/* =============================================================
   DOODLY — RBAC chrome: impersonation banner, role switcher,
   access-denied, user management, permission matrix, audit log.
   ============================================================= */

/* impersonation banner */
.rbac-banner { display:flex; align-items:center; gap:.6rem; padding:.6rem 1.1rem; font-size:.86rem; font-weight:600;
  color:#5b3da8; background:linear-gradient(90deg,#efe9fc,#e4dafa); border-bottom:1px solid #cdbcf3; }
[data-theme="dark"] .rbac-banner { color:#c3aef6; background:linear-gradient(90deg,#241a3d,#1d1531); border-color:#3d2f63; }
.rbac-banner svg { flex:0 0 auto; }
.rbac-banner b { font-weight:800; }
.rbac-return { margin-left:auto; display:inline-flex; align-items:center; gap:.35rem; border:0; cursor:pointer;
  background:#5b3da8; color:#fff; font-weight:700; font-size:.8rem; border-radius:999px; padding:.36rem .8rem; }
.rbac-return:hover { background:#4a2f93; }

/* topbar role chip + switch menu */
.tb-role { display:inline-flex; align-items:center; gap:.35rem; font-size:.8rem; font-weight:800; color:var(--leaf-600);
  background:var(--mint-soft); border:1px solid var(--mint); border-radius:999px; padding:.32rem .7rem; }
.tb-roleswitch { position:relative; }
.tb-role-btn { cursor:pointer; }
.tb-role-btn:hover { background:var(--mint); }
.rbac-menu { position:absolute; top:calc(100% + 6px); right:0; z-index:60; width:230px; background:var(--surface);
  border:1px solid var(--line); border-radius:14px; box-shadow:var(--shadow-lg); padding:8px; }
.rbac-menu[hidden] { display:none; }
.rbac-menu-h { font-size:.68rem; font-weight:800; letter-spacing:.06em; text-transform:uppercase; color:var(--ink-3); padding:6px 8px; }
.rbac-opt { width:100%; display:flex; align-items:center; gap:.5rem; padding:.5rem .6rem; border:0; background:none; cursor:pointer;
  text-align:left; border-radius:9px; font-weight:600; font-size:.86rem; color:var(--forest); }
.rbac-opt:hover { background:var(--mint-soft); }
.rbac-opt.on { background:var(--mint-soft); color:var(--leaf-600); font-weight:800; }
.rbac-opt svg { color:var(--leaf-600); }

/* access denied */
.rbac-denied { max-width:460px; margin:50px auto; text-align:center; padding:40px 28px; border:1px solid var(--line);
  border-radius:24px; background:var(--surface); box-shadow:var(--shadow-sm); }
.rbac-denied-ic { width:78px; height:78px; margin:0 auto 16px; border-radius:50%; display:grid; place-items:center;
  background:#fde6e2; color:#c0392b; }
[data-theme="dark"] .rbac-denied-ic { background:#371814; color:#ff9d8a; }
.rbac-denied h2 { font-family:"Fraunces",serif; color:var(--forest); font-size:1.5rem; }
.rbac-denied p { color:var(--ink-2); margin:8px 0 18px; }
.rbac-denied .btn + .btn { margin-left:8px; }

/* role badges */
.rbac-rolebadge { display:inline-block; font-size:.66rem; font-weight:800; border-radius:999px; padding:.14rem .5rem;
  background:var(--surface-2); color:var(--ink-2); border:1px solid var(--line); }
.rbac-rolebadge.r-super_admin { background:#efe9fc; color:#5b3da8; border-color:#cdbcf3; }
.rbac-rolebadge.r-admin { background:var(--mint-soft); color:var(--leaf-600); border-color:var(--mint); }
.rbac-rolebadge.r-accountant, .rbac-rolebadge.r-marketing { background:#fff4dc; color:#7a4f00; border-color:#f2cd86; }

/* shared admin bar */
.rbac-bar { display:flex; align-items:center; justify-content:space-between; gap:1rem; flex-wrap:wrap; margin-bottom:14px; }
.rbac-uacts { white-space:nowrap; }
.rbac-uacts .link { background:none; border:0; color:var(--leaf-600); font-weight:700; font-size:.8rem; cursor:pointer; margin-right:.6rem; padding:0; }
.rbac-uacts .rbac-del { color:#c0392b; }

/* permission matrix */
.rbac-matrix table { min-width:760px; }
.rbac-modcell { white-space:nowrap; }
.rbac-modcell small { display:block; color:var(--ink-3); font-size:.7rem; }
.rbac-lvl { padding:.3rem .4rem; border-radius:8px; border:1px solid var(--line); background:var(--surface); color:var(--forest); font:inherit; font-size:.8rem; }
.rbac-lvl:focus { outline:none; border-color:var(--leaf); box-shadow:var(--ring); }

/* audit filters */
.rbac-filters { display:flex; gap:6px; flex-wrap:wrap; }
.rbac-chip { padding:.35rem .8rem; border-radius:999px; border:1px solid var(--line); background:var(--surface); color:var(--forest); font-weight:700; font-size:.8rem; cursor:pointer; }
.rbac-chip.on { border-color:var(--leaf); background:var(--mint-soft); color:var(--leaf-600); }

/* modals (user create/edit) */
.rbac-modal { position:fixed; inset:0; z-index:1320; display:grid; place-items:center; padding:16px;
  background:rgba(8,30,21,.42); backdrop-filter:blur(4px); opacity:0; pointer-events:none; transition:opacity .25s; }
.rbac-modal.show { opacity:1; pointer-events:auto; }
.rbac-modal-card { width:100%; max-width:420px; background:var(--surface); border-radius:22px; border:1px solid var(--line);
  box-shadow:var(--shadow-lg); padding:18px; transform:translateY(14px) scale(.97); transition:transform .25s cubic-bezier(.2,1.1,.3,1);
  max-height:calc(100vh - 32px); overflow-y:auto; -webkit-overflow-scrolling:touch; }
.rbac-modal.show .rbac-modal-card { transform:none; }
.rbac-modal-head { display:flex; align-items:center; justify-content:space-between; margin-bottom:12px; }
.rbac-modal-head h3 { font-family:"Fraunces",serif; color:var(--forest); font-size:1.25rem; }
.rbac-x { width:32px; height:32px; border-radius:50%; border:1px solid var(--line); background:var(--surface); color:var(--forest); cursor:pointer; }
.rbac-f { display:block; margin-bottom:10px; }
.rbac-f span { display:block; font-size:.78rem; font-weight:700; color:var(--forest); margin-bottom:4px; }
.rbac-f input, .rbac-f select { width:100%; padding:.65rem .8rem; border-radius:11px; border:1px solid var(--line); background:var(--surface); color:var(--forest); font:inherit; }
.rbac-f input:focus, .rbac-f select:focus { outline:none; border-color:var(--leaf); box-shadow:var(--ring); }
.rbac-check { display:flex; align-items:center; gap:.5rem; font-size:.84rem; color:var(--ink-2); margin-bottom:12px; }
.rbac-save { width:100%; }