/* PrefixBroker UI — small, dependency-free stylesheet.
   Honest framing is visually reinforced: the disclaimer banner and "indicator"
   tags are always visible and high-contrast. */

:root {
  --bg: #f6f7f9;
  --fg: #1d2330;
  --muted: #6b7280;
  --card: #ffffff;
  --border: #dfe3e8;
  --primary: #1f6feb;
  --ok: #1a7f37;
  --warn: #9a6700;
  --bad: #b42318;
  --warn-bg: #fff8e6;
  --ok-bg: #e9f6ec;
  --bad-bg: #fbeaea;
}

* { box-sizing: border-box; }
body {
  margin: 0; background: var(--bg); color: var(--fg);
  font: 15px/1.5 system-ui, -apple-system, Segoe UI, Roboto, sans-serif;
}

/* Honest-framing banner — always visible (spec 1). */
.honest-banner {
  background: #11243f; color: #eef3fb; padding: 10px 18px;
  font-size: 13px; border-bottom: 3px solid var(--primary);
}
.honest-banner strong { color: #ffd479; }

.topbar {
  display: flex; align-items: center; gap: 16px;
  padding: 10px 18px; background: var(--card); border-bottom: 1px solid var(--border);
}
.brand { font-weight: 700; text-decoration: none; color: var(--fg); }
/* Tenant badge on the brand: which tenant's data is on screen. Distinct enough
   to read at a glance, quiet enough not to compete with the product name. */
.brand-tenant {
  display: inline-block; margin-left: 10px; padding: 2px 8px;
  border: 1px solid var(--primary); border-radius: 10px;
  color: var(--primary); font-size: 12px; font-weight: 600;
  vertical-align: 2px; white-space: nowrap;
}
.nav { display: flex; gap: 14px; align-items: center; margin-left: auto; }
.nav a { color: var(--primary); text-decoration: none; }
.nav .who { color: var(--muted); font-size: 13px; }

.content { max-width: 1040px; margin: 22px auto; padding: 0 18px; }
.footer { text-align: center; color: var(--muted); font-size: 12px; padding: 24px; }

h1 { font-size: 24px; margin: 0 0 4px; }
h2 { font-size: 17px; margin: 0 0 12px; }

.grid { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; }
@media (max-width: 760px) { .grid { grid-template-columns: 1fr; } }

.card {
  background: var(--card); border: 1px solid var(--border); border-radius: 10px;
  padding: 18px; margin-bottom: 16px;
}
.card.narrow { max-width: 420px; margin: 40px auto; }

.stack { display: flex; flex-direction: column; gap: 12px; }
.row { display: flex; gap: 12px; flex-wrap: wrap; align-items: flex-end; }
label { display: block; font-size: 13px; color: var(--fg); }
label.inline { display: flex; gap: 8px; align-items: center; }
/* The `label { display: block }` above otherwise overrides the browser's
   built-in `[hidden] { display: none }`, which kept the type-toggled fields on
   the add-resource form (e.g. the ASN input on a prefix) visible. Make the
   hidden attribute always win. */
[hidden] { display: none !important; }
input, select {
  width: 100%; padding: 8px 10px; border: 1px solid var(--border);
  border-radius: 7px; font: inherit; margin-top: 4px; background: #fff;
}
label.inline input[type=checkbox] { width: auto; margin: 0; }

.btn {
  display: inline-block; padding: 8px 14px; border-radius: 7px;
  border: 1px solid var(--border); background: #fff; color: var(--fg);
  cursor: pointer; text-decoration: none; font: inherit;
}
.btn:hover { background: #f0f3f7; }
.btn.primary { background: var(--primary); border-color: var(--primary); color: #fff; }
.btn.danger { background: var(--bad); border-color: var(--bad); color: #fff; }
.btn.warn { background: var(--warn-bg); border-color: #e7c66b; color: var(--warn); }
.btn.small { padding: 4px 9px; font-size: 13px; }
.btn:disabled { opacity: .55; cursor: progress; }
.btn.is-running { cursor: progress; }
/* Run-button loading spinner (freshness/spinners Unit 1). Pure CSS, no deps. */
.btn-spinner {
  display: inline-block; width: 12px; height: 12px; vertical-align: -1px;
  border: 2px solid currentColor; border-right-color: transparent;
  border-radius: 50%; animation: pb-spin .6s linear infinite;
}
@keyframes pb-spin { to { transform: rotate(360deg); } }
/* Data-freshness (freshness Unit 2): a stale source reads amber. */
.stale { color: var(--warn); }
ul.freshness { margin: 4px 0 0; padding-left: 18px; }
ul.freshness li { margin: 1px 0; }

/* Collapsible long tables (cleanup checklist): hide overflow rows behind a
   "Show N more" toggle. Rows are only hidden once JS adds the class. */
.row-collapsed { display: none; }
.collapse-toggle-row td { text-align: center; padding: 6px; background: #fafbfc; }
.collapse-toggle {
  border: 0; background: none; color: var(--primary); cursor: pointer;
  font: inherit; padding: 2px 6px; border-radius: 6px;
}
.collapse-toggle:hover { background: #eef2f7; text-decoration: underline; }
.collapse-toggle:focus-visible { outline: 2px solid var(--primary); outline-offset: 2px; }

/* Card section collapsed into a native <details> disclosure (cleanup history).
   Matches the usermenu/signoff-help idiom: hidden default marker + a caret. */
.history-disclosure > summary {
  cursor: pointer; list-style: none; display: flex; align-items: baseline; gap: .5rem;
}
.history-disclosure > summary::-webkit-details-marker { display: none; }
.history-disclosure > summary h2 { margin: 0; }
.history-disclosure > summary .disclosure-count { font-size: 14px; }
.history-disclosure > summary .caret {
  margin-left: auto; font-size: 10px; color: var(--muted); display: inline-block;
}
.history-disclosure[open] > summary .caret { transform: rotate(180deg); }
.history-disclosure-body { margin-top: .75rem; }

/* Deep-check per-IP address list: a compact ~20-line scroll window (a /16 can be
   thousands of addresses). agent.js adds an Expand/Collapse toggle when it
   overflows; JS-off users still get the scrollable window. ~20 lines matches
   the data-collapse-after="20" used by every long table on the page. */
.ip-window-wrap { margin: 6px 0 2px; }
.ip-window {
  max-height: 30em; overflow-y: auto;
  display: flex; flex-wrap: wrap; gap: 2px 12px;
  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
  font-size: 12px; padding: 8px 10px;
  border: 1px solid var(--border); border-radius: 8px; background: #fafbfc;
}
.ip-window.expanded { max-height: none; }
.ip-window .ip { white-space: nowrap; color: var(--muted); }
.ip-window-wrap .collapse-toggle { margin-top: 4px; }

.muted { color: var(--muted); }
.small { font-size: 12px; }
.hint { color: var(--muted); font-size: 12px; margin-top: 4px; }
.nowrap { white-space: nowrap; }

/* Indicator framing. */
.ind-tag {
  display: inline-block; font-size: 10px; text-transform: uppercase;
  letter-spacing: .04em; background: #eef2ff; color: #3538cd;
  border: 1px solid #c7d2fe; border-radius: 6px; padding: 1px 6px; vertical-align: middle;
}
.indicator-note {
  background: #eef2ff; border: 1px solid #c7d2fe; color: #283593;
  padding: 8px 12px; border-radius: 8px; font-size: 13px; margin-bottom: 12px;
}
.notice {
  background: var(--warn-bg); border: 1px solid #e7c66b; color: var(--warn);
  padding: 8px 12px; border-radius: 8px; font-size: 13px;
}

table.data { width: 100%; border-collapse: collapse; font-size: 14px; }
table.data th, table.data td {
  text-align: left; padding: 8px 10px; border-bottom: 1px solid var(--border);
  vertical-align: top;
}
table.data th { color: var(--muted); font-weight: 600; font-size: 12px; }

.pill {
  display: inline-block; padding: 2px 9px; border-radius: 999px; font-size: 12px;
  border: 1px solid transparent;
}
.pill.ok { background: var(--ok-bg); color: var(--ok); border-color: #b7e0c0; }
.pill.warn { background: var(--warn-bg); color: var(--warn); border-color: #e7c66b; }
.pill.bad { background: var(--bad-bg); color: var(--bad); border-color: #e9b3ae; }
.pill.na { background: #eef0f3; color: var(--muted); }
.pill.big { font-size: 14px; padding: 4px 12px; }

.state { font-weight: 600; }
.state-cancelled { color: var(--bad); }
.state-completed { color: var(--ok); }
.state-cleanup_verified, .state-rir_ticket_submitted { color: var(--primary); }

.kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 16px; }
.kv dt { color: var(--muted); }

.reasons { list-style: none; padding: 0; margin: 0; }
.reasons li { padding: 6px 0; border-bottom: 1px solid var(--border); }
.reasons .sev {
  display: inline-block; font-size: 11px; text-transform: uppercase;
  border-radius: 5px; padding: 1px 6px; margin-right: 6px;
}
.sev-block .sev { background: var(--bad-bg); color: var(--bad); }
.sev-review .sev { background: var(--warn-bg); color: var(--warn); }
.sev-info .sev { background: var(--ok-bg); color: var(--ok); }

.cleanup-present_to_remove td { background: #fffdf5; }
.cleanup-clean td { background: #fafffb; }

.signoff { margin-top: 14px; padding-top: 12px; border-top: 1px dashed var(--border); }
.state-buttons { display: flex; gap: 10px; flex-wrap: wrap; align-items: center; }
.inline-form { display: flex; gap: 8px; align-items: center; }

pre.diff, pre { background: #0d1117; color: #c9d1d9; padding: 10px; border-radius: 8px;
  overflow: auto; font-size: 12px; }

.flash { padding: 10px 14px; border-radius: 8px; background: var(--ok-bg);
  color: var(--ok); margin-bottom: 14px; }
.flash.error { background: var(--bad-bg); color: var(--bad); }

/* Toast. */
.toast {
  position: fixed; bottom: 18px; left: 50%; transform: translateX(-50%) translateY(20px);
  background: #11243f; color: #fff; padding: 10px 16px; border-radius: 8px;
  opacity: 0; transition: opacity .2s, transform .2s; pointer-events: none; z-index: 50;
}
.toast.show { opacity: 1; transform: translateX(-50%) translateY(0); }
.toast.ok { background: var(--ok); }
.toast.error { background: var(--bad); }

/* Danger zone (destructive actions) */
.card.danger { border: 1px solid #e0b4b4; background: #fcf4f4; }
.card.danger h2 { color: #a12622; }
.btn.danger { background: #c0392b; color: #fff; border-color: #a12622; }
.btn.danger:hover { background: #a12622; }

/* needs_review (covering aggregate / foreign) pill */
.pill.review { background: #fff3cd; color: #8a6d3b; border: 1px solid #e6c200; }

/* ---- About > Code graph (layered architecture diagram) ---- */
.code-graph { width: 100%; margin: 0.5rem 0; }
.code-graph-svg {
  width: 100%; height: auto;
  background: #fff; border: 1px solid #e2e8f0; border-radius: 6px;
}
.cg-lane { font: 600 12px/1.2 system-ui, sans-serif; pointer-events: none; }
.cg-box { cursor: pointer; transition: opacity 0.12s; }
.cg-name { font: 11px/1.2 ui-monospace, "SFMono-Regular", Menlo, monospace; fill: #1e293b; pointer-events: none; }
.cg-edge { transition: stroke-opacity 0.12s, stroke 0.12s; }

/* ---- API keys page ---- */
.new-key { margin-top: 1rem; padding: 0.75rem 1rem; background: #ecfdf5; border: 1px solid #6ee7b7; border-radius: 6px; }
.key-value { display: block; padding: 0.5rem 0.7rem; margin: 0.3rem 0; background: #0f172a; color: #e2e8f0; border-radius: 4px; font: 13px/1.4 ui-monospace, Menlo, monospace; word-break: break-all; user-select: all; }

/* ---- Ownership sign-off explainer (resource detail) ---- */
.signoff-help { margin: 0.5rem 0 0.75rem; }
.signoff-help summary { cursor: pointer; color: var(--primary); font-size: 0.9rem; }
.signoff-help-body { margin-top: 0.5rem; padding: 0.75rem 1rem; background: var(--warn-bg); border: 1px solid #e7c66b; border-radius: 8px; font-size: 0.9rem; }
.signoff-help-body p { margin: 0 0 0.6rem; }
.signoff-help-body ul { margin: 0.4rem 0 0; padding-left: 1.1rem; }
.signoff-list { margin: 0.4rem 0 0; padding-left: 1.2rem; }
.signoff-list li { padding: 0.35rem 0; border-bottom: 1px solid #e7d9a8; }
.signoff-list li:last-child { border-bottom: none; }

/* ---- User menu dropdown (nav) ---- */
.nav .usermenu { position: relative; }
.nav .usermenu > summary {
  list-style: none; cursor: pointer; color: var(--primary);
  padding: 4px 10px; border: 1px solid var(--border); border-radius: 7px;
  background: #fff; user-select: none; white-space: nowrap;
}
.nav .usermenu > summary::-webkit-details-marker { display: none; }
.nav .usermenu > summary:hover { background: #f0f3f7; }
.nav .usermenu .caret { font-size: 10px; color: var(--muted); }
.nav .usermenu[open] > summary { background: #f0f3f7; }
.usermenu-panel {
  position: absolute; right: 0; top: calc(100% + 6px); z-index: 100;
  display: flex; flex-direction: column; min-width: 180px; padding: 6px;
  background: var(--card); border: 1px solid var(--border); border-radius: 10px;
  box-shadow: 0 8px 24px rgba(17, 36, 63, .14);
}
.usermenu-panel a {
  padding: 8px 10px; border-radius: 6px; color: var(--fg); text-decoration: none;
  font-size: 14px;
}
.usermenu-panel a:hover { background: #f0f3f7; color: var(--primary); }
/* Logout is a POST form (CSRF-protected) styled to match the panel links. */
.usermenu-panel .logout-form { margin: 4px 0 0; border-top: 1px solid var(--border); padding-top: 4px; }
.usermenu-panel .logout-form .linklike {
  display: block; width: 100%; text-align: left; cursor: pointer;
  padding: 8px 10px; border: 0; border-radius: 6px; background: none;
  font: inherit; font-size: 14px; color: var(--bad);
}
.usermenu-panel .logout-form .linklike:hover { background: #f0f3f7; }
.usermenu-meta {
  padding: 4px 10px 8px; margin-bottom: 4px; border-bottom: 1px solid var(--border);
  color: var(--muted); font-size: 12px; text-transform: capitalize;
}

/* Global-admin "acting as tenant X" banner (sits under the header). */
.ga-banner {
  display: flex; align-items: center; justify-content: space-between; gap: 16px;
  background: #fef3c7; color: #78350f; border-bottom: 1px solid #f59e0b;
  padding: 8px 20px; font-size: 14px;
}

/* ===================== Dashboard traffic-light overview ==================== */
.dot { display: inline-block; width: 10px; height: 10px; border-radius: 50%;
  flex: 0 0 auto; vertical-align: middle; }
.dot-green { background: #1a7f37; }
.dot-amber { background: #d99e00; }
.dot-red   { background: #b42318; }
.dot-grey  { background: #9ba3af; }

.summary-banner { border-radius: 10px; padding: 14px 18px; margin: 0 0 16px;
  border: 1px solid var(--border); background: var(--card); }
.summary-banner.tone-green { background: #eef8f0; border-color: #bfe3c8; }
.summary-banner.tone-amber { background: #fff7e6; border-color: #ecd49a; }
.summary-banner.tone-red   { background: #fcf0ee; border-color: #e7b6ae; }
.summary-banner.tone-grey  { background: #f4f5f7; }
.summary-headline { font-size: 17px; font-weight: 600; margin: 0; color: var(--fg); }
.summary-counts { display: flex; gap: 18px; flex-wrap: wrap; margin-top: 8px; }
.count { display: inline-flex; align-items: center; gap: 6px; font-size: 13px;
  font-weight: 600; color: var(--muted); }

.attention-card { border-left: 4px solid var(--warn); }
.attention-card h2 { margin-top: 0; }
.attention-list { list-style: none; margin: 0; padding: 0; }
.attention-list li { display: flex; align-items: baseline; gap: 8px;
  padding: 7px 0; border-bottom: 1px solid var(--border); }
.attention-list li:last-child { border-bottom: 0; }
.all-clear { border-left: 4px solid var(--ok); }
.all-clear p { margin: 0; font-weight: 600; color: var(--ok); }

.overview-head { display: flex; justify-content: space-between; align-items: baseline; }

.res-card { border: 1px solid var(--border); border-left: 4px solid var(--muted);
  border-radius: 8px; padding: 12px 14px; margin: 10px 0; background: var(--card); }
.res-card.rag-green { border-left-color: #1a7f37; }
.res-card.rag-amber { border-left-color: #d99e00; }
.res-card.rag-red   { border-left-color: #b42318; }
.res-card.rag-grey  { border-left-color: #9ba3af; }
.res-head { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
.res-name { font-weight: 600; font-size: 15px; }
.res-type { font-size: 12px; }
.res-headline { font-size: 12px; font-weight: 600; padding: 2px 9px; border-radius: 11px; }
.badge-green { background: #e9f6ec; color: #1a7f37; }
.badge-amber { background: #fdf3da; color: #9a6700; }
.badge-red   { background: #fbeae8; color: #b42318; }
.badge-grey  { background: #eef0f3; color: #6b7280; }
.open-btn { margin-left: auto; }
/* Per-resource tags in the card head (seller ASN / call-to-action). */
.tag { font-size: 11.5px; font-weight: 600; padding: 2px 9px; border-radius: 11px;
  border: 1px solid transparent; white-space: nowrap; text-decoration: none;
  display: inline-flex; align-items: center; }
.tag-asn { background: #eef4fd; color: var(--primary); border-color: #cfe0fb; }
.tag-danger { background: var(--bad-bg); color: var(--bad); border-color: #e9b3ae; }
.tag-danger::before { content: "⚑ "; }
.tag-danger:hover { background: var(--bad); color: #fff; border-color: var(--bad); }
.res-summary { margin: 8px 0 10px; color: var(--fg); font-size: 13.5px; }
.chips { display: flex; gap: 8px; flex-wrap: wrap; }
.chip { display: inline-flex; align-items: center; gap: 6px; text-decoration: none;
  font-size: 12px; padding: 3px 10px; border-radius: 14px;
  border: 1px solid var(--border); background: #fafbfc; color: var(--fg); }
.chip:hover { border-color: var(--primary); }
.chip-k { color: var(--muted); }
.chip-v { font-weight: 600; }
.chip-green { background: #f1f9f3; border-color: #cce8d3; }
.chip-amber { background: #fff8e8; border-color: #ecd9a6; }
.chip-red   { background: #fdf1ef; border-color: #eec3bc; }
.chip-grey  { background: #f4f5f7; }
.add-summary { cursor: pointer; font-weight: 600; }

/* "Up one level" breadcrumb (base.html). Sits above the page heading on every
   sub-page; the global-admin "Exit to platform console" banner stays separate
   above it, so the two levels never look like one control. */
.breadcrumb { margin: 0 0 14px; }
.breadcrumb .btn { font-weight: 500; }
