@aiwg/cockpit 2026.7.21 → 2026.7.24

package/web/src/runtimeContracts.fixtures.ts

@@ -0,0 +1,230 @@
+import type {
+  Loadout,
+  RuntimeProviderDescriptor,
+  RuntimeProvidersResponse,
+} from './types';
+
+export const runtimeProviderFixtures: RuntimeProvidersResponse = {
+  default_provider: 'cloud-hypervisor',
+  kinds: [
+    { kind: 'host', label: 'Host', default_provider: 'host', providers: ['host'] },
+    { kind: 'container', label: 'Container', default_provider: 'docker', providers: ['docker'] },
+    { kind: 'vm', label: 'VM', default_provider: 'cloud-hypervisor', providers: ['cloud-hypervisor', 'libvirt', 'future-vm-provider'] },
+  ],
+  providers: [
+    {
+      provider: 'host',
+      kind: 'host',
+      label: 'Host runtime',
+      capabilities: [],
+    },
+    {
+      provider: 'docker',
+      kind: 'container',
+      label: 'Docker',
+      capabilities: [],
+    },
+    {
+      provider: 'cloud-hypervisor',
+      kind: 'vm',
+      label: 'Cloud Hypervisor',
+      default: true,
+      capabilities: [
+        { id: 'instance.snapshot', label: 'Snapshot' },
+        { id: 'instance.restore', label: 'Restore' },
+        { id: 'instance.fork', label: 'Fork' },
+        { id: 'warm_pool.manage', label: 'Warm pools' },
+        { id: 'device.vfio', label: 'VFIO device passthrough' },
+      ],
+      capability_constraints: [
+        {
+          capability: 'device.vfio',
+          excludes: ['instance.snapshot', 'instance.restore', 'instance.fork', 'warm_pool.manage'],
+          reason: 'VFIO-backed VMs cannot safely reuse memory snapshots or warm-pool state.',
+        },
+      ],
+    },
+    {
+      provider: 'libvirt',
+      kind: 'vm',
+      label: 'libvirt/QEMU',
+      capabilities: [
+        { id: 'instance.restore', label: 'Checkpoint restore' },
+        { id: 'warm_pool.manage', label: 'Warm pools' },
+      ],
+    },
+    {
+      provider: 'future-vm-provider',
+      kind: 'vm',
+      label: 'Future VM provider',
+      capabilities: [{ id: 'future.capability', label: 'Future capability' }],
+    } satisfies RuntimeProviderDescriptor,
+  ],
+};
+
+export const darwinArmRuntimeProviderFixtures: RuntimeProvidersResponse = {
+  default_provider: 'host',
+  kinds: [
+    { kind: 'host', label: 'Host', default_provider: 'host', providers: ['host'] },
+    { kind: 'container', label: 'Container', default_provider: 'docker', providers: ['docker'] },
+    { kind: 'vm', label: 'VM', providers: [] },
+  ],
+  providers: [
+    {
+      provider: 'host',
+      kind: 'host',
+      label: 'Host runtime',
+      platforms: ['darwin/arm64'],
+      architectures: ['arm64'],
+      capabilities: [],
+      posture: {
+        host_platform: 'darwin',
+        host_architecture: 'arm64',
+        available: true,
+        reason: 'Apple Silicon developer package host runtime discovered.',
+      },
+    },
+    {
+      provider: 'docker',
+      kind: 'container',
+      label: 'Docker Desktop',
+      platforms: ['darwin/arm64'],
+      architectures: ['arm64'],
+      engine: 'Docker Desktop',
+      capabilities: [],
+      posture: {
+        host_platform: 'darwin',
+        host_architecture: 'arm64',
+        engine: 'Docker Desktop',
+        available: true,
+        reason: 'Docker Desktop runtime discovered on Apple Silicon.',
+      },
+    },
+  ],
+};
+
+export const loadoutCompatibilityFixtures: Loadout[] = [
+  {
+    id: 'host-tools',
+    label: 'host-tools',
+    description: 'Host tools',
+    runtimes: ['host'],
+    runtime_options: { kind: 'host', provider: 'host', launch_strategy: { mode: 'cold' } },
+    compatibility: [{ runtime_kind: 'host', provider: 'host', eligible: true }],
+  },
+  {
+    id: 'agentic-dev',
+    label: 'agentic-dev',
+    description: 'Developer tools',
+    runtimes: ['docker', 'container', 'qemu', 'vm'],
+    runtime_options: {
+      kind: 'vm',
+      provider: 'cloud-hypervisor',
+      required_capabilities: ['instance.restore'],
+      excluded_capabilities: ['device.vfio'],
+      launch_strategy: {
+        mode: 'restore',
+        prefer_fast_start: true,
+        asset_ref: 'ch-snapshot-agentic-dev',
+        restore_mode: 'copy',
+      },
+      constraints: { allow_vfio_fast_start: false, fallback_mode: 'fail' },
+    },
+    compatibility: [
+      {
+        runtime_kind: 'vm',
+        provider: 'cloud-hypervisor',
+        eligible: true,
+        required_capabilities: ['instance.restore'],
+        excluded_capabilities: ['device.vfio'],
+        fast_start_assets: [
+          {
+            id: 'ch-snapshot-agentic-dev',
+            provider: 'cloud-hypervisor',
+            kind: 'snapshot',
+            state: 'ready',
+            capabilities: ['instance.restore'],
+          },
+        ],
+      },
+      {
+        runtime_kind: 'vm',
+        provider: 'libvirt',
+        eligible: true,
+        required_capabilities: ['warm_pool.manage'],
+        fast_start_assets: [
+          {
+            id: 'libvirt-pool-agentic-dev',
+            provider: 'libvirt',
+            kind: 'warm_pool',
+            state: 'ready',
+            capabilities: ['warm_pool.manage'],
+          },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'sdlc-team-fork',
+    label: 'sdlc-team-fork',
+    description: 'Fork from a prepared Cloud Hypervisor base',
+    runtimes: ['vm'],
+    runtime_options: {
+      kind: 'vm',
+      provider: 'cloud-hypervisor',
+      required_capabilities: ['instance.fork'],
+      launch_strategy: {
+        mode: 'fork',
+        prefer_fast_start: true,
+        asset_ref: 'ch-base-sdlc-team',
+      },
+    },
+    compatibility: [
+      {
+        runtime_kind: 'vm',
+        provider: 'cloud-hypervisor',
+        eligible: true,
+        required_capabilities: ['instance.fork'],
+        fast_start_assets: [
+          {
+            id: 'ch-base-sdlc-team',
+            provider: 'cloud-hypervisor',
+            kind: 'fork_base',
+            state: 'ready',
+            capabilities: ['instance.fork'],
+          },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'gpu-vfio',
+    label: 'gpu-vfio',
+    description: 'GPU-backed VM that must cold boot',
+    runtimes: ['vm'],
+    runtime_options: {
+      kind: 'vm',
+      provider: 'cloud-hypervisor',
+      required_capabilities: ['device.vfio'],
+      excluded_capabilities: ['instance.snapshot', 'instance.restore', 'instance.fork', 'warm_pool.manage'],
+      launch_strategy: { mode: 'cold' },
+      constraints: { allow_vfio_fast_start: false, fallback_mode: 'fail' },
+    },
+    compatibility: [
+      {
+        runtime_kind: 'vm',
+        provider: 'cloud-hypervisor',
+        eligible: true,
+        required_capabilities: ['device.vfio'],
+        excluded_capabilities: ['instance.snapshot', 'instance.restore', 'instance.fork', 'warm_pool.manage'],
+        constraints: [
+          {
+            capability: 'device.vfio',
+            excludes: ['instance.snapshot', 'instance.restore', 'instance.fork', 'warm_pool.manage'],
+            reason: 'VFIO-backed VMs cannot use fast-start memory reuse.',
+          },
+        ],
+      },
+    ],
+  },
+];

package/web/src/runtimeContracts.test.ts

@@ -0,0 +1,63 @@
+import { describe, expect, it } from 'vitest';
+import { darwinArmRuntimeProviderFixtures, loadoutCompatibilityFixtures, runtimeProviderFixtures } from './runtimeContracts.fixtures';
+
+describe('sandbox runtime contract fixtures', () => {
+  it('keeps provider discovery opaque enough for future VM providers', () => {
+    const vmKind = runtimeProviderFixtures.kinds.find((kind) => kind.kind === 'vm');
+    expect(vmKind?.providers).toContain('future-vm-provider');
+    expect(runtimeProviderFixtures.providers.find((provider) => provider.provider === 'future-vm-provider')).toMatchObject({
+      kind: 'vm',
+      capabilities: [{ id: 'future.capability' }],
+    });
+  });
+
+  it('represents restore, fork, and warm-pool fast-start assets per provider', () => {
+    const agenticDev = loadoutCompatibilityFixtures.find((loadout) => loadout.id === 'agentic-dev');
+    const sdlcFork = loadoutCompatibilityFixtures.find((loadout) => loadout.id === 'sdlc-team-fork');
+
+    expect(agenticDev?.runtime_options?.launch_strategy).toMatchObject({
+      mode: 'restore',
+      asset_ref: 'ch-snapshot-agentic-dev',
+    });
+    expect(agenticDev?.compatibility?.flatMap((entry) => entry.fast_start_assets ?? []).map((asset) => asset.kind))
+      .toEqual(expect.arrayContaining(['snapshot', 'warm_pool']));
+    expect(sdlcFork?.runtime_options?.launch_strategy).toMatchObject({
+      mode: 'fork',
+      asset_ref: 'ch-base-sdlc-team',
+    });
+  });
+
+  it('captures VFIO incompatibility with snapshot, restore, fork, and warm pools', () => {
+    const cloudHypervisor = runtimeProviderFixtures.providers.find((provider) => provider.provider === 'cloud-hypervisor');
+    const gpuLoadout = loadoutCompatibilityFixtures.find((loadout) => loadout.id === 'gpu-vfio');
+    const excluded = ['instance.snapshot', 'instance.restore', 'instance.fork', 'warm_pool.manage'];
+
+    expect(cloudHypervisor?.capability_constraints?.[0]).toMatchObject({
+      capability: 'device.vfio',
+      excludes: excluded,
+    });
+    expect(gpuLoadout?.runtime_options?.required_capabilities).toEqual(['device.vfio']);
+    expect(gpuLoadout?.runtime_options?.excluded_capabilities).toEqual(excluded);
+    expect(gpuLoadout?.runtime_options?.constraints?.allow_vfio_fast_start).toBe(false);
+  });
+
+  it('covers Apple Silicon host and Docker Desktop runtime posture without libvirt assumptions', () => {
+    const host = darwinArmRuntimeProviderFixtures.providers.find((provider) => provider.provider === 'host');
+    const docker = darwinArmRuntimeProviderFixtures.providers.find((provider) => provider.provider === 'docker');
+    const vmKind = darwinArmRuntimeProviderFixtures.kinds.find((kind) => kind.kind === 'vm');
+
+    expect(host).toMatchObject({
+      kind: 'host',
+      platforms: ['darwin/arm64'],
+      posture: { host_platform: 'darwin', host_architecture: 'arm64', available: true },
+    });
+    expect(docker).toMatchObject({
+      kind: 'container',
+      label: 'Docker Desktop',
+      engine: 'Docker Desktop',
+      posture: { engine: 'Docker Desktop', available: true },
+    });
+    expect(vmKind?.providers).toEqual([]);
+    expect(darwinArmRuntimeProviderFixtures.providers.some((provider) => provider.provider === 'libvirt')).toBe(false);
+  });
+});

package/web/src/styles.css

@@ -63,6 +63,11 @@ code { font:13px ui-monospace, monospace; color:var(--muted); }
 .inventory-table .manage-actions .cta { min-width:92px; }
 .section-toolbar { display:flex; align-items:flex-end; justify-content:space-between; gap:14px; flex-wrap:wrap; margin-bottom:14px; }
 .section-toolbar h2 { margin:0; font-size:20px; }
+.trust-banner { display:flex; gap:10px; flex-wrap:wrap; align-items:center; margin:0 0 12px; padding:10px 12px; border:1px solid var(--line); border-radius:8px; background:rgba(15,23,42,.55); overflow-wrap:anywhere; }
+.trust-banner.trust-secure { border-color:rgba(134,239,172,.7); color:var(--ok); }
+.trust-banner.trust-degraded { border-color:rgba(253,230,138,.75); color:var(--warn); }
+.trust-banner.trust-disabled { border-color:rgba(253,164,175,.75); color:var(--err); }
+.trust-detail { color:var(--muted); }
 .empty-state { display:grid; gap:10px; justify-items:start; border:1px solid var(--line); border-radius:8px; padding:18px; background:var(--panel); }
 .empty-state h2 { margin:0; font-size:20px; }
 /* Host for the xterm.js terminal — fixed height so FitAddon can size the PTY; xterm owns
@@ -151,6 +156,8 @@ code { font:13px ui-monospace, monospace; color:var(--muted); }
 .form-grid label { color:var(--muted); font-size:13px; }
 .form-grid select, .form-grid input, .form-grid textarea { min-width:0; width:100%; }
 .form-grid textarea { min-height:88px; resize:vertical; background:var(--panel); color:var(--fg); border:1px solid var(--line); border-radius:7px; padding:7px 12px; font:inherit; }
+.field-stack { display:grid; gap:7px; min-width:0; }
+.posture-line { color:var(--muted); font-size:13px; overflow-wrap:anywhere; }
 .check-row { display:flex; align-items:center; gap:9px; color:var(--fg) !important; }
 .check-row input { width:auto; }
 .ro { min-width:0; color:var(--fg); overflow-wrap:anywhere; }

package/web/src/types.ts

@@ -17,11 +17,125 @@ export interface TransportPosture {
   evidence?: string;
   stale?: boolean;
 }
+export interface BootstrapTrustPosture {
+  status: 'secure' | 'degraded' | 'disabled' | (string & {});
+  mode: 'mtls' | 'plaintext-dev' | 'disabled' | (string & {});
+  label: string;
+  source: string;
+  ca_provider_ref?: string;
+  trust_bundle_ref?: string;
+  client_identity_ref?: string;
+  rotation_state?: string;
+  expires_at?: string;
+  trust_bundle_fresh?: boolean;
+  token_store_configured?: boolean;
+  missing_required_material: string[];
+  recovery: string;
+}
 export interface LaunchContext { cwd?: string; loadout?: string; runtime_kind?: string; host?: string; selected_tier?: string; name?: string; image_ref?: string; source?: string }
 export interface SessionBackend { mode: 'direct' | 'managed'; backend: string; replay?: boolean; keyframe?: boolean; drive?: boolean; observe?: boolean; available?: boolean; reason?: string }
+export interface StoragePosture { persistent: boolean; delete_on_destroy: boolean; scope?: string; reason?: string }
+export interface LifecyclePosture { destroy?: unknown; reconnect?: unknown; start?: unknown; stop?: unknown }
+export type SandboxRuntimeKind = 'host' | 'container' | 'vm' | (string & {});
+export type SandboxRuntimeProvider = 'host' | 'docker' | 'libvirt' | 'cloud-hypervisor' | (string & {});
+export type SandboxRuntimeCapabilityId =
+  | 'instance.checkpoint'
+  | 'instance.snapshot'
+  | 'instance.restore'
+  | 'instance.fork'
+  | 'warm_pool.manage'
+  | 'device.vfio'
+  | (string & {});
+export interface RuntimeCapability {
+  id: SandboxRuntimeCapabilityId;
+  label?: string;
+  description?: string;
+}
+export interface RuntimeCapabilityConstraint {
+  capability: SandboxRuntimeCapabilityId;
+  excludes?: SandboxRuntimeCapabilityId[];
+  reason?: string;
+}
+export interface RuntimeGpuPosture {
+  available?: boolean;
+  assigned?: boolean;
+  devices?: string[];
+  reason?: string;
+  authorization?: 'allowed' | 'denied' | 'unknown' | (string & {});
+}
+export interface RuntimeKindDescriptor {
+  kind: SandboxRuntimeKind;
+  label?: string;
+  default_provider?: SandboxRuntimeProvider;
+  providers: SandboxRuntimeProvider[];
+}
+export interface RuntimeProviderDescriptor {
+  provider: SandboxRuntimeProvider;
+  kind: SandboxRuntimeKind;
+  label?: string;
+  default?: boolean;
+  platforms?: string[];
+  architectures?: string[];
+  engine?: string;
+  capabilities: RuntimeCapability[];
+  capability_constraints?: RuntimeCapabilityConstraint[];
+  posture?: {
+    host_platform?: string;
+    host_architecture?: string;
+    engine?: string;
+    available?: boolean;
+    reason?: string;
+  };
+}
+export interface RuntimeProvidersResponse {
+  default_provider?: SandboxRuntimeProvider;
+  kinds: RuntimeKindDescriptor[];
+  providers: RuntimeProviderDescriptor[];
+}
+export type RuntimeLaunchMode = 'cold' | 'restore' | 'fork' | 'warm_pool';
+export interface RuntimeLaunchStrategy {
+  mode: RuntimeLaunchMode;
+  prefer_fast_start?: boolean;
+  asset_ref?: string;
+  restore_mode?: 'ondemand' | 'copy';
+}
+export interface RuntimeOptions {
+  kind: SandboxRuntimeKind;
+  provider?: SandboxRuntimeProvider;
+  required_capabilities?: SandboxRuntimeCapabilityId[];
+  excluded_capabilities?: SandboxRuntimeCapabilityId[];
+  launch_strategy?: RuntimeLaunchStrategy;
+  constraints?: {
+    allow_vfio_fast_start?: boolean;
+    fallback_mode?: 'fail' | 'cold';
+  };
+}
+export interface LoadoutFastStartAsset {
+  id: string;
+  provider: SandboxRuntimeProvider;
+  kind: 'snapshot' | 'checkpoint' | 'fork_base' | 'warm_pool' | (string & {});
+  state: 'ready' | 'building' | 'degraded' | 'unavailable' | (string & {});
+  capabilities: SandboxRuntimeCapabilityId[];
+  reason?: string;
+}
+export interface ResolvedLoadoutCompatibility {
+  runtime_kind: SandboxRuntimeKind;
+  provider: SandboxRuntimeProvider;
+  eligible: boolean;
+  required_capabilities?: SandboxRuntimeCapabilityId[];
+  excluded_capabilities?: SandboxRuntimeCapabilityId[];
+  constraints?: RuntimeCapabilityConstraint[];
+  launch_strategy?: RuntimeLaunchStrategy;
+  fast_start_assets?: LoadoutFastStartAsset[];
+  reason?: string;
+}
 export interface Instance {
   id: string;
   runtime: string;
+  provider?: SandboxRuntimeProvider;
+  capabilities?: RuntimeCapability[];
+  capability_constraints?: RuntimeCapabilityConstraint[];
+  gpu?: RuntimeGpuPosture;
   loadout: string;
   state: string;
   tenant: string;
@@ -30,6 +144,8 @@ export interface Instance {
   host_daemon: HostDaemonStatus;
   transport: TransportPosture;
   launch_context: LaunchContext;
+  storage?: StoragePosture;
+  lifecycle?: LifecyclePosture;
   agent_ready?: boolean;
   registered_agent_id?: string;
   session_backends: SessionBackend[];
@@ -121,8 +237,58 @@ export interface EventsSnapshot {
 }
 export interface InstanceCost { instance_id: string; tenant: string; input_tokens: number; output_tokens: number; usd: number }
 export interface Cost { total: { input_tokens: number; output_tokens: number; usd: number }; per_instance: InstanceCost[] }
-export interface Loadout { id: string; label: string; description?: string; runtimes?: string[] }
-export interface ExecutorCapabilities { status: string; source?: string | null; host_runtime_enabled: boolean; raw_status?: string; error?: string }
+export interface Loadout {
+  id: string;
+  label: string;
+  description?: string;
+  runtimes?: string[];
+  runtime_options?: RuntimeOptions;
+  compatibility?: ResolvedLoadoutCompatibility[];
+}
+export interface ExecutorCapabilities {
+  status: string;
+  source?: string | null;
+  host_runtime_enabled: boolean;
+  runtime_providers?: RuntimeProvidersResponse;
+  raw_status?: string;
+  error?: string;
+}
+export interface McpPrincipalDiscovery {
+  client_id: string;
+  scopes: string[];
+}
+export interface McpEndpointDiscovery {
+  path: string;
+  methods: string[];
+  transport: string;
+  stateless: boolean;
+  get_behavior: string;
+  mcp_session_id: boolean;
+}
+export interface McpDiscovery {
+  source?: string;
+  discovery_path?: string;
+  fetched_at?: string;
+  enabled: boolean;
+  status: 'enabled' | 'disabled' | 'degraded' | string;
+  reason_code?: string | null;
+  error?: string;
+  endpoint: McpEndpointDiscovery;
+  protocol: { latest?: string; supported?: string[] };
+  auth: {
+    scheme: string;
+    required: boolean;
+    principal_config: string;
+    principals: McpPrincipalDiscovery[];
+    scopes: string[];
+  };
+  capabilities: Record<string, unknown>;
+  tools: Array<{ name: string; title?: string; description?: string } & Record<string, unknown>>;
+  resources: Array<{ uri: string; name?: string; mimeType?: string; description?: string }>;
+  resource_templates: Array<{ uriTemplate: string; name?: string; mimeType?: string; description?: string }>;
+  errors: Array<{ http_status: number; jsonrpc_code?: number; code: string; message: string }>;
+  notes: string[];
+}
 export interface CapabilityResult { path: string; type: string; title?: string; capability?: string; score?: number; name: string; triggers?: string[] }
 export interface ContribAction { id: string; title: string; icon?: string; group?: string; source: string; inject: { command: string; target?: string; needs_args?: boolean; args_hint?: string } }
 export interface ContribScreen { id: string; title: string; source: string; contribution: string }

package/web/dist/assets/index-B0ea5aQ1.css

@@ -1,32 +0,0 @@
-/**
- * Copyright (c) 2014 The xterm.js authors. All rights reserved.
- * Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)
- * https://github.com/chjj/term.js
- * @license MIT
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
- * THE SOFTWARE.
- *
- * Originally forked from (with the author's permission):
- *   Fabrice Bellard's javascript vt100 for jslinux:
- *   http://bellard.org/jslinux/
- *   Copyright (c) 2011 Fabrice Bellard
- *   The original design remains. The terminal itself
- *   has been extended to include xterm CSI codes, among
- *   other features.
- */.xterm{cursor:text;position:relative;user-select:none;-ms-user-select:none;-webkit-user-select:none}.xterm.focus,.xterm:focus{outline:none}.xterm .xterm-helpers{position:absolute;top:0;z-index:5}.xterm .xterm-helper-textarea{padding:0;border:0;margin:0;position:absolute;opacity:0;left:-9999em;top:0;width:0;height:0;z-index:-5;white-space:nowrap;overflow:hidden;resize:none}.xterm .composition-view{background:#000;color:#fff;display:none;position:absolute;white-space:nowrap;z-index:1}.xterm .composition-view.active{display:block}.xterm .xterm-viewport{background-color:#000;overflow-y:scroll;cursor:default;position:absolute;right:0;left:0;top:0;bottom:0}.xterm .xterm-screen{position:relative}.xterm .xterm-screen canvas{position:absolute;left:0;top:0}.xterm .xterm-scroll-area{visibility:hidden}.xterm-char-measure-element{display:inline-block;visibility:hidden;position:absolute;top:0;left:-9999em;line-height:normal}.xterm.enable-mouse-events{cursor:default}.xterm.xterm-cursor-pointer,.xterm .xterm-cursor-pointer{cursor:pointer}.xterm.column-select.focus{cursor:crosshair}.xterm .xterm-accessibility:not(.debug),.xterm .xterm-message{position:absolute;left:0;top:0;bottom:0;right:0;z-index:10;color:transparent;pointer-events:none}.xterm .xterm-accessibility-tree:not(.debug) *::selection{color:transparent}.xterm .xterm-accessibility-tree{-webkit-user-select:text;user-select:text;white-space:pre}.xterm .live-region{position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden}.xterm-dim{opacity:1!important}.xterm-underline-1{text-decoration:underline}.xterm-underline-2{text-decoration:double underline}.xterm-underline-3{text-decoration:wavy underline}.xterm-underline-4{text-decoration:dotted underline}.xterm-underline-5{text-decoration:dashed underline}.xterm-overline{text-decoration:overline}.xterm-overline.xterm-underline-1{text-decoration:overline underline}.xterm-overline.xterm-underline-2{text-decoration:overline double underline}.xterm-overline.xterm-underline-3{text-decoration:overline wavy underline}.xterm-overline.xterm-underline-4{text-decoration:overline dotted underline}.xterm-overline.xterm-underline-5{text-decoration:overline dashed underline}.xterm-strikethrough{text-decoration:line-through}.xterm-screen .xterm-decoration-container .xterm-decoration{z-index:6;position:absolute}.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer{z-index:7}.xterm-decoration-overview-ruler{z-index:8;position:absolute;top:0;right:0;pointer-events:none}.xterm-decoration-top{z-index:2;position:relative}:root{color-scheme:dark;--bg:#0b1220;--panel:#111827;--glass:rgba(15,23,42,.82);--fg:#f8fafc;--muted:#cbd5e1;--line:#334155;--ok:#86efac;--warn:#fde68a;--idle:#94a3b8;--accent:#5eead4;--accent2:#93c5fd;--accent3:#c4b5fd;--accent4:#86efac;--err:#fda4af}*{box-sizing:border-box}body{margin:0;font:15px/1.5 system-ui,sans-serif;background:var(--bg);color:var(--fg);overflow-x:hidden}header{padding:12px 22px;border-bottom:1px solid var(--line);display:flex;align-items:center;gap:14px;flex-wrap:wrap;background:var(--panel);position:sticky;top:0;z-index:5}header h1{font-size:18px;margin:0;font-weight:650}header .mark{color:var(--accent);font-size:20px}header .meta{margin-left:0;color:var(--muted);font-size:13px}.brand-lockup{display:flex;align-items:center;gap:12px}.top-status{margin-left:auto;display:flex;align-items:center;gap:8px;flex-wrap:wrap;color:var(--muted);font-size:12px}.top-status span{border:1px solid var(--line);border-radius:999px;padding:3px 8px;background:#0b1220b8}.health-pill.ok{color:var(--ok);border-color:#86efaca6}.health-pill.warn{color:var(--warn);border-color:#fde68aa6}.executor-pill{max-width:34ch;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.matrix-mini{white-space:nowrap}[role=tablist]{display:flex;gap:4px;padding:0 22px;border-bottom:1px solid var(--line);flex-wrap:wrap}[role=tab]{background:none;border:0;border-bottom:2px solid transparent;color:var(--muted);padding:10px 14px;cursor:pointer;font:inherit}[role=tab][aria-selected=true]{color:var(--fg);border-bottom-color:var(--accent)}[role=tab]:focus-visible{outline:2px solid var(--accent);outline-offset:-2px}main{padding:22px}button,select,input{background:var(--panel);color:var(--fg);border:1px solid var(--line);border-radius:7px;padding:7px 12px;font:inherit}textarea{background:var(--panel);color:var(--fg);border:1px solid var(--line);border-radius:7px;padding:7px 12px;font:inherit;resize:vertical}button{cursor:pointer}button:hover:not(:disabled){border-color:var(--accent)}button:disabled{opacity:.45;cursor:not-allowed}button:focus-visible,select:focus-visible,input:focus-visible,textarea:focus-visible{outline:2px solid var(--accent);outline-offset:2px}table{width:100%;border-collapse:collapse;background:var(--panel);border:1px solid var(--line);border-radius:10px;overflow:hidden}caption{text-align:left;color:var(--muted);padding:10px 14px;font-size:13px}th,td{text-align:left;padding:11px 14px;border-bottom:1px solid var(--line)}th{color:var(--muted);font-weight:600;font-size:12px;text-transform:uppercase;letter-spacing:.04em}tr:last-child td{border-bottom:0}code{font:13px ui-monospace,monospace;color:var(--muted)}.badge{display:inline-block;padding:2px 8px;border-radius:999px;border:1px solid var(--line);font-size:12px}.badge.controller{border-color:var(--ok);color:var(--ok)}.badge.observer,.badge.high{border-color:var(--accent);color:var(--accent)}.badge.isolation-least,.badge.trust-compatibility,.badge.trust-degraded,.badge.daemon-permission_denied{border-color:var(--err);color:var(--err)}.badge.isolation-shared-kernel,.badge.isolation-opaque,.badge.trust-local,.badge.daemon-degraded,.badge.daemon-stopped,.badge.daemon-unknown{border-color:var(--warn);color:var(--warn)}.badge.isolation-strong,.badge.trust-secure,.badge.daemon-available,.badge.daemon-detected{border-color:var(--ok);color:var(--ok)}.badge.isolation-unknown,.badge.trust-unknown,.badge.daemon-unavailable{border-color:var(--idle);color:var(--muted)}.cell-note{color:var(--muted);font-size:12px;margin-top:3px;max-width:260px}.inventory-table{table-layout:fixed}.inventory-table th,.inventory-table td{vertical-align:top}.inventory-table th:nth-child(1),.inventory-table td:nth-child(1){width:17%}.inventory-table th:nth-child(2),.inventory-table td:nth-child(2){width:15%}.inventory-table th:nth-child(3),.inventory-table td:nth-child(3){width:13%}.inventory-table th:nth-child(4),.inventory-table td:nth-child(4){width:11%}.inventory-table th:nth-child(5),.inventory-table td:nth-child(5){width:13%}.inventory-table th:nth-child(6),.inventory-table td:nth-child(6){width:7%}.inventory-table th:nth-child(7),.inventory-table td:nth-child(7){width:6%}.inventory-table th:nth-child(8),.inventory-table td:nth-child(8){width:18%}.inventory-table .badge{max-width:100%;white-space:normal;line-height:1.35}.inventory-table code{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.inventory-table .cell-note{max-width:100%;overflow-wrap:anywhere;line-height:1.4}.runtime-cell .cell-note,.daemon-cell .cell-note{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;overflow:hidden}.state{display:inline-flex;align-items:center;gap:7px}.dot{width:8px;height:8px;border-radius:50%;flex:0 0 auto;background:var(--idle)}.state.running .dot,.state.working .dot{background:var(--ok)}.state.provisioning .dot,.state.degraded .dot{background:var(--warn)}.empty{color:var(--muted);padding:22px}.err{color:var(--err);padding:12px 0}.controls{display:flex;gap:10px;align-items:center;flex-wrap:wrap;margin-bottom:14px}.controls label{color:var(--muted);font-size:13px}.manage-actions{white-space:nowrap;display:flex;gap:8px;align-items:flex-start;justify-content:flex-start}.inventory-table .manage-actions button{min-width:74px;min-height:38px;padding-inline:10px}.inventory-table .manage-actions .cta{min-width:92px}.section-toolbar{display:flex;align-items:flex-end;justify-content:space-between;gap:14px;flex-wrap:wrap;margin-bottom:14px}.section-toolbar h2{margin:0;font-size:20px}.empty-state{display:grid;gap:10px;justify-items:start;border:1px solid var(--line);border-radius:8px;padding:18px;background:var(--panel)}.empty-state h2{margin:0;font-size:20px}.terminal{background:#0a0c10;border:1px solid var(--line);border-radius:10px;padding:0;height:min(56vh,calc(100vh - 310px));min-height:320px;overflow:hidden}.terminal .xterm{height:100%;padding:8px}.terminal .xterm-viewport,.terminal .xterm-screen{height:100%}.terminal .xterm-viewport{overflow-y:auto}.inputrow{display:flex;gap:8px;margin-top:12px}.inputrow input{flex:1;font-family:ui-monospace,monospace}.hint{color:var(--muted);font-size:13px;margin:6px 0 0}.response-needed{display:grid;gap:10px;margin:14px 0 18px}.response-needed h2{margin:0;font-size:16px}.response-item{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:12px;align-items:start;border:1px solid var(--warn);border-radius:8px;background:#fde68a14;padding:12px 14px}.response-item p{margin:5px 0;color:var(--fg);white-space:pre-wrap;overflow-wrap:anywhere}.response-item span{color:var(--muted);font-size:12px}.mission-summary{display:flex;gap:10px;flex-wrap:wrap;margin:14px 0}.mission-summary span{border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:8px 12px;color:var(--muted)}.mission-summary strong{color:var(--fg)}.missions-layout{display:grid;grid-template-columns:minmax(220px,300px) minmax(0,1fr);gap:14px;align-items:start;margin-top:14px}.mission-sessions{display:grid;gap:8px}.mission-sessions button{display:grid;gap:2px;text-align:left;border-radius:8px}.mission-sessions button.selected{border-color:var(--accent);background:#5eead414}.mission-sessions small{color:var(--muted)}.mission-detail{min-width:0;display:grid;gap:12px}.mission-detail-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:14px}.mission-detail-head h2{margin:0;font-size:18px}.mission-detail-head p{margin:3px 0 0;color:var(--muted);font-size:13px}.block{display:block;margin-top:4px;color:var(--muted);font-size:12px;overflow-wrap:anywhere}.audit-tail{border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:12px 14px}.audit-tail h3{margin:0 0 8px;font-size:14px}.audit-tail p{margin:5px 0;color:var(--muted);font-size:13px}.telemetry-kpis{display:grid;grid-template-columns:repeat(auto-fit,minmax(170px,1fr));gap:10px;margin:14px 0}.telemetry-kpis article{display:grid;gap:4px;border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:12px 14px}.telemetry-kpis span,.telemetry-kpis small{color:var(--muted);font-size:12px}.telemetry-kpis strong{font-size:24px}.controls button[aria-pressed=true]{border-color:var(--accent);color:var(--accent)}.memory-layout{display:grid;grid-template-columns:minmax(260px,360px) minmax(0,1fr);gap:14px;align-items:start;margin-top:14px}.memory-form{display:grid;gap:10px;border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:14px}.memory-form h2{margin:0;font-size:18px}.memory-form label{display:grid;gap:5px;color:var(--muted);font-size:13px}.memory-form input,.memory-form textarea{width:100%}.memory-list{min-width:0}.note-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(240px,1fr));gap:10px}.note-card{display:grid;gap:8px;border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:12px}.note-card header{position:static;display:flex;align-items:flex-start;justify-content:space-between;gap:10px;padding:0;border:0;background:transparent}.note-card h3{margin:0;font-size:15px}.note-card p{margin:0;color:var(--muted);white-space:pre-wrap;overflow-wrap:anywhere}.note-card footer{display:flex;gap:6px;align-items:center;flex-wrap:wrap;color:var(--muted);font-size:12px}.grid2{display:grid;grid-template-columns:minmax(260px,1fr) 1.4fr;gap:16px;align-items:start}.index-live{border:1px solid var(--line);border-radius:8px;background:#111827b8;padding:14px;margin:14px 0 18px}.index-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(180px,1fr));gap:8px;margin-bottom:12px}.index-graph{border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:10px 12px}.index-graph.missing{border-color:var(--warn)}.index-graph p{margin:5px 0 0;color:var(--muted);font-size:13px}.index-query{display:grid;grid-template-columns:minmax(220px,1fr) auto;gap:10px;align-items:end;margin-top:10px}.index-query label{display:grid;gap:5px;color:var(--muted);font-size:13px}.index-results{display:grid;grid-template-columns:repeat(auto-fill,minmax(240px,1fr));gap:8px;margin-top:12px}.index-results article{border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:10px 12px}.index-results p{margin:5px 0;color:var(--muted);font-size:13px;overflow-wrap:anywhere}.index-results small{color:var(--muted)}.act{text-align:left}.action-cluster{display:inline-flex;align-items:stretch;gap:4px}.action-cluster .act{border-radius:7px 0 0 7px}.copy-command{border-radius:0 7px 7px 0;color:var(--muted);font-size:12px;padding-inline:9px}.contrib-layout{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:14px;margin-top:16px}.contrib-grid{display:grid;gap:10px}.contrib-item{display:grid;gap:8px;align-items:start;border:1px solid var(--line);border-radius:8px;background:var(--panel);padding:12px}.contrib-item p{margin:0;color:var(--muted);font-size:13px;overflow-wrap:anywhere}.workflow-steps{display:flex;gap:8px;flex-wrap:wrap}.capgrid{display:grid;grid-template-columns:repeat(auto-fill,minmax(230px,1fr));gap:10px}.capcard{display:block;text-align:left;background:var(--panel);border:1px solid var(--line);border-radius:10px;padding:11px 13px;cursor:pointer}.capcard:hover{border-color:var(--accent)}.capcard-head{display:flex;align-items:center;gap:8px}.capcard-head strong{font-size:14px}.capcard-score{margin-left:auto;color:var(--muted);font-size:12px}.capcard-cap{color:var(--muted);font-size:13px;margin-top:5px;line-height:1.4}.capcard-tags{margin-top:8px;display:flex;gap:5px;flex-wrap:wrap}.tag{font-size:11px;color:var(--muted);border:1px solid var(--line);border-radius:999px;padding:1px 7px}.picker{background:#0a0c10;border:1px solid var(--line);border-radius:10px;padding:12px;margin-bottom:12px}.modal-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:20;display:grid;place-items:center;padding:24px;background:#020617b8;-webkit-backdrop-filter:blur(5px);backdrop-filter:blur(5px)}.modal{width:min(780px,calc(100vw - 48px));max-height:calc(100vh - 48px);overflow:auto;border:1px solid var(--line);border-radius:8px;background:var(--panel);box-shadow:0 24px 70px #0000007a;padding:20px}.modal h2{margin:0 0 14px;font-size:20px}.form-grid{display:grid;grid-template-columns:minmax(120px,.28fr) minmax(0,1fr);gap:12px;align-items:center}.form-grid label{color:var(--muted);font-size:13px}.form-grid select,.form-grid input,.form-grid textarea{min-width:0;width:100%}.form-grid textarea{min-height:88px;resize:vertical;background:var(--panel);color:var(--fg);border:1px solid var(--line);border-radius:7px;padding:7px 12px;font:inherit}.check-row{display:flex;align-items:center;gap:9px;color:var(--fg)!important}.check-row input{width:auto}.ro{min-width:0;color:var(--fg);overflow-wrap:anywhere}.warn{color:var(--warn)}.ok-text{color:var(--ok)}.modal-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:18px}.welcome{max-width:none}.welcome h2{font-size:clamp(26px,3vw,42px);margin:4px 0 10px;line-height:1.08}.welcome .lead{color:var(--muted);font-size:16px;line-height:1.6;margin:0;max-width:680px}.welcome .lead strong{color:var(--fg)}.eyebrow{color:var(--accent);text-transform:uppercase;letter-spacing:.08em;font-size:12px;font-weight:700;margin:0 0 6px}.statgrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:12px;margin-bottom:18px}.stat{display:flex;flex-direction:column;align-items:flex-start;gap:2px;text-align:left;padding:14px 16px}.stat-n{font-size:26px;font-weight:680;color:var(--fg)}.stat-l{color:var(--muted);font-size:13px}.cta-row{display:flex;gap:10px;flex-wrap:wrap;margin-bottom:22px}.cta{background:var(--accent);color:#0b0d12;border-color:var(--accent);font-weight:620;padding:9px 18px}.cta:hover:not(:disabled){filter:brightness(1.08)}.card{background:var(--panel);border:1px solid var(--line);border-radius:12px;padding:16px 18px;margin-bottom:16px}.card h3{margin:0 0 8px;font-size:15px}.card ol{margin:0;padding-left:20px;color:var(--muted);line-height:1.7}.card ol strong{color:var(--fg)}.warn-card{border-color:var(--warn)}.warn-card pre{margin:10px 0 0}.wall-hero{display:grid;grid-template-columns:minmax(280px,1fr) auto;gap:18px;align-items:end;margin:4px 0 18px}.wall-hero-compact{margin:0 0 10px;align-items:center}.wall-hero-compact h2{font-size:clamp(24px,2.4vw,34px);margin-bottom:6px}.wall-hero-compact .lead{font-size:14px;line-height:1.45;max-width:620px}.wall-hero-compact .hero-actions{align-items:center}.hero-actions{display:flex;gap:10px;flex-wrap:wrap;justify-content:flex-end}.segmented{display:inline-flex;gap:0;border:1px solid var(--line);border-radius:8px;overflow:hidden}.segmented button{border:0;border-radius:0;color:var(--muted);background:#0f172ab8}.segmented button[aria-pressed=true]{color:#0b0d12;background:var(--accent);font-weight:650}.operator-wall{min-height:calc(100vh - 130px)}.radial-wall{display:grid;grid-template-columns:1fr;gap:18px;align-items:stretch;margin:10px calc(50% - 50vw) 18px}.radial-map{position:relative;min-height:clamp(640px,calc(100vh - 260px),780px);border-block:1px solid rgba(147,197,253,.25);overflow:hidden;background:radial-gradient(circle at 50% 47%,rgba(94,234,212,.22),transparent 17%),radial-gradient(circle at 18% 62%,rgba(59,130,246,.14),transparent 20%),radial-gradient(circle at 82% 38%,rgba(124,58,237,.18),transparent 18%),linear-gradient(180deg,#0f172af2,#020617c2);box-shadow:inset 0 0 70px #020617b8}.radial-links{position:absolute;top:0;right:0;bottom:0;left:0;width:100%;height:100%;filter:drop-shadow(0 0 14px rgba(94,234,212,.34))}.link-ring{fill:none;stroke:#93c5fd2e;stroke-width:.35;stroke-dasharray:1.2 1.4}.link-ring-inner{stroke:#5eead424;stroke-dasharray:.7 1.8}.link-line{stroke:#5eead48a;stroke-width:.42}.link-ready,.link-idle{stroke:#93c5fd61}.link-attention{stroke:#fde68ac7}.link-blocked{stroke:#fda4af80;stroke-dasharray:1.4 1.2}.handoff-arc{fill:none;stroke:#c4b5fdf0;stroke-width:1.25;stroke-linecap:round;filter:drop-shadow(0 0 5px rgba(196,181,253,.72))}.mode-handoff .link-line{stroke:#93c5fd3d}.mode-handoff .handoff-arc{stroke-width:2.35;filter:drop-shadow(0 0 11px rgba(196,181,253,.9))}.central-hub{position:absolute;left:50%;top:45%;transform:translate(-50%,-50%);width:214px;min-height:178px;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:8px;text-align:center;border-radius:8px;border-color:#5eead4e6;background:linear-gradient(180deg,#5eead457,#0f172ae6);box-shadow:0 0 64px #5eead46b,inset 0 0 38px #93c5fd33;z-index:3}.mode-handoff .central-hub{border-color:#c4b5fde6;box-shadow:0 0 72px #c4b5fd6b,inset 0 0 38px #5eead429}.central-hub strong{font-size:24px}.central-hub span:last-child{color:var(--muted);font-size:12px}.hub-core{width:82px;height:52px;border:1px solid rgba(248,250,252,.78);border-radius:7px;transform:skew(-12deg);background:linear-gradient(135deg,#f8fafcdb,#5eead475);box-shadow:0 10px 32px #5eead459}.orbit-node{position:absolute;left:var(--x);top:var(--y);transform:translate(-50%,-50%);width:104px;min-height:106px;display:grid;grid-template-rows:72px auto;gap:4px;place-items:center;text-align:center;padding:8px 7px;border-radius:8px;background:radial-gradient(circle at 50% 38%,#f8fafc1c,#0f172a8f 54%,#0206176b);border-color:#93c5fd2e;box-shadow:0 20px 38px #00000057,inset 0 -18px 26px #3b82f60f;z-index:2}.orbit-node:hover:not(:disabled){transform:translate(-50%,-50%) translateY(-2px)}.orbit-node:focus-visible{outline-offset:4px}.node-copy{min-width:0;display:flex;flex-direction:column;gap:2px}.node-copy strong{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:94px;font-size:11px}.node-copy span{color:var(--muted);font-size:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:94px}.orbit-node:focus-visible .node-copy span,.orbit-node:hover .node-copy span{font-size:10px}.node-glyph{width:72px;height:62px;display:inline-block;border:2px solid var(--node-accent,var(--accent));background:#ffffff0a;box-shadow:0 0 30px color-mix(in srgb,var(--node-accent,var(--accent)) 48%,transparent)}.node-host,.node-session{--node-accent:var(--accent)}.node-container,.node-inventory{--node-accent:var(--accent2)}.node-vm,.node-mission{--node-accent:var(--accent3)}.node-approval.node-attention,.node-blocked{--node-accent:var(--warn)}.node-cost,.node-capability,.node-library,.node-action{--node-accent:var(--accent4)}.node-blocked{border-color:#fda4af99}.node-attention{border-color:#fde68ab8}.node-running{border-color:#86efacb8}.glyph-host,.glyph-session{border-radius:6px;box-shadow:inset 0 -10px #ffffff0f,0 0 18px #5eead447}.glyph-container,.glyph-inventory{border-radius:7px;transform:skew(-8deg)}.glyph-vm{border-radius:4px;transform:rotate(45deg) scale(.82)}.glyph-mission{border-radius:50%;position:relative}.glyph-mission:before,.glyph-mission:after{content:"";position:absolute;width:10px;height:10px;border:2px solid var(--node-accent);border-radius:50%;background:#0f172ae6}.glyph-mission:before{left:-7px;top:12px}.glyph-mission:after{right:-7px;top:12px}.glyph-approval{border-radius:18px 18px 6px 6px}.glyph-cost{border-radius:50%;border-style:dashed}.glyph-capability{border-radius:8px;background:repeating-linear-gradient(45deg,rgba(255,255,255,.08) 0 4px,transparent 4px 8px)}.glyph-library{border-radius:4px;box-shadow:inset 9px 0 #ffffff14,inset 18px 0 #ffffff0d}.glyph-action{border-radius:10px;transform:rotate(45deg) scale(.8)}.handoff-marker{position:absolute;right:-8px;top:50%;width:16px;height:16px;margin-top:-8px;border-radius:50%;background:var(--accent3);box-shadow:0 0 22px #c4b5fdd1}.mode-handoff .node-mission{border-color:#c4b5fdf2;box-shadow:0 22px 48px #7c3aed5c,inset 0 -18px 26px #c4b5fd1a}.mode-handoff .handoff-marker{width:22px;height:22px;right:-12px;margin-top:-11px}.handoff-callout{position:absolute;z-index:4;display:grid;gap:3px;padding:9px 11px;border:1px solid rgba(196,181,253,.54);border-radius:8px;background:#0f172ac2;box-shadow:0 0 28px #c4b5fd2e}.handoff-callout span{color:var(--muted);font-size:11px;text-transform:uppercase;letter-spacing:.06em}.handoff-callout strong{font-size:13px}.handoff-source{left:20%;top:60%}.handoff-destination{right:14%;top:39%}.radial-overlay{position:absolute;left:22px;right:22px;bottom:18px;border:1px solid rgba(203,213,225,.16);border-radius:8px;background:#0f172aa8;-webkit-backdrop-filter:blur(8px);backdrop-filter:blur(8px);padding:13px;display:grid;grid-template-columns:minmax(280px,.62fr) 1fr;gap:12px;z-index:4}.radial-overlay-head{display:grid;grid-template-columns:minmax(160px,1fr) minmax(220px,.8fr);gap:12px;align-items:end}.radial-overlay h3{margin:0;font-size:18px}.mission-route{display:grid;grid-template-columns:1fr auto auto;gap:8px;align-items:center;padding:9px;border:1px solid rgba(203,213,225,.16);border-radius:8px;background:#02061757}.mission-route span{color:var(--muted);font-size:12px}.mission-route strong{font-size:14px}.route-attention{color:var(--warn)!important}.route-ready{color:var(--ok)!important}.wall-readout{display:grid;grid-template-columns:repeat(5,minmax(90px,1fr));gap:8px;margin:0}.wall-readout div{display:grid;gap:4px;padding:8px 10px;border:1px solid rgba(203,213,225,.12);border-radius:8px;background:#02061752}.wall-readout div:last-child{border-bottom:1px solid rgba(203,213,225,.12)}.wall-readout dt{color:var(--muted);font-size:12px}.wall-readout dd{margin:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.stack-board{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:14px;margin:16px 0}.stack-card{position:relative;min-height:236px;display:grid;grid-template-rows:auto 1fr auto auto;gap:12px;background:linear-gradient(160deg,var(--glass),rgba(15,23,42,.58));border:1px solid var(--line);border-radius:8px;padding:16px;overflow:hidden;box-shadow:0 18px 45px #00000038}.stack-card:before{content:"";position:absolute;top:0;right:0;bottom:0;left:0;border-top:3px solid var(--stack-accent,var(--accent));pointer-events:none}.stack-card.accent-1{--stack-accent:var(--accent)}.stack-card.accent-2{--stack-accent:var(--accent2)}.stack-card.accent-3{--stack-accent:var(--accent3)}.stack-card.accent-4{--stack-accent:var(--accent4)}.stack-head{display:grid;grid-template-columns:42px minmax(0,1fr) auto;gap:12px;align-items:start}.stack-head h3{margin:0;font-size:16px}.stack-head p{margin:3px 0 0;color:var(--muted);font-size:12px}.topology{width:38px;height:38px;border:2px solid var(--stack-accent,var(--accent));background:#ffffff0a;display:inline-block}.topology-terminal{border-radius:6px;box-shadow:inset 0 -10px #ffffff0f}.topology-cube{transform:skew(-8deg);border-radius:7px}.topology-window{border-radius:10px 10px 4px 4px}.stack-log{min-height:92px;border:1px solid rgba(203,213,225,.18);background:#02061770;border-radius:8px;padding:10px;display:flex;flex-direction:column;gap:8px;color:var(--muted);font:12px/1.35 ui-monospace,monospace}.stack-log span:first-child{color:var(--fg)}.segment-progress{height:8px;border-radius:999px;background:#94a3b82e;overflow:hidden}.segment-progress span{display:block;height:100%;background:var(--stack-accent,var(--accent));border-radius:inherit}.transport-bar{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.transport-bar span{margin-left:auto;color:var(--muted);font-size:13px}.telemetry-strip{display:grid;grid-template-columns:repeat(5,minmax(120px,1fr));gap:10px;margin:16px 0}.telemetry-strip button{min-height:82px;display:flex;flex-direction:column;align-items:flex-start;justify-content:center;text-align:left;gap:3px;background:#111827c7;border-radius:8px}.telemetry-strip strong{font-size:24px;color:var(--fg)}.telemetry-strip span{color:var(--muted);font-size:12px}.control-planner{display:grid;grid-template-columns:minmax(320px,1fr) minmax(260px,.36fr);gap:14px;margin-top:16px;align-items:stretch}.guided-start{display:grid;grid-template-columns:1fr;align-items:start;gap:14px;border:1px solid var(--line);background:#0f172a94;border-radius:8px;padding:16px}.guided-start h3{margin:0 0 4px;font-size:18px}.planner-grid{display:grid;grid-template-columns:repeat(3,minmax(160px,1fr));gap:10px}.planner-grid label{display:flex;flex-direction:column;gap:6px;color:var(--muted);font-size:12px}.planner-grid select{width:100%;min-height:38px}.quota-panel{border:1px solid var(--line);border-radius:8px;background:#0f172ab8;padding:16px;display:grid;gap:12px;align-content:start}.quota-donut{--quota:0%;width:148px;aspect-ratio:1;border-radius:50%;justify-self:center;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:4px;background:conic-gradient(var(--accent) var(--quota),rgba(148,163,184,.18) 0);position:relative;color:var(--fg)}.quota-donut:before{content:"";position:absolute;top:13px;right:13px;bottom:13px;left:13px;border-radius:inherit;background:var(--panel);border:1px solid rgba(203,213,225,.16)}.quota-donut strong,.quota-donut span{position:relative;z-index:1}.quota-donut strong{font-size:23px}.quota-donut span{color:var(--muted);font-size:11px;max-width:96px;text-align:center}.quota-readout{margin:0;display:grid;gap:7px}.quota-readout div{display:grid;grid-template-columns:1fr auto;gap:10px;border-bottom:1px solid rgba(203,213,225,.13);padding-bottom:7px}.quota-readout div:last-child{border-bottom:0;padding-bottom:0}.quota-readout dt{color:var(--muted);font-size:12px}.quota-readout dd{margin:0}@media(max-width:820px){header{position:static}.top-status{width:100%;margin-left:0}.wall-hero,.guided-start,.radial-wall,.control-planner,.missions-layout,.memory-layout{grid-template-columns:1fr;align-items:start}.hero-actions{justify-content:flex-start}.telemetry-strip{grid-template-columns:repeat(2,minmax(120px,1fr))}.planner-grid{grid-template-columns:1fr}.radial-wall{margin-inline:0}.radial-map{min-height:0;display:grid;grid-template-columns:1fr;gap:8px;padding:12px}.radial-links,.central-hub .hub-core{display:none}.central-hub,.orbit-node{position:static;transform:none;width:100%;min-height:72px}.central-hub{margin-bottom:4px}.orbit-node:hover:not(:disabled){transform:none}.node-copy span{font-size:10px}.handoff-callout{position:static}.radial-overlay{position:static;grid-template-columns:1fr}.radial-overlay-head,.wall-readout{grid-template-columns:1fr}}@media(prefers-reduced-motion:reduce){*,*:before,*:after{scroll-behavior:auto!important;transition:none!important;animation:none!important}}.session-workspace{display:grid;grid-template-columns:minmax(240px,300px) minmax(0,1fr);gap:16px;align-items:start}@media(max-width:820px){.session-workspace{grid-template-columns:1fr}}.session-nav{border:1px solid var(--line);border-radius:10px;background:var(--panel);padding:10px;max-height:calc(100vh - 250px);overflow-y:auto}.session-nav-head{display:flex;align-items:center;justify-content:space-between;margin:2px 4px 8px}.session-nav-head h2{margin:0;font-size:15px}.session-nav-head .hint{margin:0}.nav-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:4px}.nav-instance{border-radius:8px;border:1px solid transparent}.nav-instance.selected{background:#5eead40f;border-color:var(--line)}.nav-instance-row{width:100%;display:flex;align-items:center;gap:8px;background:none;border:0;padding:8px;cursor:pointer;text-align:left;border-radius:8px}.nav-instance-row:hover{border-color:transparent;background:#94a3b814}.nav-instance-name{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-weight:600;font-size:13px}.nav-instance .state{font-size:11px;color:var(--muted)}.nav-instance .badge{font-size:10px;padding:1px 7px;text-transform:lowercase}.nav-sessions{padding:0 6px 8px 10px;display:flex;flex-direction:column;gap:4px}.nav-sessions ul{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:3px}.nav-sessions li{display:flex;align-items:stretch;gap:4px}.nav-session{flex:1;min-width:0;display:flex;flex-wrap:wrap;align-items:center;gap:4px 6px;background:none;border:1px solid transparent;border-left:2px solid var(--line);border-radius:6px;padding:6px 8px;cursor:pointer;text-align:left}.nav-session:hover{background:#94a3b814}.nav-session.selected{border-color:var(--accent);border-left-color:var(--accent);background:#5eead414}.nav-session.live{border-left-color:var(--ok)}.nav-session-name{flex-basis:100%;font-size:12px;font-weight:600;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.nav-session-meta{font-size:11px;color:var(--muted)}.nav-session .badge{padding:0 6px;font-size:10px}.nav-session .live-dot{border-color:var(--ok);color:var(--ok)}.nav-session .unread{border-color:var(--accent2);color:var(--accent2)}.nav-session .response{border-color:var(--warn);color:var(--warn)}.nav-session-end{align-self:center;padding:4px 9px;color:var(--muted);border-color:transparent;background:none;line-height:1}.nav-session-end:hover:not(:disabled){border-color:var(--err);color:var(--err)}.nav-new-session{margin-top:6px;align-self:flex-start}.cta-sm{font-size:12px;padding:5px 10px;border-color:var(--accent);color:var(--accent)}.nav-empty{margin:4px 0;font-size:12px}.session-main{min-width:0}.controls-active{color:var(--muted);font-size:13px;padding:5px 10px;border:1px dashed var(--line);border-radius:7px;max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.badge.live-dot{color:var(--ok);border-color:var(--ok)}