/* The Web Security simulators. Opened full screen or in an iframe, which
   cannot see the site's own light/dim switch, so they follow the reader's
   system preference, as the TCP, NAT and OSPF demos do. */

:root {
  --bg: #ffffff;
  --card: #ffffff;
  --border: #dfe3e8;
  --text: #22272e;
  --dim: #5f6b78;
  --accent: #0077b8;
  --btn: #f4f5f7;
  --panel: #0d2436;
  --panel-text: #eaf1f6;
  --line: #9aa8b4;
  --client: #c96a12;
  --server: #2f62cc;
  --ok: #1f8a45;
  --warn: #b7791f;
  --bad: #d23b3b;
  --secret: #8e44c9;
  --flash: rgba(255, 196, 0, 0.3);
  --raw: #f7f8fa;
}
@media (prefers-color-scheme: dark) {
  :root {
    --bg: #0b1d2b;
    --card: #112b40;
    --border: #234862;
    --text: #eaf1f6;
    --dim: #9fb2c2;
    --accent: #4fb3ff;
    --btn: #16374f;
    --panel: #081b29;
    --panel-text: #eaf1f6;
    --line: #5b7382;
    --client: #f0a050;
    --server: #7ea6ff;
    --ok: #5fd38a;
    --warn: #f2c14e;
    --bad: #ff6b6b;
    --secret: #c79bff;
    --flash: rgba(255, 196, 0, 0.18);
    --raw: #0d2233;
  }
}

* { box-sizing: border-box; }
body {
  margin: 0;
  background: var(--bg);
  color: var(--text);
  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
}
code, .ws-raw { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
.dim { color: var(--dim); font-weight: 400; }
.ws-app { padding: 0.5rem 16px 1.5rem; max-width: 1500px; margin: 0 auto; }
.ws-head { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.2rem 0.9rem; margin: 0 0 0.45rem; }
.ws-head h1 { font-size: 1.3rem; margin: 0; letter-spacing: -0.01em; }
.ws-head p { margin: 0; color: var(--dim); font-size: 0.92rem; }
.in-viewer .ws-head { display: none; } /* the viewer page's top bar holds it */

/* --- controls */
.ws-bar { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem 0.75rem; }
.ws-btn {
  background: var(--btn); color: var(--text); border: 1px solid var(--border);
  border-radius: 8px; padding: 0.35rem 0.9rem; font-size: 0.88rem; cursor: pointer; font-family: inherit;
}
.ws-btn:hover:not(:disabled) { border-color: var(--accent); }
.ws-btn:disabled { opacity: 0.45; cursor: default; }
.ws-btn.play { background: var(--accent); border-color: var(--accent); color: #fff; font-weight: 600; min-width: 6rem; }
.ws-btn.go { border-color: var(--accent); color: var(--accent); font-weight: 600; }
.ws-btn.bad { border-color: var(--bad); color: var(--bad); }
.ws-btn.tiny { padding: 0.05rem 0.45rem; font-size: 0.74rem; border-radius: 5px; }
.ws-app select, .ws-app input:not([type]), .ws-app input[type=text] {
  background: var(--btn); color: var(--text); border: 1px solid var(--border); border-radius: 7px;
  padding: 0.3rem 0.4rem; font-size: 0.86rem; font-family: inherit; min-width: 0;
}
.ws-app input:not([type]):focus { outline: 2px solid var(--accent); outline-offset: -1px; }

/* --- what the current step did */
.ws-say {
  display: flex; gap: 0.9rem; align-items: baseline; margin: 0.5rem 0;
  background: var(--panel); color: var(--panel-text); border-radius: 8px; padding: 0.5rem 0.9rem;
  border-left: 5px solid var(--accent);
  /* A fixed height, so a longer step does not move the buttons under the pointer. */
  height: 5.4rem; overflow-y: auto;
}
@media (max-width: 640px) { .ws-say { height: auto; min-height: 5.4rem; } }
.ws-say.ok { border-left-color: var(--ok); }
.ws-say.warn { border-left-color: var(--warn); }
.ws-say.bad { border-left-color: var(--bad); }
.ws-say .n { font-family: ui-monospace, Menlo, monospace; font-size: 0.78rem; opacity: 0.7; white-space: nowrap; }
.ws-say p { margin: 0; }
.ws-say .main { font-size: 1.12rem; font-weight: 600; line-height: 1.3; margin-bottom: 0.2rem; }
.ws-say .more { font-size: 0.9rem; line-height: 1.4; opacity: 0.92; }

/* --- the stage: slots placed by stage.js */
.ws-stage { display: grid; gap: 0.75rem; align-items: start; }
@media (max-width: 860px) {
  .ws-stage { grid-template-columns: minmax(0, 1fr) !important; }
  .ws-slot { grid-column: auto !important; grid-row: auto !important; }
}
.ws-slot, .ws-box { border: 1px solid var(--border); border-radius: 12px; background: var(--card); padding: 0.65rem 0.8rem; font-size: 0.86rem; min-width: 0; }
.ws-slot h2 { display: flex; align-items: center; gap: 0.4rem; font-size: 1rem; margin: 0 0 0.5rem; }
.ws-slot h2 code { font-size: 0.8rem; color: var(--dim); font-weight: 400; }
.ws-slot h2 .dot { width: 0.7rem; height: 0.7rem; border-radius: 50%; background: var(--c); }
.ws-slot h3 { font-size: 0.72rem; text-transform: uppercase; letter-spacing: 0.04em; color: var(--dim); margin: 0.8rem 0 0.35rem; }
.ws-slot h3 .dim, .ws-slot h3 code { text-transform: none; letter-spacing: 0; }
.ws-box h2 { font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.04em; color: var(--dim); margin: 0 0 0.45rem; }
.ws-box h2 .sub { text-transform: none; letter-spacing: 0; font-weight: 400; margin-left: 0.4rem; }
.ws-client { --c: var(--client); border-top: 4px solid var(--c); }
.ws-server { --c: var(--server); border-top: 4px solid var(--c); }

/* --- the client */
.seg { display: inline-flex; border: 1px solid var(--border); border-radius: 8px; overflow: hidden; margin-bottom: 0.55rem; }
.seg label { padding: 0.25rem 0.7rem; cursor: pointer; font-size: 0.84rem; }
.seg input { position: absolute; opacity: 0; pointer-events: none; }
.seg label:has(input:checked) { background: var(--c); color: #fff; font-weight: 600; }
.seg label:has(input:focus-visible) { outline: 2px solid var(--accent); }
.req { display: flex; flex-wrap: wrap; align-items: center; gap: 0.35rem; }
.req .url { font-family: ui-monospace, Menlo, Consolas, monospace; font-size: 0.8rem; color: var(--dim); }
.req select { font-family: ui-monospace, Menlo, Consolas, monospace; }
.wait { margin: 0.4rem 0 0; color: var(--accent); font-size: 0.8rem; }
.bw { border: 1px solid var(--border); border-radius: 10px; overflow: hidden; margin-top: 0.1rem; }
.bw-bar { display: flex; align-items: center; gap: 0.35rem; padding: 0.3rem 0.45rem; background: var(--btn); border-bottom: 1px solid var(--border); flex-wrap: wrap; }
.bw-bar .insecure { font-size: 0.72rem; color: var(--bad); font-weight: 600; white-space: nowrap; }
.bw-bar select { padding: 0.15rem 0.3rem !important; font-size: 0.8rem !important; }
.bw-view { position: relative; min-height: 14rem; background: var(--card); padding: 0.6rem 0.75rem; }
.bw-wait { color: var(--dim); margin: 0; font-size: 0.82rem; }
.bw-text { margin: 0; font-size: 0.78rem; white-space: pre-wrap; overflow-wrap: anywhere; }
.bw-html h1 { font-size: 1.15rem; margin: 0 0 0.3rem; }
.bw-html p { margin: 0; }
.bw-shade { position: absolute; inset: 0; background: rgba(0, 0, 0, 0.35); }
.bw-dialog {
  position: absolute; left: 50%; top: 0.6rem; transform: translateX(-50%); width: min(92%, 19rem);
  background: var(--card); border: 1px solid var(--border); border-radius: 10px; padding: 0.7rem 0.8rem;
  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.35); display: grid; gap: 0.35rem; animation: pop 0.2s ease-out;
}
@keyframes pop { from { transform: translateX(-50%) scale(0.94); opacity: 0; } }
@media (prefers-reduced-motion: reduce) { .bw-dialog { animation: none; } }
.bw-dialog > b { font-size: 1rem; }
.bw-dialog .org { font-size: 0.8rem; color: var(--dim); }
.bw-dialog .warnline { font-size: 0.74rem; color: var(--dim); margin-bottom: 0.2rem; }
.bw-dialog label { display: grid; gap: 0.1rem; font-size: 0.76rem; color: var(--dim); }
.bw-dialog input { font-family: ui-monospace, Menlo, Consolas, monospace !important; }
.bw-dialog .btns { display: flex; justify-content: flex-end; gap: 0.4rem; margin-top: 0.25rem; }
.bw-dialog .btns .ws-btn { min-width: 0; padding: 0.3rem 0.8rem; }
.req { margin-top: 0.45rem; }
.req .dim { font-size: 0.76rem; }
.term { background: #0d1117; color: #d6deeb; border-radius: 10px; padding: 0.55rem 0.7rem; font-family: ui-monospace, Menlo, Consolas, monospace; font-size: 0.8rem; line-height: 1.7; }
.term .pr { color: #7ee787; }
.term input.t, .term select { background: #1b2430 !important; color: #ffd580 !important; border: 1px solid #30363d !important; border-radius: 4px !important; padding: 0 0.25rem !important; font: inherit !important; width: 6.5rem; }
.term .out { color: #b8c4d0; white-space: pre-wrap; overflow-wrap: anywhere; min-height: 1.5rem; margin-top: 0.2rem; }
.mem { margin-top: 0 !important; }
.mem { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 0.3rem 0.7rem; margin: 0; align-items: baseline; }
.mem dt { color: var(--dim); font-size: 0.78rem; }
.mem dd { margin: 0; overflow-wrap: anywhere; }
.st { font-family: ui-monospace, Menlo, Consolas, monospace; font-weight: 700; }
.st.s2 { color: var(--ok); }
.st.s4 { color: var(--bad); }

/* --- the server */
.reply { display: flex; flex-wrap: wrap; align-items: center; gap: 0.3rem 0.6rem; margin-bottom: 0.6rem; padding: 0.45rem 0.55rem; border: 1px solid var(--border); border-radius: 10px; }
.reply small { color: var(--dim); font-size: 0.78rem; }
.reply.due { border-color: var(--accent); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 22%, transparent); }
.field { display: flex; align-items: center; gap: 0.5rem; font-size: 0.8rem; color: var(--dim); }
.field input { font-family: ui-monospace, Menlo, Consolas, monospace !important; width: 9rem; }
.users, .sess { width: 100%; border-collapse: collapse; }
.users td, .sess td { padding: 0.12rem 0.2rem; }
.users td:first-child { width: 34%; }
.users td:last-child, .sess td:last-child { width: 1%; text-align: right; }
.users input { width: 100%; font-family: ui-monospace, Menlo, Consolas, monospace !important; padding: 0.15rem 0.35rem !important; }
.users tr.add input { border-style: dashed; }
.check { display: flex; gap: 0.4rem; align-items: flex-start; margin-top: 0.55rem; font-size: 0.82rem; line-height: 1.35; }
.check input { accent-color: var(--accent); margin-top: 0.15rem; }
.nothing { margin: 0; font-weight: 600; }
.trace { list-style: none; margin: 0; padding: 0; counter-reset: t; }
.trace li { display: grid; grid-template-columns: 1.2rem minmax(0, 9.5rem) minmax(0, 1fr); gap: 0.4rem; padding: 0.12rem 0; border-bottom: 1px dashed var(--border); counter-increment: t; font-size: 0.8rem; }
.trace li::before { content: counter(t); color: var(--dim); font-size: 0.72rem; }
.trace li span { color: var(--dim); }
.trace li code { overflow-wrap: anywhere; }
.trace li.ok code { color: var(--ok); font-weight: 700; }
.trace li.bad code { color: var(--bad); font-weight: 700; }
.trace li.warn code { color: var(--warn); font-weight: 700; }

/* --- the wire and the message on it */
.ws-wire { background: transparent; border-style: dashed; }
.wire-head { font-size: 0.78rem; color: var(--dim); margin-bottom: 0.45rem; text-align: center; }
.wire-head code { color: var(--bad); font-weight: 700; }
.ws-empty { color: var(--dim); text-align: center; padding: 2.5rem 0.5rem; }
.ws-msg .dir { display: flex; justify-content: space-between; align-items: center; font-size: 0.8rem; font-weight: 700; margin-bottom: 0.35rem; }
.ws-msg .dir span:first-child { color: var(--client); }
.ws-msg .dir span:last-child { color: var(--server); }
.ws-msg .dir .arrow { font-family: ui-monospace, Menlo, Consolas, monospace; font-weight: 600; white-space: nowrap; }
.ws-msg.to-right .dir .arrow { color: var(--client); }
.ws-msg.to-left .dir .arrow { color: var(--server); }
.ws-msg.to-right { animation: in-right 0.35s ease-out; }
.ws-msg.to-left { animation: in-left 0.35s ease-out; }
@keyframes in-right { from { transform: translateX(-24px); opacity: 0; } }
@keyframes in-left { from { transform: translateX(24px); opacity: 0; } }
@media (prefers-reduced-motion: reduce) { .ws-msg.to-right, .ws-msg.to-left { animation: none; } }
.ws-raw { background: var(--raw); border: 1px solid var(--border); border-left: 5px solid var(--client); border-radius: 8px; padding: 0.35rem 0; font-size: 0.82rem; line-height: 1.45; }
.to-left .ws-raw { border-left-color: var(--server); }
.ws-raw .ln { padding: 0.08rem 0.65rem; cursor: pointer; border-left: 3px solid transparent; }
.ws-raw .ln:hover { background: color-mix(in srgb, var(--flash) 45%, transparent); }
.ws-raw .ln.open { background: color-mix(in srgb, var(--flash) 60%, transparent); border-left-color: var(--accent); }
.ws-raw .tx { white-space: pre-wrap; overflow-wrap: anywhere; }
.ws-raw .start .tx { font-weight: 700; }
.ws-raw .sm { color: var(--accent); }
.ws-raw .sc.s2 { color: var(--ok); }
.ws-raw .sc.s4 { color: var(--bad); }
.ws-raw .hn { color: var(--dim); }
.ws-raw .key .hn { color: var(--secret); font-weight: 700; }
.ws-raw .key .hv { font-weight: 700; }
.ws-raw .body .tx { color: var(--dim); }
.ws-raw .sub { font-family: -apple-system, 'Segoe UI', Roboto, sans-serif; font-size: 0.8rem; color: var(--secret); padding-left: 1.2rem; }
.ws-raw .sub::before { content: '↳ '; }
.ws-raw .note { font-family: -apple-system, 'Segoe UI', Roboto, sans-serif; font-size: 0.84rem; line-height: 1.4; margin: 0.3rem 0 0.2rem; padding: 0.4rem 0.55rem; background: var(--card); border: 1px solid var(--border); border-radius: 6px; }
.ws-msg .hint { margin: 0.35rem 0 0; font-size: 0.74rem; color: var(--dim); text-align: center; }

/* --- the sequence of messages */
.ws-seqbox { margin-top: 0.75rem; }
.ws-seq { max-height: 360px; overflow: auto; }
.ws-seq svg { display: block; width: 100%; min-width: 560px; }
.ws-seq .life { stroke: var(--line); stroke-width: 2; }
.ws-seq .who { font-size: 12px; font-weight: 700; fill: var(--text); }
.ws-seq .srow { cursor: pointer; }
.ws-seq .band { fill: transparent; }
.ws-seq .srow:hover .band { fill: color-mix(in srgb, var(--flash) 35%, transparent); }
.ws-seq .srow.now .band { fill: color-mix(in srgb, var(--flash) 70%, transparent); stroke: var(--accent); stroke-width: 1.2; }
.ws-seq .srow.future { opacity: 0.3; }
.ws-seq .num { font-size: 10.5px; fill: var(--dim); font-family: ui-monospace, Menlo, monospace; }
.ws-seq .msg { stroke-width: 2.2; }
.ws-seq .msg.rq { stroke: var(--client); }
.ws-seq .msg.rs { stroke: var(--server); }
.ws-seq .ah.rq { fill: var(--client); }
.ws-seq .ah.rs { fill: var(--server); }
.ws-seq .lbl { font-size: 11.5px; font-family: ui-monospace, Menlo, Consolas, monospace; font-weight: 700; fill: var(--text); }
.ws-seq .lbl .tag { font-weight: 400; fill: var(--dim); }
.ws-seq .mark { fill: var(--accent); }
.ws-seq .chg { font-size: 11px; fill: var(--accent); font-family: ui-monospace, Menlo, Consolas, monospace; }

/* --- cookies and sessions */
:root { --store: #1f8a7a; }
@media (prefers-color-scheme: dark) { :root { --store: #4fd1b8; } }
.ws-store { --c: var(--store); border-top: 4px solid var(--c); }
.st.s3, .ws-raw .sc.s3 { color: var(--accent); }
.clock { font-size: 0.9rem; font-family: ui-monospace, Menlo, Consolas, monospace; }
.req { display: flex; flex-wrap: wrap; gap: 0.35rem; }
.bw-html a[data-go] { color: var(--accent); text-decoration: underline; cursor: pointer; }
.bw-html .err { color: var(--bad); font-weight: 600; margin-bottom: 0.3rem; }
.bw-html .form { display: grid; gap: 0.35rem; max-width: 16rem; }
.bw-html .form label { display: grid; gap: 0.1rem; font-size: 0.76rem; color: var(--dim); }
.bw-html .form input { font-family: ui-monospace, Menlo, Consolas, monospace !important; }
.bw-html .form .ws-btn { justify-self: start; min-width: 0; }
.script { margin: 0.4rem 0 0; font-size: 0.8rem; overflow-wrap: anywhere; }
.opts { display: grid; gap: 0.1rem; margin-top: 0.3rem; }
.opts .check { margin-top: 0.2rem; }
.jar, .sess { width: 100%; border-collapse: collapse; font-size: 0.8rem; }
.jar th, .sess th { text-align: left; font-weight: 600; color: var(--dim); font-size: 0.68rem; text-transform: uppercase; letter-spacing: 0.04em; border-bottom: 1px solid var(--border); padding: 0.1rem 0.2rem; }
.jar td, .sess td { padding: 0.15rem 0.2rem; }
.jartxt { margin: 0 0 0.3rem; font-size: 0.72rem; background: var(--raw); border: 1px solid var(--border); border-radius: 6px; padding: 0.35rem 0.5rem; overflow-x: auto; }
.grid2 { display: flex; flex-wrap: wrap; align-items: center; gap: 0.4rem 0.9rem; font-size: 0.8rem; color: var(--dim); }
.grid2 label { display: inline-flex; align-items: center; gap: 0.35rem; }
.grid2 .check { margin-top: 0; color: var(--text); }
.seg.srv label:has(input:checked) { background: var(--c); }
.link { border: 1px dashed var(--border); border-radius: 8px; padding: 0.35rem 0.55rem; margin-bottom: 0.5rem; display: flex; flex-wrap: wrap; gap: 0.2rem 0.6rem; align-items: baseline; font-size: 0.82rem; }
.link.on { border-style: solid; border-color: var(--store); background: color-mix(in srgb, var(--store) 10%, var(--card)); }
.link .arrow { color: var(--store); font-weight: 700; font-size: 0.78rem; }
.link code { font-weight: 700; overflow-wrap: anywhere; }
.ws-msg.past { opacity: 0.55; }
.ws-msg .was { margin: 0 0 0.3rem; font-size: 0.8rem; color: var(--dim); text-align: center; opacity: 1; }
.ws-seq .msg.st { stroke: var(--store); }
.ws-seq .ah.st { fill: var(--store); }

/* --- TLS */
:root { --eve: #b0572b; }
@media (prefers-color-scheme: dark) { :root { --eve: #f0a070; } }
.ws-eavesdropper { --c: var(--eve); border-top: 4px solid var(--c); }
.ws-server.impostor { --c: var(--bad); }
.wire-head code.tls { color: var(--ok); }
.ws-raw .ln.rec .tx { color: var(--dim); }
.ws-raw .ln.rec .hv { color: var(--text); }
.ws-raw .ln.enc { background: color-mix(in srgb, var(--secret) 8%, transparent); }
.ws-raw .ln.enc.open { background: color-mix(in srgb, var(--flash) 60%, transparent); }
.ws-raw .ln.enc > .tx::before { content: '🔒 '; font-size: 0.68rem; }
.ws-raw .ln.tail .tx { color: var(--dim); font-size: 0.76rem; }
.ws-raw .ct { color: var(--eve); overflow-wrap: anywhere; }
.ws-msg.eve .ws-raw { border-left-color: var(--eve); }
.ws-msg.eve .ln { cursor: default; }
.ws-msg.eve .ln:hover { background: none; }
.reveal { margin: 0; padding-left: 1.1rem; font-size: 0.82rem; line-height: 1.4; display: grid; gap: 0.2rem; }
.reveal li.bad { color: var(--bad); font-weight: 600; }
.reveal li.warn { color: var(--warn); }
.bw-bar .lock { font-size: 0.8rem; }
.bw-warn { display: grid; gap: 0.35rem; justify-items: start; }
.bw-warn .big { font-size: 1.8rem; color: var(--bad); line-height: 1; }
.bw-warn h1 { font-size: 1.05rem; margin: 0; }
.bw-warn p { margin: 0; font-size: 0.82rem; }
.bw-warn .code { font-family: ui-monospace, Menlo, Consolas, monospace; font-size: 0.74rem; color: var(--dim); }
.term .out { max-height: 17rem; overflow-y: auto; font-size: 0.74rem; line-height: 1.45; }
.mem.cert { margin-top: 0.45rem !important; }
.mem dd.bad { color: var(--bad); font-weight: 600; }
#ws-cert { max-width: 100%; }
.term select#ws-host { width: auto; }
/* The TLS page's side columns are narrow: each check's result goes under its name. */
.tls .trace li { grid-template-columns: 1.2rem minmax(0, 1fr); }
.tls .trace li code { grid-column: 2; }


/* --- TLS Concepts: keys, stamps and sealed records, one colour per key pair */
:root { --k-gold: #b8860b; --k-brown: #8b5a2b; --k-blue: #2f62cc; --k-red: #d23b3b; --k-orange: #c96a12; --k-green: #2e8b3e; --k-purple: #8e44c9; --k-pink: #c2407e; --ca: #b8860b; }
@media (prefers-color-scheme: dark) {
  :root { --k-gold: #f2c14e; --k-brown: #d49a66; --k-blue: #7ea6ff; --k-red: #ff6b6b; --k-orange: #f0a050; --k-green: #6fd38a; --k-purple: #c79bff; --k-pink: #ff8fc4; --ca: #f2c14e; }
}
.gold { --k: var(--k-gold); } .brown { --k: var(--k-brown); } .blue { --k: var(--k-blue); } .red { --k: var(--k-red); } .orange { --k: var(--k-orange); }
.green { --k: var(--k-green); } .purple { --k: var(--k-purple); } .pink { --k: var(--k-pink); }
.kg, .sg, .bg { display: inline-block; vertical-align: -0.15em; color: var(--k); }
.kg svg { width: 1.9em; height: 0.95em; overflow: visible; }
.kg.p path { fill: currentColor; }
.kg.u path { fill: none; stroke: currentColor; stroke-width: 1.3; }
.sg svg, .bg svg { width: 1em; height: 1em; }
.sg circle { fill: currentColor; } .sg path { fill: none; stroke: var(--card); stroke-width: 1.8; }
.bg rect { fill: currentColor; } .bg path { fill: none; stroke: currentColor; stroke-width: 1.6; }
.kn { color: var(--k); margin-left: 0.2em; }
.rl-stage .bad { color: var(--bad); }

/* The stage: the CA on top; under it the browser and the server down the
   sides; Eve and Mallory between them, lower still; the events under them.
   Every card has a fixed size and scrolls inside. */
.rl-stage {
  display: grid; gap: 12px;
  grid-template-columns: minmax(0, 1fr) minmax(0, 0.55fr) minmax(0, 0.55fr) minmax(0, 1fr);
  grid-template-rows: 250px 48px 250px 330px;
  grid-template-areas: "root ca ca ." "client . . server" "client eve mallory server" "client log log server";
}
.rl-client { grid-area: client; } .rl-root { grid-area: root; } .rl-ca { grid-area: ca; } .rl-server { grid-area: server; }
.rl-eve { grid-area: eve; } .rl-impostor { grid-area: mallory; } .rl-log { grid-area: log; }
@media (max-width: 900px) {
  .rl-stage { grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); grid-template-rows: 300px 460px 400px 280px 340px;
    grid-template-areas: "root ca" "client client" "server server" "eve mallory" "log log"; }
}
@media (max-width: 560px) {
  .rl-stage { grid-template-columns: minmax(0, 1fr); grid-template-rows: 260px 300px 460px 400px 260px 300px 340px;
    grid-template-areas: "root" "ca" "client" "server" "eve" "mallory" "log"; }
}
.rl-card { display: flex; flex-direction: column; min-height: 0; min-width: 0; overflow: hidden;
  border: 1px solid var(--border); border-radius: 12px; background: var(--card); font-size: 0.84rem;
  transition: box-shadow 0.25s, border-color 0.25s; }
.rl-card.here { border-color: var(--accent); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 35%, transparent); }
.rl-card > header { flex: none; padding: 0.5rem 0.7rem 0.4rem; border-bottom: 1px solid var(--border); }
.rl-card h2 { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.1rem 0.4rem; font-size: 0.98rem; margin: 0; }
.rl-card h2 .ico { font-size: 1.1rem; }
.rl-card h2 code { font-size: 0.76rem; color: var(--dim); font-weight: 400; }
.rl-card .turn { margin-top: 0.35rem; padding: 0.25rem 0.7rem; font-size: 0.82rem; }
.rl-card.due > header { background: color-mix(in srgb, var(--accent) 10%, var(--card)); }
.rl-body { flex: 1; min-height: 0; overflow: auto; padding: 0.5rem 0.7rem 0.7rem; position: relative; }
.rl-body h3 { font-size: 0.7rem; text-transform: uppercase; letter-spacing: 0.04em; color: var(--dim); margin: 0.6rem 0 0.3rem; }
.rl-body h3:first-child { margin-top: 0; }
.rl-body .empty { color: var(--dim); font-size: 0.78rem; margin: 0.4rem 0 0; }
.rl-root { border-top: 4px solid var(--k-gold); }
.rl-ca { border-top: 4px solid var(--k-brown); }
.rl-impostor { border-top: 4px solid var(--bad); }
.rl-card.spot { background: color-mix(in srgb, var(--bad) 9%, var(--card)); border-color: var(--bad); box-shadow: 0 0 0 3px color-mix(in srgb, var(--bad) 35%, transparent); animation: spot 1.6s ease-in-out 3; }
.rl-card.spot > header { background: color-mix(in srgb, var(--bad) 14%, var(--card)); }
@keyframes spot { 0%, 100% { box-shadow: 0 0 0 3px color-mix(in srgb, var(--bad) 35%, transparent); } 50% { box-shadow: 0 0 0 9px color-mix(in srgb, var(--bad) 20%, transparent); } }

/* The keys a party holds, on one line */
.keyring { display: flex; flex-wrap: wrap; gap: 0.2rem 0.8rem; margin-bottom: 0.45rem; }
.key-item { display: inline-flex; align-items: baseline; gap: 0.25rem; white-space: nowrap; }
.key-item small { color: var(--dim); font-size: 0.7rem; }

/* An object: its type on the title, the rest folded unless this step touched it */
.objs { display: grid; gap: 0.4rem; }
.obj { --t: var(--line); border: 1px solid var(--border); border-left: 4px solid var(--t); border-radius: 7px; background: var(--raw); }
.obj.now { box-shadow: 0 0 0 2px color-mix(in srgb, var(--t) 45%, transparent); }
.obj-head { all: unset; box-sizing: border-box; width: 100%; display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.1rem 0.45rem; padding: 0.28rem 0.5rem; cursor: pointer; }
.obj-head:focus-visible { outline: 2px solid var(--accent); }
.obj-type { font-size: 0.68rem; font-weight: 800; text-transform: uppercase; letter-spacing: 0.07em; color: var(--t); }
.obj-name { font-weight: 600; overflow-wrap: anywhere; }
.obj-head::after { content: '▸'; margin-left: auto; color: var(--dim); font-size: 0.7rem; }
.obj.open .obj-head::after { content: '▾'; }
.obj-body { padding: 0 0.55rem 0.45rem; }
.obj dl { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 0.1rem 0.6rem; margin: 0; }
.obj dt { color: var(--dim); font-size: 0.76rem; }
.obj dd { margin: 0; overflow-wrap: anywhere; }
.obj s { color: var(--bad); }
.obj .stamp { margin-top: 0.35rem; padding-top: 0.3rem; border-top: 1px dashed var(--border); font-size: 0.78rem; }
.obj .obj-note { margin: 0.3rem 0 0; font-size: 0.74rem; color: var(--dim); }
.obj .cipher { font-family: ui-monospace, Menlo, Consolas, monospace; font-size: 0.74rem; margin: 0; overflow-wrap: anywhere; color: var(--dim); }
.obj .eq { margin: 0; }
.obj .checks { list-style: none; margin: 0; padding: 0; display: grid; gap: 0.2rem; }
.checks li.ok { color: var(--ok); } .checks li.bad { color: var(--bad); font-weight: 600; } .checks li.wait { color: var(--dim); }
.t-certificate { --t: var(--k-gold); }
.t-certificate.obj { border: 2px double color-mix(in srgb, var(--k-gold) 70%, var(--border)); border-left: 4px solid var(--k-gold); }
.t-csr { --t: var(--k-blue); }
/* An operation or a message is not a document: plain text under a label */
.op { padding: 0.15rem 0.2rem 0.2rem; border-top: 1px solid var(--border); }
.op p { margin: 0; overflow-wrap: anywhere; }
.op-name { text-transform: none; letter-spacing: 0; font-weight: 600; color: var(--text); font-size: 0.8rem; }
.op.msg .op-title { color: var(--accent); }
.op.now { background: color-mix(in srgb, var(--flash) 45%, transparent); }
#rl-fly > .flying.op { box-shadow: 0 6px 16px rgba(0, 0, 0, 0.2); border-radius: 6px; padding: 0.3rem 0.5rem; }
.op-title { font-size: 0.68rem; font-weight: 800; text-transform: uppercase; letter-spacing: 0.07em; color: var(--dim); margin-bottom: 0.15rem; }
.op .checks { list-style: none; margin: 0; padding: 0; display: grid; gap: 0.2rem; }
.op .eq { margin: 0; }
.t-challenge { --t: var(--k-purple); }
.t-token-file { --t: var(--k-green); }
.t-client-hello { --t: var(--k-orange); }
.t-server-hello, .t-signature { --t: var(--k-blue); }
.t-http-request, .t-http-response { --t: var(--accent); }
.t-encrypted-record { --t: var(--dim); }

/* The browser's certificates as a tree: a root, and under it what it issued */
.tree { display: grid; gap: 0.4rem; }
.tree .kids { margin: 0.35rem 0 0 0.9rem; padding-left: 0.9rem; border-left: 2px solid var(--k-gold); display: grid; gap: 0.4rem; }
.tree .kids > .node { position: relative; }
.tree .kids > .node::before { content: ''; position: absolute; left: -0.9rem; top: 0.65rem; width: 0.75rem; border-top: 2px solid var(--k-gold); }
.tree.orphan .node { border-left: 2px dashed var(--bad); padding-left: 0.6rem; }
.edge { display: block; font-size: 0.72rem; margin-bottom: 0.15rem; }
.edge.ok { color: var(--ok); } .edge.bad { color: var(--bad); font-weight: 600; } .edge.wait { color: var(--dim); }

/* Mallory's four attempts */
.attempts { display: grid; grid-template-columns: 1fr 1fr; gap: 0.3rem; margin-bottom: 0.5rem; }
.attempts .ws-btn { font-size: 0.72rem; padding: 0.2rem 0.35rem; }

/* The events so far */
.log { list-style: none; margin: 0; padding: 0; }
.roles .ws-bar { margin-bottom: 0.6rem; }
.roles .ws-bar .count { font-family: ui-monospace, Menlo, monospace; font-size: 0.8rem; color: var(--dim); }
.log li.now.open .log-body { background: color-mix(in srgb, var(--flash) 30%, transparent); }
.log-intro { font-size: 0.84rem; line-height: 1.45; }
.log-intro p { margin: 0 0 0.4rem; }
.log-intro .main { font-weight: 600; }
.log li { border-bottom: 1px dashed var(--border); }
.log-head { all: unset; box-sizing: border-box; width: 100%; display: grid; grid-template-columns: 1.6rem 3.4rem minmax(0, 1fr) auto; gap: 0.4rem; align-items: baseline; padding: 0.15rem 0.3rem; cursor: pointer; }
.log-head::after { content: '▸'; color: var(--dim); font-size: 0.7rem; }
.log li.open .log-head::after { content: '▾'; }
.log-head:focus-visible { outline: 2px solid var(--accent); }
.log li:hover .log-head { background: color-mix(in srgb, var(--flash) 40%, transparent); }
.log li.now .log-head { background: color-mix(in srgb, var(--flash) 75%, transparent); }
.log li.bad .act { color: var(--bad); }
.log-body { padding: 0.2rem 0.5rem 0.5rem 2.3rem; font-size: 0.8rem; line-height: 1.4; }
.log-body p { margin: 0 0 0.25rem; }
.log-body .where { font-size: 0.72rem; font-weight: 700; color: var(--dim); }
.log-body .main { font-weight: 600; }
.log-links { display: flex; flex-wrap: wrap; align-items: center; gap: 0.3rem 0.8rem; margin-top: 0.35rem !important; }
.log-links a { color: var(--accent); font-size: 0.78rem; }
.log .n { color: var(--dim); font-family: ui-monospace, Menlo, monospace; font-size: 0.72rem; }
.log .pl { white-space: nowrap; }

/* What is in the air between two cards */
#rl-fly { position: fixed; inset: 0; pointer-events: none; z-index: 50; font-size: 0.84rem; }
#rl-fly > .flying { position: fixed; margin: 0; transform-origin: top left; box-shadow: 0 10px 24px rgba(0, 0, 0, 0.3); background: var(--card); z-index: 2; }
#rl-fly .trail { position: fixed; inset: 0; width: 100%; height: 100%; overflow: visible; z-index: 1; }
#rl-fly .trail line { stroke: var(--accent); stroke-width: 3; stroke-linecap: round; stroke-dasharray: 3 8; }
#rl-fly .trail path { fill: var(--accent); }
#rl-fly .route-tag { position: fixed; z-index: 3; transform: translate(-50%, -130%); background: var(--panel); color: var(--panel-text);
  border-radius: 6px; padding: 0.1rem 0.45rem; font-size: 0.78rem; font-weight: 700; white-space: nowrap; }
/* Where a flying object will land: its place, outlined, until it arrives */
.obj.landing, .op.landing, .key-item.landing { opacity: 0.35; outline: 2px dashed var(--accent); outline-offset: 2px; }
.obj.landing > *, .op.landing > * { visibility: hidden; }