rustio-admin 0.4.0

/* rustio-admin — single hand-written stylesheet.
 *
 * Six-variable theme; project overrides via Admin::theme(...) and
 * its `_theme.html` partial that injects `:root { --rio-* … }`.
 * Mobile-first, three breakpoints. Dark palette flips via the
 * combination of `prefers-color-scheme: dark` and an explicit
 * `data-rio-theme="dark"` attribute on `<html>`.
 *
 * Self-hosted fonts (SIL OFL-1.1, see /static/fonts/LICENSE.txt):
 *
 *   Latin / UI    — Geist Variable (wght 100..900)
 *   Code          — Geist Mono Variable (wght 100..900)
 *   Arabic UI     — Tajawal 400 / 500 / 700
 *                   (compact surfaces: buttons, sidebar, tables, badges)
 *   Arabic body   — Noto Naskh Arabic Variable (wght 400..700)
 *                   (paragraphs, descriptions, long-form copy)
 *
 * The font binaries are baked into the rustio-admin binary; no CDN
 * round-trip, no FOUT, no GDPR/tracking surface. Browsers select
 * which Arabic face to load via `unicode-range` + the per-element
 * `font-family` resolution rules in §1.b below.
 */

/* ============================================================
 * 0. @font-face — self-hosted, OFL-1.1
 * ============================================================ */

/* Geist (variable Latin) ------------------------------------- */
@font-face {
  font-family: "Geist";
  src: url("/static/fonts/Geist-Variable.woff2") format("woff2-variations"),
       url("/static/fonts/Geist-Variable.woff2") format("woff2");
  font-weight: 100 900;
  font-style: normal;
  font-display: swap;
}
@font-face {
  font-family: "Geist Mono";
  src: url("/static/fonts/GeistMono-Variable.woff2") format("woff2-variations"),
       url("/static/fonts/GeistMono-Variable.woff2") format("woff2");
  font-weight: 100 900;
  font-style: normal;
  font-display: swap;
}

/* Tajawal (Arabic UI: compact surfaces) ---------------------- */
/* Three static weights — Tajawal has no public variable axis. The
 * unicode-range filters fetches to Arabic codepoints only. */
@font-face {
  font-family: "Tajawal";
  src: url("/static/fonts/Tajawal-Regular.woff2") format("woff2");
  font-weight: 400;
  font-style: normal;
  font-display: swap;
  unicode-range: U+0600-06FF, U+0750-077F, U+08A0-08FF, U+FB50-FDFF, U+FE70-FEFF, U+200C-200E, U+2010-2011, U+204F, U+2E41;
}
@font-face {
  font-family: "Tajawal";
  src: url("/static/fonts/Tajawal-Medium.woff2") format("woff2");
  font-weight: 500;
  font-style: normal;
  font-display: swap;
  unicode-range: U+0600-06FF, U+0750-077F, U+08A0-08FF, U+FB50-FDFF, U+FE70-FEFF, U+200C-200E, U+2010-2011, U+204F, U+2E41;
}
@font-face {
  font-family: "Tajawal";
  src: url("/static/fonts/Tajawal-Bold.woff2") format("woff2");
  font-weight: 700;
  font-style: normal;
  font-display: swap;
  unicode-range: U+0600-06FF, U+0750-077F, U+08A0-08FF, U+FB50-FDFF, U+FE70-FEFF, U+200C-200E, U+2010-2011, U+204F, U+2E41;
}

/* Noto Naskh Arabic (Arabic paragraph body) ------------------ */
@font-face {
  font-family: "Noto Naskh Arabic";
  src: url("/static/fonts/NotoNaskhArabic-Variable.woff2") format("woff2-variations"),
       url("/static/fonts/NotoNaskhArabic-Variable.woff2") format("woff2");
  font-weight: 400 700;
  font-style: normal;
  font-display: swap;
  unicode-range: U+0600-06FF, U+0750-077F, U+08A0-08FF, U+FB50-FDFF, U+FE70-FEFF, U+200C-200E, U+2010-2011, U+204F, U+2E41;
}

/* ============================================================
 * 1.a. Color / spacing tokens
 *
 *   === Tokens — colors ===
 *
 * Canonical color tokens for the framework. Every component below
 * resolves through these `--rio-*` custom properties, so a project
 * can override the whole palette by writing one `:root` block in its
 * own stylesheet. There must be exactly ONE active definition per
 * token; the dark-theme block at line ~275 is the only intentional
 * override. If you add a new token here, document it in CHANGELOG.md
 * under "Tokens — colors" so feature branches can't silently drift.
 * ============================================================ */

:root {
  /* Brand accent — teal-emerald `#0F8C7E`. Reserved for affordances:
   * primary buttons, focus rings, active state, links, brand emblem.
   * Never flood-filled across page chrome — surfaces stay neutral so
   * the accent retains its weight as a call-to-action. The previous
   * crimson `#A0341A` was retired in 0.3.0 so the framework has one
   * canonical accent across every admin page. Projects override the
   * whole `:root` block to swap it. */
  --rio-accent: #0F8C7E;
  --rio-accent-hover: #0A6E62;
  --rio-accent-rgb: 15 140 126;

  /* Surface ladder — five rungs, never pure white / pure black. Each
   * step lifts ~2–4% so depth comes from layering, not shadows. */
  --rio-bg: #EEF1F6;            /* page canvas */
  --rio-surface: #FFFFFF;       /* cards, topbar, sidebar, table body */
  --rio-surface-2: #F7F9FC;     /* table head, hovered row, panel base */
  --rio-surface-3: #EFF2F7;     /* hover, pressed, secondary chip */

  /* Slate text scale — never pure black. `text-strong` is reserved for
   * page titles + KPI numbers; `text` is body; muted/subtle drop down
   * gradually so faint metadata still passes WCAG AA. */
  --rio-text-strong: #111827;
  --rio-text: #1F2937;
  --rio-text-muted: #4B5563;
  --rio-text-subtle: #6B7280;

  --rio-border-soft: #ECEFF4;   /* in-card row dividers — almost invisible */
  --rio-border: #DEE3EC;        /* card outlines, default divider */
  --rio-border-strong: #C5CCD9; /* hover state, focused control */

  /* Derived tokens — colors carry meaning across the UI. Info-bg reads
   * as a soft cool wash that harmonises with the teal accent. */
  --rio-success: #15803D;
  --rio-warning: #B45309;
  --rio-danger:  #B91C1C;
  --rio-success-bg: #ECFDF5;
  --rio-warning-bg: #FFFBEB;
  --rio-danger-bg:  #FEF2F2;
  --rio-info-bg:    #ECFAF7;

  /* === Tokens — spacing ===
   * Spacing scale: 4 / 8 / 12 / 16 / 24 / 32 / 48 px. */
  --rio-s1: 0.25rem;
  --rio-s2: 0.5rem;
  --rio-s3: 0.75rem;
  --rio-s4: 1rem;
  --rio-s5: 1.5rem;
  --rio-s6: 2rem;
  --rio-s7: 3rem;

  --rio-radius: 10px;
  --rio-radius-sm: 6px;
  --rio-radius-lg: 14px;

  /* Shadows are deliberately quiet. Premium tooling prefers borders +
   * surface contrast over drop shadow. We only use shadow for a hint
   * of weight on cards, and a real lift on transient overlays. */
  --rio-shadow-xs: 0 1px 2px rgba(17, 24, 39, 0.04);
  --rio-shadow:    0 1px 3px rgba(17, 24, 39, 0.05),
                   0 1px 2px rgba(17, 24, 39, 0.03);
  --rio-shadow-lg: 0 16px 40px rgba(17, 24, 39, 0.10),
                   0 2px 8px  rgba(17, 24, 39, 0.05);

  --rio-sidebar-w: 240px;
  --rio-topbar-h: 64px;

  /* ----------------------------------------------------------
   * 1.b. Typography tokens — three families, consistent scale.
   *
   *   === Tokens — typography ===
   *
   * Geist (Latin) + Tajawal / Noto Naskh (Arabic) + Geist Mono.
   * The size scale `--rio-fs-xs … --rio-fs-3xl` is the canonical
   * ladder; component styles below resolve through it. Adding a new
   * size belongs in CHANGELOG.md.
   * ---------------------------------------------------------- */

  /* Latin UI — Geist leads, then Inter / Plex Sans, then platform UI. */
  --rio-font-sans:
    "Geist",
    "Inter",
    "IBM Plex Sans",
    system-ui,
    -apple-system,
    BlinkMacSystemFont,
    "Segoe UI",
    Roboto,
    "Helvetica Neue",
    Arial,
    sans-serif;

  /* Arabic UI — compact admin surfaces (buttons, navbars, sidebar
   * labels, table cells, badges, form labels). Tajawal first; Noto
   * Naskh as a graceful fallback so Arabic text never lands on a
   * Latin face. */
  --rio-font-arabic:
    "Tajawal",
    "Noto Naskh Arabic",
    system-ui,
    sans-serif;

  /* Arabic body — long-form copy, descriptions, settings/help pages.
   * Noto Naskh has higher x-height + softer terminals → reads better
   * in long paragraphs than Tajawal. */
  --rio-font-arabic-body:
    "Noto Naskh Arabic",
    "Tajawal",
    serif;

  /* Code — Geist Mono, then JetBrains/Plex Mono, then platform mono. */
  --rio-font-mono:
    "Geist Mono",
    "JetBrains Mono",
    "IBM Plex Mono",
    ui-monospace,
    SFMono-Regular,
    Menlo,
    Consolas,
    "Liberation Mono",
    monospace;

  /* Size scale — rem-based, 16px html root.
   * Floor is now 13px for true micro-text only (kbd shortcut, footer).
   * Everyday surfaces land between 14px and 16px so a ten-hour session
   * never strains. Table cells / sidebar / buttons all sit at 15px. */
  --rio-font-size-base: 1rem;         /* 16px — body baseline */
  --rio-fs-xs:    0.8125rem;          /* 13px — kbd, footer, tiny meta */
  --rio-fs-sm:    0.9rem;             /* 14.4px — table headers, hint text */
  --rio-fs-md:    0.9375rem;          /* 15px — sidebar, nav, button label */
  --rio-fs-base:  1rem;               /* 16px — body, table cell */
  --rio-fs-lg:    1.0625rem;          /* 17px — main prose body */
  --rio-fs-xl:    1.25rem;            /* 20px — section h3 */
  --rio-fs-h3:    1.375rem;           /* 22px */
  --rio-fs-h2:    1.625rem;           /* 26px */
  --rio-fs-h1:    1.875rem;           /* 30px — calmer than 34px */
  --rio-fs-display: 2.25rem;          /* 36px — login title */

  /* Line heights — tuned per script. Arabic needs more leading because
   * Naskh letterforms hang above and below the baseline. UI lh widened
   * to 1.5 so dense table rows still breathe. */
  --rio-lh-tight:  1.25;              /* h1/h2/h3, big display */
  --rio-lh-ui:     1.5;               /* dense UI: buttons, tags, table */
  --rio-lh-body:   1.65;              /* English paragraph body */
  --rio-lh-arabic: 1.95;              /* Arabic paragraph body */

  /* Weights — opt-in via tokens so the design system can tune
   * regular/medium/semibold/bold without touching every site. */
  --rio-fw-regular:  400;
  --rio-fw-medium:   500;
  --rio-fw-semibold: 600;
  --rio-fw-bold:     700;

  /* Tracking (Latin only — Arabic resets to 0 in §1.c). Geist is
   * drawn for slight negative tracking on display sizes. */
  --rio-tracking-display: -0.022em;
  --rio-tracking-heading: -0.012em;
  --rio-tracking-body:    -0.003em;
  --rio-tracking-tabular: 0;
}

/* ----------------------------------------------------------------
 * Dark mode — soft graphite, never near-black.
 *
 * RustIO's dark theme is a calm nighttime workspace, not a hacker
 * terminal. Page bg and surfaces sit on a desaturated blue-graphite
 * scale (~hsl 218°) that lifts in 4–5% steps; depth comes from
 * layering, not shadows. No #000, no #111 — the floor is #2B313C.
 *
 * Tokens are duplicated under both `prefers-color-scheme: dark` (for
 * users who never touch the toggle) and `[data-rio-theme="dark"]`
 * (for explicit overrides) so the cascade is symmetric.
 * ---------------------------------------------------------------- */
/* Dark mode color tuning — three deliberate shifts vs. the light
 * palette:
 *
 *  1. Accent is lifted from `#0F8C7E` (light teal-emerald) to
 *     `#3FAA9D` (mid teal). The deep light-mode teal disappears into
 *     the graphite surface (~1.4:1 contrast); the lifted variant
 *     pops (~3.2:1) while keeping the same hue family so the brand
 *     reads identically across modes. White-on-accent stays above
 *     4.5:1 (passes WCAG AA body text).
 *
 *  2. Danger is shifted from `#F87171` (Tailwind red-400, reads
 *     pink-pastel on graphite) to `#DC4444` — a serious, saturated
 *     red that actually communicates destructive intent. White on
 *     it hits 4.7:1 (passes AA body), good enough for the solid
 *     "Yes, delete" button that uses it as background.
 *
 *  3. `text-strong` is pushed to pure `#FFFFFF` so page titles
 *     stand clearly above the `#F3F4F6` body. Without that gap
 *     the two reads as one tone.
 */
@media (prefers-color-scheme: dark) {
  :root {
    --rio-bg:        #2B313C;
    --rio-surface:   #343B48;
    --rio-surface-2: #3B4352;
    --rio-surface-3: #444D5E;

    --rio-accent:       #3FAA9D;
    --rio-accent-hover: #5FBFB3;
    --rio-accent-rgb:   63 170 157;

    --rio-text-strong: #FFFFFF;
    --rio-text:        #F3F4F6;
    --rio-text-muted:  #D2D6DC;
    --rio-text-subtle: #B2B8C2;

    --rio-border-soft:   #404A5D;
    --rio-border:        #4F5868;
    --rio-border-strong: #626C7D;

    --rio-success: #34D399;
    --rio-warning: #FBBF24;
    --rio-danger:  #DC4444;
    --rio-success-bg: #1F3D33;
    --rio-warning-bg: #3D2F18;
    --rio-danger-bg:  #3D2226;
    --rio-info-bg:    #3A2A22;

    --rio-shadow-xs: 0 1px 2px rgba(0, 0, 0, 0.18);
    --rio-shadow:    0 1px 3px rgba(0, 0, 0, 0.20),
                     0 1px 2px rgba(0, 0, 0, 0.14);
    --rio-shadow-lg: 0 16px 40px rgba(0, 0, 0, 0.32),
                     0 2px 8px  rgba(0, 0, 0, 0.18);
  }
}

html[data-rio-theme="dark"] {
  --rio-bg:        #2B313C;
  --rio-surface:   #343B48;
  --rio-surface-2: #3B4352;
  --rio-surface-3: #444D5E;

  --rio-accent:       #3FAA9D;
  --rio-accent-hover: #5FBFB3;
  --rio-accent-rgb:   63 170 157;

  --rio-text-strong: #FFFFFF;
  --rio-text:        #F3F4F6;
  --rio-text-muted:  #D2D6DC;
  --rio-text-subtle: #B2B8C2;

  --rio-border-soft:   #404A5D;
  --rio-border:        #4F5868;
  --rio-border-strong: #626C7D;

  --rio-success: #34D399;
  --rio-warning: #FBBF24;
  --rio-danger:  #DC4444;
  --rio-success-bg: #1F3D33;
  --rio-warning-bg: #3D2F18;
  --rio-danger-bg:  #3D2226;
  --rio-info-bg:    #3A2A22;

  --rio-shadow-xs: 0 1px 2px rgba(0, 0, 0, 0.18);
  --rio-shadow:    0 1px 3px rgba(0, 0, 0, 0.20),
                   0 1px 2px rgba(0, 0, 0, 0.14);
  --rio-shadow-lg: 0 16px 40px rgba(0, 0, 0, 0.32),
                   0 2px 8px  rgba(0, 0, 0, 0.18);
}

/* When the user explicitly picks light while the OS is in dark mode,
 * we need to fully restore the light scale — including semantic
 * surfaces and shadows — so the cascade doesn't leak dark values
 * through. Mirrors :root, minus the typography/spacing tokens which
 * never differ between modes. */
html[data-rio-theme="light"] {
  --rio-bg: #EEF1F6;
  --rio-surface: #FFFFFF;
  --rio-surface-2: #F7F9FC;
  --rio-surface-3: #EFF2F7;

  --rio-text-strong: #111827;
  --rio-text: #1F2937;
  --rio-text-muted: #4B5563;
  --rio-text-subtle: #6B7280;

  --rio-border-soft: #ECEFF4;
  --rio-border: #DEE3EC;
  --rio-border-strong: #C5CCD9;

  --rio-success: #15803D;
  --rio-warning: #B45309;
  --rio-danger:  #B91C1C;
  --rio-success-bg: #ECFDF5;
  --rio-warning-bg: #FFFBEB;
  --rio-danger-bg:  #FEF2F2;
  --rio-info-bg:    #FDF3EF;

  --rio-shadow-xs: 0 1px 2px rgba(17, 24, 39, 0.04);
  --rio-shadow:    0 1px 3px rgba(17, 24, 39, 0.05),
                   0 1px 2px rgba(17, 24, 39, 0.03);
  --rio-shadow-lg: 0 16px 40px rgba(17, 24, 39, 0.10),
                   0 2px 8px  rgba(17, 24, 39, 0.05);
}

/* ============================================================
 * 1.c. Reset + base typography
 * ============================================================ */

*, *::before, *::after { box-sizing: border-box; }
html, body { margin: 0; padding: 0; }

/* Set the html root font-size explicitly — a few browsers / user
 * preferences ship a non-16px default, and our scale assumes 16px. */
html {
  font-size: 16px;
  -webkit-text-size-adjust: 100%;
  /* Tab character width in code blocks. */
  tab-size: 2;
}

body {
  font-family: var(--rio-font-sans);
  font-size: var(--rio-font-size-base);   /* 16px */
  line-height: var(--rio-lh-body);        /* 1.6 */
  font-weight: var(--rio-fw-regular);
  color: var(--rio-text);
  background: var(--rio-bg);
  -webkit-font-smoothing: antialiased;
  -moz-osx-font-smoothing: grayscale;
  text-rendering: optimizeLegibility;
  /* Safe global features — kerning + contextual alternates apply
   * cleanly to every script. Stylistic alternates (Geist's ss01/ss03/
   * cv11) are opted-in via .rio-latin so they never interfere with
   * Tajawal / Noto Naskh / CJK shaping. */
  font-feature-settings: "kern", "calt";
  font-variant-ligatures: common-ligatures;
  letter-spacing: var(--rio-tracking-body);
}

/* Latin-only display polish — auto-applies to Latin headings.
 * Geist's "ss01" + "ss03" + "cv11" tighten figure widths and swap
 * single-storey alternates so headings feel like a designed face. */
.rio-latin,
h1, h2, h3, h4,
.rio-list-title, .rio-form-title, .rio-dash-greeting, .rio-auth-title {
  font-feature-settings: "kern", "calt", "ss01", "ss03", "cv11";
}

/* ============================================================
 * 1.d. Arabic-aware typography
 * ------------------------------------------------------------
 * Two contexts:
 *   - UI surfaces  → Tajawal      (compact, geometric, dense UI)
 *   - Body / prose → Noto Naskh   (humanist, paragraph-y)
 * Both unicode-range trigger only on Arabic codepoints, so no
 * Latin-only page pays the download cost.
 * ============================================================ */

/* Arabic UI context — anything tagged lang="ar" or dir="rtl" defaults
 * to Tajawal. Strip Latin-tuned tracking + stylistic alternates so
 * Arabic shaping isn't disrupted. */
:lang(ar),
[dir="rtl"],
[dir="rtl"] *,
.rio-arabic,
.rio-arabic * {
  font-family: var(--rio-font-arabic);
  letter-spacing: 0 !important;
  font-feature-settings: "kern" !important;
  line-height: var(--rio-lh-ui);
}

/* Arabic body context — paragraphs, descriptions, help text.
 * Switch to Noto Naskh + extra leading. Opt-in via lang="ar" on a
 * <p> / blockquote / .rio-prose container, or via .rio-arabic-body. */
p:lang(ar),
li:lang(ar),
blockquote:lang(ar),
.rio-prose:lang(ar),
.rio-prose:lang(ar) p,
.rio-prose:lang(ar) li,
.rio-arabic-body,
.rio-arabic-body * {
  font-family: var(--rio-font-arabic-body);
  line-height: var(--rio-lh-arabic);
  font-size: var(--rio-fs-lg);
  font-weight: var(--rio-fw-regular);
}

/* ============================================================
 * 1.e. Headings, links, paragraphs, code
 * ============================================================ */

h1, h2, h3, h4 {
  margin: 0 0 var(--rio-s3);
  line-height: var(--rio-lh-tight);
  letter-spacing: var(--rio-tracking-heading);
  color: var(--rio-text);
}
h1 {
  font-size: var(--rio-fs-h1);            /* 34px */
  font-weight: var(--rio-fw-bold);
  letter-spacing: var(--rio-tracking-display);
}
h2 {
  font-size: var(--rio-fs-h2);            /* 26px */
  font-weight: var(--rio-fw-semibold);
}
h3 {
  font-size: var(--rio-fs-h3);            /* 22px */
  font-weight: var(--rio-fw-semibold);
}
h4 {
  font-size: var(--rio-fs-md);            /* 15px — section subtitle */
  font-weight: var(--rio-fw-semibold);
  letter-spacing: 0;
}

/* Arabic-tagged headings — keep the size scale, drop the negative
 * tracking. Tajawal carries enough weight for display sizes. */
:lang(ar) h1, :lang(ar) h2, :lang(ar) h3, :lang(ar) h4,
[dir="rtl"] h1, [dir="rtl"] h2, [dir="rtl"] h3, [dir="rtl"] h4,
h1:lang(ar), h2:lang(ar), h3:lang(ar), h4:lang(ar) {
  letter-spacing: 0;
  font-family: var(--rio-font-arabic);
  font-weight: var(--rio-fw-bold);
}

p { margin: 0 0 var(--rio-s4); }

a { color: var(--rio-accent); text-decoration: none; font-weight: var(--rio-fw-medium); }
a:hover { text-decoration: underline; }

code, kbd, samp {
  font-family: var(--rio-font-mono);
  font-size: 0.875em;                     /* relative to context */
  font-variant-ligatures: none;           /* "==" stays as 2 glyphs */
  font-feature-settings: "kern";
  background: rgba(var(--rio-accent-rgb) / 0.07);
  padding: 0.05em 0.35em;
  border-radius: var(--rio-radius-sm);
  letter-spacing: 0;
}
pre {
  font-family: var(--rio-font-mono);
  font-size: var(--rio-fs-sm);            /* 14px */
  line-height: 1.6;
  font-variant-ligatures: none;
  font-feature-settings: "kern";
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius);
  padding: var(--rio-s3) var(--rio-s4);
  overflow-x: auto;
  margin: 0 0 var(--rio-s4);
}
pre code {
  background: none;
  padding: 0;
  font-size: inherit;
  border-radius: 0;
}

/* ============================================================
 * 1.f. Utility classes for typography
 * ============================================================ */

/* Tabular numerals on data — IDs, counts, timestamps. */
.rio-num, [data-tabular] { font-variant-numeric: tabular-nums; }

/* Strong, content-grade prose container (settings/help pages). */
.rio-prose {
  font-size: var(--rio-fs-lg);            /* 17px */
  line-height: var(--rio-lh-body);        /* 1.6 */
  max-width: 68ch;
}
.rio-prose p { margin: 0 0 var(--rio-s4); }
.rio-prose:lang(ar) p { line-height: var(--rio-lh-arabic); }

/* Force a specific size on muted / hint text — never below 13px. */
.rio-text-xs { font-size: var(--rio-fs-xs); }
.rio-text-sm { font-size: var(--rio-fs-sm); }
.rio-text-md { font-size: var(--rio-fs-md); }

/* Force-dense line-height for chip / badge / tag-like surfaces. */
.rio-tight { line-height: var(--rio-lh-ui); }

/* Mobile readability bump — push body up to 17px below 600px so
 * thumb-typing forms and reading copy stays comfortable. */
@media (max-width: 600px) {
  html { font-size: 16.5px; }
  .rio-prose { font-size: var(--rio-fs-lg); }
}

/* ============================================================
 * 2. Shell — topbar / sidebar / main / footer
 * ============================================================ */

.rio-shell {
  min-height: 100vh;
  display: flex;
  flex-direction: column;
}

.rio-banner {
  padding: var(--rio-s2) var(--rio-s4);
  text-align: center;
  font-weight: 600;
  font-size: var(--rio-fs-sm);
}
.rio-banner--demo {
  background: var(--rio-warning-bg);
  color: var(--rio-warning);
  border-bottom: 1px solid var(--rio-border);
}

.rio-topbar {
  display: flex;
  align-items: center;
  gap: var(--rio-s4);
  padding: 0 var(--rio-s5);
  height: var(--rio-topbar-h);
  background: var(--rio-surface);
  border-bottom: 1px solid var(--rio-border);
  position: sticky;
  top: 0;
  z-index: 10;
}
.rio-topbar-brand {
  font-weight: var(--rio-fw-bold);
  font-size: var(--rio-fs-lg);                 /* 17px */
  color: var(--rio-text-strong);
  letter-spacing: var(--rio-tracking-heading);
}
.rio-topbar-brand:hover { text-decoration: none; }
.rio-topbar-nav {
  margin-left: auto;
  display: flex;
  align-items: center;
  gap: var(--rio-s4);
  flex-wrap: wrap;
}
.rio-topbar-identity {
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-md);                 /* 15px */
  font-weight: var(--rio-fw-regular);
}
.rio-topbar-link {
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-medium);
}
.rio-topbar-link:hover { color: var(--rio-text); }
.rio-topbar-logout { display: inline; }
.rio-sidebar-toggle {
  display: none;
  background: none;
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  padding: var(--rio-s1) var(--rio-s2);
  color: var(--rio-text);
  cursor: pointer;
}
.rio-theme-toggle {
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  padding: 0.5rem 0.85rem;
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-medium);
  color: var(--rio-text-muted);
  cursor: pointer;
  transition: background-color 0.12s, border-color 0.12s, color 0.12s;
}
.rio-theme-toggle:hover {
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}

/* Layout uses flex, not grid, so an absent sidebar (login page,
 * forbidden, error, public chrome) doesn't leave a 240px ghost
 * column squeezing the main content. With sidebar: row of two
 * children, sidebar is fixed-width. Without: main takes 100%. */
.rio-layout {
  flex: 1;
  display: flex;
  align-items: stretch;
  min-height: 0;
}

.rio-sidebar {
  flex: 0 0 var(--rio-sidebar-w);
  background: var(--rio-surface);
  border-right: 1px solid var(--rio-border);
  padding: var(--rio-s5) var(--rio-s3);
}
.rio-sidebar-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: 2px;
}
.rio-sidebar-section {
  font-size: var(--rio-fs-xs);                 /* 13px */
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.08em;
  color: var(--rio-text-subtle);
  margin: var(--rio-s5) 0 var(--rio-s2);
  padding: 0 var(--rio-s3);
}
.rio-sidebar-section:first-child { margin-top: 0; }
.rio-sidebar-link {
  display: flex;
  align-items: center;
  gap: 0.7rem;
  padding: 0.6rem var(--rio-s3);
  border-radius: var(--rio-radius-sm);
  color: var(--rio-text);
  font-size: var(--rio-fs-md);                 /* 15px */
  font-weight: var(--rio-fw-semibold);
  line-height: var(--rio-lh-ui);
  transition: background 0.12s, color 0.12s, box-shadow 0.12s;
}
.rio-sidebar-link:hover {
  background: var(--rio-surface-3);
  color: var(--rio-text-strong);
  text-decoration: none;
}
.rio-sidebar-link.is-active {
  background: rgb(var(--rio-accent-rgb) / 0.10);
  color: var(--rio-accent);
  box-shadow: inset 3px 0 0 var(--rio-accent);
}
.rio-sidebar-link .rio-icon {
  width: 18px;
  height: 18px;
  color: var(--rio-text-subtle);
  flex-shrink: 0;
  transition: color 0.12s;
}
.rio-sidebar-link:hover .rio-icon { color: var(--rio-text-strong); }
.rio-sidebar-link.is-active .rio-icon { color: var(--rio-accent); }

.rio-main {
  flex: 1 1 auto;
  padding: var(--rio-s6) var(--rio-s5);
  min-width: 0;
}

.rio-footer {
  padding: var(--rio-s4) var(--rio-s5);
  text-align: center;
  font-size: var(--rio-fs-sm);
  color: var(--rio-text-subtle);
  border-top: 1px solid var(--rio-border);
}

/* ============================================================
 * 3. Page chrome — headers, breadcrumbs, cards
 * ============================================================ */

.rio-page-header {
  margin-bottom: var(--rio-s5);
}
.rio-breadcrumbs {
  font-size: var(--rio-fs-sm);
  color: var(--rio-text-subtle);
  font-weight: var(--rio-fw-medium);
  margin-bottom: var(--rio-s2);
}
.rio-breadcrumbs a {
  color: var(--rio-text-muted);
  font-weight: var(--rio-fw-semibold);
}
.rio-breadcrumbs a:hover { color: var(--rio-text-strong); }
.rio-page-actions {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: var(--rio-s4);
  flex-wrap: wrap;
}
.rio-page-actions h1 { color: var(--rio-text-strong); }

.rio-card {
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-lg);
  padding: var(--rio-s5);
  margin-bottom: var(--rio-s5);
  box-shadow: var(--rio-shadow);
}
.rio-card-section {
  margin-top: var(--rio-s5);
  padding-top: var(--rio-s4);
  border-top: 1px solid var(--rio-border-soft);
}
.rio-empty {
  padding: var(--rio-s6);
  text-align: center;
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-md);
}
.rio-meta {
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-sm);
}

/* ============================================================
 * 4. Buttons
 * ============================================================ */

/* Buttons feel calm and tactile, not glossy. We change colour and
 * surface on hover (instead of dimming with opacity) — that reads as
 * deliberate UI feedback rather than a flashy SaaS hover. */
.rio-button {
  display: inline-flex;
  align-items: center;
  gap: 0.45rem;
  padding: 0.55rem var(--rio-s4);
  background: var(--rio-surface);
  color: var(--rio-text);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  font-size: var(--rio-fs-md);                 /* 15px */
  font-weight: var(--rio-fw-semibold);
  line-height: var(--rio-lh-ui);
  cursor: pointer;
  text-decoration: none;
  box-shadow: var(--rio-shadow-xs);
  transition: background-color 0.12s, border-color 0.12s, color 0.12s, transform 0.06s;
}
.rio-button:hover {
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
  text-decoration: none;
}
.rio-button:active { transform: translateY(1px); }
.rio-button:disabled { opacity: 0.5; cursor: not-allowed; }

.rio-button--primary {
  background: var(--rio-accent);
  color: #fff;
  border-color: var(--rio-accent);
  box-shadow: 0 1px 3px rgba(160, 52, 26, 0.25);
}
.rio-button--primary:hover {
  background: var(--rio-accent-hover);
  border-color: var(--rio-accent-hover);
  color: #fff;
}
.rio-button--danger {
  background: var(--rio-danger);
  color: #fff;
  border-color: var(--rio-danger);
}
.rio-button--danger:hover { color: #fff; }
.rio-button--ghost {
  background: transparent;
  border-color: transparent;
  color: var(--rio-text-muted);
  box-shadow: none;
}
.rio-button--ghost:hover {
  color: var(--rio-text-strong);
  background: var(--rio-surface-3);
  border-color: transparent;
}
.rio-button--danger-ghost {
  background: transparent;
  border-color: transparent;
  color: var(--rio-danger);
  box-shadow: none;
}
.rio-button--danger-ghost:hover {
  background: var(--rio-danger-bg);
  border-color: transparent;
}

/* Compact button for inline row actions (Edit / Delete in table
 * rows, etc.). Matches the proportions of a body-text affordance
 * rather than a primary CTA. */
.rio-button--sm {
  padding: 0.3rem 0.55rem;
  font-size: var(--rio-fs-sm);
  gap: 0.3rem;
}
.rio-button--sm .rio-icon { width: 14px; height: 14px; }

/* ============================================================
 * 5. Forms — fieldsets, fields, inputs
 * ============================================================ */

/* Editorial wrapper for form pages — caps content width so labels +
 * inputs read at a comfortable line length. Forms ship at 880px max
 * (matches Linear / Stripe / Vercel admin); page header lives inside
 * the same shell so headings, breadcrumbs, and inputs share an
 * alignment guide. */
.rio-form-shell {
  max-width: 880px;
  margin: 0 auto;
}

/* Forms stack vertically with a comfortable rhythm. `gap` on the
 * form means consecutive .rio-field / .rio-fieldset / .rio-form-actions
 * siblings get spacing automatically — no per-element margin
 * accounting and no double-margin collapse surprises. */
.rio-form {
  margin: 0;
  display: flex;
  flex-direction: column;
  gap: var(--rio-s5);
}
.rio-fieldset {
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-lg);
  padding: var(--rio-s6) var(--rio-s5);
  margin: 0;
  background: var(--rio-surface);
  box-shadow: var(--rio-shadow);
}
.rio-fieldset > legend {
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--rio-text-subtle);
  padding: 0 var(--rio-s2);
  margin-left: calc(-1 * var(--rio-s2));
}
/* Single-column field flow by default. Forms read better as a
 * vertical reading column than a 2-up grid that leaves gaps when a
 * model has 3 short fields and 1 textarea. The grid still resolves
 * `field--full` cleanly because every cell is implicitly full-width. */
.rio-fieldset-grid {
  display: flex;
  flex-direction: column;
  gap: var(--rio-s5);
}

.rio-field {
  display: flex;
  flex-direction: column;
  gap: var(--rio-s2);
}
.rio-field--full { grid-column: 1 / -1; }
.rio-field-label {
  font-weight: var(--rio-fw-semibold);
  font-size: var(--rio-fs-md);
  color: var(--rio-text-strong);
  display: inline-flex;
  align-items: center;
  gap: 0.35rem;
}
.rio-required {
  color: var(--rio-danger);
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  margin-left: 0;
}
.rio-field-hint {
  margin: 0;
  font-size: var(--rio-fs-sm);
  color: var(--rio-text-muted);
  line-height: var(--rio-lh-ui);
}
.rio-field-errors {
  list-style: none;
  margin: var(--rio-s1) 0 0;
  padding: 0;
  color: var(--rio-danger);
  font-size: var(--rio-fs-sm);
}

.rio-input,
.rio-textarea,
.rio-select {
  width: 100%;
  padding: 0.6rem var(--rio-s3);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  background: var(--rio-surface);
  color: var(--rio-text-strong);
  font: inherit;
  font-size: var(--rio-fs-md);
  line-height: var(--rio-lh-ui);
  transition: border-color 0.12s, box-shadow 0.12s, background-color 0.12s;
}
.rio-input::placeholder,
.rio-textarea::placeholder { color: var(--rio-text-subtle); }
.rio-input:hover,
.rio-textarea:hover,
.rio-select:hover { border-color: var(--rio-border-strong); }
.rio-input:focus,
.rio-textarea:focus,
.rio-select:focus {
  outline: none;
  border-color: var(--rio-accent);
  box-shadow: 0 0 0 3px rgb(var(--rio-accent-rgb) / 0.12);
}
.rio-input:disabled,
.rio-textarea:disabled,
.rio-select:disabled {
  background: var(--rio-surface-2);
  color: var(--rio-text-subtle);
  cursor: not-allowed;
}
.rio-textarea { font-family: var(--rio-font-sans); resize: vertical; min-height: 7rem; }

.rio-checkbox {
  display: inline-flex;
  align-items: center;
  gap: var(--rio-s2);
  cursor: pointer;
}
.rio-checkbox input[type="checkbox"] {
  width: 1rem;
  height: 1rem;
  accent-color: var(--rio-accent);
}
.rio-checkbox-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: grid;
  grid-template-columns: 1fr;
  gap: var(--rio-s2);
}

/* Form action bar — primary save buttons sit left, secondary
 * (History) and destructive (Delete / Cancel) push right via
 * `.rio-form-actions-spacer`. A top divider grounds the row so it
 * reads as a deliberate footer rather than buttons floating below
 * the card. */
.rio-form-actions {
  display: flex;
  align-items: center;
  gap: var(--rio-s2);
  flex-wrap: wrap;
  padding-top: var(--rio-s5);
  border-top: 1px solid var(--rio-border-soft);
}
.rio-form-actions-spacer { flex: 1; min-width: var(--rio-s4); }

/* ============================================================
 * 6. Tables
 * ============================================================ */

/* Tables — calm and spacious. Rows are 14px tall in padding so a
 * full screen breathes; the zebra stripe uses surface-2 (a quiet
 * neutral lift) instead of an accent-tinted overlay so the eye
 * doesn't read it as a colour signal. Header text is uppercase but
 * small enough not to compete with cell content. */
.rio-table {
  width: 100%;
  border-collapse: collapse;
  font-size: var(--rio-fs-base);                /* 16px cell text */
}
.rio-table th, .rio-table td {
  padding: 0.85rem var(--rio-s4);
  text-align: left;
  border-bottom: 1px solid var(--rio-border-soft);
}
.rio-table th {
  font-weight: var(--rio-fw-bold);
  font-size: var(--rio-fs-xs);                  /* 13px — quiet label */
  color: var(--rio-text-muted);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  background: var(--rio-surface-2);
  border-bottom: 1px solid var(--rio-border);
  white-space: nowrap;
}
.rio-table tbody tr:last-child td { border-bottom: none; }
.rio-table tbody tr { transition: background-color 0.1s; }

.rio-th--number, .rio-td--number {
  text-align: right;
  font-variant-numeric: tabular-nums;
  font-family: var(--rio-font-mono);
  font-size: var(--rio-fs-sm);
}

/* Foreign-key click-throughs in list cells. Reads as a link without
 * shouting — underline on hover only, accent color on hover/focus. */
.rio-fk-link {
  color: inherit;
  text-decoration: none;
  border-bottom: 1px dashed var(--rio-border);
}
.rio-fk-link:hover,
.rio-fk-link:focus {
  color: var(--rio-accent);
  border-bottom-color: var(--rio-accent);
  outline: none;
}

/* ---------- Group permissions matrix ---------- *
 * The Group edit page lays permissions out as a model × action grid
 * instead of a flat alphabetical list. Wide enough for a 5-column
 * layout (label + 4 actions + row-toggle) at the typical admin
 * surface width; collapses to a horizontally scrollable container
 * on narrow viewports. */
.rio-perm-matrix {
  width: 100%;
  border-collapse: collapse;
  font-size: var(--rio-fs-sm);
  margin-top: var(--rio-s2);
  margin-bottom: var(--rio-s3);
}
.rio-perm-matrix thead th {
  text-align: center;
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.05em;
  color: var(--rio-text-muted);
  padding: 8px 10px;
  border-bottom: 2px solid var(--rio-border);
  background: var(--rio-surface-2);
}
.rio-perm-matrix th.rio-perm-matrix__model {
  text-align: left;
}
.rio-perm-matrix tbody th {
  text-align: left;
  font-weight: var(--rio-fw-semibold);
  color: var(--rio-text-strong);
  padding: 10px 12px;
  background: var(--rio-surface);
}
.rio-perm-matrix tbody td {
  padding: 10px 12px;
  text-align: center;
  border-bottom: 1px solid var(--rio-border-soft);
}
.rio-perm-matrix tbody tr:hover td,
.rio-perm-matrix tbody tr:hover th {
  background: var(--rio-surface-2);
}
.rio-perm-matrix tbody tr:last-child td,
.rio-perm-matrix tbody tr:last-child th {
  border-bottom: none;
}
.rio-perm-cell {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  width: 100%;
  cursor: pointer;
}
.rio-perm-cell input[type="checkbox"] {
  width: 18px;
  height: 18px;
  cursor: pointer;
}
.rio-perm-cell__sr {
  position: absolute;
  width: 1px;
  height: 1px;
  margin: -1px;
  padding: 0;
  overflow: hidden;
  clip: rect(0, 0, 0, 0);
  border: 0;
}
.rio-perm-na {
  color: var(--rio-text-subtle);
  font-family: var(--rio-font-mono);
}
.rio-perm-row-all {
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.04em;
  padding: 4px 10px;
  border-radius: 6px;
  border: 1px solid var(--rio-border);
  background: var(--rio-surface);
  color: var(--rio-text-muted);
  cursor: pointer;
  transition: background 0.1s, color 0.1s, border-color 0.1s;
}
.rio-perm-row-all:hover {
  background: var(--rio-accent);
  color: #fff;
  border-color: var(--rio-accent);
}
.rio-perm-extras {
  margin-top: var(--rio-s3);
  padding: var(--rio-s2) 0 0;
  border-top: 1px dashed var(--rio-border);
}
.rio-perm-extras summary {
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-semibold);
  color: var(--rio-text-muted);
  cursor: pointer;
  padding: 4px 0;
}

/* ---------- Active sessions card list ---------- *
 * Calm operational layout per doctrine 13 — no marketing hero, no
 * gradients. Each session is a card; the current session gets a
 * subtle accent rail. Reads like a settings page, not a SaaS auth
 * dashboard. */
.rio-session-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: var(--rio-s3);
}
.rio-session {
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius);
  padding: var(--rio-s4);
  position: relative;
}
.rio-session--current {
  border-left: 3px solid var(--rio-accent);
  padding-left: calc(var(--rio-s4) - 2px);
}
.rio-session__header {
  display: flex;
  align-items: baseline;
  gap: var(--rio-s2);
  margin-bottom: var(--rio-s3);
}
.rio-session__marker {
  font-size: var(--rio-fs-base);
  color: var(--rio-text-subtle);
}
.rio-session--current .rio-session__marker {
  color: var(--rio-accent);
}
.rio-session__title {
  font-weight: var(--rio-fw-semibold);
  color: var(--rio-text-strong);
}
.rio-session__trust {
  margin-left: auto;
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.05em;
  color: var(--rio-text-muted);
  padding: 2px 8px;
  border-radius: 12px;
  background: var(--rio-surface-3);
}
.rio-session__meta {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
  gap: var(--rio-s2) var(--rio-s4);
  margin: 0 0 var(--rio-s3);
}
.rio-session__meta > div {
  display: flex;
  flex-direction: column;
  gap: 2px;
}
.rio-session__meta dt {
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.04em;
  color: var(--rio-text-muted);
  margin: 0;
}
.rio-session__meta dd {
  margin: 0;
  font-family: var(--rio-font-mono);
  font-size: var(--rio-fs-sm);
  color: var(--rio-text);
}
.rio-session__actions {
  display: flex;
  align-items: center;
  gap: var(--rio-s2);
  padding-top: var(--rio-s2);
  border-top: 1px solid var(--rio-border-soft);
}

/* Datetime cells: monospace + nowrap so an ISO timestamp never breaks
 * at the `T`. Tabular figures keep columns aligned vertically. */
.rio-td--datetime {
  white-space: nowrap;
  font-family: var(--rio-font-mono);
  font-size: var(--rio-fs-sm);
  font-variant-numeric: tabular-nums;
  color: var(--rio-text-muted);
}

/* Text cells (string fields) clip to a single line with a hard
 * max-width and an ellipsis tail. The list template adds a `title=`
 * attribute on these cells, so hovering reveals the full value
 * natively without needing a custom tooltip. The cap is `min(20rem,
 * 28vw)` so the cell shrinks gracefully on narrower viewports and
 * never starves the date / actions columns of space. */
.rio-td--text {
  max-width: min(20rem, 28vw);
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
}

.rio-th--checkbox, .rio-td--checkbox { text-align: center; width: 36px; padding-right: 0; }
.rio-th--actions, .rio-td--actions { width: 1%; white-space: nowrap; text-align: right; }

/* Bulk-select checkbox in the leading column. The native control
 * is restyled to match the framework's accent + radius so the row
 * checkboxes don't look like a plain HTML default. */
.rio-row-checkbox,
.rio-row-checkbox-all {
  appearance: none;
  -webkit-appearance: none;
  width: 17px;
  height: 17px;
  border: 1.5px solid var(--rio-border-strong);
  border-radius: 4px;
  cursor: pointer;
  background: var(--rio-surface);
  display: inline-grid;
  place-items: center;
  vertical-align: middle;
  margin: 0;
  transition: background 0.1s, border-color 0.1s;
}
.rio-row-checkbox:hover,
.rio-row-checkbox-all:hover { border-color: var(--rio-text-muted); }
.rio-row-checkbox:checked,
.rio-row-checkbox-all:checked,
.rio-row-checkbox-all:indeterminate {
  background: var(--rio-accent);
  border-color: var(--rio-accent);
}
.rio-row-checkbox:checked::after,
.rio-row-checkbox-all:checked::after {
  content: "";
  width: 10px; height: 10px;
  background: url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='white' stroke-width='3.5' stroke-linecap='round' stroke-linejoin='round'><polyline points='20 6 9 17 4 12'/></svg>") center/contain no-repeat;
}
.rio-row-checkbox-all:indeterminate::after {
  content: "";
  width: 9px; height: 2px;
  background: #fff;
  border-radius: 1px;
}
/* Selected row gets a faint accent wash so the highlight reads at a
 * glance during a bulk operation. */
.rio-table tbody tr.is-selected,
.rio-table tbody tr.is-selected:nth-child(even) {
  background: rgb(var(--rio-accent-rgb) / 0.06);
}
.rio-table tbody tr.is-selected:hover { background: rgb(var(--rio-accent-rgb) / 0.10); }

/* ----- Bulk action bar -------------------------------------------------
 * Sticky strip that appears above the table when ≥1 row is checked.
 * Contains a count, the destructive action, and a clear-selection
 * link. The CSS keeps it hidden by default; admin.js adds
 * `is-active` to the wrapping form once any checkbox is checked. */
.rio-bulk-bar {
  display: none;
  align-items: center;
  gap: var(--rio-s3);
  padding: 0.7rem var(--rio-s4);
  margin-bottom: var(--rio-s3);
  background: var(--rio-text-strong);
  color: var(--rio-surface);
  border-radius: var(--rio-radius);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-semibold);
  box-shadow: var(--rio-shadow);
}
.rio-bulk-form.is-active .rio-bulk-bar { display: flex; }
.rio-bulk-bar-count strong { font-weight: var(--rio-fw-bold); }
/* Inverted button — solid surface inside the dark bar so the action
 * stays high-contrast without bleeding into the strip. */
.rio-bulk-bar .rio-button {
  background: transparent;
  color: #fff;
  border-color: rgba(255, 255, 255, 0.22);
  box-shadow: none;
}
.rio-bulk-bar .rio-button:hover {
  background: rgba(255, 255, 255, 0.12);
  border-color: rgba(255, 255, 255, 0.40);
  color: #fff;
}
.rio-bulk-bar .rio-button--danger {
  background: var(--rio-danger);
  border-color: var(--rio-danger);
}
.rio-bulk-bar .rio-button--danger:hover {
  background: var(--rio-danger);
  border-color: var(--rio-danger);
  filter: brightness(1.1);
}
.rio-bulk-bar-clear {
  margin-left: auto;
  background: transparent;
  border: none;
  color: rgba(255, 255, 255, 0.7);
  font: inherit;
  font-weight: var(--rio-fw-semibold);
  cursor: pointer;
  padding: 0.25rem 0.5rem;
  border-radius: var(--rio-radius-sm);
}
.rio-bulk-bar-clear:hover { color: #fff; }

/* Zebra: surface-2 (quiet neutral). Hover lifts to surface-3. */
.rio-table--striped tbody tr:nth-child(even) { background: var(--rio-surface-2); }
.rio-table tbody tr:hover { background: var(--rio-surface-3); }

/* Sortable headers — wrap the label in a link; arrow surfaces in the
 * active direction. Header looks identical to a non-sortable cell
 * until the user is hovering / has clicked. */
.rio-th-sort {
  color: inherit;
  text-decoration: none;
  display: inline-flex;
  align-items: center;
  gap: 0.3rem;
  white-space: nowrap;
}
.rio-th-sort:hover { color: var(--rio-text-strong); text-decoration: none; }
.rio-th--sort-asc .rio-th-sort,
.rio-th--sort-desc .rio-th-sort { color: var(--rio-accent); }

.rio-list { padding: 0; overflow: hidden; }
.rio-list .rio-table { margin: 0; }
.rio-list .rio-table th:first-child,
.rio-list .rio-table td:first-child { padding-left: var(--rio-s5); }
.rio-list .rio-table th:last-child,
.rio-list .rio-table td:last-child { padding-right: var(--rio-s5); }

/* Dashboard model index — the `<th>` cell holds the model name as a
 * link. The generic `.rio-table th` rules render that as small
 * uppercase accent-colored text, which fights the section h2 above
 * it. Override here so the model name reads as a strong, plain link
 * in the dashboard context. */
.rio-app-models th {
  text-transform: none;
  letter-spacing: 0;
  font-size: var(--rio-fs-md);
  background: transparent;
  border-bottom: 1px solid var(--rio-border-soft);
  padding: 0.85rem var(--rio-s4);
}
.rio-app-models th a {
  color: var(--rio-text-strong);
  font-weight: var(--rio-fw-semibold);
}
.rio-app-models th a:hover { color: var(--rio-accent); text-decoration: none; }
.rio-app-models td { padding: 0.85rem var(--rio-s4); border-bottom: 1px solid var(--rio-border-soft); }

/* Definition lists for the user profile show-grid. */
.rio-dl {
  display: grid;
  grid-template-columns: max-content 1fr;
  gap: var(--rio-s2) var(--rio-s5);
  margin: 0;
}
.rio-dl dt { font-weight: 600; color: var(--rio-text-muted); }
.rio-dl dd { margin: 0; }

/* ============================================================
 * 7. Filters / search / pagination
 * ============================================================ */

.rio-search-bar {
  display: flex;
  gap: var(--rio-s2);
  margin-bottom: var(--rio-s4);
}
/* Wrap that holds the input + the absolutely-positioned magnifying
 * glass icon. Takes the input's flex sizing so the search bar layout
 * is unchanged from the bare-input version. */
.rio-search-input-wrap {
  position: relative;
  flex: 1;
  min-width: 0;
  display: flex;
}
.rio-search-icon {
  position: absolute;
  left: 0.85rem;
  top: 50%;
  transform: translateY(-50%);
  width: 16px;
  height: 16px;
  color: var(--rio-text-subtle);
  pointer-events: none;
}
.rio-search-input {
  flex: 1;
  padding: 0.6rem var(--rio-s4);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  background: var(--rio-surface);
  color: var(--rio-text-strong);
  font: inherit;
  font-size: var(--rio-fs-md);
  transition: border-color 0.12s, box-shadow 0.12s;
}
/* Make room for the leading glyph when the input lives inside a
 * `.rio-search-input-wrap`. Bare inputs (no wrap) keep the original
 * left padding. */
.rio-search-input-wrap .rio-search-input { padding-left: 2.4rem; }
.rio-search-input::placeholder { color: var(--rio-text-subtle); }
.rio-search-input:focus {
  outline: none;
  border-color: var(--rio-accent);
  box-shadow: 0 0 0 3px rgb(var(--rio-accent-rgb) / 0.12);
}

.rio-filters {
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius);
  padding: var(--rio-s4);
  margin-bottom: var(--rio-s4);
}
.rio-filters-title {
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--rio-text-subtle);
  margin: 0 0 var(--rio-s2);
}
.rio-filter-group { margin-bottom: var(--rio-s3); }
.rio-filter-group summary {
  cursor: pointer;
  font-weight: var(--rio-fw-semibold);
  font-size: var(--rio-fs-md);
  padding: var(--rio-s1) 0;
  color: var(--rio-text-strong);
}
.rio-filter-options {
  list-style: none;
  margin: var(--rio-s2) 0 0;
  padding: 0;
  display: flex;
  flex-wrap: wrap;
  gap: 0.4rem;
}
.rio-filter-chip {
  display: inline-flex;
  align-items: center;
  padding: 0.3rem 0.75rem;
  background: var(--rio-surface-2);
  color: var(--rio-text);
  border: 1px solid var(--rio-border);
  border-radius: 999px;
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-semibold);
  line-height: var(--rio-lh-ui);
  transition: background 0.12s, border-color 0.12s, color 0.12s;
}
.rio-filter-chip:hover {
  text-decoration: none;
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}
.rio-filter-chip--active,
.rio-filter-chip--active:hover {
  background: rgb(var(--rio-accent-rgb) / 0.10);
  color: var(--rio-accent);
  border-color: rgb(var(--rio-accent-rgb) / 0.30);
}

/* ----- Toolbar + dropdown -----------------------------------------
 * Generic primitive — used today by the Filters dropdown on the list
 * view. Sort menus, per-page pickers, and any future "click button →
 * floating panel" widget should reuse the same `.rio-dropdown`
 * machinery. JS hook lives in admin.js (`[data-rio-dropdown]`) and
 * just toggles `.is-open` on the wrapper. */

.rio-toolbar {
  display: flex;
  align-items: center;
  gap: var(--rio-s2);
  margin-bottom: var(--rio-s4);
  flex-wrap: wrap;
}

.rio-toolbar .rio-search-bar {
  flex: 1;
  min-width: 280px;
  margin-bottom: 0;
}

.rio-dropdown { position: relative; display: inline-block; }

.rio-dropdown-toggle {
  display: inline-flex;
  align-items: center;
  gap: 0.45rem;
  padding: 0.55rem var(--rio-s3) 0.55rem var(--rio-s4);
  background: var(--rio-surface);
  color: var(--rio-text);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  font: inherit;
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-semibold);
  line-height: var(--rio-lh-ui);
  cursor: pointer;
  white-space: nowrap;
  transition: background 0.12s, border-color 0.12s, color 0.12s;
}
.rio-dropdown-toggle:hover {
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}
.rio-dropdown-toggle .rio-icon { width: 16px; height: 16px; opacity: 0.85; }
.rio-dropdown-toggle .rio-chev {
  width: 13px; height: 13px;
  opacity: 0.55;
  transition: transform 0.18s;
}
.rio-dropdown.is-open .rio-dropdown-toggle {
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}
.rio-dropdown.is-open .rio-dropdown-toggle .rio-chev { transform: rotate(180deg); }

/* Active-filter count badge — small accent pill on the toggle. */
.rio-dropdown-badge {
  display: inline-flex; align-items: center; justify-content: center;
  min-width: 18px; height: 18px; padding: 0 6px;
  background: var(--rio-accent);
  color: #fff;
  font-size: 11px;
  font-weight: var(--rio-fw-bold);
  border-radius: 9px;
  font-variant-numeric: tabular-nums;
}

/* Floating panel — anchored to the toggle's right edge so it doesn't
 * push past the viewport on a wide toolbar. JS toggles `.is-open`. */
.rio-dropdown-panel {
  display: none;
  position: absolute;
  top: calc(100% + 6px);
  right: 0;
  min-width: 320px;
  max-width: min(420px, calc(100vw - var(--rio-s5)));
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius);
  box-shadow: var(--rio-shadow-lg);
  padding: var(--rio-s4);
  z-index: 40;
}
.rio-dropdown.is-open .rio-dropdown-panel { display: block; }

.rio-dropdown-section { margin-bottom: var(--rio-s4); }
.rio-dropdown-section:last-of-type { margin-bottom: var(--rio-s3); }
.rio-dropdown-label {
  display: block;
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--rio-text-subtle);
  margin-bottom: var(--rio-s2);
}
.rio-dropdown-options {
  display: flex;
  flex-wrap: wrap;
  gap: 0.35rem;
}

/* Dropdown chip — anchor that navigates on click (each chip is a
 * `<a href="?field=value">`). The framework's filters are URL-driven,
 * so no Apply step is needed: clicking a chip commits the filter. */
.rio-dropdown-chip {
  display: inline-flex;
  align-items: center;
  gap: 0.35rem;
  padding: 0.3rem 0.7rem;
  background: var(--rio-surface-2);
  color: var(--rio-text);
  border: 1px solid var(--rio-border);
  border-radius: 14px;
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-semibold);
  line-height: var(--rio-lh-ui);
  transition: background 0.12s, border-color 0.12s, color 0.12s;
}
.rio-dropdown-chip:hover {
  text-decoration: none;
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}
.rio-dropdown-chip.is-active,
.rio-dropdown-chip.is-active:hover {
  background: rgb(var(--rio-accent-rgb) / 0.10);
  color: var(--rio-accent);
  border-color: rgb(var(--rio-accent-rgb) / 0.30);
}

/* Vertical menu — full-width clickable rows. Used by the toolbar's
 * Sort dropdown (and any future per-page picker / column toggler).
 * Each item is an `<a>` so navigation stays the source of truth. */
.rio-dropdown-menu {
  display: flex;
  flex-direction: column;
  margin: calc(-0.4rem) calc(-0.4rem) 0;
}
.rio-dropdown-item {
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: var(--rio-s3);
  padding: 0.5rem 0.75rem;
  border-radius: var(--rio-radius-sm);
  color: var(--rio-text);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-medium);
  line-height: var(--rio-lh-ui);
  white-space: nowrap;
  transition: background 0.1s, color 0.1s;
}
.rio-dropdown-item:hover {
  text-decoration: none;
  background: var(--rio-surface-3);
  color: var(--rio-text-strong);
}
.rio-dropdown-item.is-active,
.rio-dropdown-item.is-active:hover {
  background: rgb(var(--rio-accent-rgb) / 0.10);
  color: var(--rio-accent);
  font-weight: var(--rio-fw-semibold);
}
/* Active row trails a subtle bullet — the cleanest "current selection"
 * marker that doesn't fight the accent text colour. */
.rio-dropdown-item.is-active::after {
  content: "";
  width: 6px; height: 6px;
  border-radius: 50%;
  background: var(--rio-accent);
  flex-shrink: 0;
}

.rio-dropdown-footer {
  display: flex;
  justify-content: flex-end;
  gap: var(--rio-s2);
  padding-top: var(--rio-s3);
  margin-top: var(--rio-s2);
  border-top: 1px solid var(--rio-border-soft);
}
.rio-dropdown-footer .rio-button { padding: 0.4rem 0.85rem; font-size: var(--rio-fs-sm); }

/* ----- Active filters strip ---------------------------------------
 * Compact row that surfaces every currently-set filter as a removable
 * pill (`Field: value ×`). Sits between the toolbar and the table —
 * gives the user a one-glance view of what's filtering the list and
 * a one-click way to drop a single filter without opening the
 * dropdown. Hidden when no filters are active. */
.rio-active-filters {
  display: flex;
  align-items: center;
  flex-wrap: wrap;
  gap: 0.4rem;
  padding: 0.6rem 0.9rem;
  margin-bottom: var(--rio-s4);
  background: var(--rio-surface-2);
  border: 1px dashed var(--rio-border);
  border-radius: var(--rio-radius);
  font-size: var(--rio-fs-sm);
}
.rio-active-filters-label {
  font-size: var(--rio-fs-xs);
  font-weight: var(--rio-fw-bold);
  text-transform: uppercase;
  letter-spacing: 0.06em;
  color: var(--rio-text-subtle);
  margin-right: 0.2rem;
}
.rio-active-pill {
  display: inline-flex;
  align-items: center;
  gap: 0.35rem;
  padding: 0.2rem 0.25rem 0.2rem 0.65rem;
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: 999px;
  color: var(--rio-text);
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-semibold);
}
.rio-active-pill-key { color: var(--rio-text-subtle); font-weight: var(--rio-fw-medium); }
.rio-active-pill-x {
  display: inline-flex; align-items: center; justify-content: center;
  width: 18px; height: 18px;
  border-radius: 50%;
  color: var(--rio-text-subtle);
  font-size: 14px;
  line-height: 1;
  transition: background 0.1s, color 0.1s;
}
.rio-active-pill-x:hover {
  background: var(--rio-surface-3);
  color: var(--rio-text-strong);
  text-decoration: none;
}
.rio-active-filters-clear {
  margin-left: auto;
  background: transparent;
  border: none;
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-sm);
  font-weight: var(--rio-fw-semibold);
  text-decoration: none;
  padding: 0.25rem 0.6rem;
  border-radius: var(--rio-radius-sm);
}
.rio-active-filters-clear:hover {
  color: var(--rio-accent);
  text-decoration: none;
}

.rio-pagination {
  display: flex;
  align-items: center;
  gap: var(--rio-s2);
  margin-top: var(--rio-s5);
  padding-top: var(--rio-s3);
  flex-wrap: wrap;
  font-size: var(--rio-fs-md);
}
.rio-pagination .rio-meta { margin-right: auto; }
.rio-pagination-link,
.rio-pagination-num {
  padding: 0.4rem 0.85rem;
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-sm);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-semibold);
  background: var(--rio-surface);
  color: var(--rio-text);
  font-variant-numeric: tabular-nums;
  transition: background 0.12s, border-color 0.12s, color 0.12s;
}
.rio-pagination-link:hover,
.rio-pagination-num:hover {
  text-decoration: none;
  background: var(--rio-surface-3);
  border-color: var(--rio-border-strong);
  color: var(--rio-text-strong);
}
/* Current page — accent fill, no hover swap. */
.rio-pagination-num.is-active,
.rio-pagination-num.is-active:hover {
  background: var(--rio-accent);
  border-color: var(--rio-accent);
  color: #fff;
  cursor: default;
}
/* `…` between far pages — ornamental, not clickable. */
.rio-pagination-ellipsis {
  padding: 0 0.35rem;
  color: var(--rio-text-subtle);
  font-weight: var(--rio-fw-bold);
  user-select: none;
}

/* ============================================================
 * 8. Pills / flashes / timeline / tabs
 * ============================================================ */

.rio-pill {
  display: inline-flex;
  align-items: center;
  gap: 0.3rem;
  padding: 0.2rem 0.65rem;
  border-radius: 999px;
  font-size: var(--rio-fs-xs);                  /* 13px */
  font-weight: var(--rio-fw-bold);
  letter-spacing: 0.02em;
  line-height: var(--rio-lh-ui);
}
.rio-pill--badge-success { background: var(--rio-success-bg); color: var(--rio-success); }
.rio-pill--badge-neutral { background: var(--rio-surface-3); color: var(--rio-text-muted); }
.rio-pill--badge-danger  { background: var(--rio-danger-bg);  color: var(--rio-danger); }
.rio-pill--badge-warning { background: var(--rio-warning-bg); color: var(--rio-warning); }

.rio-flash {
  padding: 0.85rem var(--rio-s4);
  border-radius: var(--rio-radius);
  margin-bottom: var(--rio-s4);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-medium);
  border: 1px solid transparent;
}
.rio-flash--success {
  background: var(--rio-success-bg);
  color: var(--rio-success);
  border-color: rgb(21 128 61 / 0.18);
}
.rio-flash--error {
  background: var(--rio-danger-bg);
  color: var(--rio-danger);
  border-color: rgb(185 28 28 / 0.18);
}
.rio-flash--warning {
  background: var(--rio-warning-bg);
  color: var(--rio-warning);
  border-color: rgb(180 83 9 / 0.18);
}
.rio-flash--info {
  background: var(--rio-info-bg);
  color: var(--rio-accent);
  border-color: rgb(var(--rio-accent-rgb) / 0.18);
}
.rio-flash ul { margin: var(--rio-s2) 0 0; padding-left: var(--rio-s5); }

.rio-timeline {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: var(--rio-s2);
}
.rio-timeline-item {
  padding: var(--rio-s3) var(--rio-s4);
  border-left: 3px solid var(--rio-border);
  background: var(--rio-surface-2);
  border-radius: 0 var(--rio-radius-sm) var(--rio-radius-sm) 0;
  font-size: var(--rio-fs-md);
}
.rio-timeline-item--success { border-left-color: var(--rio-success); }
.rio-timeline-item--info    { border-left-color: var(--rio-accent); }
.rio-timeline-item--warning { border-left-color: var(--rio-warning); }
.rio-timeline-item--error   { border-left-color: var(--rio-danger); }
.rio-timeline-item--muted   { border-left-color: var(--rio-border); }

.rio-tabs {
  display: flex;
  gap: var(--rio-s1);
  border-bottom: 1px solid var(--rio-border);
  margin-bottom: var(--rio-s4);
  flex-wrap: wrap;
}
.rio-tab {
  padding: 0.55rem var(--rio-s4);
  color: var(--rio-text-muted);
  font-size: var(--rio-fs-md);
  font-weight: var(--rio-fw-semibold);
  border-bottom: 2px solid transparent;
  margin-bottom: -1px;
}
.rio-tab:hover { color: var(--rio-text-strong); text-decoration: none; }
.rio-tab--active {
  color: var(--rio-accent);
  border-bottom-color: var(--rio-accent);
  font-weight: var(--rio-fw-bold);
}

/* ============================================================
 * 9. Confirm-delete + error pages + login
 * ============================================================ */

.rio-confirm h2 { font-size: 1rem; margin-top: var(--rio-s4); }
.rio-confirm-section { margin-top: var(--rio-s4); }
.rio-cascade-list {
  list-style: disc;
  padding-left: var(--rio-s5);
  color: var(--rio-text-muted);
}

.rio-error { text-align: center; padding: var(--rio-s7) var(--rio-s4); }
.rio-error-status {
  font-size: 3rem;
  font-weight: var(--rio-fw-bold);
  margin: 0;
  color: var(--rio-text-subtle);
  font-variant-numeric: tabular-nums;
  letter-spacing: var(--rio-tracking-display);
}

.rio-login {
  max-width: 400px;
  margin: var(--rio-s7) auto;
  background: var(--rio-surface);
  border: 1px solid var(--rio-border);
  border-radius: var(--rio-radius-lg);
  padding: var(--rio-s6) var(--rio-s5);
  box-shadow: var(--rio-shadow-lg);
}
.rio-login-title {
  text-align: center;
  margin-bottom: var(--rio-s5);
  color: var(--rio-text-strong);
}
.rio-form--login .rio-button {
  width: 100%;
  justify-content: center;
  padding: 0.7rem var(--rio-s4);
}

/* ============================================================
 * 10. Icons
 * ============================================================ */

.rio-icon {
  display: inline-block;
  vertical-align: -2px;
  width: 1em;
  height: 1em;
}

/* ============================================================
 * 11. Responsive — mobile-first
 * ============================================================ */

/* Tables overflow horizontally on narrow screens. */
.rio-list, .rio-card { overflow-x: auto; }

/* Mobile: sidebar collapsed off-canvas behind a hamburger. The
 * `flex: 0 0 var(--rio-sidebar-w)` from §2 is overridden here so the
 * fixed-position drawer doesn't reserve track in the flex row. */
.rio-sidebar {
  display: none;
  flex: 0 0 auto;
  position: fixed;
  inset: var(--rio-topbar-h) 0 0 0;
  z-index: 20;
  width: 80vw;
  max-width: 320px;
  border-right: 1px solid var(--rio-border);
  box-shadow: var(--rio-shadow-lg);
  overflow-y: auto;
}
.rio-shell[data-sidebar="open"] .rio-sidebar { display: block; }
.rio-sidebar-toggle { display: inline-flex; }

/* Tablet: sidebar pinned in the flex row, sticky to the viewport just
 * below the topbar. `align-self: flex-start` opts out of the row's
 * stretch so the element keeps a viewport-height box; `overflow-y:
 * auto` lets long sidebar content scroll independently when the
 * navigation outgrows the screen. */
@media (min-width: 768px) {
  .rio-sidebar {
    display: block;
    flex: 0 0 var(--rio-sidebar-w);
    align-self: flex-start;
    position: sticky;
    top: var(--rio-topbar-h);
    height: calc(100vh - var(--rio-topbar-h));
    overflow-y: auto;
    width: auto;
    max-width: none;
    box-shadow: none;
  }
  .rio-sidebar-toggle { display: none; }
  .rio-checkbox-list { grid-template-columns: 1fr 1fr; }
}

/* Desktop: wider sidebar, more padding. Main content caps at ~1280px
 * so a 4K monitor doesn't stretch a table row across the user's whole
 * field of view — the eye loses the cell on the way back. */
@media (min-width: 1280px) {
  :root { --rio-sidebar-w: 260px; }
  .rio-main {
    padding: var(--rio-s6) var(--rio-s7);
    max-width: 1280px;
    margin: 0 auto;
    width: 100%;
  }
  .rio-checkbox-list { grid-template-columns: 1fr 1fr 1fr; }
}

/* Print: drop the chrome. */
@media print {
  .rio-topbar, .rio-sidebar, .rio-footer, .rio-form-actions, .rio-page-actions a { display: none !important; }
  .rio-card { box-shadow: none; border-color: #ccc; }
  body { background: #fff; }
}