/* =========================================================================
   Cross-Cloud Interconnect — live NOC dashboard
   Design tokens: instrument-navy console. State encoded in color + icon/label.
   ========================================================================= */

:root {
  /* Surfaces */
  --bg: #0e1621;
  --bg-grid: rgba(74, 168, 255, 0.05);
  --panel: #16212e;
  --panel-2: #1b2836;
  --panel-line: #253444;
  --panel-line-soft: rgba(125, 142, 163, 0.18);

  /* Ink */
  --ink: #e6edf3;
  --ink-dim: #b4c1d0;
  --muted: #7d8ea3;

  /* Signal / accent */
  --signal: #4aa8ff;
  --signal-dim: rgba(74, 168, 255, 0.16);

  /* State */
  --healthy: #35c98b;
  --pending: #e0a340;
  --down: #e5484d;
  --unknown: #61748a;

  /* Identity / ownership accent — a warm coral, kept distinct from the alarm
     red (--down) so account chrome reads as "whose" not "broken". */
  --account: #ff7a85;
  --account-dim: rgba(255, 122, 133, 0.12);
  --account-line: rgba(255, 122, 133, 0.4);

  /* Radius + shadow */
  --r-sm: 6px;
  --r-md: 10px;
  --r-lg: 14px;
  --shadow: 0 10px 30px rgba(0, 0, 0, 0.35);

  /* Type */
  --font-display: "Space Grotesk", "Segoe UI", system-ui, sans-serif;
  --font-body: "Inter", system-ui, -apple-system, "Segoe UI", sans-serif;
  --font-mono:
    "JetBrains Mono", "SF Mono", ui-monospace, "Cascadia Code", Menlo, monospace;
}

* {
  box-sizing: border-box;
}

/* The `hidden` attribute must always win. Several elements below set an explicit
   `display` (flex/inline-flex) via their class, which would otherwise override
   the browser default `[hidden] { display: none }` and leave them visible when
   toggled hidden in JS (e.g. the auth gate, notice bar, status chips). */
[hidden] {
  display: none !important;
}

html {
  scroll-behavior: smooth;
}

body {
  margin: 0;
  min-height: 100vh;
  font-family: var(--font-body);
  color: var(--ink);
  background-color: var(--bg);
  /* faint console grid so empty space still reads as an instrument surface */
  background-image:
    linear-gradient(var(--bg-grid) 1px, transparent 1px),
    linear-gradient(90deg, var(--bg-grid) 1px, transparent 1px);
  background-size:
    40px 40px,
    40px 40px;
  line-height: 1.5;
  -webkit-font-smoothing: antialiased;
}

h1,
h2,
h3 {
  font-family: var(--font-display);
  font-weight: 600;
  margin: 0;
  letter-spacing: -0.01em;
}

.mono {
  font-family: var(--font-mono);
  font-variant-ligatures: none;
}

.skip-link {
  position: absolute;
  left: -999px;
  top: 8px;
  background: var(--signal);
  color: #06111c;
  padding: 8px 14px;
  border-radius: var(--r-sm);
  z-index: 100;
  font-weight: 600;
}
.skip-link:focus {
  left: 12px;
}

/* ---------------------------------------------------------------- topbar */
.topbar {
  display: flex;
  flex-wrap: wrap;
  gap: 16px;
  align-items: center;
  justify-content: space-between;
  padding: 18px clamp(16px, 4vw, 40px);
  border-bottom: 1px solid var(--panel-line);
  background: linear-gradient(
    180deg,
    rgba(22, 33, 46, 0.9),
    rgba(14, 22, 33, 0.6)
  );
  position: sticky;
  top: 0;
  z-index: 20;
  backdrop-filter: blur(8px);
}

.brand {
  display: flex;
  align-items: center;
  gap: 14px;
}

.brand-mark {
  width: 50px;
  height: 50px;
  display: block;
  flex: none;
}

.brand-text h1 {
  font-size: 1.15rem;
  line-height: 1.1;
}
.brand-sub {
  margin: 2px 0 0;
  font-size: 0.8rem;
  color: var(--muted);
}

.status-cluster {
  display: flex;
  flex-wrap: wrap;
  gap: 10px;
  align-items: center;
}

.status-chip {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  padding: 7px 12px;
  border-radius: 999px;
  background: var(--panel);
  border: 1px solid var(--panel-line);
  font-size: 0.8rem;
}
.status-chip-label {
  color: var(--muted);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  font-size: 0.68rem;
}
.status-chip-value {
  color: var(--ink);
  font-weight: 500;
}

/* freshness dot pulses to signal "live" */
.freshness-dot {
  width: 10px;
  height: 10px;
  border-radius: 50%;
  background: var(--unknown);
  box-shadow: 0 0 0 0 currentColor;
  flex: none;
}
.freshness[data-level="fresh"] .freshness-dot {
  background: var(--healthy);
  color: var(--healthy);
  animation: pulse 2.2s infinite;
}
.freshness[data-level="aging"] .freshness-dot {
  background: var(--pending);
  color: var(--pending);
}
.freshness[data-level="stale"] .freshness-dot {
  background: var(--down);
  color: var(--down);
}
.freshness[data-level="unknown"] .freshness-dot {
  background: var(--unknown);
  color: var(--unknown);
}

@keyframes pulse {
  0% {
    box-shadow: 0 0 0 0 rgba(53, 201, 139, 0.5);
  }
  70% {
    box-shadow: 0 0 0 8px rgba(53, 201, 139, 0);
  }
  100% {
    box-shadow: 0 0 0 0 rgba(53, 201, 139, 0);
  }
}

.connection[data-state="live"] .status-chip-value {
  color: var(--healthy);
}
.connection[data-state="degraded"] .status-chip-value {
  color: var(--pending);
}
.connection[data-state="down"] .status-chip-value {
  color: var(--down);
}
.connection[data-state="connecting"] .status-chip-value {
  color: var(--muted);
}

/* ---------------------------------------------------------------- notice */
.notice {
  margin: 0 clamp(16px, 4vw, 40px);
  margin-top: 16px;
  padding: 12px 16px;
  border-radius: var(--r-md);
  border: 1px solid var(--panel-line);
  background: var(--panel);
  font-size: 0.88rem;
  display: flex;
  gap: 10px;
  align-items: center;
}
.notice[data-tone="info"] {
  border-left: 3px solid var(--signal);
}
.notice[data-tone="warn"] {
  border-left: 3px solid var(--pending);
}
.notice strong {
  font-weight: 600;
}

/* ---------------------------------------------------------------- layout */
main {
  padding: clamp(20px, 3vw, 32px) clamp(16px, 4vw, 40px) 40px;
  display: flex;
  flex-direction: column;
  gap: 26px;
  max-width: 1400px;
  margin: 0 auto;
}

.section-head {
  display: flex;
  flex-wrap: wrap;
  gap: 12px 20px;
  align-items: baseline;
  justify-content: space-between;
  margin-bottom: 16px;
}
.section-head h2 {
  font-size: 0.95rem;
  text-transform: uppercase;
  letter-spacing: 0.12em;
  color: var(--ink-dim);
}

/* legend */
.legend {
  display: flex;
  flex-wrap: wrap;
  gap: 14px;
  font-size: 0.78rem;
  color: var(--muted);
}
.legend-item {
  display: inline-flex;
  align-items: center;
  gap: 6px;
}
.legend-dot {
  width: 9px;
  height: 9px;
  border-radius: 50%;
  display: inline-block;
}
.legend-item[data-state="healthy"] .legend-dot {
  background: var(--healthy);
}
.legend-item[data-state="pending"] .legend-dot {
  background: var(--pending);
}
.legend-item[data-state="down"] .legend-dot {
  background: var(--down);
}
.legend-item[data-state="unknown"] .legend-dot {
  background: var(--unknown);
}

/* ============================================= SIGNATURE: topology rail */
.topology-section {
  background:
    radial-gradient(
      1200px 300px at 20% -20%,
      rgba(74, 168, 255, 0.08),
      transparent 60%
    ),
    var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  padding: clamp(18px, 3vw, 28px);
  box-shadow: var(--shadow);
}

.topology-rail {
  display: flex;
  align-items: stretch;
  gap: 0;
  overflow-x: auto;
  padding: 6px 2px 14px;
  scrollbar-width: thin;
}
.rail-placeholder {
  color: var(--muted);
  margin: 20px auto;
}

/* a node */
.node {
  flex: 1 1 0;
  min-width: 150px;
  background: var(--panel-2);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-md);
  padding: 14px;
  display: flex;
  flex-direction: column;
  gap: 8px;
  position: relative;
  transition:
    border-color 0.2s ease,
    transform 0.2s ease;
}
.node:focus-visible {
  outline: 2px solid var(--signal);
  outline-offset: 2px;
}
.node[data-state="healthy"] {
  border-top: 2px solid var(--healthy);
}
.node[data-state="pending"] {
  border-top: 2px solid var(--pending);
}
.node[data-state="down"] {
  border-top: 2px solid var(--down);
}
.node[data-state="unknown"] {
  border-top: 2px solid var(--unknown);
}
.node[data-absent="true"] {
  opacity: 0.55;
  border-style: dashed;
}

.node-kind {
  font-size: 0.66rem;
  text-transform: uppercase;
  letter-spacing: 0.1em;
  color: var(--muted);
}
.node-title {
  font-family: var(--font-display);
  font-size: 0.98rem;
  font-weight: 600;
}
/* A node title that deeplinks into the AWS console (Isengard federation).
   Reads as a link (signal blue) with a trailing ↗ so it's clearly clickable. */
a.node-title-link {
  color: var(--signal);
  text-decoration: none;
  word-break: break-all;
}
a.node-title-link::after {
  content: " \2197";
  color: var(--muted);
  font-weight: 500;
}
a.node-title-link:hover,
a.node-title-link:focus-visible {
  text-decoration: underline;
}

/* Inline console deeplinks in cards + tables (VPC rows, attachment resources,
   DX/Cloud WAN card ids). Same signal-blue + ↗ affordance as node titles. */
a.console-link {
  color: var(--signal);
  text-decoration: none;
  cursor: pointer;
}
a.console-link::after {
  content: " \2197";
  color: var(--muted);
}
a.console-link:hover,
a.console-link:focus-visible {
  text-decoration: underline;
}
.node-meta {
  font-size: 0.72rem;
  color: var(--ink-dim);
  word-break: break-word;
}
.node-state {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  font-size: 0.74rem;
  font-weight: 500;
  margin-top: auto;
}
.node-state .dot {
  width: 8px;
  height: 8px;
  border-radius: 50%;
  flex: none;
}
.node[data-state="healthy"] .dot {
  background: var(--healthy);
}
.node[data-state="pending"] .dot {
  background: var(--pending);
}
.node[data-state="down"] .dot {
  background: var(--down);
}
.node[data-state="unknown"] .dot {
  background: var(--unknown);
}

/* connector between nodes carries flow + optional segment label */
.connector {
  flex: 0 0 clamp(52px, 6vw, 96px);
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  gap: 6px;
  position: relative;
}
.connector .wire {
  width: 100%;
  height: 3px;
  border-radius: 3px;
  background: var(--panel-line);
  position: relative;
  overflow: hidden;
}
.connector[data-state="healthy"] .wire {
  background: linear-gradient(90deg, var(--signal-dim), var(--signal-dim));
}
.connector[data-state="healthy"] .wire::after {
  content: "";
  position: absolute;
  inset: 0;
  background: linear-gradient(90deg, transparent, var(--signal), transparent);
  width: 40%;
  animation: flow 1.8s linear infinite;
}
.connector[data-state="pending"] .wire {
  background: repeating-linear-gradient(
    90deg,
    var(--pending) 0 6px,
    transparent 6px 12px
  );
  opacity: 0.7;
}
.connector[data-state="down"] .wire {
  background: var(--down);
  opacity: 0.55;
}
.connector[data-state="unknown"] .wire {
  background: var(--panel-line);
}

@keyframes flow {
  from {
    transform: translateX(-120%);
  }
  to {
    transform: translateX(320%);
  }
}

.connector .seg-label {
  font-family: var(--font-mono);
  font-size: 0.66rem;
  color: var(--ink-dim);
  background: var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: 999px;
  padding: 2px 8px;
  white-space: nowrap;
  max-width: 100%;
  overflow: hidden;
  text-overflow: ellipsis;
}
.connector .seg-count {
  color: var(--muted);
}

/* node holding multiple children (accounts/VPCs) */
.node-group {
  gap: 6px;
}
.node-children {
  display: flex;
  flex-direction: column;
  gap: 6px;
  margin-top: 4px;
}
.node-child {
  font-family: var(--font-mono);
  font-size: 0.7rem;
  background: var(--panel);
  border: 1px solid var(--panel-line-soft);
  border-radius: var(--r-sm);
  padding: 5px 8px;
  display: flex;
  justify-content: space-between;
  gap: 8px;
}
.node-child .child-count {
  color: var(--muted);
}

/* The VPC node carries more detail (account / segment / CIDR per attachment),
   so it gets more room than the signature path nodes. */
.node-vpcs {
  flex: 1.6 1 0;
  min-width: 230px;
}
/* The VPC node is a container spanning many attachments, so an aggregate
   amber/pending accent is misleading. Default it to the structural signal
   blue, and only raise the alarm red when an attachment is actually
   unhealthy. */
.node.node-vpcs[data-state] {
  border-top-color: var(--signal);
}
.node.node-vpcs[data-health="unhealthy"] {
  border-top-color: var(--down);
}
.node-vpcs .node-children {
  gap: 10px;
}

/* Bottom summary of the VPC node ("N attachments · M accounts"): the label
   stays plain (no pill background); only its dot follows the health colour —
   green when every attachment is healthy, red when any isn't. */
.node-vpcs[data-health="healthy"] .node-state .dot {
  background: var(--healthy);
}
.node-vpcs[data-health="unhealthy"] .node-state .dot {
  background: var(--down);
}

/* one owner-account grouping inside the VPC node */
.vpc-account {
  position: relative;
  overflow: hidden;
  border: 1px solid var(--account-line);
  border-radius: var(--r-sm);
  background: var(--panel);
  padding: 8px 10px 8px 28px;
  display: flex;
  flex-direction: column;
  gap: 6px;
}
/* Thick left accent bar carrying a vertical, bottom-to-top "AWS ACCOUNT"
   label, vertically centred. Coral by default, alarm red when the group is
   unhealthy (rule further below). */
.vpc-account::before {
  content: "AWS ACCOUNT";
  position: absolute;
  left: 0;
  top: 0;
  bottom: 0;
  width: 18px;
  display: flex;
  align-items: center;
  justify-content: center;
  background: var(--account);
  color: var(--bg);
  font-family: var(--font-mono);
  font-size: 0.52rem;
  font-weight: 700;
  letter-spacing: 0.14em;
  text-transform: uppercase;
  writing-mode: vertical-rl;
  transform: rotate(180deg);
}
.vpc-account-head {
  display: flex;
  align-items: center;
  gap: 8px;
  padding-bottom: 6px;
  border-bottom: 1px solid var(--account-line);
}
/* When any VPC attachment in the group is unhealthy, the whole account list's
   accent flips from the coral identity colour to alarm red. */
.node-vpcs[data-health="unhealthy"] .vpc-account {
  border-color: rgba(229, 72, 77, 0.4);
}
.node-vpcs[data-health="unhealthy"] .vpc-account::before {
  background: var(--down);
}
.node-vpcs[data-health="unhealthy"] .vpc-account-head {
  border-bottom-color: rgba(229, 72, 77, 0.4);
}
.vpc-account-id {
  font-size: 0.72rem;
  color: var(--ink-dim);
  font-weight: 500;
}

/* a single VPC attachment row: identity on top, segment + CIDR beneath */
.vpc-item {
  display: flex;
  flex-direction: column;
  gap: 4px;
}
.vpc-item-top {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 8px;
}
.vpc-name {
  font-family: var(--font-mono);
  font-size: 0.74rem;
  color: var(--ink);
  word-break: break-word;
}
.vpc-dot {
  width: 8px;
  height: 8px;
  border-radius: 50%;
  flex: none;
  background: var(--unknown);
}
.vpc-item[data-state="healthy"] .vpc-dot {
  background: var(--healthy);
}
.vpc-item[data-state="pending"] .vpc-dot {
  background: var(--pending);
}
.vpc-item[data-state="down"] .vpc-dot {
  background: var(--down);
}
.vpc-item[data-state="unknown"] .vpc-dot {
  background: var(--unknown);
}

.vpc-item-meta {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 6px;
}
.vpc-cidr {
  font-size: 0.7rem;
  color: var(--ink-dim);
}
.vpc-cidr.absent {
  color: var(--muted);
  font-style: italic;
}

/* segment tag, colour-coded so the CloudWAN segment reads at a glance */
.vpc-seg {
  text-transform: lowercase;
}
.vpc-seg[data-segment="hybrid"] {
  color: var(--signal);
  border-color: rgba(74, 168, 255, 0.35);
  background: var(--signal-dim);
}
.vpc-seg[data-segment="core"] {
  color: var(--healthy);
  border-color: rgba(53, 201, 139, 0.35);
  background: rgba(53, 201, 139, 0.12);
}
.vpc-seg[data-segment="shared"] {
  color: var(--pending);
  border-color: rgba(224, 163, 64, 0.35);
  background: rgba(224, 163, 64, 0.12);
}

/* ---------------------------------------------------------------- cards */
.cards {
  display: grid;
  grid-template-columns: repeat(3, 1fr);
  gap: 18px;
}
.split {
  display: grid;
  grid-template-columns: 2fr 1fr;
  gap: 18px;
}

/* Attachments and the GCP cards span the full content width. */
.attachments-section,
.gcp-section,
.gcp-vm-section,
.architecture-section {
  display: block;
}

/* Architecture diagram: the SVG carries the same --bg as the page, so it sits
   in a thin frame and reads as an inset instrument panel rather than a pasted
   image. */
.arch-note {
  font-size: 0.8rem;
  color: var(--muted);
  max-width: 60ch;
}
.architecture-figure {
  margin: 0;
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  overflow: hidden;
  background: var(--bg);
  box-shadow: var(--shadow);
}
.architecture-figure img {
  display: block;
  width: 100%;
  height: auto;
}

/* Protocol pill in the VM services table. */
.proto-pill {
  font-family: var(--font-mono);
  font-size: 0.68rem;
  padding: 2px 8px;
  border-radius: 999px;
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink-dim);
}
.proto-pill[data-proto="TCP"] {
  color: var(--signal);
  border-color: rgba(74, 168, 255, 0.35);
}
.proto-pill[data-proto="UDP"] {
  color: var(--pending);
  border-color: rgba(224, 163, 64, 0.35);
}

/* Measurement-time pill in the services table column header. */
.head-pill {
  display: inline-block;
  margin-left: 6px;
  font-family: var(--font-mono);
  font-size: 0.62rem;
  font-weight: 500;
  letter-spacing: 0;
  text-transform: none;
  padding: 1px 7px;
  border-radius: 999px;
  background: var(--panel-2);
  border: 1px solid var(--panel-line);
  color: var(--ink-dim);
  vertical-align: middle;
}

/* RTT / packet-loss cells and the packet-loss severity pill. */
.data-table td.metric-cell {
  white-space: nowrap;
}
.data-table td.metric-cell.absent {
  color: var(--muted);
  font-style: italic;
}
.loss-pill {
  font-family: var(--font-mono);
  font-size: 0.72rem;
  padding: 2px 8px;
  border-radius: 999px;
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink-dim);
}
.loss-pill[data-level="healthy"] {
  color: var(--healthy);
  border-color: rgba(53, 201, 139, 0.35);
  background: rgba(53, 201, 139, 0.12);
}
.loss-pill[data-level="pending"] {
  color: var(--pending);
  border-color: rgba(224, 163, 64, 0.35);
  background: rgba(224, 163, 64, 0.12);
}
.loss-pill[data-level="down"] {
  color: var(--down);
  border-color: rgba(229, 72, 77, 0.35);
  background: rgba(229, 72, 77, 0.12);
}

/* NHI (Network Health Indicator) pill: OK (green) / FAULT (red). */
.nhi-pill {
  font-family: var(--font-mono);
  font-size: 0.72rem;
  font-weight: 600;
  letter-spacing: 0.03em;
  padding: 2px 9px;
  border-radius: 999px;
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink-dim);
}
.nhi-pill[data-level="healthy"] {
  color: var(--healthy);
  border-color: rgba(53, 201, 139, 0.35);
  background: rgba(53, 201, 139, 0.12);
}
.nhi-pill[data-level="down"] {
  color: var(--down);
  border-color: rgba(229, 72, 77, 0.35);
  background: rgba(229, 72, 77, 0.12);
}

.card {
  background: var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  padding: 18px 20px;
}
.card-head {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 12px;
  margin-bottom: 12px;
}
.card-head h3 {
  font-size: 1rem;
}
.card-hint {
  margin: 0 0 14px;
  font-size: 0.78rem;
  color: var(--muted);
}

.state-badge {
  font-size: 0.72rem;
  font-weight: 600;
  padding: 4px 10px;
  border-radius: 999px;
  text-transform: uppercase;
  letter-spacing: 0.04em;
  border: 1px solid transparent;
  display: inline-flex;
  align-items: center;
  gap: 6px;
  white-space: nowrap;
}
.state-badge::before {
  content: "";
  width: 7px;
  height: 7px;
  border-radius: 50%;
  background: currentColor;
}
.state-badge[data-state="healthy"] {
  color: var(--healthy);
  background: rgba(53, 201, 139, 0.12);
  border-color: rgba(53, 201, 139, 0.35);
}
.state-badge[data-state="pending"] {
  color: var(--pending);
  background: rgba(224, 163, 64, 0.12);
  border-color: rgba(224, 163, 64, 0.35);
}
.state-badge[data-state="down"] {
  color: var(--down);
  background: rgba(229, 72, 77, 0.12);
  border-color: rgba(229, 72, 77, 0.35);
}
.state-badge[data-state="unknown"] {
  color: var(--muted);
  background: rgba(125, 142, 163, 0.1);
  border-color: var(--panel-line);
}

.count-pill {
  font-family: var(--font-mono);
  font-size: 0.78rem;
  padding: 3px 10px;
  border-radius: 999px;
  background: var(--signal-dim);
  color: var(--signal);
  border: 1px solid rgba(74, 168, 255, 0.3);
}
/* Accounts card count adopts the identity accent so it reads with the coral
   account chrome below it (attachments keep the blue signal count). */
#acctCount {
  background: var(--account-dim);
  color: var(--account);
  border-color: var(--account-line);
}

/* key/value grid */
.kv {
  display: grid;
  grid-template-columns: auto 1fr;
  gap: 8px 16px;
  margin: 0;
}
.kv dt {
  color: var(--muted);
  font-size: 0.78rem;
  align-self: center;
}
.kv dd {
  margin: 0;
  font-size: 0.85rem;
  text-align: right;
  word-break: break-word;
}
.kv dd.mono {
  font-size: 0.78rem;
}
.kv .absent {
  color: var(--muted);
  font-style: italic;
}

.segment-strip {
  display: flex;
  flex-wrap: wrap;
  gap: 8px;
  margin-top: 14px;
}
.segment-chip {
  font-family: var(--font-mono);
  font-size: 0.74rem;
  padding: 5px 10px;
  border-radius: var(--r-sm);
  background: var(--panel-2);
  border: 1px solid var(--panel-line);
  display: inline-flex;
  gap: 8px;
  align-items: center;
}
.segment-chip .seg-n {
  color: var(--signal);
}

/* ---------------------------------------------------------------- tables */
.table-scroll {
  overflow-x: auto;
}
.data-table {
  width: 100%;
  border-collapse: collapse;
  font-size: 0.82rem;
}
.data-table th,
.data-table td {
  text-align: left;
  padding: 10px 12px;
  border-bottom: 1px solid var(--panel-line-soft);
}
.data-table th {
  color: var(--muted);
  font-weight: 600;
  text-transform: uppercase;
  letter-spacing: 0.05em;
  font-size: 0.68rem;
  position: sticky;
  top: 0;
  background: var(--panel);
}
.data-table td.mono {
  font-family: var(--font-mono);
  font-size: 0.76rem;
  color: var(--ink-dim);
}
.data-table tbody tr:hover {
  background: var(--panel-2);
}
.cell-state {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  white-space: nowrap;
}
.cell-state .dot {
  width: 8px;
  height: 8px;
  border-radius: 50%;
  flex: none;
}
.cell-state[data-state="healthy"] {
  color: var(--healthy);
}
.cell-state[data-state="healthy"] .dot {
  background: var(--healthy);
}
.cell-state[data-state="pending"] {
  color: var(--pending);
}
.cell-state[data-state="pending"] .dot {
  background: var(--pending);
}
.cell-state[data-state="down"] {
  color: var(--down);
}
.cell-state[data-state="down"] .dot {
  background: var(--down);
}
.cell-state[data-state="unknown"] {
  color: var(--muted);
}
.cell-state[data-state="unknown"] .dot {
  background: var(--unknown);
}

.tag {
  font-family: var(--font-mono);
  font-size: 0.68rem;
  padding: 2px 7px;
  border-radius: var(--r-sm);
  border: 1px solid var(--panel-line);
  color: var(--ink-dim);
  background: var(--panel-2);
}
.this-account {
  font-size: 0.62rem;
  color: var(--account);
  border-color: var(--account-line);
  background: var(--account-dim);
}

/* ---------------------------------------------------------------- accounts */
.account-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: 10px;
}
.account-item {
  border: 1px solid var(--account-line);
  border-left: 3px solid var(--account);
  border-radius: var(--r-md);
  padding: 12px 14px;
  background: var(--panel-2);
}
.account-top {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 10px;
  margin-bottom: 8px;
}
.account-id {
  font-family: var(--font-mono);
  font-size: 0.86rem;
  font-weight: 500;
}
.account-role {
  font-size: 0.68rem;
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--muted);
}
.account-role[data-role="hub"] {
  color: var(--account);
}
.account-stats {
  display: flex;
  flex-wrap: wrap;
  gap: 8px 14px;
  font-size: 0.74rem;
  color: var(--ink-dim);
}
.account-stats .stat b {
  font-family: var(--font-mono);
  color: var(--ink);
  font-weight: 600;
}
.ram-flag {
  font-size: 0.66rem;
  color: var(--healthy);
}
.ram-flag[data-shared="false"] {
  color: var(--muted);
}

/* ---------------------------------------------------------------- ram + errors */
.error-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: 8px;
}
.error-item {
  font-family: var(--font-mono);
  font-size: 0.76rem;
  padding: 8px 12px;
  border-radius: var(--r-sm);
  background: rgba(224, 163, 64, 0.08);
  border: 1px solid rgba(224, 163, 64, 0.28);
  border-left: 3px solid var(--pending);
  color: var(--ink-dim);
}

.empty-state {
  color: var(--muted);
  font-size: 0.82rem;
  margin: 8px 0 0;
}
.empty-state.ok {
  color: var(--healthy);
}

/* ---------------------------------------------------------------- footer */
.footer {
  display: flex;
  flex-wrap: wrap;
  gap: 8px 12px;
  align-items: center;
  padding: 18px clamp(16px, 4vw, 40px);
  border-top: 1px solid var(--panel-line);
  color: var(--muted);
  font-size: 0.78rem;
}
.footer .mono {
  color: var(--ink-dim);
}
.footer-sep {
  color: var(--panel-line);
}

/* ---------------------------------------------------------------- auth */
/* When locked, the dashboard content is hidden behind the sign-in gate. */
body[data-auth-locked="true"] main,
body[data-auth-locked="true"] .footer,
body[data-auth-locked="true"] .notice {
  display: none;
}

.identity {
  gap: 10px;
}
.signout-btn,
.signin-btn {
  font-family: var(--font-body);
  cursor: pointer;
  border-radius: var(--r-sm);
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink);
  transition:
    border-color 0.15s ease,
    background 0.15s ease;
}
.signout-btn {
  font-size: 0.72rem;
  padding: 4px 9px;
}
.signout-btn:hover {
  border-color: var(--signal);
  color: var(--signal);
}

.auth-gate {
  position: fixed;
  inset: 0;
  z-index: 60;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 24px;
  background:
    radial-gradient(
      900px 500px at 50% -10%,
      rgba(74, 168, 255, 0.12),
      transparent 60%
    ),
    var(--bg);
}
.auth-card {
  max-width: 420px;
  width: 100%;
  background: var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  padding: 32px 28px;
  text-align: center;
  box-shadow: var(--shadow);
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 14px;
}
.auth-card .brand-mark {
  width: 44px;
  height: 44px;
}
.auth-card h2 {
  font-size: 1.25rem;
}
.auth-card p {
  margin: 0;
  color: var(--muted);
  font-size: 0.9rem;
  line-height: 1.6;
}
.signin-btn {
  margin-top: 6px;
  font-size: 0.95rem;
  font-weight: 600;
  padding: 12px 22px;
  background: var(--signal);
  color: #06111c;
  border-color: transparent;
}
.signin-btn:hover {
  background: #6cbcff;
}
.signin-btn:disabled {
  opacity: 0.6;
  cursor: default;
}
.auth-error {
  color: var(--down) !important;
  font-size: 0.82rem !important;
  border-top: 1px solid var(--panel-line-soft);
  padding-top: 12px;
  width: 100%;
}

/* ---------------------------------------------------------------- role modal */
/* Asks which IAM role to federate with for a non-hub account. */
.role-modal {
  position: fixed;
  inset: 0;
  z-index: 70;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 24px;
  background: rgba(6, 17, 28, 0.66);
  backdrop-filter: blur(3px);
}
.role-modal-card {
  max-width: 420px;
  width: 100%;
  background: var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  padding: 24px;
  box-shadow: var(--shadow);
  display: flex;
  flex-direction: column;
  gap: 12px;
}
.role-modal-title {
  font-size: 1.1rem;
}
.role-modal-desc {
  margin: 0;
  color: var(--muted);
  font-size: 0.85rem;
  line-height: 1.55;
}
.role-modal-label {
  font-size: 0.72rem;
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--ink-dim);
}
.role-modal-input {
  font-size: 0.9rem;
  padding: 10px 12px;
  border-radius: var(--r-sm);
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink);
}
.role-modal-actions {
  display: flex;
  justify-content: flex-end;
  gap: 10px;
  margin-top: 4px;
}
.role-modal-btn {
  font-family: var(--font-body);
  cursor: pointer;
  font-size: 0.85rem;
  padding: 8px 16px;
  border-radius: var(--r-sm);
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink);
  transition:
    border-color 0.15s ease,
    background 0.15s ease;
}
.role-modal-btn.cancel:hover {
  border-color: var(--muted);
}
.role-modal-btn.confirm {
  background: var(--signal);
  color: #06111c;
  border-color: transparent;
  font-weight: 600;
}
.role-modal-btn.confirm:hover {
  background: #6cbcff;
}

/* ---------------------------------------------------------------- policy modal */
/* On-demand core network policy, shown as YAML. */
.policy-modal {
  position: fixed;
  inset: 0;
  z-index: 70;
  display: flex;
  align-items: center;
  justify-content: center;
  padding: 24px;
  background: rgba(6, 17, 28, 0.66);
  backdrop-filter: blur(3px);
}
.policy-modal-card {
  width: 100%;
  max-width: 760px;
  max-height: 82vh;
  background: var(--panel);
  border: 1px solid var(--panel-line);
  border-radius: var(--r-lg);
  box-shadow: var(--shadow);
  display: flex;
  flex-direction: column;
  overflow: hidden;
}
.policy-modal-head {
  display: flex;
  align-items: flex-start;
  justify-content: space-between;
  gap: 12px;
  padding: 16px 20px;
  border-bottom: 1px solid var(--panel-line);
}
.policy-modal-titles {
  display: flex;
  flex-direction: column;
  gap: 2px;
}
.policy-modal-title {
  font-size: 1.05rem;
}
.policy-modal-sub {
  font-size: 0.72rem;
  color: var(--muted);
}
.policy-modal-close {
  cursor: pointer;
  flex: none;
  width: 30px;
  height: 30px;
  font-size: 1.1rem;
  line-height: 1;
  border-radius: var(--r-sm);
  border: 1px solid var(--panel-line);
  background: var(--panel-2);
  color: var(--ink-dim);
}
.policy-modal-close:hover {
  border-color: var(--signal);
  color: var(--signal);
}
.policy-yaml {
  margin: 0;
  padding: 16px 20px;
  overflow: auto;
  flex: 1;
  font-family: var(--font-mono);
  font-size: 0.78rem;
  line-height: 1.55;
  /* Terminal look: near-black background, green foreground. */
  background: #05080a;
  color: #7ee787;
  white-space: pre;
  tab-size: 2;
}
/* highlight.js token theme — green terminal palette, scoped to the viewer. */
.policy-yaml .hljs {
  background: transparent;
  color: #7ee787;
}
.policy-yaml .hljs-attr,
.policy-yaml .hljs-attribute {
  color: #56d364;
  font-weight: 600;
}
.policy-yaml .hljs-string {
  color: #b8f0b0;
}
.policy-yaml .hljs-number {
  color: #e3b341;
}
.policy-yaml .hljs-literal,
.policy-yaml .hljs-keyword,
.policy-yaml .hljs-type {
  color: #56d4dd;
}
.policy-yaml .hljs-bullet,
.policy-yaml .hljs-punctuation,
.policy-yaml .hljs-meta {
  color: #4b6350;
}
.policy-yaml .hljs-comment {
  color: #4b6350;
  font-style: italic;
}
.policy-yaml code.error {
  color: #ff7b72;
}

/* Inline action link (opens a modal — no external ↗ affordance). */
a.inline-link {
  color: var(--signal);
  text-decoration: none;
  cursor: pointer;
}
a.inline-link:hover,
a.inline-link:focus-visible {
  text-decoration: underline;
}

/* ---------------------------------------------------------------- focus */
:focus-visible {
  outline: 2px solid var(--signal);
  outline-offset: 2px;
  border-radius: 3px;
}

/* ---------------------------------------------------------------- responsive */
@media (max-width: 960px) {
  .cards {
    grid-template-columns: 1fr;
  }
  .split {
    grid-template-columns: 1fr;
  }
}

@media (max-width: 640px) {
  /* topology stacks vertically; connectors rotate to vertical wires */
  .topology-rail {
    flex-direction: column;
    align-items: stretch;
    overflow-x: visible;
  }
  .node {
    min-width: 0;
  }
  .connector {
    flex: 0 0 auto;
    flex-direction: row;
    padding: 6px 0;
  }
  .connector .wire {
    width: 3px;
    height: 34px;
  }
  .connector[data-state="healthy"] .wire::after {
    width: 100%;
    height: 40%;
    background: linear-gradient(
      180deg,
      transparent,
      var(--signal),
      transparent
    );
    animation: flow-v 1.8s linear infinite;
  }
  @keyframes flow-v {
    from {
      transform: translateY(-120%);
    }
    to {
      transform: translateY(320%);
    }
  }
}

/* ---------------------------------------------------------------- reduced motion */
@media (prefers-reduced-motion: reduce) {
  * {
    animation: none !important;
    scroll-behavior: auto !important;
    transition: none !important;
  }
  .connector[data-state="healthy"] .wire::after {
    display: none;
  }
  /* keep a static signal fill so healthy links still read as "up" */
  .connector[data-state="healthy"] .wire {
    background: var(--signal);
    opacity: 0.7;
  }
  .freshness[data-level="fresh"] .freshness-dot {
    box-shadow: 0 0 0 2px rgba(53, 201, 139, 0.3);
  }
}