/* Multi-user ERP foundation: authentication, identity, access and conflicts. */

html.erp-locked,
html.erp-locked body { overflow: hidden; }

.erp-auth-root {
  position: fixed;
  z-index: 1000;
  inset: 0;
  display: grid;
  place-items: center;
  padding: 24px;
  background: color-mix(in srgb, var(--bg) 94%, #07111a);
}

.erp-auth-card {
  width: min(470px, 100%);
  max-height: calc(100dvh - 32px);
  overflow-y: auto;
  padding: 30px;
  border: 1px solid var(--line);
  border-radius: 18px;
  background: var(--panel);
  box-shadow: 0 28px 90px rgba(4, 15, 24, .32);
}

.erp-auth-loading { display: flex; align-items: center; justify-content: center; gap: 12px; min-height: 180px; color: var(--ink-2); }
.erp-auth-loading > span { width: 18px; height: 18px; border: 2px solid var(--line); border-top-color: var(--accent); border-radius: 50%; animation: erp-spin .8s linear infinite; }
@keyframes erp-spin { to { transform: rotate(360deg); } }

.erp-auth-brand { display: flex; align-items: baseline; justify-content: space-between; padding-bottom: 18px; border-bottom: 1px solid var(--line-2); }
.erp-auth-brand b { font-size: 16px; letter-spacing: .02em; }
.erp-auth-brand span { color: var(--accent); font-size: 10px; font-weight: 750; letter-spacing: .08em; text-transform: uppercase; }
.erp-auth-copy { margin: 22px 0 19px; }
.erp-auth-copy h1 { margin: 0; font-size: 27px; line-height: 1.15; letter-spacing: -.035em; }
.erp-auth-copy p { margin: 8px 0 0; color: var(--ink-2); line-height: 1.6; }

.erp-auth-form { display: grid; gap: 13px; }
.erp-auth-form label,
.erp-add-user label { display: grid; gap: 6px; color: var(--ink-2); font-size: 11px; font-weight: 650; }
.erp-auth-form input,
.erp-add-user input,
.erp-add-user select { width: 100%; min-height: 43px; padding: 9px 11px; background: var(--panel-2); }
.erp-auth-form > .btn { min-height: 45px; margin-top: 3px; }
.erp-auth-footer { margin-top: 18px; padding-top: 15px; border-top: 1px solid var(--line-2); color: var(--ink-3); font-size: 10.5px; text-align: center; }
.erp-auth-message { margin: -6px 0 14px; padding: 10px 11px; border-radius: 8px; font-size: 11px; }
.erp-auth-message.bad { color: var(--red); background: var(--red-bg); }
.erp-auth-message.good { color: var(--green); background: var(--green-bg); }

.erp-auth-safety { display: grid; gap: 3px; margin: 3px 0; padding: 11px 12px; border: 1px solid color-mix(in srgb, var(--green) 24%, var(--line)); border-radius: 9px; color: var(--green); background: var(--green-bg); }
.erp-auth-safety b { font-size: 11px; }
.erp-auth-safety span { color: var(--ink-2); font-size: 10.5px; line-height: 1.5; }

.erp-migration-checks { display: grid; gap: 9px; margin-bottom: 16px; }
.erp-migration-checks > div { display: flex; gap: 11px; padding: 11px; border: 1px solid var(--line-2); border-radius: 9px; background: var(--panel-2); }
.erp-migration-checks > div > span { display: grid; place-items: center; flex: none; width: 25px; height: 25px; border-radius: 50%; color: var(--accent); background: var(--accent-soft); font-weight: 800; }
.erp-migration-checks p { display: grid; gap: 2px; margin: 0; }
.erp-migration-checks b { font-size: 11px; }
.erp-migration-checks small { color: var(--ink-2); font-size: 10.5px; line-height: 1.45; }
.erp-migrate-button { width: 100%; min-height: 45px; }

.erp-user-menu { position: relative; }
.erp-user-menu > summary {
  display: flex;
  align-items: center;
  gap: 7px;
  min-height: 34px;
  padding: 3px 9px 3px 4px;
  border: 1px solid var(--line);
  border-radius: 9px;
  color: var(--ink);
  background: var(--panel-2);
  cursor: pointer;
  list-style: none;
}
.erp-user-menu > summary::-webkit-details-marker { display: none; }
.erp-user-avatar,
.erp-user-row-avatar { display: grid; place-items: center; flex: none; border-radius: 8px; color: var(--accent); background: var(--accent-soft); font-weight: 800; }
.erp-user-avatar { width: 27px; height: 27px; font-size:10px; }
.erp-user-name { font-size: 11px; font-weight: 700; }
.erp-user-popover { position: absolute; z-index: 100; top: calc(100% + 7px); right: 0; width: 270px; padding: 13px; border: 1px solid var(--line); border-radius: 11px; background: var(--panel); box-shadow: 0 16px 48px rgba(7, 18, 27, .24); }
.erp-user-menu:not([open]) > .erp-user-popover { display: none; }
.erp-user-identity { display: grid; gap: 2px; padding-bottom: 11px; border-bottom: 1px solid var(--line-2); }
.erp-user-identity b { font-size: 12px; }
.erp-user-identity span { color: var(--ink-3); font-size: 10px; }
.erp-user-workspace { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 11px 0; color: var(--ink-2); font-size: 10.5px; }
.erp-user-workspace b { color: var(--green); }
.erp-user-popover .btn { width: 100%; }

.erp-conflict { position: fixed; z-index: 950; inset: 0; display: grid; place-items: center; padding: 20px; background: rgba(7, 14, 20, .68); }
.erp-conflict-card { width: min(500px, 100%); padding: 24px; border: 1px solid color-mix(in srgb, var(--orange) 35%, var(--line)); border-radius: 15px; background: var(--panel); box-shadow: 0 24px 80px rgba(0, 0, 0, .38); }
.erp-conflict-card h2 { margin: 0; font-size: 20px; }
.erp-conflict-card p { margin: 9px 0 18px; color: var(--ink-2); }
.erp-conflict-card > div:last-child { display: flex; justify-content: flex-end; gap: 8px; }

.erp-central-badge { padding: 6px 9px; border: 1px solid var(--line); border-radius: 8px; color: var(--ink-2); background: var(--panel-2); font-size: 10px; white-space: nowrap; }
.erp-central-badge b { color: var(--green); }
.erp-access-summary { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 9px; }
.erp-access-summary > div { display: grid; gap: 3px; padding: 11px; border: 1px solid var(--line-2); border-radius: 9px; background: var(--panel-2); }
.erp-access-summary span { color: var(--ink-3); font-size:10.5px; font-weight: 700; letter-spacing: .05em; text-transform: uppercase; }
.erp-access-summary b { font-size: 11px; }
.erp-access-summary small { color: var(--ink-2); font-size:10.5px; }

.erp-admin-grid { display: grid; grid-template-columns: minmax(0, 1.25fr) minmax(280px, .75fr); gap: 11px; margin-top: 12px; }
.erp-admin-panel { min-width: 0; border: 1px solid var(--line); border-radius: 9px; overflow: hidden; }
.erp-admin-panel-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; min-height: 55px; padding: 10px 12px; border-bottom: 1px solid var(--line-2); background: var(--panel-2); }
.erp-admin-panel-head h3 { margin: 0; font-size: 12px; }
.erp-admin-panel-head p { margin: 2px 0 0; color: var(--ink-3); font-size:10.5px; }
.erp-add-user { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; padding: 12px; border-bottom: 1px solid var(--line); background: var(--accent-soft); }
.erp-add-user[hidden] { display: none; }
.erp-form-message { grid-column: 1 / -1; min-height: 0; font-size: 10px; }
.erp-form-message.bad { color: var(--red); }
.erp-form-actions { grid-column: 1 / -1; display: flex; justify-content: flex-end; gap: 7px; }
.erp-users-list,
.erp-audit-list { max-height: 370px; overflow-y: auto; }
.erp-user-row { display: grid; grid-template-columns: 31px minmax(120px, 1fr) minmax(120px, 1fr) auto auto; align-items: center; gap: 8px; min-height: 54px; padding: 8px 10px; border-bottom: 1px solid var(--line-2); }
.erp-user-row:last-child { border-bottom: 0; }
.erp-user-row-avatar { width: 31px; height: 31px; font-size:10px; }
.erp-user-row > div { display: grid; min-width: 0; }
.erp-user-row > div b { overflow: hidden; text-overflow: ellipsis; font-size: 10.5px; white-space: nowrap; }
.erp-user-row > div span,
.erp-user-role { overflow: hidden; color: var(--ink-3); font-size:10px; text-overflow: ellipsis; white-space: nowrap; }
.erp-user-status { padding: 3px 6px; border-radius: 999px; font-size:10px; font-weight: 800; text-transform: uppercase; }
.erp-user-status.active { color: var(--green); background: var(--green-bg); }
.erp-user-status.disabled { color: var(--red); background: var(--red-bg); }

/* Read-only roles should still be able to inspect the exact values without the
 * browser fading them into illegibility. The server remains the authority; this
 * visual state prevents users from starting edits that will be rejected. */
.erp-workspace-readonly [data-k]:disabled {
  opacity: 1;
  color: var(--ink-2);
  cursor: not-allowed;
  background: var(--panel-2);
}
.erp-workspace-readonly button:disabled { cursor: not-allowed; }
.erp-user-you { color: var(--ink-3); font-size:10px; text-align: center; }
.erp-audit-row { display: flex; align-items: flex-start; gap: 9px; padding: 9px 11px; border-bottom: 1px solid var(--line-2); }
.erp-audit-row > span { flex: none; width: 7px; height: 7px; margin-top: 5px; border-radius: 50%; background: var(--accent); }
.erp-audit-row > div { display: grid; gap: 2px; }
.erp-audit-row b { font-size: 10.5px; }
.erp-audit-row small { color: var(--ink-3); font-size:10px; }
.erp-admin-loading { padding: 22px; color: var(--ink-3); font-size: 10.5px; text-align: center; }

@media (max-width: 1050px) {
  #view-lists .settings-index { grid-template-columns: repeat(5, minmax(120px, 1fr)); }
  .erp-admin-grid { grid-template-columns: 1fr; }
}

@media (max-width: 760px) {
  .erp-auth-root { padding: 10px; }
  .erp-auth-card { padding: 22px 18px; border-radius: 14px; }
  .erp-auth-copy h1 { font-size: 24px; }
  .erp-user-name { display: none; }
  .erp-user-menu > summary { padding-right: 4px; }
  .erp-access-summary { grid-template-columns: 1fr; }
  .erp-central-badge { align-self: stretch; text-align: center; }
  .erp-add-user { grid-template-columns: 1fr; }
  .erp-user-row { grid-template-columns: 31px minmax(0, 1fr) auto auto; }
  .erp-user-role { grid-column: 2; }
  .erp-user-status { grid-column: 3; grid-row: 1; }
  .erp-user-row > .btn,
  .erp-user-you { grid-column: 4; grid-row: 1 / span 2; }
  .erp-conflict-card > div:last-child { align-items: stretch; flex-direction: column; }
}

@media (max-width: 520px) {
  #view-lists .settings-index { grid-template-columns: repeat(5, max-content); }
  .erp-user-popover { position: fixed; top: 58px; right: 8px; left: 8px; width: auto; }
}

@media (prefers-reduced-motion: reduce) {
  .erp-auth-loading > span { animation-duration: 1.6s; }
}