sentiero 1.0.0.alpha1

data/lib/sentiero/web/assets/rrweb-player-css-ce5e9629.css

@@ -0,0 +1,2 @@
+.switch.svelte-a6h7w7.svelte-a6h7w7.svelte-a6h7w7{height:1em;display:flex;align-items:center}.switch.disabled.svelte-a6h7w7.svelte-a6h7w7.svelte-a6h7w7{opacity:.5}.label.svelte-a6h7w7.svelte-a6h7w7.svelte-a6h7w7{margin:0 8px}.switch.svelte-a6h7w7 input[type=checkbox].svelte-a6h7w7.svelte-a6h7w7{position:absolute;opacity:0}.switch.svelte-a6h7w7 label.svelte-a6h7w7.svelte-a6h7w7{width:2em;height:1em;position:relative;cursor:pointer;display:block}.switch.disabled.svelte-a6h7w7 label.svelte-a6h7w7.svelte-a6h7w7{cursor:not-allowed}.switch.svelte-a6h7w7 label.svelte-a6h7w7.svelte-a6h7w7:before{content:"";position:absolute;width:2em;height:1em;left:.1em;transition:background .1s ease;background:#4950f680;border-radius:50px}.switch.svelte-a6h7w7 label.svelte-a6h7w7.svelte-a6h7w7:after{content:"";position:absolute;width:1em;height:1em;border-radius:50px;left:0;transition:all .2s ease;box-shadow:0 2px 5px #0000004d;background:#fcfff4;animation:switch-off .2s ease-out;z-index:2}.switch.svelte-a6h7w7 input[type=checkbox].svelte-a6h7w7:checked+label.svelte-a6h7w7:before{background:#4950f6}.switch.svelte-a6h7w7 input[type=checkbox].svelte-a6h7w7:checked+label.svelte-a6h7w7:after{animation:switch-on .2s ease-out;left:1.1em}.rr-controller.svelte-189zk2r.svelte-189zk2r{width:100%;height:80px;background:#fff;display:flex;flex-direction:column;justify-content:space-around;align-items:center;border-radius:0 0 5px 5px}.rr-timeline.svelte-189zk2r.svelte-189zk2r{width:80%;display:flex;align-items:center}.rr-timeline__time.svelte-189zk2r.svelte-189zk2r{display:inline-block;width:100px;text-align:center;color:#11103e}.rr-progress.svelte-189zk2r.svelte-189zk2r{flex:1;height:12px;background:#eee;position:relative;border-radius:3px;cursor:pointer;box-sizing:border-box;border-top:solid 4px #fff;border-bottom:solid 4px #fff}.rr-progress.disabled.svelte-189zk2r.svelte-189zk2r{cursor:not-allowed}.rr-progress__step.svelte-189zk2r.svelte-189zk2r{height:100%;position:absolute;left:0;top:0;background:#e0e1fe}.rr-progress__handler.svelte-189zk2r.svelte-189zk2r{width:20px;height:20px;border-radius:10px;position:absolute;top:2px;transform:translate(-50%,-50%);background:#4950f6}.rr-controller__btns.svelte-189zk2r.svelte-189zk2r{display:flex;align-items:center;justify-content:center;font-size:13px}.rr-controller__btns.svelte-189zk2r button.svelte-189zk2r{width:32px;height:32px;display:flex;padding:0;align-items:center;justify-content:center;background:none;border:none;border-radius:50%;cursor:pointer}.rr-controller__btns.svelte-189zk2r button.svelte-189zk2r:active{background:#e0e1fe}.rr-controller__btns.svelte-189zk2r button.active.svelte-189zk2r{color:#fff;background:#4950f6}.rr-controller__btns.svelte-189zk2r button.svelte-189zk2r:disabled{cursor:not-allowed}.replayer-wrapper{position:relative}.replayer-mouse{position:absolute;width:20px;height:20px;transition:left .05s linear,top .05s linear;background-size:contain;background-position:center center;background-repeat:no-repeat;background-image:url(data:image/svg+xml;base64,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);border-color:transparent}.replayer-mouse:after{content:"";display:inline-block;width:20px;height:20px;background:#4950f6;border-radius:100%;transform:translate(-50%,-50%);opacity:.3}.replayer-mouse.active:after{animation:click .2s ease-in-out 1}.replayer-mouse.touch-device{background-image:none;width:70px;height:70px;border-width:4px;border-style:solid;border-radius:100%;margin-left:-37px;margin-top:-37px;border-color:#4950f600;transition:left 0s linear,top 0s linear,border-color .2s ease-in-out}.replayer-mouse.touch-device.touch-active{border-color:#4950f6;transition:left .25s linear,top .25s linear,border-color .2s ease-in-out}.replayer-mouse.touch-device:after{opacity:0}.replayer-mouse.touch-device.active:after{animation:touch-click .2s ease-in-out 1}.replayer-mouse-tail{position:absolute;pointer-events:none}@keyframes click{0%{opacity:.3;width:20px;height:20px}50%{opacity:.5;width:10px;height:10px}}@keyframes touch-click{0%{opacity:0;width:20px;height:20px}50%{opacity:.5;width:10px;height:10px}}.rr-player{position:relative;background:#fff;float:left;border-radius:5px;box-shadow:0 24px 48px #11103e1f}.rr-player__frame{overflow:hidden}.replayer-wrapper{float:left;clear:both;transform-origin:top left;left:50%;top:50%}.replayer-wrapper>iframe{border:none}
+/*# sourceMappingURL=style.min.css.map */

data/lib/sentiero/web/assets/sessions_index-2RAGTEZM.js

@@ -0,0 +1 @@
+(()=>{var c=document.getElementById("select-all"),s=document.querySelectorAll(".session-checkbox"),i=document.getElementById("bulk-actions"),l=document.getElementById("selected-count"),d=document.getElementById("bulk-delete-form");function a(){let e=document.querySelectorAll(".session-checkbox:checked").length;i&&(i.style.display=e>0?"block":"none"),l&&(l.textContent=e),c&&(c.checked=e===s.length&&s.length>0)}c&&c.addEventListener("change",()=>{s.forEach(e=>{e.checked=c.checked}),a()});s.forEach(e=>{e.addEventListener("change",a)});d&&d.addEventListener("submit",e=>{let t=d.getAttribute("data-confirm");t&&!confirm(t)&&e.preventDefault()});document.addEventListener("click",e=>{let t=e.target.closest("[data-action='delete-session']");if(!t||!confirm("Delete this session?"))return;let r=t.getAttribute("data-session-id"),u=t.getAttribute("data-csrf-token"),m=t.getAttribute("data-base-path"),n=document.createElement("form");n.method="POST",n.action=`${m}/sessions/${r}?_method=delete`;let o=document.createElement("input");o.type="hidden",o.name="csrf_token",o.value=u,n.appendChild(o),document.body.appendChild(n),n.submit()});})();

data/lib/sentiero/web/assets/style-d71e72fd.css

@@ -0,0 +1,2 @@
+/*! tailwindcss v4.2.2 | MIT License | https://tailwindcss.com */
+@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-border-style:solid;--tw-font-weight:initial;--tw-tracking:initial;--tw-ordinal:initial;--tw-slashed-zero:initial;--tw-numeric-figure:initial;--tw-numeric-spacing:initial;--tw-numeric-fraction:initial;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial;--tw-leading:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid}}}@layer theme{:root,:host{--font-sans:"Inter", ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;--font-mono:ui-monospace, "SF Mono", "Fira Code", "Fira Mono", "Roboto Mono", Menlo, monospace;--color-red-50:oklch(97.1% .013 17.38);--color-red-400:oklch(70.4% .191 22.216);--color-red-600:oklch(57.7% .245 27.325);--color-red-700:oklch(50.5% .213 27.518);--color-red-900:oklch(39.6% .141 25.723);--color-blue-50:oklch(97% .014 254.604);--color-blue-400:oklch(70.7% .165 254.624);--color-blue-500:oklch(62.3% .214 259.815);--color-blue-600:oklch(54.6% .245 262.881);--color-blue-700:oklch(48.8% .243 264.376);--color-blue-800:oklch(42.4% .199 265.638);--color-indigo-50:oklch(96.2% .018 272.314);--color-indigo-400:oklch(67.3% .182 276.935);--color-indigo-700:oklch(45.7% .24 277.023);--color-indigo-900:oklch(35.9% .144 278.697);--color-gray-50:oklch(98.5% .002 247.839);--color-gray-100:oklch(96.7% .003 264.542);--color-gray-200:oklch(92.8% .006 264.531);--color-gray-300:oklch(87.2% .01 258.338);--color-gray-400:oklch(70.7% .022 261.325);--color-gray-500:oklch(55.1% .027 264.364);--color-gray-600:oklch(44.6% .03 256.802);--color-gray-700:oklch(37.3% .034 259.733);--color-gray-800:oklch(27.8% .033 256.848);--color-gray-900:oklch(21% .034 264.665);--color-white:#fff;--spacing:.25rem;--container-xs:20rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--text-lg:1.125rem;--text-lg--line-height:calc(1.75 / 1.125);--text-xl:1.25rem;--text-xl--line-height:calc(1.75 / 1.25);--text-2xl:1.5rem;--text-2xl--line-height:calc(2 / 1.5);--font-weight-normal:400;--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-normal:0em;--tracking-wider:.05em;--leading-normal:1.5;--radius-sm:.25rem;--radius-md:.375rem;--radius-lg:.5rem;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono);--color-surface-subtle:#f8f9fb;--color-border:#e2e5ea;--color-border-light:#eef0f3;--color-primary:#2563eb;--color-primary-hover:#1d4ed8;--color-primary-light:#eff6ff;--color-success:#059669;--color-success-bg:#ecfdf5;--color-warning:#d97706;--color-warning-bg:#fffbeb;--color-danger:#dc2626;--color-danger-bg:#fef2f2;--color-danger-hover:#b91c1c;--color-info:#0891b2;--color-info-bg:#ecfeff;--sidebar-w:220px}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}body{--tw-leading:var(--leading-normal);font-size:13px;line-height:var(--leading-normal);color:var(--color-gray-900);-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:var(--font-sans);background:var(--color-surface-subtle);margin:0}*,:before,:after{border-color:var(--color-border)}a{color:var(--color-primary);text-decoration-line:none}a:hover{color:var(--color-primary-hover)}h1,h2,h3,h4,h5,h6{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold);--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight);color:var(--color-gray-900)}}@layer components{.btn{cursor:pointer;justify-content:center;align-items:center;gap:calc(var(--spacing) * 1.5);border-radius:var(--radius-md);border-style:var(--tw-border-style);padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 2);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));--tw-leading:1;--tw-font-weight:var(--font-weight-medium);line-height:1;font-weight:var(--font-weight-medium);white-space:nowrap;font-family:var(--font-sans);border-width:1px;border-color:#0000;text-decoration-line:none;transition:all .12s;display:inline-flex;box-shadow:0 1px 2px #0000000d}.btn:focus-visible{--tw-shadow:0 0 #0000;box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);outline-style:var(--tw-outline-style);outline-offset:1px;outline-width:2px;outline-color:var(--color-primary)}.btn-sm{padding-inline:calc(var(--spacing) * 2.5);padding-block:calc(var(--spacing) * 1.5);font-size:11px}.btn-xs{padding-inline:calc(var(--spacing) * 2);padding-block:calc(var(--spacing) * 1);font-size:11px}.btn-primary{color:var(--color-white);background:var(--color-gray-900);border-color:var(--color-gray-900)}.btn-primary:hover{color:var(--color-white);background:var(--color-gray-800);border-color:var(--color-gray-800)}.btn-secondary{background-color:var(--color-white);color:var(--color-gray-600);border-color:var(--color-border);box-shadow:0 1px 2px #0000000a}.btn-secondary:hover{background-color:var(--color-gray-50);color:var(--color-gray-800);border-color:var(--color-gray-300)}.btn-danger{color:var(--color-white);background:var(--color-danger);border-color:var(--color-danger)}.btn-danger:hover{color:var(--color-white);background:var(--color-danger-hover);border-color:var(--color-danger-hover)}.btn-ghost-danger{color:var(--color-gray-400);border-color:var(--color-border);box-shadow:none;background-color:#0000}.btn-ghost-danger:hover{color:var(--color-danger);background:var(--color-danger-bg);border-color:var(--color-danger)}.btn-active{color:var(--color-white);background:var(--color-primary);border-color:var(--color-primary)}.btn-active:hover{color:var(--color-white);background:var(--color-primary-hover);border-color:var(--color-primary-hover)}.input,.select{border-radius:var(--radius-md);background-color:var(--color-white);padding-inline:calc(var(--spacing) * 2.5);padding-block:calc(var(--spacing) * 1.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));color:var(--color-gray-900);font-family:var(--font-sans);border:1px solid var(--color-border);transition:border-color .12s,box-shadow .12s;box-shadow:0 1px 2px #0000000a}.select{appearance:none;padding-right:calc(var(--spacing) * 7);background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'%3e%3cpath fill='none' stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='m2 5 6 6 6-6'/%3e%3c/svg%3e");background-position:right .4rem center;background-repeat:no-repeat;background-size:.65rem}.input:focus,.select:focus{--tw-outline-style:none;border-color:var(--color-primary);outline-style:none;box-shadow:0 0 0 3px #2563eb14}.input::placeholder{color:var(--color-gray-400)}.label{margin-bottom:calc(var(--spacing) * 1);--tw-font-weight:var(--font-weight-semibold);font-size:10px;font-weight:var(--font-weight-semibold);--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider);color:var(--color-gray-400);text-transform:uppercase;display:block}.checkbox{height:calc(var(--spacing) * 3.5);width:calc(var(--spacing) * 3.5);cursor:pointer;border:1px solid var(--color-gray-300);accent-color:var(--color-primary);border-radius:.25rem}.badge{padding-inline:calc(var(--spacing) * 2);padding-block:calc(var(--spacing) * .5);--tw-font-weight:var(--font-weight-medium);font-size:10px;font-weight:var(--font-weight-medium);white-space:nowrap;font-family:var(--font-sans);letter-spacing:.01em;border-radius:3.40282e38px;align-items:center;display:inline-flex}.badge-neutral{background-color:var(--color-gray-100);color:var(--color-gray-500)}.badge-primary{background:var(--color-primary-light);color:var(--color-primary)}.badge-warning{background:var(--color-warning-bg);color:var(--color-warning)}.badge-danger{background:var(--color-danger-bg);color:var(--color-danger)}.badge-success{background:var(--color-success-bg);color:var(--color-success)}.badge-info{background:var(--color-info-bg);color:var(--color-info)}.card{border-radius:var(--radius-lg);background-color:var(--color-white);border:1px solid var(--color-border);box-shadow:0 1px 3px #0000000a,0 1px 2px #00000005}.card-body{padding:calc(var(--spacing) * 5)}.data-table{text-align:left;width:100%;font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));border-collapse:separate;border-spacing:0}.data-table th{padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 2);--tw-font-weight:var(--font-weight-semibold);font-size:10px;font-weight:var(--font-weight-semibold);--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider);white-space:nowrap;color:var(--color-gray-400);text-transform:uppercase;background:var(--color-surface-subtle);border-bottom:1px solid var(--color-border)}.data-table td{padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 2.5);vertical-align:middle;color:var(--color-gray-600);border-bottom:1px solid var(--color-border-light)}.data-table tbody tr:last-child td{border-bottom-style:var(--tw-border-style);border-bottom-width:0}.data-table tbody tr:hover td{background-color:#eff6ff66}@supports (color:color-mix(in lab, red, red)){.data-table tbody tr:hover td{background-color:color-mix(in oklab, var(--color-blue-50) 40%, transparent)}}.table-wrap{border-radius:var(--radius-lg);background-color:var(--color-white);border:1px solid var(--color-border);overflow:hidden;box-shadow:0 1px 3px #0000000a,0 1px 2px #00000005}.pagination{margin:calc(var(--spacing) * 0);gap:calc(var(--spacing) * 1);padding:calc(var(--spacing) * 0);list-style-type:none;display:flex}.page-link{border-radius:var(--radius-md);background-color:var(--color-white);padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 1.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium);color:var(--color-gray-600);border:1px solid var(--color-border);text-decoration-line:none;display:block}.page-link:hover{background-color:var(--color-gray-50);color:var(--color-gray-800);border-color:var(--color-gray-300)}.page-disabled .page-link{pointer-events:none;background-color:var(--color-gray-50);color:var(--color-gray-300)}.alert-error{margin-bottom:calc(var(--spacing) * 3);border-radius:var(--radius-lg);padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 2.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));background:var(--color-danger-bg);color:var(--color-danger);border:1px solid #fecaca}.tabs{margin-bottom:calc(var(--spacing) * 5);align-items:center;gap:calc(var(--spacing) * 6);border-bottom:1px solid var(--color-border);display:flex}.tab{align-items:center;gap:calc(var(--spacing) * 1.5);padding-bottom:calc(var(--spacing) * 2.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium);white-space:nowrap;color:var(--color-gray-500);border-bottom:2px solid #0000;margin-bottom:-1px;text-decoration-line:none;transition:color .12s,border-color .12s;display:inline-flex}.tab:hover{color:var(--color-gray-800);border-bottom-color:var(--color-gray-300)}.tab-active,.tab-active:hover{color:var(--color-primary);border-bottom-color:var(--color-primary)}.tab-count{padding-inline:calc(var(--spacing) * 1.5);padding-block:calc(var(--spacing) * .5);--tw-font-weight:var(--font-weight-semibold);font-size:10px;font-weight:var(--font-weight-semibold);--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,);background:var(--color-gray-100);color:var(--color-gray-500);border-radius:3.40282e38px}.tab-active .tab-count{background:var(--color-primary-light);color:var(--color-primary)}.banner-warning{margin-bottom:calc(var(--spacing) * 4);align-items:flex-start;gap:calc(var(--spacing) * 2);border-radius:var(--radius-lg);padding-inline:calc(var(--spacing) * 4);padding-block:calc(var(--spacing) * 3);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));background:var(--color-warning-bg);color:var(--color-warning);border:1px solid #fde68a;border-left:3px solid var(--color-warning);display:flex}.banner-warning strong{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}}@layer utilities{.visible{visibility:visible}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.start{inset-inline-start:var(--spacing)}.end{inset-inline-end:var(--spacing)}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.my-4{margin-block:calc(var(--spacing) * 4)}.mt-0\.5{margin-top:calc(var(--spacing) * .5)}.mt-1{margin-top:calc(var(--spacing) * 1)}.mt-1\.5{margin-top:calc(var(--spacing) * 1.5)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mr-1{margin-right:calc(var(--spacing) * 1)}.mb-0{margin-bottom:calc(var(--spacing) * 0)}.mb-1{margin-bottom:calc(var(--spacing) * 1)}.mb-1\.5{margin-bottom:calc(var(--spacing) * 1.5)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-5{margin-bottom:calc(var(--spacing) * 5)}.ml-1{margin-left:calc(var(--spacing) * 1)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-3{margin-left:calc(var(--spacing) * 3)}.ml-auto{margin-left:auto}.block{display:block}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline\!{display:inline!important}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.h-2{height:calc(var(--spacing) * 2)}.h-3{height:calc(var(--spacing) * 3)}.h-4{height:calc(var(--spacing) * 4)}.w-3{width:calc(var(--spacing) * 3)}.w-8{width:calc(var(--spacing) * 8)}.w-16{width:calc(var(--spacing) * 16)}.w-20{width:calc(var(--spacing) * 20)}.w-24{width:calc(var(--spacing) * 24)}.w-32{width:calc(var(--spacing) * 32)}.w-36{width:calc(var(--spacing) * 36)}.w-40{width:calc(var(--spacing) * 40)}.w-56{width:calc(var(--spacing) * 56)}.w-full{width:100%}.w-px{width:1px}.max-w-0{max-width:calc(var(--spacing) * 0)}.max-w-full{max-width:100%}.max-w-xs{max-width:var(--container-xs)}.flex-1{flex:1}.shrink-0{flex-shrink:0}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\[100px_1fr\]{grid-template-columns:100px 1fr}.grid-cols-\[140px_1fr\]{grid-template-columns:140px 1fr}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.justify-between{justify-content:space-between}.gap-1{gap:calc(var(--spacing) * 1)}.gap-1\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}:where(.space-y-2>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 2) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 2) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-4>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 4) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 4) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-x-4{column-gap:calc(var(--spacing) * 4)}.gap-y-0\.5{row-gap:calc(var(--spacing) * .5)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.self-end{align-self:flex-end}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.rounded{border-radius:.25rem}.rounded-sm{border-radius:var(--radius-sm)}.border{border-style:var(--tw-border-style);border-width:1px}.border-2{border-style:var(--tw-border-style);border-width:2px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l-2{border-left-style:var(--tw-border-style);border-left-width:2px}.border-dashed{--tw-border-style:dashed;border-style:dashed}.border-blue-400{border-color:var(--color-blue-400)}.border-gray-100{border-color:var(--color-gray-100)}.border-gray-200{border-color:var(--color-gray-200)}.border-indigo-400{border-color:var(--color-indigo-400)}.border-red-400{border-color:var(--color-red-400)}.bg-blue-500{background-color:var(--color-blue-500)}.bg-gray-50{background-color:var(--color-gray-50)}.bg-gray-100{background-color:var(--color-gray-100)}.bg-gray-200{background-color:var(--color-gray-200)}.bg-indigo-50{background-color:var(--color-indigo-50)}.bg-red-50{background-color:var(--color-red-50)}.p-1{padding:calc(var(--spacing) * 1)}.p-2{padding:calc(var(--spacing) * 2)}.p-3{padding:calc(var(--spacing) * 3)}.p-4{padding:calc(var(--spacing) * 4)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.py-1{padding-block:calc(var(--spacing) * 1)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-10{padding-block:calc(var(--spacing) * 10)}.pt-0\.5{padding-top:calc(var(--spacing) * .5)}.pb-1\.5{padding-bottom:calc(var(--spacing) * 1.5)}.pl-2{padding-left:calc(var(--spacing) * 2)}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.align-middle{vertical-align:middle}.font-mono{font-family:var(--font-mono)}.text-2xl{font-size:var(--text-2xl);line-height:var(--tw-leading,var(--text-2xl--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading,var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.text-\[10px\]{font-size:10px}.text-\[11px\]{font-size:11px}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-normal{--tw-font-weight:var(--font-weight-normal);font-weight:var(--font-weight-normal)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-normal{--tw-tracking:var(--tracking-normal);letter-spacing:var(--tracking-normal)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.tracking-wider{--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider)}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-wrap{white-space:pre-wrap}.text-blue-500{color:var(--color-blue-500)}.text-blue-600{color:var(--color-blue-600)}.text-gray-400{color:var(--color-gray-400)}.text-gray-500{color:var(--color-gray-500)}.text-gray-600{color:var(--color-gray-600)}.text-gray-700{color:var(--color-gray-700)}.text-gray-800{color:var(--color-gray-800)}.text-gray-900{color:var(--color-gray-900)}.text-indigo-400{color:var(--color-indigo-400)}.text-indigo-700{color:var(--color-indigo-700)}.text-red-600{color:var(--color-red-600)}.text-red-700{color:var(--color-red-700)}.normal-case{text-transform:none}.uppercase{text-transform:uppercase}.tabular-nums{--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.blur{--tw-blur:blur(8px);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.select-all{-webkit-user-select:all;user-select:all}.select-none{-webkit-user-select:none;user-select:none}.last\:border-0:last-child{border-style:var(--tw-border-style);border-width:0}@media (hover:hover){.hover\:bg-gray-50:hover{background-color:var(--color-gray-50)}.hover\:text-blue-700:hover{color:var(--color-blue-700)}.hover\:text-blue-800:hover{color:var(--color-blue-800)}.hover\:text-indigo-900:hover{color:var(--color-indigo-900)}.hover\:text-red-900:hover{color:var(--color-red-900)}.hover\:underline:hover{text-decoration-line:underline}}@media (min-width:40rem){.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.sm\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}@media (min-width:48rem){.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:64rem){.lg\:col-span-2{grid-column:span 2/span 2}.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-6{grid-template-columns:repeat(6,minmax(0,1fr))}.lg\:grid-cols-\[1fr_280px\]{grid-template-columns:1fr 280px}}}.s-layout{min-height:100vh;display:flex}.s-sidebar{top:calc(var(--spacing) * 0);bottom:calc(var(--spacing) * 0);left:calc(var(--spacing) * 0);z-index:50;background-color:var(--color-white);padding-block:calc(var(--spacing) * 4);width:var(--sidebar-w);border-right:1px solid var(--color-border);flex-direction:column;display:flex;position:fixed}.s-sidebar-brand{margin-bottom:calc(var(--spacing) * 5);align-items:center;gap:calc(var(--spacing) * 2);padding-inline:calc(var(--spacing) * 4);font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height));--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold);--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight);color:var(--color-gray-900);text-decoration-line:none;display:flex}.s-sidebar-brand:hover{color:var(--color-gray-900)}.s-sidebar-brand-logo{height:calc(var(--spacing) * 7);width:calc(var(--spacing) * 7);border-radius:var(--radius-md);flex-shrink:0}.s-sidebar-nav{margin:calc(var(--spacing) * 0);padding-inline:calc(var(--spacing) * 2.5);list-style-type:none}.s-nav-item{margin-bottom:calc(var(--spacing) * .5);align-items:center;gap:calc(var(--spacing) * 2);border-radius:var(--radius-md);padding-inline:calc(var(--spacing) * 2.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium);color:var(--color-gray-500);padding-block:7px;text-decoration-line:none;transition:all .12s;display:flex}.s-nav-item:hover{background-color:var(--color-gray-100);color:var(--color-gray-800)}.s-nav-item.active{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold);background:var(--color-primary-light);color:var(--color-primary)}.s-nav-icon{height:calc(var(--spacing) * 4);width:calc(var(--spacing) * 4);opacity:.6;flex-shrink:0}.s-nav-item.active .s-nav-icon{opacity:1}.s-main{padding-inline:calc(var(--spacing) * 8);padding-block:calc(var(--spacing) * 6);margin-left:var(--sidebar-w);max-width:calc(1400px + var(--sidebar-w));flex:1}.s-mobile-header{background-color:var(--color-white);padding-inline:calc(var(--spacing) * 4);padding-block:calc(var(--spacing) * 3);border-bottom:1px solid var(--color-border);justify-content:space-between;align-items:center;display:none}.page-title{margin-bottom:calc(var(--spacing) * 4);font-size:var(--text-lg);line-height:var(--tw-leading,var(--text-lg--line-height));--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold);--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight);color:var(--color-gray-900)}.session-id{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));color:var(--color-gray-500);font-family:var(--font-mono)}.metadata-url{text-overflow:ellipsis;white-space:nowrap;max-width:200px;overflow:hidden}.window-switcher{align-items:center;gap:calc(var(--spacing) * 2.5);padding-block:calc(var(--spacing) * 2);display:flex}.window-switcher-label{--tw-font-weight:var(--font-weight-semibold);font-size:10px;font-weight:var(--font-weight-semibold);--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider);white-space:nowrap;color:var(--color-gray-400);text-transform:uppercase}.window-overflow{display:inline-block;position:relative}.window-overflow summary{cursor:pointer;list-style-type:none}.window-overflow summary::-webkit-details-marker{display:none}.window-overflow-menu{top:100%;left:calc(var(--spacing) * 0);z-index:10;margin-top:calc(var(--spacing) * 1);border-radius:var(--radius-lg);background-color:var(--color-white);min-width:200px;padding:calc(var(--spacing) * 1);border:1px solid var(--color-border);position:absolute;box-shadow:0 8px 24px #0000001f,0 2px 6px #0000000a}.window-overflow-menu a{border-radius:var(--radius-md);padding-inline:calc(var(--spacing) * 3);padding-block:calc(var(--spacing) * 1.5);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));color:var(--color-gray-600);text-decoration-line:none;display:block}.window-overflow-menu a:hover{background-color:var(--color-gray-50)}.window-overflow-menu a.active{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium);background:var(--color-primary-light);color:var(--color-primary)}.player-frame{margin-top:calc(var(--spacing) * 2);border-radius:var(--radius-lg);background-color:var(--color-white);border:1px solid var(--color-border);overflow:hidden;box-shadow:0 1px 3px #0000000a,0 1px 2px #00000005}.player-frame .rr-player{--tw-shadow:0 0 #0000;max-width:100%;box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);border-radius:0}.player-frame .rr-controller{background:var(--color-surface-subtle);border-top:1px solid var(--color-border-light);border-radius:0}#replayer{justify-content:center;display:flex;overflow:hidden}.click-overlay-container{pointer-events:none;inset:calc(var(--spacing) * 0);z-index:20;position:absolute}.click-dot{pointer-events:none;background:#dc35458c;border:1px solid #dc3545;border-radius:3.40282e38px;width:12px;height:12px;transition:transform .12s,background .12s;position:absolute;box-shadow:0 0 0 2px #dc354533}.click-dot:hover,.click-dot.active{background:#dc3545d9;transform:scale(1.4)}#event-markers{padding-inline:calc(var(--spacing) * 3);padding-top:calc(var(--spacing) * 2)}.marker-legend{margin-bottom:calc(var(--spacing) * 1);gap:calc(var(--spacing) * 3);color:var(--color-gray-400);font-size:10px;display:flex}.marker-legend-item{align-items:center;gap:calc(var(--spacing) * 1);display:flex}.marker-legend-dot{height:calc(var(--spacing) * 2);width:calc(var(--spacing) * 2);border-radius:3.40282e38px;display:inline-block}.marker-bar{margin-bottom:calc(var(--spacing) * 2);height:calc(var(--spacing) * 8);cursor:pointer;border-radius:var(--radius-md);background:var(--color-surface-subtle);border:1px solid var(--color-border);box-sizing:border-box;max-width:100%;position:relative;overflow:visible}.marker-track{pointer-events:none;right:calc(var(--spacing) * 2);left:calc(var(--spacing) * 2);background:var(--color-border);border-radius:3.40282e38px;height:2px;position:absolute;top:50%;transform:translateY(-50%)}.marker-playhead{pointer-events:none;top:calc(var(--spacing) * 0);bottom:calc(var(--spacing) * 0);z-index:10;background:var(--color-primary);border-radius:1px;width:2px;transition:left .15s linear;position:absolute;box-shadow:0 0 4px #2563eb4d}.marker-playhead:before{content:"";background:var(--color-primary);border-radius:50%;width:8px;height:8px;display:block;position:absolute;top:-3px;left:50%;transform:translate(-50%);box-shadow:0 0 0 2px #fff,0 1px 3px #00000026}.event-marker{height:calc(var(--spacing) * 2);width:calc(var(--spacing) * 2);cursor:pointer;opacity:.7;border-radius:3.40282e38px;transition:opacity .12s,transform .12s;position:absolute;top:50%;transform:translate(-50%,-50%)}.event-marker:hover{z-index:1;opacity:1;transform:translate(-50%,-50%)scale(1.6)}.event-marker.error-marker{z-index:2;height:calc(var(--spacing) * 2.5);width:calc(var(--spacing) * 2.5);opacity:1;box-shadow:0 0 4px #dc262666}.marker-gap{top:calc(var(--spacing) * 0);bottom:calc(var(--spacing) * 0);z-index:0;cursor:help;border-left:1px solid var(--color-gray-300);border-right:1px solid var(--color-gray-300);background:repeating-linear-gradient(-45deg, transparent, transparent 3px, var(--color-border) 3px, var(--color-border) 5px);position:absolute}.marker-group{z-index:3;cursor:pointer;position:absolute;top:50%;transform:translate(-50%,-50%)}.marker-group .event-marker{display:block;position:static;transform:none}.marker-group:hover .event-marker{transform:scale(1.4)}.marker-group-dot{opacity:.9;width:14px!important;height:14px!important}.marker-group-count{pointer-events:none;background-color:var(--color-gray-700);text-align:center;--tw-font-weight:var(--font-weight-bold);font-size:9px;font-weight:var(--font-weight-bold);color:var(--color-white);border-radius:3.40282e38px;min-width:14px;padding-inline:3px;line-height:14px;position:absolute;top:-8px;left:50%;transform:translate(-50%)}.marker-dropdown{z-index:50;max-width:var(--container-xs);border-radius:var(--radius-lg);background-color:var(--color-white);min-width:200px;padding:calc(var(--spacing) * 1);white-space:nowrap;border:1px solid var(--color-border);position:absolute;top:22px;left:50%;transform:translate(-50%);box-shadow:0 8px 24px #0000001f,0 2px 6px #0000000a}.marker-dropdown-item{cursor:pointer;align-items:center;gap:calc(var(--spacing) * 1.5);border-radius:var(--radius-md);padding-inline:calc(var(--spacing) * 2.5);padding-block:calc(var(--spacing) * 1.5);color:var(--color-gray-600);font-size:11px;display:flex}.marker-dropdown-item:hover{background-color:var(--color-gray-50)}.marker-dropdown-item.error-entry{background:var(--color-danger-bg)}.marker-dropdown-item.error-entry:hover{background:#fee2e2}#activity-sidebar{margin-top:calc(var(--spacing) * 2);border-radius:var(--radius-lg);background-color:var(--color-white);max-height:600px;padding:calc(var(--spacing) * 3);border:1px solid var(--color-border);overflow-y:auto;box-shadow:0 1px 3px #0000000a,0 1px 2px #00000005}#activity-sidebar h6{margin-bottom:calc(var(--spacing) * 2);align-items:center;gap:calc(var(--spacing) * 2);display:flex}.activity-entry{cursor:pointer;align-items:center;gap:calc(var(--spacing) * 2);border-radius:var(--radius-md);padding-inline:calc(var(--spacing) * 2);padding-block:calc(var(--spacing) * 1);font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height));border-bottom:1px solid var(--color-border-light);transition:background 80ms;display:flex}.activity-entry:last-child{border-bottom-style:var(--tw-border-style);border-bottom-width:0}.activity-entry:hover{background-color:var(--color-gray-50)}.activity-entry.active{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium);background:var(--color-primary-light)}.activity-entry.error-entry{background:var(--color-danger-bg);border-left:3px solid var(--color-danger)}.activity-entry.navigation-entry{background:var(--color-success-bg);border-left:3px solid var(--color-success)}.activity-entry.frustration-entry{background:#ff6b6b1a;border-left:3px solid #ff6b6b}.activity-entry.server-exception-entry{background:#b91c1c14;border-left:3px solid #b91c1c}.activity-entry.server-event-entry{background:#7c3aed14;border-left:3px solid #7c3aed}.activity-label-link{color:var(--color-blue-600);text-decoration-line:none}@media (hover:hover){.activity-label-link:hover{text-decoration-line:underline}}.activity-time{min-width:calc(var(--spacing) * 10);white-space:nowrap;color:var(--color-gray-400);font-size:10px;font-family:var(--font-mono)}.activity-dot{height:calc(var(--spacing) * 1.5);width:calc(var(--spacing) * 1.5);border-radius:3.40282e38px;flex-shrink:0;display:inline-block}.activity-label{text-overflow:ellipsis;white-space:nowrap;color:var(--color-gray-600);overflow:hidden}.activity-gap{margin-block:calc(var(--spacing) * .5);padding-block:calc(var(--spacing) * .5);text-align:center;color:var(--color-gray-400);border-top:1px dashed var(--color-border-light);border-bottom:1px dashed var(--color-border-light);background:repeating-linear-gradient(-45deg, transparent, transparent 4px, var(--color-surface-subtle) 4px, var(--color-surface-subtle) 6px);font-size:10px}.activity-wrapper{position:relative}.activity-detail{margin-left:calc(var(--spacing) * 2);padding-inline:calc(var(--spacing) * 2.5);padding-block:calc(var(--spacing) * 1.5);overflow-wrap:break-word;color:var(--color-gray-500);background:var(--color-surface-subtle);border-left:2px solid var(--color-border);border-radius:0 6px 6px 0;font-size:11px;display:none}.activity-wrapper:hover .activity-detail{display:block}.activity-detail-line{margin-bottom:calc(var(--spacing) * .5)}.activity-detail-line:last-child{margin-bottom:calc(var(--spacing) * 0)}.activity-detail-pre{margin-top:calc(var(--spacing) * .5);background-color:var(--color-gray-100);max-height:120px;padding:calc(var(--spacing) * 1.5);word-break:break-all;white-space:pre-wrap;font-size:10px;font-family:var(--font-mono);border-radius:.25rem;overflow-y:auto}.stats-chart{margin-top:calc(var(--spacing) * 3);align-items:flex-end;gap:calc(var(--spacing) * 1);height:180px;padding-top:calc(var(--spacing) * 4);padding-bottom:calc(var(--spacing) * 2);border-bottom:1px solid var(--color-border-light);display:flex}.stats-chart-col{min-width:calc(var(--spacing) * 0);flex-direction:column;flex:1;align-items:center;display:flex}.stats-chart-bar-wrapper{flex:1;justify-content:center;align-items:flex-end;width:100%;height:140px;display:flex}.stats-chart-bar{background:var(--color-primary);border-radius:4px 4px 0 0;width:60%;max-width:36px;min-height:2px;transition:height .3s,background .12s;position:relative}.stats-chart-bar:hover{background:var(--color-primary-hover)}.stats-chart-value{--tw-font-weight:var(--font-weight-semibold);font-size:10px;font-weight:var(--font-weight-semibold);white-space:nowrap;color:var(--color-gray-500);position:absolute;top:-16px;left:50%;transform:translate(-50%)}.stats-chart-label{margin-top:calc(var(--spacing) * 1);white-space:nowrap;color:var(--color-gray-400);font-size:10px}@media (max-width:768px){.s-sidebar{display:none}.s-mobile-header{display:flex}.s-main{margin-left:calc(var(--spacing) * 0);padding:calc(var(--spacing) * 4)}}details[open]>summary .group-open\:rotate-90{transform:rotate(90deg)}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-ordinal{syntax:"*";inherits:false}@property --tw-slashed-zero{syntax:"*";inherits:false}@property --tw-numeric-figure{syntax:"*";inherits:false}@property --tw-numeric-spacing{syntax:"*";inherits:false}@property --tw-numeric-fraction{syntax:"*";inherits:false}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}@property --tw-leading{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}

data/lib/sentiero/web/assets_app.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require_relative "base_app"
+
+module Sentiero
+  module Web
+    # Standalone Rack endpoint serving the gem's static assets (mounted via
+    # r.sentiero_assets). Shares #serve with BaseApp#handle_asset so the dashboard's
+    # /assets/* route applies the same traversal guard, content types, and caching.
+    class AssetsApp < BaseApp
+      def call(env)
+        return [405, {"content-type" => "text/plain"}, ["Method Not Allowed"]] unless env["REQUEST_METHOD"] == "GET"
+
+        serve(env["PATH_INFO"].delete_prefix("/"))
+      end
+
+      # Resolved path must stay inside ASSETS_DIR (blocks traversal/absolute
+      # paths); .erb files are never served raw. Fingerprinted basenames
+      # (name-HASH.ext) get a year of immutable cache (31536000s), else one day.
+      def serve(relative_path)
+        return not_found if relative_path.nil? || relative_path.empty?
+
+        full_path = File.expand_path(relative_path, ASSETS_DIR)
+
+        return not_found unless full_path.start_with?(ASSETS_DIR + File::SEPARATOR)
+        return not_found if full_path.end_with?(".erb")
+        return not_found unless File.file?(full_path)
+
+        ext = File.extname(full_path)
+        content_type = CONTENT_TYPES.fetch(ext, "application/octet-stream")
+
+        cache_control = if File.basename(full_path).match?(/\A[^\/]+-[A-Za-z0-9]+\.\w+\z/)
+          "public, max-age=31536000, immutable"
+        else
+          "public, max-age=86400"
+        end
+
+        [200, {"content-type" => content_type, "cache-control" => cache_control}, [File.binread(full_path)]]
+      end
+    end
+  end
+end

data/lib/sentiero/web/base_app.rb

@@ -0,0 +1,319 @@
+# frozen_string_literal: true
+
+require "json"
+require "securerandom"
+require "uri"
+require "time"
+require_relative "escaping"
+require_relative "formatting"
+require_relative "views"
+require_relative "basic_auth_check"
+require_relative "../store"
+require_relative "../user_agent"
+require_relative "../ip_anonymizer"
+
+module Sentiero
+  module Web
+    # Shared, non-routing machinery for the dashboard UI Rack apps (DashboardApp,
+    # AnalyticsApp, MonitoringApp): auth, CSRF, escaping, security headers, asset
+    # serving, the routing combinators, and the render_page view-rendering entry
+    # point. Subclasses implement their own #call routing.
+    class BaseApp
+      include Escaping
+      include Formatting
+
+      ASSETS_DIR = File.expand_path("assets", __dir__).freeze
+
+      CSP_POLICY = [
+        "default-src 'self'",
+        "script-src 'self'",
+        "style-src 'self' 'unsafe-inline'",
+        "img-src 'self' data:",
+        "frame-src 'self' blob:"
+      ].join("; ").freeze
+
+      CONTENT_TYPES = {
+        ".css" => "text/css",
+        ".js" => "application/javascript",
+        ".html" => "text/html",
+        ".png" => "image/png",
+        ".svg" => "image/svg+xml"
+      }.freeze
+
+      # Warn at most once per process: the Roda plugin and /analytics delegation
+      # construct apps per request, so a per-construction warning would spam.
+      AUTH_WARNING_LOCK = Mutex.new
+      @auth_warning_emitted = false
+
+      class << self
+        # With no auth configured the dashboard fails closed (403) unless
+        # allow_insecure_dashboard is set, in which case it serves unauthenticated
+        # and we warn once. Called on BaseApp so both subclasses share one flag
+        # (class ivars aren't inherited).
+        def warn_unauthenticated_once
+          config = Sentiero.configuration
+          return if config.basic_auth || config.auth_callback
+          return unless config.allow_insecure_dashboard
+
+          AUTH_WARNING_LOCK.synchronize do
+            return if @auth_warning_emitted
+            @auth_warning_emitted = true
+          end
+
+          warn "[Sentiero] dashboard mounted with allow_insecure_dashboard and no " \
+            "authentication (config.basic_auth and config.auth_callback both unset); " \
+            "session recordings and analytics are publicly accessible to anyone who " \
+            "can reach this mount. Set config.basic_auth or config.auth_callback to " \
+            "protect it."
+        end
+
+        def reset_auth_warning!
+          @auth_warning_emitted = false
+        end
+      end
+
+      private
+
+      def authorized?(env)
+        creds = Sentiero.configuration.basic_auth
+        return basic_auth_authorized?(env, creds) unless creds.nil?
+
+        callback = Sentiero.configuration.auth_callback
+        # No auth configured: fail closed unless explicitly opted out.
+        return Sentiero.configuration.allow_insecure_dashboard if callback.nil?
+        !!callback.call(env)
+      rescue Sentiero::Error
+        raise
+      rescue => e
+        warn "[Sentiero] auth_callback raised #{e.class}: #{e.message}"
+        false
+      end
+
+      def basic_auth_authorized?(env, creds)
+        if BasicAuthCheck.credentials_blank?(creds)
+          raise Sentiero::Error,
+            "config.basic_auth is set but the username or password is blank. " \
+            "Set SENTIERO_DASHBOARD_PASSWORD (or remove config.basic_auth to " \
+            "disable dashboard auth)."
+        end
+        BasicAuthCheck.authorized?(env, creds)
+      end
+
+      def audit!(env, action:, session_id: nil, window_id: nil, dataset: nil, problem_id: nil)
+        callback = Sentiero.configuration.audit_log
+        return if callback.nil?
+
+        callback.call(
+          action: action,
+          session_id: session_id,
+          window_id: window_id,
+          dataset: dataset,
+          problem_id: problem_id,
+          user: audit_user(env),
+          ip: audit_ip(env),
+          timestamp: Time.now,
+          path: env["PATH_INFO"]
+        )
+      rescue => e
+        warn "[Sentiero] audit_log raised #{e.class}: #{e.message}"
+      end
+
+      def audit_user(env)
+        env["sentiero.user"] || env["REMOTE_USER"]
+      end
+
+      def audit_ip(env)
+        forwarded = env["HTTP_X_FORWARDED_FOR"]&.split(",")&.first&.strip
+        ip = (forwarded && !forwarded.empty?) ? forwarded : env["REMOTE_ADDR"]
+        Sentiero.configuration.anonymize_ip ? IpAnonymizer.anonymize(ip) : ip
+      end
+
+      def forbidden
+        [403, {"content-type" => "text/plain"}, ["Forbidden"]]
+      end
+
+      def unauthorized_response
+        if Sentiero.configuration.basic_auth.nil?
+          forbidden
+        else
+          [401,
+            {"content-type" => "text/plain", "www-authenticate" => 'Basic realm="Sentiero"'},
+            ["Unauthorized"]]
+        end
+      end
+
+      def not_found
+        [404, {"content-type" => "text/plain"}, ["Not Found"]]
+      end
+
+      def redirect(location, status: 302)
+        [status, {"location" => location}, []]
+      end
+
+      # Mount prefix (empty for a root mount); prepended to redirect targets.
+      def base_path(env)
+        env["SCRIPT_NAME"] || ""
+      end
+
+      def invalid_id
+        [400, json_headers, ['{"error":"invalid ID format"}']]
+      end
+
+      def forbidden_csrf
+        [403, {"content-type" => "text/plain"}, ["Invalid CSRF token"]]
+      end
+
+      # Combinator: returns a 403 to short-circuit a mutating route when the CSRF
+      # token is missing/invalid, or nil to fall through (`verify_csrf(env) || …`).
+      def verify_csrf(env)
+        forbidden_csrf unless valid_csrf_token?(env, Rack::Request.new(env).POST["csrf_token"])
+      end
+
+      def valid_id?(id)
+        id.is_a?(String) && id.match?(Store::VALID_ID)
+      end
+
+      def html_headers(extra = {})
+        {
+          "content-type" => "text/html",
+          "content-security-policy" => CSP_POLICY,
+          "x-content-type-options" => "nosniff",
+          "x-frame-options" => "DENY"
+        }.merge(extra)
+      end
+
+      def json_headers(extra = {})
+        {"content-type" => "application/json", "x-content-type-options" => "nosniff"}.merge(extra)
+      end
+
+      def generate_csrf_token
+        SecureRandom.hex(32)
+      end
+
+      def csrf_cookie_header(env, csrf_token, base_path)
+        cookie = "sentiero_csrf=#{csrf_token}; HttpOnly; SameSite=Strict; Path=#{base_path}/"
+        cookie += "; Secure" if env["rack.url_scheme"] == "https"
+        cookie
+      end
+
+      def valid_csrf_token?(env, token)
+        expected = Rack::Utils.parse_cookies(env)["sentiero_csrf"]
+        return false if expected.nil? || expected.empty?
+        return false if token.nil? || token.empty?
+        Rack::Utils.secure_compare(expected, token)
+      end
+
+      # Standard `since`/`until` range params (ISO date or ISO-8601 timestamp),
+      # parsed in UTC. Zone-less timestamps assume UTC; invalid input = no filter.
+      DATE_ONLY_FORMAT = /\A\d{4}-\d{2}-\d{2}\z/
+      END_OF_DAY_SECONDS = 86_399.999
+
+      def parse_range_params(params)
+        [parse_since_param(params["since"]), parse_until_param(params["until"])]
+      end
+
+      def parse_since_param(value)
+        parse_utc_time_param(value, end_of_day: false)
+      end
+
+      def parse_until_param(value)
+        parse_utc_time_param(value, end_of_day: true)
+      end
+
+      def parse_utc_time_param(value, end_of_day:)
+        return nil if value.nil? || value.empty?
+
+        if DATE_ONLY_FORMAT.match?(value)
+          base = Time.utc(*value.split("-").map(&:to_i)).to_f
+          end_of_day ? base + END_OF_DAY_SECONDS : base
+        elsif value.match?(/(?:Z|[+-]\d{2}:?\d{2})\z/i)
+          Time.parse(value).to_f
+        else
+          Time.parse("#{value} UTC").to_f
+        end
+      rescue ArgumentError, TypeError, RangeError
+        nil
+      end
+
+      def echo_range_params(params, since, until_time)
+        [since ? params["since"].to_s : "", until_time ? params["until"].to_s : ""]
+      end
+
+      # Ceiling on the requested page
+      MAX_PAGE = 10_000
+
+      def clamp_page(value)
+        page = value.to_i
+        page = 1 if page < 1
+        [page, MAX_PAGE].min
+      end
+
+      def clamp_per_page(value, default:, max:)
+        per_page = value.to_i
+        per_page = default if per_page < 1
+        [per_page, max].min
+      end
+
+      def query_params(env)
+        Rack::Utils.parse_query(env["QUERY_STRING"] || "")
+      end
+
+      # Clamped [page, per_page, offset] from the request params.
+      def paginate(params, default:, max:)
+        page = clamp_page(params["page"])
+        per_page = clamp_per_page(params["per_page"], default: default, max: max)
+        [page, per_page, (page - 1) * per_page]
+      end
+
+      # Callers obtain per_page + 1 rows; the extra row signals that another page exists
+      def take_page(rows, per_page)
+        [rows.first(per_page), rows.size > per_page]
+      end
+
+      # Router combinators: each returns an early-exit Rack response, or nil to
+      # fall through, so a route arm reads
+      # `get_only(method) || guard(id) || handle_x(env, id)`.
+
+      def get_only(method)
+        not_found unless method == "GET"
+      end
+
+      def post_only(method)
+        not_found unless method == "POST"
+      end
+
+      # 400 unless every captured path id is well-formed, so malformed ids are
+      # rejected before they reach a handler or a store query.
+      def guard(*ids)
+        invalid_id unless ids.all? { |id| valid_id?(id) }
+      end
+
+      def delete_request?(method, env)
+        return true if method == "DELETE"
+
+        method == "POST" && query_params(env)["_method"] == "delete"
+      end
+
+      def handle_asset(relative_path)
+        require_relative "assets_app"
+        AssetsApp.new.serve(relative_path)
+      end
+
+      # With csrf: true a CSRF token is minted, set as the sentiero_csrf cookie,
+      # and injected into the view as csrf_token.
+      def render_page(env, view, csrf: true, request_path: nil)
+        view.base_path = base_path(env)
+        request_path ||= env["PATH_INFO"] || "/"
+        headers = if csrf
+          token = generate_csrf_token
+          view.csrf_token = token
+          html_headers("set-cookie" => csrf_cookie_header(env, token, view.base_path))
+        else
+          html_headers
+        end
+        body = view.render_layout(view.render, request_path: request_path)
+        [200, headers, [body]]
+      end
+    end
+  end
+end

data/lib/sentiero/web/basic_auth.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require "rack/utils"
+require_relative "basic_auth_check"
+
+module Sentiero
+  module Web
+    # Optional HTTP Basic auth middleware for standalone dashboards. Passes
+    # through when basic_auth is unset; blank configured credentials lock
+    # everyone out (401). Assumes TLS upstream.
+    class BasicAuth
+      def initialize(app)
+        @app = app
+      end
+
+      def call(env)
+        creds = Sentiero.configuration.basic_auth
+        return @app.call(env) if creds.nil?
+        return @app.call(env) if BasicAuthCheck.authorized?(env, creds)
+
+        [401,
+          {"content-type" => "text/plain", "www-authenticate" => 'Basic realm="Sentiero"'},
+          ["Unauthorized"]]
+      end
+    end
+  end
+end

data/lib/sentiero/web/basic_auth_check.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require "rack/utils"
+
+module Sentiero
+  module Web
+    # Shared HTTP Basic credential checking. Constant-time comparison;
+    # assumes TLS terminated upstream.
+    module BasicAuthCheck
+      module_function
+
+      def credentials_blank?(creds)
+        creds[:user].to_s.empty? || creds[:password].to_s.empty?
+      end
+
+      def authorized?(env, creds)
+        return false if credentials_blank?(creds)
+
+        header = env["HTTP_AUTHORIZATION"]
+        return false unless header
+
+        scheme, encoded = header.split(" ", 2)
+        return false unless scheme&.downcase == "basic" && encoded
+
+        begin
+          # Strict base64 decode: "m0" raises ArgumentError on invalid input.
+          decoded = encoded.unpack1("m0")
+        rescue ArgumentError
+          return false
+        end
+
+        user, password = decoded.split(":", 2)
+        return false if user.nil? || password.nil?
+
+        user_ok = Rack::Utils.secure_compare(user, creds[:user].to_s)
+        pass_ok = Rack::Utils.secure_compare(password, creds[:password].to_s)
+        user_ok && pass_ok
+      end
+    end
+  end
+end

data/lib/sentiero/web/body_reader.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+require "stringio"
+require "zlib"
+
+module Sentiero
+  module Web
+    # Reads a request body (optionally gzip-encoded) with a hard 512KB cap on
+    # BOTH the compressed and decompressed size, so a gzip bomb can't blow past
+    # it. Shared by the two untrusted-input lanes (EventsApp, IngestApp), which
+    # differ only in the response they build from the error symbol.
+    module BodyReader
+      MAX_BODY_SIZE = 524_288 # 512 KB
+
+      # error symbol => [http_status, message]
+      ERRORS = {
+        too_large: [413, "request body too large"],
+        bad_gzip: [400, "invalid gzip encoding"]
+      }.freeze
+
+      module_function
+
+      # [body, nil] on success, or [nil, :too_large | :bad_gzip] on failure.
+      def read(env)
+        raw = env["rack.input"].read(MAX_BODY_SIZE + 1) || ""
+        env["rack.input"].rewind if env["rack.input"].respond_to?(:rewind)
+        return [nil, :too_large] if raw.bytesize > MAX_BODY_SIZE
+
+        if env["HTTP_CONTENT_ENCODING"]&.downcase == "gzip"
+          begin
+            gz = Zlib::GzipReader.new(StringIO.new(raw))
+            raw = gz.read(MAX_BODY_SIZE + 1) || ""
+            gz.close
+          rescue Zlib::GzipFile::Error
+            return [nil, :bad_gzip]
+          end
+          return [nil, :too_large] if raw.bytesize > MAX_BODY_SIZE
+        end
+
+        [raw, nil]
+      end
+    end
+  end
+end

data/lib/sentiero/web/csv_writer.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module Sentiero
+  module Web
+    # Minimal RFC 4180 CSV serializer with spreadsheet-formula-injection guarding:
+    # cells starting with a formula trigger are prefixed with a single quote so the
+    # spreadsheet treats them as text rather than executing them.
+    module CsvWriter
+      # Tab/CR included: some spreadsheets strip them before re-evaluating the cell.
+      FORMULA_TRIGGERS = ["=", "+", "-", "@", "\t", "\r"].freeze
+
+      module_function
+
+      def generate(headers, rows)
+        ([headers] + rows).map { |row| format_row(row) }.join("\r\n") + "\r\n"
+      end
+
+      def format_row(row)
+        row.map { |cell| format_cell(cell) }.join(",")
+      end
+
+      def format_cell(cell)
+        quote(guard_injection(stringify(cell)))
+      end
+
+      def stringify(cell)
+        case cell
+        when nil then ""
+        when true then "true"
+        when false then "false"
+        else cell.to_s
+        end
+      end
+
+      def guard_injection(value)
+        value.start_with?(*FORMULA_TRIGGERS) ? "'#{value}" : value
+      end
+
+      def quote(value)
+        return value unless value.match?(/[",\r\n]/)
+        %("#{value.gsub('"', '""')}")
+      end
+    end
+  end
+end