.release-backdrop[data-v-c7e37140]{z-index:200;-webkit-backdrop-filter:blur(2px);backdrop-filter:blur(2px);background:#04070e8c;position:fixed;inset:0}.release-dialog[data-v-c7e37140]{z-index:201;background:var(--surface);border:1px solid var(--border);border-radius:12px;flex-direction:column;gap:10px;width:min(520px,100vw - 32px);max-height:calc(100vh - 32px);padding:22px;display:flex;position:fixed;top:50%;left:50%;overflow-y:auto;transform:translate(-50%,-50%);box-shadow:0 20px 60px #00000073}.release-title[data-v-c7e37140]{margin:0;font-size:16px}.release-subject[data-v-c7e37140]{font-family:var(--font-mono);color:var(--accent);margin:0;font-size:13px}.release-hint[data-v-c7e37140]{color:var(--text-faint);margin:0;font-size:12.5px}.release-options[data-v-c7e37140]{flex-direction:column;gap:6px;margin:4px 0;display:flex}.release-option[data-v-c7e37140]{border:1px solid var(--border-soft);cursor:pointer;border-radius:8px;align-items:flex-start;gap:10px;padding:9px 12px;display:flex}.release-option[data-v-c7e37140]:hover{border-color:var(--accent-dim)}.release-option.selected[data-v-c7e37140]{border-color:var(--accent);background:var(--accent-glow,#5f6fe01f)}.release-option input[data-v-c7e37140]{accent-color:var(--accent);margin-top:3px}.release-option-text[data-v-c7e37140]{flex-direction:column;gap:2px;display:flex}.release-option-label[data-v-c7e37140]{color:var(--text);font-size:13.5px;font-weight:600}.release-option-desc[data-v-c7e37140]{color:var(--text-faint);font-size:12px}.release-note-label[data-v-c7e37140]{color:var(--text-muted);font-size:12px}.release-note[data-v-c7e37140]{box-sizing:border-box;resize:vertical;width:100%;font-family:var(--font-ui);color:var(--text);background:var(--surface-2);border:1px solid var(--border);border-radius:8px;padding:8px 10px;font-size:13px}.release-note[data-v-c7e37140]:focus{border-color:var(--accent);outline:none}.release-note-hint[data-v-c7e37140]{color:var(--text-faint);margin:0;font-size:11.5px}.release-actions[data-v-c7e37140]{justify-content:flex-end;gap:10px;margin-top:4px;display:flex}.rca-backdrop[data-v-354f0930]{z-index:100;-webkit-backdrop-filter:blur(2px);backdrop-filter:blur(2px);background:#04070e8c;animation:.15s rca-fade-in-354f0930;position:fixed;inset:0}.rca-panel[data-v-354f0930]{z-index:101;background:var(--surface);border-left:1px solid var(--border);flex-direction:column;width:min(640px,100vw);animation:.22s cubic-bezier(.16,1,.3,1) rca-slide-in-354f0930;display:flex;position:fixed;top:0;bottom:0;right:0;box-shadow:-20px 0 50px #00000059}@keyframes rca-fade-in-354f0930{0%{opacity:0}to{opacity:1}}@keyframes rca-slide-in-354f0930{0%{opacity:0;transform:translate(24px)}to{opacity:1;transform:translate(0)}}@media (prefers-reduced-motion:reduce){.rca-backdrop[data-v-354f0930],.rca-panel[data-v-354f0930]{animation:none}}.rca-panel-head[data-v-354f0930]{border-bottom:1px solid var(--border-soft);flex-shrink:0;justify-content:space-between;align-items:flex-start;gap:12px;padding:20px 22px;display:flex}.rca-panel-eyebrow[data-v-354f0930]{color:var(--accent);text-transform:uppercase;letter-spacing:.08em;margin:0;font-size:10.5px;font-weight:700}.rca-panel-host[data-v-354f0930]{font-family:var(--font-mono);color:var(--text);margin:4px 0 0;font-size:17px;font-weight:700}.rca-close[data-v-354f0930]{border:1px solid var(--border);color:var(--text-faint);cursor:pointer;background:0 0;border-radius:8px;flex-shrink:0;justify-content:center;align-items:center;width:32px;height:32px;transition:color .15s,border-color .15s;display:flex}.rca-close[data-v-354f0930]:hover,.rca-close[data-v-354f0930]:focus-visible{color:var(--text);border-color:var(--border);background:var(--surface-2)}.rca-close svg[data-v-354f0930]{width:16px;height:16px}.rca-panel-body[data-v-354f0930]{flex-direction:column;flex:1;gap:20px;padding:22px;display:flex;overflow-y:auto}.rca-loading[data-v-354f0930]{text-align:center;flex-direction:column;align-items:center;gap:6px;padding:48px 16px 16px;display:flex}.rca-loading-pulse[data-v-354f0930]{border:3px solid var(--border-soft);border-top-color:var(--accent);border-radius:50%;width:44px;height:44px;margin-bottom:8px;animation:.9s linear infinite rca-spin-354f0930}@keyframes rca-spin-354f0930{to{transform:rotate(360deg)}}.rca-loading-stage[data-v-354f0930]{color:var(--text);margin:0;font-size:14px;font-weight:600}.rca-loading-hint[data-v-354f0930]{color:var(--text-faint);margin:0;font-size:12px}.rca-skeleton[data-v-354f0930]{flex-direction:column;gap:10px;width:100%;max-width:420px;margin-top:28px;display:flex}.rca-skeleton-line[data-v-354f0930]{background:linear-gradient(90deg, var(--surface-2) 25%, var(--border-soft) 50%, var(--surface-2) 75%);background-size:200% 100%;border-radius:5px;height:11px;animation:1.6s infinite rca-shimmer-354f0930}@keyframes rca-shimmer-354f0930{0%{background-position:200% 0}to{background-position:-200% 0}}@media (prefers-reduced-motion:reduce){.rca-loading-pulse[data-v-354f0930],.rca-skeleton-line[data-v-354f0930]{animation:none}}.rca-error[data-v-354f0930]{color:var(--crit);text-align:center;flex-direction:column;align-items:center;gap:12px;padding:48px 16px;display:flex}.rca-headline[data-v-354f0930]{flex-direction:column;gap:8px;display:flex}.rca-headline-text[data-v-354f0930]{color:var(--text);margin:0;font-size:16px;font-weight:700;line-height:1.4}.rca-confidence[data-v-354f0930]{text-transform:uppercase;letter-spacing:.04em;white-space:nowrap;border-radius:999px;align-self:flex-start;padding:2px 8px;font-size:11px;font-weight:600}.rca-confidence.high[data-v-354f0930]{color:var(--ok);background:#5fbf8a24;border:1px solid #5fbf8a66}.rca-confidence.medium[data-v-354f0930]{color:var(--warn);background:var(--warn-glow);border:1px solid #e8a23d66}.rca-confidence.low[data-v-354f0930]{color:var(--text-faint);border:1px dashed var(--border);background:0 0}.rca-stale-banner[data-v-354f0930]{color:var(--warn);background:var(--warn-glow);border:1px solid #e8a23d59;border-radius:8px;justify-content:space-between;align-items:center;gap:12px;padding:8px 12px;font-size:12px;display:flex}.rca-section[data-v-354f0930]{flex-direction:column;gap:8px;display:flex}.rca-section-heading[data-v-354f0930]{color:var(--text-faint);text-transform:uppercase;letter-spacing:.06em;margin:0;font-size:10.5px;font-weight:700}.rca-prose[data-v-354f0930]{color:var(--text-muted);white-space:pre-wrap;margin:0;font-size:13.5px;line-height:1.6}.rca-timeline[data-v-354f0930]{border-left:2px solid var(--border-soft);flex-direction:column;gap:16px;margin:0;padding:0;list-style:none;display:flex}.rca-timeline-entry[data-v-354f0930]{padding-left:18px;position:relative}.rca-timeline-entry[data-v-354f0930]:before{content:"";background:var(--accent);border:2px solid var(--surface);border-radius:50%;width:10px;height:10px;position:absolute;top:3px;left:-6px}.rca-timeline-time[data-v-354f0930]{font-family:var(--font-mono);color:var(--text-faint);font-size:11px;display:block}.rca-timeline-label[data-v-354f0930]{color:var(--text);margin-top:2px;font-size:13.5px;font-weight:700;display:block}.rca-timeline-detail[data-v-354f0930]{color:var(--text-muted);margin:3px 0 0;font-size:13px;line-height:1.5}.rca-evidence-list[data-v-354f0930]{flex-direction:column;gap:6px;margin:0;padding:0;list-style:none;display:flex}.rca-evidence-list li[data-v-354f0930]{font-family:var(--font-mono);color:var(--text-muted);padding-left:14px;font-size:12.5px;line-height:1.5;position:relative}.rca-evidence-list li[data-v-354f0930]:before{content:"›";color:var(--accent);position:absolute;left:0}.rca-action-list[data-v-354f0930]{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.rca-action-list li[data-v-354f0930]{color:var(--text);align-items:flex-start;gap:8px;font-size:13.5px;line-height:1.5;display:flex}.rca-action-list li svg[data-v-354f0930]{width:15px;height:15px;color:var(--ok);flex-shrink:0;margin-top:2px}.rca-open-questions[data-v-354f0930]{border:1px dashed var(--border);border-radius:8px;flex-direction:column;gap:6px;padding:12px 14px;display:flex}.rca-open-questions ul[data-v-354f0930]{color:var(--text-faint);margin:0;padding-left:18px;font-size:12.5px;line-height:1.6}.rca-footer[data-v-354f0930]{border-top:1px solid var(--border-soft);color:var(--text-faint);justify-content:space-between;align-items:center;gap:12px;padding-top:12px;font-size:11.5px;display:flex}.rca-regenerate-link[data-v-354f0930]{font-family:var(--font-ui);color:var(--accent);cursor:pointer;background:0 0;border:none;padding:0;font-size:11.5px;font-weight:600}.rca-regenerate-link[data-v-354f0930]:hover:not(:disabled){text-decoration:underline}.rca-regenerate-link[data-v-354f0930]:disabled{opacity:.5;cursor:default}@media (width<=700px){.rca-panel[data-v-354f0930]{width:100vw}}.incident-row[data-v-ff7a3545]{border:1px solid var(--border-soft);background:var(--surface);border-radius:10px;flex-direction:column;gap:14px;padding:14px 16px;display:flex}.incident-section[data-v-ff7a3545]{flex-direction:column;gap:4px;display:flex}.incident-side-label[data-v-ff7a3545]{letter-spacing:.06em;text-transform:uppercase;color:var(--accent);margin:0;font-size:11px;font-weight:700}.incident-row-head[data-v-ff7a3545]{flex-wrap:wrap;align-items:center;gap:10px;display:flex}.incident-row-head>.block-toggle[data-v-ff7a3545]{margin-left:auto}.rca-trigger[data-v-ff7a3545]{color:var(--accent);background:var(--accent-glow);border-color:#3fc9c059}.rca-trigger[data-v-ff7a3545]:hover,.rca-trigger[data-v-ff7a3545]:focus-visible{border-color:var(--accent)}.incident-host[data-v-ff7a3545]{font-family:var(--font-mono);color:var(--text);font-size:15px;font-weight:700}.incident-host-link[data-v-ff7a3545]{color:inherit;text-decoration:none}.incident-host-link[data-v-ff7a3545]:hover,.incident-host-link[data-v-ff7a3545]:focus-visible{text-decoration:underline}.when[data-v-ff7a3545]{color:var(--text-faint);font-size:12px}.incident-rules[data-v-ff7a3545]{flex-wrap:wrap;gap:6px;display:flex}.incident-row .incident-rules .severity[data-v-ff7a3545]{background:var(--surface-2);border:1px solid var(--border-soft);padding:3px 7px;font-size:10px}.incident-summary[data-v-ff7a3545]{color:var(--text-muted);white-space:pre-wrap;margin:0;font-size:13px;line-height:1.55}.incident-summary-heading[data-v-ff7a3545]{color:var(--text-faint);text-transform:uppercase;letter-spacing:.06em;margin:0;font-size:10.5px;font-weight:700}.incident-targets-list[data-v-ff7a3545]{font-size:13px;font-family:var(--font-mono);color:var(--text-muted);margin:0}.incident-actions[data-v-ff7a3545]{border-top:1px solid var(--border-soft);flex-direction:column;gap:3px;margin:0;padding-top:12px;display:flex}.incident-actions-controls[data-v-ff7a3545]{flex-wrap:wrap;gap:8px;padding-top:8px;display:flex}.incident-actions-heading[data-v-ff7a3545]{color:var(--text-faint);text-transform:uppercase;letter-spacing:.06em;margin:0;font-size:10.5px;font-weight:700}.incident-actions-entry[data-v-ff7a3545]{color:var(--text-muted);font-size:12px;font-family:var(--font-mono);margin:0}.incident-severity[data-v-ff7a3545]{text-transform:uppercase;letter-spacing:.04em;white-space:nowrap;border-radius:999px;padding:2px 8px;font-size:11px;font-weight:600}.incident-severity.critical[data-v-ff7a3545]{color:#fff;background:#dc2626d9;border:1px solid #dc2626}.incident-severity.high[data-v-ff7a3545]{color:#e8604c;background:#e8604c24;border:1px solid #e8604c66}.incident-severity.medium[data-v-ff7a3545]{color:#d97a2e;background:#d97a2e24;border:1px solid #d97a2e66}.incident-severity.low[data-v-ff7a3545]{color:var(--ok);background:#5fbf8a24;border:1px solid #5fbf8a66}.incident-action-badge[data-v-ff7a3545]{white-space:nowrap;border-radius:999px;padding:2px 8px;font-size:11px;font-weight:600}.incident-action-badge.review[data-v-ff7a3545]{color:var(--accent);background:var(--accent-glow,#5f6fe024);border:1px solid #5f6fe066}.incident-action-badge.overridden[data-v-ff7a3545]{color:var(--text-dim);border:1px dashed var(--border);background:0 0}.incident-action-badge.reviewed[data-v-ff7a3545]{color:var(--ok);background:#5fbf8a24;border:1px solid #5fbf8a66}.incidents-list[data-v-17b3fac8]{flex-direction:column;gap:10px;display:flex}:root{--bg:#0a0f1a;--bg-grid:#0d1421;--surface:#111a2b;--surface-2:#172238;--border:#223049;--border-soft:#1a2438;--text:#e7ecf5;--text-muted:#8b96ad;--text-faint:#5b6980;--accent:#3fc9c0;--accent-dim:#2a8f89;--accent-glow:#3fc9c029;--warn:#e8a23d;--warn-glow:#e8a23d24;--crit:#e8604c;--crit-glow:#e8604c29;--ok:#5fbf8a;--r-port-scan:#e8604c;--r-port-scan-glow:#e8604c29;--r-host-sweep:#d97a2e;--r-host-sweep-glow:#d97a2e29;--r-beaconing:#d1477a;--r-beaconing-glow:#d1477a29;--r-volume:#9569d6;--r-volume-glow:#9569d629;--r-new-dest:#e8a23d;--r-new-dest-glow:#e8a23d29;--r-gateway:#5b8ce8;--r-gateway-glow:#5b8ce829;--r-smb-access:#3ecf7e;--r-smb-access-glow:#3ecf7e29;--r-off-hours:#5f6fe0;--r-off-hours-glow:#5f6fe029;--r-priv-port:#d6b83d;--r-priv-port-glow:#d6b83d29;--r-user-host:#c74fd6;--r-user-host-glow:#c74fd629;--r-suspicious-ua:#3ba8c4;--r-suspicious-ua-glow:#3ba8c429;--r-github-download:#8b97a8;--r-github-download-glow:#8b97a829;--r-internet-upload:#d97a4a;--r-internet-upload-glow:#d97a4a29;--r-rare-ja3:#c17a4a;--r-rare-ja3-glow:#c17a4a29;--r-mac-change:#8fc23e;--r-mac-change-glow:#8fc23e29;--r-smb-burst:#d43d63;--r-smb-burst-glow:#d43d6329;--r-ransomware:#b91c1c;--r-ransomware-glow:#b91c1c2e;--r-lateral-movement:#6d28d9;--r-lateral-movement-glow:#6d28d929;--r-conn-failure:#b8a23e;--r-conn-failure-glow:#b8a23e29;--r-dns-tunnel:#b23ec9;--r-dns-tunnel-glow:#b23ec929;--r-dga-activity:#ca8a04;--r-dga-activity-glow:#ca8a0429;--r-dns-fast-flux:#0ea5e9;--r-dns-fast-flux-glow:#0ea5e929;--r-llmnr-poisoning:#f43f5e;--r-llmnr-poisoning-glow:#f43f5e29;--r-arp-spoofing:#dc2626;--r-arp-spoofing-glow:#dc262629;--r-ldap-recon:#a855f7;--r-ldap-recon-glow:#a855f729;--r-legacy-protocol:#b08968;--r-legacy-protocol-glow:#b0896829;--r-cleartext-cred:#e11d48;--r-cleartext-cred-glow:#e11d4829;--r-volume-anomaly:#4ec93e;--r-volume-anomaly-glow:#4ec93e29;--r-brute-force:#e2394a;--r-brute-force-glow:#e2394a29;--r-password-spray:#7a5ce0;--r-password-spray-glow:#7a5ce029;--r-kerberoasting:#e0b23d;--r-kerberoasting-glow:#e0b23d29;--r-privilege-escalation:#e23d8f;--r-privilege-escalation-glow:#e23d8f29;--r-unusual-logon-type:#3f8fe0;--r-unusual-logon-type-glow:#3f8fe029;--r-off-hours-admin:#8f3fe0;--r-off-hours-admin-glow:#8f3fe029;--r-account-escalated:#e07a3f;--r-account-escalated-glow:#e07a3f29;--r-as-rep-roast:#d63f7a;--r-as-rep-roast-glow:#d63f7a29;--r-gpo-modified:#2ec4b6;--r-gpo-modified-glow:#2ec4b629;--r-gpo-created:#4caf50;--r-gpo-created-glow:#4caf5029;--r-gpo-deleted:#e64a4a;--r-gpo-deleted-glow:#e64a4a29;--r-gpo-content:#1b8a94;--r-gpo-content-glow:#1b8a9429;--r-dcsync:#ff3b30;--r-dcsync-glow:#ff3b3029;--r-service-installed:#8d6e63;--r-service-installed-glow:#8d6e6329;--r-audit-log-cleared:#ff1654;--r-audit-log-cleared-glow:#ff16542e;--r-audit-policy-changed:#ff6b00;--r-audit-policy-changed-glow:#ff6b0029;--r-account-uac-changed:#c026d3;--r-account-uac-changed-glow:#c026d329;--r-trust-modified:#1e3a8a;--r-trust-modified-glow:#1e3a8a2e;--r-sid-history:#b8860b;--r-sid-history-glow:#b8860b29;--r-ntlm-failure:sienna;--r-ntlm-failure-glow:#a0522d29;--r-netlogon-script:#c2410c;--r-netlogon-script-glow:#c2410c29;--r-account-locked:#607d8b;--r-account-locked-glow:#607d8b29;--r-password-reset:#5c6bc0;--r-password-reset-glow:#5c6bc029;--r-account-created:#43a047;--r-account-created-glow:#43a04729;--r-account-enabled:#26a69a;--r-account-enabled-glow:#26a69a29;--r-explicit-cred:#ab47bc;--r-explicit-cred-glow:#ab47bc29;--r-computer-created:#7cb342;--r-computer-created-glow:#7cb34229;--r-unknown-switch-mac:#ef8354;--r-unknown-switch-mac-glow:#ef835429;--r-new-lldp-neighbor:#06b6d4;--r-new-lldp-neighbor-glow:#06b6d429;--r-vpn-blacklist:#4a5fd6;--r-vpn-blacklist-glow:#4a5fd629;--r-rare-ja4s:#14b8a6;--r-rare-ja4s-glow:#14b8a629;--r-os-fingerprint:#f59e0b;--r-os-fingerprint-glow:#f59e0b29;--r-self-signed-cert:#dc2626;--r-self-signed-cert-glow:#dc262629;--r-new-process:#22c55e;--r-new-process-glow:#22c55e29;--r-unusual-parent:#eab308;--r-unusual-parent-glow:#eab30829;--r-suspicious-command:#f472b6;--r-suspicious-command-glow:#f472b629;--r-powershell-risk:#6366f1;--r-powershell-risk-glow:#6366f129;--r-new-process-dest:#38bdf8;--r-new-process-dest-glow:#38bdf829;--r-agent-tamper:#f97316;--r-agent-tamper-glow:#f9731629;--font-ui:"Sora", system-ui, -apple-system, sans-serif;--font-mono:"IBM Plex Mono", ui-monospace, "SF Mono", Menlo, monospace}:root[data-theme=light]{--bg:#f4f6fa;--bg-grid:#eaeef4;--surface:#fff;--surface-2:#eef1f7;--border:#d7dee8;--border-soft:#e3e8f0;--text:#16202f;--text-muted:#56637a;--text-faint:#8894a8;--accent:#1f9d94;--accent-dim:#16746d;--accent-glow:#1f9d941f;--warn:#a8701c;--warn-glow:#a8701c1f;--crit:#c8432f;--crit-glow:#c8432f1f;--ok:#2f8f5f;--r-port-scan:#c23f2c;--r-port-scan-glow:#c23f2c1f;--r-host-sweep:#a85f1d;--r-host-sweep-glow:#a85f1d1f;--r-beaconing:#a8305c;--r-beaconing-glow:#a8305c1f;--r-volume:#7248b8;--r-volume-glow:#7248b81f;--r-new-dest:#a8701c;--r-new-dest-glow:#a8701c1f;--r-gateway:#3868c4;--r-gateway-glow:#3868c41f;--r-smb-access:#1f9455;--r-smb-access-glow:#1f94551f;--r-off-hours:#4048bd;--r-off-hours-glow:#4048bd1f;--r-priv-port:#93791a;--r-priv-port-glow:#93791a1f;--r-user-host:#a032b0;--r-user-host-glow:#a032b01f;--r-suspicious-ua:#1c7c93;--r-suspicious-ua-glow:#1c7c931f;--r-github-download:#4a5568;--r-github-download-glow:#4a55681f;--r-internet-upload:#b8571f;--r-internet-upload-glow:#b8571f1f;--r-rare-ja3:#955c31;--r-rare-ja3-glow:#955c311f;--r-mac-change:#5f8a1f;--r-mac-change-glow:#5f8a1f1f;--r-smb-burst:#a02c48;--r-smb-burst-glow:#a02c481f;--r-ransomware:#8f1414;--r-ransomware-glow:#8f141424;--r-lateral-movement:#5b21b6;--r-lateral-movement-glow:#5b21b61f;--r-conn-failure:#8a7420;--r-conn-failure-glow:#8a74201f;--r-dns-tunnel:#832e96;--r-dns-tunnel-glow:#832e961f;--r-dga-activity:#9c6a03;--r-dga-activity-glow:#9c6a031f;--r-dns-fast-flux:#0b7fb5;--r-dns-fast-flux-glow:#0b7fb51f;--r-llmnr-poisoning:#c81e3a;--r-llmnr-poisoning-glow:#c81e3a1f;--r-arp-spoofing:#a61e1e;--r-arp-spoofing-glow:#a61e1e1f;--r-ldap-recon:#8b21d0;--r-ldap-recon-glow:#8b21d01f;--r-legacy-protocol:#8a6247;--r-legacy-protocol-glow:#8a62471f;--r-cleartext-cred:#b8102f;--r-cleartext-cred-glow:#b8102f1f;--r-volume-anomaly:#2f8f1f;--r-volume-anomaly-glow:#2f8f1f1f;--r-brute-force:#b8232f;--r-brute-force-glow:#b8232f1f;--r-password-spray:#5c3ab0;--r-password-spray-glow:#5c3ab01f;--r-kerberoasting:#a67f1a;--r-kerberoasting-glow:#a67f1a1f;--r-privilege-escalation:#b81f6b;--r-privilege-escalation-glow:#b81f6b1f;--r-unusual-logon-type:#1f5fa8;--r-unusual-logon-type-glow:#1f5fa81f;--r-off-hours-admin:#5c1fa8;--r-off-hours-admin-glow:#5c1fa81f;--r-account-escalated:#a85419;--r-account-escalated-glow:#a854191f;--r-as-rep-roast:#a81f52;--r-as-rep-roast-glow:#a81f521f;--r-gpo-modified:#1a8f84;--r-gpo-modified-glow:#1a8f841f;--r-gpo-created:#2e7d32;--r-gpo-created-glow:#2e7d321f;--r-gpo-deleted:#b71c1c;--r-gpo-deleted-glow:#b71c1c1f;--r-gpo-content:#0f6169;--r-gpo-content-glow:#0f61691f;--r-dcsync:#c62828;--r-dcsync-glow:#c628281f;--r-service-installed:#5d4037;--r-service-installed-glow:#5d40371f;--r-audit-log-cleared:#c81145;--r-audit-log-cleared-glow:#c811451f;--r-audit-policy-changed:#b34e00;--r-audit-policy-changed-glow:#b34e001f;--r-account-uac-changed:#941ea3;--r-account-uac-changed-glow:#941ea31f;--r-trust-modified:#16296b;--r-trust-modified-glow:#16296b1f;--r-sid-history:#8a6508;--r-sid-history-glow:#8a65081f;--r-ntlm-failure:#7a3d20;--r-ntlm-failure-glow:#7a3d201f;--r-netlogon-script:#9a3412;--r-netlogon-script-glow:#9a34121f;--r-account-locked:#37474f;--r-account-locked-glow:#37474f1f;--r-password-reset:#3949ab;--r-password-reset-glow:#3949ab1f;--r-account-created:#2e7d32;--r-account-created-glow:#2e7d321f;--r-account-enabled:#00796b;--r-account-enabled-glow:#00796b1f;--r-explicit-cred:#7b1fa2;--r-explicit-cred-glow:#7b1fa21f;--r-computer-created:#558b2f;--r-computer-created-glow:#558b2f1f;--r-unknown-switch-mac:#a8562f;--r-unknown-switch-mac-glow:#a8562f1f;--r-new-lldp-neighbor:#0e7c90;--r-new-lldp-neighbor-glow:#0e7c901f;--r-vpn-blacklist:#3141a8;--r-vpn-blacklist-glow:#3141a81f;--r-rare-ja4s:#0f766e;--r-rare-ja4s-glow:#0f766e1f;--r-os-fingerprint:#b45309;--r-os-fingerprint-glow:#b453091f;--r-self-signed-cert:#b91c1c;--r-self-signed-cert-glow:#b91c1c1f;--r-new-process:#15803d;--r-new-process-glow:#15803d1f;--r-unusual-parent:#a16207;--r-unusual-parent-glow:#a162071f;--r-suspicious-command:#be185d;--r-suspicious-command-glow:#be185d1f;--r-powershell-risk:#4338ca;--r-powershell-risk-glow:#4338ca1f;--r-new-process-dest:#0369a1;--r-new-process-dest-glow:#0369a11f;--r-agent-tamper:#c2410c;--r-agent-tamper-glow:#c2410c1f}*{box-sizing:border-box}html,body{background:var(--bg);color:var(--text);font-family:var(--font-ui);-webkit-font-smoothing:antialiased;margin:0;padding:0}body{background-image:linear-gradient(var(--bg-grid) 1px, transparent 1px), linear-gradient(90deg, var(--bg-grid) 1px, transparent 1px);background-position:-1px -1px;background-size:48px 48px;min-height:100vh}@media (prefers-reduced-motion:reduce){*{transition-duration:.001ms!important;animation-duration:.001ms!important}}a{color:inherit}.wrap{max-width:1280px;margin:0 auto;padding:28px 32px 64px}header{border-bottom:1px solid var(--border-soft);justify-content:space-between;align-items:center;gap:24px;margin-bottom:28px;padding-bottom:22px;display:flex}.brand{align-items:baseline;gap:12px;display:flex}.wordmark{align-items:baseline;gap:7px;display:flex}.wordmark-link{color:inherit;cursor:pointer;text-decoration:none}.wordmark .mark{width:auto;height:40px;margin-bottom:1px;display:block}.wordmark h1{margin:0;line-height:1}.login-page{justify-content:center;align-items:center;min-height:100vh;display:flex}.login-card{border:1px solid var(--border-soft);background:var(--surface);border-radius:14px;flex-direction:column;gap:16px;width:100%;max-width:320px;padding:32px;display:flex}.login-card .wordmark{align-self:center;margin-bottom:8px}.login-field{color:var(--text-muted);flex-direction:column;gap:6px;font-size:12px;display:flex}.login-field input{font-family:var(--font-mono);color:var(--text);background:var(--bg);border:1px solid var(--border);border-radius:7px;padding:9px 11px;font-size:14px}.login-field input:focus{border-color:var(--accent-dim);outline:none}.login-card .settings-save{text-align:center;justify-content:center}.brand h1{letter-spacing:-.01em;margin:0;font-size:24px;font-weight:700}.brand .tenant{font-family:var(--font-mono);color:var(--text-muted);font-size:13px}.tenant-switcher-wrap{display:flex;position:relative}.tenant-switcher-backdrop{z-index:20;position:fixed;inset:0}.tenant-switcher-panel{z-index:21;background:var(--surface);border:1px solid var(--border);border-radius:10px;flex-direction:column;gap:6px;width:240px;padding:8px;display:flex;position:absolute;top:calc(100% + 8px);right:0;box-shadow:0 10px 30px #00000040}.tenant-switcher-search{font-family:var(--font-ui);color:var(--text);background:var(--bg);border:1px solid var(--border);border-radius:6px;padding:7px 9px;font-size:13px}.tenant-switcher-search:focus{border-color:var(--accent-dim);outline:none}.tenant-switcher-list{flex-direction:column;max-height:190px;display:flex;overflow-y:auto}.tenant-switcher-item{font-family:var(--font-ui);text-align:left;color:var(--text);cursor:pointer;white-space:nowrap;text-overflow:ellipsis;background:0 0;border:none;border-radius:6px;padding:8px 9px;font-size:13px;overflow:hidden}.tenant-switcher-item:hover{background:var(--surface-2)}.tenant-switcher-item.active{color:var(--accent);background:var(--accent-glow);font-weight:600}.main-nav{gap:4px;margin:-8px 0 28px;display:flex}.main-nav-link{color:var(--text-muted);border-radius:8px;align-items:center;gap:8px;padding:9px 14px;font-size:13.5px;font-weight:600;text-decoration:none;transition:color .15s,background .15s;display:flex}.main-nav-link:hover{color:var(--text);background:var(--surface-2)}.main-nav-link.active{color:var(--accent);background:var(--accent-glow)}.main-nav-badge{font-family:var(--font-mono);color:var(--text-muted);background:var(--surface-2);border:1px solid var(--border);border-radius:20px;padding:0 7px;font-size:11px}.main-nav-link.active .main-nav-badge{color:var(--accent);border-color:#3fc9c066}.status{font-family:var(--font-mono);color:var(--text-muted);align-items:center;gap:18px;font-size:12px;display:flex}.header-sep{background:var(--border);width:1px;height:20px}.global-search{flex:auto;min-width:160px;max-width:480px;margin:0 8px;position:relative}.global-search input{background:var(--surface);border:1px solid var(--border);width:100%;color:var(--text);font-family:var(--font-mono);border-radius:8px;outline:none;padding:10px 12px 10px 34px;font-size:13px;transition:border-color .15s}.global-search input:focus{border-color:var(--accent-dim)}.global-search input::placeholder{color:var(--text-faint)}.global-search svg{width:15px;height:15px;color:var(--text-faint);pointer-events:none;position:absolute;top:50%;left:11px;transform:translateY(-50%)}.global-search-results{background:var(--surface-2);border:1px solid var(--border);z-index:40;border-radius:8px;max-height:340px;position:absolute;top:calc(100% + 6px);left:0;right:0;overflow-y:auto;box-shadow:0 12px 28px #0006}.global-search-results[hidden]{display:none}.global-search-result{cursor:pointer;border-bottom:1px solid var(--border-soft);justify-content:space-between;align-items:center;gap:12px;padding:10px 14px;display:flex}.global-search-result:last-child{border-bottom:none}.global-search-result:hover,.global-search-result.active{background:var(--surface)}.global-search-result .gsr-main{flex-direction:column;gap:2px;min-width:0;display:flex}.global-search-result .gsr-title{color:var(--text);white-space:nowrap;text-overflow:ellipsis;font-size:13px;font-weight:600;overflow:hidden}.global-search-result .gsr-sub{font-family:var(--font-mono);color:var(--text-faint);white-space:nowrap;text-overflow:ellipsis;font-size:11.5px;overflow:hidden}.global-search-result .gsr-when{font-family:var(--font-mono);color:var(--text-faint);flex-shrink:0;font-size:11px}.global-search-empty{color:var(--text-faint);padding:14px;font-size:12.5px}.pulse{align-items:center;gap:7px;display:inline-flex}.pulse .dot{background:var(--ok);border-radius:50%;width:7px;height:7px;animation:2.4s ease-out infinite ping;box-shadow:0 0 #5fbf8a99}.pulse.stale .dot{background:var(--warn);box-shadow:none;animation:none}.pulse.down .dot{background:var(--crit);box-shadow:none;animation:none}@keyframes ping{0%{box-shadow:0 0 #5fbf8a8c}70%{box-shadow:0 0 0 7px #5fbf8a00}to{box-shadow:0 0 #5fbf8a00}}.settings-link{width:28px;height:28px;color:var(--text-faint);cursor:pointer;background:0 0;border:1px solid #0000;border-radius:7px;justify-content:center;align-items:center;padding:0;display:inline-flex}.settings-link svg{width:16px;height:16px}.settings-link:hover,.settings-link:focus-visible{color:var(--accent);background:var(--surface-2);border-color:var(--border)}.settings-section{border-bottom:1px solid var(--border-soft);padding:20px}.settings-section:last-of-type{border-bottom:none}.settings-section h3{margin:0 0 4px;font-size:13px;font-weight:600}.settings-hint{color:var(--text-faint);max-width:560px;margin:0 0 14px;font-size:12px}.sensitive-groups-input{background:var(--bg);border:1px solid var(--border);width:100%;max-width:420px;color:var(--text);font-family:var(--font-mono);resize:vertical;border-radius:7px;outline:none;padding:9px 12px;font-size:13px;line-height:1.5;transition:border-color .15s;display:block}.sensitive-groups-input:focus{border-color:var(--accent-dim)}.sensitive-groups-input::placeholder{color:var(--text-faint)}:where(input[type=text],input[type=password],input[type=search],input[type=email],input[type=number],input[type=url],input:not([type]),select){background:var(--bg);border:1px solid var(--border);color:var(--text);border-radius:7px;outline:none;padding:7px 10px;font-size:13px;transition:border-color .15s}:where(input[type=text],input[type=password],input[type=search],input[type=email],input[type=number],input[type=url],input:not([type]),select):focus{border-color:var(--accent-dim)}:where(input[type=text],input[type=password],input[type=search],input[type=email],input[type=number],input[type=url],input:not([type]))::placeholder{color:var(--text-faint)}:where(input,select):disabled{opacity:.6}.theme-toggle{border:1px solid var(--border);border-radius:8px;display:inline-flex;overflow:hidden}.theme-toggle button{font-family:var(--font-ui);background:var(--surface);color:var(--text-muted);cursor:pointer;border:none;padding:8px 20px;font-size:13px;font-weight:600}.theme-toggle button+button{border-left:1px solid var(--border)}.theme-toggle button.active{background:var(--accent-glow);color:var(--accent)}.rule-checklist{flex-direction:column;gap:1px;display:flex}.rule-tabs{flex-wrap:wrap;gap:6px;margin-bottom:10px;display:flex}section.panel>.rule-tabs{padding:14px 20px 0}.rule-tab{font-family:var(--font-ui);background:var(--surface);color:var(--text-muted);border:1px solid var(--border);cursor:pointer;border-radius:8px;align-items:center;gap:6px;padding:7px 12px;font-size:12.5px;font-weight:600;transition:border-color .15s,color .15s,background .15s;display:inline-flex}.rule-tab:hover{border-color:var(--accent-dim);color:var(--text)}.rule-tab.active{background:var(--accent-glow);border-color:var(--accent-dim);color:var(--accent)}.rule-tab-count{font-family:var(--font-mono);color:var(--text-faint);background:var(--surface-2);border-radius:4px;padding:1px 5px;font-size:11px}.rule-tab.active .rule-tab-count{color:var(--accent);background:var(--accent-glow)}.rule-tab-disabled{text-transform:uppercase;letter-spacing:.03em;color:var(--warn);background:var(--warn-glow);border-radius:4px;padding:1px 5px;font-size:10.5px;font-weight:600}.rule-check{cursor:pointer;border-radius:8px;align-items:flex-start;gap:10px;padding:9px 10px;display:flex}.rule-check:hover{background:var(--surface-2)}.rule-check input{accent-color:var(--accent);cursor:pointer;flex-shrink:0;width:15px;height:15px;margin-top:3px}.rule-check .rule-dot{border-radius:50%;flex-shrink:0;width:9px;height:9px;margin-top:6px}.rule-check .rule-text{flex-direction:column;gap:1px;min-width:0;display:flex}.rule-check .rule-name{color:var(--text);font-size:13.5px}.rule-check .rule-desc{color:var(--text-faint);font-size:11.5px;line-height:1.4}.settings-save{font-family:var(--font-ui);border:1px solid var(--accent-dim);background:var(--accent-glow);color:var(--accent);cursor:pointer;border-radius:8px;padding:9px 20px;font-size:13px;font-weight:600}.settings-save:hover{background:var(--accent-dim);color:var(--bg)}.settings-save:disabled{opacity:.5;cursor:default}.sensor-create-row{flex-wrap:wrap;align-items:center;gap:10px;display:flex}.bulk-toggle{font-family:var(--font-ui);color:var(--text-faint);cursor:pointer;border:1px solid var(--border-soft);border-radius:8px;align-items:center;gap:7px;padding:8px 12px;font-size:12px;display:flex}.bulk-toggle:hover{border-color:var(--accent-dim);color:var(--text)}.bulk-toggle input{accent-color:var(--accent);cursor:pointer}.mute-list{flex-direction:column;display:flex}.mute-row{border-bottom:1px solid var(--border-soft);align-items:center;gap:14px;padding:11px 20px;display:flex}.mute-row:last-child{border-bottom:none}.mute-row:hover{background:var(--surface-2)}.mute-row .desc{flex:1;min-width:0}.mute-row .rule-line{white-space:nowrap;text-overflow:ellipsis;font-size:13.5px;font-weight:500;overflow:hidden}.mute-row .rule-line .ip{font-family:var(--font-mono);color:var(--accent)}.mute-row .rule-line .arrow{color:var(--text-faint);margin:0 6px}.mute-row .rule-line .dest{font-family:var(--font-mono);color:var(--text)}.mute-row .rule-line .auth-badge{vertical-align:middle;margin-left:8px}.mute-row .when{font-family:var(--font-mono);color:var(--text-faint);flex-shrink:0;font-size:12px}.unmute-btn{font-family:var(--font-ui);letter-spacing:.02em;color:var(--text-faint);border:1px solid var(--border);cursor:pointer;white-space:nowrap;background:0 0;border-radius:6px;flex-shrink:0;padding:5px 10px;font-size:11px;font-weight:600}.unmute-btn:hover,.unmute-btn:focus-visible{color:var(--accent);border-color:var(--accent-dim);background:var(--accent-glow)}.unmute-btn:disabled{opacity:.5;cursor:default}.enroll-result{margin-top:14px}.sensor-section-label{margin-top:18px;margin-bottom:6px}.snmp-discovered-label{color:var(--text-faint);text-transform:uppercase;letter-spacing:.03em;margin:24px 0 6px;font-size:11.5px;font-weight:600}.snmp-discovered-list{margin-bottom:12px}.snmp-discovered-list input[type=checkbox]{accent-color:var(--accent);cursor:pointer;flex-shrink:0}.snmp-discovered-select-all{color:var(--text-faint);cursor:pointer;font-size:12px}.snmp-target-row{flex-wrap:wrap;row-gap:6px}.snmp-target-detail{color:var(--text-faint);margin-top:2px;font-size:11.5px}.snmp-version-badge{font-family:var(--font-mono);text-transform:uppercase;letter-spacing:.03em;color:var(--accent);background:var(--accent-glow);border:1px solid var(--accent-dim);border-radius:4px;margin-left:8px;padding:1px 6px;font-size:10px;font-weight:600}.snmp-version-badge.mfa-enrolled{color:var(--ok);background:#5fbf8a24;border-color:#5fbf8a66}.snmp-version-badge.mfa-not-enrolled{color:var(--warn);background:var(--warn-glow);border-color:#e8a23d66}.snmp-targets>.settings-save{margin-top:14px}.tenant-row{cursor:pointer}.password-edit-row{background:var(--surface-2);gap:10px}.password-edit-row input{font-family:var(--font-mono);color:var(--text);background:var(--surface);border:1px solid var(--border);border-radius:6px;flex:1;min-width:0;padding:7px 9px;font-size:13px}.snmp-target-form{border:1px solid var(--border-soft);background:var(--surface-2);border-radius:10px;margin-top:16px;padding:16px}.snmp-form-grid{grid-template-columns:repeat(auto-fill,minmax(180px,1fr));gap:12px 16px;display:grid}.snmp-form-field{color:var(--text-muted);flex-direction:column;gap:5px;font-size:12px;display:flex}.snmp-form-field input,.snmp-form-field select{font-family:var(--font-mono);color:var(--text);background:var(--surface);border:1px solid var(--border);border-radius:6px;padding:7px 9px;font-size:13px}.snmp-form-field input:focus,.snmp-form-field select:focus{border-color:var(--accent-dim);outline:none}.snmp-form-field input:disabled{opacity:.6}.snmp-form-actions{gap:10px;margin-top:16px;display:flex}.snmp-form-actions .settings-save,.snmp-form-actions .unmute-btn{text-align:center;min-width:140px}.snmp-form-actions .unmute-btn{padding:9px 20px;font-size:13px;font-weight:600}.enroll-command,.enroll-ca-cert pre{font-family:var(--font-mono);color:var(--text);background:var(--surface-2);border:1px solid var(--border-soft);white-space:pre-wrap;word-break:break-all;border-radius:8px;padding:12px 14px;font-size:12px;overflow-x:auto}.enroll-ca-cert{margin-top:10px}.enroll-ca-cert summary{color:var(--text-faint);cursor:pointer;font-size:12px}.enroll-ca-cert pre{white-space:pre;word-break:normal;margin-top:8px}.learn-mode-banner{background:var(--warn-glow);border:1px solid var(--warn);color:var(--text);border-radius:8px;margin-bottom:20px;padding:10px 14px;font-size:13px}.sensor-down-banner{background:var(--crit-glow);border:1px solid var(--crit);color:var(--text);border-radius:8px;margin:20px 0;padding:10px 14px;font-size:13px;font-weight:600}.tiles{grid-template-columns:repeat(4,1fr);gap:14px;margin-bottom:32px;display:grid}.tile{background:var(--surface);border:1px solid var(--border);border-radius:10px;padding:18px 20px;position:relative;overflow:hidden}.tile .label{text-transform:uppercase;letter-spacing:.08em;color:var(--text-muted);margin-bottom:10px;font-size:11.5px}.tile .value{font-family:var(--font-mono);font-variant-numeric:tabular-nums;font-size:30px;font-weight:500;line-height:1}.tile .sub{color:var(--text-faint);margin-top:8px;font-size:12.5px}.tile.findings{border-color:var(--warn)}.tile.findings:before{content:"";background:var(--warn);width:3px;position:absolute;inset:0 auto 0 0}.tile.findings .value{color:var(--warn)}.tile.blocked{border-color:var(--crit)}.tile.blocked:before{content:"";background:var(--crit);width:3px;position:absolute;inset:0 auto 0 0}.tile.blocked .value{color:var(--crit)}.tile.clickable{cursor:pointer;transition:border-color .15s,transform .1s}.tile.clickable:hover{border-color:var(--accent)}.tile.clickable:active{transform:scale(.99)}section.panel{background:var(--surface);border:1px solid var(--border);border-radius:10px;margin-bottom:22px;overflow:hidden}.panel-head{border-bottom:1px solid var(--border-soft);justify-content:space-between;align-items:center;gap:16px;padding:16px 20px;display:flex}.panel-head h2{align-items:center;gap:9px;margin:0;font-size:14.5px;font-weight:600;display:flex}.panel-head h2 .count{font-family:var(--font-mono);color:var(--text-muted);background:var(--surface-2);border:1px solid var(--border);border-radius:20px;padding:1px 9px;font-size:12px}.panel-head .hint{color:var(--text-faint);font-size:12px}.low-toggle{color:var(--text-muted);cursor:pointer;-webkit-user-select:none;user-select:none;align-items:center;gap:7px;font-size:12px;display:inline-flex}.low-toggle input{accent-color:var(--accent);cursor:pointer}.low-hidden-note{border-top:1px solid var(--border-soft);color:var(--text-faint);flex-wrap:wrap;align-items:baseline;gap:8px;padding:12px 20px;font-size:12px;display:flex}.low-hidden-note .sub-toggle{margin-top:0}.findings-controls{border-bottom:1px solid var(--border-soft);flex-wrap:wrap;align-items:center;gap:8px 10px;padding:12px 20px;display:flex}#findings-filters{flex-wrap:wrap;gap:8px;display:flex}.show-all-link{font-family:var(--font-ui);color:var(--text-faint);text-underline-offset:2px;cursor:pointer;background:0 0;border:none;padding:0;font-size:11.5px;text-decoration:underline}.show-all-link:hover,.show-all-link:focus-visible{color:var(--accent)}.findings-controls .label{text-transform:uppercase;letter-spacing:.06em;color:var(--text-faint);font-size:11px}.time-range-picker{border-bottom:1px solid var(--border-soft);flex-wrap:wrap;align-items:center;gap:8px 10px;padding:12px 20px;display:flex}.time-range-picker .label{text-transform:uppercase;letter-spacing:.06em;color:var(--text-faint);font-size:11px}.time-range-field{color:var(--text-muted);align-items:center;gap:6px;font-size:12px;display:flex}.time-range-field input{background:var(--bg);border:1px solid var(--border);color:var(--text);font-family:var(--font-mono);--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;border-radius:7px;outline:none;padding:6px 8px;font-size:12.5px;transition:border-color .15s}:root[data-theme=light] .time-range-field input{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light}.time-range-field input:focus{border-color:var(--accent-dim)}.time-range-sep{color:var(--text-faint)}.time-range-today{border:1px solid var(--border);color:var(--text-muted);cursor:pointer;background:0 0;border-radius:7px;padding:6px 12px;font-size:12px;transition:border-color .15s,color .15s}.time-range-today:hover,.time-range-today:focus-visible{border-color:var(--accent-dim);color:var(--accent)}.findings-controls .search-box{flex:0 280px;max-width:280px;margin-left:auto}.rule-toggle{font-family:var(--font-mono);text-transform:uppercase;letter-spacing:.05em;cursor:pointer;border:1px solid var(--border);color:var(--text-faint);background:0 0;border-radius:20px;padding:4px 10px;font-size:10.5px;font-weight:600;transition:color .15s,background .15s,border-color .15s}.rule-toggle:focus-visible{outline:2px solid var(--accent);outline-offset:2px}.rule-toggle.off{opacity:.55;text-decoration:line-through}.rule-toggle.on.port_scan{color:var(--r-port-scan);background:var(--r-port-scan-glow);border-color:#e8604c66}.rule-toggle.on.host_sweep{color:var(--r-host-sweep);background:var(--r-host-sweep-glow);border-color:#d97a2e66}.rule-toggle.on.beaconing{color:var(--r-beaconing);background:var(--r-beaconing-glow);border-color:#d1477a66}.rule-toggle.on.volume_to_new_destination{color:var(--r-volume);background:var(--r-volume-glow);border-color:#9569d666}.rule-toggle.on.new_destination{color:var(--r-new-dest);background:var(--r-new-dest-glow);border-color:#e8a23d66}.rule-toggle.on.gateway_mac_change{color:var(--r-gateway);background:var(--r-gateway-glow);border-color:#5b8ce866}.rule-toggle.on.new_smb_access{color:var(--r-smb-access);background:var(--r-smb-access-glow);border-color:#3ecf7e66}.rule-toggle.on.off_hours_access{color:var(--r-off-hours);background:var(--r-off-hours-glow);border-color:#5f6fe066}.rule-toggle.on.new_privileged_port{color:var(--r-priv-port);background:var(--r-priv-port-glow);border-color:#d6b83d66}.rule-toggle.on.user_new_host{color:var(--r-user-host);background:var(--r-user-host-glow);border-color:#c74fd666}.rule-toggle.on.suspicious_user_agent{color:var(--r-suspicious-ua);background:var(--r-suspicious-ua-glow);border-color:#3ba8c466}.rule-toggle.on.github_download{color:var(--r-github-download);background:var(--r-github-download-glow);border-color:#8b97a866}.rule-toggle.on.internet_upload_volume{color:var(--r-internet-upload);background:var(--r-internet-upload-glow);border-color:#d97a4a66}.rule-toggle.on.rare_ja3{color:var(--r-rare-ja3);background:var(--r-rare-ja3-glow);border-color:#c17a4a66}.rule-toggle.on.mac_change{color:var(--r-mac-change);background:var(--r-mac-change-glow);border-color:#8fc23e66}.rule-toggle.on.smb_file_burst{color:var(--r-smb-burst);background:var(--r-smb-burst-glow);border-color:#d43d6366}.rule-toggle.on.ransomware_activity,.rule-toggle.on.ransomware_extension,.rule-toggle.on.ransomware_file_activity,.rule-toggle.on.canary_file_touched,.rule-toggle.on.agent_containment_network,.rule-toggle.on.agent_containment_local,.rule-toggle.on.recovery_inhibition,.rule-toggle.on.disk_encryption_started,.rule-toggle.on.mass_service_stop,.rule-toggle.on.ransom_note_dropped{color:var(--r-ransomware);background:var(--r-ransomware-glow);border-color:#b91c1c80}.rule-toggle.on.smb_admin_share_access,.rule-toggle.on.smb_admin_share_denied,.rule-toggle.on.smb_admin_share_sweep,.rule-toggle.on.workstation_lateral_admin{color:var(--r-lateral-movement);background:var(--r-lateral-movement-glow);border-color:#6d28d966}.rule-toggle.on.conn_failure_spike{color:var(--r-conn-failure);background:var(--r-conn-failure-glow);border-color:#b8a23e66}.rule-toggle.on.dns_tunneling,.rule-toggle.on.dns_bypass{color:var(--r-dns-tunnel);background:var(--r-dns-tunnel-glow);border-color:#b23ec966}.rule-toggle.on.dga_activity{color:var(--r-dga-activity);background:var(--r-dga-activity-glow);border-color:#ca8a0466}.rule-toggle.on.dns_fast_flux{color:var(--r-dns-fast-flux);background:var(--r-dns-fast-flux-glow);border-color:#0ea5e966}.rule-toggle.on.llmnr_nbtns_poisoning{color:var(--r-llmnr-poisoning);background:var(--r-llmnr-poisoning-glow);border-color:#f43f5e66}.rule-toggle.on.arp_spoofing,.rule-toggle.on.rogue_dhcp_server{color:var(--r-arp-spoofing);background:var(--r-arp-spoofing-glow);border-color:#dc262666}.rule-toggle.on.ldap_reconnaissance,.rule-toggle.on.ldap_attribute_recon,.rule-toggle.on.ldap_sensitive_query{color:var(--r-ldap-recon);background:var(--r-ldap-recon-glow);border-color:#a855f766}.rule-toggle.on.insecure_legacy_protocol{color:var(--r-legacy-protocol);background:var(--r-legacy-protocol-glow);border-color:#b0896866}.rule-toggle.on.cleartext_credentials,.rule-toggle.on.exposed_admin_service{color:var(--r-cleartext-cred);background:var(--r-cleartext-cred-glow);border-color:#e11d4866}.rule-toggle.on.volume_anomaly{color:var(--r-volume-anomaly);background:var(--r-volume-anomaly-glow);border-color:#4ec93e66}.rule-toggle.on.brute_force_login{color:var(--r-brute-force);background:var(--r-brute-force-glow);border-color:#e2394a66}.rule-toggle.on.password_spray{color:var(--r-password-spray);background:var(--r-password-spray-glow);border-color:#7a5ce066}.rule-toggle.on.kerberoasting,.rule-toggle.on.kerberos_rc4_downgrade{color:var(--r-kerberoasting);background:var(--r-kerberoasting-glow);border-color:#e0b23d66}.rule-toggle.on.privilege_escalation{color:var(--r-privilege-escalation);background:var(--r-privilege-escalation-glow);border-color:#e23d8f66}.rule-toggle.on.unusual_logon_type{color:var(--r-unusual-logon-type);background:var(--r-unusual-logon-type-glow);border-color:#3f8fe066}.rule-toggle.on.off_hours_admin_logon{color:var(--r-off-hours-admin);background:var(--r-off-hours-admin-glow);border-color:#8f3fe066}.rule-toggle.on.account_created_then_escalated{color:var(--r-account-escalated);background:var(--r-account-escalated-glow);border-color:#e07a3f66}.rule-toggle.on.as_rep_roasting{color:var(--r-as-rep-roast);background:var(--r-as-rep-roast-glow);border-color:#d63f7a66}.rule-toggle.on.gpo_modified{color:var(--r-gpo-modified);background:var(--r-gpo-modified-glow);border-color:#2ec4b666}.rule-toggle.on.gpo_created{color:var(--r-gpo-created);background:var(--r-gpo-created-glow);border-color:#4caf5066}.rule-toggle.on.gpo_deleted{color:var(--r-gpo-deleted);background:var(--r-gpo-deleted-glow);border-color:#e64a4a66}.rule-toggle.on.gpo_content_modified{color:var(--r-gpo-content);background:var(--r-gpo-content-glow);border-color:#1b8a9466}.rule-toggle.on.dcsync_attempt,.rule-toggle.on.canary_contact{color:var(--r-dcsync);background:var(--r-dcsync-glow);border-color:#ff3b3066}.rule-toggle.on.service_installed{color:var(--r-service-installed);background:var(--r-service-installed-glow);border-color:#8d6e6366}.rule-toggle.on.account_locked_out{color:var(--r-account-locked);background:var(--r-account-locked-glow);border-color:#607d8b66}.rule-toggle.on.password_reset_on_account{color:var(--r-password-reset);background:var(--r-password-reset-glow);border-color:#5c6bc066}.rule-toggle.on.account_created{color:var(--r-account-created);background:var(--r-account-created-glow);border-color:#43a04766}.rule-toggle.on.account_enabled{color:var(--r-account-enabled);background:var(--r-account-enabled-glow);border-color:#26a69a66}.rule-toggle.on.explicit_credential_logon{color:var(--r-explicit-cred);background:var(--r-explicit-cred-glow);border-color:#ab47bc66}.rule-toggle.on.computer_account_created{color:var(--r-computer-created);background:var(--r-computer-created-glow);border-color:#7cb34266}.rule-toggle.on.unknown_switch_mac{color:var(--r-unknown-switch-mac);background:var(--r-unknown-switch-mac-glow);border-color:#ef835466}.rule-toggle.on.new_lldp_neighbor{color:var(--r-new-lldp-neighbor);background:var(--r-new-lldp-neighbor-glow);border-color:#06b6d466}.rule-toggle.on.vpn_from_blacklisted_country{color:var(--r-vpn-blacklist);background:var(--r-vpn-blacklist-glow);border-color:#4a5fd666}.rule-toggle.on.rare_ja4s{color:var(--r-rare-ja4s);background:var(--r-rare-ja4s-glow);border-color:#14b8a666}.rule-toggle.on.os_fingerprint_mismatch{color:var(--r-os-fingerprint);background:var(--r-os-fingerprint-glow);border-color:#f59e0b66}.rule-toggle.on.self_signed_cert_seen{color:var(--r-self-signed-cert);background:var(--r-self-signed-cert-glow);border-color:#dc262666}.rule-toggle.on.new_process_on_host{color:var(--r-new-process);background:var(--r-new-process-glow);border-color:#22c55e66}.rule-toggle.on.unusual_parent_process{color:var(--r-unusual-parent);background:var(--r-unusual-parent-glow);border-color:#eab30866}.rule-toggle.on.suspicious_process_command{color:var(--r-suspicious-command);background:var(--r-suspicious-command-glow);border-color:#f472b666}.rule-toggle.on.powershell_script_risk{color:var(--r-powershell-risk);background:var(--r-powershell-risk-glow);border-color:#6366f166}.rule-toggle.on.new_process_destination{color:var(--r-new-process-dest);background:var(--r-new-process-dest-glow);border-color:#38bdf866}.rule-toggle.on.agent_tamper_attempt,.rule-toggle.on.agent_stop_denied,.rule-toggle.on.agent_killed,.rule-toggle.on.agent_silent,.rule-toggle.on.agent_stopped{color:var(--r-agent-tamper);background:var(--r-agent-tamper-glow);border-color:#f9731666}.rule-toggle.on.audit_log_cleared{color:var(--r-audit-log-cleared);background:var(--r-audit-log-cleared-glow);border-color:#ff165466}.rule-toggle.on.audit_policy_changed{color:var(--r-audit-policy-changed);background:var(--r-audit-policy-changed-glow);border-color:#ff6b0066}.rule-toggle.on.account_uac_changed{color:var(--r-account-uac-changed);background:var(--r-account-uac-changed-glow);border-color:#c026d366}.rule-toggle.on.trust_relationship_modified{color:var(--r-trust-modified);background:var(--r-trust-modified-glow);border-color:#1e3a8a66}.rule-toggle.on.sid_history_added{color:var(--r-sid-history);background:var(--r-sid-history-glow);border-color:#b8860b66}.rule-toggle.on.ntlm_auth_failure{color:var(--r-ntlm-failure);background:var(--r-ntlm-failure-glow);border-color:#a0522d66}.rule-toggle.on.netlogon_script_modified{color:var(--r-netlogon-script);background:var(--r-netlogon-script-glow);border-color:#c2410c66}.findings-controls .rule-toggle.on{background:var(--surface-2);border-color:var(--border-soft)}.findings-controls .rule-toggle.on:hover,.findings-controls .rule-toggle.on:focus-visible{border-color:var(--border)}.findings-list{grid-template-columns:128px 1fr 150px max-content;display:grid}.finding{grid-template-columns:subgrid;border-bottom:1px solid var(--border-soft);grid-column:1/-1;align-items:center;gap:18px;padding:13px 20px;display:grid}.finding:last-child{border-bottom:none}.finding .severity{white-space:normal;letter-spacing:.03em;width:100%;font-size:9.5px;line-height:1.25}.severity,.auth-badge{font-family:var(--font-mono);text-transform:uppercase;letter-spacing:.05em;text-align:center;white-space:nowrap;border-radius:4px;padding:3px 8px;font-size:10.5px;font-weight:600;display:inline-block}.auth-badge.success{color:var(--ok);background:#5fbf8a29;border:1px solid #5fbf8a66}.auth-badge.failure{color:var(--crit);background:var(--crit-glow);border:1px solid #e8604c66}.auth-badge.agent-role-badge{color:var(--text-muted);background:var(--surface-2);border:1px solid var(--border);text-transform:none;letter-spacing:normal}.auth-badge.agent-tamper-badge{color:var(--r-agent-tamper);background:var(--r-agent-tamper-glow);text-transform:none;letter-spacing:normal;border:1px solid #f9731666}.feature-toggles{flex-wrap:wrap;gap:16px;margin-top:5px;display:flex}.feature-toggle{font-family:var(--font-ui);color:var(--text-faint);cursor:pointer;align-items:center;gap:7px;font-size:11.5px;display:inline-flex}.feature-toggle:hover .feature-toggle-label{color:var(--text)}.feature-toggle input{opacity:0;width:0;height:0;position:absolute}.feature-toggle-slider{background:var(--surface-2);border:1px solid var(--border);border-radius:999px;flex-shrink:0;width:30px;height:17px;transition:background .15s,border-color .15s;position:relative}.feature-toggle-slider:before{content:"";background:var(--text-faint);border-radius:50%;width:13px;height:13px;transition:transform .15s,background .15s;position:absolute;top:1px;left:1px}.feature-toggle input:checked+.feature-toggle-slider{background:var(--accent-glow,#7aa2f729);border-color:var(--accent-dim)}.feature-toggle input:checked+.feature-toggle-slider:before{background:var(--accent);transform:translate(13px)}.feature-toggle input:disabled+.feature-toggle-slider{opacity:.5}.feature-toggle.saving .feature-toggle-label{color:var(--text-muted);font-style:italic}.audit-status{font-family:var(--font-ui);color:var(--text-faint);flex-wrap:wrap;gap:14px;margin-top:6px;font-size:11px;display:flex}.audit-status .audit-warn{color:var(--warn)}.protected-paths{border-top:1px solid var(--border-soft);flex-direction:column;gap:6px;margin-top:10px;padding-top:8px;display:flex}.protected-paths-title{font-family:var(--font-ui);letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted);font-size:11px}.protected-path{flex-wrap:wrap;align-items:center;gap:10px;display:flex}.protected-path-name{font-family:var(--font-mono,monospace);color:var(--text);word-break:break-all;font-size:12px}.protected-path-offers,.protected-path-add{flex-wrap:wrap;align-items:center;gap:8px;display:flex}.protected-path-input{min-width:200px;font-family:var(--font-mono,monospace);flex:280px}.hyperv-mirror{flex-direction:column;gap:6px;margin-top:8px;display:flex}.hyperv-mirror-row{flex-wrap:wrap;align-items:center;gap:12px;display:flex}.hyperv-applied{font-family:var(--font-ui);color:var(--text-faint);font-size:11px}.severity.port_scan{color:var(--r-port-scan);background:var(--r-port-scan-glow);border:1px solid #e8604c66}.severity.host_sweep{color:var(--r-host-sweep);background:var(--r-host-sweep-glow);border:1px solid #d97a2e66}.severity.beaconing{color:var(--r-beaconing);background:var(--r-beaconing-glow);border:1px solid #d1477a66}.severity.volume_to_new_destination{color:var(--r-volume);background:var(--r-volume-glow);border:1px solid #9569d666}.severity.new_destination{color:var(--r-new-dest);background:var(--r-new-dest-glow);border:1px solid #e8a23d66}.severity.gateway_mac_change{color:var(--r-gateway);background:var(--r-gateway-glow);border:1px solid #5b8ce866}.severity.new_smb_access{color:var(--r-smb-access);background:var(--r-smb-access-glow);border:1px solid #3ecf7e66}.severity.off_hours_access{color:var(--r-off-hours);background:var(--r-off-hours-glow);border:1px solid #5f6fe066}.severity.new_privileged_port{color:var(--r-priv-port);background:var(--r-priv-port-glow);border:1px solid #d6b83d66}.severity.user_new_host{color:var(--r-user-host);background:var(--r-user-host-glow);border:1px solid #c74fd666}.severity.suspicious_user_agent{color:var(--r-suspicious-ua);background:var(--r-suspicious-ua-glow);border:1px solid #3ba8c466}.severity.github_download{color:var(--r-github-download);background:var(--r-github-download-glow);border:1px solid #8b97a866}.severity.internet_upload_volume{color:var(--r-internet-upload);background:var(--r-internet-upload-glow);border:1px solid #d97a4a66}.severity.rare_ja3{color:var(--r-rare-ja3);background:var(--r-rare-ja3-glow);border:1px solid #c17a4a66}.severity.mac_change{color:var(--r-mac-change);background:var(--r-mac-change-glow);border:1px solid #8fc23e66}.severity.smb_file_burst{color:var(--r-smb-burst);background:var(--r-smb-burst-glow);border:1px solid #d43d6366}.severity.ransomware_activity,.severity.ransomware_extension,.severity.ransomware_file_activity,.severity.canary_file_touched,.severity.agent_containment_network,.severity.agent_containment_local,.severity.recovery_inhibition,.severity.disk_encryption_started,.severity.mass_service_stop,.severity.ransom_note_dropped{color:var(--r-ransomware);background:var(--r-ransomware-glow);border:1px solid #b91c1c80}.severity.smb_admin_share_access,.severity.smb_admin_share_denied,.severity.smb_admin_share_sweep,.severity.workstation_lateral_admin{color:var(--r-lateral-movement);background:var(--r-lateral-movement-glow);border:1px solid #6d28d966}.severity.conn_failure_spike{color:var(--r-conn-failure);background:var(--r-conn-failure-glow);border:1px solid #b8a23e66}.severity.dns_tunneling,.severity.dns_bypass{color:var(--r-dns-tunnel);background:var(--r-dns-tunnel-glow);border:1px solid #b23ec966}.severity.dga_activity{color:var(--r-dga-activity);background:var(--r-dga-activity-glow);border:1px solid #ca8a0466}.severity.dns_fast_flux{color:var(--r-dns-fast-flux);background:var(--r-dns-fast-flux-glow);border:1px solid #0ea5e966}.severity.llmnr_nbtns_poisoning{color:var(--r-llmnr-poisoning);background:var(--r-llmnr-poisoning-glow);border:1px solid #f43f5e66}.severity.arp_spoofing,.severity.rogue_dhcp_server{color:var(--r-arp-spoofing);background:var(--r-arp-spoofing-glow);border:1px solid #dc262666}.severity.ldap_reconnaissance,.severity.ldap_attribute_recon,.severity.ldap_sensitive_query{color:var(--r-ldap-recon);background:var(--r-ldap-recon-glow);border:1px solid #a855f766}.severity.insecure_legacy_protocol{color:var(--r-legacy-protocol);background:var(--r-legacy-protocol-glow);border:1px solid #b0896866}.severity.cleartext_credentials,.severity.exposed_admin_service{color:var(--r-cleartext-cred);background:var(--r-cleartext-cred-glow);border:1px solid #e11d4866}.severity.volume_anomaly{color:var(--r-volume-anomaly);background:var(--r-volume-anomaly-glow);border:1px solid #4ec93e66}.severity.brute_force_login{color:var(--r-brute-force);background:var(--r-brute-force-glow);border:1px solid #e2394a66}.severity.password_spray{color:var(--r-password-spray);background:var(--r-password-spray-glow);border:1px solid #7a5ce066}.severity.kerberoasting,.severity.kerberos_rc4_downgrade{color:var(--r-kerberoasting);background:var(--r-kerberoasting-glow);border:1px solid #e0b23d66}.severity.privilege_escalation{color:var(--r-privilege-escalation);background:var(--r-privilege-escalation-glow);border:1px solid #e23d8f66}.severity.unusual_logon_type{color:var(--r-unusual-logon-type);background:var(--r-unusual-logon-type-glow);border:1px solid #3f8fe066}.severity.off_hours_admin_logon{color:var(--r-off-hours-admin);background:var(--r-off-hours-admin-glow);border:1px solid #8f3fe066}.severity.account_created_then_escalated{color:var(--r-account-escalated);background:var(--r-account-escalated-glow);border:1px solid #e07a3f66}.severity.as_rep_roasting{color:var(--r-as-rep-roast);background:var(--r-as-rep-roast-glow);border:1px solid #d63f7a66}.severity.gpo_modified{color:var(--r-gpo-modified);background:var(--r-gpo-modified-glow);border:1px solid #2ec4b666}.severity.gpo_created{color:var(--r-gpo-created);background:var(--r-gpo-created-glow);border:1px solid #4caf5066}.severity.gpo_deleted{color:var(--r-gpo-deleted);background:var(--r-gpo-deleted-glow);border:1px solid #e64a4a66}.severity.gpo_content_modified{color:var(--r-gpo-content);background:var(--r-gpo-content-glow);border:1px solid #1b8a9466}.severity.dcsync_attempt,.severity.canary_contact{color:var(--r-dcsync);background:var(--r-dcsync-glow);border:1px solid #ff3b3066}.severity.service_installed{color:var(--r-service-installed);background:var(--r-service-installed-glow);border:1px solid #8d6e6366}.severity.audit_log_cleared{color:var(--r-audit-log-cleared);background:var(--r-audit-log-cleared-glow);border:1px solid #ff165466}.severity.audit_policy_changed{color:var(--r-audit-policy-changed);background:var(--r-audit-policy-changed-glow);border:1px solid #ff6b0066}.severity.account_uac_changed{color:var(--r-account-uac-changed);background:var(--r-account-uac-changed-glow);border:1px solid #c026d366}.severity.trust_relationship_modified{color:var(--r-trust-modified);background:var(--r-trust-modified-glow);border:1px solid #1e3a8a66}.severity.sid_history_added{color:var(--r-sid-history);background:var(--r-sid-history-glow);border:1px solid #b8860b66}.severity.ntlm_auth_failure{color:var(--r-ntlm-failure);background:var(--r-ntlm-failure-glow);border:1px solid #a0522d66}.severity.netlogon_script_modified{color:var(--r-netlogon-script);background:var(--r-netlogon-script-glow);border:1px solid #c2410c66}.severity.account_locked_out{color:var(--r-account-locked);background:var(--r-account-locked-glow);border:1px solid #607d8b66}.severity.password_reset_on_account{color:var(--r-password-reset);background:var(--r-password-reset-glow);border:1px solid #5c6bc066}.severity.account_created{color:var(--r-account-created);background:var(--r-account-created-glow);border:1px solid #43a04766}.severity.account_enabled{color:var(--r-account-enabled);background:var(--r-account-enabled-glow);border:1px solid #26a69a66}.severity.explicit_credential_logon{color:var(--r-explicit-cred);background:var(--r-explicit-cred-glow);border:1px solid #ab47bc66}.severity.computer_account_created{color:var(--r-computer-created);background:var(--r-computer-created-glow);border:1px solid #7cb34266}.severity.unknown_switch_mac{color:var(--r-unknown-switch-mac);background:var(--r-unknown-switch-mac-glow);border:1px solid #ef835466}.severity.new_lldp_neighbor{color:var(--r-new-lldp-neighbor);background:var(--r-new-lldp-neighbor-glow);border:1px solid #06b6d466}.severity.vpn_from_blacklisted_country{color:var(--r-vpn-blacklist);background:var(--r-vpn-blacklist-glow);border:1px solid #4a5fd666}.severity.rare_ja4s{color:var(--r-rare-ja4s);background:var(--r-rare-ja4s-glow);border:1px solid #14b8a666}.severity.os_fingerprint_mismatch{color:var(--r-os-fingerprint);background:var(--r-os-fingerprint-glow);border:1px solid #f59e0b66}.severity.self_signed_cert_seen{color:var(--r-self-signed-cert);background:var(--r-self-signed-cert-glow);border:1px solid #dc262666}.severity.new_process_on_host{color:var(--r-new-process);background:var(--r-new-process-glow);border:1px solid #22c55e66}.severity.unusual_parent_process{color:var(--r-unusual-parent);background:var(--r-unusual-parent-glow);border:1px solid #eab30866}.severity.suspicious_process_command{color:var(--r-suspicious-command);background:var(--r-suspicious-command-glow);border:1px solid #f472b666}.severity.powershell_script_risk{color:var(--r-powershell-risk);background:var(--r-powershell-risk-glow);border:1px solid #6366f166}.severity.new_process_destination{color:var(--r-new-process-dest);background:var(--r-new-process-dest-glow);border:1px solid #38bdf866}.severity.agent_tamper_attempt,.severity.agent_stop_denied,.severity.agent_killed,.severity.agent_silent,.severity.agent_stopped{color:var(--r-agent-tamper);background:var(--r-agent-tamper-glow);border:1px solid #f9731666}.finding .desc{min-width:0}.finding-actions{gap:6px;display:flex}.finding .rule-line{white-space:normal;overflow-wrap:anywhere;font-size:13.5px;font-weight:500}.finding .rule-line .ip{font-family:var(--font-mono);color:var(--accent)}.finding .rule-line .arrow{color:var(--text-faint);margin:0 6px}.finding .rule-line .dest{font-family:var(--font-mono);color:var(--text)}.finding .rule-line .host-link{cursor:pointer;border-radius:3px;margin:0 -2px;padding:0 2px}.finding .rule-line .host-link:hover{background:var(--accent-glow);text-decoration:underline}.finding .detail-line{color:var(--text-faint);white-space:normal;overflow-wrap:break-word;margin-top:3px;font-size:12px}.finding .when{font-family:var(--font-mono);color:var(--text-faint);text-align:right;white-space:nowrap;font-size:11.5px}.alert-actions-list{grid-template-columns:max-content 1fr auto;display:grid}.alert-action{grid-template-columns:subgrid;border-bottom:1px solid var(--border-soft);grid-column:1/-1;align-items:center;gap:18px;padding:13px 20px;display:grid}.alert-action:last-child{border-bottom:none}.alert-action.is-blocked{background:#e8604c0f}.alert-action .host{font-family:var(--font-mono);color:var(--accent);cursor:pointer;white-space:nowrap;border-radius:3px;margin:0 -2px;padding:0 2px;font-size:13.5px;font-weight:600}.alert-action .host:hover{background:var(--accent-glow);text-decoration:underline}.alert-action .rule-pills{flex-direction:column;gap:6px;min-width:0;display:flex}.alert-action .rule-pills .hint{color:var(--text-faint);font-size:12.5px}.alert-finding-line{align-items:center;gap:8px;min-width:0;display:flex}.alert-finding-line .severity{flex-shrink:0}.alert-finding-details{color:var(--text-faint);text-overflow:ellipsis;white-space:nowrap;min-width:0;font-size:12px;overflow:hidden}.alert-finding-when{font-family:var(--font-mono);color:var(--text-faint);white-space:nowrap;flex-shrink:0;font-size:11px}.block-toggle{font-family:var(--font-ui);letter-spacing:.02em;cursor:pointer;white-space:nowrap;border:1px solid var(--border);color:var(--text-faint);background:0 0;border-radius:6px;padding:5px 12px;font-size:11px;font-weight:600;transition:color .15s,border-color .15s,background .15s}.block-toggle.do-block:hover,.block-toggle.do-block:focus-visible,.block-toggle.do-unblock{color:var(--crit);background:var(--crit-glow);border-color:#e8604c66}.block-toggle.do-unblock:hover,.block-toggle.do-unblock:focus-visible{color:var(--ok);background:#3ecf7e14;border-color:#3ecf7e66}.block-toggle:disabled{opacity:.5;cursor:default}.port-action-toggle{font-family:var(--font-ui);letter-spacing:.02em;cursor:pointer;white-space:nowrap;border:1px solid var(--border);color:var(--text-faint);background:0 0;border-radius:6px;padding:5px 12px;font-size:11px;font-weight:600;transition:color .15s,border-color .15s,background .15s}.port-action-toggle.do-shutdown:hover,.port-action-toggle.do-shutdown:focus-visible{color:var(--crit);background:var(--crit-glow);border-color:#e8604c66}.port-action-toggle.do-enable{color:var(--warn);background:var(--warn-glow);border-color:#e8a23d66}.port-action-toggle.do-enable:hover,.port-action-toggle.do-enable:focus-visible{color:var(--ok);background:#3ecf7e14;border-color:#3ecf7e66}.port-action-toggle:disabled{opacity:.5;cursor:default}.table-controls{border-bottom:1px solid var(--border-soft);gap:10px;padding:14px 20px;display:flex}.search-box{flex:1;max-width:420px;position:relative}.search-box input{background:var(--bg);border:1px solid var(--border);width:100%;color:var(--text);font-family:var(--font-mono);border-radius:7px;outline:none;padding:9px 12px 9px 32px;font-size:13px;transition:border-color .15s}.search-box input:focus{border-color:var(--accent-dim)}.search-box input::placeholder{color:var(--text-faint)}.search-box svg{width:14px;height:14px;color:var(--text-faint);pointer-events:none;position:absolute;top:50%;left:10px;transform:translateY(-50%)}.table-scroll{overflow-x:auto}table.flows{border-collapse:collapse;width:100%;font-family:var(--font-mono);font-size:12.5px}table.flows th{text-align:left;font-family:var(--font-ui);text-transform:uppercase;letter-spacing:.06em;color:var(--text-faint);border-bottom:1px solid var(--border-soft);white-space:nowrap;background:var(--surface);padding:10px 14px;font-size:11px;font-weight:600;position:sticky;top:0}table.flows td{border-bottom:1px solid var(--border-soft);white-space:nowrap;color:var(--text);padding:9px 14px}table.flows tbody tr:hover{background:var(--surface-2)}table.flows tbody tr:last-child td{border-bottom:none}table.flows td.dim{color:var(--text-faint)}table.flows td.meta{text-overflow:ellipsis;max-width:240px;color:var(--text-muted);overflow:hidden}.proto-pill{background:var(--surface-2);border:1px solid var(--border);color:var(--text-muted);border-radius:4px;padding:2px 7px;font-size:10.5px;font-weight:600;display:inline-block}.gw-pill{font-family:var(--font-ui);letter-spacing:.03em;background:var(--accent-glow);color:var(--accent);border:1px solid var(--accent-dim);border-radius:4px;margin-left:6px;padding:2px 6px;font-size:10px;font-weight:600;display:inline-block}.empty-state,.error-state{text-align:center;color:var(--text-faint);padding:40px 20px;font-size:13px}.error-state{color:var(--crit)}.error-state code{font-family:var(--font-mono);color:var(--text-muted);margin-top:8px;font-size:12px;display:block}.back-link{color:var(--text-muted);font-family:var(--font-ui);cursor:pointer;background:0 0;border:none;align-items:center;gap:6px;margin-bottom:18px;padding:0;font-size:13px;display:inline-flex}.back-link:hover,.back-link:focus-visible{color:var(--accent)}.host-header{justify-content:space-between;align-items:flex-start;gap:16px;margin-bottom:22px;display:flex}.host-header h2{margin:0 0 6px;font-size:22px;font-weight:700}.host-header .host-sub{font-family:var(--font-mono);color:var(--text-muted);flex-wrap:wrap;gap:6px 14px;font-size:12.5px;display:flex}.host-header .host-sub .username-pill{color:var(--accent)}.switch-port-line{align-items:center;margin-top:6px}.switch-port-line .host-link{color:var(--accent);cursor:pointer;border-radius:3px;margin:0 -2px;padding:0 2px}.switch-port-line .host-link:hover{background:var(--accent-glow);text-decoration:underline}.graph-wrap{justify-content:center;padding:8px 20px 4px;display:flex}.comm-graph{width:100%;max-width:760px;height:auto}.comm-graph .node-center circle{fill:var(--surface-2);stroke:var(--accent);stroke-width:2px}.comm-graph .node-peer circle{fill:var(--surface-2);stroke-width:1.5px}.comm-graph .node-peer.out circle{stroke:var(--accent-dim)}.comm-graph .node-peer.in circle{stroke:var(--r-gateway)}.comm-graph text{font-family:var(--font-mono)}.comm-graph .node-center-label{fill:var(--text);font-family:var(--font-ui);font-size:13px;font-weight:700}.comm-graph .node-label{fill:var(--text-muted);font-size:10.5px}.comm-graph .node-sub{fill:var(--text-faint);font-size:9px}.comm-graph .node-peer{cursor:pointer}.comm-graph .node-peer:hover circle{fill:var(--surface)}.graph-legend{color:var(--text-faint);justify-content:center;gap:20px;padding:2px 20px 18px;font-size:11.5px;display:flex}.graph-legend .legend-item{align-items:center;gap:7px;display:flex}.graph-legend .legend-swatch{border-radius:2px;width:16px;height:3px}.traffic-filters{border-bottom:1px solid var(--border-soft);flex-wrap:wrap;align-items:center;gap:10px;padding:12px 20px;display:flex}.dir-pill{letter-spacing:.03em;border-radius:4px;margin-right:6px;padding:2px 6px;font-size:10px;font-weight:700;display:inline-block}.dir-pill.out{background:var(--accent-glow);color:var(--accent)}.dir-pill.in{background:var(--r-gateway-glow);color:var(--r-gateway)}.comm-log{flex-direction:column;display:flex}.comm-log-row{border-left:3px solid #0000;border-bottom:1px solid var(--border-soft);align-items:flex-start;gap:14px;padding:11px 20px 11px 17px;display:flex}.comm-log-row:last-child{border-bottom:none}.comm-log-row:hover{background:var(--surface-2)}.comm-log-row.flagged{border-left-color:var(--row-accent,var(--warn))}.comm-log-main .finding-pill{border-radius:4px;margin-left:6px;padding:1px 6px;font-size:9.5px}.comm-log-main .severity,.comm-log-main .auth-badge,.comm-log-main .gw-pill,.comm-log-main .smb-pill,.comm-log-main .count-pill{margin-left:6px;margin-right:6px}.comm-log-main>.severity:first-child,.comm-log-main>.auth-badge:first-child{margin-left:0}.comm-log-time{width:118px;font-family:var(--font-mono);color:var(--text-faint);flex-shrink:0;padding-top:2px;font-size:11px}.comm-log-dir{text-align:center;flex-shrink:0;width:16px;font-size:14px;line-height:1.4}.comm-log-dir.out{color:var(--accent)}.comm-log-dir.in{color:var(--r-gateway)}.comm-log-body{flex:1;min-width:0}.comm-log-main{color:var(--text);font-size:13px;line-height:1.4}.comm-log-main b{font-weight:600}.comm-log-main .peer{font-family:var(--font-mono);color:var(--accent)}.comm-log-sub{color:var(--text-faint);overflow-wrap:anywhere;margin-top:2px;font-size:12px;font-style:italic}.sub-toggle{color:var(--accent-dim);cursor:pointer;background:0 0;border:none;margin-top:3px;padding:0;font-size:11px;font-weight:600}.sub-toggle:hover,.sub-toggle:focus-visible{color:var(--accent)}.smb-pill{font-family:var(--font-mono);letter-spacing:.03em;background:var(--r-beaconing-glow);color:var(--r-beaconing);border-radius:4px;margin-left:6px;padding:1px 6px;font-size:10px;font-weight:700;display:inline-block}.count-pill{font-family:var(--font-mono);background:var(--surface-2);color:var(--text-muted);border:1px solid var(--border);cursor:help;border-radius:4px;padding:1px 6px;font-size:10px;font-weight:600;display:inline-block}.nac-tiles{grid-template-columns:repeat(3,1fr)}.health-tiles{grid-template-columns:repeat(3,1fr);margin-bottom:20px}.nac-page-hint{margin:0;padding:16px 20px 0}.nac-status-pill{font-family:var(--font-ui);letter-spacing:.03em;border-radius:10px;padding:2px 8px;font-size:10.5px;font-weight:600;display:inline-block}.nac-status-pill.known{color:var(--accent);background:var(--accent-glow);border:1px solid var(--accent-dim)}.nac-status-pill.unknown{color:var(--crit);background:var(--crit-glow);border:1px solid var(--crit)}.nac-table .dim{color:var(--text-faint)}.nac-table{table-layout:fixed}table.nac-table th{white-space:normal;line-height:1.3}.nac-table .nac-col-check{width:3%}.nac-table .nac-col-device{width:20%}.nac-table .nac-col-switch{width:12%}.nac-table .nac-col-port{width:18%}.nac-table .nac-col-vlan{width:5%}.nac-table .nac-col-status{width:9%}.nac-table .nac-col-label{width:11%}.nac-table .nac-col-lastseen{width:10%}.nac-table .nac-col-actions{width:12%}.nac-table td{vertical-align:top}.nac-mac{font-weight:600}.nac-subline{text-overflow:ellipsis;white-space:nowrap;margin-top:2px;font-size:11px;display:block;overflow:hidden}.nac-expected-vlan{margin-top:2px;font-size:11px;display:block}.nac-actions{white-space:nowrap;align-items:center;gap:8px;display:flex}.nac-inline-form{margin:0 20px 16px}.nac-notes-field{grid-column:1/-1}.nac-approve-overlay{z-index:20;background:#00000073;justify-content:center;align-items:flex-start;padding-top:12vh;display:flex;position:fixed;inset:0}.nac-approve-overlay .nac-inline-form{background:var(--surface);width:min(480px,90vw);margin:0;box-shadow:0 10px 40px #00000059}.nac-policy{flex-direction:column;align-items:flex-start;gap:14px;display:flex}.nac-vlan-field{width:180px}footer{border-top:1px solid var(--border-soft);color:var(--text-faint);flex-wrap:wrap;justify-content:space-between;gap:8px;margin-top:36px;padding-top:20px;font-size:12px;display:flex}@media (width<=900px){.tiles,.nac-tiles,.health-tiles{grid-template-columns:repeat(2,1fr)}.finding{grid-template-columns:1fr;gap:6px}.finding .when{text-align:left}header{flex-wrap:wrap}.global-search{flex-basis:100%;order:3;max-width:none;margin:4px 0 0}}