/*
 * People and Authentication (the Settings tabs) — who is in the account, what
 * their role is, the published capability table that says what each role may
 * do, and the sign-in security tables beside them.
 *
 * Only what is local to those tabs lives here: the grids and their cells.
 * The panel, button, modal and dropdown systems are in app.css, and the role
 * dropdown's boxed register is registered there as `.ppl-field .dd-trigger`.
 */

.ppl-tab-hdr {
  display: flex; align-items: flex-start; justify-content: space-between; gap: 16px;
  margin-bottom: 18px;
}
.ppl-tab-hdr .ppl-sec-sub { margin: 0; }

.ppl-section { margin-bottom: 30px; }
.ppl-section-title {
  font-size: 12px; font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .06em);
  color: var(--muted); margin-bottom: 10px;
}

/* ── people ──────────────────────────────────────────────────────────────── */

.ppl-rows {
  border: 1px solid var(--border);
  border-radius: var(--r);
  overflow: hidden;
  background: var(--surface);
}
.ppl-row {
  display: grid;
  /* Name, email, role, status, joined/invited, two-factor, actions — SEVEN
     columns since the people table gained the lifecycle cells. A count short of
     the cells the row emits does not overflow, it wraps: the actions would drop
     onto a second grid row under the name. */
  grid-template-columns: 1fr 1.3fr 150px 90px 160px 100px 420px;
  align-items: center;
  gap: 14px;
  padding: 11px 16px;
  border-top: 1px solid var(--border);
  font-size: 13.5px;
}
.ppl-row:first-child { border-top: none; }
.ppl-head {
  font-size: max(11px, var(--label-min-size, 0px)); font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .05em);
  color: var(--muted); background: var(--lift);
}
.ppl-name { display: flex; align-items: center; gap: 8px; font-weight: 600; }
.ppl-you {
  font-size: 10.5px; font-weight: 600; color: var(--accent);
  background: color-mix(in srgb, var(--accent) 12%, transparent);
  padding: 2px 7px; border-radius: 999px;
}
.ppl-email { color: var(--muted); overflow: hidden; text-overflow: ellipsis; }
.ppl-status { font-weight: 600; }
.ppl-status.suspended { color: var(--warn, #c2410c); }
.ppl-status.invited { color: var(--muted); }
.ppl-expiry { display: block; font-size: 11px; color: var(--muted); }
.ppl-link {
  display: block; word-break: break-all; font-size: 12.5px;
  background: var(--lift); border: 1px solid var(--border); border-radius: var(--r);
  padding: 10px 12px; margin: 0 0 6px;
}
.ppl-role { color: var(--text); }
.ppl-cell-action { display: flex; justify-content: flex-end; gap: 6px; }

/* ── sign-in security ────────────────────────────────────────────────────── */

.ppl-sec-sub { color: var(--muted); font-size: 12.5px; margin: 0 0 10px; }
.ppl-rows + .ppl-sec-sub { margin-top: 18px; }
.ppl-locked-row { grid-template-columns: 1.2fr 1.6fr 180px 110px; }
.ppl-attempt-row { grid-template-columns: 1.4fr 1.6fr 1fr 1.2fr; }
.ppl-signin-row { grid-template-columns: 1.3fr 1fr 1.1fr 1.1fr 90px; }
.ppl-when { color: var(--muted); white-space: nowrap; }

/* ── sign-in timeouts ────────────────────────────────────────────────────── */

.ppl-timeouts { display: flex; align-items: flex-end; flex-wrap: wrap; gap: 10px 14px; }
.ppl-timeouts label {
  font-size: max(11px, var(--label-min-size, 0px)); font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .05em);
  color: var(--muted); align-self: center;
}
.ppl-timeouts input {
  width: 96px;
  background: var(--lift);
  border: 1px solid var(--border);
  border-radius: var(--dd-r);
  color: var(--text);
  font-family: var(--sans);
  font-size: 14px;
  padding: 8px 11px;
  outline: none;
}
.ppl-timeouts input:focus-visible { border-color: var(--accent); box-shadow: var(--dd-ring); }
.ppl-timeouts .ppl-form-error,
.ppl-timeouts .ppl-form-ok { flex-basis: 100%; margin-top: 0; }
.ppl-empty { color: var(--faint); }

/* ── the published capability table ──────────────────────────────────────── */

.ppl-matrix {
  border: 1px solid var(--border);
  border-radius: var(--r);
  overflow: hidden;
  background: var(--surface);
}
.ppl-matrix-row {
  display: grid;
  grid-template-columns: 1fr repeat(4, 88px);
  align-items: center;
  gap: 10px;
  padding: 9px 16px;
  border-top: 1px solid var(--border);
  font-size: 13px;
}
.ppl-matrix-row:first-child { border-top: none; }
.ppl-cap {
  font-family: var(--mono); font-size: 12px; color: var(--accent);
  margin-right: 10px;
}
.ppl-permits { color: var(--muted); }
.ppl-holds { text-align: center; color: var(--muted); }

/* ── add a person ────────────────────────────────────────────────────────── */

.ppl-form { display: flex; flex-direction: column; gap: 6px; }
.ppl-form label {
  font-size: max(11px, var(--label-min-size, 0px)); font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .05em);
  color: var(--muted); margin-top: 12px;
}
.ppl-form input {
  background: var(--lift);
  border: 1px solid var(--border);
  border-radius: var(--dd-r);
  color: var(--text);
  font-family: var(--sans);
  font-size: 14px;
  padding: 10px 13px;
  outline: none;
}
.ppl-form input:focus-visible { border-color: var(--accent); box-shadow: var(--dd-ring); }
.ppl-form-error { color: var(--rose); font-size: 12.5px; margin-top: 12px; }
.ppl-form-ok { color: var(--emerald); font-size: 12.5px; margin-top: 12px; }

/* ── two-factor authentication ───────────────────────────────────────────── */

.ppl-mfa { font-size: 12.5px; color: var(--faint); }
.ppl-mfa.on { color: var(--emerald); }
.ppl-mfa-required { display: flex; flex-direction: column; align-items: flex-start; gap: 10px; }

/* ── single sign-on ──────────────────────────────────────────────────────── */

.sso-panel { display: flex; flex-direction: column; gap: 12px; }
.sso-lifted, .sso-warning {
  border: 1px solid var(--border);
  border-left: 3px solid var(--amber, var(--accent));
  border-radius: var(--dd-r);
  padding: 10px 13px;
  font-size: 12.5px;
  color: var(--text);
  background: var(--lift);
}
.sso-facts {
  display: grid;
  grid-template-columns: 190px 1fr;
  gap: 6px 14px;
  font-size: 12.5px;
  color: var(--muted);
}
.sso-facts > span:nth-child(odd) {
  font-size: max(11px, var(--label-min-size, 0px)); font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .05em);
}
.sso-test.ok { color: var(--emerald); }
.sso-test.failed { color: var(--rose); }
.sso-actions { display: flex; flex-wrap: wrap; gap: 8px; }
.sso-urls { display: flex; flex-direction: column; gap: 6px; }
.sso-url-row { display: flex; align-items: center; gap: 10px; }
.sso-url-label {
  font-size: max(11px, var(--label-min-size, 0px)); font-weight: 600; text-transform: var(--label-case, uppercase); letter-spacing: var(--label-tracking, .05em);
  color: var(--muted); min-width: 190px;
}
.sso-form { max-width: 620px; }
.sso-field { display: flex; flex-direction: column; gap: 4px; }
.sso-form textarea {
  background: var(--lift);
  border: 1px solid var(--border);
  border-radius: var(--dd-r);
  color: var(--text);
  font-family: var(--mono);
  font-size: 12.5px;
  padding: 10px 13px;
  outline: none;
  resize: vertical;
}
.sso-form textarea:focus-visible { border-color: var(--accent); box-shadow: var(--dd-ring); }

/* ── directory sync ──────────────────────────────────────────────────────── */

.dir-panel { display: flex; flex-direction: column; align-items: flex-start; gap: 12px; }
.dir-panel .ppl-rows { width: 100%; }
.dir-token {
  display: flex; align-items: center; flex-wrap: wrap; gap: 10px;
  border: 1px solid var(--border);
  border-left: 3px solid var(--emerald, var(--accent));
  border-radius: var(--dd-r);
  padding: 10px 13px;
  font-size: 12.5px;
  color: var(--text);
  background: var(--lift);
}
.dir-token > div { flex-basis: 100%; }
.dir-group-row { grid-template-columns: 1.6fr 100px 220px; }
.dir-activity-row { grid-template-columns: 1.2fr 1.4fr 1.1fr 2fr; }
.ppl-managed {
  display: block; font-size: 11px; color: var(--faint);
}

/* ── groups and roles ────────────────────────────────────────────────────── */

.grp-panel, .rol-panel {
  display: flex; flex-direction: column; align-items: flex-start; gap: 12px;
}
.grp-panel .ppl-rows, .rol-panel .ppl-rows, .rol-panel .ppl-matrix { width: 100%; }
.grp-actions { display: flex; flex-wrap: wrap; gap: 8px; }
.grp-row { grid-template-columns: 1.5fr 110px 1.6fr 1fr 1fr 190px; }
.rol-row { grid-template-columns: 1fr 2.4fr 1fr 1fr 150px; }
.acc-row { grid-template-columns: 1.6fr 1.4fr; }

/* The group name opens who is in it. A button, not a link: it opens a dialog
   rather than going anywhere, and only a button is reachable by keyboard for
   that. */
.grp-open {
  background: none; border: none; padding: 0; cursor: pointer;
  font: inherit; font-weight: 600; color: var(--accent); text-align: left;
}
.grp-open:hover { text-decoration: underline; }
.grp-desc, .grp-when, .grp-who {
  display: block; font-size: 11px; color: var(--faint); font-weight: 400;
}
.grp-missing {
  display: block; font-size: 11px; color: var(--warn, #c2410c); font-weight: 400;
}
.grp-pending { margin-left: 6px; font-size: 11px; color: var(--muted); }
.grp-source { color: var(--muted); }

.grp-roles, .grp-members { display: flex; flex-wrap: wrap; align-items: center; gap: 6px; }
.grp-chip {
  display: inline-flex; align-items: center; gap: 5px;
  border: 1px solid var(--border); border-radius: var(--dd-r-sm);
  padding: 2px 8px; font-size: 11.5px; background: var(--lift); color: var(--text);
}
.grp-chip-pending { color: var(--muted); border-style: dashed; }
.grp-chip-x {
  background: none; border: none; padding: 0; cursor: pointer;
  font-size: 13px; line-height: 1; color: var(--faint);
}
.grp-chip-x:hover { color: var(--rose); }
.grp-track { display: inline-flex; align-items: center; gap: 6px; font-size: 12.5px; }
.grp-none { color: var(--muted); font-size: 12.5px; max-width: 620px; }

.rol-builtin {
  font-size: max(10.5px, var(--label-min-size, 0px)); font-weight: 600; letter-spacing: var(--label-tracking, .04em); text-transform: var(--label-case, uppercase);
  color: var(--faint);
}
.rol-caps { display: flex; flex-wrap: wrap; gap: 4px; }
.rol-picker {
  display: flex; flex-direction: column; gap: 6px;
  max-height: 320px; overflow-y: auto;
  border: 1px solid var(--border); border-radius: var(--dd-r); padding: 10px 12px;
}
.rol-pick { display: grid; grid-template-columns: 18px 150px 1fr; align-items: center;
            gap: 8px; font-size: 12.5px; }

.acc-sources { display: flex; flex-direction: column; gap: 3px; }
.acc-source { font-size: 12px; color: var(--muted); }

/* ══ Imago (spec 005i) ═══════════════════════════════════════════════════════
   A row reads as a person: name, email, role, a status pill, two-factor, and
   two everyday actions; what changes somebody's account is under "More". */
.ppl-row { grid-template-columns: minmax(130px, 1fr) minmax(150px, 1.2fr) 150px 96px 160px 110px 232px; padding-top: 12px; padding-bottom: 12px; font-size: 14px; }
.ppl-head span { font-size: 13px; }
.ppl-name { font-weight: 600; }
.ppl-you { font-family: var(--sans); font-size: 12px; text-transform: none; letter-spacing: 0; }
.ppl-status { font-weight: 400; }
.ppl-status .im-pill { font-weight: 500; }
.ppl-when, .ppl-email { font-size: 13.5px; }
.ppl-expiry { font-size: 12.5px; }
.ppl-mfa { font-size: 13.5px; }
.ppl-mfa.on::before { content: '✓ '; font-weight: 600; }
.ppl-more { position: relative; display: inline-flex; }
.ppl-more-btn { min-width: 36px; padding: 0 8px; }
.ppl-more-menu { top: calc(100% + 6px); right: 0; z-index: 30; min-width: 210px; display: flex; flex-direction: column; }
.ppl-more-menu[hidden] { display: none; }
.ppl-section-title { font-size: 16px; }
.ppl-sec-sub { font-size: 14.5px; }
/* The sentence starts with a capital on screen; the source keeps the words
   run_user_lifecycle_test.py reads. */
.ppl-expiry { display: block; }
.ppl-expiry::first-letter { text-transform: uppercase; }