/* public/assets/css/s29-rbac.css
   KHMER HRMS — RBAC Fine-Tuning & Permission Matrix (S29)
   Follows the Premium UI spec (Master List §4): soft shadows, 8px
   spacing scale, CSS-variable theming only (day/night safe). Covers
   the single-role permission editor (admin/roles/permissions.php)
   and the full roles × permissions grid (admin/roles/matrix.php).
   Zero CDN — plain CSS, no framework. */

/* ── Single-role editor: per-module checkbox cards ─────────────── */
.rbac-module-card { padding: var(--space-2); }

.rbac-module-head {
    display: flex;
    align-items: center;
    justify-content: space-between;
    flex-wrap: wrap;
    gap: var(--space-1);
    margin-bottom: var(--space-1);
    padding-bottom: var(--space-1);
    border-bottom: 1px solid var(--border);
}

.rbac-module-head h3 { margin: 0; font-size: 1rem; }

.rbac-select-all {
    display: inline-flex;
    align-items: center;
    gap: 6px;
    font-size: 0.8rem;
    color: var(--text-muted);
    cursor: pointer;
    user-select: none;
}

.rbac-perm-grid {
    display: grid;
    grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
    gap: var(--space-1);
}

.rbac-perm-item {
    display: flex;
    align-items: flex-start;
    gap: 8px;
    padding: 8px 10px;
    border: 1px solid var(--border);
    border-radius: var(--radius-sm);
    background: var(--surface);
    cursor: pointer;
    transition: border-color 0.15s ease, background 0.15s ease;
}

.rbac-perm-item:hover { border-color: var(--primary); background: var(--surface-alt); }

.rbac-perm-item input[type="checkbox"] { margin-top: 3px; flex-shrink: 0; }

/* ── Sticky bottom Save bar (long-form / long-grid screens) ─────── */
.rbac-actions-bar {
    position: sticky;
    bottom: 0;
    z-index: 20;
    display: flex;
    gap: 10px;
    flex-wrap: wrap;
    align-items: center;
    padding: var(--space-1) var(--space-2);
    margin-top: var(--space-2);
    background: var(--surface);
    border: 1px solid var(--border);
    border-radius: var(--radius);
    box-shadow: 0 -4px 16px rgba(0, 0, 0, 0.08);
}

/* ── Full Permission Matrix grid ─────────────────────────────────── */
.rbac-matrix-wrap {
    max-height: 70vh;
    overflow: auto;
    -webkit-overflow-scrolling: touch;
    border: 1px solid var(--border);
    border-radius: var(--radius);
}

.rbac-matrix-table { border-collapse: separate; border-spacing: 0; min-width: 100%; }

.rbac-matrix-table thead th {
    position: sticky;
    top: 0;
    z-index: 5;
    background: var(--surface-alt);
    border-bottom: 2px solid var(--border);
    padding: 10px 12px;
    white-space: nowrap;
}

.rbac-matrix-sticky-col {
    position: sticky;
    left: 0;
    z-index: 6;
    background: var(--surface);
    text-align: left;
    padding: 8px 12px;
    min-width: 260px;
    max-width: 340px;
    border-right: 2px solid var(--border);
}

thead .rbac-matrix-sticky-col { z-index: 8; background: var(--surface-alt); }

.rbac-matrix-role-head {
    text-align: center;
    min-width: 120px;
}

.rbac-matrix-role-head > div { font-weight: 600; margin-bottom: 4px; }

.rbac-module-row td.rbac-module-cell {
    background: var(--surface-alt);
    font-weight: 700;
    font-size: 0.82rem;
    text-transform: uppercase;
    letter-spacing: 0.02em;
    color: var(--text-muted);
    padding: 8px 12px;
    position: static;
    border-right: none;
}

.rbac-matrix-perm-row td { border-bottom: 1px solid var(--border); }
.rbac-matrix-perm-row:hover td { background: var(--surface-alt); }

.rbac-matrix-cell { text-align: center; padding: 6px; }
.rbac-matrix-cell input[type="checkbox"] { width: 18px; height: 18px; cursor: pointer; }

/* ── Mobile: matrix stays a horizontally-scrolling table (never a
   card-mode table — a checkbox grid has no natural "label: value"
   pairing to collapse into), per Rule #11's phone/tablet/desktop
   requirement. ─────────────────────────────────────────────────── */
@media (max-width: 767.98px) {
    .rbac-matrix-wrap { max-height: 65vh; }
    .rbac-matrix-sticky-col { min-width: 200px; max-width: 220px; }
    .rbac-perm-grid { grid-template-columns: 1fr; }
    .rbac-actions-bar { flex-direction: column; align-items: stretch; }
    .rbac-actions-bar .btn { width: 100%; justify-content: center; }
}

/* ── Permission search box (shared: Matrix toolbar + single-role editor) ── */
.rbac-search {
    position: relative;
    display: inline-flex;
    align-items: center;
    width: 280px;
    max-width: 100%;
    height: 38px;
    border: 1px solid var(--border);
    border-radius: 10px;
    background: var(--surface);
    transition: border-color .15s ease, box-shadow .15s ease;
}
.rbac-search:focus-within {
    border-color: var(--primary);
    box-shadow: 0 0 0 3px color-mix(in srgb, var(--primary) 18%, transparent);
}
.rbac-search > svg {
    position: absolute;
    inset-inline-start: 11px;
    width: 16px;
    height: 16px;
    color: var(--text-muted);
    pointer-events: none;
}
.rbac-search input[type="search"] {
    width: 100%;
    height: 100%;
    padding: 0 34px;
    border: 0;
    outline: 0;
    background: transparent;
    color: var(--text);
    font-size: .875rem;
    -webkit-appearance: none;
    appearance: none;
}
.rbac-search input[type="search"]::-webkit-search-cancel-button { display: none; }
.rbac-search-clear {
    position: absolute;
    inset-inline-end: 6px;
    width: 24px;
    height: 24px;
    border: 0;
    border-radius: 50%;
    background: var(--surface-alt);
    color: var(--text-muted);
    font-size: 1rem;
    line-height: 1;
    cursor: pointer;
}
.rbac-search-clear:hover { background: var(--border); color: var(--text); }
.rbac-search-clear[hidden] { display: none; }

/* In the Matrix the box sits in .table-toolbar-left right after "Show N" */
.table-toolbar-left .rbac-search { width: 260px; }

/* ── Single-role editor toolbar: search + Select/Clear all on the LEFT ── */
.rbac-toolbar {
    position: sticky;
    top: 0;
    z-index: 15;
    display: flex;
    align-items: center;
    justify-content: flex-start;
    flex-wrap: wrap;
    gap: 10px;
    padding: 10px 14px;
    margin-bottom: var(--space-2);
    background: var(--surface);
    border: 1px solid var(--border);
    border-radius: var(--radius);
    box-shadow: 0 2px 10px rgba(0, 0, 0, .06);
}
.rbac-toolbar-actions { display: inline-flex; align-items: center; gap: 8px; }
.rbac-toolbar-actions .btn { height: 38px; display: inline-flex; align-items: center; gap: 6px; }
.rbac-toolbar-actions .btn svg { width: 14px; height: 14px; }
.rbac-toolbar-count {
    margin-inline-start: auto;
    padding: 4px 10px;
    border-radius: 999px;
    background: var(--surface-alt);
    font-size: .78rem;
    font-variant-numeric: tabular-nums;
}
@media (max-width: 640px) {
    .rbac-search, .table-toolbar-left .rbac-search { width: 100%; }
    .rbac-toolbar-actions { width: 100%; }
    .rbac-toolbar-actions .btn { flex: 1 1 0; justify-content: center; }
    .rbac-toolbar-count { margin-inline-start: 0; }
}

/* ── Delegated administration: permissions outside the viewer's authority ── */
.rbac-perm-item.is-locked {
    opacity: .6;
    cursor: not-allowed;
    background: var(--surface-alt);
    border-style: dashed;
}
.rbac-perm-item.is-locked:hover { border-color: var(--border); background: var(--surface-alt); }
.rbac-perm-item.is-locked input[type="checkbox"] { cursor: not-allowed; }
.rbac-lock-badge {
    display: inline-flex;
    align-items: center;
    gap: 4px;
    margin-inline-start: 6px;
    padding: 1px 8px;
    border-radius: 999px;
    background: color-mix(in srgb, var(--primary) 10%, transparent);
    color: var(--text-muted);
    font-size: .68rem;
    font-weight: 600;
    vertical-align: middle;
}
.rbac-lock-badge svg { width: 11px; height: 11px; }