:root{color-scheme:dark;--plane: #0d0d0d;--surface-1: #1a1a19;--surface-2: #212120;--surface-3: #2a2a28;--text-primary: #ffffff;--text-secondary: #c3c2b7;--text-muted: #898781;--gridline: #2c2c2a;--baseline: #383835;--border: rgba(255, 255, 255, .1);--border-strong: rgba(255, 255, 255, .18);--status-good: #0ca30c;--status-warning: #fab219;--status-serious: #ec835a;--status-critical: #d03b3b;--status-idle: #898781;--sev-info: var(--status-idle);--sev-low: var(--status-good);--sev-medium: var(--status-warning);--sev-high: var(--status-serious);--sev-critical: var(--status-critical);--accent: #3987e5;--accent-dim: #184f95;--radius: 8px;--radius-sm: 4px;--font: system-ui, -apple-system, "Segoe UI", sans-serif;--mono: ui-monospace, "SF Mono", "Cascadia Code", Menlo, Consolas, monospace}*{box-sizing:border-box}html,body,#root{height:100%}body{margin:0;background:var(--plane);color:var(--text-primary);font-family:var(--font);font-size:14px;line-height:1.5;-webkit-font-smoothing:antialiased}a{color:var(--accent);text-decoration:none}a:hover{text-decoration:underline}.app{display:grid;grid-template-columns:232px 1fr;min-height:100vh}.sidebar{background:var(--surface-1);border-right:1px solid var(--border);padding:20px 14px;display:flex;flex-direction:column;gap:24px;position:sticky;top:0;height:100vh;overflow-y:auto}.brand{display:flex;align-items:baseline;gap:8px;padding:0 8px}.brand strong{font-size:18px;letter-spacing:.02em}.brand span{color:var(--text-muted);font-size:11px;font-family:var(--mono)}.nav{display:flex;flex-direction:column;gap:2px}.nav a{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:9px 10px;border-radius:var(--radius-sm);color:var(--text-secondary);font-weight:500}.nav a:hover{background:var(--surface-2);color:var(--text-primary);text-decoration:none}.nav a.active{background:var(--surface-3);color:var(--text-primary);box-shadow:inset 2px 0 0 var(--accent)}.nav-count{font-family:var(--mono);font-size:11px;padding:1px 6px;border-radius:999px;background:var(--status-critical);color:#fff}.sidebar-footer{margin-top:auto;display:flex;flex-direction:column;gap:8px;padding:0 8px;font-size:12px;color:var(--text-muted)}.main{padding:24px 28px 48px;max-width:1500px;width:100%}.page-head{display:flex;align-items:flex-start;justify-content:space-between;gap:20px;flex-wrap:wrap;margin-bottom:20px}.page-head h1{margin:0 0 4px;font-size:20px;font-weight:600}.page-head p{margin:0;color:var(--text-muted);font-size:13px;max-width:70ch}.card{background:var(--surface-1);border:1px solid var(--border);border-radius:var(--radius);padding:16px 18px}.card-head{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:14px}.card-head h2{margin:0;font-size:14px;font-weight:600}.card-head .hint{color:var(--text-muted);font-size:12px}.grid{display:grid;gap:14px}.grid.cols-2{grid-template-columns:repeat(auto-fit,minmax(340px,1fr))}.grid.cols-3{grid-template-columns:repeat(auto-fit,minmax(240px,1fr))}.grid.cols-4{grid-template-columns:repeat(auto-fit,minmax(190px,1fr))}.stack{display:flex;flex-direction:column;gap:14px}.tile{background:var(--surface-1);border:1px solid var(--border);border-radius:var(--radius);padding:14px 16px;display:flex;flex-direction:column;gap:4px}.tile-label{color:var(--text-muted);font-size:12px;text-transform:uppercase;letter-spacing:.04em}.tile-value{font-size:28px;font-weight:600;line-height:1.15}.tile-note{color:var(--text-secondary);font-size:12px}.tile.emphasis-critical .tile-value{color:var(--status-critical)}.tile.emphasis-warning .tile-value{color:var(--status-warning)}.tile.emphasis-good .tile-value{color:var(--status-good)}.badge{display:inline-flex;align-items:center;gap:5px;padding:2px 8px;border-radius:999px;font-size:11px;font-weight:600;letter-spacing:.02em;white-space:nowrap;border:1px solid var(--border-strong);color:var(--text-secondary);background:var(--surface-2)}.badge .dot{width:7px;height:7px;border-radius:50%;background:currentColor;flex:none}.badge-info .dot{color:var(--sev-info)}.badge-low .dot{color:var(--sev-low)}.badge-medium .dot{color:var(--sev-medium)}.badge-high .dot{color:var(--sev-high)}.badge-critical .dot{color:var(--sev-critical)}.badge-critical{color:var(--text-primary);border-color:var(--status-critical)}.badge-safe .dot{color:var(--status-good)}.badge-suspicious .dot{color:var(--status-warning)}.badge-red_flag .dot{color:var(--status-critical)}.badge-on .dot{color:var(--status-good)}.badge-off .dot{color:var(--status-idle)}.table-wrap{overflow-x:auto;border:1px solid var(--border);border-radius:var(--radius);background:var(--surface-1)}table{width:100%;border-collapse:collapse;font-size:13px}thead th{text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.05em;color:var(--text-muted);padding:10px 12px;border-bottom:1px solid var(--border);white-space:nowrap;background:var(--surface-1);position:sticky;top:0}tbody td{padding:9px 12px;border-bottom:1px solid var(--gridline);vertical-align:top}tbody tr:last-child td{border-bottom:none}tbody tr:hover td{background:var(--surface-2)}td.num,th.num{text-align:right;font-variant-numeric:tabular-nums}.mono{font-family:var(--mono);font-size:12px}.truncate{max-width:420px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;display:block}.muted{color:var(--text-muted)}.empty{padding:32px;text-align:center;color:var(--text-muted);font-size:13px}.toolbar{display:flex;gap:10px;align-items:center;flex-wrap:wrap;margin-bottom:14px}input,select,textarea{background:var(--surface-2);border:1px solid var(--border-strong);border-radius:var(--radius-sm);color:var(--text-primary);padding:7px 10px;font-family:inherit;font-size:13px}input:focus,select:focus,textarea:focus,button:focus-visible{outline:2px solid var(--accent);outline-offset:1px}input[type=search]{min-width:220px}label.field{display:flex;flex-direction:column;gap:5px;font-size:12px;color:var(--text-muted)}button{background:var(--surface-3);border:1px solid var(--border-strong);border-radius:var(--radius-sm);color:var(--text-primary);padding:7px 13px;font-family:inherit;font-size:13px;font-weight:500;cursor:pointer}button:hover:not(:disabled){background:#343431}button:disabled{opacity:.5;cursor:not-allowed}button.primary{background:var(--accent-dim);border-color:var(--accent)}button.primary:hover:not(:disabled){background:var(--accent)}button.danger{border-color:var(--status-critical);color:var(--status-critical)}button.danger:hover:not(:disabled){background:var(--status-critical);color:#fff}button.small{padding:4px 9px;font-size:12px}.checkbox{display:flex;align-items:center;gap:7px;font-size:13px;color:var(--text-secondary)}.checkbox input{width:15px;height:15px;accent-color:var(--accent)}.chart{position:relative}.chart svg{display:block;width:100%;height:auto;overflow:visible}.chart-legend{display:flex;gap:14px;flex-wrap:wrap;margin-top:10px;font-size:12px;color:var(--text-secondary)}.chart-legend .key{display:inline-flex;align-items:center;gap:6px}.chart-legend .swatch{width:10px;height:10px;border-radius:2px;flex:none}.chart-tooltip{position:absolute;pointer-events:none;background:var(--surface-3);border:1px solid var(--border-strong);border-radius:var(--radius-sm);padding:7px 10px;font-size:12px;line-height:1.45;white-space:nowrap;z-index:5;box-shadow:0 6px 18px #00000073}.chart-tooltip .tt-title{font-weight:600;margin-bottom:3px}.chart-tooltip .tt-row{display:flex;justify-content:space-between;gap:14px;color:var(--text-secondary);font-variant-numeric:tabular-nums}.login-plane{min-height:100vh;display:grid;place-items:center;padding:24px}.login-card{width:100%;max-width:380px;background:var(--surface-1);border:1px solid var(--border);border-radius:var(--radius);padding:28px}.login-card h1{margin:0 0 4px;font-size:20px}.login-card p.sub{margin:0 0 22px;color:var(--text-muted);font-size:13px}.login-card form{display:flex;flex-direction:column;gap:14px}.login-card input{padding:10px 12px;font-size:14px}.notice{border-radius:var(--radius-sm);padding:10px 12px;font-size:13px;border:1px solid var(--border-strong);background:var(--surface-2);color:var(--text-secondary)}.notice.error{border-color:var(--status-critical);color:var(--text-primary)}.notice.warning{border-color:var(--status-warning)}.notice.success{border-color:var(--status-good)}.kv{display:grid;grid-template-columns:minmax(120px,auto) 1fr;gap:6px 16px;font-size:13px}.kv dt{color:var(--text-muted)}.kv dd{margin:0;word-break:break-word}pre.block{margin:0;padding:12px;background:var(--surface-2);border-radius:var(--radius-sm);font-family:var(--mono);font-size:12px;overflow-x:auto;white-space:pre-wrap;word-break:break-word;color:var(--text-secondary)}.live-dot{display:inline-flex;align-items:center;gap:6px;font-size:12px;color:var(--text-muted)}.live-dot i{width:7px;height:7px;border-radius:50%;background:var(--status-idle);display:inline-block}.live-dot.on i{background:var(--status-good)}@media (max-width: 900px){.app{grid-template-columns:1fr}.sidebar{position:static;height:auto;flex-direction:row;align-items:center;flex-wrap:wrap;gap:12px}.nav{flex-direction:row;flex-wrap:wrap}.sidebar-footer{margin-top:0}.main{padding:18px 16px 40px}}.panel{background:var(--surface-2);border:1px solid var(--border);border-radius:var(--radius-sm);padding:14px;display:flex;flex-direction:column;gap:10px}.panel h3{margin:0;font-size:13px;font-weight:600;letter-spacing:.02em}.panel>p.muted{margin:0;font-size:12px}.panel-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;flex-wrap:wrap}.panel-deception{border-left:3px solid var(--status-warning)}.yara-layout{display:grid;grid-template-columns:minmax(220px,300px) 1fr;gap:16px;align-items:start}@media (max-width: 1100px){.yara-layout{grid-template-columns:1fr}}.yara-pane{min-width:0}.file-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:4px;max-height:340px;overflow-y:auto}.file-list li{display:flex;align-items:center;gap:6px}.file-entry{flex:1;min-width:0;display:flex;flex-direction:column;align-items:flex-start;gap:2px;text-align:left;background:transparent;border-color:transparent;padding:7px 9px}.file-entry .muted{font-size:11px}.file-entry.is-selected{background:var(--surface-3);border-color:var(--accent)}.code-editor{width:100%;min-height:320px;resize:vertical;font-family:var(--mono);font-size:12px;line-height:1.6;-moz-tab-size:4;tab-size:4;white-space:pre;overflow-wrap:normal;overflow-x:auto}.segmented{display:inline-flex;border:1px solid var(--border-strong);border-radius:var(--radius-sm);overflow:hidden}.segmented button{border:none;border-radius:0;background:transparent}.segmented button+button{border-left:1px solid var(--border)}.segmented button.is-active{background:var(--accent-dim);color:var(--text-primary)}.picker{border:1px solid var(--border);border-radius:var(--radius-sm);background:var(--surface-2);padding:12px}.picker-crumbs{font-size:12px;margin-bottom:10px;word-break:break-all}.crumb{background:transparent;border:none;padding:1px 3px;font-family:var(--mono);font-size:12px;color:var(--accent)}.crumb:hover:not(:disabled){background:var(--surface-3);text-decoration:underline}.picker-list{max-height:300px;overflow-y:auto;display:flex;flex-direction:column;gap:2px}.picker-row{display:flex;justify-content:space-between;align-items:baseline;gap:12px;text-align:left;background:transparent;border-color:transparent;padding:5px 8px}.picker-row:hover:not(:disabled){background:var(--surface-3)}.picker-row .muted{font-size:11px;white-space:nowrap}.picker-row.is-locked{opacity:.45}pre.block.script{white-space:pre;word-break:normal;background:var(--plane);border:1px solid var(--border);max-height:460px;overflow:auto}.tag{display:inline-flex;flex-direction:column;gap:1px;padding:3px 8px;border-left:3px solid var(--status-idle);background:var(--surface-2);border-radius:0 var(--radius-sm) var(--radius-sm) 0;max-width:100%}.tag-category{font-size:10px;letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted)}.tag-type{font-size:12px;color:var(--text-primary);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tag-auto{font-size:10px;font-family:var(--mono);color:var(--status-warning)}.tag-network{border-left-color:var(--accent)}.tag-malware{border-left-color:var(--status-critical)}.tag-intrusion{border-left-color:var(--status-serious)}.tag-policy{border-left-color:var(--status-idle)}.status-pill{display:inline-block;padding:2px 8px;border-radius:999px;font-size:11px;border:1px solid var(--border-strong);color:var(--text-secondary)}.status-new{border-color:var(--status-critical);color:var(--status-critical)}.status-acknowledged{border-color:var(--status-warning);color:var(--status-warning)}.status-resolved{border-color:var(--status-good);color:var(--status-good)}.breakdown{display:grid;grid-template-columns:repeat(auto-fill,minmax(190px,1fr));gap:8px}.breakdown-cell{display:flex;flex-direction:column;align-items:flex-start;gap:2px;text-align:left;padding:10px 12px;background:var(--surface-2);border-color:var(--border)}.breakdown-cell.is-active{border-color:var(--accent);background:var(--surface-3)}.breakdown-count{font-size:20px;font-variant-numeric:tabular-nums;line-height:1.1}.breakdown-label{font-size:12px;color:var(--text-secondary)}.breakdown-cell .muted{font-size:11px}.detail{display:flex;flex-direction:column;gap:14px}.detail-label{font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted);margin-bottom:-6px}.verdict{border-left:3px solid var(--status-idle);background:var(--surface-2);border-radius:0 var(--radius-sm) var(--radius-sm) 0;padding:12px 14px}.verdict-label{font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted)}.verdict-summary{margin:4px 0 6px;font-size:14px;line-height:1.55;color:var(--text-primary)}.verdict-quiet{border-left-color:var(--status-good)}.verdict-notable{border-left-color:var(--status-warning)}.verdict-active_incident{border-left-color:var(--status-critical)}.reading{margin:6px 0 0;padding-left:18px;font-size:13px;line-height:1.6;color:var(--text-secondary)}.reading li{margin-bottom:4px}.panel-engaged{border-color:var(--status-critical);border-left:3px solid var(--status-critical)}button.big{padding:9px 20px;font-size:14px}ol.pipeline{margin:0 0 14px;padding-left:26px;font-size:12px;line-height:1.7;color:var(--text-secondary);counter-reset:stage;list-style:none}ol.pipeline li{position:relative;counter-increment:stage;padding-left:2px}ol.pipeline li:before{content:counter(stage);position:absolute;left:-22px;top:3px;width:16px;height:16px;border-radius:50%;background:var(--surface-3);border:1px solid var(--border-strong);color:var(--text-muted);font-family:var(--mono);font-size:10px;line-height:15px;text-align:center}ol.pipeline li:not(:last-child):after{content:"";position:absolute;left:-14px;top:21px;bottom:-3px;width:1px;background:var(--border)}