current_scope 0.5.0

data/app/assets/stylesheets/current_scope/application.css

@@ -0,0 +1,917 @@
+/* CurrentScope — the mounted management UI: an authorization console.
+ *
+ * An opinionated, self-contained admin dashboard: a sidebar shell, a
+ * precision-monochrome surface with one cobalt signature accent (the product's
+ * "ledger ink"), monospace for the technical layer (permission keys, action
+ * columns, event types), and first-class light + dark themes. System stack
+ * only — no web fonts, no build step, CSP-safe.
+ *
+ * Theming: tokens live on :root. Light is the default; system dark applies via
+ * prefers-color-scheme; an explicit choice is set as html[data-cs-theme] (from
+ * the current_scope_theme cookie, so there's no flash). Retheme by redefining
+ * the --cs-* custom properties; restructure by overriding the .cs-* classes.
+ *
+ * The token defaults sit in a @layer so a host's own (unlayered) :root override
+ * always wins — otherwise the data-cs-theme attribute selectors below would
+ * outweigh a plain :root { --cs-accent: … } in the host stylesheet.
+ */
+
+@layer current_scope.tokens {
+:root {
+  color-scheme: light;
+
+  /* Surfaces — cool near-neutral, ink on paper. */
+  --cs-bg:          oklch(0.992 0.002 264);
+  --cs-surface:     oklch(0.975 0.003 264);
+  --cs-surface-2:   oklch(0.955 0.004 264);
+  --cs-line:        oklch(0.905 0.005 264);
+  --cs-line-strong: oklch(0.80 0.008 264);
+
+  /* Ink. */
+  --cs-ink:    oklch(0.26 0.014 264);
+  --cs-ink-2:  oklch(0.18 0.02 264);   /* headings */
+  --cs-muted:  oklch(0.475 0.015 264); /* ~5.4:1 on --cs-bg */
+
+  /* Cobalt signature accent — used with discipline (active nav, primary
+     action, focus, granted state). Rare on purpose. */
+  --cs-accent:        oklch(0.515 0.163 262);
+  --cs-accent-strong: oklch(0.44 0.17 262);
+  --cs-accent-wash:   oklch(0.955 0.03 262);
+  --cs-on-accent:     oklch(0.99 0.01 262);
+
+  /* Semantics. */
+  --cs-danger:      oklch(0.53 0.19 25);
+  --cs-danger-line: oklch(0.82 0.09 25);
+  --cs-danger-wash: oklch(0.965 0.018 25);
+  --cs-ok:          oklch(0.58 0.12 150);
+  --cs-ok-line:     oklch(0.82 0.07 150);
+  --cs-ok-wash:     oklch(0.962 0.02 150);
+
+  --cs-radius: 6px;
+  --cs-radius-sm: 4px;
+  --cs-shadow: 0 1px 2px oklch(0.2 0.03 264 / 0.06), 0 4px 12px oklch(0.2 0.03 264 / 0.05);
+  --cs-font: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", sans-serif;
+  --cs-mono: ui-monospace, "SF Mono", "SFMono-Regular", Menlo, Consolas, monospace;
+  --cs-ease: cubic-bezier(0.22, 1, 0.36, 1);
+
+  --cs-sidebar-w: 15.5rem;
+  --cs-topbar-h: 3.25rem;
+}
+
+/* Dark tokens, shared by system-dark (no explicit choice) and an explicit
+   data-cs-theme="dark". */
+@media (prefers-color-scheme: dark) {
+  :root:not([data-cs-theme]) {
+    color-scheme: dark;
+    --cs-bg:          oklch(0.172 0.008 264);
+    --cs-surface:     oklch(0.208 0.009 264);
+    --cs-surface-2:   oklch(0.238 0.010 264);
+    --cs-line:        oklch(0.305 0.010 264);
+    --cs-line-strong: oklch(0.41 0.013 264);
+    --cs-ink:    oklch(0.905 0.008 264);
+    --cs-ink-2:  oklch(0.975 0.006 264);
+    --cs-muted:  oklch(0.68 0.013 264);
+    --cs-accent:        oklch(0.70 0.15 262);
+    --cs-accent-strong: oklch(0.78 0.14 262);
+    --cs-accent-wash:   oklch(0.30 0.07 262);
+    --cs-on-accent:     oklch(0.16 0.03 262);
+    --cs-danger:      oklch(0.68 0.17 25);
+    --cs-danger-line: oklch(0.42 0.11 25);
+    --cs-danger-wash: oklch(0.27 0.06 25);
+    --cs-ok:          oklch(0.72 0.13 150);
+    --cs-ok-line:     oklch(0.40 0.08 150);
+    --cs-ok-wash:     oklch(0.26 0.05 150);
+    --cs-shadow: 0 1px 2px oklch(0 0 0 / 0.4), 0 6px 16px oklch(0 0 0 / 0.35);
+  }
+}
+
+/* NB: these dark tokens intentionally duplicate the @media block above — CSS
+   can't share a declaration block between a media query and an attribute
+   selector without a preprocessor. Keep the two in sync on any token change. */
+:root[data-cs-theme="dark"] {
+  color-scheme: dark;
+  --cs-bg:          oklch(0.172 0.008 264);
+  --cs-surface:     oklch(0.208 0.009 264);
+  --cs-surface-2:   oklch(0.238 0.010 264);
+  --cs-line:        oklch(0.305 0.010 264);
+  --cs-line-strong: oklch(0.41 0.013 264);
+  --cs-ink:    oklch(0.905 0.008 264);
+  --cs-ink-2:  oklch(0.975 0.006 264);
+  --cs-muted:  oklch(0.68 0.013 264);
+  --cs-accent:        oklch(0.70 0.15 262);
+  --cs-accent-strong: oklch(0.78 0.14 262);
+  --cs-accent-wash:   oklch(0.30 0.07 262);
+  --cs-on-accent:     oklch(0.16 0.03 262);
+  --cs-danger:      oklch(0.68 0.17 25);
+  --cs-danger-line: oklch(0.42 0.11 25);
+  --cs-danger-wash: oklch(0.27 0.06 25);
+  --cs-ok:          oklch(0.72 0.13 150);
+  --cs-ok-line:     oklch(0.40 0.08 150);
+  --cs-ok-wash:     oklch(0.26 0.05 150);
+  --cs-shadow: 0 1px 2px oklch(0 0 0 / 0.4), 0 6px 16px oklch(0 0 0 / 0.35);
+}
+} /* @layer current_scope.tokens */
+
+*, *::before, *::after { box-sizing: border-box; }
+
+body {
+  margin: 0;
+  background: var(--cs-bg);
+  color: var(--cs-ink);
+  font-family: var(--cs-font);
+  font-size: 0.9375rem;
+  line-height: 1.55;
+  -webkit-font-smoothing: antialiased;
+}
+
+h1 { font-size: 1.4rem; font-weight: 660; letter-spacing: -0.02em; color: var(--cs-ink-2); margin: 0 0 0.375rem; text-wrap: balance; }
+h2 { font-size: 1.0625rem; font-weight: 600; color: var(--cs-ink-2); margin: 2rem 0 0.75rem; text-wrap: balance; }
+
+a { color: var(--cs-accent); text-decoration-thickness: 1px; text-underline-offset: 3px; }
+a:hover { color: var(--cs-accent-strong); }
+
+:focus-visible { outline: 2px solid var(--cs-accent); outline-offset: 2px; border-radius: 3px; }
+
+/* Bypass block (WCAG 2.4.1): off-canvas until keyboard focus lands on it,
+ * then a small accent pill in the top-left, above the sticky sidebar. */
+.cs-skip-link {
+  position: absolute;
+  top: 0.5rem;
+  left: 0.5rem;
+  z-index: 10;
+  padding: 0.5rem 0.875rem;
+  background: var(--cs-accent);
+  color: var(--cs-on-accent);
+  border-radius: 6px;
+  font-weight: 600;
+  text-decoration: none;
+  transform: translateY(calc(-100% - 1rem));
+}
+.cs-skip-link:focus { transform: none; }
+
+/* The skip-link target: focusable for the jump, but never shows a ring of
+ * its own — the content it reveals is the feedback. */
+#cs-main-content:focus-visible { outline: none; }
+
+/* ---- Shell ------------------------------------------------------------ *
+ * A left sidebar (wordmark + section nav) and a scrollable main column with
+ * a sticky topbar. The dense grid lives inside main.
+ */
+
+.cs-shell {
+  display: grid;
+  grid-template-columns: var(--cs-sidebar-w) minmax(0, 1fr);
+  min-height: 100vh;
+}
+
+.cs-sidebar {
+  position: sticky;
+  top: 0;
+  align-self: start;
+  height: 100vh;
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
+  padding: 1.125rem 0.75rem;
+  background: var(--cs-surface);
+  border-right: 1px solid var(--cs-line);
+}
+
+.cs-brand {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.25rem 0.5rem 1rem;
+  font-weight: 660;
+  font-size: 0.95rem;
+  letter-spacing: -0.01em;
+  color: var(--cs-ink-2);
+}
+
+/* A tiny 2x2 "grid" mark — the permission matrix, distilled. */
+.cs-brand-mark {
+  width: 1.125rem;
+  height: 1.125rem;
+  border-radius: 4px;
+  flex: none;
+  background:
+    linear-gradient(var(--cs-accent) 0 0) 0 0 / 45% 45%,
+    linear-gradient(var(--cs-accent) 0 0) 100% 0 / 45% 45%,
+    linear-gradient(var(--cs-line-strong) 0 0) 0 100% / 45% 45%,
+    linear-gradient(var(--cs-accent) 0 0) 100% 100% / 45% 45%;
+  background-repeat: no-repeat;
+  box-shadow: inset 0 0 0 1px var(--cs-line);
+}
+
+.cs-nav { display: flex; flex-direction: column; gap: 0.125rem; }
+
+.cs-nav a {
+  position: relative;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.4375rem 0.625rem;
+  border-radius: var(--cs-radius-sm);
+  color: var(--cs-muted);
+  text-decoration: none;
+  font-weight: 500;
+  font-size: 0.875rem;
+  transition: background 120ms var(--cs-ease), color 120ms var(--cs-ease);
+}
+
+.cs-nav a:hover { color: var(--cs-ink); background: var(--cs-surface-2); }
+
+.cs-nav a[aria-current="page"] {
+  color: var(--cs-ink-2);
+  background: var(--cs-accent-wash);
+  font-weight: 560;
+}
+
+/* the signature accent rail on the active item */
+.cs-nav a[aria-current="page"]::before {
+  content: "";
+  position: absolute;
+  left: -0.75rem;
+  top: 0.375rem;
+  bottom: 0.375rem;
+  width: 3px;
+  border-radius: 0 3px 3px 0;
+  background: var(--cs-accent);
+}
+
+.cs-sidebar-foot { margin-top: auto; padding: 0.5rem; color: var(--cs-muted); font-size: 0.75rem; }
+
+/* ---- Topbar ----------------------------------------------------------- */
+
+.cs-topbar {
+  position: sticky;
+  top: 0;
+  z-index: 5;
+  display: flex;
+  align-items: center;
+  min-height: var(--cs-topbar-h);
+  gap: 1rem;
+  padding: 0.75rem 1.75rem;
+  background: color-mix(in oklch, var(--cs-bg) 82%, transparent);
+  backdrop-filter: saturate(1.4) blur(8px);
+  border-bottom: 1px solid var(--cs-line);
+}
+
+.cs-topbar-title { font-weight: 600; font-size: 0.9375rem; color: var(--cs-ink-2); }
+.cs-topbar-spacer { flex: 1; }
+
+.cs-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.375rem;
+  padding: 0.1875rem 0.5rem;
+  border: 1px solid var(--cs-line-strong);
+  border-radius: 999px;
+  font-size: 0.75rem;
+  color: var(--cs-muted);
+  font-family: var(--cs-mono);
+}
+.cs-badge::before { content: ""; width: 6px; height: 6px; border-radius: 999px; background: var(--cs-ok); }
+
+/* Theme toggle — sun/moon glyphs swapped by theme via CSS. */
+.cs-theme-toggle {
+  display: inline-grid;
+  place-items: center;
+  width: 2rem;
+  height: 2rem;
+  padding: 0;
+  border: 1px solid var(--cs-line-strong);
+  border-radius: var(--cs-radius-sm);
+  background: var(--cs-surface);
+  color: var(--cs-ink);
+  cursor: pointer;
+  font-size: 0.95rem;
+  line-height: 1;
+}
+.cs-theme-toggle:hover { border-color: var(--cs-ink); background: var(--cs-surface-2); }
+.cs-theme-toggle .cs-icon-dark { display: none; }
+.cs-theme-toggle .cs-icon-light { display: block; }
+:root[data-cs-theme="dark"] .cs-theme-toggle .cs-icon-dark { display: block; }
+:root[data-cs-theme="dark"] .cs-theme-toggle .cs-icon-light { display: none; }
+@media (prefers-color-scheme: dark) {
+  :root:not([data-cs-theme]) .cs-theme-toggle .cs-icon-dark { display: block; }
+  :root:not([data-cs-theme]) .cs-theme-toggle .cs-icon-light { display: none; }
+}
+
+/* ---- Main + flashes --------------------------------------------------- */
+
+.cs-main { min-width: 0; }
+.cs-content { padding: 1.75rem; max-width: 74rem; }
+.cs-lede { color: var(--cs-muted); font-size: 0.875rem; margin: 0 0 1.5rem; max-width: 64ch; }
+
+.cs-flash {
+  display: flex;
+  gap: 0.5rem;
+  margin: 1rem 1.75rem -0.5rem;
+  padding: 0.5rem 0.875rem;
+  border: 1px solid var(--cs-line);
+  border-radius: var(--cs-radius);
+  font-size: 0.875rem;
+}
+.cs-flash--notice { border-color: var(--cs-ok-line); background: var(--cs-ok-wash); }
+.cs-flash--alert  { border-color: var(--cs-danger-line); background: var(--cs-danger-wash); }
+
+/* In-view flash aliases (form errors use these). */
+.cs-notice, .cs-alert {
+  display: block;
+  padding: 0.5rem 0.875rem;
+  border: 1px solid var(--cs-line);
+  border-radius: var(--cs-radius);
+  font-size: 0.875rem;
+  margin: 0 0 1rem;
+  max-width: 30rem;
+}
+.cs-notice { border-color: var(--cs-ok-line); background: var(--cs-ok-wash); }
+.cs-alert  { border-color: var(--cs-danger-line); background: var(--cs-danger-wash); }
+
+.cs-hint { color: var(--cs-muted); font-size: 0.8125rem; max-width: 68ch; }
+.cs-subtle { color: var(--cs-muted); font-size: 0.8125rem; margin-top: 0.125rem; }
+
+/* ---- Toolbar (page actions) ------------------------------------------- */
+
+.cs-toolbar { display: flex; flex-wrap: wrap; align-items: center; gap: 0.75rem; margin: 0 0 1.25rem; }
+.cs-toolbar .cs-spacer { flex: 1; }
+
+/* ---- Filter + bulk (subjects) ----------------------------------------- */
+
+.cs-filter { min-width: min(22rem, 100%); }
+
+/* The subjects search form: input + Search + Clear on one line, the input
+   taking the free space; wraps on a narrow toolbar. */
+.cs-search { display: flex; align-items: center; gap: 0.5rem; flex: 1 1 22rem; min-width: 0; }
+.cs-search .cs-filter { flex: 1; min-width: 0; }
+
+.cs-bulk {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  margin: 0 0 1rem;
+  padding: 0.5rem 0.875rem;
+  border: 1px solid var(--cs-accent);
+  border-radius: var(--cs-radius);
+  background: var(--cs-accent-wash);
+  font-size: 0.875rem;
+}
+/* The bar sets display:flex, which otherwise defeats the [hidden] attribute the
+   JS toggles — keep it hidden until a subject is selected. */
+.cs-bulk[hidden] { display: none; }
+.cs-bulk .cs-spacer { flex: 1; }
+.cs-bulk-org { display: inline-flex; align-items: center; gap: 0.375rem; margin: 0; }
+.cs-bulk-org select { padding: 0.3125rem 0.5rem; }
+
+/* Select column — narrow, centered checkboxes. */
+.cs-select-cell { width: 1%; text-align: center; padding-inline: 0.75rem; }
+
+.cs-filter-empty { color: var(--cs-muted); font-size: 0.875rem; margin: 0.75rem 0; }
+
+/* ---- Cards ------------------------------------------------------------ */
+
+.cs-card {
+  background: var(--cs-surface);
+  border: 1px solid var(--cs-line);
+  border-radius: var(--cs-radius);
+  box-shadow: var(--cs-shadow);
+}
+.cs-card:not(.cs-card--flush) > * { padding-inline: 1.125rem; }
+
+/* The engine's front-door 403 — rendered standalone, without the console shell
+   (a sidebar of links this subject can't open would read as "you're in" and
+   then refuse every click). Only the centring is new; the surface, type and
+   theme tokens come from .cs-card and the base rules above. */
+.cs-denied {
+  max-width: 46rem;
+  margin: 12vh auto 0;
+  padding-block: 1.5rem;
+}
+.cs-denied p { margin: 0 0 0.75rem; max-width: 68ch; }
+/* Flush cards hold data tables. Let them scroll horizontally inside the card so
+   a wide table never overflows the page. On a wide screen the table fills the
+   card (base width:100%) and scoped-role chips wrap in their own cell — all
+   visible, no scroll. On a narrow screen the table switches to its natural width
+   (see the max-width:820px block) so columns stay usable and the row height
+   stays normal, scrolling horizontally instead of crushing into tall rows. */
+.cs-card--flush { padding: 0; overflow-x: auto; }
+.cs-card--flush .cs-table th:first-child,
+.cs-card--flush .cs-table td:first-child { padding-left: 1.125rem; }
+.cs-card--flush .cs-table th:last-child,
+.cs-card--flush .cs-table td:last-child { padding-right: 1.125rem; }
+
+/* ---- Tables ----------------------------------------------------------- */
+
+.cs-table { border-collapse: collapse; width: 100%; }
+
+.cs-table th {
+  text-align: left;
+  font-size: 0.7rem;
+  font-weight: 600;
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+  color: var(--cs-muted);
+  background: var(--cs-surface-2);
+  border-bottom: 1px solid var(--cs-line);
+  padding: 0.5rem 0.75rem;
+}
+
+.cs-table td {
+  border-bottom: 1px solid var(--cs-line);
+  padding: 0.625rem 0.75rem;
+  vertical-align: middle;
+}
+.cs-table tbody tr:last-child td { border-bottom: none; }
+.cs-table tbody tr:hover td { background: var(--cs-surface-2); }
+.cs-mono, .cs-table .cs-mono { font-family: var(--cs-mono); font-size: 0.8125rem; }
+
+/* ---- Permission grid — the hero surface -------------------------------
+ * A true matrix: fixed action columns across the top, one row per controller,
+ * a sticky mono controller column down the side. Columns stay ABSOLUTE — a
+ * controller that doesn't route a column's actions shows a blank cell, never a
+ * shifted one. The signature move is the GRANTED state: a checked cell lights
+ * up in the cobalt wash, so access reads at a glance across the whole grid.
+ */
+
+.cs-grid-wrap {
+  overflow-x: auto;
+  border: 1px solid var(--cs-line);
+  border-radius: var(--cs-radius);
+  box-shadow: var(--cs-shadow);
+  background: var(--cs-surface);
+}
+
+.cs-grid { border-collapse: separate; border-spacing: 0; width: 100%; }
+
+/* Column headers — the fixed action/group names. Sticky to the TOP OF THE GRID
+   WRAPPER (its sticky containing block, because .cs-grid-wrap sets overflow-x) —
+   so top:0, NOT the topbar height: any positive offset here pushes the header
+   down over the first data row instead of pinning it under the page topbar. */
+.cs-grid thead th {
+  position: sticky;
+  top: 0;
+  z-index: 2;
+  background: var(--cs-surface-2);
+  color: var(--cs-muted);
+  font-family: var(--cs-mono);
+  font-size: 0.7rem;
+  font-weight: 600;
+  letter-spacing: 0.03em;
+  text-transform: uppercase;
+  text-align: center;
+  white-space: nowrap;
+  padding: 0.5rem 0.625rem;
+  border-bottom: 1px solid var(--cs-line);
+  border-right: 1px solid var(--cs-line);
+}
+.cs-grid thead th:last-child { border-right: none; }
+.cs-grid thead th.cs-grid-corner {
+  left: 0;
+  z-index: 3;
+  text-align: left;
+  background: var(--cs-surface-2);
+}
+
+/* Sticky controller column. */
+.cs-grid th[scope="row"] {
+  position: sticky;
+  left: 0;
+  z-index: 1;
+  background: var(--cs-surface);
+  color: var(--cs-ink-2);
+  text-align: left;
+  white-space: nowrap;
+  border-right: 1px solid var(--cs-line);
+  border-bottom: 1px solid var(--cs-line);
+  padding: 0.375rem 0.75rem;
+}
+
+.cs-grid td {
+  border-bottom: 1px solid var(--cs-line);
+  border-right: 1px solid var(--cs-line);
+  padding: 0.375rem;
+  text-align: center;
+  transition: background 120ms var(--cs-ease);
+}
+.cs-grid td:last-child { border-right: none; }
+.cs-grid tr:last-child th[scope="row"],
+.cs-grid tr:last-child td { border-bottom: none; }
+.cs-grid tbody tr:hover th[scope="row"] { background: var(--cs-surface-2); }
+.cs-grid tbody tr:hover td:not(.cs-cell-blank):not(:has(input:checked)) { background: var(--cs-surface-2); }
+
+.cs-grid label { display: inline-flex; align-items: center; justify-content: center; margin: 0; cursor: pointer; }
+
+/* A blank cell — the controller doesn't route this column's actions. A faint
+   marker so the gap reads as "not applicable", not "unchecked". */
+.cs-grid td.cs-cell-blank::after { content: "·"; color: var(--cs-line-strong); font-size: 1rem; }
+
+/* Per-row master toggle ("enable all in this controller") — sits in the sticky
+   row header, reading as a select-all next to the mono controller name. */
+.cs-grid .cs-row-all {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.5rem;
+  cursor: pointer;
+  font-family: var(--cs-mono);
+  font-size: 0.8125rem;
+  font-weight: 600;
+  color: var(--cs-ink-2);
+}
+.cs-grid .cs-row-all input { flex: none; margin: 0; }
+.cs-grid th[scope="row"]:has([data-cs-row-all]:checked) { background: var(--cs-accent-wash); }
+
+/* GRANTED: the cell lights up in cobalt. */
+.cs-grid td:has(input:checked) { background: var(--cs-accent-wash); }
+
+/* PARTIAL: some-but-not-all of the group is granted. JS also sets the checkbox
+   indeterminate, but this keys off the data attribute so the "partial, not
+   ungranted" state is still visible with JS disabled. */
+.cs-grid td:has(input[data-cs-partial="true"]) { background: var(--cs-accent-wash); }
+.cs-grid input[data-cs-partial="true"] { outline: 2px dashed var(--cs-accent); outline-offset: 1px; }
+
+/* UNGATED (provable): the gate never runs on this controller, so its granted
+   routed actions are inert. The badge is advisory — marking is not disabling
+   (KTD-8/R5): nothing grayed, nothing disabled. It sits under the controller
+   name in the sticky header, wrapping normally inside the nowrap column. */
+/* #76 — declared skip with a reason (intentional; not the unexplained warning). */
+.cs-declared-skip-badge {
+  display: block;
+  max-width: 19rem;
+  margin-top: 0.25rem;
+  padding: 0.25rem 0.4375rem;
+  border: 1px solid var(--cs-line-strong);
+  border-radius: var(--cs-radius-sm);
+  background: var(--cs-surface-2);
+  color: var(--cs-ink);
+  font-family: var(--cs-font);
+  font-size: 0.6875rem;
+  font-weight: 400; /* th is bold; reset so only <strong> is emphasized */
+  line-height: 1.45;
+  white-space: normal;
+}
+.cs-declared-skip-badge strong {
+  color: var(--cs-muted);
+  font-weight: 650;
+  letter-spacing: 0.03em;
+  text-transform: uppercase;
+}
+
+.cs-ungated-badge {
+  display: block;
+  max-width: 19rem;
+  margin-top: 0.25rem;
+  padding: 0.25rem 0.4375rem;
+  border: 1px solid var(--cs-danger-line);
+  border-radius: var(--cs-radius-sm);
+  background: var(--cs-danger-wash);
+  color: var(--cs-ink);
+  font-family: var(--cs-font);
+  font-size: 0.6875rem;
+  font-weight: 400;
+  line-height: 1.45;
+  white-space: normal;
+}
+.cs-ungated-badge strong {
+  color: var(--cs-danger);
+  font-weight: 650;
+  letter-spacing: 0.03em;
+  text-transform: uppercase;
+}
+.cs-ungated-badge code { font-family: var(--cs-mono); }
+
+/* A checked (or partial) cell in a marked row must not read as a live grant:
+   swap the cobalt wash for a muted hatch. CSS-only, keyed on the badge — the
+   cell markup is untouched. The break-glass cell (.cs-cell-bypass) is excluded
+   on purpose (KTD-9): that grant IS live on a marked row, so it keeps the real
+   granted wash from the rule above. */
+.cs-grid tbody tr:has(.cs-ungated-badge) td:not(.cs-cell-bypass):has(input:checked),
+.cs-grid tbody tr:has(.cs-ungated-badge) td:not(.cs-cell-bypass):has(input[data-cs-partial="true"]),
+.cs-grid tbody tr:has(.cs-missing-controller-badge) td:not(.cs-cell-bypass):has(input:checked),
+.cs-grid tbody tr:has(.cs-missing-controller-badge) td:not(.cs-cell-bypass):has(input[data-cs-partial="true"]),
+.cs-grid tbody tr:has(.cs-declared-skip-badge) td:not(.cs-cell-bypass):has(input:checked),
+.cs-grid tbody tr:has(.cs-declared-skip-badge) td:not(.cs-cell-bypass):has(input[data-cs-partial="true"]) {
+  background: repeating-linear-gradient(-45deg,
+      var(--cs-surface-2) 0 4px, var(--cs-bg) 4px 8px);
+}
+
+/* #43 — route with no controller class (stale/typo). Advisory only: keys stay
+   grantable (catalog = routes) but the request will MissingController 500. */
+.cs-missing-controller-badge {
+  display: block;
+  max-width: 19rem;
+  margin-top: 0.25rem;
+  padding: 0.25rem 0.4375rem;
+  border: 1px solid var(--cs-warn, #b45309);
+  border-radius: var(--cs-radius-sm);
+  background: color-mix(in srgb, var(--cs-warn, #b45309) 12%, var(--cs-surface));
+  color: var(--cs-ink);
+  font-family: var(--cs-font);
+  font-size: 0.6875rem;
+  line-height: 1.45;
+  white-space: normal;
+}
+.cs-missing-controller-badge strong { color: var(--cs-warn, #b45309); }
+.cs-missing-controller-badge code { font-family: var(--cs-mono); }
+
+/* UNINSPECTABLE: the controller raised while loading, so the gate state is
+   unknown — a distinct third voice, deliberately not the danger badge (no
+   claim about gating is being made) and not silence (unmarked reads as
+   "checked, and gated" under the hint's rules). */
+.cs-uninspectable-note {
+  display: block;
+  max-width: 19rem;
+  margin-top: 0.25rem;
+  padding: 0.25rem 0.4375rem;
+  border: 1px dashed var(--cs-line-strong);
+  border-radius: var(--cs-radius-sm);
+  background: var(--cs-surface-2);
+  color: var(--cs-muted);
+  font-family: var(--cs-font);
+  font-size: 0.6875rem;
+  line-height: 1.45;
+  white-space: normal;
+}
+
+/* The per-cell exemption note on a marked row's break-glass cell. */
+.cs-bypass-exempt {
+  display: block;
+  margin-top: 0.125rem;
+  font-size: 0.625rem;
+  line-height: 1.3;
+  color: var(--cs-muted);
+  white-space: nowrap;
+}
+
+/* Checkboxes / radios use the accent. */
+input[type="checkbox"], input[type="radio"] {
+  accent-color: var(--cs-accent);
+  width: 1rem;
+  height: 1rem;
+}
+
+/* ---- Chips (scoped-role assignments) ---------------------------------- */
+
+.cs-chip {
+  display: inline-flex;
+  align-items: stretch;
+  border: 1px solid var(--cs-line-strong);
+  background: var(--cs-surface);
+  border-radius: 999px;
+  margin: 0 0.25rem 0.25rem 0;
+  font-size: 0.8125rem;
+  overflow: hidden;
+}
+.cs-chip-label { padding: 0.125rem 0.25rem 0.125rem 0.6875rem; align-self: center; }
+.cs-chip form { display: flex; margin: 0; }
+
+/* #90 — orphaned scoped grants (resource deleted) still list as chips/rows but
+   open nothing on collection reads since #65. Mark them so operators do not
+   trust the grant. Use .cs-inert-badge — NOT .cs-badge (topbar "full access"). */
+.cs-chip--inert {
+  border-style: dashed;
+  opacity: 0.85;
+  background: var(--cs-surface-2);
+}
+.cs-row--inert td { color: var(--cs-muted); }
+/* #134: two states #90's "inert" does not cover. .cs-dead-badge uses a solid
+   danger fill where .cs-inert-badge uses a wash of the same token, so the two
+   are separable at a glance. Real theme tokens only (--cs-danger, --cs-warn). */
+.cs-dead-badge,
+.cs-check-badge {
+  display: inline-block;
+  font-size: 0.6875rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-transform: uppercase;
+  padding: 0.05rem 0.35rem;
+  margin-left: 0.35rem;
+  border-radius: 0.25rem;
+  max-width: 100%;
+}
+.cs-dead-badge {
+  color: var(--cs-surface);
+  background: var(--cs-danger);
+}
+.cs-check-badge {
+  color: var(--cs-warn, #b45309);
+  border: 1px solid var(--cs-warn, #b45309);
+  background: color-mix(in srgb, var(--cs-warn, #b45309) 12%, var(--cs-surface));
+}
+
+/* The caveat must reach keyboard and screen-reader users; a title attribute
+   reaches neither reliably. */
+.cs-badge-note {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  padding: 0;
+  margin: -1px;
+  overflow: hidden;
+  clip-path: inset(50%);
+  white-space: nowrap;
+  border: 0;
+}
+
+.cs-inert-badge {
+  display: inline-block;
+  font-size: 0.6875rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-transform: uppercase;
+  padding: 0.05rem 0.35rem;
+  border-radius: 0.25rem;
+  margin-left: 0.35rem;
+  vertical-align: middle;
+  color: var(--cs-danger, oklch(0.45 0.14 25));
+  background: color-mix(in oklch, var(--cs-danger, oklch(0.55 0.18 25)) 12%, transparent);
+  border: 1px solid color-mix(in oklch, var(--cs-danger, oklch(0.55 0.18 25)) 35%, transparent);
+}
+
+/* Revoke control — a clear, labeled × with a divider so it reads as a button. */
+.cs-chip-remove {
+  border: none;
+  border-left: 1px solid var(--cs-line);
+  border-radius: 0;
+  background: none;
+  cursor: pointer;
+  padding: 0 0.5rem;
+  color: var(--cs-muted);
+  font-size: 0.95rem;
+  line-height: 1;
+  transition: background 120ms var(--cs-ease), color 120ms var(--cs-ease);
+}
+.cs-chip-remove:hover, .cs-chip-remove:focus-visible {
+  color: var(--cs-on-accent);
+  background: var(--cs-danger);
+  border-color: var(--cs-danger);
+  outline: none;
+}
+
+/* "+ scoped role" reads as an add affordance. */
+.cs-add-scoped {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.25rem;
+  font-size: 0.8125rem;
+  text-decoration: none;
+  color: var(--cs-accent);
+  padding: 0.125rem 0.4375rem;
+  border: 1px dashed var(--cs-line-strong);
+  border-radius: 999px;
+}
+.cs-add-scoped:hover { border-color: var(--cs-accent); background: var(--cs-accent-wash); }
+
+/* ---- Forms ------------------------------------------------------------ */
+
+/* Scoped to the content region: these layout rules must not reach a form the
+   host might place in the sidebar or topbar. */
+.cs-main form p { margin: 0 0 1rem; max-width: 30rem; }
+
+/* Non-control captions (bulk subjects line) share form-label type. */
+.cs-main form p > .cs-label,
+.cs-main form p > label {
+  display: block;
+  font-size: 0.7rem;
+  font-weight: 600;
+  letter-spacing: 0.03em;
+  text-transform: uppercase;
+  color: var(--cs-muted);
+  margin-bottom: 0.375rem;
+}
+.cs-main form p > label:has(input) {
+  display: flex;
+  align-items: center;
+  gap: 0.4375rem;
+  font-size: 0.875rem;
+  font-weight: 500;
+  letter-spacing: 0;
+  text-transform: none;
+  color: var(--cs-ink);
+  cursor: pointer;
+}
+
+input[type="text"], input[type="email"], input[type="password"],
+input[type="search"], select, textarea {
+  font: inherit;
+  color: var(--cs-ink);
+  background: var(--cs-bg);
+  border: 1px solid var(--cs-line-strong);
+  border-radius: var(--cs-radius-sm);
+  padding: 0.4375rem 0.625rem;
+  max-width: 100%;
+}
+.cs-main form p > input[type="text"],
+.cs-main form p > input[type="email"],
+.cs-main form p > input[type="password"],
+.cs-main form p > select,
+.cs-main form p > textarea { width: 100%; }
+textarea { resize: vertical; min-height: 2.5rem; }
+
+input::placeholder { color: var(--cs-muted); opacity: 1; }
+input:focus-visible, select:focus-visible, textarea:focus-visible {
+  outline: 2px solid var(--cs-accent);
+  outline-offset: 0;
+  border-color: var(--cs-accent);
+}
+
+/* ---- Buttons ---------------------------------------------------------- */
+
+button, input[type="submit"], .cs-btn {
+  appearance: none;
+  display: inline-flex;
+  align-items: center;
+  gap: 0.375rem;
+  font: 500 0.875rem var(--cs-font);
+  color: var(--cs-ink);
+  background: var(--cs-surface);
+  border: 1px solid var(--cs-line-strong);
+  border-radius: var(--cs-radius-sm);
+  padding: 0.4375rem 0.875rem;
+  cursor: pointer;
+  text-decoration: none;
+  transition: background 130ms var(--cs-ease), border-color 130ms var(--cs-ease), translate 90ms var(--cs-ease);
+}
+.cs-btn:hover { color: var(--cs-ink); }
+button:hover, input[type="submit"]:hover, .cs-btn:hover { background: var(--cs-surface-2); border-color: var(--cs-ink); }
+button:active, input[type="submit"]:active, .cs-btn:active { translate: 0 1px; }
+button:disabled, input[type="submit"]:disabled { opacity: 0.5; cursor: not-allowed; }
+
+/* Primary — the one committed action per form. */
+.cs-btn-primary,
+form > p:last-child input[type="submit"] {
+  color: var(--cs-on-accent);
+  background: var(--cs-accent);
+  border-color: var(--cs-accent);
+}
+.cs-btn-primary:hover,
+form > p:last-child input[type="submit"]:hover {
+  background: var(--cs-accent-strong);
+  border-color: var(--cs-accent-strong);
+}
+
+.cs-btn-danger { color: var(--cs-danger); border-color: var(--cs-danger-line); }
+.cs-btn-danger:hover { color: var(--cs-on-accent); background: var(--cs-danger); border-color: var(--cs-danger); }
+
+/* Inline row actions shouldn't shout. */
+.cs-table form { display: inline; margin: 0; }
+
+/* ---- Scoped-role picker ----------------------------------------------- */
+
+.cs-picker turbo-frame { display: block; }
+.cs-picker-empty { max-width: 30rem; margin: 0 0 1rem; }
+.cs-picker-empty code {
+  font-family: var(--cs-mono);
+  font-size: 0.8125rem;
+  background: var(--cs-surface-2);
+  border: 1px solid var(--cs-line);
+  border-radius: 3px;
+  padding: 0.0625rem 0.25rem;
+}
+.cs-picker-actions { display: flex; align-items: center; gap: 0.625rem; }
+.cs-picker-refresh { font-size: 0.8125rem; color: var(--cs-muted); }
+
+/* ---- Pagination ------------------------------------------------------- */
+
+.cs-pagination {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  margin-top: 1rem;
+  font-size: 0.8125rem;
+  color: var(--cs-muted);
+}
+.cs-pagination a { text-decoration: none; }
+
+/* ---- Motion ----------------------------------------------------------- */
+
+@media (prefers-reduced-motion: reduce) {
+  *, *::before, *::after { transition-duration: 0.01ms !important; }
+}
+
+/* ---- Responsive ------------------------------------------------------- *
+ * Collapse the sidebar to a top strip on narrow viewports.
+ */
+
+@media (max-width: 820px) {
+  .cs-shell { grid-template-columns: 1fr; }
+  .cs-sidebar {
+    position: static;
+    height: auto;
+    flex-direction: row;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 0.25rem 0.5rem;
+    border-right: none;
+    border-bottom: 1px solid var(--cs-line);
+  }
+  .cs-brand { padding: 0.25rem 0.5rem; }
+  .cs-nav { flex-direction: row; flex-wrap: wrap; }
+  .cs-nav a[aria-current="page"]::before { display: none; }
+  .cs-sidebar-foot { display: none; }
+  .cs-content { padding: 1.25rem; }
+  .cs-topbar { padding: 0.75rem 1.25rem; }
+  /* Data tables take their natural width and scroll inside the flush card,
+     rather than shrinking columns until cells wrap into very tall rows. */
+  .cs-card--flush .cs-table { width: max-content; }
+}