/* ==========================================================================
   forensic4linux.com - Linux Forensics knowledge base
   ========================================================================== */

:root {
  --bg: #0d1117;
  --bg-alt: #11161f;
  --bg-card: #161c27;
  --bg-code: #0a0e14;
  --border: #232c3b;
  --border-soft: #1b2330;
  --text: #d8dee9;
  --text-dim: #8b96a8;
  --text-faint: #5c6675;
  --accent: #4ade80;
  --accent-dim: #22c55e;
  --cyan: #22d3ee;
  --amber: #fbbf24;
  --red: #f87171;
  --mono: "SFMono-Regular", "Cascadia Mono", "Consolas", "Liberation Mono", Menlo, monospace;
  --sans: "Segoe UI", -apple-system, BlinkMacSystemFont, "Helvetica Neue", Arial, sans-serif;
  --radius: 10px;
  --maxw: 1080px;
}

* { margin: 0; padding: 0; box-sizing: border-box; }

html { scroll-behavior: smooth; }

body {
  background: var(--bg);
  color: var(--text);
  font-family: var(--sans);
  line-height: 1.65;
  font-size: 16px;
}

a { color: var(--cyan); text-decoration: none; }
a:hover { text-decoration: underline; }

/* ---------- Top bar / navigation ---------- */
.site-header {
  position: sticky;
  top: 0;
  z-index: 50;
  background: rgba(13, 17, 23, 0.92);
  backdrop-filter: blur(8px);
  border-bottom: 1px solid var(--border-soft);
}

.nav-wrap {
  max-width: var(--maxw);
  margin: 0 auto;
  padding: 0 1.25rem;
  display: flex;
  align-items: center;
  justify-content: space-between;
  height: 60px;
}

.brand {
  font-family: var(--mono);
  font-weight: 700;
  font-size: 1.05rem;
  color: var(--text);
  letter-spacing: 0.02em;
}
.brand .prompt { color: var(--accent); }
.brand span.b { color: var(--cyan); }

.nav-links { display: flex; gap: 1.5rem; align-items: center; }
.nav-links a {
  color: var(--text-dim);
  font-size: 0.95rem;
  font-weight: 500;
}
.nav-links a:hover { color: var(--text); text-decoration: none; }
.nav-links a.active { color: var(--accent); }

.nav-toggle {
  display: none;
  background: none;
  border: 1px solid var(--border);
  color: var(--text);
  border-radius: 6px;
  padding: 0.35rem 0.7rem;
  font-size: 1.1rem;
  cursor: pointer;
}

/* ---------- Layout ---------- */
.wrap {
  max-width: var(--maxw);
  margin: 0 auto;
  padding: 2rem 1.25rem 4rem;
}

.grid {
  display: grid;
  gap: 1.25rem;
}

.grid-cards { grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); }

/* ---------- Hero ---------- */
.hero {
  padding: 4.5rem 1.25rem 3.5rem;
  text-align: center;
  background:
    radial-gradient(ellipse at top, rgba(74, 222, 128, 0.10), transparent 55%),
    var(--bg);
  border-bottom: 1px solid var(--border-soft);
}
.hero-inner { max-width: 760px; margin: 0 auto; }
.hero h1 {
  font-family: var(--mono);
  font-size: clamp(1.6rem, 4vw, 2.6rem);
  margin-bottom: 1rem;
  letter-spacing: 0.01em;
}
.hero h1 .hl { color: var(--accent); }
.hero .terminal-line {
  font-family: var(--mono);
  color: var(--text-dim);
  font-size: 0.95rem;
  margin-bottom: 1.5rem;
}
.hero .terminal-line .cursor {
  display: inline-block;
  width: 0.6em;
  background: var(--accent);
  animation: blink 1.1s steps(1) infinite;
}
@keyframes blink { 50% { opacity: 0; } }
.hero p.sub { color: var(--text-dim); max-width: 640px; margin: 0 auto 1.75rem; }

.btn-row { display: flex; gap: 0.85rem; justify-content: center; flex-wrap: wrap; }
.btn {
  display: inline-block;
  padding: 0.6rem 1.25rem;
  border-radius: 8px;
  font-weight: 600;
  font-size: 0.95rem;
  border: 1px solid var(--border);
  color: var(--text);
  transition: all 0.15s ease;
}
.btn:hover { text-decoration: none; transform: translateY(-1px); }
.btn-primary { background: var(--accent-dim); border-color: var(--accent-dim); color: #04170a; }
.btn-primary:hover { background: var(--accent); }
.btn-ghost:hover { border-color: var(--accent); color: var(--accent); }

/* ---------- Section headings ---------- */
.section { margin-top: 2.75rem; }
.section > h2 {
  font-size: 1.45rem;
  margin-bottom: 0.35rem;
  display: flex;
  align-items: center;
  gap: 0.6rem;
}
.section > h2::before {
  content: "$";
  font-family: var(--mono);
  color: var(--accent);
  font-size: 1.1rem;
}
.section .lead { color: var(--text-dim); margin-bottom: 1.4rem; }

/* ---------- Cards ---------- */
.card {
  background: var(--bg-card);
  border: 1px solid var(--border-soft);
  border-radius: var(--radius);
  padding: 1.4rem;
  display: flex;
  flex-direction: column;
  gap: 0.6rem;
  transition: border-color 0.15s ease, transform 0.15s ease;
}
.card:hover { border-color: var(--accent-dim); transform: translateY(-2px); }
.card .tag {
  font-family: var(--mono);
  font-size: 0.72rem;
  color: var(--accent);
  letter-spacing: 0.08em;
  text-transform: uppercase;
}
.card h3 { font-size: 1.08rem; }
.card h3 a { color: var(--text); }
.card h3 a:hover { color: var(--accent); text-decoration: none; }
.card p { color: var(--text-dim); font-size: 0.92rem; flex-grow: 1; }
.card .meta { font-family: var(--mono); font-size: 0.78rem; color: var(--text-faint); }

/* ---------- Article / tool page ---------- */
.page-head { margin-bottom: 2rem; }
.page-head .kicker {
  font-family: var(--mono);
  font-size: 0.78rem;
  letter-spacing: 0.1em;
  text-transform: uppercase;
  color: var(--accent);
  margin-bottom: 0.5rem;
}
.page-head h1 { font-size: clamp(1.5rem, 3vw, 2.1rem); margin-bottom: 0.5rem; }
.page-head .byline { color: var(--text-dim); font-size: 0.9rem; }

.prose { max-width: 820px; }
.prose h2 {
  font-size: 1.35rem;
  margin: 2.2rem 0 0.8rem;
  padding-bottom: 0.4rem;
  border-bottom: 1px solid var(--border-soft);
}
.prose h3 { font-size: 1.08rem; margin: 1.6rem 0 0.6rem; color: var(--cyan); }
.prose p { margin-bottom: 1rem; }
.prose ul, .prose ol { margin: 0 0 1.1rem 1.4rem; }
.prose li { margin-bottom: 0.35rem; }
.prose strong { color: var(--text); }
.prose code {
  font-family: var(--mono);
  font-size: 0.86em;
  background: var(--bg-code);
  border: 1px solid var(--border);
  padding: 0.1em 0.4em;
  border-radius: 5px;
  color: var(--amber);
}

pre {
  background: var(--bg-code);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 1rem 1.1rem;
  overflow-x: auto;
  margin: 0 0 1.2rem;
  position: relative;
}
pre code {
  font-family: var(--mono);
  font-size: 0.86rem;
  line-height: 1.55;
  color: #c9d1d9;
  background: none;
  border: none;
  padding: 0;
  display: block;
}
pre::before {
  content: attr(data-cmd);
  position: absolute;
  top: -11px;
  left: 12px;
  font-family: var(--mono);
  font-size: 0.68rem;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--text-faint);
  background: var(--bg-code);
  padding: 0 6px;
  border: 1px solid var(--border);
  border-radius: 4px;
}

pre .cmt { color: var(--text-faint); font-style: italic; }
pre .ok  { color: var(--accent); }
pre .err { color: var(--red); }
pre .cmd { color: var(--cyan); }

/* ---------- Callouts ---------- */
.callout {
  border-left: 3px solid var(--accent);
  background: rgba(74, 222, 128, 0.06);
  padding: 0.9rem 1.1rem;
  border-radius: 0 var(--radius) var(--radius) 0;
  margin: 1.2rem 0;
  font-size: 0.95rem;
}
.callout.warn { border-color: var(--amber); background: rgba(251, 191, 36, 0.06); }
.callout.danger { border-color: var(--red); background: rgba(248, 113, 113, 0.07); }
.callout .title { font-weight: 700; font-family: var(--mono); font-size: 0.8rem; letter-spacing: 0.08em; text-transform: uppercase; color: var(--accent); display: block; margin-bottom: 0.3rem; }
.callout.warn .title { color: var(--amber); }
.callout.danger .title { color: var(--red); }

/* ---------- Tables ---------- */
.prose table { width: 100%; border-collapse: collapse; margin: 0 0 1.2rem; font-size: 0.92rem; }
.prose th {
  text-align: left;
  font-family: var(--mono);
  font-size: 0.78rem;
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--accent);
  border-bottom: 1px solid var(--border);
  padding: 0.5rem 0.8rem;
}
.prose td { border-bottom: 1px solid var(--border-soft); padding: 0.5rem 0.8rem; color: var(--text-dim); }
.prose tr:hover td { background: rgba(255, 255, 255, 0.02); }

/* ---------- TOC ---------- */
.toc {
  background: var(--bg-card);
  border: 1px solid var(--border-soft);
  border-radius: var(--radius);
  padding: 1.1rem 1.3rem;
  margin: 0 0 1.5rem;
}
.toc h4 { font-size: 0.82rem; font-family: var(--mono); letter-spacing: 0.08em; text-transform: uppercase; color: var(--accent); margin-bottom: 0.6rem; }
.toc ol { margin: 0 0 0 1.2rem; }
.toc li { margin-bottom: 0.25rem; font-size: 0.92rem; }

/* ---------- Footer ---------- */
.site-footer {
  border-top: 1px solid var(--border-soft);
  padding: 2.5rem 1.25rem;
  margin-top: 2rem;
  background: var(--bg-alt);
}
.footer-inner {
  max-width: var(--maxw);
  margin: 0 auto;
  display: flex;
  justify-content: space-between;
  align-items: center;
  flex-wrap: wrap;
  gap: 1rem;
  color: var(--text-faint);
  font-size: 0.85rem;
}
.footer-inner .mono { font-family: var(--mono); color: var(--text-dim); }

/* ---------- Misc ---------- */
.arrow { color: var(--accent); font-family: var(--mono); }
hr.sep { border: none; border-top: 1px solid var(--border-soft); margin: 2rem 0; }
.copy-btn {
  position: absolute;
  top: 10px;
  right: 10px;
  background: var(--bg-card);
  border: 1px solid var(--border);
  color: var(--text-dim);
  font-family: var(--mono);
  font-size: 0.7rem;
  border-radius: 6px;
  padding: 0.2rem 0.55rem;
  cursor: pointer;
}
.copy-btn:hover { color: var(--accent); border-color: var(--accent-dim); }

/* ---------- Responsive ---------- */
@media (max-width: 760px) {
  .nav-toggle { display: block; }
  .nav-links {
    display: none;
    position: absolute;
    top: 60px;
    left: 0;
    right: 0;
    flex-direction: column;
    background: var(--bg-alt);
    border-bottom: 1px solid var(--border);
    padding: 1rem 1.25rem;
    gap: 0.9rem;
    align-items: flex-start;
  }
  .nav-links.open { display: flex; }
  .hero { padding: 3rem 1rem 2.5rem; }
  .grid-cards { grid-template-columns: 1fr; }
  .footer-inner { flex-direction: column; text-align: center; }
}