/* admin-users.css — AD-USERS (/admin/users, M4: AUS, WF-22). Token-bound only (F-R01).

   The table itself is the shared admin record table (chrome.css) and the row
   controls are the shared .adm-move / .adm-rowactions pair (admin-editors.css).
   This file adds only what a user row needs that a product row does not: a
   roles cell that holds two toggles, the last-administrator
   microtext, and the typed-confirm gate. */

/* A disabled account reads as suspended without relying on color alone — the
   State chip beside it carries the same fact in words (AUS-R01). */
.adm-table__row--disabled .adm-users__email {
    color: var(--text-secondary);
    font-style: italic;
}

/* --- Roles cell ------------------------------------------------------------
   Two toggles, wrapping rather than widening the column. A disabled account
   keeps them: roles are data, and the lockout is what gates the reach. */
.adm-users__roles {
    display: flex;
    flex-wrap: wrap;
    align-items: center;
    gap: var(--space-xs);
}

/* --- Row actions -----------------------------------------------------------
   Named actions are wider than the ▲▼ pair the base class was sized for, so the
   cell wraps them instead of pushing the table wider. */
.adm-rowactions--wrap {
    flex-wrap: wrap;
    row-gap: var(--space-xs);
}

.adm-users__action {
    padding: 0 var(--space-sm);
    white-space: nowrap;
}

/* AUS-R02: where the last administrator's controls are absent, the reason takes
   their place. Microtext — the row geometry stays quiet. */
.adm-users__sole {
    margin: 0;
    color: var(--text-secondary);
    font-size: var(--font-size--1);
}

.adm-users__enrollment {
    color: var(--text-secondary);
    font-size: var(--font-size--1);
}

/* --- Typed confirm (Destructive Actions) -----------------------------------
   The gate for privilege changes and the two-step reset: the account's own
   address, typed. The field starts EMPTY — the address to type is in the label,
   never pre-filled as a value the reader has to clear. */
.adm-typed {
    display: flex;
    flex-direction: column;
    gap: var(--label-gap);
}

.adm-typed__input {
    width: 36ch;
    max-width: 100%;
}