:root {
  --purple-900: #380D6F;
  --purple-700: #6740BA;
  --purple-500: #A077F8;
  --purple-300: #D9C3FF;
  --purple-200: #ECE0FC;
  --purple-100: #F3EAFF;
  --purple-50: #F0E8FA;
  --purple-25: #FAF7FF;
  --red-500: #EF5366;
  --red-300: #F5858F;
  --red-100: #FFE8E6;
  --ink: #000000;
  --paper: #FFFFFF;
  --amber: #B8860B;
  --amber-bg: #FFF6E0;
  --green: #1E8A4C;
  --green-bg: #E7F7EE;
}

* { box-sizing: border-box; }

body {
  margin: 0;
  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
  background: var(--purple-25);
  color: var(--ink);
}

#app { min-height: 100vh; display: flex; flex-direction: column; }

/* ---- Top bar ---- */
header.topbar {
  background: linear-gradient(120deg, var(--purple-900), var(--purple-700));
  color: var(--paper);
  padding: 14px 24px;
  display: flex;
  align-items: center;
  justify-content: space-between;
  flex-wrap: wrap;
  gap: 10px;
}
header.topbar h1 { font-size: 18px; margin: 0; font-weight: 600; }
header.topbar .user-info { display: flex; align-items: center; gap: 12px; font-size: 14px; }
header.topbar a.logout {
  color: var(--purple-200); text-decoration: none; border: 1px solid var(--purple-300);
  padding: 4px 10px; border-radius: 6px; font-size: 13px;
}
header.topbar a.logout:hover { background: rgba(255,255,255,0.1); }

nav.tabs {
  display: flex; gap: 4px; background: var(--purple-900);
  padding: 0 24px; flex-wrap: wrap;
}
nav.tabs button {
  background: none; border: none; color: var(--purple-200); padding: 10px 16px;
  cursor: pointer; font-size: 14px; border-bottom: 3px solid transparent;
}
nav.tabs button.active { color: var(--paper); border-bottom-color: var(--purple-500); font-weight: 600; }
nav.tabs button:hover { color: var(--paper); }

main { flex: 1; padding: 24px; max-width: 1600px; margin: 0 auto; width: 100%; }

.tab-panel { display: none; }
.tab-panel.active { display: block; }

/* ---- Cards ---- */
.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 14px; margin-bottom: 22px; }
.card {
  background: var(--paper); border: 1px solid var(--purple-200); border-radius: 10px;
  padding: 16px 18px;
}
.card .label { font-size: 12px; color: var(--purple-700); text-transform: uppercase; letter-spacing: .04em; margin-bottom: 6px; }
.card .value { font-size: 26px; font-weight: 700; color: var(--purple-900); }
.card .sub { font-size: 12px; color: #666; margin-top: 4px; }

section.block {
  background: var(--paper); border: 1px solid var(--purple-200); border-radius: 10px;
  padding: 18px 20px; margin-bottom: 20px;
}
section.block h2 { margin: 0 0 12px 0; font-size: 16px; color: var(--purple-900); display: flex; align-items: center; justify-content: space-between; }
section.block h2 .actions { display: flex; gap: 8px; }

/* ---- Buttons ----
   Class-based (not tag-qualified) on purpose: applied to <button>, <a>
   (Export CSV / template download links), and <label> (the Import CSV
   file-input trigger) alike, so all three look identical. */
.btn {
  display: inline-block; background: var(--purple-700); color: var(--paper); border: none; border-radius: 6px;
  padding: 8px 14px; font-size: 13px; cursor: pointer; font-weight: 500; text-decoration: none;
}
.btn:hover { background: var(--purple-900); color: var(--paper); }
.btn.secondary { background: var(--paper); color: var(--purple-700); border: 1px solid var(--purple-300); }
.btn.secondary:hover { background: var(--purple-100); color: var(--purple-700); }
.btn.danger { background: var(--red-500); }
.btn.danger:hover { background: #d63b4d; }
.btn.small { padding: 4px 9px; font-size: 12px; }

/* ---- Toolbar (search + filter) ---- */
.toolbar { display: flex; gap: 10px; margin-bottom: 12px; flex-wrap: wrap; }
.toolbar input[type=text] {
  flex: 1; min-width: 220px; padding: 7px 10px; border: 1px solid var(--purple-300); border-radius: 6px; font-size: 13px;
}
.toolbar select {
  padding: 7px 10px; border: 1px solid var(--purple-300); border-radius: 6px; font-size: 13px; background: var(--paper);
}

/* ---- Tables ---- */
table { width: 100%; border-collapse: collapse; font-size: 13px; }
table th { text-align: left; padding: 8px 10px; background: var(--purple-100); color: var(--purple-900); font-weight: 600; white-space: nowrap; }
table th[data-sort-key] { cursor: pointer; user-select: none; }
table th[data-sort-key]:hover { background: var(--purple-200); }
table th .sort-arrow { margin-left: 4px; color: var(--purple-500); }
table td { padding: 8px 10px; border-bottom: 1px solid var(--purple-100); vertical-align: middle; }
table tbody tr.clickable-row { cursor: pointer; }
table tr:hover td { background: var(--purple-25); }
.table-wrap { overflow-x: auto; }
/* Actions column (Edit/Delete) must never wrap onto two lines — with more
   columns now (Tags, etc.) a narrow viewport was squeezing it and blowing
   up row height. Let the table scroll horizontally instead (.table-wrap
   above already does that) rather than wrapping buttons. */
table td:last-child { white-space: nowrap; }
table td:last-child .btn { margin: 2px 4px 2px 0; }

/* Domains table has grown to 11 columns (Tags, Added by, etc. added over
   time) — left to auto-size, that forced horizontal scrolling even on wide
   screens. table-layout: fixed + explicit percentage widths makes it always
   fill its container instead; overflow-wrap lets any long single-token value
   (a long domain name, a script filename in "Added by") wrap onto a second
   line rather than stretching the column or the table. */
#domains-table { table-layout: fixed; }
/* Override the generic "table th { white-space: nowrap }" above — with
   narrow fixed-width columns, header labels like "DNS provider" and "SSL
   expiry" would otherwise refuse to wrap and spill sideways into the next
   header instead. */
#domains-table th, #domains-table td { overflow-wrap: break-word; word-break: break-word; white-space: normal; }
#domains-table th:nth-child(1), #domains-table td:nth-child(1) { width: 13%; }  /* Domain */
#domains-table th:nth-child(2), #domains-table td:nth-child(2) { width: 8%; }   /* Tags */
#domains-table th:nth-child(3), #domains-table td:nth-child(3) { width: 6%; }   /* Added by */
#domains-table th:nth-child(4), #domains-table td:nth-child(4) { width: 14%; }  /* Registrar */
#domains-table th:nth-child(5), #domains-table td:nth-child(5) { width: 10%; }  /* Expiry */
#domains-table th:nth-child(6), #domains-table td:nth-child(6) { width: 6%; }   /* Auto-renew */
#domains-table th:nth-child(7), #domains-table td:nth-child(7) { width: 9%; }   /* DNS provider */
#domains-table th:nth-child(8), #domains-table td:nth-child(8) { width: 6%; }   /* WHOIS privacy */
#domains-table th:nth-child(9), #domains-table td:nth-child(9) { width: 9%; }   /* SSL expiry */
#domains-table th:nth-child(10), #domains-table td:nth-child(10) { width: 6%; } /* Cost */
#domains-table th:nth-child(11), #domains-table td:nth-child(11) { width: 13%; white-space: nowrap; } /* Actions */

.badge { display: inline-block; padding: 2px 9px; border-radius: 999px; font-size: 12px; font-weight: 600; }
.badge.ok { background: var(--green-bg); color: var(--green); }
.badge.warning { background: var(--amber-bg); color: var(--amber); }
.badge.critical { background: var(--red-100); color: var(--red-500); }
.badge.expired { background: var(--red-500); color: var(--paper); }
.badge.unknown { background: var(--purple-100); color: var(--purple-700); }

.muted { color: #888; font-size: 12px; }
a.link { color: var(--purple-700); }

.tag-pill {
  display: inline-block; background: var(--purple-100); color: var(--purple-700);
  border-radius: 999px; padding: 1px 8px; font-size: 11px; font-weight: 600;
  margin: 1px 2px 1px 0; white-space: nowrap;
}

/* ---- Modal ---- */
.modal-backdrop {
  position: fixed; inset: 0; background: rgba(56,13,111,0.35);
  display: flex; align-items: flex-start; justify-content: center;
  padding: 40px 16px; overflow-y: auto; z-index: 50;
}
.modal {
  background: var(--paper); border-radius: 12px; padding: 22px 24px; width: 100%; max-width: 560px;
}
.modal h3 { margin-top: 0; color: var(--purple-900); }
.form-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
.form-grid .full { grid-column: 1 / -1; }
.form-grid label { display: block; font-size: 12px; color: var(--purple-700); margin-bottom: 4px; font-weight: 600; }
.form-grid input[type=text], .form-grid input[type=date], .form-grid input[type=number], .form-grid input[type=email], .form-grid input[type=url], .form-grid select, .form-grid textarea {
  width: 100%; padding: 7px 9px; border: 1px solid var(--purple-300); border-radius: 6px; font-size: 13px;
}
.form-grid textarea { resize: vertical; min-height: 50px; }
.checkbox-row { display: flex; align-items: center; gap: 6px; margin-top: 20px; }
.modal-footer { display: flex; justify-content: flex-end; gap: 8px; margin-top: 18px; }

/* Scrollable checkbox list used by the per-Viewer "Manage domains" modal. */
.domain-picker { max-height: 320px; overflow-y: auto; border: 1px solid var(--purple-200); border-radius: 6px; padding: 4px 10px; }
.domain-picker label { display: flex; align-items: center; gap: 8px; padding: 5px 0; font-size: 13px; }
.domain-picker label:not(:last-child) { border-bottom: 1px solid var(--purple-25); }
.domain-picker-toolbar { display: flex; align-items: center; gap: 14px; margin-bottom: 8px; }
.domain-picker-toolbar .muted { margin-left: auto; font-size: 12px; }
.link-btn {
  background: none; border: none; padding: 0; cursor: pointer;
  color: var(--purple-700); font-size: 12px; font-weight: 600; text-decoration: underline;
}
.link-btn:hover { color: var(--purple-900); }

/* ---- Login screen ---- */
.login-screen {
  min-height: 100vh; display: flex; align-items: center; justify-content: center;
  background: linear-gradient(135deg, var(--purple-900), var(--purple-700));
}
.login-card {
  background: var(--paper); border-radius: 14px; padding: 40px; text-align: center; max-width: 380px;
}
.login-card h1 { color: var(--purple-900); font-size: 20px; }
.login-card p { color: #555; font-size: 14px; }
.login-card a.btn { display: inline-block; text-decoration: none; margin-top: 12px; }

.toast {
  position: fixed; bottom: 20px; right: 20px; background: var(--purple-900); color: var(--paper);
  padding: 12px 18px; border-radius: 8px; font-size: 13px; z-index: 100; max-width: 340px;
}
.toast.error { background: var(--red-500); }
.toast.success { background: var(--green); }

.empty-state { color: #888; font-size: 13px; padding: 14px 0; }

/* ---- Live-verification / audit additions ---- */
.verified-line { font-size: 11px; margin-top: 2px; font-weight: 400; }
.cost-breakdown { font-size: 18px; line-height: 1.35; }

/* The per-row ↻ refresh button spins while its request is in flight. */
.btn.spinning { opacity: .6; pointer-events: none; }
.btn.spinning { animation: spin 0.9s linear infinite; }
@keyframes spin { to { transform: rotate(360deg); } }

td.nowrap, .nowrap { white-space: nowrap; }
.audit-changes { font-size: 12px; }
.audit-changes .diff-line { padding: 1px 0; }
.audit-changes .diff-field { font-weight: 600; color: var(--purple-700); }
#audit-table td { vertical-align: top; }

/* ---- Viewer role (read-only, no cost data) ---- */
/* Hides admin-only controls/columns client-side; the actual access control
   (auth over the API) is enforced server-side regardless of this CSS. */
body.viewer-mode .admin-only { display: none !important; }