:root {
  --navy: #132b50;
  --navy-2: #244574;
  --blue: #174bd6;
  --blue-hover: #1039ad;
  --blue-soft: #edf2ff;
  --bg: #f2f5fa;
  --panel: #ffffff;
  --border: #ccd5e3;
  --border-strong: #73849f;
  --text: #14243d;
  --muted: #4c5d76;
  --red: #b32639;
  --red-soft: #fff0f2;
  --amber: #825000;
  --amber-soft: #fff4db;
  --green: #174bd6;
  --green-soft: #edf2ff;
  --violet: #31548a;
  --violet-soft: #edf2f9;
  --focus: #174bd6;
  --on-accent: #ffffff;
  --shadow: 0 12px 28px rgba(19, 43, 80, .08);
  --mono: ui-monospace, "SFMono-Regular", "Cascadia Mono", Consolas, "Liberation Mono", monospace;
  --sans: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
  color-scheme: light;
}

@media (prefers-color-scheme: dark) {
  :root {
    --navy: #071426;
    --navy-2: #244574;
    --blue: #82aeff;
    --blue-hover: #a6c5ff;
    --blue-soft: #192f55;
    --bg: #0b1525;
    --panel: #111f35;
    --border: #30405a;
    --border-strong: #7187a8;
    --text: #eaf0fb;
    --muted: #b1bfd5;
    --red: #ff9aa4;
    --red-soft: #3e2530;
    --amber: #ebc580;
    --amber-soft: #362f23;
    --green: #82aeff;
    --green-soft: #192f55;
    --violet: #acc6f2;
    --violet-soft: #20324e;
    --focus: #acc6f2;
    --on-accent: #0b1a31;
    --shadow: 0 18px 50px rgba(0, 0, 0, .12);
    color-scheme: dark;
  }
}

.challenge-question { min-width: 0; margin: 1.5rem 0; padding: 1.25rem; border: 1px solid var(--border-strong); border-radius: 14px; background: var(--panel); }
.challenge-question legend { font-weight: 650; overflow-wrap: anywhere; }
.challenge-option { display: block; padding: .75rem 0; cursor: pointer; }
.challenge-option input { accent-color: var(--blue); }
.challenge-citations { font-family: var(--mono); font-size: .85rem; overflow-wrap: anywhere; }
.challenge-answer { border-top: 1px solid var(--border); margin-top: 1rem; padding-top: 1rem; }
#challenge-content { overflow-wrap: anywhere; }

* { box-sizing: border-box; }
html { -webkit-text-size-adjust: 100%; }
body { margin: 0; background: var(--bg); color: var(--text); font: 16px/1.65 var(--sans); }
h1, h2, h3, h4 { line-height: 1.25; margin: 0 0 .65rem; font-weight: 650; text-wrap: balance; }
h1 { font-size: clamp(2.35rem, 4.3vw, 4rem); letter-spacing: -.055em; }
h2 { font-size: 1.65rem; letter-spacing: -.025em; }
h3 { font-size: 1.2rem; letter-spacing: -.015em; }
h4 { font-size: 1rem; margin-top: 1.75rem; }
p { margin: 0 0 .85rem; }
a { color: var(--blue); text-underline-offset: .2em; }
a:hover { color: var(--blue-hover); }
code, .mono { font-family: var(--mono); font-size: .88em; }
:focus-visible { outline: 3px solid var(--focus); outline-offset: 3px; }
[hidden] { display: none !important; }
.visually-hidden { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }
.skip-link { position: absolute; left: 1rem; top: -8rem; z-index: 10; padding: .75rem 1rem; background: var(--panel); border: 1px solid var(--focus); }
.skip-link:focus { top: 1rem; }
.wrap { max-width: 1240px; margin: 0 auto; padding: 0 32px; }
.muted { color: var(--muted); }
.small { font-size: .875rem; }
.eyebrow { font: 600 .73rem/1.5 var(--mono); text-transform: uppercase; letter-spacing: .1em; color: var(--blue); margin-bottom: 1.15rem; }
main, section, .panel, .actions > *, .filter-row > * { min-width: 0; }
main { overflow-wrap: anywhere; }

/* top bar */
.topbar { background: var(--bg); color: var(--text); border-bottom: 1px solid var(--border); }
.topbar-inner { display: flex; align-items: center; justify-content: space-between; gap: 2rem; min-height: 82px; }
.brand { display: flex; align-items: center; gap: .7rem; color: var(--text); text-decoration: none; flex-shrink: 0; }
.brand:hover { color: var(--blue); }
.brand-mark { width: 33px; height: 33px; color: var(--blue); }
.brand-name { font-weight: 750; font-size: 1.4rem; letter-spacing: -.04em; }
.topbar-note { margin: 0; color: var(--muted); font-size: .8rem; max-width: 32rem; text-align: right; }

main.wrap { padding-top: 36px; padding-bottom: 56px; }
.panel { background: var(--panel); border: 1px solid var(--border); border-radius: 8px; padding: 28px 30px; margin-bottom: 20px; }
.panel-head { margin-bottom: 24px; }
.panel-head p { margin-bottom: 0; }
.panel-head .eyebrow { margin-bottom: .75rem; }
.example-entry { margin-top: 2rem; max-width: 29rem; }
.example-entry p { margin: .8rem 0 0; }
.example-notice { border-left: 4px solid var(--amber); background: var(--amber-soft); font-size: .9rem; }
.example-notice strong { font: 650 .75rem var(--mono); letter-spacing: .08em; color: var(--amber); }
.example-notice p { margin: .5rem 0 0; }

/* upload */
.workspace-entry { display: grid; grid-template-columns: minmax(0, 1.08fr) minmax(0, 1fr); gap: 32px 56px; align-items: start; padding-top: 28px; }
.entry-intro { padding: 24px 0; }
.entry-intro h1 span { color: var(--blue); }
.entry-lead { max-width: 32rem; color: var(--muted); font-size: 1.13rem; margin-top: 1.5rem; }
.entry-caption { font: .78rem/1.7 var(--mono); color: var(--violet); margin: 1.75rem 0 0; }
.analysis-card { border-top: 4px solid var(--blue); box-shadow: var(--shadow); margin: 0; }
.drop { display: flex; flex-direction: column; align-items: center; justify-content: center; gap: .7rem; min-height: 195px; padding: 24px; border: 1.5px dashed var(--border-strong); border-radius: 6px; background: var(--bg); cursor: pointer; text-align: center; }
.drop-icon { width: 48px; height: 48px; color: var(--blue); }
.drop:hover, .drop.over { border-color: var(--blue); background: var(--blue-soft); }
.drop:focus-within { outline: 3px solid var(--focus); outline-offset: 3px; }
.drop-main { color: var(--text); }
.link-like { color: var(--blue); text-decoration: underline; text-underline-offset: .2em; }
.drop-file { font-family: var(--mono); font-size: .9rem; overflow-wrap: anywhere; max-width: 100%; }
.options { min-width: 0; border: 0; margin: 24px 0 0; padding: 0; }
.options legend { font-weight: 650; margin-bottom: .35rem; padding: 0; }
.check { display: flex; gap: .6rem; align-items: baseline; margin: .35rem 0; cursor: pointer; }
.check input { accent-color: var(--blue); flex-shrink: 0; }
.notice { margin: .75rem 0 0; padding: .75rem 1rem; font-size: .875rem; border-left: 3px solid var(--amber); background: var(--amber-soft); border-radius: 0 8px 8px 0; }
.actions { display: flex; flex-wrap: wrap; align-items: center; gap: .75rem; margin-top: 24px; }
.button { display: inline-flex; align-items: center; justify-content: center; gap: .6rem; font: inherit; font-weight: 600; cursor: pointer; min-height: 44px; padding: .65rem 1rem; border-radius: 5px; border: 1px solid var(--border-strong); background: var(--panel); color: var(--text); text-align: center; }
.button:hover { border-color: var(--blue); color: var(--blue); background: var(--blue-soft); }
.button.primary { background: var(--blue); border-color: var(--blue); color: var(--on-accent); }
.button.primary:hover { background: var(--blue-hover); border-color: var(--blue-hover); color: var(--on-accent); }
.button:disabled { opacity: .5; cursor: not-allowed; }
.example-button { background: var(--panel); border-color: var(--blue); color: var(--blue); }
#submit { flex: 1 1 100%; }
.facts { grid-column: 1 / -1; display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 28px; margin: 8px 0 0; padding: 28px 0 0; border-top: 1px solid var(--border); color: var(--muted); font-size: .9rem; list-style: none; }
.facts li { margin: 0; padding-left: 1rem; border-left: 2px solid var(--border-strong); }
.facts strong { display: block; color: var(--text); font-weight: 650; margin-bottom: .4rem; }

/* progress and errors */
.progress-bar { height: 4px; background: var(--blue-soft); border-radius: 2px; overflow: hidden; margin-bottom: 20px; }
.progress-bar span { display: block; height: 100%; width: 35%; background: var(--blue); animation: slide 1.4s ease-in-out infinite; }
@keyframes slide { from { transform: translateX(-100%); } to { transform: translateX(290%); } }
@media (prefers-reduced-motion: reduce) { .progress-bar span { animation: none; width: 100%; } }
.error { border-color: var(--red); }
.error h2 { color: var(--red); }

/* result header */
.result-head { border-top: 4px solid var(--blue); box-shadow: var(--shadow); }
.result-title { display: flex; flex-wrap: wrap; align-items: center; gap: .75rem; margin-bottom: 12px; }
.result-title h2 { flex: 1 1 100%; margin: 0 0 .25rem; font-size: clamp(1.4rem, 3vw, 2.2rem); overflow-wrap: anywhere; }
.badge, .score, .chip, .count { display: inline-block; border-radius: 5px; padding: .15rem .55rem; font-size: .8rem; font-weight: 600; }
.badge { border: 1px solid var(--border-strong); color: var(--muted); }
.badge.completed { border-color: var(--border-strong); color: var(--text); background: var(--bg); }
.badge.partial { border-color: var(--amber); color: var(--amber); background: var(--amber-soft); }
.badge.failed { border-color: var(--red); color: var(--red); background: var(--red-soft); }
.score { font-family: var(--mono); border: 1px solid var(--border-strong); }
.score.hit { border-color: var(--red); color: var(--red); background: var(--red-soft); }
.score.clean { border-color: var(--border-strong); color: var(--text); background: var(--bg); }
.vt-status { display: flex; flex-wrap: wrap; align-items: center; gap: .65rem; margin: 0 0 16px; padding: .75rem 1rem; border-radius: 5px; border: 1px solid var(--border); background: var(--bg); font-size: .92rem; }
.vt-status.busy { border-color: var(--blue); background: var(--blue-soft); }
.vt-status.hit { border-color: var(--red); background: var(--red-soft); }
.vt-status.clean { border-color: var(--border-strong); background: var(--bg); }
.vt-dot { width: 9px; height: 9px; border-radius: 50%; background: var(--muted); flex: none; }
.vt-status.busy .vt-dot { background: var(--blue); animation: pulse 1.2s ease-in-out infinite; }
.vt-status.hit .vt-dot { background: var(--red); }
.vt-status.clean .vt-dot { background: var(--muted); }
@keyframes pulse { 50% { opacity: .25; } }
@media (prefers-reduced-motion: reduce) { .vt-status.busy .vt-dot { animation: none; } }
.link-button { font: inherit; border: 0; background: none; color: var(--blue); cursor: pointer; padding: .2rem 0; text-decoration: underline; text-underline-offset: .2em; }
.hashes { display: grid; grid-template-columns: minmax(7rem, max-content) minmax(0, 1fr); gap: .65rem 1.5rem; margin: 1.5rem 0 0; padding-top: 1.25rem; border-top: 1px solid var(--border); font-size: .9rem; }
.hashes dt { color: var(--muted); }
.hashes dd { min-width: 0; margin: 0; display: flex; gap: .65rem; align-items: baseline; }
.hashes dd > span { min-width: 0; overflow-wrap: anywhere; }
.header-meta { font-family: var(--mono); font-size: .85rem; color: var(--muted); }
.header-finding { font-family: var(--sans); }
.header-ref { font: 600 .82rem var(--mono); border: 0; padding: .2rem .25rem; border-radius: 4px; background: var(--blue-soft); color: var(--blue); cursor: pointer; text-decoration: underline; text-underline-offset: .15em; }
.header-ref:hover { background: var(--blue); color: var(--on-accent); }
.copy { flex-shrink: 0; font: inherit; font-size: .75rem; padding: .15rem .45rem; border: 1px solid var(--border-strong); border-radius: 5px; background: none; color: var(--muted); cursor: pointer; }
.copy:hover { color: var(--blue); border-color: var(--blue); }

/* tabs */
.tabs { display: flex; flex-wrap: wrap; gap: .4rem; padding: 18px 0; margin: 0; }
.tabs [role="tab"] { min-width: 0; max-width: 100%; font: inherit; font-size: .9rem; font-weight: 600; cursor: pointer; color: var(--muted); background: var(--panel); border: 1px solid var(--border); border-radius: 8px; padding: .7rem .9rem; overflow-wrap: anywhere; }
.tabs [role="tab"]:hover { color: var(--text); border-color: var(--border-strong); }
.tabs [role="tab"][aria-selected="true"] { color: var(--blue); background: var(--blue-soft); border-color: var(--blue); box-shadow: inset 0 -2px var(--blue); }
.count { background: var(--bg); color: var(--muted); margin-left: .2rem; font: .75rem var(--mono); }
.pane { min-height: 16rem; }

/* search and filter */
.filter { margin: 28px 0 0; padding: 22px 26px; }
.filter-label { display: block; font-size: 1rem; font-weight: 650; margin-bottom: .7rem; }
.filter-row { display: flex; flex-wrap: wrap; align-items: center; gap: .85rem; }
.search { flex: 1 1 300px; min-width: 0; width: 100%; font: inherit; padding: .75rem .9rem; border: 1px solid var(--border-strong); border-radius: 8px; background: var(--bg); color: var(--text); }
.search::placeholder { color: var(--muted); }
.segmented { display: inline-flex; flex-wrap: wrap; gap: .25rem; padding: .25rem; border: 1px solid var(--border-strong); border-radius: 5px; }
.segmented button { font: inherit; font-size: .9rem; font-weight: 600; cursor: pointer; padding: .5rem .75rem; border: 0; border-radius: 5px; background: var(--panel); color: var(--muted); }
.segmented button:first-child { border-left: 0; }
.segmented button:hover { color: var(--text); }
.segmented button[aria-pressed="true"] { background: var(--blue); color: var(--on-accent); }
.filter-note { margin: .85rem 0 0; }
#filter-count { display: block; font-family: var(--mono); color: var(--violet); margin-bottom: .3rem; }
.filter-note strong { color: var(--text); font-weight: 600; }
.topic { margin: 2rem 0 0; }
.topic:first-child { margin-top: .6rem; }
.topic > h3 { padding: .7rem 0; border-bottom: 2px solid var(--border); }
.level { font-size: .72rem; font-weight: 650; padding: .15rem .5rem; border-radius: 5px; border: 1px solid var(--border-strong); color: var(--muted); }
.level.observed { border-color: var(--blue); color: var(--blue); background: var(--blue-soft); }
.level.inferred { border-color: var(--violet); color: var(--violet); background: var(--violet-soft); }

/* downloads menu and guide */
.ghidra-help { min-width: 0; max-width: 100%; }
.ghidra-help > summary { list-style: none; }
.ghidra-help > summary::-webkit-details-marker { display: none; }
.ghidra-help > summary::after { content: "+"; font-family: var(--mono); }
.ghidra-help[open] { flex: 1 1 100%; }
.ghidra-help[open] > summary { border-color: var(--blue); color: var(--blue); }
.ghidra-help[open] > summary::after { content: "−"; }
.ghidra-help-body { margin-top: 1rem; padding: 1.25rem; background: var(--bg); border: 1px solid var(--border); border-left: 3px solid var(--blue); border-radius: 4px; font-size: .95rem; }
.ghidra-help-body > p:last-child { margin: 1rem 0 0; }
.ghidra-steps { display: block; margin: 1rem 0; padding-left: 1.5rem; }
.ghidra-steps li { padding-left: .3rem; margin: .85rem 0; }
.ghidra-steps li::marker { font-family: var(--mono); color: var(--blue); }
.menu { position: relative; }
.menu > summary { list-style: none; display: inline-flex; user-select: none; }
.menu > summary::-webkit-details-marker { display: none; }
.menu > summary::after { content: " ▾"; color: var(--muted); }
.menu[open] > summary { border-color: var(--blue); color: var(--blue); }
.menu-list { position: absolute; z-index: 5; top: calc(100% + 8px); left: 0; width: 19rem; max-width: calc(100vw - 64px); display: flex; flex-direction: column; padding: 8px; background: var(--panel); border: 1px solid var(--border-strong); border-radius: 6px; box-shadow: 0 12px 32px rgba(11, 31, 63, .18); }
.menu-list button { font: inherit; font-size: .9rem; text-align: left; cursor: pointer; padding: .75rem .8rem; border: 0; border-radius: 6px; background: none; color: var(--text); overflow-wrap: anywhere; }
.menu-list button:hover:not(:disabled) { background: var(--blue-soft); color: var(--blue); }
.menu-list button:disabled { opacity: .5; cursor: not-allowed; }
.guide { margin-bottom: 2rem; padding: 1.25rem 1.5rem; border: 1px solid var(--border); border-left: 3px solid var(--violet); border-radius: 6px; background: var(--bg); }
.guide h3 { margin-bottom: 1rem; }
.steps { display: block; margin: 0; padding-left: 1.3rem; font-size: .93rem; }
.steps li { margin: .65rem 0; padding-left: .3rem; max-width: 90ch; }
.steps li::marker { color: var(--violet); font-family: var(--mono); }
.steps li.done::marker { color: var(--green); }
.steps li.done .link-button { color: var(--green); }
.steps li.done .link-button::after { content: " ✓"; }
.challenge-question legend .level { font-weight: 600; }

/* summary */
.tactic { margin: 1.5rem 0 0; }
.tactic h4 { margin: 0 0 .7rem; font: 600 .78rem var(--mono); text-transform: uppercase; letter-spacing: .06em; color: var(--muted); }
.capability { border: 1px solid var(--border); border-left: 3px solid var(--blue); border-radius: 10px; padding: 1rem 1.25rem; margin: .75rem 0; }
.capability p { margin: 0; }
.chips { display: flex; flex-wrap: wrap; gap: .45rem; margin-top: .65rem; }
.chip { font-family: var(--mono); font-weight: 500; background: var(--blue-soft); color: var(--blue); overflow-wrap: anywhere; }
.chips .chip { white-space: normal; overflow-wrap: anywhere; }
.chip.plain { background: none; color: var(--muted); border: 1px solid var(--border-strong); }
button.chip { border: 0; cursor: pointer; font-size: .8rem; }
button.chip:hover { text-decoration: underline; }
.empty { color: var(--muted); font-style: italic; }
.warnings, .notes { margin: 0; padding: 0; list-style: none; }
.warnings li, .notes li { padding: .75rem 1rem; margin: .5rem 0; border-left: 3px solid var(--border-strong); background: var(--bg); border-radius: 0 8px 8px 0; font-size: .92rem; }
.warnings li { border-left-color: var(--amber); }

/* items */
.items { list-style: none; margin: 0; padding: 0; }
.item { border: 1px solid var(--border); border-radius: 6px; padding: 1.4rem; margin-top: 1rem; scroll-margin-top: 1.5rem; }
.item:first-child { margin-top: 1rem; }
.item:focus { outline: 3px solid var(--focus); outline-offset: 3px; }
.item-head { display: flex; flex-wrap: wrap; gap: .6rem; align-items: center; margin-bottom: .75rem; }
.item-id { font-family: var(--mono); font-size: .8rem; font-weight: 650; color: var(--blue); }
.item-rule { font-family: var(--mono); font-size: .75rem; color: var(--muted); margin-left: auto; }
.statement { margin: 0 0 .8rem; max-width: 85ch; }
.extra { margin: .75rem 0; font-size: .9rem; }
.extra-label { color: var(--muted); }
.values { list-style: none; margin: .4rem 0 0; padding: 0; }
.values li { font-family: var(--mono); font-size: .82rem; padding: .5rem .75rem; margin: .25rem 0; background: var(--bg); border-radius: 6px; overflow-wrap: anywhere; white-space: pre-wrap; }
.more { font: inherit; font-size: .85rem; border: 0; background: none; color: var(--blue); cursor: pointer; padding: .45rem 0; text-decoration: underline; text-underline-offset: .2em; }
.limit { font-size: .9rem; color: var(--muted); margin: 1rem 0 0; padding: .8rem 1rem; border-left: 2px solid var(--amber); background: var(--bg); border-radius: 0 6px 6px 0; }
.limit strong { color: var(--text); font-weight: 650; }
.refs { display: flex; flex-wrap: wrap; gap: .45rem; align-items: center; margin-top: .85rem; font-size: .8rem; color: var(--muted); }

/* VirusTotal */
.vt-stats { display: flex; flex-wrap: wrap; gap: .75rem; margin: 1rem 0; }
.vt-stat { border: 1px solid var(--border); border-radius: 10px; padding: .75rem 1rem; min-width: 110px; background: var(--bg); }
.vt-stat b { display: block; font-size: 1.5rem; font-family: var(--mono); }
.vt-stat.malicious.hit b { color: var(--red); }
.vt-stat.suspicious.hit b { color: var(--amber); }
.vt-table { width: 100%; table-layout: fixed; border-collapse: collapse; font-size: .9rem; margin: .75rem 0 1rem; }
.vt-table th, .vt-table td { text-align: left; vertical-align: top; padding: .65rem .5rem; border-top: 1px solid var(--border); overflow-wrap: anywhere; }
.vt-table th { color: var(--muted); font-weight: 500; width: 30%; }
.vt-table td { overflow-wrap: anywhere; }

/* glossary */
.entry { border-top: 1px solid var(--border); padding: 1.4rem 0; }
.entry:first-child { border-top: 0; padding-top: 0; }
.entry h3 { margin-bottom: .5rem; }
.entry.flash { background: var(--blue-soft); transition: background 1.2s; }
@media (prefers-reduced-motion: reduce) { .entry.flash { transition: none; } }
.sources { margin: .75rem 0 0; padding-left: 1.1rem; font-size: .88rem; }

.absence { color: var(--muted); font-size: .9rem; margin: 1.5rem 0; max-width: 90ch; }
.footer { border-top: 1px solid var(--border); padding: 28px 0 36px; color: var(--muted); font-size: .85rem; }
.footer p { margin: 0; max-width: 880px; }
.footer .credit { margin-top: .75rem; }

@media (max-width: 960px) {
  .workspace-entry { grid-template-columns: minmax(0, 1fr); gap: 28px; padding-top: 0; }
  .entry-intro { padding: 8px 0; }
  .entry-intro h1 { max-width: 16ch; }
  .entry-lead { max-width: 42rem; }
  .facts { gap: 18px; }
}
@media (max-width: 640px) {
  .wrap { padding-left: 20px; padding-right: 20px; }
  .topbar-inner { min-height: 68px; }
  .topbar-note { display: none; }
  main.wrap { padding-top: 24px; }
  .panel { padding: 20px 18px; border-radius: 8px; }
  .facts { grid-template-columns: minmax(0, 1fr); }
  .facts { padding-top: 24px; }
  .hashes { grid-template-columns: minmax(0, 1fr); gap: .3rem; }
  .hashes dt { margin-top: .6rem; }
  .tabs [role="tab"] { padding: .65rem .75rem; }
  .filter { padding: 20px 18px; }
  .menu { flex: 1 1 100%; }
  .menu-list { width: 100%; max-width: 100%; }
  .item { padding: 1rem; }
  .item-rule { margin-left: 0; }
  .guide { padding: 1rem; }
  .example-button { width: 100%; }
}

.privacy { max-width: 800px; }
.privacy h2 { margin-top: 2rem; }
.privacy ul { padding-left: 1.25rem; margin-bottom: 1.25rem; }
.privacy li { margin-bottom: .45rem; }