13px; font-variant-numeric: tabular-nums; }
.cf-l7-stat span { font-size: 10px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px; color: var(--muted-dim); }

/* top destinations list */
.cf-list { display: flex; flex-direction: column; }
.cf-list-row {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 10px 15px;
  border-bottom: 1px solid var(--line);
  transition: background var(--dur-1) var(--ease);
}
.cf-list-row:last-child { border-bottom: none; }
/* Hover + keyboard focus feedback for the clickable rows (IPs, Profiles, …). The inline
 * selected-row background set by the JS still wins; this just adds the missing hover. */
.cf-list-row[data-target]:hover, .cf-list-row[data-profile]:hover,
.cf-list-row[data-ev]:hover, .cf-list-row[data-i]:hover { background: var(--surface-hover); }
.cf-list-row:focus-visible { outline: none; box-shadow: var(--ring-cool); border-radius: var(--radius-xs); }
.cf-list-row .cf-list-main { flex: 1; min-width: 0; }
.cf-list-row .cf-list-title { font-weight: 600; font-family: var(--mono); font-size: 12px; }
.cf-list-row .cf-list-sub { font-size: 10.5px; color: var(--muted-dim); margin-top: 2px; }
.cf-list-row .cf-list-val { font-variant-numeric: tabular-nums; text-align: right; }
.cf-list-row .cf-list-val small { display: block; font-size: 10px; color: var(--muted-dim); }