:root {
    --bg: #0A0F14;
    --bg-panel: #121B24;
    --bg-surface: #24323F;
    --bg-sidebar: #0E1720;
    --border: #1C252E;
    --border-active: #1F6FA5;
    --text: #E6EEF6;
    --text-secondary: #9CB0C3;
    --primary: #0B3D5C;
    --accent: #1F6FA5;
    --danger: #D42B2B;
    --success: #4FD78B;
    --warning: #E6B85C;
    --cyan: #2BD4C7;
    --font: Inter, system-ui, -apple-system, sans-serif;
    --font-mono: 'JetBrains Mono', 'Fira Code', Consolas, monospace;
}

* { margin: 0; padding: 0; box-sizing: border-box; }

body {
    font-family: var(--font);
    background: var(--bg);
    color: var(--text);
    min-height: 100vh;
    font-size: 0.875rem;
}

a { color: var(--accent); text-decoration: none; }
a:hover { color: var(--cyan); }

/* Layout */
.app { display: flex; min-height: 100vh; }

.sidebar {
    width: 220px;
    background: var(--bg-sidebar);
    border-right: 1px solid var(--border);
    padding: 0;
    display: flex;
    flex-direction: column;
    flex-shrink: 0;
}

.sidebar-brand {
    padding: 20px 24px 16px;
    border-bottom: 1px solid var(--border);
    margin-bottom: 4px;
}

.sidebar-brand svg {
    display: block;
    width: 100%;
    height: auto;
}

.sidebar nav { flex: 1; }

.sidebar nav a {
    display: block;
    padding: 10px 16px;
    color: var(--text-secondary);
    font-size: 0.8125rem;
    font-weight: 500;
    letter-spacing: 0.01em;
    transition: background 0.12s, color 0.12s;
}

.sidebar nav a:hover {
    background: var(--bg-surface);
    color: var(--text);
}

.sidebar nav a.active {
    color: var(--text);
    background: var(--primary);
    border-right: 2px solid var(--accent);
}

.sidebar-footer {
    padding: 12px 16px;
    border-top: 1px solid var(--border);
    font-size: 0.75rem;
    color: var(--text-secondary);
}

.sidebar-footer button {
    background: none;
    border: none;
    color: var(--text-secondary);
    cursor: pointer;
    font-size: 0.75rem;
    font-family: var(--font);
    padding: 0;
}

.sidebar-footer button:hover { color: var(--danger); }

.main {
    flex: 1;
    padding: 32px;
    max-width: 1200px;
    min-width: 0;
}

/* Login */
.login-wrapper {
    display: flex;
    align-items: center;
    justify-content: center;
    min-height: 100vh;
    padding: 32px;
    background: var(--bg);
}

.login-box {
    background: var(--bg-panel);
    border: 1px solid var(--border);
    border-radius: 0;
    padding: 40px;
    width: 100%;
    max-width: 380px;
}

.login-box h1 {
    font-size: 1.25rem;
    font-weight: 600;
    margin-bottom: 4px;
}

.login-box p {
    color: var(--text-secondary);
    margin-bottom: 24px;
    font-size: 0.8125rem;
}

/* Forms */
.form-group { margin-bottom: 12px; }

.form-group label {
    display: block;
    font-size: 0.6875rem;
    color: var(--text-secondary);
    margin-bottom: 4px;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    font-weight: 500;
}

input[type="text"],
input[type="password"],
input[type="email"],
select {
    width: 100%;
    padding: 8px 12px;
    background: var(--bg-surface);
    border: 1px solid var(--border);
    border-radius: 0;
    color: var(--text);
    font-size: 0.8125rem;
    font-family: var(--font);
    outline: none;
    transition: border-color 0.12s;
}

input:focus, select:focus {
    border-color: var(--accent);
}

.btn {
    display: inline-block;
    padding: 8px 16px;
    border: none;
    border-radius: 0;
    font-size: 0.8125rem;
    font-family: var(--font);
    font-weight: 500;
    cursor: pointer;
    transition: background 0.12s;
}

.btn-primary {
    background: var(--accent);
    color: #fff;
}

.btn-primary:hover { background: #1a5f90; }

.btn-danger {
    background: var(--danger);
    color: #fff;
}

.btn-danger:hover { background: #b82424; }

.btn-sm { padding: 4px 12px; font-size: 0.75rem; }

.btn-reveal, .btn-copy-small {
    background: rgba(255,255,255,0.06);
    border: 1px solid var(--border);
    color: var(--text-secondary);
    cursor: pointer;
    padding: 2px 8px;
    font-size: 0.6875rem;
    border-radius: 4px;
    margin-left: 6px;
    vertical-align: middle;
}
.btn-reveal:hover, .btn-copy-small:hover {
    background: rgba(255,255,255,0.12);
    color: var(--text-primary);
}

.btn-block { display: block; width: 100%; }

.error-msg {
    background: rgba(212, 43, 43, 0.12);
    color: var(--danger);
    padding: 8px 12px;
    border-radius: 0;
    font-size: 0.8125rem;
    margin-bottom: 12px;
    display: none;
}

.error-msg.show { display: block; }

/* Stats */
h2 {
    font-size: 1.25rem;
    font-weight: 600;
    margin-bottom: 20px;
}

.stats {
    display: grid;
    grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
    gap: 12px;
    margin-bottom: 24px;
}

.stat-card {
    background: var(--bg-panel);
    border: 1px solid var(--border);
    border-radius: 0;
    padding: 16px 20px;
}

.stat-card .label {
    font-size: 0.6875rem;
    color: var(--text-secondary);
    text-transform: uppercase;
    letter-spacing: 0.05em;
    font-weight: 500;
    margin-bottom: 4px;
}

.stat-card .value {
    font-size: 1.5rem;
    font-weight: 600;
}

.stat-card .value.success { color: var(--success); }
.stat-card .value.warning { color: var(--warning); }

/* Cards */
.card {
    background: var(--bg-panel);
    border: 1px solid var(--border);
    border-radius: 0;
    overflow: hidden;
    margin-bottom: 20px;
}

.card-header {
    display: flex;
    justify-content: space-between;
    align-items: center;
    padding: 12px 20px;
    border-bottom: 1px solid var(--border);
}

.card-header h3 {
    font-size: 0.875rem;
    font-weight: 600;
}

/* Mode cards (Local / Performance / Stealth) */
.mode-cards {
    display: grid;
    grid-template-columns: repeat(3, minmax(0, 1fr));
    gap: 12px;
    padding: 16px 20px;
}
@media (max-width: 800px) { .mode-cards { grid-template-columns: 1fr; } }
.mode-card {
    background: var(--bg-panel);
    border: 1px solid var(--border);
    padding: 16px;
    cursor: pointer;
    transition: border-color 0.15s, background 0.15s;
    display: flex;
    flex-direction: column;
    gap: 6px;
    text-align: left;
    font: inherit;
    color: inherit;
    min-height: 140px;
}
.mode-card:hover:not(.mode-card-disabled) { border-color: var(--accent); }
.mode-card.selected {
    border-color: var(--accent);
    background: rgba(31, 111, 165, 0.10);
}
.mode-card-disabled { opacity: 0.55; cursor: not-allowed; }
.mode-card-icon {
    width: 28px;
    height: 28px;
    color: var(--text-secondary);
    margin-bottom: 4px;
}
.mode-card.selected .mode-card-icon { color: var(--accent); }
.mode-card-title {
    font-size: 0.95rem;
    font-weight: 600;
    color: var(--text);
}
.mode-card-desc {
    font-size: 0.8125rem;
    line-height: 1.45;
    color: var(--text-secondary);
}
.mode-card-hint {
    font-size: 0.75rem;
    color: var(--warning);
    margin-top: auto;
    padding-top: 6px;
}

/* Tables */
table {
    width: 100%;
    border-collapse: collapse;
}

th, td {
    padding: 10px 20px;
    text-align: left;
    border-bottom: 1px solid var(--border);
    font-size: 0.8125rem;
}

th {
    color: var(--text-secondary);
    font-weight: 600;
    font-size: 0.6875rem;
    text-transform: uppercase;
    letter-spacing: 0.05em;
}

tr:last-child td { border-bottom: none; }

tr.clickable { cursor: pointer; }
tr.clickable:hover { background: var(--bg-surface); }

/* Badges */
.badge {
    display: inline-block;
    padding: 2px 8px;
    border-radius: 0;
    font-size: 0.6875rem;
    font-weight: 600;
    letter-spacing: 0.02em;
}

.badge-active { background: rgba(79, 215, 139, 0.12); color: var(--success); }
.badge-degraded { background: rgba(230, 184, 92, 0.12); color: var(--warning); }
.badge-unavailable { background: rgba(212, 43, 43, 0.12); color: var(--danger); }
.badge-cyan { background: rgba(43, 212, 199, 0.12); color: var(--cyan); }
.badge-admin  { background: rgba(43, 212, 199, 0.12); color: var(--cyan); }
.badge-device { background: rgba(31, 111, 165, 0.18); color: #6FAEDB; }
.badge-auth   { background: rgba(230, 184, 92, 0.12); color: var(--warning); }
.badge-other  { background: rgba(255, 255, 255, 0.06); color: var(--text-secondary); }
.badge-armed      { background: rgba(230, 184, 92, 0.12); color: var(--warning); }
.badge-quarantine { background: rgba(212, 43, 43, 0.12); color: var(--danger); }
.badge-suspect    { background: rgba(232, 116, 59, 0.14); color: #E8743B; }

/* Glossary tooltips on technical terms — subtle dotted underline so the
 * reader knows there's a definition on hover, without shouting. */
abbr[title] {
    text-decoration: underline dotted var(--text-secondary);
    text-underline-offset: 2px;
    cursor: help;
}

/* Status dot */
.status-dot {
    display: inline-block;
    width: 8px;
    height: 8px;
    border-radius: 0;
    margin-right: 6px;
    vertical-align: middle;
}

.status-dot.green { background: var(--success); }
.status-dot.amber { background: var(--warning); }
.status-dot.red { background: var(--danger); }
.status-dot.cyan { background: var(--cyan); }

.mono { font-family: var(--font-mono); font-size: 0.75rem; }

.copyable {
    cursor: pointer;
    border-bottom: 1px dashed var(--text-secondary);
    transition: color 0.12s;
}

.copyable:hover { color: var(--cyan); }

/* Token reveal */
.token-reveal {
    background: var(--bg-surface);
    border: 1px solid var(--accent);
    border-radius: 0;
    padding: 16px;
    margin: 12px 0;
    word-break: break-all;
    font-family: var(--font-mono);
    font-size: 0.8125rem;
}

.token-reveal .warning {
    color: var(--warning);
    font-size: 0.75rem;
    margin-top: 8px;
    font-family: var(--font);
}

/* Inline form */
.inline-form {
    display: flex;
    gap: 12px;
    align-items: flex-end;
    margin-bottom: 12px;
}

.inline-form .form-group { margin-bottom: 0; flex: 1; }

/* Loading & empty */
.loading {
    text-align: center;
    padding: 32px;
    color: var(--text-secondary);
}

.empty {
    text-align: center;
    padding: 32px;
    color: var(--text-secondary);
    font-size: 0.8125rem;
}

/* Device detail */
.back-link {
    display: inline-block;
    margin-bottom: 16px;
    font-size: 0.8125rem;
    color: var(--text-secondary);
    cursor: pointer;
}

.back-link:hover { color: var(--text); }

.device-detail {
    display: grid;
    grid-template-columns: 1fr 1fr;
    gap: 12px;
    margin-bottom: 20px;
}

.device-detail .full-width {
    grid-column: 1 / -1;
}

.info-grid {
    display: grid;
    grid-template-columns: auto 1fr;
    gap: 4px 16px;
    padding: 16px 20px;
}

.info-grid dt {
    color: var(--text-secondary);
    font-size: 0.6875rem;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    font-weight: 500;
    padding: 4px 0;
}

.info-grid dd {
    font-size: 0.8125rem;
    padding: 4px 0;
}

/* Config form */
.config-grid {
    display: grid;
    grid-template-columns: auto 120px;
    gap: 8px 16px;
    align-items: center;
    max-width: 360px;
}
.config-grid label {
    color: var(--text-secondary);
    font-size: 0.8125rem;
}
.config-grid input {
    background: var(--bg-secondary);
    border: 1px solid var(--border);
    color: var(--text-primary);
    padding: 6px 10px;
    border-radius: 6px;
    font-size: 0.8125rem;
}
.config-grid input:focus {
    outline: none;
    border-color: var(--accent);
}

/* WAN / Tunnel cards */
.wan-cards, .tunnel-cards {
    display: grid;
    grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));
    gap: 12px;
    padding: 16px 20px;
}

.wan-card, .tunnel-card {
    background: var(--bg-surface);
    border: 1px solid var(--border);
    border-radius: 0;
    padding: 16px;
}

.wan-card h4, .tunnel-card h4 {
    font-size: 0.8125rem;
    font-weight: 600;
    margin-bottom: 8px;
    display: flex;
    align-items: center;
    gap: 8px;
}

.wan-card .detail, .tunnel-card .detail {
    font-size: 0.75rem;
    color: var(--text-secondary);
    line-height: 1.6;
}

.tunnel-card .detail span {
    display: block;
}

.tunnel-card .udp-indicator {
    display: inline-block;
    padding: 1px 6px;
    background: rgba(43, 212, 199, 0.12);
    color: var(--cyan);
    font-size: 0.625rem;
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.05em;
}

/* Cellular wwan WAN card — same visual as the other .wan-card flat
   tiles when closed, expands into the full sim_info detail when opened.
   The other WAN cards (lan1, lan2, ...) stay as plain divs since their
   detail is small enough to render inline. */
.wan-card-cellular {
    padding: 0;
}

.wan-card-cellular > summary.wan-card-summary {
    list-style: none;
    cursor: pointer;
    padding: 12px 16px;
    position: relative;
    user-select: none;
}

.wan-card-cellular > summary.wan-card-summary::-webkit-details-marker {
    display: none;
}

.wan-card-cellular > summary.wan-card-summary:hover {
    background: rgba(255, 255, 255, 0.03);
}

.wan-card-cellular > summary.wan-card-summary:focus-visible {
    outline: 2px solid var(--accent);
    outline-offset: -2px;
}

.wan-card-cellular .disclosure-chevron {
    position: absolute;
    right: 16px;
    top: 50%;
    width: 8px;
    height: 8px;
    border-right: 2px solid var(--text-secondary);
    border-bottom: 2px solid var(--text-secondary);
    transform: translateY(-75%) rotate(45deg);
    transition: transform 120ms ease;
}

.wan-card-cellular[open] .disclosure-chevron {
    transform: translateY(-25%) rotate(225deg);
}

.wan-card-cellular[open] > summary.wan-card-summary {
    border-bottom: 1px solid var(--border);
}

.wan-card-cellular-detail {
    margin: 0;
    padding: 12px 16px;
}

/* Long, undelimited identifiers (ICCID 19-20 digits, IMEI 15 digits,
   cell-id hex) overflow narrow cards on phone-width admin views.
   min-width:0 lets the 1fr grid track shrink; overflow-wrap:anywhere
   permits breaking inside the number itself when no natural break
   point exists. */
.wan-card-cellular-detail dd {
    min-width: 0;
    overflow-wrap: anywhere;
}

.wan-card-cellular-detail .mono {
    font-size: 0.6875rem;
}

/* Cell-tower map widget (TASK-35). Sits under the cellular wwan info-grid
   inside the disclosure. Kept at the same visual weight as the surrounding
   .card surfaces: 1px border, no rounded corners, no drop shadow. Natural
   OSM tile colours — no hue-rotates or filters. */
.cell-map-block {
    padding: 12px 16px 16px;
    border-top: 1px solid var(--border);
}

.cell-map-caption {
    font-size: 0.75rem;
    color: var(--text-secondary);
    margin-bottom: 8px;
}

.cell-map {
    width: 100%;
    height: 240px;
    border: 1px solid var(--border);
    background: var(--bg-panel);
}

/* Location-source tag — GPS fix vs cell-tower lookup. Visual delta so
   the operator knows whether they're looking at meters or kilometres. */
.loc-source {
    display: inline-block;
    padding: 1px 6px;
    font-size: 0.625rem;
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    margin-right: 6px;
}
.loc-source-gps  { background: rgba(79, 215, 139, 0.18); color: var(--success); }
.loc-source-cell { background: rgba(31, 111, 165, 0.18); color: var(--accent); }

/* On-demand log viewer (TASK-36). Each line is its own <span> with a
   severity class; subtle muted colours so a fast scroll still highlights
   errors without dressing-up every line. Timestamp + tag get dimmed so
   the actual message reads first. */
#logs-output {
    background: var(--bg);
    color: var(--text);
    line-height: 1.55;
}
.log-line { display: block; }
.log-line + .log-line { /* no-op selector kept for symmetry / future zebra-striping */ }
.log-ts { color: var(--text-secondary); opacity: 0.65; }
.log-facsev { color: var(--text-secondary); opacity: 0.75; }
.log-tag { color: var(--accent); font-weight: 500; }
.log-msg { color: var(--text); }
/* Severity tinting — only the line's message + level get tinted; the
   timestamp/tag stay muted so the colour read is fast at a glance. */
.log-emerg .log-msg, .log-emerg .log-facsev,
.log-alert .log-msg, .log-alert .log-facsev,
.log-crit  .log-msg, .log-crit  .log-facsev,
.log-err   .log-msg, .log-err   .log-facsev   { color: var(--danger); }
.log-warning .log-msg, .log-warning .log-facsev,
.log-warn    .log-msg, .log-warn    .log-facsev { color: var(--warning); }
.log-notice .log-msg, .log-notice .log-facsev { color: var(--text); }
.log-info   .log-msg, .log-info   .log-facsev { color: var(--text-secondary); }
.log-debug  .log-msg, .log-debug  .log-facsev { color: var(--text-secondary); opacity: 0.7; }
/* Dmesg lines — no severity, just dim the timestamp. */
.log-dmesg .log-ts { color: var(--text-secondary); opacity: 0.55; }

.cell-map-status {
    margin-top: 6px;
    font-size: 0.6875rem;
    font-family: var(--font-mono);
    color: var(--text-secondary);
}

/* "Cellular" tag pill next to the wwan name — same shape as
   .udp-indicator but tinted with the route-control blue so cellular vs
   active-UDP-path are visually distinct at a glance. */
.cellular-tag {
    display: inline-block;
    padding: 1px 6px;
    background: rgba(31, 111, 165, 0.18);
    color: var(--accent);
    font-size: 0.625rem;
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    margin-left: 6px;
}

/* Checkin history table in detail view */
.history-table {
    margin: 0;
}

.history-table th, .history-table td {
    padding: 8px 20px;
    font-size: 0.75rem;
}

/* Rename button */
.edit-name-btn {
    cursor: pointer;
    color: var(--text-secondary);
    font-size: 0.875rem;
    margin-left: 8px;
    vertical-align: middle;
}

.edit-name-btn:hover { color: var(--accent); }

.device-title {
    display: flex;
    align-items: center;
}

.text-secondary { color: var(--text-secondary); }

/* Stale data indicators */
.status-dot.stale { background: #4A5568; }

.stale-card {
    opacity: 0.55;
}

.stale-banner {
    background: rgba(212, 43, 43, 0.10);
    border: 1px solid rgba(212, 43, 43, 0.25);
    color: var(--danger);
    padding: 10px 16px;
    font-size: 0.8125rem;
    font-weight: 500;
    margin-bottom: 16px;
}

.stale-label {
    font-size: 0.6875rem;
    font-weight: 400;
    color: var(--text-secondary);
    margin-left: 8px;
}

.upgrade-banner {
    padding: 10px 16px;
    font-size: 0.8125rem;
    margin-bottom: 16px;
    border-radius: 4px;
}
.upgrade-active {
    background: rgba(64, 156, 255, 0.10);
    border: 1px solid rgba(64, 156, 255, 0.30);
    color: var(--accent, #409cff);
}
.upgrade-failed {
    background: rgba(212, 43, 43, 0.10);
    border: 1px solid rgba(212, 43, 43, 0.25);
    color: var(--danger);
}
.upgrade-progress {
    margin-top: 8px;
    height: 4px;
    background: rgba(255, 255, 255, 0.06);
    overflow: hidden;
    border-radius: 2px;
}
.upgrade-progress-bar {
    height: 100%;
    background: var(--accent, #409cff);
    transition: width 0.4s ease;
}

.upgrade-pending {
    background: rgba(245, 184, 64, 0.10);
    border: 1px solid rgba(245, 184, 64, 0.30);
    color: var(--warning, #f5b840);
}

/* Config push "applied" success banner — green, dismissible, persists
 * until the operator clicks ×. Position the dismiss button to the right. */
.config-applied-banner {
    background: rgba(79, 215, 139, 0.10);
    border: 1px solid rgba(79, 215, 139, 0.30);
    color: var(--success, #4FD78B);
    display: flex;
    align-items: center;
}
.config-applied-banner .config-desc { color: var(--text); }
.config-applied-dismiss {
    margin-left: auto;
    background: transparent;
    border: none;
    color: var(--success, #4FD78B);
    font-size: 1.25rem;
    line-height: 1;
    cursor: pointer;
    padding: 0 4px;
}
.config-applied-dismiss:hover { color: var(--text); }

/* Suspect banner (TASK-48) — an Armed device tripped a capture signal. */
.suspect-banner {
    background: rgba(212, 43, 43, 0.10);
    border: 1px solid rgba(212, 43, 43, 0.30);
    color: var(--danger);
    display: flex;
    align-items: center;
    justify-content: space-between;
    gap: 16px;
    flex-wrap: wrap;
}
.suspect-banner .config-desc { color: var(--text); }
.suspect-banner-actions {
    display: flex;
    gap: 8px;
    flex-shrink: 0;
}

/* Config push progress — Queued -> Applying -> Confirmed stepper. A push
 * has no device-side percentage, so the honest signal is the phase. */
.config-push-head {
    display: flex;
    align-items: baseline;
    gap: 8px;
}
.config-push-head .push-version {
    color: var(--text-secondary);
    font-family: var(--font-mono);
    font-size: 0.75rem;
}
.config-push-elapsed {
    margin-left: auto;
    color: var(--text-secondary);
    font-size: 0.75rem;
}
.config-push-steps {
    display: flex;
    align-items: flex-start;
    margin: 14px 0 10px;
}
.push-step {
    display: flex;
    flex-direction: column;
    align-items: center;
    flex: 0 0 auto;
    width: 76px;
}
.push-step-dot {
    width: 13px;
    height: 13px;
    border-radius: 50%;
    border: 2px solid rgba(255, 255, 255, 0.20);
    background: var(--bg-panel);
    transition: background 0.3s, border-color 0.3s, box-shadow 0.3s;
}
.push-step-done .push-step-dot {
    background: var(--warning);
    border-color: var(--warning);
}
.push-step-active .push-step-dot {
    border-color: var(--warning);
    box-shadow: 0 0 0 3px rgba(230, 184, 92, 0.20);
}
.push-step-label {
    margin-top: 7px;
    font-size: 0.6875rem;
    color: var(--text-secondary);
    transition: color 0.3s;
}
.push-step-done .push-step-label,
.push-step-active .push-step-label { color: var(--warning); }
/* Connector between two step dots — a track with a fill the 1s ticker
 * animates toward the next step. */
.push-connector {
    flex: 1 1 auto;
    height: 3px;
    margin-top: 5px;
    background: rgba(255, 255, 255, 0.10);
    border-radius: 2px;
    overflow: hidden;
}
.push-connector-fill {
    height: 100%;
    width: 0;
    background: var(--warning);
    border-radius: 2px;
    transition: width 0.9s linear;
}

.modal-overlay {
    position: fixed;
    inset: 0;
    background: rgba(0, 0, 0, 0.55);
    display: flex;
    align-items: center;
    justify-content: center;
    z-index: 1000;
}
.modal-card {
    background: var(--bg-elevated, #16181d);
    border: 1px solid var(--border);
    border-radius: 6px;
    width: min(720px, 92vw);
    max-height: 80vh;
    display: flex;
    flex-direction: column;
}
.modal-header {
    display: flex;
    align-items: center;
    justify-content: space-between;
    padding: 12px 20px;
    border-bottom: 1px solid var(--border);
}
.modal-header h3 { margin: 0; font-size: 1rem; }
.modal-close {
    background: none;
    border: none;
    color: var(--text-secondary);
    font-size: 1.5rem;
    cursor: pointer;
    line-height: 1;
}
.modal-close:hover { color: var(--text-primary); }
.release-notes {
    margin: 0;
    padding: 16px 20px;
    overflow: auto;
    font-family: var(--font-mono, monospace);
    font-size: 0.8125rem;
    line-height: 1.5;
    white-space: pre-wrap;
    color: var(--text-primary);
}

/* Filter bar (Devices page) */
.filter-bar {
    display: flex;
    gap: 12px;
    align-items: center;
    flex-wrap: wrap;
    margin-bottom: 16px;
}

.filter-label {
    font-size: 0.6875rem;
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.04em;
    color: var(--text-secondary);
}

.filter-search {
    flex: 1;
    max-width: 360px;
}

.filter-btns {
    display: flex;
    gap: 0;
}

.filter-btn {
    padding: 6px 14px;
    background: var(--bg-panel);
    border: 1px solid var(--border);
    color: var(--text-secondary);
    font-size: 0.75rem;
    font-family: var(--font);
    font-weight: 500;
    cursor: pointer;
    transition: background 0.12s, color 0.12s;
}

.filter-btn:not(:first-child) {
    border-left: none;
}

.filter-btn:hover {
    background: var(--bg-surface);
    color: var(--text);
}

.filter-btn.active {
    background: var(--accent);
    color: #fff;
    border-color: var(--accent);
}

/* Pagination footer (Devices page) */
.pagination {
    display: flex;
    justify-content: space-between;
    align-items: center;
    gap: 12px;
    padding: 12px 16px;
    border-top: 1px solid var(--border);
    flex-wrap: wrap;
}

.pagination-info {
    color: var(--text-secondary);
    font-size: 0.75rem;
}

.pagination-controls {
    display: flex;
    align-items: center;
    gap: 10px;
}

.pagination-btn {
    padding: 4px 12px;
    background: var(--bg-panel);
    border: 1px solid var(--border);
    color: var(--text);
    font-size: 0.75rem;
    font-family: var(--font);
    font-weight: 500;
    cursor: pointer;
    transition: background 0.12s, color 0.12s;
}

.pagination-btn:hover:not(:disabled) {
    background: var(--bg-surface);
}

.pagination-btn:disabled {
    color: var(--text-secondary);
    opacity: 0.5;
    cursor: not-allowed;
}

.pagination-page {
    color: var(--text-secondary);
    font-size: 0.75rem;
    min-width: 90px;
    text-align: center;
}

.pagination-size {
    width: auto;
    padding: 4px 8px;
    font-size: 0.75rem;
}


/* Activity (audit) page —
 * Fixed table layout so inserting the inline-detail row below a clicked
 * row doesn't re-compute column widths and shift the surrounding rows
 * sideways. Without this, the table is in `auto` mode and the long
 * <pre> in the detail row pulls existing columns narrower. */
.activity-table {
    table-layout: fixed;
    width: 100%;
}
.activity-table th:nth-child(1) { width: 180px; }  /* When (yyyy-mm-dd hh:mm:ss) — fixed px so the full stamp always fits */
.activity-table th:nth-child(2) { width: 14%; }    /* Action badge */
.activity-table th:nth-child(3) { width: 22%; }    /* Actor */
.activity-table th:nth-child(4) { width: 16%; }    /* Target */
.activity-table th:nth-child(5) { width: auto; }   /* Details preview — soaks up remaining width */

.activity-table td {
    overflow: hidden;
    text-overflow: ellipsis;
}

.activity-table .activity-details-cell {
    font-family: var(--font-mono, monospace);
    font-size: 0.75rem;
    overflow: hidden;
    text-overflow: ellipsis;
    white-space: nowrap;
}

/* The expansion row spans all columns and renders its own block layout —
 * exempt it from the inherited cell ellipsis so the JSON wraps correctly. */
.activity-table tr.activity-detail-row > td {
    overflow: visible;
    text-overflow: clip;
    white-space: normal;
}

/* Inline expansion — clicked row gets a subtle highlight, and a sibling
 * <tr.activity-detail-row> shows the full payload underneath. No overlay. */
tr.activity-row-open {
    background: rgba(43, 212, 199, 0.06);
}
tr.activity-row-open:hover {
    background: rgba(43, 212, 199, 0.10);
}
tr.activity-detail-row > td {
    padding: 16px 20px;
    background: var(--bg-surface);
    border-top: 1px solid var(--border);
    border-bottom: 1px solid var(--border);
}
.activity-detail-grid {
    display: grid;
    grid-template-columns: minmax(0, 1fr) minmax(0, 2fr);
    gap: 24px;
}
@media (max-width: 768px) {
    .activity-detail-grid { grid-template-columns: 1fr; }
}
.activity-detail-meta dt {
    font-size: 0.6875rem;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    color: var(--text-secondary);
    font-weight: 600;
}
.activity-detail-meta dd {
    font-size: 0.8125rem;
    color: var(--text);
    margin-bottom: 8px;
}
.activity-detail-label {
    font-size: 0.6875rem;
    text-transform: uppercase;
    letter-spacing: 0.05em;
    color: var(--text-secondary);
    font-weight: 600;
    margin-bottom: 6px;
}
.activity-detail-json pre {
    background: var(--bg-panel);
    border: 1px solid var(--border);
    padding: 12px;
    margin: 0;
    font-family: var(--font-mono, monospace);
    font-size: 0.75rem;
    color: var(--text);
    max-height: 320px;
    overflow: auto;
    white-space: pre-wrap;
    word-break: break-word;
}

.activity-detail-changes {
    margin-bottom: 14px;
}
.activity-changes-table {
    width: 100%;
    border-collapse: collapse;
    font-size: 0.75rem;
    margin-bottom: 4px;
}
.activity-changes-table th,
.activity-changes-table td {
    padding: 6px 10px;
    border: 1px solid var(--border);
    text-align: left;
    vertical-align: top;
}
.activity-changes-table th {
    background: var(--bg-panel);
    color: var(--text-secondary);
    font-weight: 600;
    font-size: 0.6875rem;
    text-transform: uppercase;
    letter-spacing: 0.04em;
}

/* Firmware page — one card per release, stacked. */
.fw-group-card { margin-bottom: 16px; }
.fw-group-card:last-of-type { margin-bottom: 0; }

/* Release row interactions: header is the click target, hover hint. */
.fw-group-card .release-header { user-select: none; }
.fw-group-card .release-header:hover { background: rgba(255, 255, 255, 0.02); }
.fw-group-card .release-chevron { font-size: 0.875rem; }
.fw-group-card .release-detail { border-top: 1px solid var(--border); padding-top: 12px; }

/* Inline release notes inside the expanded release row. */
.release-notes-inline { color: var(--text); }
.release-images th { font-size: 0.75rem; text-transform: uppercase; letter-spacing: 0.04em; color: var(--text-secondary); }

/* Prominent firmware panel — lives inside the Updates tab on the
   device-detail page. Surfaces Up-to-date / Update-available /
   In-progress state without making the operator drill into Config. */
.device-firmware-panel { margin-bottom: 0; }
.device-firmware-panel .card-header { gap: 12px; }
.device-firmware-panel .card-header h3 { margin-right: auto; }

/* Rollouts page — list card + progress bar + ring summary tiles. */
.rollout-card { margin-bottom: 14px; }
.rollout-card .rollout-header:hover { background: rgba(255, 255, 255, 0.02); }
.rollout-progress {
    display: flex;
    height: 6px;
    width: 100%;
    background: var(--bg-surface);
    border-radius: 3px;
    overflow: hidden;
}
.rollout-progress-success { background: var(--success); transition: width 0.4s; }
.rollout-progress-failed  { background: var(--danger);  transition: width 0.4s; }
.rollout-rings {
    display: grid;
    grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
    gap: 8px;
    padding: 12px 20px;
    border-top: 1px solid var(--border);
    background: var(--bg-surface);
}
.rollout-ring {
    padding: 10px 12px;
    background: var(--bg-elevated, var(--bg));
    border: 1px solid var(--border);
    border-radius: 4px;
}
.rollout-ring.active { border-color: var(--cyan); box-shadow: 0 0 0 2px rgba(43, 212, 199, 0.12); }
.rollout-ring-title { font-weight: 500; font-size: 0.875rem; margin-bottom: 4px; }
.rollout-ring-counts { display: flex; gap: 6px; align-items: baseline; margin-bottom: 6px; }
.rollout-ring-states { display: flex; gap: 4px; flex-wrap: wrap; }
.rollout-ring-states .badge { font-size: 0.6875rem; padding: 1px 6px; }
.rollout-devices { margin-top: 0; }
.rollout-devices th, .rollout-devices td { font-size: 0.8125rem; }

/* Devices list multi-select column. */
.device-select-cell { width: 32px; text-align: center; }

/* Small indicator dot rendered next to a tab label when something
   wants the operator's attention (e.g. firmware update available).
   Filled circle, color drawn from the same warning / cyan palette as
   the panel badge so the cues match. */
.tab-indicator {
    display: inline-block;
    width: 7px;
    height: 7px;
    border-radius: 50%;
    margin-left: 6px;
    vertical-align: middle;
}
.tab-indicator-warning { background: var(--warning); box-shadow: 0 0 0 3px rgba(230, 184, 92, 0.15); }
.tab-indicator-progress { background: var(--cyan); box-shadow: 0 0 0 3px rgba(43, 212, 199, 0.15); }

/* Alerts panel (Dashboard) */
.alerts-panel .card-header h3 {
    color: var(--warning);
}

.alert-item {
    display: flex;
    align-items: center;
    padding: 8px 20px;
    border-bottom: 1px solid var(--border);
    cursor: pointer;
    transition: background 0.12s;
    gap: 12px;
}

.alert-item:last-child {
    border-bottom: none;
}

.alert-item:hover {
    background: var(--bg-surface);
}

.alert-severity {
    flex-shrink: 0;
}

.alert-text {
    flex: 1;
    font-size: 0.8125rem;
}

.alert-device {
    font-size: 0.75rem;
    color: var(--text-secondary);
}

/* Tunnel bar (Dashboard table) */
.tunnel-bar {
    display: flex;
    align-items: center;
    gap: 8px;
    min-width: 80px;
}

.tunnel-bar-track {
    flex: 1;
    height: 6px;
    position: relative;
    overflow: hidden;
}

.tunnel-bar-fill {
    height: 100%;
    transition: width 0.3s ease;
}

.tunnel-bar-label {
    font-size: 0.6875rem;
    color: var(--text-secondary);
    font-family: var(--font-mono);
    white-space: nowrap;
}

/* Sparklines (Tunnel cards) */
.sparkline-container {
    height: 40px;
    margin-top: 8px;
    display: flex;
    align-items: center;
}

.sparkline {
    width: 100%;
    height: 100%;
    display: block;
}

/* Bandwidth chart (Device detail) */
.bandwidth-chart {
    width: 100%;
    overflow: hidden;
}

.bandwidth-chart svg {
    display: block;
}

.chart-legend {
    display: flex;
    gap: 16px;
    margin-bottom: 8px;
}

.chart-legend-item {
    display: flex;
    align-items: center;
    gap: 6px;
    font-size: 0.75rem;
    color: var(--text-secondary);
}

.chart-legend-swatch {
    width: 12px;
    height: 12px;
    display: inline-block;
}

/* Health timeline (Device detail) */
.timeline-legend {
    display: flex;
    gap: 8px;
    margin-bottom: 12px;
}

.timeline-row {
    display: flex;
    align-items: center;
    margin-bottom: 4px;
}

.timeline-label {
    width: 48px;
    flex-shrink: 0;
    font-size: 0.75rem;
    font-family: var(--font-mono);
    color: var(--text-secondary);
}

.timeline-strip {
    flex: 1;
    display: flex;
    gap: 1px;
    height: 20px;
}

.timeline-block {
    flex: 1;
    min-width: 0;
}

.timeline-block.green { background: var(--success); opacity: 0.7; }
.timeline-block.amber { background: var(--warning); opacity: 0.7; }
.timeline-block.red { background: var(--danger); opacity: 0.7; }

.timeline-axis {
    flex: 1;
    position: relative;
    height: 16px;
}

.timeline-tick {
    position: absolute;
    transform: translateX(-50%);
    font-size: 0.625rem;
    color: var(--text-secondary);
    white-space: nowrap;
}

/* Tabs */
.tabs {
    display: flex;
    border-bottom: 1px solid var(--border);
    margin-bottom: 20px;
}

.tab-btn {
    padding: 10px 20px;
    background: none;
    border: none;
    border-bottom: 2px solid transparent;
    color: var(--text-secondary);
    font-size: 0.8125rem;
    font-family: var(--font);
    font-weight: 500;
    cursor: pointer;
    transition: color 0.12s, border-color 0.12s;
}

.tab-btn:hover {
    color: var(--text);
}

.tab-btn.active {
    color: var(--text);
    border-bottom-color: var(--accent);
}

.tab-content { display: none; }
.tab-content.active { display: block; }

/* Toggle switch */
.toggle {
    position: relative;
    display: inline-block;
    width: 36px;
    height: 20px;
    vertical-align: middle;
}

.toggle input {
    opacity: 0;
    width: 0;
    height: 0;
}

.toggle-slider {
    position: absolute;
    cursor: pointer;
    inset: 0;
    background: var(--bg-surface);
    border: 1px solid var(--border);
    transition: background 0.2s;
}

.toggle-slider::before {
    content: '';
    position: absolute;
    width: 14px;
    height: 14px;
    left: 2px;
    bottom: 2px;
    background: var(--text-secondary);
    transition: transform 0.2s, background 0.2s;
}

.toggle input:checked + .toggle-slider {
    background: var(--accent);
    border-color: var(--accent);
}

.toggle input:checked + .toggle-slider::before {
    transform: translateX(16px);
    background: #fff;
}

/* Config form layout */
.config-section {
    margin-bottom: 20px;
}

.config-section h4 {
    font-size: 0.75rem;
    font-weight: 600;
    color: var(--text-secondary);
    text-transform: uppercase;
    letter-spacing: 0.05em;
    margin-bottom: 12px;
    padding-bottom: 6px;
    border-bottom: 1px solid var(--border);
}

.config-row {
    display: flex;
    align-items: center;
    justify-content: space-between;
    padding: 8px 0;
    gap: 16px;
}

.config-row label {
    color: var(--text);
    font-size: 0.8125rem;
    flex-shrink: 0;
}

.config-row .config-desc {
    font-size: 0.6875rem;
    color: var(--text-secondary);
    margin-top: 2px;
}

.config-row input[type="number"],
.config-row input[type="text"],
.config-row input[type="password"] {
    width: 140px;
    flex-shrink: 0;
}

/* Number input */
input[type="number"] {
    width: 100%;
    padding: 8px 12px;
    background: var(--bg-surface);
    border: 1px solid var(--border);
    border-radius: 0;
    color: var(--text);
    font-size: 0.8125rem;
    font-family: var(--font);
    outline: none;
    transition: border-color 0.12s;
}

input[type="number"]:focus {
    border-color: var(--accent);
}

/* ── Mobile / Responsive ── */

.mobile-header { display: none; }
.sidebar-overlay { display: none; }

@media (max-width: 768px) {
    /* Mobile top bar */
    .mobile-header {
        display: flex;
        align-items: center;
        padding: 10px 16px;
        background: var(--bg-sidebar);
        border-bottom: 1px solid var(--border);
    }

    .hamburger {
        background: none;
        border: none;
        color: var(--text);
        font-size: 1.5rem;
        cursor: pointer;
        padding: 4px;
        line-height: 1;
    }

    .mobile-brand {
        font-size: 0.875rem;
        font-weight: 600;
        color: var(--text);
        margin-left: 12px;
    }

    /* Column layout */
    .app {
        flex-direction: column;
    }

    /* Off-canvas sidebar */
    .sidebar {
        position: fixed;
        top: 0;
        left: -260px;
        width: 220px;
        height: 100%;
        z-index: 200;
        transition: left 0.2s ease;
    }

    .sidebar.open {
        left: 0;
    }

    /* Backdrop */
    .sidebar-overlay.open {
        display: block;
        position: fixed;
        inset: 0;
        background: rgba(0, 0, 0, 0.5);
        z-index: 150;
    }

    /* Main area */
    .main {
        padding: 16px;
        max-width: 100%;
    }

    h2 {
        font-size: 1.1rem;
        margin-bottom: 14px;
    }

    /* Stats grid: 2 columns */
    .stats {
        grid-template-columns: repeat(2, 1fr);
        gap: 8px;
    }

    .stat-card {
        padding: 12px;
    }

    .stat-card .value {
        font-size: 1.25rem;
    }

    /* Scrollable tables */
    .card {
        overflow-x: auto;
        -webkit-overflow-scrolling: touch;
    }

    th, td {
        padding: 8px 12px;
        white-space: nowrap;
    }

    th {
        font-size: 0.625rem;
    }

    .card-header {
        padding: 10px 12px;
    }

    /* Device detail: single column */
    .device-detail {
        grid-template-columns: 1fr;
    }

    .info-grid {
        padding: 12px;
        gap: 4px 12px;
    }

    /* WAN / Tunnel cards: single column */
    .wan-cards, .tunnel-cards {
        padding: 12px;
        grid-template-columns: 1fr;
    }

    /* Filter bar: stack vertically */
    .filter-bar {
        flex-direction: column;
        align-items: stretch;
    }

    .filter-search {
        max-width: none;
    }

    .filter-btns {
        display: grid;
        grid-template-columns: repeat(4, 1fr);
    }

    .filter-btn {
        text-align: center;
        padding: 10px 4px;
        font-size: 0.6875rem;
    }

    /* Inline forms: stack */
    .inline-form {
        flex-direction: column;
        align-items: stretch;
    }

    .inline-form .form-group { flex: none; }

    .inline-form .btn {
        width: 100%;
    }

    /* Alerts */
    .alert-item {
        padding: 10px 12px;
    }

    /* Login */
    .login-wrapper {
        padding: 16px;
    }

    .login-box {
        padding: 24px;
    }

    /* Stale banner */
    .stale-banner {
        font-size: 0.75rem;
        padding: 8px 12px;
    }

    /* History table */
    .history-table th, .history-table td {
        padding: 6px 12px;
    }

    /* Chart legend */
    .chart-legend {
        gap: 8px;
        flex-wrap: wrap;
    }

    /* Timeline */
    .timeline-legend {
        flex-wrap: wrap;
    }

    /* Back link */
    .back-link {
        margin-bottom: 12px;
    }

    /* Sidebar nav touch targets */
    .sidebar nav a {
        padding: 14px 16px;
    }
}