/* Lab: what TLS inspection actually sees.
   Scoped to this one page. Every class is prefixed .tls- so it cannot
   collide with the site stylesheet or with another lab. Design tokens
   (--accent, --bg-raised, --mono ...) come from /css/style.css.

   Colour meaning throughout: red = readable by anything on the path,
   amber = parameters rather than content, green = encrypted. Red is the
   alarming one on purpose — this is a page about what leaks. */

/* ---------- glossary ---------- */

.tls-glossary { margin: 10px 0 0 20px; font-size: 0.92rem; }
.tls-glossary li { margin: 7px 0; color: var(--text-muted); }
.tls-glossary strong { color: var(--text); font-family: var(--mono); font-size: 0.9em; }

/* ---------- controls ---------- */

.tls-controls { margin-top: 32px; }

.tls-control-row {
  display: grid;
  grid-template-columns: 3fr 1fr;
  gap: 14px;
  align-items: end;
}
@media (max-width: 560px) {
  .tls-control-row { grid-template-columns: 1fr; }
}

.tls-control-row input[type="text"],
.tls-control-row select {
  width: 100%;
  background: var(--bg);
  border: 1px solid var(--border);
  border-radius: 6px;
  color: var(--text);
  font-family: var(--mono);
  font-size: 0.95rem;
  padding: 10px 12px;
}
.tls-control-row input[type="text"]:focus,
.tls-control-row select:focus { outline: none; border-color: var(--accent); }

.tls-presets { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 12px; }

.tls-preset {
  background: none;
  border: 1px dashed var(--border);
  border-radius: 999px;
  color: var(--text-muted);
  font-family: var(--mono);
  font-size: 0.78rem;
  padding: 4px 12px;
  cursor: pointer;
}
.tls-preset:hover { border-color: var(--accent); border-style: solid; color: var(--accent); }

.tls-modes {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 12px;
  border: none;
  margin-top: 22px;
}
@media (max-width: 560px) {
  .tls-modes { grid-template-columns: 1fr; }
}
.tls-modes legend { margin-bottom: 8px; }

.tls-mode {
  display: block;
  border: 1px solid var(--border);
  border-radius: 8px;
  background: var(--bg-raised);
  padding: 12px 16px;
  cursor: pointer;
}
.tls-mode:hover { border-color: var(--text-muted); }
.tls-mode input { accent-color: var(--accent); margin-right: 8px; }
.tls-mode-name { font-family: var(--mono); font-size: 0.92rem; font-weight: 700; }
.tls-mode-sub {
  display: block;
  font-size: 0.82rem;
  color: var(--text-muted);
  margin-top: 4px;
  padding-left: 24px;
}
.tls-mode:has(input:checked) { border-color: var(--accent); }

.tls-status {
  font-family: var(--mono);
  font-size: 0.8rem;
  color: var(--text-muted);
  margin-top: 14px;
  min-height: 1.2em;
}
.tls-status-error { color: var(--accent); }
.tls-status-ok { color: var(--text-muted); }

/* ---------- the path diagram ---------- */

.tls-diagram-wrap { margin: 34px 0 8px; }

.tls-diagram {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 10px;
  background: var(--bg-inset);
  border: 1px solid var(--border);
  border-radius: 8px;
  padding: 20px 18px;
  font-family: var(--mono);
  font-size: 0.82rem;
}

.tls-node {
  border: 1px solid var(--border);
  border-radius: 6px;
  background: var(--bg-raised);
  padding: 8px 14px;
  white-space: nowrap;
  overflow-wrap: anywhere;
}
.tls-node-client { border-color: var(--text-muted); }
.tls-node-proxy { border-color: var(--accent); color: var(--accent); }
.tls-node-origin { border-color: var(--allow); color: var(--allow); }

.tls-hop {
  display: flex;
  flex-direction: column;
  align-items: center;
  flex: 1 1 150px;
  min-width: 140px;
  gap: 2px;
}
.tls-hop-line { color: var(--text-muted); letter-spacing: 0.1em; }
.tls-hop-private .tls-hop-line { color: var(--accent); }
.tls-hop-public .tls-hop-line { color: var(--allow); }
.tls-hop-label { font-size: 0.7rem; color: var(--text-muted); text-align: center; }

.tls-diagram-caption {
  font-family: var(--mono);
  font-size: 0.78rem;
  color: var(--text-muted);
  margin-top: 8px;
}

/* ---------- stages ---------- */

.tls-stage {
  border: 1px solid var(--border);
  border-left: 4px solid var(--border);
  border-radius: 8px;
  background: var(--bg-raised);
  padding: 16px 20px;
  margin: 14px 0;
}
.tls-stage-clear { border-left-color: var(--accent); }
.tls-stage-metadata { border-left-color: #d9a03f; }
.tls-stage-opaque { border-left-color: var(--allow); }
.tls-stage-skipped { border-left-color: var(--text-muted); }

.tls-pending { opacity: 0; transform: translateY(6px); }
.tls-in {
  opacity: 1;
  transform: none;
  transition: opacity 0.25s ease-out, transform 0.25s ease-out;
}
@media (prefers-reduced-motion: reduce) {
  .tls-pending { opacity: 1; transform: none; }
  .tls-in { transition: none; }
}

.tls-stage-head { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }

.tls-stage-num {
  font-family: var(--mono);
  font-size: 0.72rem;
  color: var(--text-muted);
  border: 1px solid var(--border);
  border-radius: 4px;
  padding: 1px 7px;
}
.tls-stage-title { font-size: 1rem; margin: 0; }

.tls-badge {
  font-family: var(--mono);
  font-size: 0.68rem;
  text-transform: uppercase;
  letter-spacing: 0.08em;
  border: 1px solid var(--border);
  border-radius: 4px;
  padding: 2px 8px;
  color: var(--text-muted);
  margin-left: auto;
}
.tls-badge-clear { border-color: var(--accent); color: var(--accent); }
.tls-badge-metadata { border-color: #d9a03f; color: #d9a03f; }
.tls-badge-opaque { border-color: var(--allow); color: var(--allow); }

.tls-stage-leg {
  font-family: var(--mono);
  font-size: 0.75rem;
  color: var(--text-muted);
  margin: 4px 0 0;
}

.tls-panel {
  border: 1px solid var(--border);
  border-radius: 6px;
  background: var(--bg-inset);
  padding: 12px 14px;
  margin-top: 14px;
}
/* the wire panel keeps the default solid border — the rule exists so the
   class is deliberate rather than a leftover hook */
.tls-panel-wire { border-style: solid; }
.tls-panel-endpoint { border-style: dashed; }

.tls-mini-label {
  display: block;
  font-family: var(--mono);
  font-size: 0.68rem;
  text-transform: uppercase;
  letter-spacing: 0.08em;
  color: var(--text-muted);
  margin-bottom: 6px;
}

.tls-panel-summary { font-size: 0.88rem; margin: 0 0 10px; }

.tls-field {
  display: grid;
  grid-template-columns: 190px 1fr;
  gap: 10px;
  font-family: var(--mono);
  font-size: 0.78rem;
  padding: 3px 0;
  border-top: 1px solid var(--border);
}
.tls-field:first-of-type { border-top: none; }
@media (max-width: 560px) {
  .tls-field { grid-template-columns: 1fr; gap: 0; }
}

.tls-field-label { color: var(--text-muted); }
.tls-field-value { overflow-wrap: anywhere; }
.tls-field-hidden {
  color: var(--text-muted);
  font-style: italic;
  background: repeating-linear-gradient(
    45deg, transparent, transparent 5px,
    color-mix(in srgb, var(--allow) 16%, transparent) 5px,
    color-mix(in srgb, var(--allow) 16%, transparent) 10px);
  border-radius: 3px;
  padding: 0 4px;
}
.tls-field-absent { color: var(--text-muted); font-style: italic; }

.tls-stage-note { font-size: 0.92rem; color: var(--text-muted); margin-top: 14px; }

/* ---------- certificate block ---------- */

.tls-cert {
  border: 1px solid var(--border);
  border-left: 3px solid var(--allow);
  border-radius: 6px;
  padding: 10px 12px;
  margin-top: 8px;
  background: var(--bg-raised);
}
.tls-cert-private { border-left-color: var(--accent); }

.tls-chain {
  display: flex;
  flex-direction: column;
  align-items: flex-start;
  gap: 1px;
  margin-top: 12px;
  font-family: var(--mono);
  font-size: 0.74rem;
}
.tls-chain-link {
  border: 1px solid var(--border);
  border-radius: 4px;
  padding: 3px 9px;
  color: var(--text-muted);
  overflow-wrap: anywhere;
}
.tls-chain-leaf { color: var(--text); border-color: var(--text-muted); }
.tls-chain-arrow { color: var(--text-muted); padding-left: 12px; line-height: 1; }

/* ---------- plaintext / records ---------- */

.tls-exchange { margin-top: 8px; }
.tls-exchange .tls-mini-label { margin-top: 12px; }

.tls-plaintext {
  background: var(--bg-raised);
  border: 1px solid var(--accent);
  border-radius: 6px;
  padding: 10px 12px;
  font-size: 0.76rem;
  margin: 4px 0 0;
  white-space: pre-wrap;
  overflow-wrap: anywhere;
}

.tls-records {
  background: var(--bg-raised);
  border: 1px solid var(--border);
  border-radius: 6px;
  padding: 10px 12px;
  font-size: 0.72rem;
  color: var(--text-muted);
  margin: 10px 0 0;
  white-space: pre-wrap;
  overflow-wrap: anywhere;
}

/* ---------- comparison matrix ---------- */

.tls-section-heading { margin-top: 46px; }
.tls-section-lede { color: var(--text-muted); font-size: 0.95rem; }

.tls-matrix {
  width: 100%;
  border-collapse: collapse;
  font-family: var(--mono);
  font-size: 0.8rem;
  margin-top: 16px;
  background: var(--bg-inset);
  border: 1px solid var(--border);
  border-radius: 8px;
  overflow: hidden;
}
.tls-matrix th, .tls-matrix td {
  text-align: left;
  padding: 10px 14px;
  border-bottom: 1px solid var(--border);
  vertical-align: top;
}
.tls-matrix thead th {
  color: var(--text-muted);
  font-weight: 400;
  text-transform: uppercase;
  font-size: 0.68rem;
  letter-spacing: 0.08em;
}
.tls-matrix tbody th { color: var(--text); font-weight: 700; width: 30%; }
.tls-matrix tbody td { color: var(--text-muted); }
.tls-matrix tr:last-child th, .tls-matrix tr:last-child td { border-bottom: none; }

/* rows that differ are the default look; the identical row is the one that
   gets called out, because it is the point of the whole page */
.tls-row-diff td { color: var(--text-muted); }
.tls-row-same td { background: color-mix(in srgb, var(--accent) 8%, transparent); color: var(--text); }
.tls-row-same th::after {
  content: " — identical";
  color: var(--accent);
  font-weight: 400;
  font-size: 0.9em;
}

/* ---------- consequences and caveats ---------- */

.tls-consequences {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
  gap: 14px;
  margin-top: 16px;
}

.tls-consequence {
  border: 1px solid var(--border);
  border-radius: 8px;
  background: var(--bg-raised);
  padding: 14px 16px;
}
.tls-consequence h4 { font-family: var(--mono); font-size: 0.88rem; margin-bottom: 6px; }
.tls-consequence p { font-size: 0.88rem; color: var(--text-muted); }

.tls-caveat {
  border: 1px solid var(--border);
  border-left: 3px solid #d9a03f;
  border-radius: 6px;
  background: var(--bg-raised);
  padding: 14px 18px;
  margin: 14px 0;
}
.tls-caveat h3 { font-size: 0.95rem; margin-bottom: 6px; }
.tls-caveat p { font-size: 0.92rem; color: var(--text-muted); }

.tls-sources { margin: 16px 0 0 22px; font-size: 0.9rem; }
.tls-sources li { margin: 8px 0; }
.tls-source-note { color: var(--text-muted); font-size: 0.88em; }