/* OWASP Security Baseline Engine - UI styles (no external assets, CSP-friendly). */
:root {
  --bg: #f5f6f8;
  --surface: #ffffff;
  --surface-2: #f0f2f5;
  --border: #dde1e7;
  --text: #1b1f24;
  --muted: #5d6673;
  --accent: #1f5fbf;
  --accent-ink: #ffffff;
  --accent-soft: #e5eefb;
  --code-bg: #0f1720;
  --code-text: #dce3ea;
  --ok: #1d7a46;
  --warn-bg: #fff6e0;
  --warn-border: #f0c75e;
  --warn-text: #6b4b00;
  --low: #1d7a46;
  --moderate: #9a6700;
  --high: #c2410c;
  --critical: #b42318;
  --radius: 10px;
  --shadow: 0 1px 2px rgba(16, 24, 40, .06), 0 1px 3px rgba(16, 24, 40, .08);
  --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
  --sans: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
  color-scheme: light;
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0d1117;
    --surface: #151b23;
    --surface-2: #1c232d;
    --border: #2a333f;
    --text: #e6edf3;
    --muted: #9aa5b1;
    --accent: #5b9cf5;
    --accent-ink: #0d1117;
    --accent-soft: #17283f;
    --code-bg: #0a0e13;
    --code-text: #d7dee6;
    --warn-bg: #2b2210;
    --warn-border: #7a5d18;
    --warn-text: #f3d48a;
    --low: #4ac27e;
    --moderate: #e3b341;
    --high: #f0883e;
    --critical: #ff6b5e;
    --shadow: none;
    color-scheme: dark;
  }
}

* { box-sizing: border-box; }
html, body { margin: 0; }
body {
  background: var(--bg);
  color: var(--text);
  font: 15px/1.5 var(--sans);
  -webkit-font-smoothing: antialiased;
}
a { color: var(--accent); }
h1, h2, h3 { line-height: 1.25; margin: 0; }
h1 { font-size: 1.25rem; }
h2 { font-size: 1.2rem; }
h3 { font-size: .95rem; margin: 1.25rem 0 .6rem; }
.wrap { max-width: 1400px; margin: 0 auto; padding: 0 16px; }
.muted { color: var(--muted); }
.small { font-size: .85rem; }
.mono { font-family: var(--mono); font-size: .85em; }
.strong { font-weight: 600; }
.offscreen { position: fixed; left: -9999px; }

/* top bar */
.topbar { background: var(--surface); border-bottom: 1px solid var(--border); }
.topbar-inner { display: flex; align-items: center; justify-content: space-between; height: 56px; gap: 12px; }
.brand { display: flex; align-items: center; gap: 10px; font-weight: 650; }
.brand-mark { color: var(--accent); }
.toplinks { display: flex; gap: 18px; font-size: .9rem; }
.toplinks a { text-decoration: none; }
.toplinks a:hover { text-decoration: underline; }

/* layout */
.layout { display: grid; grid-template-columns: minmax(300px, 380px) minmax(0, 1fr); gap: 20px; padding-top: 20px; padding-bottom: 20px; align-items: start; }
@media (max-width: 900px) { .layout { grid-template-columns: 1fr; } }
.panel { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); box-shadow: var(--shadow); padding: 20px; }
.form-panel { position: sticky; top: 16px; }
@media (max-width: 900px) { .form-panel { position: static; } }
.lede { color: var(--muted); margin: .4rem 0 1rem; font-size: .9rem; }

/* form */
fieldset { border: 0; padding: 0; margin: 0 0 1.25rem; min-width: 0; }
legend { font-weight: 600; font-size: .9rem; margin-bottom: .5rem; padding: 0; }
.hint { color: var(--muted); font-weight: 400; }
.choice-list { display: grid; gap: 6px; }
.choice { display: flex; gap: 10px; align-items: flex-start; padding: 9px 11px; border: 1px solid var(--border); border-radius: 8px; cursor: pointer; background: var(--surface); }
.choice:hover { border-color: var(--accent); }
.choice:has(input:checked) { border-color: var(--accent); background: var(--accent-soft); }
.choice input { margin-top: 3px; accent-color: var(--accent); }
.choice-text { display: flex; flex-direction: column; }
.choice-label { font-weight: 550; font-size: .9rem; }
.choice-desc { color: var(--muted); font-size: .8rem; }
.compact .choice { padding: 6px 10px; }
.field { display: grid; gap: 4px; margin-bottom: .75rem; font-size: .88rem; }
.field > span { font-weight: 550; }
select, input[type="text"] {
  font: inherit; color: var(--text); background: var(--surface);
  border: 1px solid var(--border); border-radius: 8px; padding: 8px 10px; width: 100%;
}
select:focus, input:focus, button:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
.advanced { margin-bottom: 1rem; border-top: 1px solid var(--border); padding-top: .75rem; }
.advanced summary { cursor: pointer; font-weight: 600; font-size: .9rem; margin-bottom: .75rem; }
.form-actions { display: grid; gap: 8px; }
.form-error { color: var(--critical); font-size: .88rem; margin: 0; }

/* buttons */
.btn { font: inherit; font-weight: 600; border: 1px solid var(--border); background: var(--surface-2); color: var(--text); border-radius: 8px; padding: 9px 14px; cursor: pointer; }
.btn:hover { border-color: var(--accent); }
.btn.primary { background: var(--accent); color: var(--accent-ink); border-color: var(--accent); }
.btn.primary:hover { filter: brightness(1.07); }
.btn:disabled { opacity: .6; cursor: progress; }
.btn.small { padding: 5px 10px; font-size: .8rem; }

/* results */
.results { display: grid; gap: 20px; min-width: 0; }
#output { display: grid; gap: 20px; min-width: 0; }
#output[hidden] { display: none; }
.empty { text-align: center; padding: 48px 20px; color: var(--muted); }
.empty h2 { color: var(--text); margin-bottom: .4rem; }
.eyebrow { text-transform: uppercase; letter-spacing: .06em; font-size: .72rem; color: var(--muted); font-weight: 600; }
.summary-head { display: flex; justify-content: space-between; gap: 16px; align-items: flex-start; }
.summary-head h2 { margin: .15rem 0 .2rem; }
.badge { white-space: nowrap; font-weight: 700; font-size: .8rem; padding: 4px 10px; border-radius: 999px; border: 1px solid currentColor; }
.badge.low { color: var(--low); }
.badge.moderate { color: var(--moderate); }
.badge.high { color: var(--high); }
.badge.critical { color: var(--critical); }
.stats { display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); gap: 10px; margin: 16px 0 10px; }
@media (max-width: 600px) { .stats { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
.stats div { background: var(--surface-2); border-radius: 8px; padding: 10px 12px; }
.stats dt { font-size: .75rem; color: var(--muted); }
.stats dd { margin: 2px 0 0; font-size: 1.35rem; font-weight: 700; font-variant-numeric: tabular-nums; }
.warnings { margin: 12px 0 0; padding: 10px 14px 10px 30px; background: var(--warn-bg); border: 1px solid var(--warn-border); color: var(--warn-text); border-radius: 8px; font-size: .86rem; }
.warnings li + li { margin-top: 4px; }

/* tabs */
.tabs-panel { padding: 0; overflow: hidden; }
.tabs { display: flex; border-bottom: 1px solid var(--border); overflow-x: auto; }
.tab { font: inherit; font-weight: 600; font-size: .9rem; background: none; border: 0; border-bottom: 2px solid transparent; padding: 13px 16px; color: var(--muted); cursor: pointer; white-space: nowrap; }
.tab[aria-selected="true"] { color: var(--text); border-bottom-color: var(--accent); }
.tab-body { padding: 4px 20px 20px; min-width: 0; }

/* tables */
.table-wrap { overflow-x: auto; border: 1px solid var(--border); border-radius: 8px; }
table.data { width: 100%; border-collapse: collapse; font-size: .86rem; }
table.data th { text-align: left; font-size: .75rem; text-transform: uppercase; letter-spacing: .04em; color: var(--muted); background: var(--surface-2); padding: 8px 10px; white-space: nowrap; }
table.data td { padding: 8px 10px; border-top: 1px solid var(--border); vertical-align: top; }
table.data tr.dim td { color: var(--muted); }
.pill { display: inline-block; font-size: .72rem; font-weight: 600; padding: 2px 8px; border-radius: 999px; background: var(--surface-2); border: 1px solid var(--border); white-space: nowrap; }
.pill.active { color: var(--ok); }
.pill.replaced { color: var(--moderate); }
.pill.enforcement { color: var(--accent); }
.pill.ref { font-family: var(--mono); }
.pill.required { color: var(--critical); }
.pill.recommended { color: var(--muted); }
.pill.layer { color: var(--accent); }
.pill.cov-edge { color: var(--ok); }
.pill.cov-partial { color: var(--moderate); }
.pill.cov-none { color: var(--critical); }
.strong { font-weight: 600; }
ul.tight { margin: 0; padding-left: 1.1rem; }
ul.tight li + li { margin-top: 2px; }
.fw + .fw, .vendor + .vendor { margin-top: 1.4rem; }
.fw h4, .vendor h4 { margin: .4rem 0 .5rem; }
.vendor { border-top: 1px solid var(--border); padding-top: .6rem; }
.vendor-head { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
.vendor .warnings { margin: 0 0 .6rem; }
.vendor pre.code { margin-top: .4rem; }
.end-note { text-align: right; margin-top: 6px; }
.note { background: var(--accent-soft); border: 1px solid var(--border); border-radius: 8px; padding: 10px 14px; font-size: .88rem; }
.note[hidden], .tab[hidden], #coraza-wrap[hidden] { display: none; }

.chips { display: flex; flex-wrap: wrap; gap: 6px; }
.chip { font-size: .8rem; padding: 4px 10px; border-radius: 999px; background: var(--accent-soft); border: 1px solid var(--border); }

.control-list { list-style: none; padding: 0; margin: 0; display: grid; gap: 8px; }
.control-list li { border: 1px solid var(--border); border-radius: 8px; padding: 10px 12px; }
.control-meta { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 6px; }

.filter-row { display: flex; justify-content: space-between; align-items: center; gap: 12px; flex-wrap: wrap; }
.seg { display: inline-flex; border: 1px solid var(--border); border-radius: 8px; overflow: hidden; margin: 1rem 0 .6rem; }
.seg-btn { font: inherit; font-size: .8rem; font-weight: 600; background: var(--surface); color: var(--muted); border: 0; padding: 6px 12px; cursor: pointer; }
.seg-btn + .seg-btn { border-left: 1px solid var(--border); }
.seg-btn[aria-pressed="true"] { background: var(--accent-soft); color: var(--text); }

/* code */
.code-head { display: flex; justify-content: space-between; align-items: center; gap: 12px; }
.code-actions { display: flex; gap: 6px; }
.code-actions.end { justify-content: flex-end; margin-top: 10px; }
pre.code { background: var(--code-bg); color: var(--code-text); border-radius: 8px; padding: 14px 16px; overflow: auto; max-height: 420px; margin: 0; font: 12.5px/1.55 var(--mono); tab-size: 4; }
pre.code.tall { max-height: 640px; }

.footer { padding-bottom: 28px; }

/* protection coverage score */
.score-card { margin-top: 12px; border-top: 1px solid var(--border); padding-top: 12px; }
.score-head { display: flex; justify-content: space-between; align-items: flex-start; gap: 12px; flex-wrap: wrap; }
.score-big { font-size: 1.6rem; font-weight: 700; font-variant-numeric: tabular-nums; display: flex; align-items: center; gap: 10px; }
.score-bars { display: grid; gap: 6px; margin-top: 10px; }
.score-row { display: grid; grid-template-columns: minmax(110px, 160px) minmax(0, 1fr) 3.2em; gap: 10px; align-items: center; font-size: .85rem; }
.score-val { text-align: right; font-variant-numeric: tabular-nums; font-weight: 600; }
.score-row.na { color: var(--muted); }
.score-row.na .score-val { font-weight: 500; }
.bar.na { background: repeating-linear-gradient(135deg, transparent 0 6px, var(--border) 6px 8px); }
.pill.src-na { color: var(--muted); }
.score-cell { display: flex; align-items: center; gap: 8px; min-width: 140px; }
.score-cell .bar { flex: 1; }
.bar { position: relative; height: 10px; background: var(--surface-2); border: 1px solid var(--border); border-radius: 999px; overflow: visible; }
.bar .fill { position: absolute; inset: 0 auto 0 0; border-radius: 999px; }
.bar .fill.ok { background: var(--ok); }
.bar .fill.gap { background: var(--moderate); }
.bar .target { position: absolute; top: -3px; bottom: -3px; width: 2px; background: var(--text); transform: translateX(-1px); }
.pill.src-product { color: var(--ok); }
.pill.src-attested { color: var(--accent); }
.pill.src-partial { color: var(--moderate); }
.pill.src-gap { color: var(--critical); }
.pill.src-not_applicable { color: var(--muted); }
tr.na-row td:nth-child(n+3) { text-decoration: line-through; text-decoration-color: var(--border); }
.pill.src-not_enabled { color: var(--critical); text-decoration: line-through; }
td.center { text-align: center; }
input.attest { width: 1.05rem; height: 1.05rem; accent-color: var(--accent); }
tr.total td { border-top: 2px solid var(--border); }
@media (max-width: 640px) { .score-row { grid-template-columns: minmax(90px, 120px) minmax(0, 1fr) 3em; } }

/* Vendors: WAF and bot policies */
.vendor-group { margin: 1.2rem 0 .2rem; }
.vendor .policy { border-left: 3px solid var(--border); padding: .2rem 0 .2rem .8rem; margin: .8rem 0; }
.vendor .policy-waf { border-left-color: var(--accent); }
.vendor .policy-bot { border-left-color: var(--moderate); }
.vendor .policy h5 { margin: 0 0 .3rem; font-size: .9rem; display: flex; gap: .5rem; align-items: center; }
.pill.policy-pill.policy-waf { color: var(--accent); }
.pill.policy-pill.policy-bot { color: var(--moderate); }

/* Mandatory MFA */
.mfa-choice { margin-top: 8px; border-style: dashed; }
.pill.mfa-mitigated { color: var(--ok); }
.pill.mfa-reduced { color: var(--moderate); }
.pill.src-mfa_mitigated { color: var(--ok); }
.mfa-note { color: var(--muted); margin-top: 2px; }
tr.mfa-row td:nth-child(n+3) { text-decoration: none; }
.mfa-sub { margin-left: 22px; }