.dhcp-relay-form-header {
    display: flex;
    align-items: center;
    justify-content: space-between;
    gap: var(--space-2);
}
.dhcp-relay-chip {
    display: inline-flex;
    border: 1px solid #7c2d12;
    color: #fed7aa;
    background: #431407;
    border-radius: 999px;
    padding: 2px 8px;
    font-size: var(--font-size-caption);
    margin-right: var(--space-1);
}
.ip-routes {
    margin-bottom: 12px;
    padding: 12px 14px;
    border-radius: var(--md-radius-sm);
    background: var(--md-surface);
    border: 1px dashed var(--md-outline);
}
/* WAN: sin "box dentro de box" en tablas/rutas internas */
#view-wan .ip-routes,
#view-wan .ip-routes.dest-routes {
    margin-bottom: 0;
    padding: 0;
    border: 0;
    border-radius: 0;
    background: transparent;
}
.ip-routes > div:first-child strong { color: var(--md-on-surface); font-weight: 500; }
.ip-routes-row {
    display: flex;
    gap: 10px;
    flex-wrap: wrap;
    align-items: center;
    margin-top: 8px;
}
.ip-routes-row input, .ip-routes-row select {
    min-width: 12rem;
    flex: 1;
}
.btn-add { background: var(--color-primary); color: #0a0a0a; }
.btn-add:hover:not(:disabled) { filter: brightness(1.08); }
.btn-remove { background: var(--color-action-danger); color: #fff; border: 1px solid #f87171; }
.btn-remove:hover:not(:disabled) { filter: brightness(1.1); }
.form-fieldset > .form-legend {
    color: var(--color-primary);
}
.routing-fields-row {
    display: grid;
    grid-template-columns: repeat(auto-fit, minmax(min(100%, 220px), 1fr));
    gap: var(--space-4);
    align-items: end;
    margin-top: var(--space-3);
}
.routing-field-group {
    display: flex;
    flex-direction: column;
    gap: var(--space-2);
    min-width: 0;
}
.routing-field-group .form-label {
    margin: 0;
}
.routing-input-btn {
    display: flex;
    flex-wrap: wrap;
    gap: var(--space-2);
    align-items: stretch;
}
.routing-input-btn > .form-control,
.routing-input-btn > select,
.routing-input-btn > md-outlined-text-field.routing-md-field {
    flex: 1 1 12rem;
    min-width: 0;
    align-self: flex-end;
}
.routing-input-btn > md-outlined-text-field.routing-md-field {
    --md-outlined-text-field-container-shape: 8px;
}
.routing-input-btn > .btn {
    flex: 0 0 auto;
    align-self: stretch;
}
.ip-dir {
    display: flex;
    gap: 10px;
    align-items: center;
    flex-wrap: wrap;
    width: 100%;
}
.ip-dir input {
    padding: 10px 12px;
    border-radius: var(--md-radius-sm);
    border: 1px solid var(--md-outline);
    flex: 1;
    min-width: 140px;
    font-family: inherit;
}
.ip-dir .lbl {
    font-size: 0.75rem;
    font-weight: 500;
    text-transform: uppercase;
    letter-spacing: 0.04em;
    color: var(--md-on-surface-variant);
    min-width: 52px;
}
.dest-routes {
    margin-top: 12px;
    padding-top: 12px;
    border-top: 1px solid var(--md-outline);
}
.dest-routes + .dest-routes { border-top: none; }
/* Ruteo: una subsección visible según submenú lateral */
.routing-view-stack {
    display: flex;
    flex-direction: column;
    gap: var(--space-5);
    align-items: stretch;
}
.routing-panel-slice {
    min-width: 0;
}
.firewall-view-stack {
    display: flex;
    flex-direction: column;
    gap: var(--space-5);
    align-items: stretch;
}
.firewall-panel-slice {
    min-width: 0;
    width: 100%;
}
.firewall-params-form {
    gap: var(--space-4);
}
/* Tablas de reglas (inter-LAN, DNAT, SNAT, listas): ancho completo del panel. */
#view-firewall .firewall-params-form.form-stack {
    max-width: none;
    width: 100%;
}
/* Contenedor plano: sin burbuja (borde/fondo/padding). El nombre de la sección
   ya lo muestra el subnav lateral, por eso tampoco lleva título repetido. */
.firewall-params-section {
    min-width: 0;
}
/* Cortafuegos — tablas de reglas: toolbar + thead FUERA del scroll (solo tbody scrollea).
   Ver DISENO_UI.md §7.5 y firewallRulesTableLayout() en lgrt-app-05-firewall.js. */
#view-firewall .firewall-panel-slice.is-active {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
}
#view-firewall .firewall-panel-slice.is-active:has(.firewall-rules-table-section) {
    overflow: hidden;
}
#view-firewall .firewall-params-admin,
#view-firewall #firewall-inter-lan-admin,
#view-firewall #firewall-dnat-admin,
#view-firewall #firewall-dhcp-allow-admin,
#view-firewall #firewall-dns-allow-admin,
#view-firewall #firewall-snat-admin {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
}
#view-firewall .firewall-params-form.form-stack {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
}
/* Tabpanels IPv4/IPv6 dentro de tablas de reglas: deben participar del flex (display:block
   rompe min-height:0 y el tbody scrollea en .firewall-rules-table-body-scroll). */
#view-firewall .firewall-params-form > .lgrt-af-tabpanel.is-active {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
    overflow: hidden;
}
#view-firewall .firewall-params-admin:has(.firewall-rules-table-section),
#view-firewall .firewall-params-form:has(.firewall-rules-table-section) {
    overflow: hidden;
}
#view-firewall > .cluster-node-card:has(.firewall-rules-table-section),
#view-firewall .firewall-view-stack:has(.firewall-rules-table-section) {
    overflow: hidden;
}
#view-firewall .firewall-rules-table-section {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
    overflow: hidden;
    margin-bottom: 0;
}
#view-firewall .firewall-rules-table-chrome {
    flex-shrink: 0;
    background: var(--lgrt-view-chrome-bg, #0b0b12);
}
#view-firewall .firewall-rules-table-head-wrap {
    overflow-x: hidden;
    overflow-y: visible;
    -webkit-overflow-scrolling: touch;
}
#view-firewall .firewall-rules-table-body-scroll {
    flex: 1 1 auto;
    min-height: 0;
    overflow-x: hidden;
    overflow-y: auto;
    -webkit-overflow-scrolling: touch;
}
#view-firewall .firewall-rules-table-head,
#view-firewall .firewall-rules-table-body {
    margin-bottom: 0;
    width: 100%;
    max-width: 100%;
    table-layout: fixed;
}
#view-firewall .firewall-rules-table-head th {
    background: var(--lgrt-view-chrome-bg, #0b0b12);
    padding: 10px 10px;
    line-height: 1.35;
    vertical-align: bottom;
    white-space: nowrap;
}
/* Inter-LAN: reparto al 100% del panel (sin scroll horizontal). */
.fw-il-col--src,
.fw-il-col--dst { width: 20%; }
.fw-il-col--arrow { width: 2.5rem; }
.fw-il-col--chain { width: 11%; }
.fw-il-col--dir { width: 12%; }
.fw-il-col--nat { width: 11%; }
.fw-il-col--log,
.fw-il-col--en { width: 7%; }
.fw-il-col--act { width: 10%; }
.fw-il-table--grouped .fw-il-group-src {
    vertical-align: top;
    background: rgba(255, 255, 255, 0.02);
    border-right: 1px solid rgba(255, 255, 255, 0.06);
}
.fw-il-table--grouped .fw-il-dest-row + .fw-il-dest-row .fw-il-group-src {
    border-top: none;
}
.fw-il-arrow {
    text-align: center;
    color: var(--md-primary, #f97316);
    font-size: 1.1rem;
    font-weight: 700;
    vertical-align: middle;
    width: 2.5rem;
}
.fw-il-chains {
    font-size: 0.78rem;
    font-family: var(--font-mono, ui-monospace, monospace);
    color: var(--md-on-surface-variant, #a8a29e);
}
.fw-il-badge {
    display: inline-block;
    font-size: 0.72rem;
    font-weight: 600;
    line-height: 1.35;
    padding: 2px 8px;
    border-radius: 999px;
    white-space: nowrap;
}
.fw-il-badge--bi {
    color: #86efac;
    background: rgba(34, 197, 94, 0.12);
    border: 1px solid rgba(34, 197, 94, 0.35);
}
.fw-il-badge--uni {
    color: #fcd34d;
    background: rgba(251, 191, 36, 0.1);
    border: 1px solid rgba(251, 191, 36, 0.28);
}
.fw-il-table .firewall-params-table__cell-toggle {
    width: auto;
    max-width: none;
}
.fw-il-table .firewall-params-table__cell-action {
    width: auto;
    max-width: none;
    min-width: 10.5rem;
}
.fw-il-row-actions {
    display: flex;
    flex-wrap: wrap;
    gap: 4px;
    justify-content: center;
    align-items: center;
}
.firewall-params-table .btn.fw-il-edit {
    min-height: 0;
    width: auto;
    height: auto;
    padding: 2px 9px;
    font-size: 0.72rem;
    font-weight: 600;
    line-height: 1.35;
    border-radius: 999px;
    box-shadow: none;
    white-space: nowrap;
}
.fw-il-endpoint {
    display: flex;
    flex-direction: column;
    gap: 2px;
    line-height: 1.3;
    min-width: 0;
}
.fw-il-endpoint__iface {
    font-size: 0.84rem;
}
.fw-il-endpoint__net {
    color: var(--md-on-surface-variant, #a8a29e);
    font-size: 0.76rem;
    font-family: var(--font-mono, ui-monospace, monospace);
    word-break: break-all;
}
#view-firewall #fw-snat-tabs,
#view-firewall .fw-snat-subtabs {
    flex-shrink: 0;
}
#view-firewall #fw-snat-tab-snat:not([hidden]),
#view-firewall #fw-snat-tab-dest:not([hidden]),
#view-firewall [id^="fw-snat-tab-snat-"]:not([hidden]),
#view-firewall [id^="fw-snat-tab-dest-"]:not([hidden]) {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
    overflow: hidden;
}
/* Toolbar de reglas de Cortafuegos: botón "Agregar regla" arriba a la derecha,
   en celeste oscuro (token --color-action-edit). Aplica a inter-LAN / SNAT / DNAT. */
.firewall-rules-toolbar {
    display: flex;
    justify-content: flex-end;
    align-items: center;
    flex-wrap: wrap;
    gap: 10px;
    margin-bottom: 8px;
    padding: 4px 12px 0 0;
    width: 100%;
    max-width: 100%;
    min-width: 0;
    box-sizing: border-box;
}
.btn-rule-add {
    background: var(--color-action-edit);
    color: var(--color-action-edit-text);
    border: 1px solid var(--color-action-edit-border);
}
.btn-rule-add:hover:not(:disabled) { filter: brightness(1.1); }
md-filled-button.btn-rule-add {
    --md-filled-button-container-color: var(--color-action-edit);
    --md-filled-button-label-text-color: var(--color-action-edit-text);
}
/* Ruteo → Configuración: toolbar tabla + agregar (mismo patrón que Cortafuegos). */
.routing-rules-toolbar {
    display: flex;
    justify-content: space-between;
    align-items: flex-end;
    flex-wrap: wrap;
    gap: 12px;
    margin-bottom: 12px;
}
.routing-rules-toolbar--end {
    justify-content: flex-end;
}
.routing-field-group--table-filter {
    min-width: 200px;
    max-width: 320px;
}
.routing-params-section .routing-inner-hint {
    margin: 0 0 12px;
}
.routing-dest-ips-cell .routing-dest-ip-chip {
    display: block;
    font-family: var(--font-mono, ui-monospace, monospace);
    font-size: 0.9em;
    line-height: 1.45;
}
.routing-route-table-cell {
    white-space: nowrap;
    font-weight: 500;
}
.routing-rule-row--filtered-out {
    display: none;
}
.routing-rule-row--fqdn .routing-fqdn-cell {
    word-break: break-word;
}
/* Tablas de ruteo: flex en <td class="lgrt-row-actions"> desincroniza el borde inferior de la fila. */
.lan-iface-table.routing-rule-table th.lgrt-row-actions,
.lan-iface-table.routing-rule-table td.lgrt-row-actions,
.lan-iface-table.route-policy-table th.lgrt-row-actions,
.lan-iface-table.route-policy-table td.lgrt-row-actions {
    display: table-cell;
    vertical-align: middle;
    white-space: nowrap;
}
.lan-iface-table.routing-rule-table tbody tr,
.lan-iface-table.route-policy-table tbody tr {
    border-bottom: 1px solid rgba(63, 63, 70, 0.55);
}
.lan-iface-table.routing-rule-table tbody td,
.lan-iface-table.route-policy-table tbody td {
    border-bottom: none;
}
.lan-iface-table.routing-rule-table tbody tr:hover td,
.lan-iface-table.route-policy-table tbody tr:hover td {
    background: rgba(255, 255, 255, 0.02);
}
#view-routing #routing-config-tabs.mon-tabs {
    margin-top: 0;
}
#view-routing .routing-config-slice {
    margin-top: 0;
}
/* Modal "Agregar regla" de Cortafuegos (inter-LAN / DNAT / SNAT). */
.fw-rule-modal {
    position: fixed;
    inset: 0;
    z-index: 10050;
    display: flex;
    align-items: center;
    justify-content: center;
}
.fw-rule-modal__backdrop {
    position: absolute;
    inset: 0;
    background: rgba(0, 0, 0, 0.5);
}
.fw-rule-modal__card {
    position: relative;
    width: calc(100% - 32px);
    max-width: 560px;
    max-height: min(90vh, calc(100dvh - 40px));
    display: flex;
    flex-direction: column;
    overflow: hidden;
    padding: 20px;
    box-sizing: border-box;
    margin-bottom: 0;
    min-height: 0;
}
.fw-rule-modal .fw-rule-modal__card.cluster-node-card:hover {
    transform: none;
}
.fw-rule-modal__card h3 {
    margin: 0 0 14px 0;
    font-size: 1.05rem;
    font-weight: 600;
    flex-shrink: 0;
}
.fw-rule-modal__card form {
    display: flex;
    flex-direction: column;
    flex: 1 1 auto;
    min-height: 0;
    overflow: hidden;
}
.fw-rule-modal__grid {
    display: grid;
    grid-template-columns: 1fr 1fr;
    gap: 12px;
    flex: 1 1 auto;
    min-height: 0;
    overflow-y: auto;
    -webkit-overflow-scrolling: touch;
}
.fw-rule-modal__grid label {
    display: flex;
    flex-direction: column;
    gap: 4px;
    font-size: var(--font-size-small);
    color: var(--color-text-secondary);
}
.fw-rule-modal__grid label.fw-rule-modal__full {
    grid-column: 1 / -1;
}
.fw-rule-modal__grid label.fw-rule-modal__check {
    flex-direction: row;
    align-items: center;
    gap: 8px;
}
.fw-rule-modal__advanced-toggle {
    grid-column: 1 / -1;
    justify-self: start;
}
.fw-rule-modal__advanced {
    grid-column: 1 / -1;
    display: grid;
    grid-template-columns: repeat(2, minmax(0, 1fr));
    gap: 10px 12px;
}
.fw-rule-modal__advanced[hidden] {
    display: none;
}
.fw-il-endpoint__filter {
    display: block;
    margin-top: 2px;
    font-size: 0.78rem;
    color: #fdba74;
}
.firewall-params-toggles {
    display: flex;
    flex-direction: column;
    gap: 8px;
    margin-bottom: 12px;
}
.firewall-params-toggle {
    display: flex;
    align-items: center;
    gap: 8px;
    font-size: 0.9rem;
}
/* Fila parámetro + botón LOG: toggle con label a la izquierda, LOG a la derecha. */
.firewall-params-toggle-row {
    display: flex;
    align-items: center;
    gap: 10px;
}
.firewall-params-toggle-row .firewall-params-toggle {
    flex: 1 1 auto;
    min-width: 0;
}
.firewall-params-logbtn {
    display: inline-flex;
    align-items: center;
    gap: 6px;
    flex: 0 0 auto;
    padding: 2px 9px;
    font-size: 0.72rem;
    font-weight: 600;
    letter-spacing: 0.04em;
    line-height: 1.6;
    color: var(--md-on-surface-variant, #a8a29e);
    background: transparent;
    border: 1px solid rgba(63, 63, 70, 0.7);
    border-radius: 999px;
    cursor: pointer;
    transition: color 0.15s, border-color 0.15s, background 0.15s;
}
.firewall-params-logbtn[hidden] {
    display: none;
}
.firewall-params-logbtn:hover {
    border-color: rgba(120, 120, 130, 0.9);
    color: var(--md-on-surface, #e7e5e4);
}
.firewall-params-logbtn__dot {
    width: 7px;
    height: 7px;
    border-radius: 50%;
    background: rgba(120, 120, 130, 0.55);
    transition: background 0.15s, box-shadow 0.15s;
}
.firewall-params-logbtn.is-on {
    color: #fbbf24;
    border-color: rgba(251, 191, 36, 0.65);
    background: rgba(251, 191, 36, 0.08);
}
.firewall-params-logbtn.is-on .firewall-params-logbtn__dot {
    background: #fbbf24;
    box-shadow: 0 0 5px rgba(251, 191, 36, 0.8);
}
.firewall-params-nested {
    margin-bottom: 14px;
}
.firewall-params-nested--icmp {
    margin-bottom: 0;
}
.firewall-params-nested__body {
    margin-top: 8px;
    margin-left: 0;
    padding-left: 1.35rem;
    border-left: 2px solid rgba(113, 113, 122, 0.35);
}
.firewall-params-nested__body .form-label {
    margin-top: 2px;
    margin-bottom: 2px;
}
.firewall-params-icmp-mcast-sep {
    margin: 1.1rem 0;
    border: none;
    border-top: 1px solid rgba(63, 63, 70, 0.55);
}
.firewall-params-section--shared {
    margin-top: 4px;
    padding-top: 12px;
    border-top: 1px solid rgba(255, 255, 255, 0.08);
}
.firewall-params-nested--multicast {
    margin-bottom: 0;
}
.firewall-params-nested__body--hidden {
    display: none;
}
.firewall-params-nested--log-rate .firewall-params-nested__body:not(.firewall-params-nested__body--hidden) {
    display: flex;
    flex-wrap: wrap;
    align-items: flex-end;
    gap: 10px 16px;
}
.firewall-params-nested--log-rate .firewall-params-field {
    display: flex;
    flex-direction: column;
    gap: 4px;
    margin: 0;
    font-size: 0.85rem;
}
.firewall-params-nested--log-rate .firewall-params-field .form-control {
    width: 6.5rem;
}
.firewall-params-nested__hint {
    margin: 4px 0 0 0;
    font-size: 0.78rem;
    color: var(--md-on-surface-variant, #a8a29e);
    line-height: 1.35;
}
.firewall-params-table {
    width: 100%;
    table-layout: fixed;
    border-collapse: collapse;
    font-size: 0.84rem;
    margin: 0 0 var(--space-4);
}
.firewall-params-table th,
.firewall-params-table td {
    padding: 8px 10px;
    border-bottom: 1px solid rgba(63, 63, 70, 0.55);
    border-left: 0;
    border-right: 0;
    text-align: left;
    overflow-wrap: anywhere;
    vertical-align: top;
}
.firewall-params-table th {
    color: var(--md-on-surface-variant, #a8a29e);
    font-weight: 600;
    background: transparent;
    white-space: nowrap;
}
.firewall-params-status-row td.no-data {
    text-align: center;
    padding: 18px 12px;
}
.firewall-params-table tbody tr:hover td {
    background: rgba(255, 255, 255, 0.02);
}
.firewall-params-table .form-control {
    width: 100%;
    min-height: 2rem;
    padding: 5px 8px;
    font-size: 0.82rem;
    box-sizing: border-box;
    display: block;
}
.firewall-params-table__cell-toggle {
    text-align: left;
    vertical-align: top;
    width: 5rem;
    max-width: 5.5rem;
}
.firewall-params-table__cell-toggle--nat-lb {
    width: auto;
    min-width: 7.5rem;
    max-width: none;
}
.firewall-params-table thead th.firewall-params-table__cell-toggle {
    vertical-align: bottom;
}
.firewall-params-table__cell-toggle input[type="checkbox"] {
    margin: 0;
    display: inline-block;
    vertical-align: middle;
}
.firewall-params-table.fw-val-table th:first-child,
.firewall-params-table.fw-val-table td:first-child {
    width: auto;
}
.firewall-params-table__cell-action {
    text-align: center;
    width: 5.25rem;
}
.firewall-params-table td.firewall-params-table__cell-toggle,
.firewall-params-table th.firewall-params-table__cell-toggle {
    width: 5rem;
    max-width: 5.5rem;
}
.firewall-params-table td.firewall-params-table__cell-toggle--nat-lb,
.firewall-params-table th.firewall-params-table__cell-toggle--nat-lb {
    width: auto;
    min-width: 7.5rem;
    max-width: none;
}
.fw-nat-rule-table th:nth-child(n+4):not(:last-child):not(.firewall-params-table__cell-toggle),
.fw-nat-rule-table td:nth-child(n+4):not(:last-child):not(.firewall-params-table__cell-toggle),
.fw-snat-table th:nth-child(n+4):not(:last-child):not(.firewall-params-table__cell-toggle),
.fw-snat-table td:nth-child(n+4):not(:last-child):not(.firewall-params-table__cell-toggle) {
    width: 6.5rem;
}
.firewall-params-table td:not(.firewall-params-table__cell-toggle):not(.firewall-params-table__cell-action) {
    text-align: left;
}
.firewall-params-table th:last-child,
.firewall-params-table td:last-child {
    width: 5.25rem;
}
/* Quitar fila: pill compacta «Borrar» (inter-LAN / DNAT / SNAT / listas). */
.firewall-params-table .btn.fw-il-del,
.firewall-params-table .btn.fw-nat-del,
.firewall-params-table .btn.fw-snat-del,
.firewall-params-table .btn.fw-val-del {
    min-height: 0;
    width: auto;
    height: auto;
    padding: 2px 9px;
    font-size: 0.72rem;
    font-weight: 600;
    line-height: 1.35;
    border-radius: 999px;
    border: 1px solid #7f1d1d;
    box-shadow: none;
    white-space: nowrap;
}
.firewall-params-iface--wan td:nth-child(4) {
    color: #f87171;
}
.firewall-params-iface--lan td:nth-child(4) {
    color: #4ade80;
}
.firewall-params-preview {
    font-size: 0.82rem;
    margin-top: 8px;
}
.firewall-params-preview__rules {
    margin-top: 6px;
    padding: 8px;
    background: rgba(0, 0, 0, 0.25);
    border-radius: 4px;
    max-height: 160px;
    overflow: auto;
}
.firewall-params-rule {
    display: inline-block;
    margin: 2px 0;
    font-size: 0.78rem;
}
.firewall-params-list {
    display: flex;
    flex-direction: column;
    gap: 6px;
    margin-bottom: 12px;
}
.firewall-params-list-box {
    display: flex;
    flex-direction: column;
    padding: 0;
    border: none;
    border-radius: 0;
    background: transparent;
}
.firewall-params-list-box .firewall-params-textarea {
    width: 100%;
    min-height: 5.5rem;
    margin: 0;
    padding: 0;
    border: none;
    background: transparent;
    box-shadow: none;
    resize: vertical;
}
.firewall-params-textarea {
    font-family: ui-monospace, monospace;
    font-size: 0.82rem;
}
.firewall-params-iface-checklist {
    display: flex;
    flex-direction: column;
    gap: 6px;
    padding: 0;
    border: none;
    border-radius: 0;
    background: transparent;
    max-height: 220px;
    overflow: auto;
}
.firewall-params-icmp-checklist {
    max-height: 320px;
}
.firewall-params-mcast-checklist {
    max-height: 280px;
}
.firewall-params-iface-check {
    display: flex;
    align-items: center;
    gap: 8px;
    font-size: 0.88rem;
    cursor: pointer;
}
.firewall-params-iface-check input {
    flex-shrink: 0;
}
.firewall-params-iface-check__role {
    font-size: 0.68rem;
    font-weight: 600;
    padding: 1px 5px;
    border-radius: 3px;
    text-transform: uppercase;
}
.firewall-params-iface-check__role--wan {
    color: #f87171;
    background: rgba(127, 29, 29, 0.35);
}
.firewall-params-iface-check__role--lan {
    color: #4ade80;
    background: rgba(20, 83, 45, 0.35);
}
.firewall-params-iface-check__net {
    color: var(--md-on-surface-variant, #a8a29e);
    font-size: 0.78rem;
}
.wan-panel-slice,
.lan-panel-slice {
    width: 100%;
}
.iface-admin-subsection {
    border: 1px solid rgba(63, 63, 70, 0.55);
    border-radius: var(--md-radius-sm);
    padding: 12px;
    margin: 0 0 12px 0;
    background: rgba(24, 24, 27, 0.4);
    box-shadow: none;
}
.iface-admin-subsection__title {
    margin: 0 0 10px 0;
    font-size: 0.9rem;
    font-weight: 600;
    color: var(--md-on-surface);
}
.iface-admin-subsection__row {
    display: flex;
    flex-wrap: wrap;
    gap: 8px;
    align-items: center;
    margin-bottom: 8px;
}
.iface-admin-subsection__list {
    margin: 0;
    padding-left: 18px;
    color: var(--md-on-surface-variant);
    font-size: 0.82rem;
}
.iface-admin-subsection__list li {
    margin: 4px 0;
}
.iface-admin-subsection .btn {
    min-height: 32px;
    padding: 5px 10px;
}
.iface-admin-subsection .form-control {
    min-height: 34px;
    padding: 6px 10px;
}
/* Tema oscuro también para el listado nativo abierto de los <select> de los modales de interfaz. */
.lgrt-inm-modal select.form-control,
.lgrt-inm-modal input.form-control,
.iface-admin-subsection select.form-control {
    color-scheme: dark;
}
.routing-subsection {
    border: 1px solid rgba(251, 146, 60, 0.28);
    border-radius: var(--radius-md);
    background: rgba(24, 24, 27, 0.55);
    box-shadow: 0 4px 20px rgba(0, 0, 0, 0.35);
    overflow: hidden;
}
/* Ruteo: usar un solo contenedor visual (sin card interna). */
#view-routing .routing-subsection {
    border: 0;
    border-radius: 0;
    background: transparent;
    box-shadow: none;
}
.routing-subsection--dest {
    border-color: rgba(251, 146, 60, 0.42);
}
.routing-subsection__head {
    padding: var(--space-4) var(--space-4) var(--space-3);
    border-bottom: 1px solid rgba(113, 113, 122, 0.45);
    background: linear-gradient(180deg, rgba(67, 20, 7, 0.35) 0%, transparent 100%);
}
#view-routing .routing-subsection__head {
    padding: 0 0 var(--space-3);
    border-bottom: 0;
    background: transparent;
}
.routing-subsection__title {
    margin: 0;
    font-size: 1.05rem;
    font-weight: 600;
    color: #fdba74;
    letter-spacing: 0.02em;
}
.routing-subsection__lead {
    margin: 0 0 var(--space-3);
    font-size: 0.8125rem;
    line-height: 1.5;
    color: var(--md-on-surface-variant);
    max-width: 52rem;
}
.routing-subsection__flow {
    margin: 0;
    padding: 0;
    list-style: none;
    display: flex;
    flex-wrap: wrap;
    gap: var(--space-2) var(--space-4);
    font-size: 0.75rem;
    color: #d4d4d8;
}
.routing-subsection__flow li {
    display: inline-flex;
    align-items: center;
    gap: 6px;
}
.routing-flow-k {
    display: inline-flex;
    align-items: center;
    justify-content: center;
    width: 1.35rem;
    height: 1.35rem;
    border-radius: 50%;
    font-size: 0.7rem;
    font-weight: 700;
    background: rgba(249, 115, 22, 0.25);
    border: 1px solid rgba(251, 146, 60, 0.45);
    color: #fed7aa;
}
.routing-subsection__body {
    padding: var(--space-4);
}
#view-routing .routing-subsection__body {
    padding: 0;
}
.routing-subsection__body.dest-routes,
.routing-subsection__body.ip-routes.dest-routes {
    margin-top: 0;
    padding-top: var(--space-4);
    border-top: none;
}
.form-fieldset--routing-inner {
    margin: 0;
    border: 1px solid rgba(82, 82, 91, 0.65);
    background: rgba(9, 9, 17, 0.65);
}
#view-routing .form-fieldset--routing-inner {
    border: 0;
    background: transparent;
    padding: 0;
}
.routing-inner-hint {
    margin: 0 0 var(--space-3);
    font-size: 0.78rem;
    line-height: 1.45;
    color: var(--md-on-surface-variant);
}
.visually-hidden {
    position: absolute;
    width: 1px;
    height: 1px;
    padding: 0;
    margin: -1px;
    overflow: hidden;
    clip: rect(0, 0, 0, 0);
    white-space: nowrap;
    border: 0;
}
.wan-route-grid {
    display: grid;
    grid-template-columns: 1fr;
    gap: var(--space-3);
    margin-top: var(--space-2);
}
@media (min-width: 1100px) {
    .wan-route-grid {
        grid-template-columns: 1fr 1fr;
    }
}
.wan-route-tables-header {
    display: flex;
    flex-wrap: wrap;
    align-items: center;
    justify-content: space-between;
    gap: var(--space-2);
    margin-bottom: var(--space-1);
}
.wan-route-tables-header .wan-route-tables-toggle {
    flex-shrink: 0;
}
.wan-route-tables-wrap[hidden] {
    display: none !important;
}
.wan-route-list {
    list-style: none;
    margin: 8px 0 0;
    padding: 0;
    display: grid;
    gap: 6px;
}
.wan-route-list li {
    display: flex;
    justify-content: space-between;
    gap: 12px;
    font-family: var(--font-mono, monospace);
    font-size: var(--font-size-small);
    border-bottom: 1px dashed var(--md-outline);
    padding-bottom: 4px;
}
.wan-route-mode {
    color: var(--color-text-secondary);
    white-space: nowrap;
}
.wan-host-routes {
    margin: 8px 0 0;
    padding: 10px;
    border: 1px solid var(--md-outline);
    border-radius: var(--md-radius-sm);
    background: #070d1b;
    font-family: var(--font-mono, monospace);
    font-size: var(--font-size-small);
    max-height: 420px;
    overflow: auto;
    white-space: pre-wrap;
    word-break: break-word;
}
.wan-host-rules-group {
    margin-top: 10px;
}
.wan-host-rules-group:first-child {
    margin-top: 0;
}
.md-hint {
    font-size: 0.75rem;
    color: var(--md-on-surface-variant);
    margin-top: 8px;
    line-height: 1.4;
}
.md-hint code {
    font-size: 0.7rem;
    background: rgba(249, 115, 22, 0.12);
    padding: 2px 6px;
    border-radius: 4px;
    font-family: ui-monospace, monospace;
    color: #fdba74;
}
@media (max-width: 780px) {
    body.app-root { max-height: none; overflow: auto; }
    .workspace { flex-direction: column; flex: none; }
    .app-bar {
        padding: 10px 12px;
        min-height: auto;
    }
    .app-bar__title {
        font-size: 1.05rem;
    }
    .app-bar__subtitle {
        font-size: 0.72rem;
        opacity: .82;
    }
    .side-nav {
        width: 100%;
        flex-direction: row;
        flex-wrap: wrap;
        border-right: 0;
        border-bottom: 1px solid var(--md-outline);
        max-height: none;
    }
    .side-nav__top,
    .side-nav__mid,
    .side-nav__scroll { width: 100%; }
    .side-nav__picker {
        width: 100%;
        flex-direction: row;
        flex-wrap: wrap;
        align-items: stretch;
    }
    .side-nav__node-entry { flex: 1; min-width: 140px; }
    .side-nav__node-btn { width: 100%; }
    .side-nav__btn { flex: 1; min-width: 140px; }
    .workspace-body { flex: none; min-height: auto; }
    .workspace-cluster-strip {
        padding: var(--space-2) var(--space-3);
    }
    .workspace-cluster-strip__top {
        grid-template-columns: 1fr;
    }
    .workspace-strip-logo-slot {
        max-width: none;
        justify-content: flex-start;
        padding-left: var(--space-2);
    }
    .workspace-strip-main {
        padding-right: var(--lgrt-main-views-inset, 12px);
    }
    .workspace-strip-main__group {
        flex-direction: column;
        align-items: stretch;
    }
    .workspace-strip-main__group .header-active-wan-status {
        flex: 1 1 auto;
    }
    .workspace-cluster-strip .workspace-strip-logo-slot .side-nav__head-card {
        width: 100%;
        max-width: none;
        align-self: stretch;
    }
    .workspace-cluster-strip .side-nav__picker {
        grid-template-columns: 1fr;
    }
    .workspace-cluster-strip .side-nav__picker--strip {
        max-width: none;
        width: 100%;
    }
    .workspace-strip-main__group .side-nav__picker--strip {
        max-width: none;
    }
    .main-views {
        position: static;
        overflow-y: auto;
        overflow-x: hidden;
        flex: none;
        padding: var(--lgrt-main-views-inset, 12px);
    }
    .main-views > .view-panel.view-panel--active {
        position: static;
        inset: auto;
        flex: 0 1 auto;
        overflow: visible;
        min-height: auto;
    }
    #view-settings > #settings-tabs,
    #view-settings #settings-iface-af-tabs,
    #view-settings .settings-subsubnav,
    #view-monitoring > #monitoring-subnav,
    #view-interfaces #lan-af-tabs,
    #view-wan #wan-af-tabs,
    #view-routing #routing-config-tabs,
    #view-settings #settings_iface_admin > .iface-admin-toolbar {
        position: sticky;
        top: 0;
        z-index: 20;
        background: var(--lgrt-view-chrome-bg, rgba(2, 6, 23, 0.96));
    }
    .pinned-wan__links { flex-direction: column; }
}

/* Material Web (M3): tokens alineados al panel */
:root {
    --md-sys-color-primary: var(--color-primary);
    --md-sys-color-on-primary: var(--color-on-primary);
    --md-sys-color-surface: var(--color-surface);
    --md-sys-color-on-surface: var(--color-text);
    --md-sys-color-on-surface-variant: var(--color-text-secondary);
    --md-sys-color-outline: var(--color-border);
}
.app-modal__actions .btn,
.lgrt-inm-modal__footer .btn,
.lgrt-inm-modal__actions-row .btn {
    min-width: 7.5rem;
    min-height: 34px;
    user-select: none;
    -webkit-user-select: none;
    touch-action: manipulation;
}
/* Evitar que reglas locales (p. ej. admin_users embed) pisen .btn-enable en submit */
button[type=submit].btn-enable,
button[type=submit].btn-cancel,
button[type=submit].btn-disable,
button[type=submit].btn-remove,
button[type=submit].btn-edit {
    font-family: inherit;
}

/* Diálogo de confirmación (Material Web)
   El :host interno usa display:contents; en algunos motores el contenido slotado
   queda visible en el flujo del body cuando el diálogo no tiene [open]. */
#app-confirm-dialog:not([open]) {
    display: none !important;
}

/* Diálogo de confirmación (Material Web) */
#app-confirm-dialog {
    --md-dialog-container-color: #1c1917;
    --md-dialog-supporting-text-color: #e7e5e4;
    --md-dialog-headline-color: #fafaf9;
    /* Misma esquina que tarjetas del panel (no “pastilla” M3 extra-large) */
    --md-dialog-container-shape: var(--radius-md);
    max-width: min(28rem, calc(100vw - 32px));
}
.app-confirm-body {
    margin: 0;
    white-space: pre-wrap;
    font-size: var(--font-size-small);
    line-height: 1.5;
    color: #e7e5e4;
}
#app-confirm-dialog [slot="actions"] {
    display: flex;
    flex-wrap: wrap;
    gap: var(--space-3);
    justify-content: flex-end;
}
/* Misma familia que WAN / panel: filled, esquina moderada (no corner-full). */
#app-confirm-dialog md-filled-button {
    --md-filled-button-container-shape: var(--radius-md);
}
#app-confirm-dialog md-filled-button.app-confirm-cancel,
#app-confirm-dialog md-filled-button.btn-cancel {
    --md-filled-button-container-color: var(--color-action-cancel);
    --md-filled-button-label-text-color: #fff;
}
#app-confirm-dialog md-filled-button.app-confirm-cancel:hover,
#app-confirm-dialog md-filled-button.btn-cancel:hover {
    filter: brightness(1.06);
}

/* Botones de acción del panel (md-filled-button + clases .btn heredadas) */
md-filled-button.btn {
    vertical-align: middle;
    user-select: none;
    -webkit-user-select: none;
    touch-action: manipulation;
}
md-filled-button.btn:disabled {
    opacity: 0.5;
    pointer-events: none;
}
md-filled-button.btn-enable {
    --md-filled-button-container-color: var(--color-success);
    --md-filled-button-label-text-color: #fff;
}
md-filled-button.btn-cancel {
    --md-filled-button-container-color: var(--color-action-cancel);
    --md-filled-button-label-text-color: #fff;
}
md-filled-button.btn-disable,
md-filled-button.btn-disable.link-action {
    --md-filled-button-container-color: var(--color-action-danger);
    --md-filled-button-label-text-color: #fff;
}
md-filled-button.btn-edit {
    --md-filled-button-container-color: var(--color-action-edit);
    --md-filled-button-label-text-color: var(--color-action-edit-text);
}
md-filled-button.btn-add {
    --md-filled-button-container-color: var(--color-primary);
    --md-filled-button-label-text-color: var(--color-on-primary);
}
md-filled-button.btn-remove {
    --md-filled-button-container-color: var(--color-action-danger);
    --md-filled-button-label-text-color: #fff;
}
md-filled-button.btn-tag-save {
    --md-filled-button-container-color: var(--color-primary);
    --md-filled-button-label-text-color: var(--color-on-primary);
}
.wan-card .link-actions md-filled-button {
    margin-top: 4px;
}

.vpn-allowed-body .vpn-allowed-hint {
    margin: 0 0 12px;
    color: var(--color-muted, #94a3b8);
    font-size: 0.92rem;
}
.vpn-allowed-meta {
    margin-bottom: 12px;
    font-size: 0.9rem;
}
.vpn-allowed-table {
    width: 100%;
    border-collapse: collapse;
    margin-bottom: 10px;
}
.vpn-allowed-table th,
.vpn-allowed-table td {
    padding: 8px 10px;
    border-bottom: 1px solid rgba(255, 255, 255, 0.08);
    vertical-align: middle;
}
.vpn-allowed-toolbar {
    display: flex;
    justify-content: flex-end;
    flex-wrap: wrap;
    gap: 10px;
    margin-bottom: 16px;
    width: 100%;
    max-width: 100%;
    min-width: 0;
    box-sizing: border-box;
    padding-inline-end: 12px;
}
.vpn-client-row-actions .vpn-client-allowed {
    white-space: nowrap;
}