/* AISLE Vulnerability Platform — design system
Calm, editorial, document-forward. Cream canvas, sage accent, charcoal ink.
Colour is used only to carry meaning (severity / status). Light + dark. */
:root {
--canvas: #f6f3ec;
--surface: #fbfaf6;
--surface-2: #efeae0;
--border: #e4dfd4;
--border-strong: #d3cbba;
--ink: #22231f;
--ink-2: #4a4b44;
--muted: #6b6b63;
/* table rows: subtle neutral stripe / clearly distinct sage-washed hover */
--row-alt: rgba(34, 35, 31, 0.035);
--row-hover: rgba(94, 111, 88, 0.13);
--sage: #5e6f58;
--sage-strong: #4c5a47;
--sage-tint: #dce3d6;
--sage-ink: #ffffff;
--accent: #b4552d; /* warm clay — destructive / critical emphasis */
--accent-tint: #f2ddd1;
--sev-critical: #a4133c; /* deep crimson (7.7:1 with white chip text) — the top of the ramp, hue-stepped off high's red */
--sev-high: #d92818; /* bright vivid red (4.9:1 white) */
--sev-medium: #f0a000; /* vivid amber; chips pair it with dark text (7.2:1) */
--sev-low: #5e6f58;
--sev-info: #77776e;
--sev-unknown: #71716a; /* unassessed — muted, distinct from info; 4.9:1 with white chip text (WCAG AA) */
--ok: #2f6b3e; /* 5.0:1 on --ok-tint (AA at chip text size) */
--warn: #8a4e14; /* 5.4:1 on --warn-tint (AA at chip text size) */
--danger: #a23c22;
--ok-tint: #dce8dd;
--warn-tint: #f3e6d3;
--danger-tint: #f2d9d2;
--radius: 9px;
--radius-sm: 6px;
--shadow: 0 1px 2px rgba(34, 35, 31, 0.05), 0 4px 16px rgba(34, 35, 31, 0.04);
--ring: 0 0 0 3px rgba(94, 111, 88, 0.28);
--font: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial,
"Inter", sans-serif;
--mono: "SF Mono", "JetBrains Mono", "Fira Code", ui-monospace, "Cascadia Code",
Menlo, Consolas, monospace;
--maxw: 1180px;
--space: 1rem;
}
[data-theme="dark"] {
--canvas: #1a1b17;
--surface: #222420;
--surface-2: #2a2c25;
--border: #34362e;
--border-strong: #454738;
--ink: #ece8dd;
--ink-2: #c7c3b6;
--muted: #928e82;
--row-alt: rgba(236, 232, 221, 0.04);
--row-hover: rgba(157, 178, 149, 0.16);
--sage: #9db295;
--sage-strong: #b6c7ae;
--sage-tint: #2c3728;
--sage-ink: #16180f;
--accent: #d47a54;
--accent-tint: #3a271d;
--sev-critical: #ff6b8a; /* vivid crimson-pink (6.6:1 with the dark chip text) — the top of the ramp */
--sev-high: #ff8a4d; /* vivid orange (7.7:1) — hue-stepped off critical's crimson */
--sev-medium: #ffc43d; /* vivid gold (11:1 with the dark chip text) */
--sev-low: #9db295;
--sev-info: #9a978c;
--sev-unknown: #6f6f66; /* unassessed — muted, distinct from info */
--ok: #7fb389;
--warn: #e0a558;
--danger: #e08a6f;
--ok-tint: #24311f;
--warn-tint: #362a1a;
--danger-tint: #3a231c;
--shadow: 0 1px 2px rgba(0, 0, 0, 0.3), 0 6px 20px rgba(0, 0, 0, 0.22);
}
* { box-sizing: border-box; }
html { -webkit-text-size-adjust: 100%; }
body {
margin: 0;
font-family: var(--font);
font-size: 15px;
line-height: 1.5;
color: var(--ink);
background: var(--canvas);
-webkit-font-smoothing: antialiased;
text-rendering: optimizeLegibility;
}
h1, h2, h3, h4 { line-height: 1.2; color: var(--ink); font-weight: 640; letter-spacing: -0.01em; }
h1 { font-size: 1.6rem; margin: 0 0 0.2rem; }
h2 { font-size: 1.22rem; margin: 1.2rem 0 0.5rem; }
h3 { font-size: 1.02rem; margin: 0.95rem 0 0.35rem; }
p { margin: 0 0 0.7rem; }
a { color: var(--sage-strong); text-decoration: none; }
a:hover { text-decoration: underline; }
small, .small { font-size: 0.82rem; }
.muted { color: var(--muted); }
hr { border: none; border-top: 1px solid var(--border); margin: 1.05rem 0; }
/* ── Layout ─────────────────────────────────────────────────────────── */
.container { max-width: var(--maxw); margin: 0 auto; padding: 1.35rem 1.4rem 3rem; }
.stack > * + * { margin-top: 0.72rem; }
.row { display: flex; gap: 0.6rem; align-items: center; flex-wrap: wrap; }
.row.between { justify-content: space-between; }
.spacer { flex: 1; }
.grid { display: grid; gap: 0.8rem; }
/* Let grid tracks shrink below content width so inner /tables scroll
within their column instead of blowing out the page. */
.grid > * { min-width: 0; }
.grid.cols-2 { grid-template-columns: repeat(2, 1fr); }
.grid.cols-3 { grid-template-columns: repeat(3, 1fr); }
.grid.cols-4 { grid-template-columns: repeat(4, 1fr); }
.grid.cols-5 { grid-template-columns: repeat(5, 1fr); }
@media (max-width: 820px) {
.grid.cols-2, .grid.cols-3, .grid.cols-4, .grid.cols-5 { grid-template-columns: 1fr; }
}
/* ── Page header (one component for every page) ─────────────────────────
Breadcrumb (optional) → .page-head: title block left, action cluster
right. Actions never wrap to the left under a long title (margin-left:
auto keeps even a wrapped line right-aligned). All header spacing lives
here — templates carry no inline margins at this joint. */
.page-head {
display: flex; flex-wrap: wrap; justify-content: space-between;
align-items: flex-start; gap: 0.6rem 1rem; margin-bottom: 1rem;
}
.page-head-text { flex: 1 1 24rem; min-width: 0; }
.page-head-text h1 { margin: 0; }
.page-head-text .sub { margin: 0.15rem 0 0; color: var(--muted); }
/* Chip row inside a detail-page identity block (id badge + status chips). */
.page-head-text .chips { display: flex; flex-wrap: wrap; gap: 0.4rem; align-items: center; margin-top: 0.4rem; }
.page-head-actions { display: flex; flex-wrap: wrap; gap: 0.5rem; align-items: center; margin-left: auto; }
/* Segmented view switcher (reports tabs, admin subnav): btn-sm pills on
their own row under the header; the active segment is btn-primary and
carries aria-current="page". */
.subnav { display: flex; gap: 0.4rem; flex-wrap: wrap; margin: 0 0 1rem; }
/* Per-row severity breakdown pills (lists + dashboard). */
.mini-sev { display: inline-flex; gap: 0.3rem; flex-wrap: wrap; }
.mini-sev .pill { font-size: 0.72rem; font-weight: 640; color: #fff; padding: 0.02rem 0.36rem; border-radius: 999px; }
.mini-sev .pill.sev-medium { color: #241a02; } /* dark ink on the amber chip (see .chip.sev) */
[data-theme="dark"] .mini-sev .pill { color: var(--sage-ink); }
/* ── Top nav ────────────────────────────────────────────────────────── */
.nav {
background: var(--surface);
border-bottom: 1px solid var(--border);
position: sticky; top: 0; z-index: 20;
}
.nav-inner {
max-width: var(--maxw); margin: 0 auto; padding: 0.55rem 1.4rem;
display: flex; align-items: center; gap: 1.2rem;
}
.brand { display: flex; align-items: center; gap: 0.55rem; font-weight: 680; color: var(--ink); letter-spacing: -0.02em; }
.brand:hover { text-decoration: none; }
/* Brand mark: the AISLE glyph, tinted with the sage accent via a CSS mask so
it themes (dark mode lightens --sage) and every .brand template stays markup-
free. The standalone favicon is app/static/favicon.svg. */
.brand .mark {
width: 22px; height: 22px; display: inline-block;
background-color: var(--sage-strong);
-webkit-mask: url("/static/icon.svg") center / contain no-repeat;
mask: url("/static/icon.svg") center / contain no-repeat;
}
.brand .sub { color: var(--muted); font-weight: 500; }
.nav-links { display: flex; gap: 0.25rem; align-items: center; }
.nav-links a {
color: var(--ink-2); padding: 0.35rem 0.6rem; border-radius: var(--radius-sm);
font-size: 0.92rem; font-weight: 520;
}
.nav-links a:hover { background: var(--surface-2); text-decoration: none; }
.nav-links a.active { color: var(--ink); background: var(--sage-tint); }
/* Settings lives in .nav-right as a .btn (not .nav-links) — mirror the active
highlight so the current page reads clearly there too. */
.nav-right .btn.active { background: var(--sage-tint); color: var(--sage-strong); border-color: transparent; }
.nav-right { margin-left: auto; display: flex; align-items: center; gap: 0.5rem; }
.avatar {
width: 28px; height: 28px; border-radius: 50%; background: var(--sage-tint);
color: var(--sage-strong); display: grid; place-items: center; font-size: 0.78rem;
font-weight: 680;
}
/* ── Buttons ────────────────────────────────────────────────────────────
One variant per role, one size per context (keep consistent everywhere):
.btn-primary — exactly one per form context: the commit (always labelled
Save/Create/Add…, always RIGHTMOST in its toolbar), an index
page's *unique* marquee create (New project / New report /
Add CVE), or the active segment of a .subnav toggle.
.btn — everything else that acts: recurring create shortcuts
(Add scan / New finding), navigation shortcuts, downloads/
exports, Generate/Refresh-type repeatable actions, pagers,
inactive segments. Same label ⇒ same variant everywhere.
.btn-ghost — dismiss (Cancel, Clear, Sign out), icon-only row
micro-controls (reorder arrows), and the top nav's quiet
chrome (Settings, theme toggle); never a page-level action,
never a download.
.btn-danger / .btn-preview — destructive / public-preview ("Preview…").
Size: normal in page headers + section toolbars; .btn-sm only inside dense
containers (table rows, bulk bars, card-inline forms, subnavs, pagers,
disclosure summaries) — never for a page-level action. */
.btn {
display: inline-flex; align-items: center; justify-content: center; gap: 0.4rem;
font: inherit; font-size: 0.9rem; font-weight: 560; line-height: 1;
padding: 0.55rem 0.9rem; border-radius: var(--radius-sm);
border: 1px solid var(--border-strong); background: var(--surface); color: var(--ink);
cursor: pointer; transition: background 0.12s, border-color 0.12s, transform 0.02s;
text-decoration: none;
}
.btn:hover { background: var(--surface-2); text-decoration: none; }
.btn:active { transform: translateY(0.5px); }
.btn:focus-visible { outline: none; box-shadow: var(--ring); }
.btn[disabled], .btn:disabled { opacity: 0.55; cursor: not-allowed; }
.btn-primary { background: var(--sage); border-color: var(--sage); color: var(--sage-ink); }
.btn-primary:hover { background: var(--sage-strong); border-color: var(--sage-strong); }
.btn-danger { background: transparent; border-color: var(--accent); color: var(--accent); }
.btn-danger:hover { background: var(--accent-tint); }
.btn-ghost { background: transparent; border-color: transparent; color: var(--ink-2); }
.btn-ghost:hover { background: var(--surface-2); }
/* "Preview as public" (reports): a muted warm-beige, distinct from the cream
default, the sage primary and the clay danger buttons — a gentle secondary
action shown to the owner/admin on any report, public or not. */
.btn-preview { background: #e9dfc9; border-color: var(--border-strong); color: var(--ink-2); }
.btn-preview:hover { background: #e2d5b8; }
[data-theme="dark"] .btn-preview { background: #343026; color: var(--ink-2); }
[data-theme="dark"] .btn-preview:hover { background: #3d3931; }
/* btn-preview's border/text without the beige fill (scan raw download):
transparent at rest; hover falls through to .btn:hover's surface-2 wash. */
.btn-outline { background: transparent; border-color: var(--border-strong); color: var(--ink-2); }
.btn-sm { padding: 0.32rem 0.6rem; font-size: 0.82rem; }
.btn-lg { padding: 0.7rem 1.2rem; font-size: 1rem; }
.btn-block { width: 100%; }
/* ── Cards / panels ─────────────────────────────────────────────────── */
.card {
background: var(--surface); border: 1px solid var(--border);
border-radius: var(--radius); padding: 0.85rem 1rem; box-shadow: var(--shadow);
}
.card.pad-lg { padding: 1.2rem; }
/* Card/panel section label. Written as so panels stay
in the document outline (heading navigation); every declaration here —
line-height included — overrides the h2 element defaults, so an h2 and a
legacy div render identically. */
.card-title { font-size: 0.78rem; text-transform: uppercase; letter-spacing: 0.06em; color: var(--muted); margin: 0 0 0.45rem; font-weight: 640; line-height: 1.5; }
.panel { border: 1px solid var(--border); border-radius: var(--radius); background: var(--surface); }
.panel > .panel-head { padding: 0.6rem 0.9rem; border-bottom: 1px solid var(--border); display: flex; align-items: center; gap: 0.6rem; }
.panel > .panel-body { padding: 0.85rem; }
/* ── Stat tiles ─────────────────────────────────────────────────────── */
/* THE stat tile — big number over an uppercase label. Used on the dashboard,
admin overview/stats, and the /cves overview (`.inset` there: recessed
surface-2 look for tiles nested inside another framed box). */
.stat { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 0.65rem 0.85rem; }
.stat .num { font-size: 1.45rem; font-weight: 680; letter-spacing: -0.02em; font-variant-numeric: tabular-nums; }
.stat .num.accent { color: var(--sage-strong); }
.stat .label { font-size: 0.8rem; color: var(--muted); text-transform: uppercase; letter-spacing: 0.05em; }
.stat.inset { background: var(--surface-2); border-radius: var(--radius-sm); }
/* A whole stat tile as a link (dashboard "Reports in progress"). */
.stat.link { transition: border-color 0.12s; }
.stat.link, .stat.link:hover { color: var(--ink); text-decoration: none; }
.stat.link:hover { border-color: var(--border-strong); }
/* ── Tables ─────────────────────────────────────────────────────────── */
.table { width: 100%; border-collapse: collapse; font-size: 0.92rem; }
.table th, .table td { text-align: left; padding: 0.45rem 0.6rem; border-bottom: 1px solid var(--border); vertical-align: top; }
.table th { font-size: 0.74rem; text-transform: uppercase; letter-spacing: 0.05em; color: var(--muted); font-weight: 640; }
/* The `.right` utility loses to `.table th`/`.table td` on specificity, so
re-assert it here: numeric columns and trailing action columns right-align
as their markup intends (a shared right edge down the card, not a ragged
one). A single-control action