{# Shared Threat Detection (EDR) console nav — consistent across security pages. #}
{% set p = (request.url.path if request else '') %}
<style>
  .secnav-wrap { margin-bottom:16px; }
  .secnav-title { display:flex; align-items:center; gap:10px; margin-bottom:8px; }
  .secnav-title .ico { width:30px; height:30px; border-radius:8px; background:linear-gradient(135deg,#2ee06a,#158f38); display:flex; align-items:center; justify-content:center; font-size:15px; color:#08120b; }
  .secnav-title h1 { font-size:18px; margin:0; } .secnav-title .sub { color:var(--muted); font-size:11.5px; }
  .secnav { display:flex; gap:2px; flex-wrap:wrap; border-bottom:1px solid var(--line); }
  .secnav a { padding:9px 15px; font:600 13px/1 var(--font-sans); color:var(--muted); border-bottom:2px solid transparent; text-decoration:none; white-space:nowrap; }
  .secnav a:hover { color:var(--ink); background:var(--surface-2); border-radius:6px 6px 0 0; }
  .secnav a.on { color:var(--ink); border-bottom-color:var(--accent); }
</style>
<div class="secnav-wrap">
  <div class="secnav-title">
    <span class="ico">&#128737;</span>
    <div><h1>Threat Detection &amp; Response</h1><div class="sub">SD Tech Solutions &middot; EDR + threat intelligence</div></div>
  </div>
  {% if user.is_super_admin %}
  <nav class="secnav">
    <a href="/security" class="{{ 'on' if p == '/security' else '' }}">Overview</a>
    <a href="/security/autoresponse" class="{{ 'on' if p.startswith('/security/autoresponse') else '' }}">Auto-Response</a>
    <a href="/security/schedule" class="{{ 'on' if p.startswith('/security/schedule') else '' }}">Schedule</a>
    <a href="/security/controls" class="{{ 'on' if p.startswith('/security/controls') else '' }}">Controls</a>
    <a href="/security/rules" class="{{ 'on' if p.startswith('/security/rules') else '' }}">Rule Tuning</a>
    <a href="/security/threatintel" class="{{ 'on' if p.startswith('/security/threatintel') else '' }}">Threat Intel</a>
  </nav>
  {% endif %}
</div>