@akasecurity/cli 0.9.1 → 0.9.3

package/web-ui/web-ui/.next/server/chunks/853.js

@@ -0,0 +1,698 @@
+exports.id=853,exports.ids=[853],exports.modules={9:(a,b,c)=>{"use strict";c.d(b,{K:()=>f});let d=new Intl.RelativeTimeFormat("en",{numeric:"auto"}),e=[["year",31536e3],["month",2592e3],["week",604800],["day",86400],["hour",3600],["minute",60]];function f(a){if(!a)return"";let b=Date.parse(a);if(Number.isNaN(b))return"";let c=(b-Date.now())/1e3,f=Math.abs(c);if(f<45)return"just now";for(let[a,b]of e)if(f>=b)return d.format(Math.round(c/b),a);return"just now"}},152:(a,b,c)=>{Promise.resolve().then(c.bind(c,2405))},525:(a,b,c)=>{"use strict";c.d(b,{t:()=>i});var d=c(60102),e=c(68191),f=c(80108),g=c(27527),h=c(11294);function i({d:a,onOpenUpdate:b,onRecheck:c,unknownHint:i}){let j=(0,h.Xg)(a),k=a.update?.latestVersion??a.latestVersion??"";return(0,d.jsxs)("div",{className:"overflow-hidden rounded-xl border border-border shrink-0",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5 bg-surface-2 px-4 py-3 border-b border-border",children:[(0,d.jsx)(g.Ai,{origin:a.origin}),(0,d.jsx)(g.Jk,{publisher:a.publisher??a.namespace,kind:a.publisherKind??"user"}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsxs)("span",{className:"font-mono text-label text-text-2",children:["tracking v",a.version]})]}),"update-available"===j?(0,d.jsxs)("div",{className:"flex items-center gap-3 bg-sev-high-fill px-4 py-3",children:[(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-4.5 shrink-0 text-sev-high"}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"text-sm font-semibold text-sev-high",children:["Update available \xb7 v",k]}),(0,d.jsx)("div",{className:"mt-px text-xs leading-snug text-text-2",children:"A newer version is published upstream."})]}),b&&(0,d.jsx)(e.$n,{size:"sm",onClick:b,className:"shrink-0 bg-sev-high text-white hover:bg-sev-high",children:"Update"})]}):"up-to-date"===j?(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-4 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(f.C1,{"aria-hidden":!0,focusable:!1,className:"size-4 text-ok"}),"Up to date with upstream"]}):(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-4 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(f.mo,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0"}),(0,d.jsxs)("span",{className:"min-w-0 flex-1",children:["Update status unknown",i?(0,d.jsxs)(d.Fragment,{children:[" — ",i]}):"."]}),c&&(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:c,children:"Check again"})]})]})}},2405:(a,b,c)=>{"use strict";c.d(b,{AppShell:()=>d});let d=(0,c(54044).registerClientReference)(function(){throw Error("Attempted to call AppShell() from the server but AppShell is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/components/AppShell.tsx","AppShell")},3230:(a,b,c)=>{"use strict";c.d(b,{T:()=>j});var d=c(60102),e=c(68191),f=c(48844),g=c(17419),h=c(80108);function i({label:a,tone:b="neutral",dir:c}){let f="up"===c?h.Kp:"down"===c?h.ZL:null;return(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1 text-xs font-semibold","positive"===b?"text-ok":"negative"===b?"text-sev-critical":"text-text-3"),children:[f&&(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a]})}function j({icon:a,iconBg:b,iconColor:c,label:h,value:j,delta:k,spark:l,sparkColor:m,sparkLabels:n,sparkFormatValue:o,loading:p=!1}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col gap-2.5 p-4.5 shadow-sm","aria-busy":p||void 0,children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"grid size-8.5 shrink-0 place-items-center rounded-lg",style:{background:b,color:c},children:(0,d.jsx)(a,{"aria-hidden":!0,focusable:!1,className:"size-4.5"})}),(0,d.jsx)("span",{className:"text-ui font-medium text-text-2",children:h})]}),p?(0,d.jsx)(e.EA,{className:"my-1 h-7 w-10"}):(0,d.jsxs)("div",{className:"flex items-end justify-between gap-2",children:[(0,d.jsx)("span",{className:"font-display text-3xl font-semibold leading-none tracking-[-0.03em] text-text",children:j}),k&&(0,d.jsx)(i,{...k})]}),l&&!p&&(0,d.jsx)("div",{className:"mt-0.5",children:(0,d.jsx)(g.Sparkline,{data:l,color:m??f.l.primary,height:34,...n?{labels:n}:{},...o?{formatValue:o}:{}})})]})}},4379:(a,b,c)=>{"use strict";c.d(b,{DataShareDetailView:()=>n});var d=c(60102),e=c(68191),f=c(9),g=c(43644),h=c(80108),i=c(42552),j=c(35433);function k({st:a}){return(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-surface p-3",children:[(0,d.jsxs)("div",{className:"mb-1.5 flex items-center gap-2",children:[(0,d.jsx)(h.SY,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-primary"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text",children:a.project}),a.vendored?(0,d.jsx)("span",{className:"ml-auto",children:(0,d.jsx)(e.Ex,{variant:"high",children:"Vendored"})}):a.dynamic&&(0,d.jsx)("span",{className:"ml-auto",children:(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(h.cZ,{"aria-hidden":!0,focusable:!1,className:"size-2.5"}),"Dynamic"]})})]}),(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[a.file,":",(0,d.jsx)("b",{className:"text-text-2",children:a.line})]}),(0,d.jsxs)("div",{className:"overflow-x-auto whitespace-pre rounded-md bg-ink px-2.5 py-2 font-mono text-xs leading-relaxed text-white mt-0.5",children:[(0,d.jsxs)("span",{className:"text-code-muted",children:[a.file.split("/").pop(),":",a.line,"  "]}),a.snippet]})]})}function l({d:a,onPick:b}){let c=j.pN[a.trust].icon,f=a.endpoints.reduce((a,b)=>a+b.callSiteCount,0);return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:44}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:(0,e.cn)("text-lg font-semibold text-text","ip"===a.kind?"font-mono":"font-display"),children:a.name}),(0,d.jsxs)("div",{className:"mt-0.5 text-xs text-text-3",children:[a.category," \xb7 ",a.endpoints.length," endpoints \xb7 ",f," call sites"]})]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,d.jsx)(i.xB,{trust:a.trust}),a.transports.map(a=>(0,d.jsx)(i.eV,{transport:a},a))]}),(null!==a.note||a.network?.geo!=null)&&(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"mt-0.5 size-4 shrink-0 text-text-2"}),(0,d.jsxs)("div",{className:"text-xs leading-normal text-text-2",children:[a.network?.geo!=null&&(0,d.jsxs)("div",{children:[(0,d.jsx)("b",{className:"text-text",children:"Resolves to "}),a.network.geo,null!=a.network.ptr?" \xb7 "+a.network.ptr:""]}),null!=a.note&&(0,d.jsx)("div",{className:a.network?.geo!=null?"mt-1":"",children:a.note})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Endpoints"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:a.endpoints.map(a=>(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a.id)},className:"flex w-full cursor-pointer items-center gap-2.5 rounded-lg border border-border bg-surface px-3 py-2.5 text-left hover:bg-surface-2",children:[(0,d.jsx)(i.kX,{method:a.method}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)(i.UH,{url:a.url}),(0,d.jsxs)("div",{className:"mt-1 flex items-center gap-2",children:[(0,d.jsx)(i.eV,{transport:a.transport,plain:!0}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["\xb7 ",a.callSiteCount," call",1===a.callSiteCount?"":"s"]})]})]}),(0,d.jsx)(h.vK,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0 text-text-3"})]},a.id))})]})]})}function m({d:a,ep:b,onBack:c}){return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)("div",{children:(0,d.jsxs)(e.$n,{onClick:c,size:"sm",variant:"link",tone:"primary",children:[(0,d.jsx)(h.YJ,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),"Back to destination"]})}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(i.kX,{method:b.method}),(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:22}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.name})]}),(0,d.jsx)("div",{className:"rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:(0,d.jsx)(i.UH,{url:b.url,big:!0})})]}),b.template&&(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-primary-tint px-3 py-2.5",children:[(0,d.jsx)(h.cZ,{"aria-hidden":!0,focusable:!1,className:"mt-0.5 size-4 shrink-0 text-primary"}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-0.5 text-xs font-semibold text-text",children:"Templated URL"}),(0,d.jsxs)("div",{className:"text-xs leading-normal text-text-2",children:["Built at runtime — the"," ",(0,d.jsxs)("span",{className:"rounded bg-primary-tint px-1 font-mono font-semibold text-primary",children:["$","{…}"]})," ","segments vary per request, so individual generated URLs aren’t itemized."]})]})]}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(g.p,{label:"Method",children:b.method}),(0,d.jsx)(g.p,{label:"Transport",children:(0,d.jsx)(i.eV,{transport:b.transport,plain:!0})}),(0,d.jsx)(g.p,{label:"Data classification",children:(0,d.jsx)("span",{className:"inline-flex",children:(0,d.jsx)(i.HD,{cls:b.dataClass})})}),(0,d.jsx)(g.p,{label:"Last seen",children:(0,f.K)(b.lastSeen)})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Call sites"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:b.sites.map(a=>(0,d.jsx)(k,{st:a},a.id))})]})]})}function n({destination:a,endpoint:b,onPick:c,onBack:f,onSetDecision:g,isSettingDecision:i}){let k="blocked"===a.status;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsx)("header",{className:"flex items-center gap-2.5 border-b border-border px-4.5 py-4 pr-12",children:(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-xs font-semibold text-text-3",children:[(0,d.jsx)(h._G,{"aria-hidden":!0,focusable:!1,className:"size-4"}),b?"Endpoint":"Destination"]})}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-4 overflow-y-auto p-4.5",children:b?(0,d.jsx)(m,{d:a,ep:b,onBack:f}):(0,d.jsx)(l,{d:a,onPick:c})}),(0,d.jsxs)("footer",{className:"flex flex-col gap-2 border-t border-border p-3.5",children:[(0,d.jsxs)("div",{className:"flex gap-2",children:[(0,d.jsxs)(e.$n,{variant:"outline",className:"flex-1",children:[(0,d.jsx)(h.iB,{"aria-hidden":!0,focusable:!1}),"Add policy"]}),k?(0,d.jsxs)(e.$n,{variant:"outline",className:"flex-1 border-ok-fill text-ok hover:bg-ok-fill",disabled:i,onClick:()=>{g("allow")},children:[(0,d.jsx)(h.Sr,{"aria-hidden":!0,focusable:!1}),"Allow egress"]}):(0,d.jsxs)(e.$n,{variant:"solid",tone:"danger",className:"flex-1",disabled:i,onClick:()=>{g("block")},children:[(0,d.jsx)(h.pD,{"aria-hidden":!0,focusable:!1}),"Block egress"]})]}),a.isCustom&&(0,d.jsxs)(e.$n,{variant:"ghost",size:"sm",tone:"neutral",className:"self-center text-xs text-text-3",disabled:i,onClick:()=>{g(null)},children:["Reset to default (",j.pN[a.trust].label,")"]})]})]})}},4484:(a,b,c)=>{"use strict";c.d(b,{DU:()=>k,eF:()=>f,gi:()=>i,hv:()=>g,rO:()=>e,rU:()=>j,yr:()=>h});var d=c(16312);function e(a,b=Date.now()){return null!==a.revokedAt?"revoked":null!==a.maxUses&&a.useCount>=a.maxUses?"consumed":null!==a.expiresAt&&Date.parse(a.expiresAt)<=b?"expired":"active"}function f(a,b){if((0,d.qEQ)(a.keyVersion,b))return null;switch(b.status){case"unreadable":return"The fingerprint key file cannot be read, so no recorded detection can be matched right now. Check the permissions on ~/.aka/data — do not delete the key.";case"absent":return"The fingerprint key file is missing, so the fingerprint recorded for this detection can no longer be matched. Trigger the detection again.";default:return`Recorded under fingerprint key v${String(a.keyVersion)}; the key is now v${String(b.version)}, so a grant from it could never match. Trigger the detection again.`}}let g={active:"success",consumed:"default",expired:"default",revoked:"critical"},h={once:"Once",temporary:"Temporary",permanent:"Permanent"},i={"cli-approve":"CLI approve","cli-add":"CLI add","web-approve":"Web approve","web-add":"Web add",api:"API","setup-triage":"Setup triage"},j=["once","30m","1h","24h","permanent"],k={once:"Once","30m":"30 min","1h":"1 hour","24h":"24 hours",permanent:"Permanent"}},5493:(a,b,c)=>{"use strict";c.d(b,{DataSharesTableView:()=>o});var d=c(60102),e=c(68191),f=c(83143),g=c(9),h=c(80108),i=c(42552),j=c(35433);function k({classes:a}){return(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-1.5",children:[a.slice(0,3).map(a=>(0,d.jsx)(i.HD,{cls:a},a)),a.length>3&&(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["+",a.length-3]})]})}function l({d:a,expanded:b,selected:c,onToggle:f,onOpen:l}){let m=(0,j.EI)(a.transports);return(0,d.jsxs)(e.Hj,{onClick:l,"aria-label":`View details for destination ${a.name}`,className:(0,e.cn)("cursor-pointer",c?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)(e.nA,{className:"w-9",children:(0,d.jsx)(e.$n,{"aria-label":b?"Collapse":"Expand",onClick:a=>{a.stopPropagation(),f()},variant:"ghost",size:"sm",children:(0,d.jsx)(h.vK,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 transition-transform",b&&"rotate-90")})})}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("whitespace-nowrap font-semibold text-text","ip"===a.kind&&"font-mono"),children:a.name}),m&&(0,d.jsx)("span",{title:"Sends over plaintext",className:"inline-flex text-sev-critical",children:(0,d.jsx)(h._0,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})})]}),(0,d.jsxs)("div",{className:"whitespace-nowrap text-xs text-text-3",children:[a.category,a.network?.geo?" \xb7 "+a.network.geo:""]})]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.xB,{trust:a.trust})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.transports.map(a=>(0,d.jsx)(i.eV,{transport:a},a))})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(k,{classes:a.dataClasses})}),(0,d.jsxs)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)("b",{className:"text-text",children:a.endpointCount})," endpoint",1===a.endpointCount?"":"s"," \xb7 ",(0,d.jsx)("b",{className:"text-text",children:a.callSiteCount})," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:(0,g.K)(a.lastSeen)})]})}function m({ep:a,selected:b,onClick:c}){return(0,d.jsxs)(e.Hj,{onClick:c,"aria-label":`View details for endpoint ${a.method} ${a.url}`,className:(0,e.cn)("cursor-pointer",b?"bg-primary-tint":"bg-surface-2 hover:bg-surface-3"),children:[(0,d.jsx)(e.nA,{className:"w-9"}),(0,d.jsx)(e.nA,{colSpan:2,children:(0,d.jsxs)("div",{className:"flex min-w-0 items-center gap-2.5 pl-1.5 py-1",children:[(0,d.jsx)("span",{className:"h-3.5 w-3.5 shrink-0 rounded-bl border-b-[1.5px] border-l-[1.5px] border-border-strong"}),(0,d.jsx)(i.kX,{method:a.method}),(0,d.jsxs)("span",{className:"flex min-w-0 items-center gap-2",children:[(0,d.jsx)(i.UH,{url:a.url}),a.template&&(0,d.jsx)(i.SU,{})]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.eV,{transport:a.transport})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.HD,{cls:a.dataClass})}),(0,d.jsxs)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)("b",{className:"text-text",children:a.callSiteCount})," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:(0,g.K)(a.lastSeen)})]})}function n({group:a}){return(0,d.jsx)(e.Hj,{className:"border-0 hover:bg-transparent",children:(0,d.jsx)(e.nA,{colSpan:7,className:"pb-2 pt-4",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:j.CF[a.kind]}),(0,d.jsx)("span",{className:"rounded-full border border-border bg-surface-2 px-1.5 text-label py-0.5 font-semibold text-text-2",children:a.total}),("ip"===a.kind||"external"===a.kind)&&(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1 text-xs","ip"===a.kind?"text-sev-critical":"text-sev-high"),children:[(0,d.jsx)(h._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"review recommended"]})]})})})}function o({groups:a,expanded:b,forceExpand:c,selection:g,drawerOpen:h,onToggle:i,onOpenDest:j,onOpenEndpoint:k}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{className:"w-9"}),(0,d.jsx)(e.nd,{children:"Destination"}),(0,d.jsx)(e.nd,{children:"Trust"}),(0,d.jsx)(e.nd,{children:"Transport"}),(0,d.jsx)(e.nd,{children:"Data sent"}),(0,d.jsx)(e.nd,{children:"Footprint"}),(0,d.jsx)(e.nd,{children:"Last seen"})]})}),(0,d.jsx)(e.BF,{children:a.map(a=>(0,d.jsxs)(f.Fragment,{children:[(0,d.jsx)(n,{group:a}),a.items.map(a=>{let e=(c??!1)||!!b[a.id],n=h&&g?.id===a.id&&null==g.endpointId;return(0,d.jsxs)(f.Fragment,{children:[(0,d.jsx)(l,{d:a,expanded:e,selected:n,onToggle:()=>{i(a.id)},onOpen:()=>{j(a.id)}}),e&&a.endpoints.map(b=>(0,d.jsx)(m,{ep:b,selected:h&&g?.id===a.id&&g.endpointId===b.id,onClick:()=>{k(a.id,b.id)}},b.id))]},a.id)})]},a.kind))})]})}},6282:(a,b,c)=>{"use strict";c.d(b,{ExceptionsTableView:()=>i});var d=c(60102),e=c(68191),f=c(9),g=c(85261),h=c(4484);function i({items:a,includeTerminal:b,onSelect:c}){return 0===a.length?(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface py-10 text-center text-sm text-text-3",children:b?"No exceptions have ever been granted.":"No active exceptions — enforcement applies everywhere."}):(0,d.jsx)("div",{className:"overflow-x-auto rounded-xl border border-border bg-surface p-4",children:(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"ID"}),(0,d.jsx)(e.nd,{children:"Rule"}),(0,d.jsx)(e.nd,{children:"Value"}),(0,d.jsx)(e.nd,{children:"Scope"}),(0,d.jsx)(e.nd,{children:"Expires"}),(0,d.jsx)(e.nd,{children:"Uses"}),(0,d.jsx)(e.nd,{children:"Created"}),(0,d.jsx)(e.nd,{children:"State"})]})}),(0,d.jsx)(e.BF,{children:a.map(a=>(0,d.jsxs)(e.Hj,{className:"cursor-pointer","aria-label":`View details for exception ${a.id.slice(0,8)}`,onClick:()=>{c(a.id)},children:[(0,d.jsx)(e.nA,{className:"font-mono text-xs text-text-3",children:a.id.slice(0,8)}),(0,d.jsx)(e.nA,{className:"font-mono text-xs",children:a.ruleId}),(0,d.jsx)(e.nA,{className:"font-mono text-xs",children:a.maskedValue}),(0,d.jsx)(e.nA,{className:"text-xs",children:h.yr[a.scope]}),(0,d.jsx)(e.nA,{className:"text-xs text-text-2",children:null===a.expiresAt?"—":(0,f.K)(a.expiresAt)}),(0,d.jsx)(e.nA,{className:"text-xs text-text-2",children:null===a.maxUses?String(a.useCount):`${String(a.useCount)}/${String(a.maxUses)}`}),(0,d.jsxs)(e.nA,{className:"text-xs text-text-2",children:[(0,f.K)(a.createdAt)," \xb7 ",h.gi[a.createdVia]]}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(g.StateTagFor,{exception:a})})]},a.id))})]})})}},7689:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>f,metadata:()=>e});var d=c(37944);c(85090),c(61038),c(67794),c(98526);let e={title:{template:"%s \xb7 AI Traffic Control",default:"AI Traffic Control"},description:"AI Traffic Control (ai-tc) by AKA Security — local-first security dashboard (open source)."};function f({children:a}){return(0,d.jsx)("html",{lang:"en",children:(0,d.jsx)("body",{children:a})})}},7892:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>f});var d=c(37944),e=c(2405);function f({children:a}){return(0,d.jsx)(e.AppShell,{children:a})}},9880:(a,b,c)=>{Promise.resolve().then(c.bind(c,64119))},10666:(a,b,c)=>{"use strict";c.d(b,{SessionDetailView:()=>p});var d=c(60102),e=c(68191),f=c(83143),g=c(43644),h=c(80108),i=c(48775),j=c(28928),k=c(34452),l=c(23977),m=c(10859),n=c(48421);function o({session:a,tokenReport:b,liveFindings:c,linkHref:o,toolHref:p}){let q=i.x[a.harness],r=(0,n.Tp)(a.tools),[s,t]=(0,f.useState)(!1);return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"shrink-0 border-b border-border px-5 py-4",children:[(0,d.jsxs)("div",{className:"flex items-start gap-3.5",children:[(0,d.jsx)(i.K,{id:a.harness,size:40}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5",children:[(0,d.jsx)("span",{className:"font-display text-lg font-semibold text-text",children:a.title}),(0,d.jsx)(k.UD,{status:a.status})]}),(0,d.jsxs)("div",{className:"mt-1 flex flex-wrap items-center gap-2 text-ui text-text-3",children:[q.label," \xb7 ",n.Ay[a.harness],(0,d.jsx)("span",{className:"text-border-strong",children:"\xb7"}),(0,d.jsx)("span",{className:"font-mono",children:a.id})]})]}),(0,d.jsx)("div",{className:"flex gap-1",children:(0,d.jsx)(e.$n,{variant:"ghost",size:"sm",title:"Export session data as JSON","aria-label":"Export session data as JSON",onClick:()=>{!function(a){if("undefined"==typeof document||"function"!=typeof URL.createObjectURL)return;let b=new Blob([JSON.stringify(a,null,2)],{type:"application/json"}),c=URL.createObjectURL(b),d=document.createElement("a");d.href=c,d.download=`session-${a.id.slice(0,12)}.json`,document.body.appendChild(d),d.click(),d.remove(),URL.revokeObjectURL(c)}(a)},children:(0,d.jsx)(h.s3,{"aria-hidden":!0,focusable:!1,className:"size-4"})})})]}),(0,d.jsxs)("div",{className:"mt-4 grid 2xl:grid-cols-4 grid-cols-3 gap-x-4 gap-y-3.5 max-h-44 overflow-y-auto",children:[(0,d.jsx)(g.p,{label:"Working dir",children:(0,d.jsx)("span",{className:"font-mono break-all",children:a.cwd})}),(0,d.jsx)(g.p,{label:"Branch",children:(0,d.jsx)(k.Lw,{items:a.branches,mono:!0})}),(0,d.jsx)(g.p,{label:"Model",children:(0,d.jsx)(k.Lw,{items:a.models,mono:!0})}),(0,d.jsxs)(g.p,{label:"Started",children:[(0,m.rw)(a.startedAt)," \xb7 ",(0,m.nt)(a.startedAt)]}),(0,d.jsx)(g.p,{label:"Duration",children:(0,m.vV)(a.startedAt,a.endedAt,a.status)}),(0,d.jsx)(g.p,{label:"Turns",children:a.turns}),(0,d.jsx)(g.p,{label:"Findings",children:a.findings>0||c?(0,d.jsxs)("span",{className:"inline-flex flex-wrap items-center gap-x-1.5",children:[a.findings>0&&(0,d.jsxs)("span",{className:"font-semibold text-sev-critical",title:"Detection firings across this session's transcript — the same value fires once per event it appears in",children:[a.findings," triggered"]}),a.findings>0&&c&&(0,d.jsx)("span",{className:"text-border-strong",children:"\xb7"}),c&&(0,d.jsxs)("a",{href:c.href,className:"inline-flex items-center gap-0.5 font-semibold text-sev-critical underline-offset-2 hover:underline",title:"Unique findings recorded by live enforcement — open in Findings",children:[c.count," enforced live",(0,d.jsx)(h.Qq,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]})]}):(0,d.jsx)("span",{className:"text-ok",children:"None"})}),(0,d.jsx)(g.p,{label:"Egress",children:a.shares>0?`${String(a.shares)} destinations`:"None"})]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-wrap items-center gap-5 border-b border-border bg-surface-2 px-5 py-3",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3.5",children:[(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),(0,d.jsx)("b",{className:"font-semibold tabular-nums",children:(0,m.Sk)(a.tokens.inputTokens)}),(0,d.jsx)("span",{className:"text-text-3",children:"in"})]}),(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.ZL,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),(0,d.jsx)("b",{className:"font-semibold tabular-nums",children:(0,m.Sk)(a.tokens.outputTokens)}),(0,d.jsx)("span",{className:"text-text-3",children:"out"})]}),(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.DQ,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-primary"}),(0,d.jsxs)("b",{className:"font-semibold tabular-nums text-primary",children:[(0,m.fz)(a.tokens),"%"]}),(0,d.jsx)("span",{className:"text-text-3",children:"cache"})]}),b&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)("b",{className:"font-semibold tabular-nums text-text",children:(0,m.xd)(b.estimatedCostUsd??0,b.costIsPartial)}),(0,d.jsx)("span",{className:"text-text-3",children:"est. cost"})]})]}),(0,d.jsx)("span",{className:"h-5 w-px bg-border"}),(0,d.jsxs)("div",{className:"flex flex-1 flex-wrap items-center gap-2 max-h-22 overflow-y-auto",children:[(0,d.jsxs)("span",{className:"text-xs font-semibold text-text-3",children:[(0,n.ni)(a.tools)," tool calls"]}),r.map(a=>(0,d.jsx)(k.zn,{name:a.name,n:a.n,...p?{href:p(a.name)}:{}},a.name))]})]}),b&&b.rollups.length>1&&(0,d.jsxs)("div",{className:"flex shrink-0 flex-wrap items-center gap-2 border-b border-border bg-surface-2 px-5 py-2.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Cost by model"}),b.rollups.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 rounded-full border border-border bg-surface py-0.5 px-2 text-xs text-text-2",children:[(0,d.jsx)("span",{className:"font-mono text-text",children:a.model}),(0,d.jsx)("span",{className:"tabular-nums text-text-3",children:(0,m.Sk)(a.totalTokens)}),(0,d.jsx)("span",{className:"tabular-nums text-text",children:null!==a.estimatedCostUsd?(0,m.UK)(a.estimatedCostUsd):"—"})]},`${a.provider} ${a.model}`))]}),(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto px-5 py-4.5",children:[(0,d.jsxs)("div",{className:"mb-4 flex items-center gap-2 text-label font-semibold uppercase tracking-wider text-text-3",children:[s?"Raw events":"Audit log",(0,d.jsx)("span",{className:"text-border-strong",children:"\xb7"}),(0,d.jsxs)("span",{className:"font-mono text-label font-medium normal-case tracking-normal text-text-3",children:[a.events.length," events"]})]}),s?a.events.length>0?(0,d.jsx)("pre",{className:"overflow-x-auto rounded-lg border border-border bg-surface-2 p-3 text-label leading-relaxed text-text-2",children:JSON.stringify(a.events,null,2)}):(0,d.jsx)(j.A,{message:"No events recorded for this session yet"}):(0,d.jsx)(l.i,{events:a.events,...o?{linkHref:o}:{}})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-2 border-t border-border px-5 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(h.k3,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),(0,d.jsx)("span",{className:"font-mono",children:"Source: ~/.claude/audit.log"}),(0,d.jsxs)(e.$n,{variant:"link",tone:"primary",className:"ml-auto text-ui",onClick:()=>{t(a=>!a)},children:[(0,d.jsx)(h.kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),s?"View timeline":"View raw events"]})]})]})}function p({session:a,isLoading:b,error:c,tokenReport:f,liveFindings:g,linkHref:h,toolHref:i}){return c?(0,d.jsx)("div",{className:"grid h-full place-items-center p-6",children:(0,d.jsx)(j.r,{message:c})}):b&&!a?(0,d.jsxs)("div",{className:"flex h-full flex-col gap-4 p-5","aria-busy":!0,children:[(0,d.jsx)(e.EA,{className:"h-10 w-2/3"}),(0,d.jsx)(e.EA,{className:"h-24 w-full"}),(0,d.jsx)(e.EA,{className:"h-12 w-full"}),(0,d.jsx)(e.EA,{className:"h-40 w-full"})]}):a?(0,d.jsx)(o,{session:a,tokenReport:f??null,liveFindings:g??null,...h?{linkHref:h}:{},...i?{toolHref:i}:{}}):(0,d.jsx)("div",{className:"grid h-full place-items-center p-6",children:(0,d.jsx)(j.A,{message:"Select a session to view its audit timeline"})})}},10859:(a,b,c)=>{"use strict";c.d(b,{Sk:()=>o,UK:()=>d.UKt,fz:()=>n,gE:()=>l,nt:()=>h,rw:()=>j,u3:()=>p,vV:()=>m,xd:()=>d.xdw});var d=c(16312);let e=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],f=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"];function g(a){return new Date(a.getFullYear(),a.getMonth(),a.getDate()).getTime()}function h(a,b=new Date){let c=new Date(a);if(Number.isNaN(c.getTime()))return"";let d=Math.round((g(b)-g(c))/864e5);return 0===d?"Today":1===d?"Yesterday":`${f[c.getDay()]??""}, ${e[c.getMonth()]??""} ${String(c.getDate())}`}let i=new Intl.DateTimeFormat("en-US",{hour:"numeric",minute:"2-digit",hour12:!0});function j(a){let b=Date.parse(a);return Number.isNaN(b)?"":i.format(b)}let k=new Intl.DateTimeFormat("en-US",{hour:"2-digit",minute:"2-digit",second:"2-digit",hourCycle:"h23"});function l(a){let b=Date.parse(a);return Number.isNaN(b)?"":k.format(b)}function m(a,b,c,d=Date.now()){let e=Date.parse(a);if(Number.isNaN(e))return"";let f=Math.max(0,Math.round(((b?Date.parse(b):d)-e)/6e4)),g=Math.floor(f/60),h=f%60,i=g>0?`${String(g)}h ${String(h)}m`:`${String(h)}m`;return"active"===c?`${i} \xb7 live`:i}function n(a){let b=a.cacheRead+a.inputTokens;return b>0?Math.round(100*a.cacheRead/b):0}function o(a){return(0,d.ap_)(a)}function p(a,b=new Date){let c=[];for(let d of a){let a=h(d.startedAt,b),e=c.find(b=>b.day===a);e||(e={day:a,items:[]},c.push(e)),e.items.push(d)}return c}},11294:(a,b,c)=>{"use strict";c.d(b,{ES:()=>l,H9:()=>n,Xg:()=>p,gh:()=>m,jP:()=>o,rE:()=>i,tG:()=>f,uR:()=>k,vV:()=>g,vm:()=>h});var d=c(16312),e=c(80108);let f="monitor";function g(a){return({primary:["var(--color-primary)","var(--color-primary-tint)"],teal:["var(--color-teal)","var(--color-teal-fill)"],green:["var(--color-ok)","var(--color-ok-fill)"],red:["var(--color-sev-critical)","var(--color-sev-critical-fill)"],orange:["var(--color-sev-high)","var(--color-sev-high-fill)"],gray:["var(--color-text-2)","var(--color-surface-3)"],blue:["var(--color-sev-low)","var(--color-sev-low-fill)"],violet:["var(--color-violet)","var(--color-violet-fill)"]})[a]}function h(a){return"regex"===a.type?"/"+a.pattern+"/"+a.flags:"keyword"===a.type?a.keywords.join(" \xb7 "):a.name}let i={regex:{label:"Regex",icon:e.cZ,color:"var(--color-violet)",fill:"var(--color-violet-fill)",blurb:"Pattern match"},keyword:{label:"Keyword",icon:e.Ey,color:"var(--color-teal)",fill:"var(--color-teal-fill)",blurb:"Literal lookup"},validator:{label:"Validator",icon:e.BZ,color:"var(--color-primary)",fill:"var(--color-primary-tint)",blurb:"Checksum / entropy"}},j={monitor:{id:"monitor",label:"Monitor",icon:e.bM,tone:"gray",desc:"Log every match for audit. The request is allowed through untouched."},warn:{id:"warn",label:"Warn",icon:e._0,tone:"orange",desc:"Allow the request, but warn the user inline before it is sent."},redact:{id:"redact",label:"Redact",icon:e.jZ,tone:"primary",desc:"Automatically strip the matched value from the request, then continue."},block:{id:"block",label:"Block",icon:e.pD,tone:"red",desc:"Refuse the request entirely whenever any rule in this detection matches."}},k=d.V0H;function l(a){return(Object.hasOwn(j,a)?j[a]:void 0)??{id:a,label:a,icon:e.iB,tone:"gray",desc:""}}let m={pii:"PII",financial:"Financial",secret:"Secret",phi:"PHI",code_context:"Code context",code_flaw:"Code flaw",custom:"Custom",config:"Configuration"},n={library:{label:"Library",icon:e.fC,tone:"teal",blurb:"Imported from the public library"}},o={labs:{label:"AKA Labs",icon:e.Zu,tone:"teal",verified:!0},org:{label:"Your org",icon:e.ai,tone:"violet",verified:!1},user:{label:"Community",icon:e.ny,tone:"gray",verified:!1}};function p(a){return null==a.update?"unknown":a.update.available?"update-available":"up-to-date"}},11536:(a,b,c)=>{"use strict";c.d(b,{RecommendedActionsCardView:()=>k});var d=c(60102),e=c(68191),f=c(80108),g=c(23413);let h={critical:"bg-sev-critical-fill text-sev-critical",primary:"bg-primary-tint text-primary",teal:"bg-teal-fill text-teal"},i={block_credentials:f.pD,redact_pii:f.jZ,review_external_share:f._G},j={critical:"critical",high:"primary",medium:"teal",low:"teal"};function k({items:a,isLoading:b,error:c,applyAction:k,dismissAction:l,isMutating:m,mutationError:n}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-primary-tint text-primary",children:(0,d.jsx)(f.BZ,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Recommended actions"}),(0,d.jsx)(e.BT,{children:b?"Loading…":`${String(a.length)} prioritized for your environment`})]}),(0,d.jsx)(e.X9,{children:(0,d.jsx)(e.$n,{variant:"ghost",tone:"primary",size:"sm",children:"View all"})})]}),(0,d.jsx)(e.Wu,{"aria-busy":b,children:c?(0,d.jsx)(g.rJ,{message:c}):b?(0,d.jsx)("div",{className:"flex flex-col gap-3 py-2",children:[0,1,2].map(a=>(0,d.jsx)(e.EA,{className:"h-20 w-full"},a))}):0===a.length?(0,d.jsx)("div",{className:"py-6 text-center text-xs text-text-3",children:"No recommendations right now."}):(0,d.jsxs)(d.Fragment,{children:[n&&(0,d.jsx)(g.rJ,{message:n}),a.map((b,c)=>{let g=i[b.category]??f.rX;return(0,d.jsxs)("div",{className:(0,e.cn)("flex gap-3 py-3",c<a.length-1&&"border-b border-text/6"),children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-8 shrink-0 items-center justify-center rounded-lg",h[j[b.severity]]),children:(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:b.title}),(0,d.jsx)("div",{className:"mt-0.5 text-xs leading-relaxed text-text-2",children:b.description}),(0,d.jsx)("div",{className:"mt-2 flex flex-wrap items-center gap-1.5",children:b.subjects.map(a=>(0,d.jsx)(e.vw,{children:a.label},`${a.type}_${a.id}`))})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1.5",children:["apply"===b.action.mode?(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:m,onClick:()=>{k(b.id)},children:b.action.label}):b.action.href?(0,d.jsx)(e.$n,{asChild:!0,variant:"solid",tone:"primary",size:"sm",children:(0,d.jsx)("a",{href:b.action.href,children:b.action.label})}):(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!0,children:b.action.label}),(0,d.jsx)(e.$n,{variant:"ghost",size:"sm",disabled:m,onClick:()=>{l(b.id)},children:"Dismiss"})]})]},b.id)})]})})]})}},14920:(a,b,c)=>{"use strict";c.d(b,{B:()=>f,i:()=>g});var d=c(60102),e=c(48775);function f({ids:a}){return(0,d.jsx)("div",{className:"flex items-center -space-x-1.5",children:a.map(a=>(0,d.jsx)("span",{title:e.x[a].label,className:"inline-flex rounded-lg ring-2 ring-surface",children:(0,d.jsx)(e.K,{id:a})},a))})}function g({provider:a}){return(0,d.jsxs)("span",{className:"inline-flex items-center gap-2 font-display text-xs text-text",children:[(0,d.jsx)(e.K,{id:a}),e.x[a].label]})}},15041:(a,b,c)=>{"use strict";c.d(b,{ApproveExceptionDialog:()=>h});var d=c(60102),e=c(68191),f=c(83143),g=c(85261);function h({entry:a,open:b,onOpenChange:c,onSubmit:h,busy:i,error:j}){let[k,l]=(0,f.useState)(null),[m,n]=(0,f.useState)(""),[o,p]=(0,f.useState)(""),q="permanent"===k,r=null!==a&&null!==k&&""!==m.trim()&&(!q||o===a.maskedValue);return(0,d.jsx)(e.lG,{open:b,onOpenChange:a=>{a||(l(null),n(""),p("")),c(a)},children:(0,d.jsxs)(e.Cf,{children:[(0,d.jsxs)(e.c7,{children:[(0,d.jsx)(e.L3,{children:"Approve blocked detection"}),(0,d.jsx)(e.rr,{children:"Grant an explicit, audited bypass for this exact value. Enforcement continues for every other value."})]}),(0,d.jsx)(e.R4,{children:a&&(0,d.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-surface-2 p-3 text-xs",children:[(0,d.jsx)("div",{className:"font-mono font-semibold text-text",children:a.ruleId}),(0,d.jsx)("div",{className:"mt-1 font-mono text-text-2",children:a.maskedValue})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Scope — pick one"}),(0,d.jsx)(g.ScopePicker,{value:k,onChange:l})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Reason (required — the audit trail)"}),(0,d.jsx)(e.pd,{value:m,onChange:a=>{n(a.target.value)},placeholder:"Why this value may pass"})]}),q&&(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Type the masked value to confirm a permanent grant"}),(0,d.jsx)(e.pd,{value:o,onChange:a=>{p(a.target.value)},placeholder:a.maskedValue,autoComplete:"off",className:"font-mono"})]}),j&&(0,d.jsx)("p",{className:"text-xs text-sev-critical",children:j})]})}),(0,d.jsxs)(e.Es,{children:[(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:()=>{c(!1)},children:"Cancel"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!r||i,onClick:()=>{a&&k&&h({reference:a.reference,scope:k,reason:m.trim(),...q?{confirmation:o}:{}})},children:i?"Granting…":"Grant exception"})]})]})})}},15343:(a,b,c)=>{"use strict";c.d(b,{AvailablePluginsCardView:()=>g});var d=c(60102),e=c(68191),f=c(80108);function g({plugins:a,onInstall:b,installingId:c,outcomes:g}){return 0===a.length?null:(0,d.jsxs)(e.Zp,{className:"shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-teal-fill text-teal",children:(0,d.jsx)(f.BZ,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Available plugins"}),(0,d.jsx)(e.BT,{children:"Agent integrations you haven’t installed yet"})]})]}),(0,d.jsx)(e.Wu,{children:(0,d.jsx)("div",{className:"flex flex-col",children:a.map((a,f)=>{let h=g[a.id];return(0,d.jsxs)("div",{className:(0,e.cn)("py-3",f>0&&"border-t border-text/6"),children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:a.name}),a.latest&&(0,d.jsxs)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:["v",a.latest]})]}),(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:null!==c,onClick:()=>{b(a.id)},children:c===a.id?"Installing…":"Install"})]}),h&&(0,d.jsxs)("div",{className:(0,e.cn)("mt-2 rounded-lg border p-2",h.ok?"border-ok-fill bg-ok-fill":"border-sev-critical-fill bg-sev-critical-fill"),children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:h.ok?"Installed — restart Claude Code to load it.":"Install failed"}),h.output&&(0,d.jsx)("pre",{className:"mt-1 max-h-40 overflow-auto whitespace-pre-wrap font-mono text-label text-text-2",children:h.output})]})]},a.id)})})})]})}},16312:(a,b,c)=>{"use strict";function d(a,b){return{input:a,output:b,cacheWrite5m:1.25*a,cacheWrite1h:2*a,cacheRead:.1*a,webSearch:.01}}c.d(b,{PWo:()=>_,spO:()=>bA,V0H:()=>aM,xdw:()=>i,ap_:()=>g,UKt:()=>h,qEQ:()=>av,DLF:()=>bw});let e={"claude-fable-5":d(10,50),"claude-opus-4-8":d(5,25),"claude-opus-4-7":d(5,25),"claude-opus-4-6":d(5,25),"claude-opus-4-5":d(5,25),"claude-sonnet-5":d(3,15),"claude-sonnet-4-6":d(3,15),"claude-sonnet-4-5":d(3,15),"claude-haiku-4-5":d(1,5)};Object.fromEntries(Object.entries(e).map(([a,b])=>[`anthropic/${a}`,b])),Object.keys(e);let f=new Intl.NumberFormat("en-US",{notation:"compact",maximumFractionDigits:1});function g(a){return f.format(a)}function h(a){return a>0&&a<.1?`$${a.toFixed(4)}`:`$${a.toFixed(2)}`}function i(a,b){return b?`≥ ${h(a)}`:h(a)}var j=c(32163),k=c(54143),l=c(66933);let m=j.k5(["pii","financial","secret","phi","code_context","code_flaw","custom","config"]).meta({id:"DetectionCategory"}),n=j.k5(["critical","high","medium","low"]).meta({id:"Severity"}),o=j.k5(["warn","redact","block","allow","log"]).meta({id:"ActionTaken"});o.options;let p=j.Ik({start:j.ai().int().nonnegative(),end:j.ai().int().nonnegative()}).meta({id:"Span"}),q=j.Ik({id:j.Os(),eventId:j.Os(),ruleId:j.Yj(),category:m,severity:n,span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)}).meta({id:"Finding"});q.meta({id:"DetectedFinding"});let r=j.k5(["blocked","redacted","warned","allowed","quarantined","monitored"]).meta({id:"FindingAction"}),s=j.k5(["claudecode","claudedesktop","cursor","copilot","chatgpt","api"]).meta({id:"FindingProvider"}),t=j.k5(["secret","pii","source_code","external_share","mcp_server","customer_data","financial","phi","custom"]).meta({id:"FindingCategory"});j.k5(["in-flight","at-rest"]).meta({id:"FindingOrigin"});let u=j.k5(["open","handled","resolved","dismissed"]).meta({id:"FindingStatus"});j.k5(["enforced-in-flight","fixed-at-source","exception","acknowledged","false-positive","redetected"]).meta({id:"ResolutionMethod"});let v=j.Ik({maskedValue:j.Yj(),contextPrefix:j.Yj()}).meta({id:"FindingMatch"}),w=j.Ik({id:j.Yj(),name:j.Yj().nullable()}).meta({id:"FindingDetectionRef"}),x=j.Ik({id:j.Yj(),name:j.Yj()}).meta({id:"FindingPolicyRef"}),y=j.Ik({id:j.Yj(),provider:s,repo:j.Yj(),file:j.Yj(),toolName:j.Yj().optional(),action:r,detectedAt:k.w$(),confidence:j.ai().min(0).max(1),status:u.optional()}).meta({id:"FindingInstance"}),z=j.Ik({id:j.Yj(),category:t,subtype:j.Yj(),severity:n,match:v,detection:w,policy:x,instanceCount:j.ai().int().nonnegative(),providers:j.YO(s),aggregateAction:r.nullable(),latestDetectedAt:k.w$(),instances:j.YO(y),status:u.optional()}).meta({id:"FindingGroup"});j.Ik({findings:j.ai().int().nonnegative(),groups:j.ai().int().nonnegative(),bySeverity:j.Ik({critical:j.ai().int().nonnegative(),high:j.ai().int().nonnegative(),medium:j.ai().int().nonnegative(),low:j.ai().int().nonnegative()})}).meta({id:"FindingStats"});let A=j.Ik({value:j.Yj(),count:j.ai().int().nonnegative()}).meta({id:"FindingFacetItem"}),B=j.Ik({severity:j.YO(A),subtype:j.YO(A),provider:j.YO(A),action:j.YO(A),status:j.YO(A)}).meta({id:"FindingFacets"});j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),status:j.YO(u).optional(),q:j.Yj().optional(),sessionId:j.Yj().optional(),groupBy:j.eu("type").optional(),limit:l.ai().int().min(1).max(100).optional(),cursor:j.Yj().optional()}),j.Ik({totals:j.Ik({findings:j.ai().int().nonnegative(),groups:j.ai().int().nonnegative()}),facets:B,items:j.YO(z),nextCursor:j.Yj().nullable(),sessionFirings:j.g1(j.Yj(),j.ai().int().nonnegative()).optional()}).meta({id:"ListGroupedFindingsResponse"}),j.Ik({action:r.exclude(["quarantined"]),instanceId:j.Yj().optional()}).meta({id:"ApplyFindingActionRequest"}),z.meta({id:"ApplyFindingActionResponse"}),j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),q:j.Yj().optional(),format:j.k5(["csv","json"]).optional()}),y.extend({groupId:j.Yj(),category:t,subtype:j.Yj(),severity:n,match:v,detection:w,policy:x}).meta({id:"FindingInstanceDetail"});let C=j.k5(["claudecode","cursor","copilot","codex","windsurf","claudedesktop","chatgpt","api"]).meta({id:"Harness"}),D=j.k5(["host","harness","user","skill","hook","mcp_server","config_file"]).meta({id:"InventoryObjectType"}),E=j.k5(["session","run","tool_call","llm_call","source_lookup","prompt","response","code_change","tool_use","config_scan"]).meta({id:"AuditEventType"}),F=j.g1(j.Yj(),j.L5());j.Ik({host_name:j.Yj().optional(),os:j.Yj().optional(),os_version:j.Yj().optional(),arch:j.Yj().optional()}).catchall(j.L5()),j.Ik({harness_version:j.Yj().optional(),interface:j.Yj().optional()}).catchall(j.L5()),j.Ik({display_name:j.Yj().optional(),email:j.Yj().optional()}).catchall(j.L5()),j.Ik({source:j.Yj().optional(),version:j.Yj().optional(),description:j.Yj().optional(),updated_at:j.Yj().optional(),scope:j.Yj().optional(),plugin_name:j.Yj().optional()}).catchall(j.L5()),j.Ik({event:j.Yj().optional(),matcher:j.Yj().optional(),command:j.Yj().optional(),scope:j.Yj().optional(),plugin_name:j.Yj().optional(),timeout:j.ai().optional()}).catchall(j.L5()),j.Ik({scope:j.Yj().optional(),transport:j.Yj().optional(),command:j.Yj().optional(),url:j.Yj().optional(),env_keys:j.YO(j.Yj()).optional(),plugin_name:j.Yj().optional(),marketplace:j.Yj().optional(),project:j.Yj().optional()}).catchall(j.L5()),j.Ik({kind:j.Yj().optional(),detail:j.Yj().optional(),scope:j.Yj().optional(),updated_at:j.Yj().optional(),entry_count:j.ai().optional()}).catchall(j.L5());let G=j.Ik({model:j.Yj().optional(),provider:j.Yj().optional(),input_tokens:j.ai().int().nonnegative().optional(),output_tokens:j.ai().int().nonnegative().optional(),cache_creation_input_tokens:j.ai().int().nonnegative().optional(),cache_read_input_tokens:j.ai().int().nonnegative().optional(),ephemeral_1h_input_tokens:j.ai().int().nonnegative().optional(),ephemeral_5m_input_tokens:j.ai().int().nonnegative().optional(),web_search_requests:j.ai().int().nonnegative().optional(),web_fetch_requests:j.ai().int().nonnegative().optional(),service_tier:j.Yj().optional(),stop_reason:j.Yj().optional(),message_id:j.Yj().optional(),uuid:j.Yj().optional(),parent_uuid:j.Yj().optional(),run_key:j.Yj().optional()}).catchall(j.L5());j.Ik({sessionId:j.Yj().min(1),messageId:j.Yj().min(1),parentId:j.Yj().min(1),rootSessionId:j.Yj().min(1),startedAt:k.w$(),attributes:G});let H=j.Ik({tool_name:j.Yj().optional(),tool_use_id:j.Yj().optional(),target:j.Yj().optional(),is_error:j.zM().optional(),input_size:j.ai().int().nonnegative().optional(),output_size:j.ai().int().nonnegative().optional(),uuid:j.Yj().optional(),parent_uuid:j.Yj().optional(),run_key:j.Yj().optional()}).catchall(j.L5());j.Ik({source_tool:j.Yj().optional(),file_path:j.Yj().optional(),repo:j.Yj().optional(),tool_name:j.Yj().optional(),gitignored:j.zM().optional(),whole_file:j.zM().optional(),correlation_id:j.uR().optional(),trace_id:j.Yj().regex(/^[0-9a-f]{32}$/).optional(),exception_ids:j.YO(j.Os()).optional()}).catchall(j.L5());let I=j.Ik({ruleId:j.Yj().min(1),ruleName:j.Yj(),ruleVersion:j.Yj().min(1),category:m,severity:n,span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)});j.Ik({sessionId:j.Yj().min(1),toolUseId:j.Yj().min(1),parentId:j.Yj().min(1),rootSessionId:j.Yj().min(1),startedAt:k.w$(),attributes:H,inspections:j.YO(I).default([])});let J=j.Ik({objectType:D,identityKey:j.Yj().min(1),location:j.Yj().optional(),title:j.Yj().optional(),hostId:j.Yj().optional(),attributes:F.default({})}).meta({id:"InventoryInput"}),K=j.Ik({url:j.Yj().min(1),name:j.Yj().optional(),attributes:F.default({})}).meta({id:"SourceProjectInput"}),L=j.Ik({id:j.Yj().min(1),eventType:E,startedAt:k.w$(),endedAt:k.w$().optional(),parentId:j.Yj().optional(),rootSessionId:j.Yj().optional(),hostId:j.Yj().optional(),harnessId:j.Yj().optional(),sourceProjectId:j.Yj().optional(),severity:n.optional(),priority:j.Yj().optional(),content:j.Yj().optional(),contentHash:j.Yj().optional(),attributes:F.optional()}).meta({id:"AuditEventInput"});j.Ik({class:j.Yj().min(1),label:j.Yj().optional(),attributes:F.optional()});let M=j.Ik({ruleId:j.Yj().min(1),version:j.Yj().min(1),name:j.Yj(),category:m,severity:n,definition:j.Yj()});j.Ik({id:j.Yj().min(1),auditEventId:j.Yj().min(1),inspectionDefinitionId:j.Yj().min(1),classifiedDataId:j.Yj().optional(),span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1),findingKey:j.Yj().optional(),firstDetectedAt:k.w$().optional()}),j.Ik({host:J.optional(),harness:J.optional(),project:K.optional()}).meta({id:"InventoryContext"}),j.Ik({hostId:j.Yj().optional(),harnessId:j.Yj().optional(),accountId:j.Yj().optional(),sourceProjectId:j.Yj().optional()}).meta({id:"ResolvedInventory"}),j.Ik({hosts:j.YO(j.Yj()),harnesses:j.YO(j.Yj()),osVersions:j.YO(j.Yj()),projects:j.YO(j.Yj())}).meta({id:"InventoryFacets"});let N=j.Ik({sessionId:j.Yj(),model:j.Yj(),provider:j.Yj(),inputTokens:j.ai().int().nonnegative(),outputTokens:j.ai().int().nonnegative(),cacheCreation:j.ai().int().nonnegative(),cacheRead:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable()}).meta({id:"TokenRollup"});j.Ik({sessionId:j.Yj(),rollups:j.YO(N),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable(),costIsPartial:j.zM()});let O=j.Ik({provider:j.Yj(),model:j.Yj(),inputTokens:j.ai().int().nonnegative(),outputTokens:j.ai().int().nonnegative(),cacheTokens:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable()});j.Ik({models:j.YO(O),sessionCount:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai(),costIsPartial:j.zM()});let P=j.k5(["active","completed","interrupted","error"]),Q=j.k5(["session","prompt","response","tool","hook","detection","share","permission","commit","error","active"]),R=j.k5(["detections","shares","inventory"]),S=j.Ik({id:j.Yj(),occurredAt:k.w$(),kind:Q,title:j.Yj(),detail:j.Yj(),tool:j.Yj().nullable(),severity:n.nullable(),link:R.nullable(),targetId:j.Yj().nullable(),internal:j.zM(),flagged:j.zM()}).meta({id:"ActivityAuditEvent"}),T=j.Ik({id:j.Yj(),harness:C,title:j.Yj(),project:j.Yj(),repo:j.Yj(),branches:j.YO(j.Yj()),startedAt:k.w$(),endedAt:k.w$().nullable(),status:P,turns:j.ai().int().nonnegative(),findings:j.ai().int().nonnegative(),shares:j.ai().int().nonnegative()}).meta({id:"ActivitySessionSummary"});T.extend({host:j.Yj(),cwd:j.Yj(),models:j.YO(j.Yj()),version:j.Yj(),tokens:N,tools:j.g1(j.Yj(),j.ai().int().nonnegative()),files:j.YO(j.Yj()),commits:j.ai().int().nonnegative(),events:j.YO(S)}).meta({id:"ActivitySession"}),j.Ik({tz:j.Yj().optional()});let U=j.Ik({sessionsToday:j.ai().int().nonnegative(),liveNow:j.ai().int().nonnegative(),toolCallsToday:j.ai().int().nonnegative(),findingsToday:j.ai().int().nonnegative(),egressToday:j.ai().int().nonnegative()}).meta({id:"GetActivityStatsResponse"});j.Ik({q:j.Yj().optional(),harness:j.YO(C).optional(),from:j.KC([k.p6(),k.w$()]).optional(),to:j.KC([k.p6(),k.w$()]).optional(),excludeEmpty:j.uE().optional(),limit:l.ai().int().min(1).max(100).default(50),cursor:j.Yj().optional()});let V=j.Ik({items:j.YO(T),nextCursor:j.Yj().nullable(),emptyCount:j.ai().int().nonnegative()}).meta({id:"ListActivitySessionsResponse"});j.Ik({limit:l.ai().int().min(1).max(500).default(100),cursor:j.Yj().optional(),order:j.k5(["asc","desc"]).default("asc")}),j.Ik({items:j.YO(S),nextCursor:j.Yj().nullable()}).meta({id:"ListSessionEventsResponse"}),j.Ik({format:j.k5(["ndjson","json"]).default("ndjson")}),j.Ik({format:j.k5(["csv","json"]).default("csv"),q:j.Yj().optional(),harness:j.YO(C).optional(),from:j.KC([k.p6(),k.w$()]).optional(),to:j.KC([k.p6(),k.w$()]).optional()}),j.Ik({stats:U,sessions:V}).meta({id:"ActivityOverviewResponse"});let W=j.k5(["prompt","response","code_change","tool_use"]).meta({id:"EventKind"});W.options.map(a=>`'${a}'`).join(",");let X=j.k5(["claude-code","claude-desktop","cursor","chatgpt","github-copilot","cli","unknown"]).meta({id:"SourceTool"}),Y=j.Ik({sessionId:j.Yj().optional(),repo:j.Yj().optional(),filePath:j.Yj().optional(),toolName:j.Yj().optional(),gitignored:j.zM().optional(),wholeFile:j.zM().optional(),model:j.Yj().optional(),turnIndex:j.ai().int().nonnegative().optional(),correlationId:j.uR().optional(),traceId:j.Yj().regex(/^[0-9a-f]{32}$/).optional(),exceptionIds:j.YO(j.Os()).optional()}).meta({id:"EventMetadata"}),Z=j.Ik({id:j.Os(),sourceTool:X,kind:W,occurredAt:k.w$(),contentHash:j.Yj(),content:j.Yj(),metadata:Y.optional()}).meta({id:"Event"}),$=Z.meta({id:"IngestEvent"});j.Ik({events:j.YO($).min(1).max(100),dedupe:j.eu("content-hash").optional()}).meta({id:"IngestBatch"});let _=j.k5(["project","skill","mcp","hook","config"]).meta({id:"AssetType"}),aa=j.k5(["open","approved","blocked"]).meta({id:"AccessLevel"}),ab=j.k5(["source","public-dep","vendored","config","data","docs","generated"]).meta({id:"Origin"}),ac=j.k5(["known-good","risky","unapproved"]).meta({id:"TrustLevel"}),ad=j.k5(["update","stale","conflict","unknown","change","untracked","risk","findings"]).meta({id:"Flag"}),ae=j.k5(["public","private"]).meta({id:"Visibility"}),af=j.k5(["block","redact","warn"]).meta({id:"HarnessEventKind"}),ag=j.k5(["claudecode","cursor","codex"]).meta({id:"HarnessId"}),ah=j.Ik({open:j.ai().int().nonnegative(),approved:j.ai().int().nonnegative(),blocked:j.ai().int().nonnegative(),total:j.ai().int().nonnegative()}).meta({id:"AccessCounts"}),ai=j.Ik({id:j.Yj(),type:_,name:j.Yj(),sub:j.Yj(),flags:j.YO(ad),trust:ac.optional()}).meta({id:"AssetSummary"}),aj=j.Ik({id:j.Yj(),name:j.Yj(),repo:j.Yj(),visibility:ae,language:j.Yj(),policyDefault:aa,updatedAt:k.w$(),accessCounts:ah,findingsCount:j.ai().int().nonnegative()}).meta({id:"ProjectSummary"}),ak=j.Ik({type:_,assets:j.YO(ai)}),al=j.Ik({id:ag,label:j.Yj(),kind:j.Yj(),version:j.Yj(),sessions:j.ai().int().nonnegative(),assetCount:j.ai().int().nonnegative(),flagCount:j.ai().int().nonnegative(),projects:j.YO(aj),categories:j.YO(ak)}).meta({id:"HarnessSummary"});j.Ik({items:j.YO(al)}).meta({id:"ListHarnessesResponse"});let am=j.Ik({type:_,total:j.ai().int().nonnegative(),trustRollup:j.Ik({"known-good":j.ai().int().nonnegative(),risky:j.ai().int().nonnegative(),unapproved:j.ai().int().nonnegative()}).partial().strict().optional(),flagRollup:j.Ik({update:j.ai().int().nonnegative(),stale:j.ai().int().nonnegative(),conflict:j.ai().int().nonnegative(),unknown:j.ai().int().nonnegative(),change:j.ai().int().nonnegative(),untracked:j.ai().int().nonnegative(),risk:j.ai().int().nonnegative(),findings:j.ai().int().nonnegative()}).partial().strict(),items:j.YO(ai)}).meta({id:"AssetGroup"});j.Ik({groups:j.YO(am)}).meta({id:"ListAssetsResponse"});let an=j.Ik({name:j.Yj(),signature:j.Yj(),description:j.Yj(),write:j.zM(),risk:j.Yj().nullable()}).meta({id:"McpTool"}),ao=j.Ik({id:j.Yj(),title:j.Yj(),note:j.Yj()});ai.extend({description:j.Yj().nullable(),trust:ac.nullable(),meta:j.g1(j.Yj(),j.L5()),finding:ao.nullable(),tools:j.YO(an).optional()}).meta({id:"AssetDetail"}),j.Ik({items:j.YO(aj)}).meta({id:"ListProjectsResponse"}),j.Ik({attention:j.ai().int().nonnegative(),byType:j.Ik({project:j.ai().int().nonnegative(),skill:j.ai().int().nonnegative(),mcp:j.ai().int().nonnegative(),hook:j.ai().int().nonnegative(),config:j.ai().int().nonnegative()}),harnesses:j.ai().int().nonnegative(),mcpTrust:j.Ik({"known-good":j.ai().int().nonnegative(),risky:j.ai().int().nonnegative(),unapproved:j.ai().int().nonnegative()})}).meta({id:"InventoryStats"});let ap=j.Ik({path:j.Yj(),name:j.Yj(),origin:ab,access:aa,isCustom:j.zM(),findings:j.ai().int().nonnegative(),blockedAt:k.w$().nullable().optional(),note:j.Yj().nullable().optional()}).meta({id:"FileSummary"}),aq=j.Ik({name:j.Yj(),path:j.Yj(),accessCounts:ah}).meta({id:"FolderSummary"});j.Ik({project:j.Ik({id:j.Yj(),repo:j.Yj(),visibility:ae}),path:j.Yj(),folders:j.YO(aq).optional(),files:j.YO(ap)}).meta({id:"ProjectTreeResponse"}),ap.extend({project:j.Ik({repo:j.Yj(),visibility:ae,language:j.Yj(),policyDefault:aa,updatedAt:k.w$()}),findingsRefs:j.YO(j.Ik({id:j.Yj(),title:j.Yj()}))}).meta({id:"FileDetail"}),j.Ik({path:j.Yj(),access:aa}).meta({id:"SetFileAccessBody"}),j.Ik({file:ap,accessCounts:ah}).meta({id:"SetFileAccessResponse"}),j.Ik({trust:ac}).meta({id:"SetMcpTrustBody"});let ar=j.Ik({kind:af,title:j.Yj(),detail:j.Yj(),occurredAt:k.w$(),findingId:j.Yj().nullable().optional()}).meta({id:"HarnessEventItem"});j.Ik({counts:j.Ik({block:j.ai().int().nonnegative(),redact:j.ai().int().nonnegative(),warn:j.ai().int().nonnegative()}),items:j.YO(ar)}).meta({id:"HarnessEventsResponse"}),j.Ik({jobId:j.Yj(),startedAt:k.w$()}).meta({id:"RescanResponse"}),j.Ik({repo:j.Yj()}).meta({id:"ConnectProjectBody"}),j.Ik({type:j.YO(_).optional(),q:j.Yj().optional()}),j.Ik({path:j.Yj().optional(),q:j.Yj().optional(),filter:j.k5(["blocked"]).optional()}),j.Ik({path:j.Yj()}),j.Ik({limit:l.ai().int().min(1).max(50).default(7)});let as=j.k5(["once","temporary","permanent"]),at=j.Ik({repo:j.Yj().optional(),sourceTool:j.Yj().optional(),provider:j.Yj().optional()}).strict(),au=j.Ik({id:j.Os(),ruleId:j.Yj(),category:m,valueFingerprint:j.Yj().regex(/^[0-9a-f]{64}$/),keyVersion:j.ai().int().positive(),maskedValue:j.Yj(),scope:as,expiresAt:k.w$().nullable(),maxUses:j.ai().int().positive().nullable(),useCount:j.ai().int().nonnegative(),lastUsedAt:k.w$().nullable(),justification:j.Yj().min(1),conditions:at.nullable(),createdBy:j.Yj(),createdVia:j.k5(["cli-approve","cli-add","web-approve","web-add","api","setup-triage"]),createdAt:k.w$(),updatedAt:k.w$(),revokedAt:k.w$().nullable(),revokedBy:j.Yj().nullable(),revokeReason:j.Yj().nullable()}).pick({id:!0,ruleId:!0,valueFingerprint:!0,keyVersion:!0,expiresAt:!0,maxUses:!0,useCount:!0,conditions:!0});function av(a,b){return"present"===b.status&&b.version===a}j.k5(["keyword","regex","validator"]).meta({id:"MatcherType"}),j.k5(["safe","quarantined"]).meta({id:"RuleProbeVerdict"});let aw=j.Ik({type:j.eu("keyword"),keywords:j.YO(j.Yj().min(1)).min(1),caseSensitive:j.zM().default(!1)}),ax=j.Ik({type:j.eu("regex"),pattern:j.Yj().min(1).max(2e3),flags:j.Yj().default("gi"),captureGroup:j.ai().int().nonnegative().optional()}).refine(a=>(function(a,b){try{return new RegExp(a,b),!0}catch{return!1}})(a.pattern,a.flags),{message:"pattern/flags do not form a valid JavaScript regular expression",path:["pattern"]}).refine(a=>void 0!==a.captureGroup||!function(a,b){try{let c=new RegExp(a,b.replace(/[gy]/g,""));return c.exec("")?.[0].length===0}catch{return!1}}(a.pattern,a.flags),{message:'a whole-match regex that can match the empty string (e.g. "\\d*", "a?", "(?:)") can hang the matcher — scope the quantifier to a captureGroup, or require at least one character',path:["pattern"]}),ay=j.Ik({type:j.eu("validator"),name:j.k5(["luhn","entropy","ssn-checksum"]),config:j.g1(j.Yj(),j.L5()).optional()}),az=j.gM("type",[aw,ax,ay]).meta({id:"Matcher"}),aA=j.Ik({extensions:j.YO(j.Yj().regex(/^\.[A-Za-z0-9]+$/)).min(1)}).meta({id:"AppliesTo"}),aB=j.KC([j.Yj(),j.Ik({name:j.Yj(),config:j.g1(j.Yj(),j.L5()).optional()})]).meta({id:"PostValidatorRef"}),aC=j.Ik({categories:j.YO(m).min(1).optional(),ruleIds:j.YO(j.Yj().min(1)).min(1).optional(),labels:j.YO(j.Yj().min(1)).min(1).optional(),windowChars:j.ai().int().positive().default(160),confidenceBoost:j.ai().min(0).max(.3).optional()}).refine(a=>(a.categories?.length??0)+(a.ruleIds?.length??0)+(a.labels?.length??0)>0,{message:"requiresNearby needs at least one of categories, ruleIds, or labels"}).meta({id:"RequiresNearby"}),aD=j.Ik({label:j.Yj(),text:j.Yj().max(5e4),shouldMatch:j.zM(),filePath:j.Yj().optional(),expectedSpans:j.YO(j.Ik({start:j.ai(),end:j.ai()})).optional()}).meta({id:"RuleFixture"}),aE=j.Ik({specVersion:j.eu(1),id:j.Yj().regex(/^[a-z][a-z0-9-]*\/[a-z][a-z0-9-]*$/),name:j.Yj(),category:m,severity:n,matcher:az,appliesTo:aA.optional(),postValidators:j.YO(aB).optional(),requiresNearby:aC.optional(),examples:j.YO(j.Yj()).optional()}).meta({id:"Rule"}),aF=j.Ik({name:j.Yj(),email:j.Rp().optional(),url:j.OZ().optional()}).meta({id:"Author"});j.Ik({specVersion:j.eu(1),id:j.Yj(),name:j.Yj(),version:j.Yj(),rules:j.YO(j.Yj()),description:j.Yj().optional(),author:aF.optional(),license:j.Yj().optional(),sourceUrl:j.OZ().optional()}).meta({id:"PackManifest"});let aG=j.k5(["global","repo","user"]).meta({id:"PolicyScope"}),aH=j.KC([j.Ik({ruleId:j.Yj()}),j.Ik({category:m})]).meta({id:"PolicyTarget"}),aI=j.Ik({id:j.Os(),scope:aG,target:aH,action:o,enabled:j.zM().default(!0),customKeywords:j.YO(j.Yj()).optional(),name:j.Yj().optional()}).meta({id:"Policy"});j.Ik({version:j.Yj(),policies:j.YO(aI),rules:j.YO(aE).optional(),rulesComplete:j.zM().optional(),exceptions:j.YO(au).optional(),ruleVersions:j.g1(j.Yj(),j.Yj()).optional(),customKeywords:j.YO(j.Yj()),fetchedAt:k.w$()}).meta({id:"PolicyBundle"});let aJ=["config"];m.options.filter(a=>!aJ.includes(a));let aK={secret:"critical",financial:"critical",code_flaw:"critical",pii:"high",phi:"high",custom:"high",code_context:"low",config:"low"},aL=j.k5(["builtin","custom"]).meta({id:"PolicyKind"}),aM=["monitor","warn","redact","block"],aN=j.k5(aM).meta({id:"BuiltinPolicyId"}),aO={monitor:{name:"Monitor",action:"log",description:"Log every match for audit. The request is allowed through untouched."},warn:{name:"Warn",action:"warn",description:"Allow the request, but warn the user inline before it is sent."},redact:{name:"Redact",action:"redact",description:"Automatically strip the matched value from the request, then continue."},block:{name:"Block",action:"block",description:"Refuse the request entirely whenever any rule in this detection matches."}};Object.fromEntries(m.options.map(a=>[a,aO[function(a){if(aJ.includes(a))return"monitor";let b=aK[a];return"critical"===b||"high"===b?"warn":"monitor"}(a)].action])),Object.fromEntries(aM.map(a=>[a,{id:a,...aO[a]}]));let aP=j.Ik({id:j.Yj(),name:j.Yj(),ruleCount:j.ai().int().nonnegative(),enabled:j.zM()}).meta({id:"UsedByItem"}),aQ=j.Ik({id:j.Yj(),kind:aL,name:j.Yj(),enabled:j.zM(),usedByCount:j.ai().int().nonnegative()}).meta({id:"PolicyListItem"});j.Ik({specVersion:j.eu(1),id:j.Yj(),kind:aL,name:j.Yj(),enabled:j.zM(),description:j.Yj(),usedBy:j.YO(aP)}).meta({id:"PolicyDetail"}),j.Ik({policies:j.ai().int().nonnegative(),builtin:j.ai().int().nonnegative(),custom:j.ai().int().nonnegative(),detectionsGoverned:j.ai().int().nonnegative()}).meta({id:"PolicyStatsResponse"}),j.Ik({cursor:j.Yj().optional(),limit:l.ai().int().min(1).max(200).default(50),sourceTool:j.Yj().optional(),kind:j.Yj().optional(),from:k.w$().optional(),to:k.w$().optional()}),j.Ik({items:j.YO(Z),nextCursor:j.Yj().nullable()}).meta({id:"ListEventsResponse"}),j.Ik({accepted:j.ai().int().nonnegative(),duplicates:j.ai().int().nonnegative()}).meta({id:"IngestResponse"}),j.Ik({cursor:j.Yj().optional(),limit:l.ai().int().min(1).max(200).default(50),severity:j.Yj().optional(),category:j.Yj().optional(),eventId:j.Os().optional()}),j.Ik({items:j.YO(q),nextCursor:j.Yj().nullable()}).meta({id:"ListFindingsResponse"}),j.Ik({items:j.YO(aQ)}).meta({id:"ListPoliciesResponse"}),aI.omit({id:!0}).meta({id:"CreatePolicyRequest"}),aI.partial().required({id:!0}).meta({id:"UpdatePolicyRequest"}),j.Ik({accepted:j.zM()}).meta({id:"RecordAuditEventResponse"}),j.Ik({error:j.Ik({code:j.Yj(),message:j.Yj(),details:j.L5().optional()})}).meta({id:"ErrorResponse"});let aR=j.k5(["user","project","local","plugin"]),aS=j.Ik({name:j.Yj().min(1),source:j.Yj().min(1),scope:aR,pluginName:j.Yj().optional(),version:j.Yj().optional(),description:j.Yj().optional(),updatedAt:k.w$().optional(),location:j.Yj().optional()}),aT=j.Ik({event:j.Yj().min(1),matcher:j.Yj().optional(),command:j.Yj().min(1),timeout:j.ai().optional(),scope:aR,pluginName:j.Yj().optional(),location:j.Yj().optional()}),aU=j.Ik({name:j.Yj().min(1),scope:aR,pluginName:j.Yj().optional(),marketplace:j.Yj().optional(),project:j.Yj().optional(),transport:j.Yj().min(1),command:j.Yj().optional(),url:j.Yj().optional(),envKeys:j.YO(j.Yj()).optional(),location:j.Yj().optional()}),aV=j.Ik({name:j.Yj().min(1),path:j.Yj().min(1),scope:aR,kind:j.Yj().min(1),detail:j.Yj().optional(),entryCount:j.ai().optional(),updatedAt:k.w$().optional()});j.Ik({scannedAt:k.w$(),skills:j.YO(aS),hooks:j.YO(aT),mcpServers:j.YO(aU),configFiles:j.YO(aV),errors:j.YO(j.Ik({source:j.Yj(),reason:j.Yj()}))});let aW=j.Ik({ruleId:j.Yj().min(1),version:j.Yj().min(1),span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)});j.Ik({items:j.YO(J),scanEvent:L,definitions:j.YO(M).optional(),findings:j.YO(aW).optional()});let aX=j.Yj().regex(/^[a-z][a-z0-9-]*$/),aY=j.Yj().regex(/^[a-z][a-z0-9-]*$/),aZ=j.Yj().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z-.]+)?$/),a$=j.k5(["labs","user","org"]),a_=j.k5(["library"]).meta({id:"OriginEnum"}),a0=j.k5(["all","library","custom","customized","updates"]),a1=j.k5(["new","imported","update"]).meta({id:"LibraryStateEnum"}),a2=j.Ik({all:j.ai().int().nonnegative(),library:j.ai().int().nonnegative(),custom:j.ai().int().nonnegative(),customized:j.ai().int().nonnegative(),updates:j.ai().int().nonnegative()}).meta({id:"DetectionCounts"}),a3=j.Ik({id:j.Yj(),name:j.Yj(),version:aZ,enabled:j.zM(),origin:a_,publisher:aX.optional(),publisherKind:a$.optional(),ruleCount:j.ai().int().nonnegative(),namespace:aX,packId:aY,policyId:j.Yj().optional(),latestVersion:aZ.optional()}).meta({id:"DetectionListItem"});j.Ik({counts:a2,items:j.YO(a3)}).meta({id:"ListDetectionsResponse"}),j.Ik({filter:a0.optional().default("all"),q:j.Yj().optional()}),j.Ik({detections:j.ai().int().nonnegative(),rules:j.ai().int().nonnegative(),active:j.ai().int().nonnegative(),findingsLast30d:j.ai().int().nonnegative()}).meta({id:"DetectionStats"});let a4=j.Ik({id:j.Yj(),name:j.Yj(),category:m,severity:n,matcher:az}).meta({id:"DetectionRule"}),a5=j.Ik({available:j.zM(),latestVersion:aZ,latestRuleCount:j.ai().int().nonnegative().optional()}).nullable().meta({id:"DetectionUpdate"});j.Ik({id:j.Yj(),name:j.Yj(),version:aZ,enabled:j.zM(),origin:a_,publisher:aX.optional(),publisherKind:a$.optional(),ruleCount:j.ai().int().nonnegative(),namespace:aX,packId:aY,description:j.Yj().optional(),editedAt:k.w$(),findingsLast30d:j.ai().int().nonnegative(),latestVersion:aZ.nullable().optional(),update:a5,rules:j.YO(a4),modified:j.zM(),policyId:j.Yj().optional()}).meta({id:"DetectionDetail"});let a6=j.Ik({id:j.Yj(),name:j.Yj(),publisher:aX,publisherKind:a$.optional(),category:m.optional(),version:aZ,ruleCount:j.ai().int().nonnegative(),description:j.Yj().optional(),updatedAt:k.w$(),state:a1,importedAs:j.Yj().nullable()}).meta({id:"LibraryItem"});j.Ik({categories:j.YO(m),items:j.YO(a6)}).meta({id:"ListLibraryResponse"}),j.Ik({libraryId:j.Yj().refine(a=>/^[^/]+\/[^/]+$/.test(a),{message:"libraryId must be in namespace/packId format"})}).meta({id:"ImportDetectionRequest"});let a7=j.k5(["provider","internal","external","ip"]).meta({id:"DestinationKind"}),a8=j.k5(["https","http","sftp","grpc","smtp","ws","wss"]).meta({id:"Transport"}),a9=j.k5(["secrets","pii","customer","source","telemetry","logs","metrics","none"]).meta({id:"DataClass"});a9.options;let ba=j.k5(["recognized","internal","unverified","ip"]).meta({id:"ShareTrustLevel"}),bb=j.k5(["allow","block"]).meta({id:"EgressDecision"}),bc=j.k5(["allowed","blocked","review"]).meta({id:"EgressStatus"}),bd=j.k5(["raw_ip","unverified_domain","plaintext_transport"]).meta({id:"ReviewReason"}),be=j.k5(["GET","POST","PUT","DELETE","SDK","REF"]).meta({id:"HttpMethod"}),bf=j.Ik({needsReview:j.zM(),reasons:j.YO(bd)}).meta({id:"ReviewInfo"}),bg=j.Ik({port:j.ai().int().nullable(),geo:j.Yj().nullable(),ptr:j.Yj().nullable()}).meta({id:"DestinationNetwork"}),bh=j.Ik({id:j.Yj(),method:be,transport:a8,url:j.Yj(),template:j.zM(),dataClass:a9,lastSeen:k.w$(),callSiteCount:j.ai().int().nonnegative()}).meta({id:"EndpointSummary"}),bi=j.Ik({id:j.Yj(),project:j.Yj(),file:j.Yj(),line:j.ai().int().nonnegative(),snippet:j.Yj(),dynamic:j.zM(),vendored:j.zM(),projectId:j.Yj().nullable()}).meta({id:"CallSite"}),bj=bh.extend({sites:j.YO(bi)}).meta({id:"EndpointWithSites"}),bk=j.Ik({id:j.Yj(),kind:a7,name:j.Yj(),host:j.Yj(),category:j.Yj(),trust:ba,status:bc,isCustom:j.zM(),lastSeen:k.w$(),endpointCount:j.ai().int().nonnegative(),callSiteCount:j.ai().int().nonnegative(),transports:j.YO(a8),dataClasses:j.YO(a9),review:bf,network:bg.nullable(),endpoints:j.YO(bh)}).meta({id:"ShareDestinationSummary"});bk.omit({endpointCount:!0,callSiteCount:!0,endpoints:!0}).extend({note:j.Yj().nullable(),endpoints:j.YO(bj)}).meta({id:"ShareDestinationDetail"});let bl=j.Ik({id:j.Yj(),kind:a7,name:j.Yj(),host:j.Yj(),trust:ba,status:bc,review:bf,topDataClass:a9,callSiteCount:j.ai().int().nonnegative(),lastSeen:k.w$()}).meta({id:"ReviewDestination"}),bm=j.Ik({kind:a7,total:j.ai().int().nonnegative(),items:j.YO(bk)}).meta({id:"ShareDestinationGroup"});j.Ik({groups:j.YO(bm)}).meta({id:"ListShareDestinationsResponse"}),j.Ik({items:j.YO(bl)}).meta({id:"NeedsReviewResponse"}),j.Ik({destinations:j.ai().int().nonnegative(),endpoints:j.ai().int().nonnegative(),callSites:j.ai().int().nonnegative(),needsReview:j.ai().int().nonnegative(),insecure:j.ai().int().nonnegative(),byKind:j.Ik({provider:j.ai().int().nonnegative(),internal:j.ai().int().nonnegative(),external:j.ai().int().nonnegative(),ip:j.ai().int().nonnegative()}),byTrust:j.Ik({recognized:j.ai().int().nonnegative(),internal:j.ai().int().nonnegative(),unverified:j.ai().int().nonnegative(),ip:j.ai().int().nonnegative()})}).meta({id:"SharesStats"}),j.Ik({decision:bb.nullable()}).meta({id:"SetEgressDecisionBody"}),j.Ik({destination:bk}).meta({id:"SetEgressDecisionResponse"}),j.Ik({q:j.Yj().optional(),kind:j.YO(a7).optional(),groupBy:j.k5(["destination"]).default("destination"),review:j.uE().default(!1)}),j.Ik({format:j.k5(["csv","json"]).default("csv"),q:j.Yj().optional(),kind:j.YO(a7).optional()});let bn=j.k5(["npm","pypi","go","maven","rubygems","cargo","composer","nuget"]).meta({id:"EgressEcosystem"});j.Ik({id:j.Yj(),name:j.Yj(),category:j.Yj(),hostSuffixes:j.YO(j.Yj()).min(1),apiBase:j.Yj(),defaultDataClasses:j.YO(a9).min(1),sdks:j.jg(bn,j.YO(j.Yj()))}).meta({id:"ProviderRegistryEntry"});let bo=j.Ik({file:j.Yj(),line:j.ai().int().positive(),snippet:j.Yj(),dynamic:j.zM(),vendored:j.zM()}).meta({id:"EgressCallSiteHit"}),bp=j.Ik({host:j.Yj(),kind:a7,name:j.Yj(),category:j.Yj(),trust:ba,network:bg.nullable(),method:be,transport:a8,url:j.Yj(),template:j.zM(),dataClass:a9,site:bo}).meta({id:"ResolvedEgressHit"}),bq=j.gM("mode",[j.Ik({mode:j.eu("walk"),walkedPrefix:j.Yj()}),j.Ik({mode:j.eu("ledger"),scannedFiles:j.YO(j.Yj()),deletedFiles:j.YO(j.Yj())})]).meta({id:"EgressReconcile"});j.Ik({projectKey:j.Yj().min(1),project:j.Yj(),projectId:j.Yj().nullable(),reconcile:bq,hits:j.YO(bp)}).meta({id:"RecordProjectEgressInput"}),j.Ik({destinations:j.ai().int().nonnegative(),endpoints:j.ai().int().nonnegative(),callSites:j.ai().int().nonnegative(),truncated:j.zM(),droppedFiles:j.YO(j.Yj()).default([])}).meta({id:"EgressWriteSummary"}),new WeakMap,new WeakMap;let br=j.Ik({id:j.Os(),namespace:aX,packId:aY,version:aZ,name:j.Yj(),enabled:j.zM().default(!0),policyId:j.Yj().optional()}).meta({id:"InstalledPack"});j.Ik({namespace:aX,packId:aY,version:aZ}).meta({id:"InstallPackRequest"}),j.Ik({items:j.YO(br)}).meta({id:"ListInstalledPacksResponse"}),j.Ik({enabled:j.zM().optional(),policyId:j.Yj().nullable().optional()}).refine(a=>Object.keys(a).some(b=>void 0!==a[b]),{message:"At least one field must be provided"}).meta({id:"PatchInstalledPackRequest"});let bs=j.k5(["standalone"]),bt=j.k5(["redact","warn"]),bu=j.k5(["full","session-only"]),bv=j.Ik({acknowledgedAt:k.w$(),payloadVersion:j.ai().int().positive()});function bw(a){return a?.payloadVersion===1}j.Ik({specVersion:j.ai().int().positive().default(4),runMode:j.vk(a=>"attached"===a?"standalone":a,bs.default("standalone")),policy:bt.default("redact"),historicalAccess:bu.default("session-only"),dataSharesInPlace:j.zM().default(!0),onboardedAt:k.w$().optional(),modelJudgeConsent:bv.optional()});let bx=j.Ik({path:j.Yj().min(1),name:j.Yj().min(1),origin:ab,defaultAccess:aa});j.Ik({files:j.YO(bx),truncated:j.zM(),scannedAt:j.Yj()});let by=["7d","30d","3m","6m"],bz=j.k5(by).meta({id:"TimeRange"}),bA="7d";bz.catch(bA);let bB=j.k5(["still-valid","unknown","invalid"]),bC=j.Ik({filePath:j.Yj(),span:p.optional()}).strict(),bD=j.Ik({provider:j.Yj(),maskedToken:j.Yj(),where:bC,state:bB,observedAt:k.w$().optional()}).strict();j.Ik({provider:j.Yj(),maskedToken:j.Yj(),consolePath:j.Yj(),occurrenceSpread:j.ai().int().positive()}).strict();let bE=j.k5(["redact-rotation-checklist","redact-only","set-secret-redact","leave"]),bF=j.k5(["first-run","pre-push","secret-scan"]);j.Ik({entrySource:bF}).strict();let bG=j.Ik({id:bE,label:j.Yj()}),bH=j.Ik({kind:j.eu("decision"),entrySource:bF,secretCount:j.ai().int().positive(),prompt:j.Yj(),options:j.PV([bG.extend({id:j.eu("redact-rotation-checklist")}),bG.extend({id:j.eu("redact-only")}),bG.extend({id:j.eu("set-secret-redact")}),bG.extend({id:j.eu("leave")})])}),bI=j.Ik({kind:j.eu("no-decision")});j.gM("kind",[bH,bI]),j.Ik({rules:j.YO(aE).min(1).max(100),text:j.Yj().max(5e4).optional(),fixtures:j.YO(aD).max(200).optional()}).refine(a=>void 0!==a.text||(a.fixtures?.length??0)>0,{message:"Provide `text`, `fixtures`, or both — there must be something to test"}).meta({id:"TestRulesRequest"});let bJ=j.Ik({ruleId:j.Yj(),category:m,severity:n,span:p,confidence:j.ai().min(0).max(1),match:j.Yj()}).meta({id:"RuleTestMatch"}),bK=j.Ik({label:j.Yj(),shouldMatch:j.zM(),didMatch:j.zM(),passed:j.zM(),matches:j.YO(bJ)}).meta({id:"FixtureResult"});j.Ik({adhoc:j.Ik({matches:j.YO(bJ)}).optional(),fixtures:j.YO(bK),summary:j.Ik({total:j.ai().int().nonnegative(),passed:j.ai().int().nonnegative(),failed:j.ai().int().nonnegative()}),unsupportedRuleIds:j.YO(j.Yj())}).meta({id:"TestRulesResponse"});let bL=j.Ik({severity:n,count:j.ai().int().nonnegative(),caught:j.ai().int().nonnegative().optional(),openAtRest:j.ai().int().nonnegative().optional()}).meta({id:"SeveritySummaryItem"});j.Ik({total:j.ai().int().nonnegative(),needsRemediation:j.ai().int().nonnegative().optional(),bySeverity:j.YO(bL)}).meta({id:"SeveritySummaryResponse"}),j.Ik({range:j.k5(by).default(bA)});let bM=j.k5(["blocked","redacted","warned"]).meta({id:"EnforcementActionKind"}),bN=j.Ik({kind:bM,count:j.ai().int().nonnegative(),delta:j.ai().int()}).meta({id:"EnforcementAction"});j.Ik({range:bz,total:j.ai().int().nonnegative(),actions:j.YO(bN)}).meta({id:"EnforcementActionsResponse"});let bO=j.k5(["day","week"]).meta({id:"TimeseriesGranularity"}),bP=j.Ik({timestamp:k.p6(),critical:j.ai().int().nonnegative(),high:j.ai().int().nonnegative(),medium:j.ai().int().nonnegative()}).meta({id:"FindingsTimeseriesPoint"});j.Ik({range:bz,granularity:bO,points:j.YO(bP)}).meta({id:"FindingsTimeseriesResponse"});let bQ=j.Ik({timestamp:k.p6(),bySeverity:j.Ik({critical:j.ai().nonnegative().nullable(),high:j.ai().nonnegative().nullable(),medium:j.ai().nonnegative().nullable(),low:j.ai().nonnegative().nullable()})}).meta({id:"MttrTrendPoint"});j.Ik({range:bz,granularity:bO,points:j.YO(bQ)}).meta({id:"MttrTrendResponse"});let bR=j.Ik({findingKey:j.Yj(),ruleId:j.Yj(),severity:n,path:j.Yj(),resolvedAt:k.w$(),detectedAt:k.w$()}).meta({id:"ResolvedFeedItem"});j.Ik({items:j.YO(bR)}).meta({id:"RecentlyResolvedResponse"});let bS=["repo","user"],bT=j.k5(bS).meta({id:"SourceKind"}),bU=j.Ik({id:j.Yj(),name:j.Yj(),kind:bT,findingsCount:j.ai().int().nonnegative()}).meta({id:"TopSource"});j.Ik({range:bz,items:j.YO(bU)}).meta({id:"TopSourcesResponse"}),j.Ik({range:j.k5(by).default(bA),limit:l.ai().int().min(1).max(50).default(5),kind:j.k5(bS).optional()});let bV=j.k5(["claudecode","cursor","codex","chatgpt","copilot","api"]).meta({id:"Provider"}),bW=j.Ik({provider:bV,coverage:j.ai().int().min(0).max(100),supported:j.zM()}).meta({id:"ScanCoverageProvider"});j.Ik({range:bz,providers:j.YO(bW)}).meta({id:"ScanCoverageResponse"});let bX=j.k5(["repo","user","team","policy","share","rule"]).meta({id:"SubjectType"}),bY=j.Ik({type:bX,id:j.Yj(),label:j.Yj()}).meta({id:"RecommendationSubject"}),bZ=j.k5(["apply","navigate"]).meta({id:"RecommendationActionMode"}),b$=j.Ik({mode:bZ,type:j.Yj(),label:j.Yj(),href:j.Yj().optional(),policyId:j.Yj().optional(),teamId:j.Yj().optional()}).meta({id:"RecommendationAction"}),b_=j.Ik({id:j.Yj(),category:j.Yj(),severity:n,title:j.Yj(),description:j.Yj(),subjects:j.YO(bY),action:b$}).meta({id:"RecommendedAction"});j.Ik({items:j.YO(b_)}).meta({id:"RecommendedActionsResponse"}),j.Ik({limit:l.ai().int().min(1).max(20).default(3)});let b0=j.Ik({type:j.Yj(),policyId:j.Yj().optional(),teamId:j.Yj().optional()}).meta({id:"AppliedAction"});j.Ik({id:j.Yj(),status:j.eu("applied"),appliedAction:b0}).meta({id:"ApplyRecommendedActionResponse"}),j.Ik({id:j.Yj(),status:j.eu("dismissed")}).meta({id:"DismissRecommendedActionResponse"}),j.Ik({id:j.Yj()}),j.Ik({ruleId:j.Yj(),category:m,severity:n,maskedMatch:j.Yj(),rawMatch:j.Yj(),context:j.Yj(),filePath:j.Yj().optional(),confidence:j.ai().min(0).max(1),id:j.Yj().optional(),valueFingerprint:j.Yj().optional(),keyVersion:j.ai().int().nonnegative().optional()});let b1=j.Ik({category:m,action:aN,reasoning:j.Yj(),genuineCount:j.ai().int().nonnegative(),fpCount:j.ai().int().nonnegative(),fpIds:j.YO(j.Yj())});j.Ik({perCategory:j.YO(b1),notes:j.Yj()});let b2=j.Ik({total:j.ai().int().nonnegative(),important:j.ai().int().nonnegative(),routine:j.ai().int().nonnegative()}).refine(a=>a.total===a.important+a.routine,{message:"total must equal important + routine",path:["total"]}),b3=j.Ik({ruleId:j.Yj(),category:m,valueFingerprint:j.Yj(),keyVersion:j.ai().int().nonnegative()}),b4=j.Ik({pattern:j.Yj(),count:j.ai().int().nonnegative(),values:j.YO(b3).min(1)}),b5=j.Ik({category:m,count:j.ai().int().nonnegative(),egress:j.zM()}),b6=j.Ik({counts:b2,routineCategories:j.YO(m),surfacedCategories:j.YO(m),findingKinds:j.YO(b5),posture:j.g1(m,aN),maskedFindings:j.YO(bD).optional(),falsePositivePatterns:j.YO(b4).optional()}),b7=b1.pick({category:!0,genuineCount:!0,fpCount:!0}).extend({egress:j.zM()});j.Ik({categories:j.YO(b7),posture:j.g1(m,aN)}),j.Ik({frame:b6,copy:j.Yj()}),j.k5(["scan","floor"]);let b8=j.Ik({id:j.k5(["enter-remediation","open-dashboard","not-now"]),label:j.Yj()}),b9=j.PV([b8.extend({id:j.eu("open-dashboard")}),b8.extend({id:j.eu("not-now")})]),ca=j.PV([b8.extend({id:j.eu("enter-remediation")}),b8.extend({id:j.eu("open-dashboard")}),b8.extend({id:j.eu("not-now")})]);j.Ik({worthALook:j.ai().int().nonnegative(),liveKeys:j.ai().int().nonnegative().optional(),options:j.KC([b9,ca])}).refine(a=>a.options.some(a=>"enter-remediation"===a.id)===(a.liveKeys??0)>0,{message:"the chain-entry option is present exactly when liveKeys > 0",path:["options"]}).refine(a=>(a.liveKeys??0)<=a.worthALook,{message:"liveKeys is a subset of worthALook and cannot exceed it",path:["liveKeys"]})},16463:(a,b,c)=>{"use strict";c.d(b,{Jy:()=>g,QT:()=>f,hn:()=>e,sp:()=>d.spO,sr:()=>h});var d=c(16312);let e=[{value:"7d",label:"Last 7 days"},{value:"30d",label:"Last 30 days"},{value:"3m",label:"Last 3 months"},{value:"6m",label:"Last 6 months"}];function f(a){return e.find(b=>b.value===a)?.label??a}let g=[{value:"30m",label:"Last 30 minutes"},{value:"1h",label:"Last hour"},{value:"4h",label:"Last 4 hours"},{value:"24h",label:"Last 24 hours"}],h={"30m":"the last 30 minutes","1h":"the last hour","4h":"the last 4 hours","24h":"the last 24 hours"}},17419:(a,b,c)=>{"use strict";c.r(b),c.d(b,{AreaChart:()=>p,Donut:()=>l,Sparkline:()=>m,useMeasuredWidth:()=>o});var d=c(60102),e=c(17599),f=c(81501),g=c(37151),h=c(38934),i=c(62704),j=c(83143),k=c(48844);function l({segments:a,size:b=120,thickness:c=16,children:g}){let h=b/2,i=(0,e.A)().value(a=>a.value).sort(null)(a),j=(0,f.A)().innerRadius(h-c).outerRadius(h);return(0,d.jsxs)("div",{className:"relative shrink-0",style:{width:b,height:b},children:[(0,d.jsx)("div",{"aria-hidden":!0,children:(0,d.jsx)("svg",{width:b,height:b,children:(0,d.jsx)("g",{transform:`translate(${String(h)},${String(h)})`,children:i.map(a=>(0,d.jsx)("path",{d:j(a)??void 0,fill:a.data.color,stroke:"none"},a.data.label))})})}),g&&(0,d.jsx)("div",{className:"absolute inset-0 grid place-items-center text-center",children:g})]})}function m({data:a,color:b,height:c=34,fill:e=!0,strokeWidth:f=2,labels:l,formatValue:m}){let n=`spark-${(0,j.useId)().replace(/:/g,"")}`,[o,p]=(0,j.useState)(null),q=Math.max(...a),r=Math.min(...a),s=q-r||1,t=b=>a.length<=1?50:2+b/(a.length-1)*96,u=a=>c-2-(a-r)/s*(c-4),v=a.map((a,b)=>[t(b),u(a)]),w=(0,g.A)().x(a=>a[0]).y(a=>a[1]).curve(h.G)(v)??void 0,x=(0,i.A)().x(a=>a[0]).y0(c).y1(a=>a[1]).curve(h.G)(v)??void 0,y=(0,d.jsxs)("svg",{"aria-hidden":!0,width:"100%",height:c,viewBox:`0 0 ${String(100)} ${String(c)}`,preserveAspectRatio:"none",className:"block",children:[e&&(0,d.jsx)("defs",{children:(0,d.jsxs)("linearGradient",{id:n,x1:"0",y1:"0",x2:"0",y2:"1",children:[(0,d.jsx)("stop",{offset:"0%",stopColor:b,stopOpacity:.18}),(0,d.jsx)("stop",{offset:"100%",stopColor:b,stopOpacity:0})]})}),e&&(0,d.jsx)("path",{d:x,fill:`url(#${n})`,stroke:"none"}),(0,d.jsx)("path",{d:w,fill:"none",stroke:b,strokeWidth:f,strokeLinecap:"round",strokeLinejoin:"round",vectorEffect:"non-scaling-stroke"})]});if(!(l?.length===a.length&&a.length>0))return y;let z=null===o?void 0:a[o],A=null===o?void 0:l[o];return(0,d.jsxs)("div",{"aria-hidden":!0,className:"relative",onMouseMove:b=>{let c=b.currentTarget.getBoundingClientRect();if(0===c.width)return;let d=(b.clientX-c.left)/c.width*100,e=a.length<=1?0:Math.round((d-2)/96*(a.length-1));p(Math.min(a.length-1,Math.max(0,e)))},onMouseLeave:()=>{p(null)},children:[y,null!==o&&void 0!==z&&void 0!==A&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)("span",{className:"pointer-events-none absolute size-2 -translate-x-1/2 -translate-y-1/2 rounded-full border border-white/80",style:{left:`${String(t(o)/100*100)}%`,top:u(z),background:b}}),(0,d.jsxs)("div",{className:"pointer-events-none absolute z-10 -translate-x-1/2 whitespace-nowrap",style:{left:`clamp(36px, ${String(t(o)/100*100)}%, calc(100% - 36px))`,bottom:c+6,borderRadius:8,border:`1px solid ${k.l.border}`,background:k.l.surface,padding:"4px 8px",fontSize:12,boxShadow:"0 4px 12px rgb(0 0 0 / 0.08)"},children:[(0,d.jsx)("div",{style:{color:k.l.text3,fontSize:11},children:A}),(0,d.jsx)("div",{className:"font-semibold",style:{color:k.l.text2},children:(m??String)(z)})]})]})]})}let n={top:6,right:6,bottom:0,left:6};function o(){let a=(0,j.useRef)(null),[b,c]=(0,j.useState)(0);return[a,b]}function p({data:a,series:b,height:c=160,valueFormat:e=a=>String(a)}){let f=(0,j.useId)().replace(/:/g,""),[l,m]=o(),[p,q]=(0,j.useState)(null),r=Math.max(0,m-n.left-n.right),s=Math.max(0,c-n.top-n.bottom),t=[];for(let c of a)for(let a of b){let b=c[a.key];"number"==typeof b&&t.push(b)}let u=Math.max(1,...t),v=b=>a.length<=1?0:b/(a.length-1)*r,w=a=>s-a/u*s,x=null===p?null:a[p];return(0,d.jsxs)("div",{ref:l,"aria-hidden":!0,className:"relative",style:{height:c},children:[m>0&&(0,d.jsxs)("svg",{width:m,height:c,onMouseMove:function(b){if(!l.current||0===a.length)return;let c=l.current.getBoundingClientRect(),d=b.clientX-c.left-n.left,e=a.length<=1?0:r/(a.length-1),f=0===e?0:Math.round(d/e);q(Math.min(a.length-1,Math.max(0,f)))},onMouseLeave:()=>{q(null)},children:[(0,d.jsx)("defs",{children:b.map(a=>(0,d.jsxs)("linearGradient",{id:`${f}-${a.key}`,x1:"0",y1:"0",x2:"0",y2:"1",children:[(0,d.jsx)("stop",{offset:"0%",stopColor:a.color,stopOpacity:.16}),(0,d.jsx)("stop",{offset:"100%",stopColor:a.color,stopOpacity:0})]},a.key))}),(0,d.jsxs)("g",{transform:`translate(${String(n.left)},${String(n.top)})`,children:[[0,.25,.5,.75,1].map(a=>(0,d.jsx)("line",{x1:0,x2:r,y1:s*a,y2:s*a,stroke:k.l.border,strokeOpacity:.6},a)),b.map(b=>{let c=(0,i.A)().defined(a=>null!==a[b.key]).x((a,b)=>v(b)).y0(w(0)).y1(a=>w(a[b.key]??0)).curve(h.G)(a)??void 0,e=(0,g.A)().defined(a=>null!==a[b.key]).x((a,b)=>v(b)).y(a=>w(a[b.key]??0)).curve(h.G)(a)??void 0;return(0,d.jsxs)("g",{children:[(0,d.jsx)("path",{d:c,fill:`url(#${f}-${b.key})`,stroke:"none"}),(0,d.jsx)("path",{d:e,fill:"none",stroke:b.color,strokeWidth:2})]},b.key)}),x&&null!==p&&(0,d.jsxs)("g",{children:[(0,d.jsx)("line",{x1:v(p),x2:v(p),y1:0,y2:s,stroke:k.l.border}),b.map(a=>{let b=x[a.key];return null===b?null:(0,d.jsx)("circle",{cx:v(p),cy:w(b),r:3,fill:a.color},a.key)})]})]})]}),x&&null!==p&&(0,d.jsxs)("div",{className:"pointer-events-none absolute top-0 -translate-x-1/2",style:{left:Math.min(m-60,Math.max(60,n.left+v(p))),borderRadius:8,border:`1px solid ${k.l.border}`,background:k.l.surface,padding:"6px 8px",fontSize:12,boxShadow:"0 4px 12px rgb(0 0 0 / 0.08)"},children:[(0,d.jsx)("div",{style:{color:k.l.text3,fontSize:11,marginBottom:4},children:x.label}),b.map(a=>{let b=x[a.key];return null===b?null:(0,d.jsxs)("div",{className:"flex items-center gap-1.5",style:{color:k.l.text2},children:[(0,d.jsx)("span",{className:"size-2 rounded-xs",style:{background:a.color,display:"inline-block"}}),(0,d.jsx)("span",{className:"font-semibold",children:e(b,a.key)})]},a.key)})]})]})}},22576:(a,b,c)=>{"use strict";c.d(b,{AssetDetail:()=>k});var d=c(60102),e=c(68191),f=c(83143),g=c(54802),h=c(23601),i=c(50237);let j={skill:"Skill",mcp:"MCP server",hook:"Hook",config:"Configuration file"};function k({asset:a,onTrust:b,onClose:c}){let f="mcp"===a.type,k=a.trust,m=(0,h.TW)(a.type),n=j[a.type];return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-3.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-8.5 shrink-0 place-items-center rounded-lg",m.bg,m.fg),children:(0,d.jsx)(i.m,{name:m.icon,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("div",{className:"mt-px text-xs text-text-3",children:n})]}),c&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon","aria-label":"Back to harness",title:"Back to harness",onClick:c,children:(0,d.jsx)(i.m,{name:"x"})})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[f&&k&&(0,d.jsx)(g.As,{value:k}),(0,d.jsx)(g.Kh,{flags:a.flags})]}),a.description&&(0,d.jsx)("div",{className:"text-sm leading-relaxed text-text-2",children:a.description}),f&&k&&(0,d.jsx)(g.wn,{label:"Trust classification",children:(0,d.jsx)(g.AC,{order:h.yx,meta:h.ZY,value:k,onChange:b,accentOf:a=>a.iconBg})}),a.finding&&(0,d.jsx)(g.wn,{label:"Related finding",children:(0,d.jsxs)("button",{type:"button",className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-sev-critical-fill px-3 py-2.5 text-left",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-4 shrink-0 text-sev-critical"}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:a.finding.title}),a.finding.note&&(0,d.jsx)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:a.finding.note})]}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}),(0,d.jsx)(g.wn,{label:"Details",children:(0,d.jsx)("div",{className:"grid grid-cols-2 gap-x-4 gap-y-3.5",children:Object.entries(a.meta).map(([a,b])=>(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),(0,d.jsx)("div",{className:"wrap-break-word font-mono text-xs font-medium",children:String(b)})]},a))})}),f&&a.tools&&(0,d.jsx)(l,{tools:a.tools,blocked:"unapproved"===k}),(0,d.jsx)("div",{className:"flex flex-wrap gap-2",children:function(a,b){let c;if("skill"===a.type){let b="string"==typeof a.meta.Latest?a.meta.Latest:"";c=a.flags.includes("update")?[{key:"u",primary:!0,icon:"arrow-up",label:`Update to ${b}`.trim()},{key:"c",icon:"book",label:"Changelog"}]:[{key:"r",icon:"refresh",label:"Check for updates"}]}else c="mcp"===a.type?"unapproved"===b?[{key:"a",primary:!0,icon:"shield-check",label:"Approve & allow-list"},{key:"b",icon:"slash-circle",label:"Block server"}]:[{key:"v",icon:"eye",label:"View tools"},{key:"r",icon:"refresh",label:"Re-verify"}]:"hook"===a.type?a.flags.includes("conflict")?[{key:"r",primary:!0,icon:"branch",label:"Resolve run order"},{key:"d",icon:"eye-off",label:"Disable hook"}]:a.flags.includes("unknown")?[{key:"v",primary:!0,icon:"shield-check",label:"Review & verify"},{key:"b",icon:"slash-circle",label:"Block"}]:[{key:"v",icon:"eye",label:"View script"}]:a.flags.includes("risk")?[{key:"r",primary:!0,icon:"shield-check",label:"Review change"},{key:"d",icon:"swap",label:"View diff"}]:a.flags.length?[{key:"d",icon:"swap",label:"View diff"},{key:"m",icon:"check",label:"Mark reviewed"}]:[{key:"o",icon:"eye",label:"Open file"}];return c.map(a=>(0,d.jsxs)(e.$n,{variant:a.primary?"solid":"outline",tone:a.primary?"primary":"neutral",size:"sm",children:[(0,d.jsx)(i.m,{name:a.icon,className:"size-3.5"}),a.label]},a.key))}(a,k)})]})]})}function l({tools:a,blocked:b}){let[c,g]=(0,f.useState)(!1),h=c?a:a.slice(0,4);return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Exposed tools"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.length}),b&&(0,d.jsxs)("span",{className:"ml-auto inline-flex items-center gap-1.5 text-xs font-semibold text-sev-critical",children:[(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3"})," Calls blocked"]})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:h.map(a=>(0,d.jsxs)("div",{className:(0,e.cn)("flex items-start gap-2.5 rounded-lg border px-3 py-2.5",a.risk?"border-sev-high-fill bg-sev-high-fill":"border-border bg-surface",b&&"opacity-70"),children:[(0,d.jsx)("span",{className:(0,e.cn)("mt-px grid size-5.5 shrink-0 place-items-center rounded-md",a.risk?"bg-sev-high text-white":a.write?"bg-surface-2 text-text-2":"bg-teal-fill text-teal"),children:(0,d.jsx)(i.m,{name:a.risk?"alert":a.write?"edit":"eye",className:"size-3"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-baseline gap-1.5",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name}),(0,d.jsx)("span",{className:"font-mono text-xs text-text-3",children:a.signature}),a.write&&!a.risk&&(0,d.jsx)("span",{className:"rounded-full bg-surface-2 px-2 py-px text-xs font-semibold text-text-2",children:"write"})]}),(0,d.jsx)("div",{className:"mt-0.5 text-xs leading-relaxed text-text-2",children:a.description}),a.risk&&(0,d.jsxs)("div",{className:"mt-1 flex items-center gap-1.5 text-xs font-semibold text-sev-high",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-3"})," ",a.risk]})]})]},a.name))}),a.length>4&&(0,d.jsxs)(e.$n,{variant:"ghost",tone:"primary",size:"sm",className:"mt-2 px-0",onClick:()=>{g(!c)},children:[(0,d.jsx)(i.m,{name:"chevron-down",className:(0,e.cn)("size-3.5 transition-transform",c&&"rotate-180")}),c?"Show fewer":`Show all ${String(a.length)} tools`]})]})}},22789:(a,b,c)=>{"use strict";c.d(b,{UpdateStatusCardView:()=>g});var d=c(60102),e=c(68191),f=c(80108);function g({statuses:a,checkedAt:b,onCheckNow:c,onApply:g,applyingId:h,outcomes:i,restartRequired:j,busy:k}){return(0,d.jsxs)(e.Zp,{className:"shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-primary-tint text-primary",children:(0,d.jsx)(f.fN,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Installed components"}),(0,d.jsx)(e.BT,{children:b?`Last checked ${b}`:"Not checked yet"})]}),(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",size:"sm",disabled:k,onClick:c,children:k?"Checking…":"Check now"})]}),(0,d.jsxs)(e.Wu,{children:[j&&(0,d.jsxs)("div",{className:"mb-3 rounded-lg border border-ok-fill bg-ok-fill px-3 py-2 text-xs font-medium text-text",children:["Update installed — restart ",(0,d.jsx)("code",{className:"font-mono",children:"aka dashboard"})," to load the new version."]}),(0,d.jsxs)("div",{className:"flex flex-col",children:[a.map((a,b)=>{let c=i[a.id];return(0,d.jsxs)("div",{className:(0,e.cn)("py-3",b>0&&"border-t border-text/6"),children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:a.name}),(0,d.jsxs)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:[a.installed??"—",a.latest&&a.updateAvailable&&` → ${a.latest}`]})]}),null===a.installed||null===a.latest?(0,d.jsx)(e.Ex,{variant:"default",children:"unknown"}):a.updateAvailable?(0,d.jsx)(e.Ex,{variant:"high",children:"update available"}):(0,d.jsx)(e.Ex,{variant:"success",children:"up to date"}),a.updateAvailable&&(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:null!==h,onClick:()=>{g(a.id)},children:h===a.id?"Updating…":"Update"})]}),c&&(0,d.jsxs)("div",{className:(0,e.cn)("mt-2 rounded-lg border p-2",c.ok?"border-ok-fill bg-ok-fill":"border-sev-critical-fill bg-sev-critical-fill"),children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:c.ok?"Updated.":"Update failed"}),c.output&&(0,d.jsx)("pre",{className:"mt-1 max-h-40 overflow-auto whitespace-pre-wrap font-mono text-label text-text-2",children:c.output})]})]},a.id)}),0===a.length&&(0,d.jsx)("div",{className:"py-6 text-center text-xs text-text-3",children:"Nothing installed to report on yet."})]})]})]})}},23413:(a,b,c)=>{"use strict";c.d(b,{AW:()=>e.A,rJ:()=>e.r,jq:()=>d});let d=new Intl.NumberFormat("en-US");var e=c(28928)},23573:(a,b,c)=>{"use strict";c.d(b,{SessionListView:()=>o});var d=c(60102),e=c(68191),f=c(9),g=c(80108),h=c(48775),i=c(28928),j=c(34452),k=c(10859),l=c(64846);function m({session:a,selected:b,onSelect:c}){let i=a.findings>0;return(0,d.jsxs)("button",{type:"button",onClick:c,"aria-current":b?"true":void 0,className:(0,e.cn)("relative cursor-pointer block w-full rounded-lg px-3 py-2.5 text-left transition-colors",b?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(h.K,{id:a.harness,size:26}),(0,d.jsx)("div",{className:"min-w-0 flex-1",children:(0,d.jsx)("div",{className:"truncate text-ui font-semibold text-text",title:a.title,children:a.title})}),(0,d.jsx)(j.md,{status:a.status})]}),(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5 font-mono text-label text-text-3",children:[(0,d.jsx)(g.SY,{"aria-hidden":!0,focusable:!1,className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"min-w-0 max-w-[50%] truncate",title:a.project,children:a.project}),(0,d.jsx)("span",{className:"shrink-0 text-border-strong",children:"\xb7"}),(0,d.jsx)(g.OK,{"aria-hidden":!0,focusable:!1,className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"min-w-0 flex-1 truncate",title:a.branches[0],children:a.branches[0]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-x-3 gap-y-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-2",title:new Date(a.startedAt).toLocaleString(),suppressHydrationWarning:!0,children:(0,f.K)(a.startedAt)}),(0,d.jsx)(j.JW,{icon:g.O4,children:(0,k.vV)(a.startedAt,a.endedAt,a.status)}),(0,d.jsxs)(j.JW,{icon:g.kp,children:[a.turns," turns"]}),i&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1 whitespace-nowrap text-xs font-semibold text-sev-critical",children:[(0,d.jsx)(g.Zu,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a.findings]})]})]})}function n(){return(0,d.jsxs)("div",{className:"rounded-lg px-3 py-2.5",children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(e.EA,{className:"size-6.5 shrink-0 rounded-lg"}),(0,d.jsx)(e.EA,{className:"h-4 flex-1"})]}),(0,d.jsx)(e.EA,{className:"mb-2 h-3 w-2/3"}),(0,d.jsx)(e.EA,{className:"h-3 w-1/2"})]})}function o({sessions:a,selectedId:b,onSelect:c,query:f,onQuery:h,harness:j,harnessOptions:o,onHarness:p,isLoading:q,error:r,hasMore:s=!1,emptyCount:t=0,showEmpty:u=!1,onToggleEmpty:v}){let w=(0,k.u3)(a),x=""!==f.trim()||j.length>0,y=1===t?"background session":"background sessions",z=t>0&&v?(0,d.jsx)("div",{className:"px-2 py-2 text-center",children:(0,d.jsx)(e.$n,{variant:"link",tone:"primary",className:"text-label font-normal",onClick:v,children:u?`Hide ${String(t)} ${y}`:`${String(t)} ${y} hidden — show`})}):null;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"shrink-0 border-b border-border p-3",children:[(0,d.jsxs)("div",{className:"mb-2 flex h-8.5 items-center gap-2 rounded-lg border border-border bg-surface-2 px-2.5",children:[(0,d.jsx)(g.WI,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3"}),(0,d.jsx)("input",{value:f,onChange:a=>{h(a.target.value)},placeholder:"Search sessions & events…","aria-label":"Search sessions and events",className:"min-w-0 flex-1 bg-transparent text-sm text-text placeholder:text-text-3 focus:outline-none"})]}),(0,d.jsx)(l.HarnessSelect,{value:j,onChange:p,...o?{options:o}:{}})]}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto p-2","aria-busy":q,children:r?(0,d.jsx)("div",{className:"p-2",children:(0,d.jsx)(i.r,{message:r})}):q&&0===a.length?(0,d.jsxs)("div",{className:"flex flex-col gap-1",children:[(0,d.jsx)(n,{}),(0,d.jsx)(n,{}),(0,d.jsx)(n,{})]}):0===w.length?(0,d.jsxs)("div",{className:"py-10 text-center text-sm text-text-3",children:[x?"No sessions match":t>0?"No active sessions in this range":"No sessions recorded yet",z]}):(0,d.jsxs)(d.Fragment,{children:[w.map(a=>(0,d.jsxs)("div",{className:"mb-1.5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2 pb-1.5 pt-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:a.day}),(0,d.jsx)("span",{className:"h-px flex-1 bg-text/6"}),(0,d.jsx)("span",{className:"text-label text-text-3",children:a.items.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1",children:a.items.map(a=>(0,d.jsx)(m,{session:a,selected:a.id===b,onSelect:()=>{c(a.id)}},a.id))})]},a.day)),z,s&&(0,d.jsxs)("div",{className:"px-2 py-3 text-center text-label text-text-3",children:["Showing the most recent ",a.length," sessions — narrow the range to see more."]})]})})]})}},23601:(a,b,c)=>{"use strict";c.d(b,{Cs:()=>r,Gb:()=>j,IF:()=>e,Pe:()=>d,TW:()=>n,WD:()=>k,ZY:()=>f,_t:()=>t,fd:()=>m,iL:()=>p,lx:()=>h,pA:()=>l,v7:()=>o,yx:()=>g,z:()=>s});let d={open:{label:"Any LLM",icon:"cloud",fg:"text-ok",bg:"bg-ok-fill",bar:"bg-ok",desc:"Allowed to any model — including public, consumer LLMs."},approved:{label:"Approved only",icon:"shield-check",fg:"text-primary",bg:"bg-primary-tint",bar:"bg-primary",desc:"Allowed only to approved, governed models."},blocked:{label:"No LLM",icon:"slash-circle",fg:"text-sev-critical",bg:"bg-sev-critical-fill",bar:"bg-sev-critical",desc:"Never sent to any model. Blocked at the proxy."}},e=["open","approved","blocked"],f={"known-good":{label:"Known good",icon:"shield-check",tone:"success",fg:"text-ok",bg:"bg-ok-fill",iconBg:"bg-ok",desc:"Reviewed & allow-listed. Agents may call it freely."},risky:{label:"Risky",icon:"alert",tone:"high",fg:"text-sev-high",bg:"bg-sev-high-fill",iconBg:"bg-sev-high",desc:"Allowed, but reaches sensitive systems or external hosts. Use with care."},unapproved:{label:"Unapproved",icon:"x-circle",tone:"critical",fg:"text-sev-critical",bg:"bg-sev-critical-fill",iconBg:"bg-sev-critical",desc:"Not reviewed or explicitly denied — calls are blocked at the proxy."}},g=["known-good","risky","unapproved"],h={update:{label:"Update available",short:"Update",icon:"arrow-up",tone:"high"},stale:{label:"Stale",short:"Stale",icon:"clock",tone:"default"},conflict:{label:"Conflict",short:"Conflict",icon:"branch",tone:"critical"},unknown:{label:"Unverified",short:"Unverified",icon:"help",tone:"critical"},change:{label:"Changed",short:"Changed",icon:"edit",tone:"low"},untracked:{label:"Untracked",short:"Untracked",icon:"eye-off",tone:"high"},risk:{label:"Security risk",short:"Risk",icon:"alert",tone:"critical"},findings:{label:"Sensitive data",short:"Findings",icon:"alert",tone:"critical"}},i=["risk","conflict","unknown","change","untracked","update","stale"],j={source:{short:"Source",label:"First-party source code",icon:"code"},"public-dep":{short:"Public dep",label:"Public dependency \xb7 open source",icon:"cloud"},vendored:{short:"Vendored",label:"Vendored third-party",icon:"layers"},config:{short:"Config",label:"Configuration",icon:"settings"},data:{short:"Data",label:"Data \xb7 fixtures",icon:"database"},docs:{short:"Docs",label:"Documentation",icon:"book"},generated:{short:"Generated",label:"Generated artifact",icon:"bolt"}},k={type:"project",label:"Projects",icon:"repo",fg:"text-primary",bg:"bg-primary-tint"},l={skill:{type:"skill",label:"Skills",icon:"sparkles",fg:"text-violet",bg:"bg-violet-fill"},mcp:{type:"mcp",label:"MCP servers",icon:"server",fg:"text-teal",bg:"bg-teal-fill"},hook:{type:"hook",label:"Hooks",icon:"route",fg:"text-sev-low",bg:"bg-sev-low-fill"},config:{type:"config",label:"Configuration",icon:"sliders",fg:"text-teal",bg:"bg-surface-2"}},m=[k,l.skill,l.mcp,l.hook,l.config],n=a=>{let{icon:b,fg:c,bg:d}="project"===a?k:l[a];return{icon:b,fg:c,bg:d}};function o(a){return new Date(a).toLocaleString([],{month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"})}let p={block:{label:"Blocked",icon:"slash-circle",tone:"critical",fg:"text-sev-critical",bg:"bg-sev-critical-fill"},redact:{label:"Redacted",icon:"redact",tone:"teal",fg:"text-teal",bg:"bg-teal-fill"},warn:{label:"Warned",icon:"alert",tone:"high",fg:"text-sev-high",bg:"bg-sev-high-fill"}},q={typescript:"#3178C6",javascript:"#F1E05A",rust:"#DEA584",python:"#3572A5",go:"#00ADD8",ruby:"#701516",java:"#B07219",hcl:"#844FBA",jupyter:"#DA5B0B","jupyter notebook":"#DA5B0B",mdx:"#1B1F24",markdown:"#083FA1",shell:"#89E051",c:"#555555","c++":"#F34B7D","c#":"#178600",php:"#4F5D95",swift:"#F05138",kotlin:"#A97BFF"};function r(a){return q[a.toLowerCase()]??"var(--color-border-strong)"}function s(a){let b={};return a.forEach(a=>{a.flags.forEach(a=>{b[a]=(b[a]??0)+1})}),i.filter(a=>b[a]).map(a=>({key:a,count:b[a]??0}))}function t(a,b){if("public"===a.visibility)return"Public repository — every file is allowed to any LLM by default.";if("public-dep"===b)return"Public, open-source dependency — allowed to any LLM by default, even inside a private repo.";let c="blocked"===a.policyDefault?"No LLM":"Approved only";return`Private repository. First-party files default to “${c}”. Adjust per file as needed.`}},23977:(a,b,c)=>{"use strict";c.d(b,{i:()=>j});var d=c(60102),e=c(68191),f=c(80108),g=c(10859),h=c(48421);function i({event:a,first:b,last:c,linkHref:i}){let j=h.$x[a.kind],k="tool"===a.kind&&a.tool?h.pS[a.tool]??j.icon:j.icon,l="active"===a.kind,m="tool"===a.kind||"commit"===a.kind,n=a.link?h.Oy[a.link]:null,o=a.link&&i?i(a.link,a.targetId):null;return(0,d.jsxs)("div",{className:"grid grid-cols-[60px_24px_1fr] gap-x-3",children:[(0,d.jsx)("div",{className:"whitespace-nowrap pt-1.5 text-right font-mono text-label text-text-3",children:(0,g.gE)(a.occurredAt)}),(0,d.jsxs)("div",{className:"relative flex justify-center",children:[!(b&&c)&&(0,d.jsx)("span",{className:(0,e.cn)("absolute left-1/2 w-px -translate-x-1/2 bg-border",b?"bottom-0 top-3":c?"top-0 h-3":"inset-y-0")}),(0,d.jsxs)("span",{className:(0,e.cn)("relative z-10 grid size-6 place-items-center rounded-md ring-2 ring-surface",j.fill,j.text),children:[l&&(0,d.jsx)("span",{className:"absolute inset-0 animate-ping rounded-md bg-current opacity-30"}),(0,d.jsx)(k,{"aria-hidden":!0,focusable:!1,className:"relative size-3.5"})]})]}),(0,d.jsxs)("div",{className:(0,e.cn)("pt-0.5",c?"pb-0":"pb-4.5"),children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:a.title}),a.severity&&(0,d.jsx)(e.Pt,{severity:a.severity}),a.flagged&&(0,d.jsxs)(e.Ex,{variant:"critical",className:"h-6 gap-1.5",children:[(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"Flagged"]}),a.internal&&(0,d.jsxs)(e.Ex,{variant:"primary",className:"h-6 gap-1.5",children:[(0,d.jsx)(f.Zu,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"Internal"]})]}),(0,d.jsxs)("div",{className:(0,e.cn)("mt-0.5 text-xs text-text-2",m&&"font-mono"),children:[a.detail,n&&o&&(0,d.jsx)(e.$n,{asChild:!0,variant:"link",tone:"primary",className:"ml-2 text-xs font-normal",children:(0,d.jsxs)("a",{href:o,children:["Open in ",n,(0,d.jsx)(f.Qq,{"aria-hidden":!0,focusable:!1})]})})]})]})]})}function j({events:a,linkHref:b}){return(0,d.jsx)("div",{children:a.map((c,e)=>(0,d.jsx)(i,{event:c,first:0===e,last:e===a.length-1,...b?{linkHref:b}:{}},c.id))})}},27527:(a,b,c)=>{"use strict";c.d(b,{$F:()=>h,Ai:()=>i,Jk:()=>k,Zp:()=>j});var d=c(60102),e=c(80108),f=c(11294);function g({tone:a,icon:b,children:c,className:e}){let[g,h]=(0,f.vV)(a);return(0,d.jsxs)("span",{className:"inline-flex h-[22px] items-center gap-1.5 whitespace-nowrap rounded-full px-2 text-xs font-semibold "+(e??""),style:{color:g,background:h},children:[b&&(0,d.jsx)(b,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c]})}function h({policy:a}){let b=(0,f.ES)(a),[c,e]=(0,f.vV)(b.tone),g=b.icon;return(0,d.jsxs)("span",{className:"inline-flex h-5 items-center gap-1.5 whitespace-nowrap rounded-full px-2 text-xs font-semibold",style:{color:c,background:e},children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function i({origin:a}){let b=f.H9[a];return(0,d.jsx)(g,{tone:b.tone,icon:b.icon,children:b.label})}function j({version:a}){return(0,d.jsxs)("span",{className:"inline-flex h-6 items-center gap-1.5 whitespace-nowrap rounded-full bg-sev-high-fill px-2 text-xs font-semibold text-sev-high",children:[(0,d.jsx)(e.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a?"Update \xb7 v"+a:"Update"]})}function k({publisher:a,kind:b}){let c=f.jP[b],[e]=(0,f.vV)(c.tone),g=c.icon;return(0,d.jsxs)("span",{className:"inline-flex min-w-0 items-center gap-1.5 text-xs font-semibold text-text-2",children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0",style:{color:e}}),(0,d.jsx)("span",{className:"truncate",title:a,children:a}),c.verified&&(0,d.jsx)("span",{title:c.label,className:"text-[10px] font-bold",style:{color:e},children:"✓"})]})}},28928:(a,b,c)=>{"use strict";c.d(b,{A:()=>g,r:()=>f});var d=c(60102),e=c(68191);function f({message:a}){return(0,d.jsxs)("div",{role:"alert",className:"text-xs text-text-3",children:["Couldn’t load data — ",a]})}function g({message:a,className:b}){return(0,d.jsx)("div",{className:(0,e.cn)("w-full py-6 text-center text-xs text-text-3",b),children:a})}},30480:(a,b,c)=>{"use strict";c.d(b,{DetectionDetailView:()=>l});var d=c(60102),e=c(68191),f=c(43644),g=c(80108),h=c(11294),i=c(67641),j=c(525);function k({rule:a,onOpen:b}){let c=h.rE[a.matcher.type],f=c.icon;return(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-surface p-3.5",children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"grid size-7.5 shrink-0 place-items-center rounded-lg",style:{background:c.fill,color:c.color},children:(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:h.gh[a.category]||a.category})]}),(0,d.jsx)("div",{className:"mt-px font-mono text-label text-text-3",children:a.id})]}),(0,d.jsx)(e.Pt,{severity:a.severity}),(0,d.jsx)("span",{className:"shrink-0 rounded-full px-2.5 py-0.5 text-xs font-semibold",style:{background:c.fill,color:c.color},children:c.label})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("code",{className:"min-w-0 flex-1 truncate rounded-md border border-border bg-surface-2 px-2.5 py-1.5 font-mono text-xs text-text-2",children:(0,h.vm)(a.matcher)}),(0,d.jsxs)(e.$n,{variant:"ghost",tone:"primary",size:"sm",onClick:b,className:"shrink-0",children:["View",(0,d.jsx)(g.vK,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]})]})]})}function l({d:a,onOpenRule:b,onToggleEnabled:c,onChangePolicy:l,onOpenUpdate:m,onRecheck:n,unknownHint:o}){let p=a.policyId??h.tG,q=(0,h.ES)(p),r=q.icon;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsx)("div",{className:"border-b border-border px-5 pb-4 pt-5",children:(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5",children:[(0,d.jsx)("h2",{className:"font-display text-xl font-semibold text-text",children:a.name}),(0,d.jsxs)("span",{className:"rounded-full border border-border bg-surface-2 px-2 py-0.5 font-mono text-xs font-semibold text-text-2",children:["v",a.version]})]}),a.description&&(0,d.jsx)("div",{className:"mt-1.5 text-ui leading-snug text-text-2",children:a.description}),(0,d.jsx)("div",{className:"mt-2 font-mono text-xs text-text-3",children:a.id})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-ui font-semibold "+(a.enabled?"text-ok":"text-text-3"),children:a.enabled?"Enabled":"Disabled"}),c&&(0,d.jsx)(e.dO,{checked:a.enabled,onCheckedChange:c,"aria-label":a.enabled?"Disable detection":"Enable detection"})]}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon","aria-label":"More",className:"size-8.5 text-text-3",children:(0,d.jsx)(g.wy,{"aria-hidden":!0,focusable:!1})})]})]})}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-6 overflow-y-auto p-5",children:[(0,d.jsx)(j.t,{d:a,onOpenUpdate:m,onRecheck:n,unknownHint:o}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-baseline gap-2",children:[(0,d.jsx)(f.e,{children:"Enforcement policy"}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:"applied to every matching request"})]}),(0,d.jsx)(i.PolicyPicker,{value:p,onChange:l}),(0,d.jsxs)("div",{className:"mt-3 flex items-start gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(r,{"aria-hidden":!0,focusable:!1,className:"mt-px size-4 shrink-0",style:{color:(0,h.vV)(q.tone)[0]}}),(0,d.jsx)("div",{className:"text-xs leading-snug text-text-2",children:q.desc})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-3 flex items-center gap-2.5",children:[(0,d.jsx)(f.e,{children:"Rules"}),(0,d.jsx)("span",{className:"rounded-full bg-surface-3 px-2 py-px text-xs font-semibold text-text-2",children:a.rules.length}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsxs)(e.$n,{variant:"outline",tone:"neutral",size:"sm",disabled:!0,title:"Rule authoring coming soon",children:[(0,d.jsx)(g.c1,{"aria-hidden":!0,focusable:!1}),"Add rule"]})]}),(0,d.jsx)("div",{className:"flex flex-col gap-2.5",children:a.rules.map(a=>(0,d.jsx)(k,{rule:a,onOpen:()=>{b(a.id)}},a.id))})]})]})]})}},30757:(a,b,c)=>{"use strict";c.d(b,{FileDetailDrawer:()=>j});var d=c(60102),e=c(68191),f=c(43644),g=c(54802),h=c(23601),i=c(50237);function j({file:a,onChange:b}){let c=h.Gb[a.origin],j=a.project;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)(e.Fm,{className:"flex-row items-center gap-2.5 py-4 px-5",children:[(0,d.jsx)("span",{className:"grid size-7.5 shrink-0 place-items-center rounded-lg bg-surface-2 text-text-2",children:(0,d.jsx)(i.m,{name:"file",className:"size-4.5"})}),(0,d.jsx)(e.qp,{className:"min-w-0 truncate font-mono text-sm",children:a.name})]}),(0,d.jsxs)("div",{className:"mt-1 flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto border-t border-border py-4 px-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"break-all font-mono text-xs text-text-3",children:[j.repo," › ",a.path]}),(0,d.jsxs)("div",{className:"mt-2 flex items-center gap-2",children:[(0,d.jsx)(g.TJ,{origin:a.origin}),(0,d.jsx)(g.yk,{v:j.visibility}),a.findings>0&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 rounded-full bg-sev-critical-fill px-2 py-0.5 text-xs font-semibold text-sev-critical",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-3"}),a.findings," finding",1===a.findings?"":"s"]})]})]}),(0,d.jsx)(g.wn,{label:"LLM access",children:(0,d.jsx)(g.AC,{order:h.IF,meta:h.Pe,value:a.access,onChange:b,accentOf:a=>a.bar})}),(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(i.m,{name:c.icon,className:"size-4.5 shrink-0 text-text-2"}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-0.5 text-xs font-semibold",children:"Why this default"}),(0,d.jsx)("div",{className:"text-xs leading-relaxed text-text-2",children:(0,h._t)(j,a.origin)})]})]}),a.findingsRefs.length>0&&(0,d.jsx)(g.wn,{label:"Related findings",children:(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.findingsRefs.map(b=>(0,d.jsxs)("button",{type:"button",className:"flex w-full cursor-pointer items-center gap-2.5 rounded-lg border border-border bg-primary-tint px-3 py-2.5 text-left",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-4 shrink-0 text-sev-critical"}),(0,d.jsx)("span",{className:"flex-1 text-xs font-medium text-text",children:b.title||a.note}),(0,d.jsx)("span",{className:"text-xs text-primary",children:"Open in Findings"}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})]},b.id))})}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(f.p,{label:"Repository",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:j.repo})}),(0,d.jsx)(f.p,{label:"Visibility",children:"public"===j.visibility?"Public":"Private"}),(0,d.jsx)(f.p,{label:"Origin",children:c.label}),(0,d.jsx)(f.p,{label:"Set by",children:a.isCustom?(0,d.jsx)("span",{className:"text-primary",children:"You"}):"Default policy"}),(0,d.jsx)(f.p,{label:"Language",children:j.language}),(0,d.jsx)(f.p,{label:"Last activity",children:(0,h.v7)(a.blockedAt??j.updatedAt)})]})]})]})}},31468:(a,b,c)=>{"use strict";c.d(b,{NeedsReviewStripView:()=>i});var d=c(60102),e=c(68191),f=c(80108),g=c(42552),h=c(35433);function i({items:a,open:b,onToggle:c,onReview:i}){return 0===a.length?null:(0,d.jsxs)("div",{className:"mb-3.5 overflow-hidden rounded-xl border border-sev-critical-fill bg-sev-critical-fill",children:[(0,d.jsxs)("button",{type:"button",onClick:c,"aria-expanded":b,className:"flex w-full cursor-pointer items-center gap-2.5 px-3.5 py-3 text-left",children:[(0,d.jsx)("span",{className:"grid size-6.5 shrink-0 place-items-center rounded-md bg-sev-critical text-white",children:(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsx)("span",{className:"text-sm font-semibold text-text",children:"Needs review"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-critical px-2 text-xs py-0.5 font-bold text-white",children:a.length}),(0,d.jsx)("span",{className:"text-xs text-text-2",children:"Raw IPs, plaintext transfers & unverified domains"}),(0,d.jsx)(f.D3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("ml-auto size-4.5 text-text-3 transition-transform",!b&&"-rotate-90")})]}),b&&(0,d.jsx)("div",{className:"flex flex-col gap-1.5 px-3 pb-3",children:a.map(a=>(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)(g.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:30}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("text-xs font-semibold text-text","ip"===a.kind&&"font-mono"),children:a.name}),(0,d.jsx)(g.HD,{cls:a.topDataClass})]}),(0,d.jsxs)("div",{className:"mt-1.5 flex items-center gap-1.5 text-label text-sev-critical",children:[(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),(0,h.ZX)(a.review.reasons)]})]}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[a.callSiteCount," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.$n,{onClick:()=>{i(a.id)},variant:"ghost",tone:"primary",size:"sm",children:"Review"})]},a.id))})]})}},31792:(a,b,c)=>{"use strict";c.d(b,{S8C:()=>x,Itg:()=>ac,PWo:()=>an,RRF:()=>a1,ZpU:()=>a4,HUb:()=>a0,hfB:()=>ai,unw:()=>a3,goN:()=>M,Jr:()=>a5,V8B:()=>aI,IgC:()=>aY,iRC:()=>aJ,yA3:()=>A,Bfx:()=>B,GCf:()=>D,TUN:()=>N,SHn:()=>au,V0H:()=>a_,PEm:()=>aW,eI7:()=>cl,cqq:()=>E,jON:()=>aS,lFU:()=>d,PhW:()=>aa,AI$:()=>v,hd_:()=>b7,W4_:()=>q,tXp:()=>b$,plk:()=>bu,mAj:()=>bU,Fnc:()=>c3,ryv:()=>p,tTV:()=>_,qmP:()=>cg,rG:()=>b1,Bfj:()=>bZ,q_t:()=>n,i1j:()=>b8,xog:()=>bT,hzO:()=>c5,by7:()=>c4,Gw9:()=>c1,q11:()=>f,U7X:()=>v,y_0:()=>c2,I8t:()=>e,OHL:()=>cn,DhA:()=>a6,WSs:()=>c8,a45:()=>bs,A6E:()=>b0,pnU:()=>bt,V9M:()=>cb,$w9:()=>cf,jTf:()=>ch,$BP:()=>cc,JAl:()=>cd,$3l:()=>ce,gzP:()=>b9,QCA:()=>ca,C05:()=>c6});let d=[{tag:"0000_acoustic_felicia_hardy",sql:"CREATE TABLE `audit_events` (\n	`id` text PRIMARY KEY NOT NULL,\n	`parent_id` text,\n	`root_session_id` text,\n	`event_type` text NOT NULL,\n	`host_id` text,\n	`harness_id` text,\n	`source_project_id` text,\n	`started_at` integer NOT NULL,\n	`ended_at` integer,\n	`severity` text,\n	`priority` text,\n	`content` text,\n	`content_hash` text,\n	`attributes` text,\n	FOREIGN KEY (`parent_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`root_session_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`host_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`harness_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`source_project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_parent` ON `audit_events` (`parent_id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_session` ON `audit_events` (`root_session_id`,`started_at`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_harness_t` ON `audit_events` (`harness_id`,`started_at`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_project_t` ON `audit_events` (`source_project_id`,`started_at`);--\x3e statement-breakpoint\nCREATE TABLE `classified_data` (\n	`id` text PRIMARY KEY NOT NULL,\n	`class` text NOT NULL,\n	`label` text,\n	`attributes` text\n);\n--\x3e statement-breakpoint\nCREATE TABLE `events` (\n	`id` text PRIMARY KEY NOT NULL,\n	`source_tool` text NOT NULL,\n	`kind` text NOT NULL,\n	`occurred_at` integer NOT NULL,\n	`content_hash` text NOT NULL,\n	`content` text NOT NULL,\n	`metadata` text\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_events_occurred` ON `events` (`occurred_at`);--\x3e statement-breakpoint\nCREATE TABLE `findings` (\n	`id` text PRIMARY KEY NOT NULL,\n	`event_id` text NOT NULL,\n	`rule_id` text NOT NULL,\n	`category` text NOT NULL,\n	`severity` text NOT NULL,\n	`span_start` integer NOT NULL,\n	`span_end` integer NOT NULL,\n	`masked_match` text NOT NULL,\n	`action_taken` text NOT NULL,\n	`confidence` real NOT NULL,\n	FOREIGN KEY (`event_id`) REFERENCES `events`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_findings_event` ON `findings` (`event_id`);--\x3e statement-breakpoint\nCREATE TABLE `inspection_definitions` (\n	`id` text PRIMARY KEY NOT NULL,\n	`rule_id` text NOT NULL,\n	`name` text NOT NULL,\n	`category` text NOT NULL,\n	`severity` text NOT NULL,\n	`definition` text NOT NULL,\n	`version` text NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE TABLE `inspection_findings` (\n	`id` text PRIMARY KEY NOT NULL,\n	`audit_event_id` text NOT NULL,\n	`inspection_definition_id` text NOT NULL,\n	`classified_data_id` text,\n	`span_start` integer NOT NULL,\n	`span_end` integer NOT NULL,\n	`masked_match` text NOT NULL,\n	`action_taken` text NOT NULL,\n	`confidence` real NOT NULL,\n	FOREIGN KEY (`audit_event_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`inspection_definition_id`) REFERENCES `inspection_definitions`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`classified_data_id`) REFERENCES `classified_data`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inspection_findings_event` ON `inspection_findings` (`audit_event_id`);--\x3e statement-breakpoint\nCREATE TABLE `installed_packs` (\n	`id` text PRIMARY KEY NOT NULL,\n	`namespace` text NOT NULL,\n	`pack_id` text NOT NULL,\n	`version` text NOT NULL,\n	`name` text NOT NULL,\n	`rules_json` text NOT NULL,\n	`enabled` integer DEFAULT true NOT NULL,\n	`policy_id` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_installed_packs_pack` ON `installed_packs` (`namespace`,`pack_id`);--\x3e statement-breakpoint\nCREATE TABLE `inventory` (\n	`id` text PRIMARY KEY NOT NULL,\n	`object_type` text NOT NULL,\n	`location` text,\n	`title` text,\n	`host_id` text,\n	`attributes` text NOT NULL,\n	`os_version` text GENERATED ALWAYS AS (json_extract(attributes, '$.os_version')) VIRTUAL,\n	`harness_version` text GENERATED ALWAYS AS (json_extract(attributes, '$.harness_version')) VIRTUAL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL,\n	FOREIGN KEY (`host_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type` ON `inventory` (`object_type`);--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type_osver` ON `inventory` (`object_type`,`os_version`);--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type_harnessver` ON `inventory` (`object_type`,`harness_version`);--\x3e statement-breakpoint\nCREATE TABLE `policies` (\n	`id` text PRIMARY KEY NOT NULL,\n	`scope` text DEFAULT 'global' NOT NULL,\n	`target` text NOT NULL,\n	`action` text NOT NULL,\n	`enabled` integer DEFAULT true NOT NULL,\n	`custom_keywords` text,\n	`name` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_policies_scope_target` ON `policies` (`scope`,`target`);--\x3e statement-breakpoint\nCREATE TABLE `source_project` (\n	`id` text PRIMARY KEY NOT NULL,\n	`url` text,\n	`name` text,\n	`attributes` text NOT NULL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL\n);\n"},{tag:"0001_adorable_marten_broadcloak",sql:"ALTER TABLE `audit_events` ADD `input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `output_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.output_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `cache_creation_input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_creation_input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `cache_read_input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_read_input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `model` text GENERATED ALWAYS AS (json_extract(attributes, '$.model')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `provider` text GENERATED ALWAYS AS (json_extract(attributes, '$.provider')) VIRTUAL;--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_session_type` ON `audit_events` (`root_session_id`,`started_at`) WHERE event_type = 'llm_call';"},{tag:"0002_groovy_big_bertha",sql:"CREATE TABLE `exceptions` (\n	`id` text PRIMARY KEY NOT NULL,\n	`rule_id` text NOT NULL,\n	`category` text NOT NULL,\n	`value_fingerprint` text NOT NULL,\n	`key_version` integer NOT NULL,\n	`masked_value` text NOT NULL,\n	`scope` text NOT NULL,\n	`expires_at` integer,\n	`max_uses` integer,\n	`use_count` integer DEFAULT 0 NOT NULL,\n	`last_used_at` integer,\n	`justification` text NOT NULL,\n	`conditions` text,\n	`created_by` text NOT NULL,\n	`created_via` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	`revoked_at` integer,\n	`revoked_by` text,\n	`revoke_reason` text\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_exceptions_active` ON `exceptions` (`rule_id`,`value_fingerprint`,`key_version`) WHERE revoked_at IS NULL;"},{tag:"0003_rich_sage",sql:"CREATE TABLE `egress_decision_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text NOT NULL,\n	`decision` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override` ON `egress_decision_override` (`destination_id`);--\x3e statement-breakpoint\nCREATE TABLE `file_access_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`project_id` text NOT NULL,\n	`path` text NOT NULL,\n	`access` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_file_access_override_project` ON `file_access_override` (`project_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_file_access_override` ON `file_access_override` (`project_id`,`path`);--\x3e statement-breakpoint\nCREATE TABLE `harness_asset` (\n	`id` text PRIMARY KEY NOT NULL,\n	`harness_id` text NOT NULL,\n	`asset_id` text NOT NULL,\n	`created_at` integer NOT NULL,\n	FOREIGN KEY (`harness_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`asset_id`) REFERENCES `inventory_asset`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_harness_asset_harness` ON `harness_asset` (`harness_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_harness_asset` ON `harness_asset` (`harness_id`,`asset_id`);--\x3e statement-breakpoint\nCREATE TABLE `inventory_asset` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_type` text NOT NULL,\n	`name` text NOT NULL,\n	`sub` text,\n	`description` text,\n	`flags_json` text DEFAULT '[]' NOT NULL,\n	`meta_json` text DEFAULT '{}' NOT NULL,\n	`trust` text,\n	`tools_json` text,\n	`provenance` text DEFAULT 'scan' NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_asset_type` ON `inventory_asset` (`asset_type`);--\x3e statement-breakpoint\nCREATE TABLE `mcp_trust_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_id` text NOT NULL,\n	`trust` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`asset_id`) REFERENCES `inventory_asset`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_mcp_trust_override` ON `mcp_trust_override` (`asset_id`);--\x3e statement-breakpoint\nCREATE TABLE `project_file` (\n	`id` text PRIMARY KEY NOT NULL,\n	`project_id` text NOT NULL,\n	`path` text NOT NULL,\n	`name` text NOT NULL,\n	`origin` text NOT NULL,\n	`default_access` text NOT NULL,\n	`findings_count` integer DEFAULT 0 NOT NULL,\n	`blocked_at` integer,\n	`note` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_project_file_project` ON `project_file` (`project_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_project_file` ON `project_file` (`project_id`,`path`);--\x3e statement-breakpoint\nCREATE TABLE `share_call_site` (\n	`id` text PRIMARY KEY NOT NULL,\n	`endpoint_id` text NOT NULL,\n	`project` text NOT NULL,\n	`file` text NOT NULL,\n	`line` integer NOT NULL,\n	`snippet` text NOT NULL,\n	`dynamic` integer DEFAULT false NOT NULL,\n	`vendored` integer DEFAULT false NOT NULL,\n	`project_id` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`endpoint_id`) REFERENCES `share_endpoint`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_call_site_endpoint` ON `share_call_site` (`endpoint_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_call_site` ON `share_call_site` (`endpoint_id`,`project`,`file`,`line`);--\x3e statement-breakpoint\nCREATE TABLE `share_destination` (\n	`id` text PRIMARY KEY NOT NULL,\n	`kind` text NOT NULL,\n	`name` text NOT NULL,\n	`host` text NOT NULL,\n	`category` text NOT NULL,\n	`trust` text NOT NULL,\n	`note` text,\n	`network_json` text,\n	`last_seen` integer NOT NULL,\n	`provenance` text DEFAULT 'scan' NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_destination_kind` ON `share_destination` (`kind`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_destination_host` ON `share_destination` (`host`);--\x3e statement-breakpoint\nCREATE TABLE `share_endpoint` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text NOT NULL,\n	`method` text NOT NULL,\n	`transport` text NOT NULL,\n	`url` text NOT NULL,\n	`template` integer DEFAULT false NOT NULL,\n	`data_class` text NOT NULL,\n	`last_seen` integer NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_endpoint_dest` ON `share_endpoint` (`destination_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_endpoint` ON `share_endpoint` (`destination_id`,`method`,`url`);"},{tag:"0004_glorious_mindworm",sql:"CREATE TABLE `available_packs` (\n	`id` text PRIMARY KEY NOT NULL,\n	`namespace` text NOT NULL,\n	`pack_id` text NOT NULL,\n	`version` text NOT NULL,\n	`name` text NOT NULL,\n	`rules_json` text NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_available_packs_pack` ON `available_packs` (`namespace`,`pack_id`);"},{tag:"0005_fast_vindicator",sql:'PRAGMA foreign_keys=OFF;--\x3e statement-breakpoint\nCREATE TABLE `__new_mcp_trust_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_id` text NOT NULL,\n	`trust` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nINSERT INTO `__new_mcp_trust_override`("id", "asset_id", "trust", "created_at", "updated_at") SELECT "id", "asset_id", "trust", "created_at", "updated_at" FROM `mcp_trust_override`;--\x3e statement-breakpoint\nDROP TABLE `mcp_trust_override`;--\x3e statement-breakpoint\nALTER TABLE `__new_mcp_trust_override` RENAME TO `mcp_trust_override`;--\x3e statement-breakpoint\nPRAGMA foreign_keys=ON;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_mcp_trust_override` ON `mcp_trust_override` (`asset_id`);'},{tag:"0006_magenta_flatman",sql:'CREATE TABLE `_pack_write_gate` (\n	`id` integer PRIMARY KEY NOT NULL,\n	`open` integer DEFAULT 0 NOT NULL,\n	CONSTRAINT "ck_pack_write_gate_single_row" CHECK("_pack_write_gate"."id" = 1)\n);\n--\x3e statement-breakpoint\nALTER TABLE `available_packs` ADD `recorded_by` text;--\x3e statement-breakpoint\nINSERT OR IGNORE INTO _pack_write_gate (id, open) VALUES (1, 0);\n--\x3e statement-breakpoint\nCREATE TRIGGER trg_installed_packs_write_gate\nBEFORE UPDATE OF version, name, rules_json ON installed_packs\nWHEN (SELECT open FROM _pack_write_gate WHERE id = 1) IS NOT 1\nBEGIN SELECT RAISE(IGNORE); END;'},{tag:"0007_thick_stick",sql:"CREATE TABLE `finding_resolution` (\n	`id` text PRIMARY KEY NOT NULL,\n	`finding_key` text NOT NULL,\n	`status` text NOT NULL,\n	`method` text NOT NULL,\n	`resolved_at` integer NOT NULL,\n	`evidence` text,\n	`created_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_finding_resolution_key` ON `finding_resolution` (`finding_key`);--\x3e statement-breakpoint\nALTER TABLE `findings` ADD `finding_key` text;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_findings_key` ON `findings` (`finding_key`);"},{tag:"0008_freezing_selene",sql:"ALTER TABLE `findings` ADD `first_detected_at` integer;--\x3e statement-breakpoint\nUPDATE `findings` SET `first_detected_at` = (SELECT `occurred_at` FROM `events` WHERE `events`.`id` = `findings`.`event_id`) WHERE `first_detected_at` IS NULL;"},{tag:"0009_findings_path_expression_index",sql:"-- Custom migration: partial expression index for the resolver's per-path reads.\n--\n-- openAtRestKeysForPath / resolvedAtRestKeysForPath (and the scanner's tier-3\n-- open-key probe) filter at-rest events by\n--   e.kind = 'code_change' AND json_extract(e.metadata, '$.filePath') = :path\n-- once per changed/deleted file on every scan — previously a full events scan\n-- per file. json_extract is deterministic, so SQLite allows it in an index;\n-- the WHERE kind = 'code_change' keeps the index to exactly the rows those\n-- queries can match (in-flight events are never path-addressed).\nCREATE INDEX `idx_events_code_change_path` ON `events` (json_extract(`metadata`, '$.filePath')) WHERE `kind` = 'code_change';\n"},{tag:"0010_events_session_expression_index",sql:"-- Custom migration: partial expression index for session-scoped finding reads.\n--\n-- sessionFindingsCount, the session-scoped listGroupedFindings paths, and the\n-- insert-time session dedup all filter live-capture events by\n--   json_extract(e.metadata, '$.sessionId') = :sessionId\n-- — previously a full findings-join scan with a JSON parse per row. The\n-- IS NOT NULL predicate keeps the index to session-stamped events only (an\n-- equality probe implies non-null, so SQLite still uses it).\nCREATE INDEX `idx_events_session_id` ON `events` (json_extract(`metadata`, '$.sessionId')) WHERE json_extract(`metadata`, '$.sessionId') IS NOT NULL;\n"},{tag:"0011_egress_writer",sql:'-- Stable per-project reconcile key for egress call sites, plus a host-keyed\n-- egress decision override that survives destination pruning.\n--\n-- DROP INDEX IF EXISTS, not a bare DROP: the applier replays a pending\n-- migration\'s non-index statements verbatim, so a store that lost\n-- uq_share_call_site out of band would throw here — and on the plugin hook path\n-- that throw is swallowed fail-open, silently stopping capture.\n--\n-- Existing rows carry the old key\'s discriminator into project_key\n-- (\'legacy:\' || project), so the new unique index is a re-encoding of the old\n-- one and cannot collide on rows the old one allowed. Leaving them on the\n-- column default would collapse two projects\' identical file/line hits onto\n-- one key and abort the whole migration. Writer keys are \'git:\'/\'path:\'-\n-- prefixed, so a backfilled row never collides with a captured one either.\n--\n-- egress_decision_override.destination_id becomes nullable with ON DELETE SET\n-- NULL, which SQLite can only do by rebuilding the table. `host` is ADDed\n-- before the rebuild so the copy has a column to read and so the migration\n-- still presents two probeable columns to the applier\'s evidence check.\nALTER TABLE `share_call_site` ADD `project_key` text DEFAULT \'\' NOT NULL;--\x3e statement-breakpoint\nUPDATE `share_call_site` SET `project_key` = \'legacy:\' || `project`;--\x3e statement-breakpoint\nDROP INDEX IF EXISTS `uq_share_call_site`;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_call_site` ON `share_call_site` (`endpoint_id`,`project_key`,`file`,`line`);--\x3e statement-breakpoint\nCREATE INDEX `idx_share_call_site_project` ON `share_call_site` (`project_key`,`endpoint_id`);--\x3e statement-breakpoint\nALTER TABLE `egress_decision_override` ADD `host` text;--\x3e statement-breakpoint\nPRAGMA foreign_keys=OFF;--\x3e statement-breakpoint\nCREATE TABLE `__new_egress_decision_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text,\n	`host` text,\n	`decision` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE set null\n);\n--\x3e statement-breakpoint\nINSERT INTO `__new_egress_decision_override`("id", "destination_id", "host", "decision", "created_at", "updated_at") SELECT "id", "destination_id", "host", "decision", "created_at", "updated_at" FROM `egress_decision_override`;--\x3e statement-breakpoint\nDROP TABLE `egress_decision_override`;--\x3e statement-breakpoint\nALTER TABLE `__new_egress_decision_override` RENAME TO `egress_decision_override`;--\x3e statement-breakpoint\nPRAGMA foreign_keys=ON;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override` ON `egress_decision_override` (`destination_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override_host` ON `egress_decision_override` (`host`) WHERE `host` IS NOT NULL;\n'},{tag:"0012_handy_the_captain",sql:"ALTER TABLE `inspection_findings` ADD `finding_key` text;--\x3e statement-breakpoint\nALTER TABLE `inspection_findings` ADD `first_detected_at` integer;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_inspection_findings_key` ON `inspection_findings` (`finding_key`);"},{tag:"0013_legacy_history_backfill_support",sql:"-- Legacy-to-generalized backfill support: the schema the resumable\n-- events/findings -> audit_events/inspection_findings copy needs (the row\n-- copy itself runs as a batched post-migration installer, not here — see\n-- @akasecurity/persistence's migrations.ts), plus the audit_events read-path\n-- indexes replacing the ones the legacy events table carried (0009/0010).\n\n-- Tracks how far the batched, resumable copy has advanced through each legacy\n-- table, by rowid, so a copy interrupted mid-run resumes instead of\n-- restarting, and a completed copy is a cheap no-op on every later open.\nCREATE TABLE `legacy_copy_watermark` (\n	`source` text PRIMARY KEY NOT NULL,\n	`last_rowid` integer DEFAULT 0 NOT NULL\n);\n--\x3e statement-breakpoint\n-- Serves the time-range read family that scans a single event_type across a\n-- start/end window (e.g. the Activity timeline) without a full-table scan.\nCREATE INDEX `idx_audit_type_t` ON `audit_events` (`event_type`,`started_at`);\n--\x3e statement-breakpoint\n-- Partial expression index mirroring `idx_events_code_change_path` (0009) for\n-- the generalized audit_events/attributes pair: file-path reads filter\n-- `event_type = 'code_change' AND json_extract(attributes, '$.file_path') = :path`.\nCREATE INDEX `idx_audit_code_change_path` ON `audit_events` (json_extract(`attributes`, '$.file_path')) WHERE `event_type` = 'code_change';\n--\x3e statement-breakpoint\n-- Synthesizes a stub session root (event_type = 'session', no attributes) for\n-- every legacy `events.metadata.sessionId` that has no audit_events row yet.\n-- audit_events.root_session_id is a self-FK, enforced with foreign-key\n-- checking on, and INSERT OR IGNORE does not suppress a foreign-key violation\n-- (only UNIQUE/PK/NOT NULL/CHECK) — so this must run before the events copy\n-- resolves root_session_id, or every session-scoped row's insert fails.\n-- started_at takes the earliest legacy occurred_at recorded under that\n-- session, so the stub root's own timeline position is never later than\n-- anything it will end up parenting.\nINSERT INTO audit_events (id, event_type, root_session_id, started_at)\nSELECT\n	json_extract(metadata, '$.sessionId'),\n	'session',\n	NULL,\n	min(occurred_at)\nFROM events\nWHERE json_valid(metadata)\n	AND json_extract(metadata, '$.sessionId') IS NOT NULL\n	AND json_extract(metadata, '$.sessionId') NOT IN (SELECT id FROM audit_events)\nGROUP BY json_extract(metadata, '$.sessionId');\n"},{tag:"0014_drop_legacy_events_findings",sql:"-- Custom migration: drops the frozen legacy `events`/`findings` tables\n-- (superseded by audit_events/inspection_definitions/inspection_findings) and\n-- replaces them with read-only views of the same name.\n--\n-- persistence's migrations.ts applies this migration ONLY once the batched\n-- history backfill (see runLegacyHistoryBackfill) has fully drained both\n-- tables, and only after copying the live file aside — see\n-- backupBeforeLegacyDrop in packages/persistence/src/migrations.ts. A store\n-- still mid-copy keeps its real tables and this migration stays pending.\n--\n-- The views exist for skew: the `aka` CLI and the Claude Code plugin update\n-- independently against one shared store, so an older, already-installed\n-- binary can open a store a newer binary already dropped these tables on.\n-- Every already-shipped repository constructor prepares its SQL eagerly at\n-- open time, so a bare \"table not found\" would fail the WHOLE open, not just\n-- a findings-specific read — these views keep `prepare()` succeeding so an\n-- old binary's unrelated features keep working; its own reads stay truthful,\n-- and its rare (already fail-open) writes fail at run time instead.\n--\n-- The 0009/0010 expression indexes existed only over the legacy `events`\n-- table; DROP TABLE below would remove them implicitly, but they are\n-- dropped explicitly first so the intent reads clearly. IF EXISTS so a store\n-- that reached here with an index missing out of band (an adopted-tag store\n-- whose physical index was never built) does not throw a deterministic \"no\n-- such index\" out of the fail-open drop path.\nDROP INDEX IF EXISTS `idx_events_code_change_path`;\n--\x3e statement-breakpoint\nDROP INDEX IF EXISTS `idx_events_session_id`;\n--\x3e statement-breakpoint\n-- `findings.event_id` references `events.id` — drop the child first.\nDROP TABLE `findings`;\n--\x3e statement-breakpoint\nDROP TABLE `events`;\n--\x3e statement-breakpoint\n-- Legacy `events` shape, projected from audit_events: `kind`/`occurred_at`/\n-- `source_tool` become real columns again (source_tool round-trips through\n-- the attributes bag, the only place a capture-typed audit row keeps it);\n-- `metadata` is reconstructed as the old camelCase JSON object from the new\n-- snake_case attributes bag, with `root_session_id` folded back in as\n-- `sessionId` (the one legacy metadata key that became a column, never an\n-- attribute, on the new table). Constrained to the four capture kinds so\n-- structural rows (session/run/tool_call/llm_call/source_lookup/config_scan)\n-- never leak into a legacy reader's result set — the old `events` table\n-- never held them either.\nCREATE VIEW `events` AS\nSELECT\n  id,\n  json_extract(attributes, '$.source_tool') AS source_tool,\n  event_type AS kind,\n  started_at AS occurred_at,\n  content_hash,\n  content,\n  -- Plugin-local bookkeeping column that `ensureSyncedAtColumn` adds to the\n  -- real `events` table at open time. A pre-cutover binary runs that probe on\n  -- EVERY open; without this projection its `columnNames('events')` check\n  -- misses `synced_at` and issues `ALTER TABLE events ADD COLUMN` against this\n  -- view, which SQLite rejects (\"Cannot add a column to a view\") — a hard,\n  -- non-fail-open crash of the whole open, the exact skew failure these views\n  -- exist to prevent. Projecting it (always NULL; no reader consumes it)\n  -- short-circuits that ALTER.\n  NULL AS synced_at,\n  json_object(\n    'sessionId', root_session_id,\n    'repo', json_extract(attributes, '$.repo'),\n    'filePath', json_extract(attributes, '$.file_path'),\n    'toolName', json_extract(attributes, '$.tool_name'),\n    'gitignored', json_extract(attributes, '$.gitignored'),\n    'wholeFile', json_extract(attributes, '$.whole_file'),\n    'model', json_extract(attributes, '$.model'),\n    'turnIndex', json_extract(attributes, '$.turn_index'),\n    'correlationId', json_extract(attributes, '$.correlation_id'),\n    'traceId', json_extract(attributes, '$.trace_id'),\n    'exceptionIds', json_extract(attributes, '$.exception_ids')\n  ) AS metadata\nFROM audit_events\nWHERE event_type IN ('prompt', 'response', 'code_change', 'tool_use');\n--\x3e statement-breakpoint\n-- A plain single-row INSERT (the old writer's shape — no ON CONFLICT) is\n-- accepted by prepare() against a view once an INSTEAD OF INSERT trigger\n-- exists, so it fails at run time instead of at open — landing in the same\n-- fail-open path the caller already wraps its write in.\nCREATE TRIGGER `trg_events_ro`\nINSTEAD OF INSERT ON `events`\nBEGIN SELECT RAISE(ABORT, 'events is read-only; write to audit_events instead'); END;\n--\x3e statement-breakpoint\n-- Legacy `findings` shape: rule_id/category/severity come from the joined\n-- inspection_definitions row (the legacy table inlined them per-row; the\n-- generalized schema normalizes them out into the shared definition). A view\n-- has no rowid of its own, so the underlying table's rowid is re-exposed\n-- explicitly under that name — a legacy reader ordering by `f.rowid` would\n-- otherwise fail to resolve the column at all. Joined to audit_events for the\n-- same four-capture-kind constraint as the events view above (a finding\n-- attached to a tool_call/config_scan row never existed in the legacy table\n-- either — see the persistence findings repository's identical predicate).\nCREATE VIEW `findings` AS\nSELECT\n  f.id AS id,\n  f.rowid AS rowid,\n  f.audit_event_id AS event_id,\n  d.rule_id AS rule_id,\n  d.category AS category,\n  d.severity AS severity,\n  f.span_start AS span_start,\n  f.span_end AS span_end,\n  f.masked_match AS masked_match,\n  f.action_taken AS action_taken,\n  f.confidence AS confidence,\n  f.finding_key AS finding_key,\n  f.first_detected_at AS first_detected_at\nFROM inspection_findings f\nJOIN audit_events e ON e.id = f.audit_event_id\nJOIN inspection_definitions d ON d.id = f.inspection_definition_id\nWHERE e.event_type IN ('prompt', 'response', 'code_change', 'tool_use');\n--\x3e statement-breakpoint\n-- Defense in depth only: SQLite refuses to plan ANY upsert against a view\n-- (\"cannot UPSERT a view\") no matter what trigger exists, so this can never\n-- rescue the real legacy writer, which always used\n-- `ON CONFLICT (finding_key) DO UPDATE` — that statement still fails at\n-- prepare() on an old binary, same as it would with no trigger at all. This\n-- only covers a plain-INSERT shape, should one ever exist.\nCREATE TRIGGER `trg_findings_ro`\nINSTEAD OF INSERT ON `findings`\nBEGIN SELECT RAISE(ABORT, 'findings is read-only; write to inspection_findings instead'); END;\n"}];function e(a){return new Date(a).getTime()}function f(a){return new Date(a).toISOString()}function g(a,b){return{input:a,output:b,cacheWrite5m:1.25*a,cacheWrite1h:2*a,cacheRead:.1*a,webSearch:.01}}let h={input:0,output:0,cacheWrite5m:0,cacheWrite1h:0,cacheRead:0,webSearch:0},i={"claude-fable-5":g(10,50),"claude-opus-4-8":g(5,25),"claude-opus-4-7":g(5,25),"claude-opus-4-6":g(5,25),"claude-opus-4-5":g(5,25),"claude-sonnet-5":g(3,15),"claude-sonnet-4-6":g(3,15),"claude-sonnet-4-5":g(3,15),"claude-haiku-4-5":g(1,5)},j={...Object.fromEntries(Object.entries(i).map(([a,b])=>[`anthropic/${a}`,b])),"ollama/*":h,"local/*":h},k={standard:1,batch:.5,priority:1.5},l=Object.keys(i);function m(a){let b=a.replace(/^(us|eu|apac|global)\./,"").replace(/^anthropic[./]/,"").replace(/@[\w-]+$/,"").replace(/-v\d+:\d+$/,"").replace(/:\d+$/,"").replace(/-\d{8}$/,"");for(let a of l)if(b===a)return a;return b}let n={normalizeModelId(a,b){let c=a.trim().toLowerCase();if("ollama"===c||"local"===c)return{provider:c,model:"*"};if("anthropic"===c||"bedrock"===c||"vertex"===c)return{provider:c,model:m(b)};let d=/^anthropic\/(.+)$/.exec(b);return d?.[1]!==void 0?{provider:c,model:m(d[1])}:{provider:c,model:b}},costFor({provider:a,model:b,usage:c}){var d;let e=this.normalizeModelId(a,b),f=j[`${e.provider}/${e.model}`];return void 0===f?null:((c.inputTokens??0)*f.input+(c.outputTokens??0)*f.output+(c.cacheWrite1hTokens??0)*f.cacheWrite1h+(c.cacheWrite5mTokens??0)*f.cacheWrite5m+(c.cacheReadTokens??0)*f.cacheRead)/1e6*(void 0===(d=c.serviceTier)?1:k[d]??1)+(c.webSearchRequests??0)*f.webSearch}};new Intl.NumberFormat("en-US",{notation:"compact",maximumFractionDigits:1});let o=a=>a??0;function p(a,b){let c=new Map;for(let{sessionId:d,attributes:e}of a){let a=e.provider??"unknown",f=e.model??"unknown",g=`${a} ${f}`,h=c.get(d);void 0===h&&(h=new Map,c.set(d,h));let i=h.get(g);void 0===i&&(i={provider:a,model:f,input:0,output:0,cacheCreation:0,cacheRead:0,costUsd:0,priced:!1},h.set(g,i)),i.input+=o(e.input_tokens),i.output+=o(e.output_tokens),i.cacheCreation+=o(e.cache_creation_input_tokens),i.cacheRead+=o(e.cache_read_input_tokens);let j=b.costFor({provider:a,model:f,usage:function(a){let b={inputTokens:o(a.input_tokens),outputTokens:o(a.output_tokens),cacheWrite1hTokens:o(a.ephemeral_1h_input_tokens),cacheWrite5mTokens:o(a.ephemeral_5m_input_tokens),cacheReadTokens:o(a.cache_read_input_tokens),webSearchRequests:o(a.web_search_requests)};return void 0!==a.service_tier&&(b.serviceTier=a.service_tier),b}(e)});null!==j&&(i.costUsd+=j,i.priced=!0)}let d=[];for(let[a,b]of c){let c=[],e=0,f=0,g=!1,h=!1;for(let d of b.values()){let b=d.input+d.output+d.cacheCreation+d.cacheRead;e+=b;let i=d.priced?d.costUsd:null;null===i?h=!0:(g=!0,f+=i),c.push({sessionId:a,model:d.model,provider:d.provider,inputTokens:d.input,outputTokens:d.output,cacheCreation:d.cacheCreation,cacheRead:d.cacheRead,totalTokens:b,estimatedCostUsd:i})}c.sort((a,b)=>b.totalTokens-a.totalTokens),d.push({sessionId:a,rollups:c,totalTokens:e,estimatedCostUsd:g?f:null,costIsPartial:h})}return d.sort((a,b)=>b.totalTokens-a.totalTokens),d}function q(a){let b=new Map,c=0,d=0,e=!1;for(let f of a){for(let a of f.rollups){let c=`${a.provider} ${a.model}`,d=b.get(c);void 0===d&&(d={provider:a.provider,model:a.model,inputTokens:0,outputTokens:0,cacheTokens:0,totalTokens:0,costUsd:0,priced:!1},b.set(c,d)),d.inputTokens+=a.inputTokens,d.outputTokens+=a.outputTokens,d.cacheTokens+=a.cacheCreation+a.cacheRead,d.totalTokens+=a.totalTokens,null===a.estimatedCostUsd?e=!0:(d.costUsd+=a.estimatedCostUsd,d.priced=!0)}c+=f.totalTokens,null!==f.estimatedCostUsd&&(d+=f.estimatedCostUsd),f.costIsPartial&&(e=!0)}return{models:[...b.values()].sort((a,b)=>b.totalTokens-a.totalTokens).map(a=>({provider:a.provider,model:a.model,inputTokens:a.inputTokens,outputTokens:a.outputTokens,cacheTokens:a.cacheTokens,totalTokens:a.totalTokens,estimatedCostUsd:a.priced?a.costUsd:null})),sessionCount:a.length,totalTokens:c,estimatedCostUsd:d,costIsPartial:e}}var r=c(8257),s=c(64985),t=c(97915);let u=r.k5(["pii","financial","secret","phi","code_context","code_flaw","custom","config"]).meta({id:"DetectionCategory"}),v=r.k5(["critical","high","medium","low"]).meta({id:"Severity"}),w=r.k5(["warn","redact","block","allow","log"]).meta({id:"ActionTaken"}),x=w.options,y=r.Ik({start:r.ai().int().nonnegative(),end:r.ai().int().nonnegative()}).meta({id:"Span"}),z=r.Ik({id:r.Os(),eventId:r.Os(),ruleId:r.Yj(),category:u,severity:v,span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)}).meta({id:"Finding"});z.meta({id:"DetectedFinding"});let A=r.k5(["blocked","redacted","warned","allowed","quarantined","monitored"]).meta({id:"FindingAction"}),B=r.k5(["claudecode","claudedesktop","cursor","copilot","chatgpt","api"]).meta({id:"FindingProvider"}),C=r.k5(["secret","pii","source_code","external_share","mcp_server","customer_data","financial","phi","custom"]).meta({id:"FindingCategory"});r.k5(["in-flight","at-rest"]).meta({id:"FindingOrigin"});let D=r.k5(["open","handled","resolved","dismissed"]).meta({id:"FindingStatus"}),E=r.k5(["enforced-in-flight","fixed-at-source","exception","acknowledged","false-positive","redetected"]).meta({id:"ResolutionMethod"}),F=r.Ik({maskedValue:r.Yj(),contextPrefix:r.Yj()}).meta({id:"FindingMatch"}),G=r.Ik({id:r.Yj(),name:r.Yj().nullable()}).meta({id:"FindingDetectionRef"}),H=r.Ik({id:r.Yj(),name:r.Yj()}).meta({id:"FindingPolicyRef"}),I=r.Ik({id:r.Yj(),provider:B,repo:r.Yj(),file:r.Yj(),toolName:r.Yj().optional(),action:A,detectedAt:s.w$(),confidence:r.ai().min(0).max(1),status:D.optional()}).meta({id:"FindingInstance"}),J=r.Ik({id:r.Yj(),category:C,subtype:r.Yj(),severity:v,match:F,detection:G,policy:H,instanceCount:r.ai().int().nonnegative(),providers:r.YO(B),aggregateAction:A.nullable(),latestDetectedAt:s.w$(),instances:r.YO(I),status:D.optional()}).meta({id:"FindingGroup"});r.Ik({findings:r.ai().int().nonnegative(),groups:r.ai().int().nonnegative(),bySeverity:r.Ik({critical:r.ai().int().nonnegative(),high:r.ai().int().nonnegative(),medium:r.ai().int().nonnegative(),low:r.ai().int().nonnegative()})}).meta({id:"FindingStats"});let K=r.Ik({value:r.Yj(),count:r.ai().int().nonnegative()}).meta({id:"FindingFacetItem"}),L=r.Ik({severity:r.YO(K),subtype:r.YO(K),provider:r.YO(K),action:r.YO(K),status:r.YO(K)}).meta({id:"FindingFacets"}),M=50;r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),status:r.YO(D).optional(),q:r.Yj().optional(),sessionId:r.Yj().optional(),groupBy:r.eu("type").optional(),limit:t.ai().int().min(1).max(100).optional(),cursor:r.Yj().optional()}),r.Ik({totals:r.Ik({findings:r.ai().int().nonnegative(),groups:r.ai().int().nonnegative()}),facets:L,items:r.YO(J),nextCursor:r.Yj().nullable(),sessionFirings:r.g1(r.Yj(),r.ai().int().nonnegative()).optional()}).meta({id:"ListGroupedFindingsResponse"}),r.Ik({action:A.exclude(["quarantined"]),instanceId:r.Yj().optional()}).meta({id:"ApplyFindingActionRequest"}),J.meta({id:"ApplyFindingActionResponse"}),r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),q:r.Yj().optional(),format:r.k5(["csv","json"]).optional()}),I.extend({groupId:r.Yj(),category:C,subtype:r.Yj(),severity:v,match:F,detection:G,policy:H}).meta({id:"FindingInstanceDetail"});let N=r.k5(["claudecode","cursor","copilot","codex","windsurf","claudedesktop","chatgpt","api"]).meta({id:"Harness"}),O={"claude-code":"claudecode","claude-desktop":"claudedesktop","github-copilot":"copilot",cursor:"cursor",chatgpt:"chatgpt"},P=r.k5(["host","harness","user","skill","hook","mcp_server","config_file"]).meta({id:"InventoryObjectType"}),Q=r.k5(["session","run","tool_call","llm_call","source_lookup","prompt","response","code_change","tool_use","config_scan"]).meta({id:"AuditEventType"}),R=r.g1(r.Yj(),r.L5());r.Ik({host_name:r.Yj().optional(),os:r.Yj().optional(),os_version:r.Yj().optional(),arch:r.Yj().optional()}).catchall(r.L5()),r.Ik({harness_version:r.Yj().optional(),interface:r.Yj().optional()}).catchall(r.L5()),r.Ik({display_name:r.Yj().optional(),email:r.Yj().optional()}).catchall(r.L5()),r.Ik({source:r.Yj().optional(),version:r.Yj().optional(),description:r.Yj().optional(),updated_at:r.Yj().optional(),scope:r.Yj().optional(),plugin_name:r.Yj().optional()}).catchall(r.L5()),r.Ik({event:r.Yj().optional(),matcher:r.Yj().optional(),command:r.Yj().optional(),scope:r.Yj().optional(),plugin_name:r.Yj().optional(),timeout:r.ai().optional()}).catchall(r.L5()),r.Ik({scope:r.Yj().optional(),transport:r.Yj().optional(),command:r.Yj().optional(),url:r.Yj().optional(),env_keys:r.YO(r.Yj()).optional(),plugin_name:r.Yj().optional(),marketplace:r.Yj().optional(),project:r.Yj().optional()}).catchall(r.L5()),r.Ik({kind:r.Yj().optional(),detail:r.Yj().optional(),scope:r.Yj().optional(),updated_at:r.Yj().optional(),entry_count:r.ai().optional()}).catchall(r.L5());let S=r.Ik({model:r.Yj().optional(),provider:r.Yj().optional(),input_tokens:r.ai().int().nonnegative().optional(),output_tokens:r.ai().int().nonnegative().optional(),cache_creation_input_tokens:r.ai().int().nonnegative().optional(),cache_read_input_tokens:r.ai().int().nonnegative().optional(),ephemeral_1h_input_tokens:r.ai().int().nonnegative().optional(),ephemeral_5m_input_tokens:r.ai().int().nonnegative().optional(),web_search_requests:r.ai().int().nonnegative().optional(),web_fetch_requests:r.ai().int().nonnegative().optional(),service_tier:r.Yj().optional(),stop_reason:r.Yj().optional(),message_id:r.Yj().optional(),uuid:r.Yj().optional(),parent_uuid:r.Yj().optional(),run_key:r.Yj().optional()}).catchall(r.L5());r.Ik({sessionId:r.Yj().min(1),messageId:r.Yj().min(1),parentId:r.Yj().min(1),rootSessionId:r.Yj().min(1),startedAt:s.w$(),attributes:S});let T=r.Ik({tool_name:r.Yj().optional(),tool_use_id:r.Yj().optional(),target:r.Yj().optional(),is_error:r.zM().optional(),input_size:r.ai().int().nonnegative().optional(),output_size:r.ai().int().nonnegative().optional(),uuid:r.Yj().optional(),parent_uuid:r.Yj().optional(),run_key:r.Yj().optional()}).catchall(r.L5());r.Ik({source_tool:r.Yj().optional(),file_path:r.Yj().optional(),repo:r.Yj().optional(),tool_name:r.Yj().optional(),gitignored:r.zM().optional(),whole_file:r.zM().optional(),correlation_id:r.uR().optional(),trace_id:r.Yj().regex(/^[0-9a-f]{32}$/).optional(),exception_ids:r.YO(r.Os()).optional()}).catchall(r.L5());let U=r.Ik({ruleId:r.Yj().min(1),ruleName:r.Yj(),ruleVersion:r.Yj().min(1),category:u,severity:v,span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)});r.Ik({sessionId:r.Yj().min(1),toolUseId:r.Yj().min(1),parentId:r.Yj().min(1),rootSessionId:r.Yj().min(1),startedAt:s.w$(),attributes:T,inspections:r.YO(U).default([])});let V=r.Ik({objectType:P,identityKey:r.Yj().min(1),location:r.Yj().optional(),title:r.Yj().optional(),hostId:r.Yj().optional(),attributes:R.default({})}).meta({id:"InventoryInput"}),W=r.Ik({url:r.Yj().min(1),name:r.Yj().optional(),attributes:R.default({})}).meta({id:"SourceProjectInput"}),X=r.Ik({id:r.Yj().min(1),eventType:Q,startedAt:s.w$(),endedAt:s.w$().optional(),parentId:r.Yj().optional(),rootSessionId:r.Yj().optional(),hostId:r.Yj().optional(),harnessId:r.Yj().optional(),sourceProjectId:r.Yj().optional(),severity:v.optional(),priority:r.Yj().optional(),content:r.Yj().optional(),contentHash:r.Yj().optional(),attributes:R.optional()}).meta({id:"AuditEventInput"});r.Ik({class:r.Yj().min(1),label:r.Yj().optional(),attributes:R.optional()});let Y=r.Ik({ruleId:r.Yj().min(1),version:r.Yj().min(1),name:r.Yj(),category:u,severity:v,definition:r.Yj()});r.Ik({id:r.Yj().min(1),auditEventId:r.Yj().min(1),inspectionDefinitionId:r.Yj().min(1),classifiedDataId:r.Yj().optional(),span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1),findingKey:r.Yj().optional(),firstDetectedAt:s.w$().optional()}),r.Ik({host:V.optional(),harness:V.optional(),project:W.optional()}).meta({id:"InventoryContext"}),r.Ik({hostId:r.Yj().optional(),harnessId:r.Yj().optional(),accountId:r.Yj().optional(),sourceProjectId:r.Yj().optional()}).meta({id:"ResolvedInventory"}),r.Ik({hosts:r.YO(r.Yj()),harnesses:r.YO(r.Yj()),osVersions:r.YO(r.Yj()),projects:r.YO(r.Yj())}).meta({id:"InventoryFacets"});let Z=r.Ik({sessionId:r.Yj(),model:r.Yj(),provider:r.Yj(),inputTokens:r.ai().int().nonnegative(),outputTokens:r.ai().int().nonnegative(),cacheCreation:r.ai().int().nonnegative(),cacheRead:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable()}).meta({id:"TokenRollup"});r.Ik({sessionId:r.Yj(),rollups:r.YO(Z),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable(),costIsPartial:r.zM()});let $=r.Ik({provider:r.Yj(),model:r.Yj(),inputTokens:r.ai().int().nonnegative(),outputTokens:r.ai().int().nonnegative(),cacheTokens:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable()});function _(a){return JSON.stringify(a)}r.Ik({models:r.YO($),sessionCount:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai(),costIsPartial:r.zM()});let aa=r.k5(["active","completed","interrupted","error"]),ab=r.k5(["session","prompt","response","tool","hook","detection","share","permission","commit","error","active"]),ac=r.k5(["detections","shares","inventory"]),ad=r.Ik({id:r.Yj(),occurredAt:s.w$(),kind:ab,title:r.Yj(),detail:r.Yj(),tool:r.Yj().nullable(),severity:v.nullable(),link:ac.nullable(),targetId:r.Yj().nullable(),internal:r.zM(),flagged:r.zM()}).meta({id:"ActivityAuditEvent"}),ae=r.Ik({id:r.Yj(),harness:N,title:r.Yj(),project:r.Yj(),repo:r.Yj(),branches:r.YO(r.Yj()),startedAt:s.w$(),endedAt:s.w$().nullable(),status:aa,turns:r.ai().int().nonnegative(),findings:r.ai().int().nonnegative(),shares:r.ai().int().nonnegative()}).meta({id:"ActivitySessionSummary"});ae.extend({host:r.Yj(),cwd:r.Yj(),models:r.YO(r.Yj()),version:r.Yj(),tokens:Z,tools:r.g1(r.Yj(),r.ai().int().nonnegative()),files:r.YO(r.Yj()),commits:r.ai().int().nonnegative(),events:r.YO(ad)}).meta({id:"ActivitySession"}),r.Ik({tz:r.Yj().optional()});let af=r.Ik({sessionsToday:r.ai().int().nonnegative(),liveNow:r.ai().int().nonnegative(),toolCallsToday:r.ai().int().nonnegative(),findingsToday:r.ai().int().nonnegative(),egressToday:r.ai().int().nonnegative()}).meta({id:"GetActivityStatsResponse"});r.Ik({q:r.Yj().optional(),harness:r.YO(N).optional(),from:r.KC([s.p6(),s.w$()]).optional(),to:r.KC([s.p6(),s.w$()]).optional(),excludeEmpty:r.uE().optional(),limit:t.ai().int().min(1).max(100).default(50),cursor:r.Yj().optional()});let ag=r.Ik({items:r.YO(ae),nextCursor:r.Yj().nullable(),emptyCount:r.ai().int().nonnegative()}).meta({id:"ListActivitySessionsResponse"});r.Ik({limit:t.ai().int().min(1).max(500).default(100),cursor:r.Yj().optional(),order:r.k5(["asc","desc"]).default("asc")}),r.Ik({items:r.YO(ad),nextCursor:r.Yj().nullable()}).meta({id:"ListSessionEventsResponse"}),r.Ik({format:r.k5(["ndjson","json"]).default("ndjson")}),r.Ik({format:r.k5(["csv","json"]).default("csv"),q:r.Yj().optional(),harness:r.YO(N).optional(),from:r.KC([s.p6(),s.w$()]).optional(),to:r.KC([s.p6(),s.w$()]).optional()}),r.Ik({stats:af,sessions:ag}).meta({id:"ActivityOverviewResponse"});let ah=r.k5(["prompt","response","code_change","tool_use"]).meta({id:"EventKind"}),ai=ah.options.map(a=>`'${a}'`).join(","),aj=r.k5(["claude-code","claude-desktop","cursor","chatgpt","github-copilot","cli","unknown"]).meta({id:"SourceTool"}),ak=r.Ik({sessionId:r.Yj().optional(),repo:r.Yj().optional(),filePath:r.Yj().optional(),toolName:r.Yj().optional(),gitignored:r.zM().optional(),wholeFile:r.zM().optional(),model:r.Yj().optional(),turnIndex:r.ai().int().nonnegative().optional(),correlationId:r.uR().optional(),traceId:r.Yj().regex(/^[0-9a-f]{32}$/).optional(),exceptionIds:r.YO(r.Os()).optional()}).meta({id:"EventMetadata"}),al=r.Ik({id:r.Os(),sourceTool:aj,kind:ah,occurredAt:s.w$(),contentHash:r.Yj(),content:r.Yj(),metadata:ak.optional()}).meta({id:"Event"}),am=al.meta({id:"IngestEvent"});r.Ik({events:r.YO(am).min(1).max(100),dedupe:r.eu("content-hash").optional()}).meta({id:"IngestBatch"});let an=r.k5(["project","skill","mcp","hook","config"]).meta({id:"AssetType"}),ao=r.k5(["open","approved","blocked"]).meta({id:"AccessLevel"}),ap=r.k5(["source","public-dep","vendored","config","data","docs","generated"]).meta({id:"Origin"}),aq=r.k5(["known-good","risky","unapproved"]).meta({id:"TrustLevel"}),ar=r.k5(["update","stale","conflict","unknown","change","untracked","risk","findings"]).meta({id:"Flag"}),as=r.k5(["public","private"]).meta({id:"Visibility"}),at=r.k5(["block","redact","warn"]).meta({id:"HarnessEventKind"}),au=r.k5(["claudecode","cursor","codex"]).meta({id:"HarnessId"}),av=r.Ik({open:r.ai().int().nonnegative(),approved:r.ai().int().nonnegative(),blocked:r.ai().int().nonnegative(),total:r.ai().int().nonnegative()}).meta({id:"AccessCounts"}),aw=r.Ik({id:r.Yj(),type:an,name:r.Yj(),sub:r.Yj(),flags:r.YO(ar),trust:aq.optional()}).meta({id:"AssetSummary"}),ax=r.Ik({id:r.Yj(),name:r.Yj(),repo:r.Yj(),visibility:as,language:r.Yj(),policyDefault:ao,updatedAt:s.w$(),accessCounts:av,findingsCount:r.ai().int().nonnegative()}).meta({id:"ProjectSummary"}),ay=r.Ik({type:an,assets:r.YO(aw)}),az=r.Ik({id:au,label:r.Yj(),kind:r.Yj(),version:r.Yj(),sessions:r.ai().int().nonnegative(),assetCount:r.ai().int().nonnegative(),flagCount:r.ai().int().nonnegative(),projects:r.YO(ax),categories:r.YO(ay)}).meta({id:"HarnessSummary"});r.Ik({items:r.YO(az)}).meta({id:"ListHarnessesResponse"});let aA=r.Ik({type:an,total:r.ai().int().nonnegative(),trustRollup:r.Ik({"known-good":r.ai().int().nonnegative(),risky:r.ai().int().nonnegative(),unapproved:r.ai().int().nonnegative()}).partial().strict().optional(),flagRollup:r.Ik({update:r.ai().int().nonnegative(),stale:r.ai().int().nonnegative(),conflict:r.ai().int().nonnegative(),unknown:r.ai().int().nonnegative(),change:r.ai().int().nonnegative(),untracked:r.ai().int().nonnegative(),risk:r.ai().int().nonnegative(),findings:r.ai().int().nonnegative()}).partial().strict(),items:r.YO(aw)}).meta({id:"AssetGroup"});r.Ik({groups:r.YO(aA)}).meta({id:"ListAssetsResponse"});let aB=r.Ik({name:r.Yj(),signature:r.Yj(),description:r.Yj(),write:r.zM(),risk:r.Yj().nullable()}).meta({id:"McpTool"}),aC=r.Ik({id:r.Yj(),title:r.Yj(),note:r.Yj()});aw.extend({description:r.Yj().nullable(),trust:aq.nullable(),meta:r.g1(r.Yj(),r.L5()),finding:aC.nullable(),tools:r.YO(aB).optional()}).meta({id:"AssetDetail"}),r.Ik({items:r.YO(ax)}).meta({id:"ListProjectsResponse"}),r.Ik({attention:r.ai().int().nonnegative(),byType:r.Ik({project:r.ai().int().nonnegative(),skill:r.ai().int().nonnegative(),mcp:r.ai().int().nonnegative(),hook:r.ai().int().nonnegative(),config:r.ai().int().nonnegative()}),harnesses:r.ai().int().nonnegative(),mcpTrust:r.Ik({"known-good":r.ai().int().nonnegative(),risky:r.ai().int().nonnegative(),unapproved:r.ai().int().nonnegative()})}).meta({id:"InventoryStats"});let aD=r.Ik({path:r.Yj(),name:r.Yj(),origin:ap,access:ao,isCustom:r.zM(),findings:r.ai().int().nonnegative(),blockedAt:s.w$().nullable().optional(),note:r.Yj().nullable().optional()}).meta({id:"FileSummary"}),aE=r.Ik({name:r.Yj(),path:r.Yj(),accessCounts:av}).meta({id:"FolderSummary"});r.Ik({project:r.Ik({id:r.Yj(),repo:r.Yj(),visibility:as}),path:r.Yj(),folders:r.YO(aE).optional(),files:r.YO(aD)}).meta({id:"ProjectTreeResponse"}),aD.extend({project:r.Ik({repo:r.Yj(),visibility:as,language:r.Yj(),policyDefault:ao,updatedAt:s.w$()}),findingsRefs:r.YO(r.Ik({id:r.Yj(),title:r.Yj()}))}).meta({id:"FileDetail"}),r.Ik({path:r.Yj(),access:ao}).meta({id:"SetFileAccessBody"}),r.Ik({file:aD,accessCounts:av}).meta({id:"SetFileAccessResponse"}),r.Ik({trust:aq}).meta({id:"SetMcpTrustBody"});let aF=r.Ik({kind:at,title:r.Yj(),detail:r.Yj(),occurredAt:s.w$(),findingId:r.Yj().nullable().optional()}).meta({id:"HarnessEventItem"});r.Ik({counts:r.Ik({block:r.ai().int().nonnegative(),redact:r.ai().int().nonnegative(),warn:r.ai().int().nonnegative()}),items:r.YO(aF)}).meta({id:"HarnessEventsResponse"}),r.Ik({jobId:r.Yj(),startedAt:s.w$()}).meta({id:"RescanResponse"}),r.Ik({repo:r.Yj()}).meta({id:"ConnectProjectBody"}),r.Ik({type:r.YO(an).optional(),q:r.Yj().optional()}),r.Ik({path:r.Yj().optional(),q:r.Yj().optional(),filter:r.k5(["blocked"]).optional()}),r.Ik({path:r.Yj()}),r.Ik({limit:t.ai().int().min(1).max(50).default(7)});let aG=r.k5(["once","temporary","permanent"]),aH=r.Ik({repo:r.Yj().optional(),sourceTool:r.Yj().optional(),provider:r.Yj().optional()}).strict(),aI=r.Ik({id:r.Os(),ruleId:r.Yj(),category:u,valueFingerprint:r.Yj().regex(/^[0-9a-f]{64}$/),keyVersion:r.ai().int().positive(),maskedValue:r.Yj(),scope:aG,expiresAt:s.w$().nullable(),maxUses:r.ai().int().positive().nullable(),useCount:r.ai().int().nonnegative(),lastUsedAt:s.w$().nullable(),justification:r.Yj().min(1),conditions:aH.nullable(),createdBy:r.Yj(),createdVia:r.k5(["cli-approve","cli-add","web-approve","web-add","api","setup-triage"]),createdAt:s.w$(),updatedAt:s.w$(),revokedAt:s.w$().nullable(),revokedBy:r.Yj().nullable(),revokeReason:r.Yj().nullable()}),aJ=aI.pick({id:!0,ruleId:!0,valueFingerprint:!0,keyVersion:!0,expiresAt:!0,maxUses:!0,useCount:!0,conditions:!0});r.k5(["keyword","regex","validator"]).meta({id:"MatcherType"}),r.k5(["safe","quarantined"]).meta({id:"RuleProbeVerdict"});let aK=r.Ik({type:r.eu("keyword"),keywords:r.YO(r.Yj().min(1)).min(1),caseSensitive:r.zM().default(!1)}),aL=r.Ik({type:r.eu("regex"),pattern:r.Yj().min(1).max(2e3),flags:r.Yj().default("gi"),captureGroup:r.ai().int().nonnegative().optional()}).refine(a=>(function(a,b){try{return new RegExp(a,b),!0}catch{return!1}})(a.pattern,a.flags),{message:"pattern/flags do not form a valid JavaScript regular expression",path:["pattern"]}).refine(a=>void 0!==a.captureGroup||!function(a,b){try{let c=new RegExp(a,b.replace(/[gy]/g,""));return c.exec("")?.[0].length===0}catch{return!1}}(a.pattern,a.flags),{message:'a whole-match regex that can match the empty string (e.g. "\\d*", "a?", "(?:)") can hang the matcher — scope the quantifier to a captureGroup, or require at least one character',path:["pattern"]}),aM=r.Ik({type:r.eu("validator"),name:r.k5(["luhn","entropy","ssn-checksum"]),config:r.g1(r.Yj(),r.L5()).optional()}),aN=r.gM("type",[aK,aL,aM]).meta({id:"Matcher"}),aO=r.Ik({extensions:r.YO(r.Yj().regex(/^\.[A-Za-z0-9]+$/)).min(1)}).meta({id:"AppliesTo"}),aP=r.KC([r.Yj(),r.Ik({name:r.Yj(),config:r.g1(r.Yj(),r.L5()).optional()})]).meta({id:"PostValidatorRef"}),aQ=r.Ik({categories:r.YO(u).min(1).optional(),ruleIds:r.YO(r.Yj().min(1)).min(1).optional(),labels:r.YO(r.Yj().min(1)).min(1).optional(),windowChars:r.ai().int().positive().default(160),confidenceBoost:r.ai().min(0).max(.3).optional()}).refine(a=>(a.categories?.length??0)+(a.ruleIds?.length??0)+(a.labels?.length??0)>0,{message:"requiresNearby needs at least one of categories, ruleIds, or labels"}).meta({id:"RequiresNearby"}),aR=r.Ik({label:r.Yj(),text:r.Yj().max(5e4),shouldMatch:r.zM(),filePath:r.Yj().optional(),expectedSpans:r.YO(r.Ik({start:r.ai(),end:r.ai()})).optional()}).meta({id:"RuleFixture"}),aS=r.Ik({specVersion:r.eu(1),id:r.Yj().regex(/^[a-z][a-z0-9-]*\/[a-z][a-z0-9-]*$/),name:r.Yj(),category:u,severity:v,matcher:aN,appliesTo:aO.optional(),postValidators:r.YO(aP).optional(),requiresNearby:aQ.optional(),examples:r.YO(r.Yj()).optional()}).meta({id:"Rule"}),aT=r.Ik({name:r.Yj(),email:r.Rp().optional(),url:r.OZ().optional()}).meta({id:"Author"});r.Ik({specVersion:r.eu(1),id:r.Yj(),name:r.Yj(),version:r.Yj(),rules:r.YO(r.Yj()),description:r.Yj().optional(),author:aT.optional(),license:r.Yj().optional(),sourceUrl:r.OZ().optional()}).meta({id:"PackManifest"});let aU=r.k5(["global","repo","user"]).meta({id:"PolicyScope"}),aV=r.KC([r.Ik({ruleId:r.Yj()}),r.Ik({category:u})]).meta({id:"PolicyTarget"}),aW=r.Ik({id:r.Os(),scope:aU,target:aV,action:w,enabled:r.zM().default(!0),customKeywords:r.YO(r.Yj()).optional(),name:r.Yj().optional()}).meta({id:"Policy"});r.Ik({version:r.Yj(),policies:r.YO(aW),rules:r.YO(aS).optional(),rulesComplete:r.zM().optional(),exceptions:r.YO(aJ).optional(),ruleVersions:r.g1(r.Yj(),r.Yj()).optional(),customKeywords:r.YO(r.Yj()),fetchedAt:s.w$()}).meta({id:"PolicyBundle"});let aX=["config"],aY=u.options.filter(a=>!aX.includes(a)),aZ={secret:"critical",financial:"critical",code_flaw:"critical",pii:"high",phi:"high",custom:"high",code_context:"low",config:"low"},a$=r.k5(["builtin","custom"]).meta({id:"PolicyKind"}),a_=["monitor","warn","redact","block"],a0=r.k5(a_).meta({id:"BuiltinPolicyId"}),a1=a_,a2={monitor:{name:"Monitor",action:"log",description:"Log every match for audit. The request is allowed through untouched."},warn:{name:"Warn",action:"warn",description:"Allow the request, but warn the user inline before it is sent."},redact:{name:"Redact",action:"redact",description:"Automatically strip the matched value from the request, then continue."},block:{name:"Block",action:"block",description:"Refuse the request entirely whenever any rule in this detection matches."}},a3=Object.fromEntries(u.options.map(a=>[a,a2[function(a){if(aX.includes(a))return"monitor";let b=aZ[a];return"critical"===b||"high"===b?"warn":"monitor"}(a)].action])),a4=Object.fromEntries(a_.map(a=>[a,{id:a,...a2[a]}])),a5="monitor";function a6(a){let b=a0.safeParse(a??a5);return a4[b.success?b.data:a5].action}let a7=r.Ik({id:r.Yj(),name:r.Yj(),ruleCount:r.ai().int().nonnegative(),enabled:r.zM()}).meta({id:"UsedByItem"}),a8=r.Ik({id:r.Yj(),kind:a$,name:r.Yj(),enabled:r.zM(),usedByCount:r.ai().int().nonnegative()}).meta({id:"PolicyListItem"});r.Ik({specVersion:r.eu(1),id:r.Yj(),kind:a$,name:r.Yj(),enabled:r.zM(),description:r.Yj(),usedBy:r.YO(a7)}).meta({id:"PolicyDetail"}),r.Ik({policies:r.ai().int().nonnegative(),builtin:r.ai().int().nonnegative(),custom:r.ai().int().nonnegative(),detectionsGoverned:r.ai().int().nonnegative()}).meta({id:"PolicyStatsResponse"}),r.Ik({cursor:r.Yj().optional(),limit:t.ai().int().min(1).max(200).default(50),sourceTool:r.Yj().optional(),kind:r.Yj().optional(),from:s.w$().optional(),to:s.w$().optional()}),r.Ik({items:r.YO(al),nextCursor:r.Yj().nullable()}).meta({id:"ListEventsResponse"}),r.Ik({accepted:r.ai().int().nonnegative(),duplicates:r.ai().int().nonnegative()}).meta({id:"IngestResponse"}),r.Ik({cursor:r.Yj().optional(),limit:t.ai().int().min(1).max(200).default(50),severity:r.Yj().optional(),category:r.Yj().optional(),eventId:r.Os().optional()}),r.Ik({items:r.YO(z),nextCursor:r.Yj().nullable()}).meta({id:"ListFindingsResponse"}),r.Ik({items:r.YO(a8)}).meta({id:"ListPoliciesResponse"}),aW.omit({id:!0}).meta({id:"CreatePolicyRequest"}),aW.partial().required({id:!0}).meta({id:"UpdatePolicyRequest"}),r.Ik({accepted:r.zM()}).meta({id:"RecordAuditEventResponse"}),r.Ik({error:r.Ik({code:r.Yj(),message:r.Yj(),details:r.L5().optional()})}).meta({id:"ErrorResponse"});let a9=r.k5(["user","project","local","plugin"]),ba=r.Ik({name:r.Yj().min(1),source:r.Yj().min(1),scope:a9,pluginName:r.Yj().optional(),version:r.Yj().optional(),description:r.Yj().optional(),updatedAt:s.w$().optional(),location:r.Yj().optional()}),bb=r.Ik({event:r.Yj().min(1),matcher:r.Yj().optional(),command:r.Yj().min(1),timeout:r.ai().optional(),scope:a9,pluginName:r.Yj().optional(),location:r.Yj().optional()}),bc=r.Ik({name:r.Yj().min(1),scope:a9,pluginName:r.Yj().optional(),marketplace:r.Yj().optional(),project:r.Yj().optional(),transport:r.Yj().min(1),command:r.Yj().optional(),url:r.Yj().optional(),envKeys:r.YO(r.Yj()).optional(),location:r.Yj().optional()}),bd=r.Ik({name:r.Yj().min(1),path:r.Yj().min(1),scope:a9,kind:r.Yj().min(1),detail:r.Yj().optional(),entryCount:r.ai().optional(),updatedAt:s.w$().optional()});r.Ik({scannedAt:s.w$(),skills:r.YO(ba),hooks:r.YO(bb),mcpServers:r.YO(bc),configFiles:r.YO(bd),errors:r.YO(r.Ik({source:r.Yj(),reason:r.Yj()}))});let be=r.Ik({ruleId:r.Yj().min(1),version:r.Yj().min(1),span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)});r.Ik({items:r.YO(V),scanEvent:X,definitions:r.YO(Y).optional(),findings:r.YO(be).optional()});let bf=r.Yj().regex(/^[a-z][a-z0-9-]*$/),bg=r.Yj().regex(/^[a-z][a-z0-9-]*$/),bh=r.Yj().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z-.]+)?$/),bi=r.k5(["labs","user","org"]),bj=r.k5(["library"]).meta({id:"OriginEnum"}),bk=r.k5(["all","library","custom","customized","updates"]),bl=r.k5(["new","imported","update"]).meta({id:"LibraryStateEnum"}),bm=r.Ik({all:r.ai().int().nonnegative(),library:r.ai().int().nonnegative(),custom:r.ai().int().nonnegative(),customized:r.ai().int().nonnegative(),updates:r.ai().int().nonnegative()}).meta({id:"DetectionCounts"}),bn=r.Ik({id:r.Yj(),name:r.Yj(),version:bh,enabled:r.zM(),origin:bj,publisher:bf.optional(),publisherKind:bi.optional(),ruleCount:r.ai().int().nonnegative(),namespace:bf,packId:bg,policyId:r.Yj().optional(),latestVersion:bh.optional()}).meta({id:"DetectionListItem"});r.Ik({counts:bm,items:r.YO(bn)}).meta({id:"ListDetectionsResponse"}),r.Ik({filter:bk.optional().default("all"),q:r.Yj().optional()}),r.Ik({detections:r.ai().int().nonnegative(),rules:r.ai().int().nonnegative(),active:r.ai().int().nonnegative(),findingsLast30d:r.ai().int().nonnegative()}).meta({id:"DetectionStats"});let bo=r.Ik({id:r.Yj(),name:r.Yj(),category:u,severity:v,matcher:aN}).meta({id:"DetectionRule"}),bp=r.Ik({available:r.zM(),latestVersion:bh,latestRuleCount:r.ai().int().nonnegative().optional()}).nullable().meta({id:"DetectionUpdate"});r.Ik({id:r.Yj(),name:r.Yj(),version:bh,enabled:r.zM(),origin:bj,publisher:bf.optional(),publisherKind:bi.optional(),ruleCount:r.ai().int().nonnegative(),namespace:bf,packId:bg,description:r.Yj().optional(),editedAt:s.w$(),findingsLast30d:r.ai().int().nonnegative(),latestVersion:bh.nullable().optional(),update:bp,rules:r.YO(bo),modified:r.zM(),policyId:r.Yj().optional()}).meta({id:"DetectionDetail"});let bq=r.Ik({id:r.Yj(),name:r.Yj(),publisher:bf,publisherKind:bi.optional(),category:u.optional(),version:bh,ruleCount:r.ai().int().nonnegative(),description:r.Yj().optional(),updatedAt:s.w$(),state:bl,importedAs:r.Yj().nullable()}).meta({id:"LibraryItem"});function br(a){return{id:`${a.namespace}/${a.packId}`,name:a.name,version:a.version,enabled:a.enabled,origin:"library",namespace:a.namespace,packId:a.packId,ruleCount:a.ruleCount,...null!=a.policyId?{policyId:a.policyId}:{},...null!=a.latestVersion?{latestVersion:a.latestVersion}:{}}}function bs(a,b,c){let d=a.rules.flatMap(a=>{let b=aN.safeParse(a.matcher);return b.success?[{id:a.id,name:a.name,category:a.category,severity:a.severity,matcher:b.data}]:[]});return{id:`${a.namespace}/${a.packId}`,name:a.name,version:a.version,enabled:a.enabled,origin:"library",namespace:a.namespace,packId:a.packId,ruleCount:a.rules.length,editedAt:a.updatedAt.toISOString(),findingsLast30d:b,latestVersion:c?c.latestVersion:null,update:c,rules:d,modified:!1,...null!=a.policyId?{policyId:a.policyId}:{}}}function bt(a){let b=a.indexOf("/");return b<1||b===a.length-1?null:{namespace:a.slice(0,b),packId:a.slice(b+1)}}function bu(a,b){let c=a.filter(a=>null!=a.latestVersion),d={all:a.length,library:a.length,custom:0,customized:0,updates:c.length},e=b.filter,f="custom"===e||"customized"===e?[]:"updates"===e?[...c]:[...a];if(b.q){let a=b.q.toLowerCase();f=f.filter(b=>b.name.toLowerCase().includes(a)||b.packId.toLowerCase().includes(a)||b.namespace.toLowerCase().includes(a))}return f.sort((a,b)=>a.enabled!==b.enabled?a.enabled?-1:1:a.name.localeCompare(b.name)),{counts:d,items:f.map(br)}}r.Ik({categories:r.YO(u),items:r.YO(bq)}).meta({id:"ListLibraryResponse"}),r.Ik({libraryId:r.Yj().refine(a=>/^[^/]+\/[^/]+$/.test(a),{message:"libraryId must be in namespace/packId format"})}).meta({id:"ImportDetectionRequest"});let bv=r.k5(["provider","internal","external","ip"]).meta({id:"DestinationKind"}),bw=r.k5(["https","http","sftp","grpc","smtp","ws","wss"]).meta({id:"Transport"}),bx=r.k5(["secrets","pii","customer","source","telemetry","logs","metrics","none"]).meta({id:"DataClass"}),by=bx.options,bz=r.k5(["recognized","internal","unverified","ip"]).meta({id:"ShareTrustLevel"}),bA=r.k5(["allow","block"]).meta({id:"EgressDecision"}),bB=r.k5(["allowed","blocked","review"]).meta({id:"EgressStatus"}),bC=r.k5(["raw_ip","unverified_domain","plaintext_transport"]).meta({id:"ReviewReason"}),bD=r.k5(["GET","POST","PUT","DELETE","SDK","REF"]).meta({id:"HttpMethod"}),bE=r.Ik({needsReview:r.zM(),reasons:r.YO(bC)}).meta({id:"ReviewInfo"}),bF=r.Ik({port:r.ai().int().nullable(),geo:r.Yj().nullable(),ptr:r.Yj().nullable()}).meta({id:"DestinationNetwork"}),bG=r.Ik({id:r.Yj(),method:bD,transport:bw,url:r.Yj(),template:r.zM(),dataClass:bx,lastSeen:s.w$(),callSiteCount:r.ai().int().nonnegative()}).meta({id:"EndpointSummary"}),bH=r.Ik({id:r.Yj(),project:r.Yj(),file:r.Yj(),line:r.ai().int().nonnegative(),snippet:r.Yj(),dynamic:r.zM(),vendored:r.zM(),projectId:r.Yj().nullable()}).meta({id:"CallSite"}),bI=bG.extend({sites:r.YO(bH)}).meta({id:"EndpointWithSites"}),bJ=r.Ik({id:r.Yj(),kind:bv,name:r.Yj(),host:r.Yj(),category:r.Yj(),trust:bz,status:bB,isCustom:r.zM(),lastSeen:s.w$(),endpointCount:r.ai().int().nonnegative(),callSiteCount:r.ai().int().nonnegative(),transports:r.YO(bw),dataClasses:r.YO(bx),review:bE,network:bF.nullable(),endpoints:r.YO(bG)}).meta({id:"ShareDestinationSummary"});bJ.omit({endpointCount:!0,callSiteCount:!0,endpoints:!0}).extend({note:r.Yj().nullable(),endpoints:r.YO(bI)}).meta({id:"ShareDestinationDetail"});let bK=r.Ik({id:r.Yj(),kind:bv,name:r.Yj(),host:r.Yj(),trust:bz,status:bB,review:bE,topDataClass:bx,callSiteCount:r.ai().int().nonnegative(),lastSeen:s.w$()}).meta({id:"ReviewDestination"}),bL=r.Ik({kind:bv,total:r.ai().int().nonnegative(),items:r.YO(bJ)}).meta({id:"ShareDestinationGroup"});r.Ik({groups:r.YO(bL)}).meta({id:"ListShareDestinationsResponse"}),r.Ik({items:r.YO(bK)}).meta({id:"NeedsReviewResponse"}),r.Ik({destinations:r.ai().int().nonnegative(),endpoints:r.ai().int().nonnegative(),callSites:r.ai().int().nonnegative(),needsReview:r.ai().int().nonnegative(),insecure:r.ai().int().nonnegative(),byKind:r.Ik({provider:r.ai().int().nonnegative(),internal:r.ai().int().nonnegative(),external:r.ai().int().nonnegative(),ip:r.ai().int().nonnegative()}),byTrust:r.Ik({recognized:r.ai().int().nonnegative(),internal:r.ai().int().nonnegative(),unverified:r.ai().int().nonnegative(),ip:r.ai().int().nonnegative()})}).meta({id:"SharesStats"}),r.Ik({decision:bA.nullable()}).meta({id:"SetEgressDecisionBody"}),r.Ik({destination:bJ}).meta({id:"SetEgressDecisionResponse"}),r.Ik({q:r.Yj().optional(),kind:r.YO(bv).optional(),groupBy:r.k5(["destination"]).default("destination"),review:r.uE().default(!1)}),r.Ik({format:r.k5(["csv","json"]).default("csv"),q:r.Yj().optional(),kind:r.YO(bv).optional()});let bM=r.k5(["npm","pypi","go","maven","rubygems","cargo","composer","nuget"]).meta({id:"EgressEcosystem"});r.Ik({id:r.Yj(),name:r.Yj(),category:r.Yj(),hostSuffixes:r.YO(r.Yj()).min(1),apiBase:r.Yj(),defaultDataClasses:r.YO(bx).min(1),sdks:r.jg(bM,r.YO(r.Yj()))}).meta({id:"ProviderRegistryEntry"});let bN=r.Ik({file:r.Yj(),line:r.ai().int().positive(),snippet:r.Yj(),dynamic:r.zM(),vendored:r.zM()}).meta({id:"EgressCallSiteHit"}),bO=r.Ik({host:r.Yj(),kind:bv,name:r.Yj(),category:r.Yj(),trust:bz,network:bF.nullable(),method:bD,transport:bw,url:r.Yj(),template:r.zM(),dataClass:bx,site:bN}).meta({id:"ResolvedEgressHit"}),bP=r.gM("mode",[r.Ik({mode:r.eu("walk"),walkedPrefix:r.Yj()}),r.Ik({mode:r.eu("ledger"),scannedFiles:r.YO(r.Yj()),deletedFiles:r.YO(r.Yj())})]).meta({id:"EgressReconcile"});function bQ(a){return({log:"monitored",block:"blocked",redact:"redacted",warn:"warned",allow:"allowed"})[a]??"allowed"}function bR(a){return O[a]??"api"}r.Ik({projectKey:r.Yj().min(1),project:r.Yj(),projectId:r.Yj().nullable(),reconcile:bP,hits:r.YO(bO)}).meta({id:"RecordProjectEgressInput"}),r.Ik({destinations:r.ai().int().nonnegative(),endpoints:r.ai().int().nonnegative(),callSites:r.ai().int().nonnegative(),truncated:r.zM(),droppedFiles:r.YO(r.Yj()).default([])}).meta({id:"EgressWriteSummary"});let bS=["open","handled","dismissed","resolved"];function bT(a){return"code_change"!==a.kind?"handled":null===a.findingKey?"open":"resolved"===a.latestResolutionStatus?"resolved":"dismissed"===a.latestResolutionStatus?"dismissed":"open"}function bU(a,b={}){let c=b.overrides,d=b.packNames,e=b.aggregates,f=new Map;for(let b of a){let a=f.get(b.ruleId);a?a.push(b):f.set(b.ruleId,[b])}let g=[];for(let[a,b]of f){var h;let f=b.map(a=>{let b=c?.get(a.id)??a.actionTaken;return{id:a.id,provider:bR(a.sourceTool),repo:a.repo,file:a.file,...void 0===a.toolName?{}:{toolName:a.toolName},action:bQ(b),detectedAt:a.occurredAt,confidence:a.confidence,status:a.status}}),i=e?.get(a),j=i?.latestDetectedAt??b.reduce((a,b)=>b.occurredAt>a?b.occurredAt:a,b[0]?.occurredAt??new Date(0).toISOString()),k=new Set,l=(i?[...new Set(i.sourceTools.map(bR))].sort():f.map(a=>a.provider)).filter(a=>!k.has(a)&&(k.add(a),!0)),m=new Set(i?i.actionsTaken.map(bQ):f.map(a=>a.action)),n=1===m.size?[...m][0]??null:null,o=b[0]?.severity??"low",p={id:a,name:d?.get(a)??null},q="code_context"===(h=b[0]?.category??"custom")?"source_code":h,r={id:`category:${q}`,name:q},s={maskedValue:b[0]?.maskedMatch??"",contextPrefix:""},t=function(a){let b=new Set(a.filter(a=>void 0!==a));if(0!==b.size){for(let a of bS)if(b.has(a))return a}}(i?i.statusInputs.map(bT):f.map(a=>a.status)),u={id:a,category:q,subtype:a,severity:o,match:s,detection:p,policy:r,instanceCount:i?.instanceCount??f.length,providers:l,aggregateAction:n,latestDetectedAt:j,instances:f,status:t};i&&(bX.set(u,[...m]),void 0!==i.searchText&&bV.set(u,bW(u,i.searchText))),g.push(u)}return g}let bV=new WeakMap;function bW(a,b){return[a.subtype,a.category,a.match.maskedValue,a.policy.name,a.id,...a.instances.map(a=>a.repo),...a.instances.map(a=>a.file),...a.instances.map(a=>a.toolName?`via ${a.toolName}`:""),...a.instances.map(a=>a.id),...void 0===b?[]:[b]].join(" ").toLowerCase()}let bX=new WeakMap;function bY(a){let b=bX.get(a);if(void 0!==b)return b;let c=[...new Set(a.instances.map(a=>a.action))];return bX.set(a,c),c}function bZ(a,b){let c=new Set(b),d=0;for(let b of a){if(void 0===b.count)return null;c.has(bT(b))&&(d+=b.count)}return d}function b$(a,b){let c=a;if(b.severity&&b.severity.length>0){let a=new Set(b.severity);c=c.filter(b=>a.has(b.severity))}if(b.providers&&b.providers.length>0){let a=new Set(b.providers);c=c.filter(b=>b.providers.some(b=>a.has(b)))}if(b.actions&&b.actions.length>0){let a=new Set(b.actions);c=c.filter(b=>bY(b).some(b=>a.has(b)))}if(b.subtype&&b.subtype.length>0){let a=new Set(b.subtype);c=c.filter(b=>a.has(b.subtype))}if(b.statuses&&b.statuses.length>0){let a=new Set(b.statuses);c=c.filter(b=>void 0!==b.status&&a.has(b.status))}if(b.q){let a=b.q.toLowerCase();c=c.filter(b=>(function(a){let b=bV.get(a);if(void 0!==b)return b;let c=bW(a);return bV.set(a,c),c})(b).includes(a))}return c}let b_={critical:0,high:1,medium:2,low:3};function b0(a){return[...a].sort((a,b)=>{let c=(b_[a.severity]??-1)-(b_[b.severity]??-1);return 0!==c?c:b.latestDetectedAt.localeCompare(a.latestDetectedAt)})}function b1(a,b){let c=b$(a,{providers:b.providers,actions:b.actions,statuses:b.statuses,q:b.q,subtype:b.subtype}),d=new Map;for(let a of c)d.set(a.severity,(d.get(a.severity)??0)+1);let e=b$(a,{actions:b.actions,statuses:b.statuses,q:b.q,subtype:b.subtype,severity:b.severity}),f=new Map;for(let a of e)for(let b of a.providers)f.set(b,(f.get(b)??0)+1);let g=b$(a,{providers:b.providers,statuses:b.statuses,q:b.q,subtype:b.subtype,severity:b.severity}),h=new Map;for(let a of g)for(let b of bY(a))h.set(b,(h.get(b)??0)+1);let i=b$(a,{providers:b.providers,actions:b.actions,statuses:b.statuses,q:b.q,severity:b.severity}),j=new Map;for(let a of i)j.set(a.subtype,(j.get(a.subtype)??0)+1);let k=b$(a,{providers:b.providers,actions:b.actions,q:b.q,subtype:b.subtype,severity:b.severity}),l=new Map;for(let a of k)void 0!==a.status&&l.set(a.status,(l.get(a.status)??0)+1);let m=a=>[...a.entries()].map(([a,b])=>({value:a,count:b}));return{severity:m(d),provider:m(f),action:m(h),subtype:m(j),status:m(l)}}let b2=r.Ik({id:r.Os(),namespace:bf,packId:bg,version:bh,name:r.Yj(),enabled:r.zM().default(!0),policyId:r.Yj().optional()}).meta({id:"InstalledPack"});r.Ik({namespace:bf,packId:bg,version:bh}).meta({id:"InstallPackRequest"}),r.Ik({items:r.YO(b2)}).meta({id:"ListInstalledPacksResponse"}),r.Ik({enabled:r.zM().optional(),policyId:r.Yj().nullable().optional()}).refine(a=>Object.keys(a).some(b=>void 0!==a[b]),{message:"At least one field must be provided"}).meta({id:"PatchInstalledPackRequest"});let b3=r.k5(["standalone"]),b4=r.k5(["redact","warn"]),b5=r.k5(["full","session-only"]),b6=r.Ik({acknowledgedAt:s.w$(),payloadVersion:r.ai().int().positive()}),b7=r.Ik({specVersion:r.ai().int().positive().default(4),runMode:r.vk(a=>"attached"===a?"standalone":a,b3.default("standalone")),policy:b4.default("redact"),historicalAccess:b5.default("session-only"),dataSharesInPlace:r.zM().default(!0),onboardedAt:s.w$().optional(),modelJudgeConsent:b6.optional()});function b8(){return b7.parse({})}function b9(a,b,c){return{id:b,objectType:a.objectType,location:a.location??null,title:a.title??null,hostId:a.hostId??null,attributes:JSON.stringify(a.attributes),firstSeen:c,lastSeen:c}}function ca(a,b,c){return{id:b,url:a.url,name:a.name??null,attributes:JSON.stringify(a.attributes),firstSeen:c,lastSeen:c}}function cb(a){return{id:a.id,parentId:a.parentId??null,rootSessionId:a.rootSessionId??null,eventType:a.eventType,hostId:a.hostId??null,harnessId:a.harnessId??null,sourceProjectId:a.sourceProjectId??null,startedAt:e(a.startedAt),endedAt:a.endedAt?e(a.endedAt):null,severity:a.severity??null,priority:a.priority??null,content:a.content??null,contentHash:a.contentHash??null,attributes:a.attributes?JSON.stringify(a.attributes):null}}function cc(a,b){return{id:b,class:a.class,label:a.label??null,attributes:a.attributes?JSON.stringify(a.attributes):null}}function cd(a,b){return{id:b,ruleId:a.ruleId,name:a.name,category:a.category,severity:a.severity,definition:a.definition,version:a.version}}function ce(a){return{id:a.id,auditEventId:a.auditEventId,inspectionDefinitionId:a.inspectionDefinitionId,classifiedDataId:a.classifiedDataId??null,spanStart:a.span.start,spanEnd:a.span.end,maskedMatch:a.maskedMatch,actionTaken:a.actionTaken,confidence:a.confidence,findingKey:a.findingKey??null,firstDetectedAt:a.firstDetectedAt?e(a.firstDetectedAt):null}}function cf(a){let b=a.metadata;return{source_tool:a.sourceTool,...b?.repo!==void 0?{repo:b.repo}:{},...b?.filePath!==void 0?{file_path:b.filePath}:{},...b?.toolName!==void 0?{tool_name:b.toolName}:{},...b?.gitignored!==void 0?{gitignored:b.gitignored}:{},...b?.wholeFile!==void 0?{whole_file:b.wholeFile}:{},...b?.correlationId!==void 0?{correlation_id:b.correlationId}:{},...b?.traceId!==void 0?{trace_id:b.traceId}:{},...b?.exceptionIds!==void 0?{exception_ids:b.exceptionIds}:{},...b?.model!==void 0?{model:b.model}:{},...b?.turnIndex!==void 0?{turn_index:b.turnIndex}:{}}}function cg(a){return`capture/${a.category}/${a.severity}`}function ch(a){return{ruleId:a.ruleId,version:cg(a),name:a.ruleId,category:a.category,severity:a.severity,definition:JSON.stringify({ruleId:a.ruleId})}}let ci=r.Ik({path:r.Yj().min(1),name:r.Yj().min(1),origin:ap,defaultAccess:ao});r.Ik({files:r.YO(ci),truncated:r.zM(),scannedAt:r.Yj()});let cj=["7d","30d","3m","6m"],ck=r.k5(cj).meta({id:"TimeRange"}),cl={"7d":7,"30d":30,"3m":90,"6m":180},cm=ck.catch("7d");function cn(a){return cm.parse(a)}let co=r.k5(["still-valid","unknown","invalid"]),cp=r.Ik({filePath:r.Yj(),span:y.optional()}).strict(),cq=r.Ik({provider:r.Yj(),maskedToken:r.Yj(),where:cp,state:co,observedAt:s.w$().optional()}).strict();r.Ik({provider:r.Yj(),maskedToken:r.Yj(),consolePath:r.Yj(),occurrenceSpread:r.ai().int().positive()}).strict();let cr=r.k5(["redact-rotation-checklist","redact-only","set-secret-redact","leave"]),cs=r.k5(["first-run","pre-push","secret-scan"]);r.Ik({entrySource:cs}).strict();let ct=r.Ik({id:cr,label:r.Yj()}),cu=r.Ik({kind:r.eu("decision"),entrySource:cs,secretCount:r.ai().int().positive(),prompt:r.Yj(),options:r.PV([ct.extend({id:r.eu("redact-rotation-checklist")}),ct.extend({id:r.eu("redact-only")}),ct.extend({id:r.eu("set-secret-redact")}),ct.extend({id:r.eu("leave")})])}),cv=r.Ik({kind:r.eu("no-decision")});r.gM("kind",[cu,cv]),r.Ik({rules:r.YO(aS).min(1).max(100),text:r.Yj().max(5e4).optional(),fixtures:r.YO(aR).max(200).optional()}).refine(a=>void 0!==a.text||(a.fixtures?.length??0)>0,{message:"Provide `text`, `fixtures`, or both — there must be something to test"}).meta({id:"TestRulesRequest"});let cw=r.Ik({ruleId:r.Yj(),category:u,severity:v,span:y,confidence:r.ai().min(0).max(1),match:r.Yj()}).meta({id:"RuleTestMatch"}),cx=r.Ik({label:r.Yj(),shouldMatch:r.zM(),didMatch:r.zM(),passed:r.zM(),matches:r.YO(cw)}).meta({id:"FixtureResult"});r.Ik({adhoc:r.Ik({matches:r.YO(cw)}).optional(),fixtures:r.YO(cx),summary:r.Ik({total:r.ai().int().nonnegative(),passed:r.ai().int().nonnegative(),failed:r.ai().int().nonnegative()}),unsupportedRuleIds:r.YO(r.Yj())}).meta({id:"TestRulesResponse"});let cy=r.Ik({severity:v,count:r.ai().int().nonnegative(),caught:r.ai().int().nonnegative().optional(),openAtRest:r.ai().int().nonnegative().optional()}).meta({id:"SeveritySummaryItem"});r.Ik({total:r.ai().int().nonnegative(),needsRemediation:r.ai().int().nonnegative().optional(),bySeverity:r.YO(cy)}).meta({id:"SeveritySummaryResponse"}),r.Ik({range:r.k5(cj).default("7d")});let cz=r.k5(["blocked","redacted","warned"]).meta({id:"EnforcementActionKind"}),cA=r.Ik({kind:cz,count:r.ai().int().nonnegative(),delta:r.ai().int()}).meta({id:"EnforcementAction"});r.Ik({range:ck,total:r.ai().int().nonnegative(),actions:r.YO(cA)}).meta({id:"EnforcementActionsResponse"});let cB=r.k5(["day","week"]).meta({id:"TimeseriesGranularity"}),cC=r.Ik({timestamp:s.p6(),critical:r.ai().int().nonnegative(),high:r.ai().int().nonnegative(),medium:r.ai().int().nonnegative()}).meta({id:"FindingsTimeseriesPoint"});r.Ik({range:ck,granularity:cB,points:r.YO(cC)}).meta({id:"FindingsTimeseriesResponse"});let cD=r.Ik({timestamp:s.p6(),bySeverity:r.Ik({critical:r.ai().nonnegative().nullable(),high:r.ai().nonnegative().nullable(),medium:r.ai().nonnegative().nullable(),low:r.ai().nonnegative().nullable()})}).meta({id:"MttrTrendPoint"});r.Ik({range:ck,granularity:cB,points:r.YO(cD)}).meta({id:"MttrTrendResponse"});let cE=r.Ik({findingKey:r.Yj(),ruleId:r.Yj(),severity:v,path:r.Yj(),resolvedAt:s.w$(),detectedAt:s.w$()}).meta({id:"ResolvedFeedItem"});r.Ik({items:r.YO(cE)}).meta({id:"RecentlyResolvedResponse"});let cF=["repo","user"],cG=r.k5(cF).meta({id:"SourceKind"}),cH=r.Ik({id:r.Yj(),name:r.Yj(),kind:cG,findingsCount:r.ai().int().nonnegative()}).meta({id:"TopSource"});r.Ik({range:ck,items:r.YO(cH)}).meta({id:"TopSourcesResponse"}),r.Ik({range:r.k5(cj).default("7d"),limit:t.ai().int().min(1).max(50).default(5),kind:r.k5(cF).optional()});let cI=r.k5(["claudecode","cursor","codex","chatgpt","copilot","api"]).meta({id:"Provider"}),cJ=r.Ik({provider:cI,coverage:r.ai().int().min(0).max(100),supported:r.zM()}).meta({id:"ScanCoverageProvider"});r.Ik({range:ck,providers:r.YO(cJ)}).meta({id:"ScanCoverageResponse"});let cK=r.k5(["repo","user","team","policy","share","rule"]).meta({id:"SubjectType"}),cL=r.Ik({type:cK,id:r.Yj(),label:r.Yj()}).meta({id:"RecommendationSubject"}),cM=r.k5(["apply","navigate"]).meta({id:"RecommendationActionMode"}),cN=r.Ik({mode:cM,type:r.Yj(),label:r.Yj(),href:r.Yj().optional(),policyId:r.Yj().optional(),teamId:r.Yj().optional()}).meta({id:"RecommendationAction"}),cO=r.Ik({id:r.Yj(),category:r.Yj(),severity:v,title:r.Yj(),description:r.Yj(),subjects:r.YO(cL),action:cN}).meta({id:"RecommendedAction"});r.Ik({items:r.YO(cO)}).meta({id:"RecommendedActionsResponse"}),r.Ik({limit:t.ai().int().min(1).max(20).default(3)});let cP=r.Ik({type:r.Yj(),policyId:r.Yj().optional(),teamId:r.Yj().optional()}).meta({id:"AppliedAction"});r.Ik({id:r.Yj(),status:r.eu("applied"),appliedAction:cP}).meta({id:"ApplyRecommendedActionResponse"}),r.Ik({id:r.Yj(),status:r.eu("dismissed")}).meta({id:"DismissRecommendedActionResponse"}),r.Ik({id:r.Yj()}),r.Ik({ruleId:r.Yj(),category:u,severity:v,maskedMatch:r.Yj(),rawMatch:r.Yj(),context:r.Yj(),filePath:r.Yj().optional(),confidence:r.ai().min(0).max(1),id:r.Yj().optional(),valueFingerprint:r.Yj().optional(),keyVersion:r.ai().int().nonnegative().optional()});let cQ=r.Ik({category:u,action:a0,reasoning:r.Yj(),genuineCount:r.ai().int().nonnegative(),fpCount:r.ai().int().nonnegative(),fpIds:r.YO(r.Yj())});r.Ik({perCategory:r.YO(cQ),notes:r.Yj()});let cR=r.Ik({total:r.ai().int().nonnegative(),important:r.ai().int().nonnegative(),routine:r.ai().int().nonnegative()}).refine(a=>a.total===a.important+a.routine,{message:"total must equal important + routine",path:["total"]}),cS=r.Ik({ruleId:r.Yj(),category:u,valueFingerprint:r.Yj(),keyVersion:r.ai().int().nonnegative()}),cT=r.Ik({pattern:r.Yj(),count:r.ai().int().nonnegative(),values:r.YO(cS).min(1)}),cU=r.Ik({category:u,count:r.ai().int().nonnegative(),egress:r.zM()}),cV=r.Ik({counts:cR,routineCategories:r.YO(u),surfacedCategories:r.YO(u),findingKinds:r.YO(cU),posture:r.g1(u,a0),maskedFindings:r.YO(cq).optional(),falsePositivePatterns:r.YO(cT).optional()}),cW=cQ.pick({category:!0,genuineCount:!0,fpCount:!0}).extend({egress:r.zM()});r.Ik({categories:r.YO(cW),posture:r.g1(u,a0)}),r.Ik({frame:cV,copy:r.Yj()}),r.k5(["scan","floor"]);let cX=r.Ik({id:r.k5(["enter-remediation","open-dashboard","not-now"]),label:r.Yj()}),cY=r.PV([cX.extend({id:r.eu("open-dashboard")}),cX.extend({id:r.eu("not-now")})]),cZ=r.PV([cX.extend({id:r.eu("enter-remediation")}),cX.extend({id:r.eu("open-dashboard")}),cX.extend({id:r.eu("not-now")})]);r.Ik({worthALook:r.ai().int().nonnegative(),liveKeys:r.ai().int().nonnegative().optional(),options:r.KC([cY,cZ])}).refine(a=>a.options.some(a=>"enter-remediation"===a.id)===(a.liveKeys??0)>0,{message:"the chain-entry option is present exactly when liveKeys > 0",path:["options"]}).refine(a=>(a.liveKeys??0)<=a.worthALook,{message:"liveKeys is a subset of worthALook and cannot exceed it",path:["liveKeys"]});let c$=new Set(["recognized","internal"]);function c_(a){return c$.has(a)?"allowed":"review"}function c0(a){return"block"===a?"blocked":"allowed"}function c1(a,b){return null===b?c_(a):c0(b)}function c2(a,b){return null!==b&&c0(b)!==c_(a)}function c3(a,b){let c=function(a,b){let c=[];return"ip"===a&&c.push("raw_ip"),"unverified"===a&&c.push("unverified_domain"),(b.includes("http")||b.includes("ws"))&&c.push("plaintext_transport"),c}(a,b);return{needsReview:c.length>0,reasons:c}}function c4(a){return Array.from(new Set(a))}function c5(a){let b=new Set(a);return by.filter(a=>b.has(a))}function c6(a){return c5(a)[0]??"none"}let c7={raw_ip:0,unverified_domain:1,plaintext_transport:2};function c8(a){return 0===a.length?1/0:Math.min(...a.map(a=>c7[a]))}},31934:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>e});var d=c(52809);let e=async a=>[{type:"image/svg+xml",sizes:"any",url:(0,d.fillMetadataSegment)(".",await a.params,"icon.svg")+"?f88cc4549cfe61ae"}]},34452:(a,b,c)=>{"use strict";c.d(b,{JW:()=>i,Lw:()=>k,UD:()=>h,md:()=>g,zn:()=>j});var d=c(60102),e=c(68191),f=c(48421);function g({status:a}){return"active"===a?(0,d.jsxs)("span",{className:"relative flex size-2 shrink-0",title:"Live",children:[(0,d.jsx)("span",{className:"absolute inline-flex h-full w-full animate-ping rounded-full bg-ok opacity-75"}),(0,d.jsx)("span",{className:"relative inline-flex size-2 rounded-full bg-ok"})]}):(0,d.jsx)("span",{className:(0,e.cn)("size-1.5 shrink-0 rounded-full",f.nR[a].dot)})}function h({status:a}){let b=f.nR[a];return(0,d.jsxs)(e.Ex,{variant:b.badge,className:"h-6 gap-1.5",children:[(0,d.jsx)(g,{status:a}),b.label]})}function i({icon:a,children:b}){return(0,d.jsxs)("span",{className:"inline-flex items-center gap-1 whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)(a,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b]})}function j({name:a,n:b,href:c}){let g=f.pS[a]??f.ek,h=(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3 text-text-3"}),a,(0,d.jsx)("span",{className:"tabular-nums text-text",children:b})]}),i="inline-flex items-center gap-1.5 rounded-full border border-border bg-surface-2 py-0.5 px-2 text-xs font-semibold text-text-2";return c?(0,d.jsx)("a",{href:c,title:`Findings captured via ${a}`,className:(0,e.cn)(i,"transition-colors hover:bg-surface-3 hover:text-text"),children:h}):(0,d.jsx)("span",{className:i,children:h})}function k({items:a,mono:b=!1}){return(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.map(a=>(0,d.jsx)("span",{className:(0,e.cn)("rounded-md border border-border bg-surface-2 px-1.5 py-0.5 text-xs text-text",b&&"font-mono"),children:a},a))})}},35433:(a,b,c)=>{"use strict";c.d(b,{CF:()=>i,EI:()=>f,Hf:()=>g,Lh:()=>o,ZX:()=>l,aD:()=>e,pN:()=>h,rL:()=>m});var d=c(80108);let e={https:{label:"HTTPS",icon:d.XA,secure:!0},http:{label:"HTTP",icon:d.fC,secure:!1},sftp:{label:"SFTP",icon:d.JM,secure:!0},grpc:{label:"gRPC",icon:d.hF,secure:!0},smtp:{label:"SMTP",icon:d.K$,secure:!0},ws:{label:"WS",icon:d.fC,secure:!1},wss:{label:"WSS",icon:d.XA,secure:!0}};function f(a){return a.some(a=>!e[a].secure)}let g={secrets:{label:"Secrets",tone:"critical",icon:d.RY},pii:{label:"PII",tone:"high",icon:d.Ey},customer:{label:"Customer data",tone:"high",icon:d.ny},source:{label:"Source code",tone:"low",icon:d.lo},telemetry:{label:"Telemetry",tone:"teal",icon:d.BH},logs:{label:"Logs",tone:"default",icon:d.kp},metrics:{label:"Metrics",tone:"teal",icon:d.np},none:{label:"No payload",tone:"default",icon:d.mo}},h={recognized:{label:"Known provider",tone:"success",icon:d.C1},internal:{label:"Your organization",tone:"primary",icon:d.Zu},unverified:{label:"Unverified domain",tone:"high",icon:d._0},ip:{label:"Raw IP address",tone:"critical",icon:d.rX}},i={provider:"Providers",internal:"Internal & corporate domains",external:"External domains",ip:"Raw IP addresses"},j={raw_ip:"Connects to a raw IP with no reverse DNS",unverified_domain:"Corporate-looking domain not owned by your org",plaintext_transport:"Sends data over a plaintext transport"},k=["raw_ip","unverified_domain","plaintext_transport"];function l(a){let b=k.find(b=>a.includes(b));return b?j[b]:"Needs review"}function m(a){return"ip"===a.kind?"bg-sev-critical-fill text-sev-critical":"external"===a.kind||"unverified"===a.trust?"bg-sev-high-fill text-sev-high":"bg-primary-tint text-primary"}let n=["#2563EB","#7C3AED","#DB2777","#0891B2","#CA8A04","#059669"];function o(a,b){let c=b??a,d=0;for(let a=0;a<c.length;a++)d=31*d+c.charCodeAt(a)>>>0;return{short:function(a){let b=a.trim().split(/[\s.\-_/]+/u).filter(Boolean),c=b[0]??"";if(b.length<=1)return(c.slice(0,2)||"?").toUpperCase();let d=b[1]??"";return((c[0]??"")+(d[0]??"")).toUpperCase()||"?"}(a),color:n[d%n.length]??"#2563EB"}}},36123:(a,b,c)=>{"use strict";c.d(b,{ColumnsMenu:()=>o,FindingsToolbarView:()=>m});var d=c(60102),e=c(68191),f=c(23413),g=c(80108),h=c(48775),i=c(69428);let j=a=>a.charAt(0).toUpperCase()+a.slice(1),k=a=>a in h.x?h.x[a].label:a;function l(a,b,c){let d=new Set(a.map(a=>a.value));return[...a,...b.filter(a=>!d.has(a)).map(a=>({value:a,label:c(a),count:0}))]}function m({facets:a,filters:b,onFiltersChange:c,query:e,onQueryChange:h,findingCount:m,typeCount:o}){let p=new Map(a.severity.map(a=>[a.value,a.count])),q=i.oC.map(a=>({value:a,label:j(a),count:p.get(a)??0})),r=new Map(a.status.map(a=>[a.value,a.count])),s=i.pM.map(a=>({value:a,label:i.B5[a].label,count:r.get(a)??0})),t=l(a.subtype.map(a=>({value:a.value,label:a.value,count:a.count})),b.type,a=>a),u=l(a.provider.map(a=>({value:a.value,label:k(a.value),count:a.count})),b.provider,k),v=l(a.action.map(a=>({value:a.value,label:j(a.value),count:a.count})),b.action,j),w=(a,d)=>{c({...b,[a]:d})};return(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsxs)("div",{className:"relative w-64",children:[(0,d.jsx)(g.WI,{className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{type:"text","aria-label":"Search findings",placeholder:"Search findings…",value:e,onChange:a=>{h(a.target.value)},className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsx)(n,{label:"Severity",options:q,selected:b.severity,onChange:a=>{w("severity",a)}}),(0,d.jsx)(n,{label:"Type",options:t,selected:b.type,onChange:a=>{w("type",a)}}),(0,d.jsx)(n,{label:"Provider",options:u,selected:b.provider,onChange:a=>{w("provider",a)}}),(0,d.jsx)(n,{label:"Action",options:v,selected:b.action,onChange:a=>{w("action",a)}}),(0,d.jsx)(n,{label:"Status",options:s,selected:b.status,onChange:a=>{w("status",a)}}),(0,d.jsx)("span",{className:"h-6 bg-border w-px"}),(0,d.jsxs)("span",{className:"text-sm text-text-3",children:[(0,d.jsx)("span",{className:"font-semibold text-text",children:f.jq.format(m)})," finding",1===m?"":"s"," \xb7"," ",(0,d.jsx)("span",{className:"font-semibold text-text",children:f.jq.format(o)})," type",1===o?"":"s"]})]})}function n({label:a,options:b,selected:c,onChange:f}){let h=c.length>0;return(0,d.jsxs)(e.AM,{children:[(0,d.jsxs)(e.Wv,{className:(0,e.cn)("inline-flex h-8 items-center gap-1.5 rounded-lg border px-3 text-sm font-medium transition-colors cursor-pointer",h?"border-primary bg-primary-tint text-primary":"border-border text-text-2 bg-surface hover:bg-surface-2"),children:[a,h&&(0,d.jsx)("span",{className:"flex size-4 items-center justify-center rounded-full bg-primary text-[10px] font-semibold text-text-inv",children:c.length}),(0,d.jsx)(g.D3,{className:"size-3.5"})]}),(0,d.jsxs)(e.hl,{className:"min-w-52 max-h-80",children:[b.map(a=>{let b=c.includes(a.value);return(0,d.jsxs)("button",{type:"button",onClick:()=>{var b;b=a.value,f(c.includes(b)?c.filter(a=>a!==b):[...c,b])},className:"flex w-full cursor-pointer items-center gap-2 rounded-md px-2 py-1.5 text-left text-sm text-text hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-4 shrink-0 items-center justify-center rounded border",b?"border-primary bg-primary text-text-inv":"border-border"),children:b&&(0,d.jsx)(g.Sr,{className:"size-3"})}),(0,d.jsx)("span",{className:"flex-1",children:a.label}),void 0!==a.count&&(0,d.jsx)("span",{className:"text-xs tabular-nums text-text-3",children:a.count})]},a.value)}),h&&(0,d.jsx)("button",{type:"button",onClick:()=>{f([])},className:"mt-1 flex w-full cursor-pointer items-center rounded-md border-t border-border px-2 py-1.5 text-left text-sm text-text-2 hover:bg-surface-2",children:"Clear"})]})]})}function o({columns:a,visibility:b,onChange:c}){let f=a=>!1!==b[a],h=a.filter(a=>f(a.id)).length;return(0,d.jsxs)(e.AM,{children:[(0,d.jsx)(e.Wv,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",children:[(0,d.jsx)(g.Qf,{})," Columns"]})}),(0,d.jsx)(e.hl,{align:"end",className:"min-w-44 p-1",children:a.map(a=>{let i=f(a.id);return(0,d.jsxs)("button",{type:"button",onClick:()=>{i&&1===h?c({}):c({...b,[a.id]:!i})},className:"flex w-full cursor-pointer items-center gap-2 rounded-md px-2 py-1.5 text-left text-sm text-text hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-4 shrink-0 items-center justify-center rounded border",i?"border-primary bg-primary text-text-inv":"border-border"),children:i&&(0,d.jsx)(g.Sr,{className:"size-3"})}),a.header]},a.id)})})]})}},40677:(a,b,c)=>{"use strict";c.d(b,{ROTATE_CONFIRMATION:()=>g,RotateKeyDialog:()=>h});var d=c(60102),e=c(68191),f=c(83143);let g="rotate";function h({open:a,onOpenChange:b,activePermanent:c,keyVersion:h,onConfirm:i,busy:j,error:k}){let[l,m]=(0,f.useState)("");return(0,d.jsx)(e.lG,{open:a,onOpenChange:a=>{a||m(""),b(a)},children:(0,d.jsxs)(e.Cf,{children:[(0,d.jsxs)(e.c7,{children:[(0,d.jsx)(e.L3,{children:"Rotate the fingerprint key"}),(0,d.jsxs)(e.rr,{children:["Rotation mints a fresh key",null!==h&&` (v${String(h)} → v${String(h+1)})`," and"," ",(0,d.jsx)("strong",{children:"invalidates every existing exception"})," — grants cannot be re-keyed and simply stop matching. They remain listed for audit."]})]}),(0,d.jsxs)(e.R4,{children:[c.length>0&&(0,d.jsxs)("div",{className:"rounded-lg border border-sev-high-fill bg-sev-high-fill p-3",children:[(0,d.jsx)("div",{className:"mb-2 text-label font-semibold uppercase tracking-wider text-sev-high",children:"Active permanent grants that will stop applying"}),(0,d.jsx)("ul",{className:"flex flex-col gap-1",children:c.map(a=>(0,d.jsxs)("li",{className:"font-mono text-xs text-text-2",children:[a.ruleId," \xb7 ",a.maskedValue]},a.id))})]}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:["Type “",g,"” to confirm"]}),(0,d.jsx)(e.pd,{value:l,onChange:a=>{m(a.target.value)},autoComplete:"off"})]}),k&&(0,d.jsx)("p",{className:"text-xs text-sev-critical",children:k})]}),(0,d.jsxs)(e.Es,{children:[(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:()=>{b(!1)},children:"Cancel"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"danger",size:"sm",disabled:l!==g||j,onClick:()=>{i(l)},children:j?"Rotating…":"Rotate key"})]})]})})}},40704:(a,b,c)=>{"use strict";c.d(b,{dtc:()=>D.AddExceptionForm,fu:()=>E.ApproveExceptionDialog,i5F:()=>v.AssetDetail,JRA:()=>J.AvailablePluginsCardView,VBV:()=>F.BlockedLedgerView,Tct:()=>m.ColumnsMenu,spO:()=>e.sp,MXo:()=>M.DataShareDetailView,Imc:()=>N.DataSharesTableView,MFC:()=>p.DetectionDetailView,A7Z:()=>q.DetectionsListView,ppr:()=>w.EmptyState,Gj:()=>G.ExceptionDetailView,Ebj:()=>H.ExceptionsTableView,_GS:()=>o._G,nUY:()=>n.nU,ToP:()=>x.FileDetailDrawer,Wjr:()=>k.FindingDetailView,oHV:()=>l.FindingsTableView,Dmd:()=>m.FindingsToolbarView,y2Z:()=>y.HarnessOverview,mD3:()=>z.m,_c:()=>A.InventoryNav,mLz:()=>o.mL,wO1:()=>r.MatcherModal,t6e:()=>O.NeedsReviewStripView,ece:()=>g,LKE:()=>u.PolicyDetailView,m$d:()=>u.PolicyListView,kLH:()=>B.ProjectPane,sJz:()=>C.RecommendedActionsCardView,nZB:()=>I.RotateKeyDialog,WIv:()=>o.WI,LOI:()=>i.SessionDetailView,md2:()=>j.SessionListView,Zus:()=>o.Zu,k3y:()=>o.k3,$nP:()=>h.TimeRangeSelect,b1W:()=>t.UpdateModal,bnY:()=>K.UpdateStatusCardView,A30:()=>L.WorkspaceSettingsFormView,uv5:()=>o.uv,XgB:()=>s.Xg});var d=c(48844);c(9);var e=c(16463);c(17419);var f=c(60102);function g({title:a,sub:b,actions:c}){return(0,f.jsxs)("div",{className:"flex items-start justify-between gap-4 pb-6",children:[(0,f.jsxs)("div",{children:[(0,f.jsx)("h1",{className:"font-display text-2xl font-semibold text-text",children:a}),b&&(0,f.jsx)("p",{className:"mt-1 text-sm text-text-3",children:b})]}),c&&(0,f.jsx)("div",{className:"flex shrink-0 items-center gap-2",children:c})]})}c(48775),c(3230);var h=c(81860);c(28928),c(43644),c(68191),c(83143),c(61040),c(34452),c(23977),c(10859),c(64846),c(48421);var i=c(10666),j=c(23573);c(90753);var k=c(86900),l=c(62502),m=c(36123),n=c(69428);c(14920);var o=c(80108);c(27527);var p=c(30480),q=c(70930),r=c(77972),s=c(11294);c(67641),c(525);var t=c(60071),u=c(86450),v=c(22576),w=c(54802);c(23601);var x=c(30757),y=c(59990),z=c(50237),A=c(91552),B=c(64162);d.l.sevCritical,d.l.sevHigh,d.l.sevMedium,d.l.sevLow,o.pD,d.l.sevCritical,o.jZ,d.l.primary,o.rX,d.l.sevHigh,c(23413),d.l.sevCritical,d.l.sevHigh,d.l.sevMedium,c(53713);var C=c(11536),D=c(41769),E=c(15041);c(85261);var F=c(95635);c(88731);var G=c(53648),H=c(6282);c(4484);var I=c(40677),J=c(15343),K=c(22789),L=c(64299);c(42552);var M=c(4379),N=c(5493);c(35433);var O=c(31468)},41769:(a,b,c)=>{"use strict";c.d(b,{AddExceptionForm:()=>h});var d=c(60102),e=c(68191),f=c(83143),g=c(85261);function h({rules:a,onSubmit:b,busy:c,error:h}){let[i,j]=(0,f.useState)(""),[k,l]=(0,f.useState)(""),[m,n]=(0,f.useState)(null),[o,p]=(0,f.useState)(""),[q,r]=(0,f.useState)(""),s="permanent"===m,t=""!==i&&""!==k&&null!==m&&""!==o.trim()&&(!s||q===k);return(0,d.jsxs)("div",{className:"flex max-w-xl flex-col gap-4 rounded-xl border border-border bg-surface p-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Detection rule"}),(0,d.jsxs)(e.l6,{value:i,onValueChange:j,children:[(0,d.jsx)(e.bq,{children:(0,d.jsx)(e.yv,{placeholder:"Pick the rule this value matches"})}),(0,d.jsx)(e.gC,{children:a.map(a=>(0,d.jsx)(e.eb,{value:a.id,children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.id})},a.id))})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Value to pre-authorize"}),(0,d.jsx)(e.pd,{type:"password",autoComplete:"off",value:k,onChange:a=>{l(a.target.value)},placeholder:"Pasted once; stored only as a keyed fingerprint + masked preview",className:"font-mono"})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Scope — pick one"}),(0,d.jsx)(g.ScopePicker,{value:m,onChange:n})]}),s&&(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Retype the value to confirm a permanent grant"}),(0,d.jsx)(e.pd,{type:"password",autoComplete:"off",value:q,onChange:a=>{r(a.target.value)},className:"font-mono"})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Reason (required — the audit trail)"}),(0,d.jsx)(e.pd,{value:o,onChange:a=>{p(a.target.value)},placeholder:"Why this value may pass"})]}),h&&(0,d.jsx)("p",{className:"text-xs text-sev-critical",children:h}),(0,d.jsx)("div",{children:(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!t||c,onClick:()=>{m&&b({ruleId:i,value:k,scope:m,reason:o.trim(),...s?{confirmation:q}:{}})},children:c?"Verifying…":"Grant exception"})})]})}},42552:(a,b,c)=>{"use strict";c.d(b,{HD:()=>k,SU:()=>o,UH:()=>n,Wi:()=>m,eV:()=>j,kX:()=>i,xB:()=>l});var d=c(60102),e=c(68191),f=c(80108),g=c(35433);let h={GET:"bg-sev-low-fill text-sev-low",POST:"bg-ok-fill text-ok",PUT:"bg-sev-high-fill text-sev-high",DELETE:"bg-sev-critical-fill text-sev-critical",SDK:"bg-ok-fill text-ok",REF:"bg-sev-medium-fill text-sev-medium"};function i({method:a}){return(0,d.jsx)("span",{className:(0,e.cn)("inline-flex h-5 items-center rounded px-1.5 font-mono text-label leading-none font-bold py-0.5",h[a]),children:a})}function j({transport:a,plain:b}){let c=g.aD[a],f=c.icon;return b?(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1.5 text-xs font-semibold",c.secure?"text-text-2":"text-sev-critical"),children:[(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c.label,!c.secure&&" \xb7 plaintext"]}):(0,d.jsxs)(e.Ex,{variant:c.secure?"default":"critical",children:[(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c.label]})}function k({cls:a}){let b=g.Hf[a],c=b.icon;return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function l({trust:a}){let b=g.pN[a],c=b.icon;return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function m({kind:a,trust:b,name:c,host:h,size:i=34}){if("provider"===a){let{short:a,color:b}=(0,g.Lh)(c,h);return(0,d.jsx)("span",{className:"inline-flex shrink-0 items-center justify-center rounded-lg font-display font-semibold text-white",style:{width:i,height:i,background:b,fontSize:.34*i},children:a})}let j={width:.5*i,height:.5*i},k="ip"===a?(0,d.jsx)(f.ts,{"aria-hidden":!0,focusable:!1,style:j}):"external"===a||"unverified"===b?(0,d.jsx)(f.ai,{"aria-hidden":!0,focusable:!1,style:j}):(0,d.jsx)(f.RR,{"aria-hidden":!0,focusable:!1,style:j});return(0,d.jsx)("span",{className:(0,e.cn)("grid shrink-0 place-items-center rounded-lg",(0,g.rL)({kind:a,trust:b})),style:{width:i,height:i},children:k})}function n({url:a,big:b}){let c=a.split(/(\$\{[^}]+\})/g);return(0,d.jsx)("span",{className:(0,e.cn)("break-all font-mono",b?"text-ui":"text-xs"),children:c.map((a,b)=>a.startsWith("${")?(0,d.jsx)("span",{className:"rounded bg-primary-tint px-1 font-semibold text-primary",children:a},b):(0,d.jsx)("span",{children:a},b))})}function o(){return(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(f.cZ,{"aria-hidden":!0,focusable:!1,className:"size-2.5"}),"Template"]})}},43644:(a,b,c)=>{"use strict";c.d(b,{e:()=>f,p:()=>g});var d=c(60102),e=c(68191);function f({children:a,className:b}){return(0,d.jsx)("span",{className:(0,e.cn)("mb-2 block text-label font-semibold uppercase tracking-wider text-text-3",b),children:a})}function g({label:a,children:b}){return(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),(0,d.jsx)("div",{className:"text-ui font-medium text-text",children:b})]})}},48421:(a,b,c)=>{"use strict";c.d(b,{$x:()=>g,Ay:()=>e,Oy:()=>k,Tp:()=>l,ek:()=>i,nR:()=>j,ni:()=>m,oo:()=>f,pS:()=>h});var d=c(80108);let e={claudecode:"CLI agent",cursor:"IDE",copilot:"IDE",codex:"CLI agent",windsurf:"IDE",claudedesktop:"Desktop app",chatgpt:"Web app",api:"API"},f=["claudecode","cursor","copilot","codex","windsurf","claudedesktop","chatgpt","api"],g={session:{label:"Session",icon:d.k3,text:"text-text-2",fill:"bg-surface-3"},prompt:{label:"Prompt",icon:d.ny,text:"text-primary",fill:"bg-primary-tint"},response:{label:"Response",icon:d.BZ,text:"text-violet",fill:"bg-violet-fill"},tool:{label:"Tool",icon:d.k3,text:"text-text-2",fill:"bg-surface-3"},hook:{label:"Hook",icon:d.hF,text:"text-sev-low",fill:"bg-sev-low-fill"},detection:{label:"Detection",icon:d.Zu,text:"text-sev-critical",fill:"bg-sev-critical-fill"},share:{label:"Egress",icon:d._G,text:"text-teal",fill:"bg-teal-fill"},permission:{label:"Permission",icon:d.XA,text:"text-sev-high",fill:"bg-sev-high-fill"},commit:{label:"Commit",icon:d.OK,text:"text-text-2",fill:"bg-surface-3"},error:{label:"Error",icon:d._0,text:"text-sev-critical",fill:"bg-sev-critical-fill"},active:{label:"In progress",icon:d.DQ,text:"text-primary",fill:"bg-primary-tint"}},h={Bash:d.k3,Edit:d.qU,Write:d.qU,Read:d.oS,Grep:d.WI,WebFetch:d.fC,Task:d.hF},i=d.k3,j={active:{label:"Live",badge:"success",dot:"bg-ok"},completed:{label:"Completed",badge:"default",dot:"bg-text-3"},interrupted:{label:"Interrupted",badge:"high",dot:"bg-sev-high"},error:{label:"Error",badge:"critical",dot:"bg-sev-critical"}},k={detections:"Findings",shares:"Data Shares",inventory:"Inventory"};function l(a){return Object.entries(a).map(([a,b])=>({name:a,n:b})).sort((a,b)=>b.n-a.n)}function m(a){return Object.values(a).reduce((a,b)=>a+b,0)}},48775:(a,b,c)=>{"use strict";c.d(b,{K:()=>f,x:()=>e});var d=c(60102);let e={claudecode:{label:"Claude Code",short:"CC",color:"#C96442"},claudedesktop:{label:"Claude Desktop",short:"CD",color:"#A8553A"},cursor:{label:"Cursor",short:"Cu",color:"#252F3D"},windsurf:{label:"Windsurf",short:"Wf",color:"#0B8F7B"},codex:{label:"Codex CLI",short:"Cx",color:"#10A37F"},copilot:{label:"GitHub Copilot",short:"Co",color:"#0581D4"},chatgpt:{label:"ChatGPT",short:"GP",color:"#0d8f6f"},api:{label:"Anthropic API",short:"AP",color:"#6058E9"}};function f({id:a,size:b=24}){let c=e[a];return(0,d.jsx)("span",{className:"flex shrink-0 items-center justify-center rounded-lg font-display font-bold text-white",style:{width:b,height:b,background:c.color,fontSize:.36*b},children:c.short})}},48844:(a,b,c)=>{"use strict";c.d(b,{l:()=>d});let d={primary:"var(--color-primary)",ok:"var(--color-ok)",violet:"var(--color-violet)",teal:"var(--color-teal)",sevCritical:"var(--color-sev-critical)",sevHigh:"var(--color-sev-high)",sevMedium:"var(--color-sev-medium)",sevLow:"var(--color-sev-low)",surface:"var(--color-surface)",surface3:"var(--color-surface-3)",border:"var(--color-border)",text2:"var(--color-text-2)",text3:"var(--color-text-3)"}},50237:(a,b,c)=>{"use strict";c.d(b,{m:()=>h});var d=c(68191),e=c(83143),f=c(80108);let g={alert:f._0,"alert-octagon":f.rX,"arrow-up":f.Kp,bolt:f.DQ,book:f.oS,branch:f.OK,check:f.Sr,"check-circle":f.C1,"chevron-down":f.D3,"chevron-right":f.vK,clock:f.O4,cloud:f.hp,code:f.lo,database:f.bN,edit:f.qU,"external-share":f._G,eye:f.bM,"eye-off":f.aR,file:f.oS,flag:f.iF,folder:f.sj,globe:f.fC,help:f.mo,info:f.mo,layers:f.mL,list:f.kp,lock:f.XA,plus:f.c1,redact:f.jZ,refresh:f.fN,repo:f.SY,route:f.hF,search:f.WI,server:f.RR,settings:f.Ze,"shield-check":f.Zu,"slash-circle":f.pD,sliders:f.Qf,sparkles:f.BZ,swap:f.f6,terminal:f.k3,x:f.uv,"x-circle":f.pD};function h({name:a,className:b}){return(0,e.createElement)(g[a],{"aria-hidden":!0,focusable:!1,className:(0,d.cn)("size-4",b)})}},53648:(a,b,c)=>{"use strict";c.d(b,{ExceptionDetailView:()=>k});var d=c(60102),e=c(68191),f=c(83143),g=c(9),h=c(43644),i=c(85261),j=c(4484);function k({exception:a,onRevoke:b,busy:c,error:k}){let[l,m]=(0,f.useState)(""),n=(0,j.rO)(a);return(0,d.jsxs)("div",{className:"flex flex-col gap-6 rounded-xl border border-border bg-surface p-5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)("span",{className:"font-mono text-sm font-semibold text-text",children:a.id.slice(0,8)}),(0,d.jsx)(i.StateTagFor,{exception:a})]}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-6 gap-y-4 md:grid-cols-3",children:[(0,d.jsx)(h.p,{label:"Rule",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.ruleId})}),(0,d.jsx)(h.p,{label:"Category",children:a.category}),(0,d.jsx)(h.p,{label:"Approved value",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.maskedValue})}),(0,d.jsxs)(h.p,{label:"Scope",children:[j.yr[a.scope],"permanent"===a.scope&&" — until revoked"]}),(0,d.jsx)(h.p,{label:"Expires",children:null===a.expiresAt?"—":(0,g.K)(a.expiresAt)}),(0,d.jsxs)(h.p,{label:"Uses",children:[null===a.maxUses?String(a.useCount):`${String(a.useCount)}/${String(a.maxUses)}`,a.lastUsedAt&&` \xb7 last ${(0,g.K)(a.lastUsedAt)}`]}),(0,d.jsxs)(h.p,{label:"Created",children:[(0,g.K)(a.createdAt)," by ",a.createdBy," via"," ",j.gi[a.createdVia]]}),(0,d.jsx)(h.p,{label:"Key version",children:String(a.keyVersion)}),(0,d.jsx)(h.p,{label:"Fingerprint",children:(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[a.valueFingerprint.slice(0,16),"…"]})})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(h.e,{children:"Justification"}),(0,d.jsx)("p",{className:"text-sm text-text-2",children:a.justification})]}),null!==a.revokedAt&&(0,d.jsxs)("div",{className:"rounded-lg border border-sev-critical-fill bg-sev-critical-fill p-3",children:[(0,d.jsx)(h.e,{className:"text-sev-critical",children:"Revoked"}),(0,d.jsxs)("p",{className:"text-sm text-text-2",children:[(0,g.K)(a.revokedAt)," by ",a.revokedBy??"unknown",a.revokeReason?` — ${a.revokeReason}`:""]})]}),b&&"active"===n&&(0,d.jsxs)("div",{className:"border-t border-border pt-4",children:[(0,d.jsx)(h.e,{children:"Revoke this grant"}),(0,d.jsx)("p",{className:"mb-2 text-xs text-text-3",children:"Revocation is immediate and terminal; the row is retained as audit evidence."}),(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)(e.pd,{value:l,onChange:a=>{m(a.target.value)},placeholder:"Reason (recorded in the audit trail)",className:"max-w-sm"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"danger",size:"sm",disabled:c,onClick:()=>{b(l.trim())},children:"Revoke"})]}),k&&(0,d.jsx)("p",{className:"mt-2 text-xs text-sev-critical",children:k})]})]})}},53713:(a,b,c)=>{"use strict";c.d(b,{MttrTrendCardView:()=>l});var d=c(60102),e=c(68191),f=c(48844),g=c(17419),h=c(80108);function i(a){if(null===a||Number.isNaN(a))return"—";let b=Math.round(Math.max(0,a)/6e4),c=Math.floor(b/1440),d=Math.floor((b-=24*c*60)/60);return(b-=60*d,c>0)?d>0?`${String(c)}d ${String(d)}h`:`${String(c)}d`:d>0?b>0?`${String(d)}h ${String(b)}m`:`${String(d)}h`:`${String(Math.max(1,b))}m`}var j=c(23413);let k=[{key:"critical",label:"Critical",color:f.l.sevCritical},{key:"high",label:"High",color:f.l.sevHigh},{key:"medium",label:"Medium",color:f.l.sevMedium},{key:"low",label:"Low",color:f.l.sevLow}];function l({points:a,isLoading:b,error:c}){let f=a.every(a=>null===a.critical&&null===a.high&&null===a.medium&&null===a.low),l=a.map(a=>({label:a.label,critical:a.critical,high:a.high,medium:a.medium,low:a.low})),m=a.at(-1)??null;return(0,d.jsxs)(e.Zp,{className:"mt-4 shadow-sm xl:mt-5",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{children:(0,d.jsx)(h.O4,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Time to remediate"}),(0,d.jsx)(e.BT,{children:"Mean time from detection to resolution, by severity"})]}),(0,d.jsx)(e.X9,{className:"gap-3 text-xs text-text-2",children:k.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"size-2 rounded-xs",style:{background:a.color}}),a.label,m&&(0,d.jsx)("span",{className:"text-text-3",children:i(m[a.key])})]},a.key))})]}),(0,d.jsx)(e.Wu,{"aria-busy":b,className:"pb-2",children:c?(0,d.jsx)(j.rJ,{message:c}):b?(0,d.jsx)(e.EA,{className:"h-40 w-full"}):f?(0,d.jsx)(j.AW,{message:"No resolved findings in this range."}):(0,d.jsx)(g.AreaChart,{data:l,series:k,height:160,valueFormat:i})})]})}},54802:(a,b,c)=>{"use strict";c.d(b,{AC:()=>k,AJ:()=>n,As:()=>o,EmptyState:()=>i,Kh:()=>q,TJ:()=>s,Vx:()=>m,kx:()=>l,wn:()=>j,yk:()=>r});var d=c(60102),e=c(68191),f=c(23601),g=c(50237);function h({order:a,meta:b,value:c,onChange:f}){return(0,d.jsx)("span",{className:"inline-flex",onClick:a=>{a.stopPropagation()},children:(0,d.jsx)(e.Iz,{value:c,onValueChange:a=>{a&&f(a)},children:a.map(a=>{let f=b[a],h=a===c;return(0,d.jsx)(e.tR,{value:a,title:f.label,className:(0,e.cn)("size-7 flex-none gap-0 px-0 py-0","data-[state=on]:bg-transparent data-[state=on]:text-current data-[state=on]:shadow-none",h?(0,e.cn)(f.fg,f.bg):"text-text-3 hover:text-text-2"),children:(0,d.jsx)(g.m,{name:f.icon})},a)})})})}function i({message:a,icon:b="list",className:c}){return(0,d.jsxs)("div",{className:(0,e.cn)("flex items-center gap-2.5 rounded-lg border border-dashed border-border-strong px-3 py-3.5 text-text-3",c),children:[(0,d.jsx)(g.m,{name:b,className:"size-4 shrink-0"}),(0,d.jsx)("span",{className:"text-xs",children:a})]})}function j({label:a,children:b}){return(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-2 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),b]})}function k({order:a,meta:b,value:c,onChange:f,accentOf:h}){return(0,d.jsx)("div",{className:"flex flex-col gap-2",children:a.map(a=>{let i=b[a],j=a===c;return(0,d.jsxs)("button",{type:"button",onClick:()=>{f(a)},className:(0,e.cn)("flex items-center gap-3 rounded-lg border px-3 py-2.5 text-left cursor-pointer",j?(0,e.cn)(i.bg,"border-current",i.fg):"border-border bg-surface"),children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-8 shrink-0 place-items-center rounded-lg",j?"bg-surface":"bg-surface-2",i.fg),children:(0,d.jsx)(g.m,{name:i.icon,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:(0,e.cn)("text-sm font-semibold",j?i.fg:"text-text"),children:i.label}),(0,d.jsx)("div",{className:"mt-0.5 text-xs text-text-2",children:i.desc})]}),(0,d.jsx)("span",{className:(0,e.cn)("grid size-4.5 shrink-0 place-items-center rounded-full border-[1.5px]",j?(0,e.cn)("border-current text-white",h(i)):"border-border-strong"),children:j&&(0,d.jsx)(g.m,{name:"check",className:"size-3"})})]},a)})})}function l({value:a,onChange:b}){return(0,d.jsx)(h,{order:f.IF,meta:f.Pe,value:a,onChange:b})}function m({value:a}){return(0,d.jsx)("span",{className:(0,e.cn)("min-w-23 whitespace-nowrap text-xs font-semibold",f.Pe[a].fg),children:f.Pe[a].label})}function n({counts:a,className:b}){let c=a.total||1;return(0,d.jsx)("span",{className:(0,e.cn)("flex h-1.5 w-30 overflow-hidden rounded-full bg-surface-3",b),children:f.IF.map(b=>{let e=a[b]/c*100;return e>0?(0,d.jsx)("span",{className:f.Pe[b].bar,style:{width:`${String(e)}%`}},b):null})})}function o({value:a}){let b=f.ZY[a];return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(g.m,{name:b.icon,className:"size-3"}),b.label]})}function p({flag:a,mini:b}){let c=f.lx[a];return(0,d.jsxs)(e.Ex,{variant:c.tone,children:[(0,d.jsx)(g.m,{name:c.icon,className:b?"size-2.5":"size-3"}),b?c.short:c.label]})}function q({flags:a,mini:b}){return 0===a.length?b?null:(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-xs font-semibold text-ok",children:[(0,d.jsx)(g.m,{name:"check-circle",className:"size-3.5"})," OK"]}):(0,d.jsx)("span",{className:"inline-flex flex-wrap items-center gap-1.5",children:a.map(a=>(0,d.jsx)(p,{flag:a,mini:b},a))})}function r({v:a}){return"public"===a?(0,d.jsxs)(e.Ex,{variant:"success",children:[(0,d.jsx)(g.m,{name:"globe",className:"size-3"})," Public"]}):(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(g.m,{name:"lock",className:"size-3"})," Private"]})}function s({origin:a}){let b=f.Gb[a];return(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(g.m,{name:b.icon,className:"size-3"})," ",b.short]})}},55203:(a,b,c)=>{"use strict";c.d(b,{FI:()=>ag,KS:()=>bd,tI:()=>bc,eS:()=>ba,Ji:()=>a8,y9:()=>a9,xR:()=>be});var d=c(77598),e=c(73024),f=c(76760),g=c(79868),h=c(31792);function i(a){return(0,d.createHash)("sha256").update(a).digest("hex")}function j(a){return i((0,h.tTV)(["source_project",a]))}function k(a,b){return i((0,h.tTV)(["inspection_definition",a,b]))}function l(a){return a.replace(/\\/g,"\\\\").replace(/%/g,"\\%").replace(/_/g,"\\_")}function m(a){return Array.from({length:a},()=>"?").join(", ")}function n(a){return`%${l(a)}%`}function o(a){return`(${a.map(a=>`${a} LIKE ? ESCAPE '\\'`).join(" OR ")})`}let p=0;function q(a,b,c="DEFERRED"){if(a.isTransaction){let c=`aka_sp_${String(p+=1)}`;a.exec(`SAVEPOINT ${c}`);try{b(),a.exec(`RELEASE ${c}`)}catch(b){try{a.exec(`ROLLBACK TO ${c}`),a.exec(`RELEASE ${c}`)}catch{}throw b}return}a.exec("IMMEDIATE"===c?"BEGIN IMMEDIATE":"BEGIN");try{b(),a.exec("COMMIT")}catch(b){try{a.exec("ROLLBACK")}catch{}throw b}}function r(a,b,c="DEFERRED"){let d=a.isTransaction;try{return q(a,b,c),!0}catch(b){if(!a.isTransaction&&d)throw b;return!1}}function s(a){process.stderr.write(`[aka] ${a}
+`)}function t(a,b,c){return void 0!==a.prepare("SELECT 1 FROM sqlite_master WHERE type = ? AND name = ? LIMIT 1").get(b,c)}function u(a,b,c){let d=c?.includeGenerated?"table_xinfo":"table_info";return a.prepare(`PRAGMA ${d}(${b})`).all().map(a=>a.name)}function v(a,b){return void 0===b?a.all():Array.isArray(b)?a.all(...b):a.all(b)}function w(a,b){return void 0===b?a.get():Array.isArray(b)?a.get(...b):a.get(b)}function x(a){return 1===a||!0===a}function y(a){let b={};for(let[c,d]of Object.entries(a))b[c]=void 0===d?null:d;return b}function z(a,b,c){return w(a.prepare(b),c)?.n??0}function A(a,b,c){let d=new Map;for(let e of v(a.prepare(b),c))d.set(e.k,e.n);return d}function B(a,b){let c=[];for(let d of a)try{c.push(b(d))}catch{}return c}let C="aka.db";function D(a,b){try{(0,e.chmodSync)(a,b)}catch{}}function E(a){return[`${a}-wal`,`${a}-shm`,`${a}-journal`]}function F(a){try{if((0,e.lstatSync)(a).isSymbolicLink())return}catch{}D(a,384)}function G(a){return"column"===a.kind?`column ${a.table}.${a.name}`:`table ${a.name}`}function H(a){return a.split(/-->\s*statement-breakpoint/).map(a=>a.trim()).filter(a=>a.length>0)}let I="0014_drop_legacy_events_findings",J=[{name:"input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.input_tokens')) VIRTUAL"},{name:"output_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN output_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.output_tokens')) VIRTUAL"},{name:"cache_creation_input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN cache_creation_input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_creation_input_tokens')) VIRTUAL"},{name:"cache_read_input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN cache_read_input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_read_input_tokens')) VIRTUAL"},{name:"model",ddl:"ALTER TABLE audit_events ADD COLUMN model text GENERATED ALWAYS AS (json_extract(attributes, '$.model')) VIRTUAL"},{name:"provider",ddl:"ALTER TABLE audit_events ADD COLUMN provider text GENERATED ALWAYS AS (json_extract(attributes, '$.provider')) VIRTUAL"}];function K(a,b,c,d){let e=function(a,b){let c=a.prepare("SELECT last_rowid AS lastRowid FROM legacy_copy_watermark WHERE source = ?").get(b);return c?.lastRowid??0}(a,b),f=0;for(;f<1e3;){let g=c.all(e,200);if(0===g.length||(q(a,()=>{var c;d(g),e=g[g.length-1]?.rowid??e,c=e,a.prepare(`INSERT INTO legacy_copy_watermark (source, last_rowid) VALUES (?, ?)
+     ON CONFLICT(source) DO UPDATE SET last_rowid = excluded.last_rowid`).run(b,c)},"IMMEDIATE"),f+=g.length,g.length<200))return!0}return!1}function L(a,b){if(null==a)return b;try{return JSON.parse(a)}catch{return b}}function M(a){if(null!=a)try{let b=JSON.parse(a);if("object"==typeof b&&null!==b)return b}catch{}}let N="max(started_at, coalesce(ended_at, started_at))";function O(){try{return Intl.DateTimeFormat().resolvedOptions().timeZone}catch{return"UTC"}}let P={session:"session",prompt:"prompt",response:"response",tool_call:"tool",hook:"hook",detection:"detection",share:"share",permission:"permission",commit:"commit",error:"error",active:"active"};function Q(a){if(!a)return[];let b=L(a,null);return Array.isArray(b)?b:[]}function R(a){let b=h.TUN.safeParse(a);return b.success?b.data:"claudecode"}function S(a,b,c){let d=Math.max(a.started_at,b.lastActivityMs),{status:e,endedAtMs:f}=function(a,b,c){if(a.status){let b=h.PhW.safeParse(a.status);if(b.success)return{status:b.data,endedAtMs:a.ended_at}}return null!==a.ended_at?{status:"completed",endedAtMs:a.ended_at}:b>=c-18e5?{status:"active",endedAtMs:null}:{status:"completed",endedAtMs:b}}(a,d,c);return{id:a.id,harness:R(a.harness),title:a.title||a.project||a.repo||`Session ${a.id.slice(0,8)}`,project:a.project??"",repo:a.repo??"",branches:Q(a.branches),startedAt:(0,h.q11)(a.started_at),endedAt:null===f?null:(0,h.q11)(f),status:e,turns:b.turns,findings:b.findings,shares:b.shares}}function T(a){let b=P[a.event_type];if(!b)return null;let c=a.severity?h.U7X.safeParse(a.severity):null,d=a.link?h.Itg.safeParse(a.link):null;return{id:a.id,occurredAt:(0,h.q11)(a.started_at),kind:b,title:a.title??"",detail:a.detail??"",tool:a.tool,severity:c?.success?c.data:null,link:d?.success?d.data:null,targetId:a.target_id,internal:x(a.internal),flagged:x(a.flagged)}}let U=`
+  id,
+  event_type,
+  started_at,
+  coalesce(content, json_extract(attributes, '$.tool_name')) AS title,
+  coalesce(json_extract(attributes, '$.detail'), json_extract(attributes, '$.target')) AS detail,
+  coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool')) AS tool,
+  json_extract(attributes, '$.severity') AS severity,
+  json_extract(attributes, '$.link') AS link,
+  json_extract(attributes, '$.targetId') AS target_id,
+  json_extract(attributes, '$.internal') AS internal,
+  json_extract(attributes, '$.flagged') AS flagged`,V="event_type = 'session'",W=`EXISTS (
+  SELECT 1 FROM audit_events c
+  WHERE c.root_session_id = audit_events.id
+    AND c.event_type NOT IN ('hook', 'config_scan'))`;class X{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}stats(a){let{startMs:b,endMs:c}=function a(b,c){let d;try{d=new Intl.DateTimeFormat("en-US",{timeZone:b,year:"numeric",month:"2-digit",day:"2-digit",hour:"2-digit",minute:"2-digit",second:"2-digit",hourCycle:"h23"}).formatToParts(new Date(c))}catch{let d=O();return b===d?function(a){let b=864e5*Math.floor(a/864e5);return{startMs:b,endMs:b+864e5}}(c):a(d,c)}let e=Object.fromEntries(d.map(a=>[a.type,a.value])),f=Number(e.year),g=Number(e.month),h=Number(e.day),i=Number(e.hour),j=Date.UTC(f,g-1,h,i,Number(e.minute),Number(e.second))-c,k=Date.UTC(f,g-1,h,0,0,0)-j;return{startMs:k,endMs:k+864e5}}(a??O(),this.now()),d=z(this.db,`SELECT count(*) AS n FROM audit_events
+           WHERE ${V} AND started_at >= ? AND started_at < ?
+             AND ${W}`,[b,c]),e=this.now()-18e5,f=z(this.db,`SELECT count(*) AS n FROM audit_events s
+           WHERE s.event_type = 'session' AND s.ended_at IS NULL
+             AND max(
+               s.started_at,
+               coalesce(
+                 (SELECT max(${N}) FROM audit_events e WHERE e.root_session_id = s.id),
+                 s.started_at
+               )
+             ) >= ?`,[e]),g=z(this.db,`SELECT count(*) AS n FROM audit_events
+           WHERE event_type = 'tool_call' AND started_at >= ? AND started_at < ?`,[b,c]);return Promise.resolve({sessionsToday:d,liveNow:f,toolCallsToday:g,findingsToday:z(this.db,`SELECT count(*) AS n FROM inspection_findings f
+           JOIN audit_events e ON e.id = f.audit_event_id
+           WHERE e.started_at >= ? AND e.started_at < ?`,[b,c]),egressToday:z(this.db,`SELECT count(DISTINCT json_extract(attributes, '$.destination')) AS n
+           FROM audit_events
+           WHERE event_type = 'share' AND started_at >= ? AND started_at < ?`,[b,c])})}listSessions(a){var b;let c=a.cursor?function(a){let b=M(Buffer.from(a,"base64url").toString("utf8"));return void 0!==b&&"startedAtMs"in b&&"id"in b&&"number"==typeof b.startedAtMs&&"string"==typeof b.id?b:null}(a.cursor):null,d=a.to?(0,h.I8t)(a.to):this.now(),e=a.from?(0,h.I8t)(a.from):void 0,f=[V],g=[];if(a.harness&&a.harness.length>0&&(f.push(`coalesce(json_extract(attributes, '$.harness'), 'claudecode') IN (${m(a.harness.length)})`),g.push(...a.harness)),void 0!==e&&(f.push("started_at >= ?"),g.push(e)),f.push("started_at <= ?"),g.push(d),a.q){let b=n(a.q);f.push(`(content LIKE ? ESCAPE '\\'
+          OR json_extract(attributes, '$.project') LIKE ? ESCAPE '\\'
+          OR json_extract(attributes, '$.repo') LIKE ? ESCAPE '\\'
+          OR json_extract(attributes, '$.branches') LIKE ? ESCAPE '\\'
+          OR EXISTS (
+            SELECT 1 FROM audit_events d
+            WHERE d.root_session_id = audit_events.id
+              AND (d.content LIKE ? ESCAPE '\\'
+                   OR json_extract(d.attributes, '$.detail') LIKE ? ESCAPE '\\')))`),g.push(b,b,b,b,b,b)}let i=z(this.db,`SELECT count(*) AS n FROM audit_events
+        WHERE ${[...f,`NOT ${W}`].join(" AND ")}`,g);a.excludeEmpty&&f.push(W),c&&(f.push("(started_at < ? OR (started_at = ? AND id < ?))"),g.push(c.startedAtMs,c.startedAtMs,c.id));let j=a.limit,k=v(this.db.prepare(`SELECT id,
+                json_extract(attributes, '$.harness') AS harness,
+                content AS title,
+                json_extract(attributes, '$.project') AS project,
+                json_extract(attributes, '$.repo') AS repo,
+                json_extract(attributes, '$.branches') AS branches,
+                json_extract(attributes, '$.status') AS status,
+                started_at,
+                ended_at
+         FROM audit_events
+         WHERE ${f.join(" AND ")}
+         ORDER BY started_at DESC, id DESC
+         LIMIT ?`),[...g,j+1]),l=k.length>j,o=l?k.slice(0,j):k,p=this.rollupsFor(o.map(a=>a.id)),q=this.now(),r=o.map(a=>S(a,p.get(a.id)??{turns:0,findings:0,shares:0,lastActivityMs:0},q)),s=o[o.length-1];return Promise.resolve({items:r,nextCursor:l&&s?(b={startedAtMs:s.started_at,id:s.id},Buffer.from(JSON.stringify(b)).toString("base64url")):null,emptyCount:i})}getSession(a){let b=w(this.db.prepare(`SELECT id,
+                json_extract(attributes, '$.harness') AS harness,
+                content AS title,
+                json_extract(attributes, '$.project') AS project,
+                json_extract(attributes, '$.repo') AS repo,
+                json_extract(attributes, '$.branches') AS branches,
+                json_extract(attributes, '$.status') AS status,
+                json_extract(attributes, '$.host') AS host,
+                json_extract(attributes, '$.cwd') AS cwd,
+                json_extract(attributes, '$.models') AS models,
+                json_extract(attributes, '$.version') AS version,
+                json_extract(attributes, '$.files') AS files,
+                started_at,
+                ended_at
+         FROM audit_events
+         WHERE id = ? AND event_type = 'session'
+         LIMIT 1`),[a]);if(!b)return Promise.resolve(null);let c=v(this.db.prepare(`SELECT ${U}
+         FROM audit_events
+         WHERE id = ? OR root_session_id = ?
+         ORDER BY started_at ASC, id ASC`),[a,a]).map(T).filter(a=>null!==a),d=w(this.db.prepare(`SELECT
+           coalesce(sum(input_tokens), 0) AS input,
+           coalesce(sum(output_tokens), 0) AS output,
+           coalesce(sum(cache_creation_input_tokens), 0) AS cache_creation,
+           coalesce(sum(cache_read_input_tokens), 0) AS cache_read
+         FROM audit_events
+         WHERE root_session_id = ? AND event_type = 'llm_call'`),[a])??{input:0,output:0,cache_creation:0,cache_read:0},e=w(this.db.prepare(`SELECT model, provider FROM audit_events
+         WHERE root_session_id = ? AND event_type = 'llm_call'
+         ORDER BY started_at ASC, id ASC
+         LIMIT 1`),[a]),f=v(this.db.prepare(`SELECT coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool')) AS tool,
+                count(*) AS n
+         FROM audit_events
+         WHERE root_session_id = ? AND event_type = 'tool_call'
+         GROUP BY coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool'))`),[a]),g=v(this.db.prepare(`SELECT DISTINCT model FROM audit_events
+         WHERE root_session_id = ? AND event_type = 'llm_call' AND model IS NOT NULL AND model <> ''
+         ORDER BY model`),[a]).map(a=>a.model),h=z(this.db,`SELECT count(*) AS n FROM audit_events
+           WHERE root_session_id = ? AND event_type = 'commit'`,[a]),i=this.rollupsFor([a]).get(a)??{turns:0,findings:0,shares:0,lastActivityMs:0},j={sessionId:a,model:e?.model??"",provider:e?.provider??"",inputTokens:d.input,outputTokens:d.output,cacheCreation:d.cache_creation,cacheRead:d.cache_read,totalTokens:d.input+d.output+d.cache_creation+d.cache_read,estimatedCostUsd:null};return Promise.resolve({...S(b,i,this.now()),host:b.host??"",cwd:b.cwd??"",models:g.length>0?g:Q(b.models),version:b.version??"",tokens:j,tools:Object.fromEntries(f.flatMap(a=>a.tool?[[a.tool,a.n]]:[])),files:Q(b.files),commits:h,events:c})}tokenReports(a){let b=this.readLlmCallLeaves(void 0===a?{}:{fromMs:a});return Promise.resolve((0,h.ryv)(b,h.q_t))}tokenReportForSession(a){return Promise.resolve((0,h.ryv)(this.readLlmCallLeaves({sessionId:a}),h.q_t)[0]??null)}harnessFacets(a){let b=v(this.db.prepare(`SELECT DISTINCT coalesce(json_extract(attributes, '$.harness'), 'claudecode') AS harness
+         FROM audit_events WHERE ${V}${void 0===a?"":" AND started_at >= ?"}`),void 0===a?void 0:[a]),c=new Set;for(let a of b)c.add(R(a.harness));return Promise.resolve([...c])}readLlmCallLeaves(a={}){let b=["event_type = 'llm_call'","attributes IS NOT NULL"],c=[];return void 0!==a.sessionId&&(b.push("root_session_id = ?"),c.push(a.sessionId)),void 0!==a.fromMs&&(b.push("started_at >= ?"),c.push(a.fromMs)),B(v(this.db.prepare(`SELECT root_session_id AS sessionId, attributes
+           FROM audit_events
+          WHERE ${b.join(" AND ")}`),c).filter(a=>null!==a.sessionId),a=>({sessionId:a.sessionId,attributes:JSON.parse(a.attributes)}))}rollupsFor(a){let b=new Map(a.map(a=>[a,{turns:0,findings:0,shares:0,lastActivityMs:0}]));if(0===a.length)return b;let c=m(a.length);for(let d of v(this.db.prepare(`SELECT root_session_id AS id, max(${N}) AS m FROM audit_events
+         WHERE root_session_id IN (${c})
+         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&null!==d.m&&(a.lastActivityMs=d.m)}for(let d of v(this.db.prepare(`SELECT root_session_id AS id, count(*) AS n FROM audit_events
+         WHERE root_session_id IN (${c}) AND event_type = 'prompt'
+         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.turns=d.n)}for(let d of v(this.db.prepare(`SELECT root_session_id AS id,
+                count(DISTINCT json_extract(attributes, '$.run_key')) AS n
+         FROM audit_events
+         WHERE root_session_id IN (${c}) AND event_type = 'llm_call'
+           AND json_extract(attributes, '$.run_key') IS NOT NULL
+         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.turns=Math.max(a.turns,d.n))}for(let d of v(this.db.prepare(`SELECT e.root_session_id AS id, count(*) AS n FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         WHERE e.root_session_id IN (${c})
+         GROUP BY e.root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.findings=d.n)}for(let d of v(this.db.prepare(`SELECT root_session_id AS id,
+                count(DISTINCT json_extract(attributes, '$.destination')) AS n
+         FROM audit_events
+         WHERE root_session_id IN (${c}) AND event_type = 'share'
+         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.shares=d.n)}return b}}class Y{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO audit_events
+         (id, parent_id, root_session_id, event_type,
+          host_id, harness_id, source_project_id, started_at, ended_at,
+          severity, priority, content, content_hash, attributes)
+       VALUES
+         (:id, :parentId, :rootSessionId, :eventType,
+          :hostId, :harnessId, :sourceProjectId, :startedAt, :endedAt,
+          :severity, :priority, :content, :contentHash, :attributes)`),this.upsertLlmCallStmt=a.prepare(`INSERT INTO audit_events
+         (id, parent_id, root_session_id, event_type,
+          host_id, harness_id, source_project_id, started_at, ended_at,
+          severity, priority, content, content_hash, attributes)
+       VALUES
+         (:id, :parentId, :rootSessionId, :eventType,
+          :hostId, :harnessId, :sourceProjectId, :startedAt, :endedAt,
+          :severity, :priority, :content, :contentHash, :attributes)
+       ON CONFLICT(id) DO UPDATE SET
+         attributes = excluded.attributes,
+         ended_at   = excluded.ended_at
+       WHERE COALESCE(json_extract(excluded.attributes, '$.output_tokens'), 0)
+           > COALESCE(json_extract(audit_events.attributes, '$.output_tokens'), 0)`)}runInTransaction(a){q(this.db,a)}insertAuditEvent(a){let b=(0,h.V9M)(a);this.insertStmt.run(y({id:b.id,parentId:b.parentId,rootSessionId:b.rootSessionId,eventType:b.eventType,hostId:b.hostId,harnessId:b.harnessId,sourceProjectId:b.sourceProjectId,startedAt:b.startedAt,endedAt:b.endedAt,severity:b.severity,priority:b.priority,content:b.content,contentHash:b.contentHash,attributes:b.attributes}))}ensureSessionRoot(a,b){this.insertAuditEvent({id:a,eventType:"session",startedAt:b})}insertLlmCall(a){var b,c;let d=(0,h.I8t)(a.startedAt);if(!Number.isFinite(d))return;let e=(b=a.sessionId,c=a.messageId,i((0,h.tTV)(["audit_event_llm_call",b,c])));this.upsertLlmCallStmt.run(y({id:e,parentId:a.parentId,rootSessionId:a.rootSessionId,eventType:"llm_call",hostId:null,harnessId:null,sourceProjectId:null,startedAt:d,endedAt:null,severity:null,priority:null,content:null,contentHash:null,attributes:JSON.stringify(a.attributes)}))}insertToolCall(a){var b,c;let d=(0,h.I8t)(a.startedAt);if(!Number.isFinite(d))return;let e=(b=a.sessionId,c=a.toolUseId,i((0,h.tTV)(["audit_event_tool_call",b,c])));this.insertStmt.run(y({id:e,parentId:a.parentId,rootSessionId:a.rootSessionId,eventType:"tool_call",hostId:null,harnessId:null,sourceProjectId:null,startedAt:d,endedAt:null,severity:null,priority:null,content:null,contentHash:null,attributes:JSON.stringify(a.attributes)}))}findById(a){return w(this.db.prepare("SELECT * FROM audit_events WHERE id = :id"),{id:a})}sessionProvider(a){let b=this.findById(a);if(!b?.attributes)return;let c=M(b.attributes)?.provider;if("string"==typeof c)return c}llmCallLeaves(){return v(this.db.prepare(`SELECT root_session_id AS sessionId, attributes
+           FROM audit_events
+          WHERE event_type = 'llm_call' AND attributes IS NOT NULL`))}}class Z{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO classified_data (id, class, label, attributes)
+       VALUES (:id, :class, :label, :attributes)`)}upsert(a){var b;let c=(b=a.class,i((0,h.tTV)(["classified_data",b]))),d=(0,h.$BP)(a,c);return this.insertStmt.run(y({id:d.id,class:d.class,label:d.label,attributes:d.attributes})),c}}function $(a){return w(a.prepare(`SELECT id, started_at, attributes FROM audit_events
+          WHERE event_type = 'config_scan'
+          ORDER BY started_at DESC, id DESC LIMIT 1`))}class _{constructor(a){this.db=a}report(){let a=$(this.db);if(!a)return{scannedAt:null,skills:[],hooks:[],mcpServers:[],configFiles:[],topics:[]};let b=v(this.db.prepare(`SELECT id, object_type AS objectType, title, location, attributes FROM inventory
+          WHERE object_type IN ('skill', 'hook', 'mcp_server', 'config_file') AND last_seen >= :startedAt
+          ORDER BY object_type, title`),{startedAt:a.started_at}),c=v(this.db.prepare(`SELECT f.masked_match AS maskedMatch, d.rule_id AS ruleId, d.name AS name
+           FROM inspection_findings f
+           JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+          WHERE f.audit_event_id = :scanId`),{scanId:a.id}),d=[],e=[],f=[],g=[],h=this.trustOverrides();for(let a of b){let b=M(a.attributes);b&&("skill"===a.objectType?d.push(function(a,b){let c={id:a.id,name:a.title??"(unnamed)",source:aa(b.source)??"unknown",scope:aa(b.scope)??"unknown",status:"unknown"},d=aa(b.description);void 0!==d&&(c.description=d);let e=aa(b.version);void 0!==e&&(c.installedVersion=e);let f=aa(b.updated_at);return void 0!==f&&(c.updatedAt=f),c}(a,b)):"hook"===a.objectType?e.push(function(a,b,c){let d=aa(b.command)??"",e=c.filter(a=>a.maskedMatch===d),f={id:a.id,event:aa(b.event)??"unknown",command:d,scope:aa(b.scope)??"unknown",status:e.some(a=>"hook-external-egress"===a.ruleId)?"egress":e.some(a=>"hook-conflict"===a.ruleId)?"conflict":e.some(a=>"hook-unknown"===a.ruleId)?"unknown":"active",warnings:e.map(a=>a.name)},g=aa(b.matcher);void 0!==g&&(f.matcher=g);let h=aa(b.plugin_name);return void 0!==h&&(f.pluginName=h),f}(a,b,c)):"mcp_server"===a.objectType?f.push(function(a,b,c){let d={id:a.id,name:a.title??"(unnamed)",scope:aa(b.scope)??"unknown",transport:aa(b.transport)??"unknown",trust:c.get(a.id)??"unapproved"},e=aa(b.command);void 0!==e&&(d.command=e);let f=aa(b.url);if(void 0!==f&&(d.url=f),Array.isArray(b.env_keys)){let a=b.env_keys.filter(a=>"string"==typeof a);a.length>0&&(d.envKeys=a)}let g=aa(b.plugin_name);void 0!==g&&(d.pluginName=g);let h=aa(b.marketplace);void 0!==h&&(d.marketplace=h);let i=aa(b.project);return void 0!==i&&(d.project=i),d}(a,b,h)):g.push(function(a,b){let c=aa(b.scope)??"unknown",d={id:a.id,name:a.title??"(unnamed)",path:a.location??"",scope:c,kind:aa(b.kind)??"Configuration file",untracked:"local"===c},e=aa(b.detail);void 0!==e&&(d.detail=e),"number"==typeof b.entry_count&&(d.entryCount=b.entry_count);let f=aa(b.updated_at);return void 0!==f&&(d.updatedAt=f),d}(a,b)))}return{scannedAt:new Date(a.started_at).toISOString(),skills:d,hooks:e,mcpServers:f,configFiles:g,topics:function(a,b,c,d,e){let f=[],g=a.filter(a=>"update_available"===a.status).length,h={topic:"skills",count:a.length};g>0&&(h.attention=`${String(g)} updates`),f.push(h);let i=b.filter(a=>"egress"===a.status).length,j=b.filter(a=>"conflict"===a.status).length,k=b.filter(a=>"unknown"===a.status).length,l=[];i>0&&l.push(`${String(i)} egress`),k>0&&l.push(`${String(k)} unknown`),j>0&&l.push(`${String(j)} conflict${j>1?"s":""}`);let m={topic:"hooks",count:b.length};l.length>0&&(m.attention=l.join(" \xb7 ")),f.push(m);let n=c.filter(a=>"unapproved"===a.trust).length,o={topic:"mcp",count:c.length};n>0&&(o.attention=`${String(n)} unapproved`),f.push(o);let p=d.filter(a=>a.untracked).length,q={topic:"config_files",count:d.length};p>0&&(q.attention=`${String(p)} untracked`),f.push(q);let r=function(a){let b=M(a)?.errors;return"number"==typeof b?b:0}(e),s={topic:"configuration",count:r};return r>0&&(s.attention=`${String(r)} sources failed to parse`),f.push(s),f}(d,e,f,g,a.attributes)}}trustOverrides(){let a=v(this.db.prepare("SELECT asset_id AS assetId, trust FROM mcp_trust_override")),b=new Map;for(let c of a)("known-good"===c.trust||"risky"===c.trust||"unapproved"===c.trust)&&b.set(c.assetId,c.trust);return b}}function aa(a){return"string"==typeof a?a:void 0}function ab(a){let b=L(a,[]);if(!Array.isArray(b))return[];let c=[];for(let a of b)a&&"object"==typeof a&&c.push(a);return c}function ac(a,b){return a.version!==b.version||a.rulesJson!==b.rulesJson}class ad{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}listDetections(a){let b=v(this.db.prepare(`SELECT namespace, pack_id AS packId, version, name, enabled, policy_id AS policyId,
+                rules_json AS rulesJson
+         FROM installed_packs`)),c=this.availableByPack(),d=b.map(a=>{let b=c.get(`${a.namespace}/${a.packId}`);return{namespace:a.namespace,packId:a.packId,version:a.version,name:a.name,enabled:x(a.enabled),ruleCount:ab(a.rulesJson).length,policyId:a.policyId,...b&&ac(a,b)?{latestVersion:b.version}:{}}});return Promise.resolve((0,h.plk)(d,a))}availableByPack(){return new Map(v(this.db.prepare(`SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson
+         FROM available_packs`)).map(a=>[`${a.namespace}/${a.packId}`,a]))}getDetectionStats(){let a=v(this.db.prepare("SELECT enabled, rules_json AS rulesJson FROM installed_packs")),b=0,c=0,d=new Set;for(let e of a){x(e.enabled)&&(c+=1);let a=ab(e.rulesJson);for(let c of(b+=a.length,a))"string"==typeof c.id&&d.add(c.id)}return Promise.resolve({detections:a.length,rules:b,active:c,findingsLast30d:this.countFindingsLast30d([...d])})}getDetectionDetail(a){let b=(0,h.pnU)(a);if(!b)return Promise.resolve(null);let{namespace:c,packId:d}=b,e=w(this.db.prepare(`SELECT namespace, pack_id AS packId, version, name, enabled, policy_id AS policyId,
+                rules_json AS rulesJson, updated_at AS updatedAt
+         FROM installed_packs
+         WHERE namespace = ? AND pack_id = ?`),[c,d]);if(!e)return Promise.resolve(null);let f=ab(e.rulesJson),g=f.map(a=>a.id).filter(a=>"string"==typeof a),i=this.countFindingsLast30d(g),j=this.availableByPack().get(`${e.namespace}/${e.packId}`),k=j?ac(e,j)?{available:!0,latestVersion:j.version,latestRuleCount:ab(j.rulesJson).length}:{available:!1,latestVersion:j.version}:null;return Promise.resolve((0,h.a45)({namespace:e.namespace,packId:e.packId,version:e.version,name:e.name,enabled:x(e.enabled),rules:f,updatedAt:new Date(e.updatedAt),policyId:e.policyId},i,k))}countFindingsLast30d(a){if(0===a.length)return 0;let b=this.now()-2592e6,c=m(a.length);return z(this.db,`SELECT count(*) AS n
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         WHERE e.started_at >= ?
+           AND e.event_type IN (${h.hfB})
+           AND d.rule_id IN (${c})`,[b,...a])}}class ae{constructor(a){this.db=a}contentHashes(){return Promise.resolve(new Set(v(this.db.prepare(`SELECT content_hash FROM audit_events
+         WHERE event_type IN (${h.hfB})`)).map(a=>a.content_hash)))}}class af extends Error{constructor(a){super(`duplicate-active-exception: an active exception already exists for rule "${a}" and this value — revoke it before granting a new one`),this.code="duplicate-active-exception",this.name="DuplicateActiveExceptionError"}}class ag extends Error{constructor(a){super(`ambiguous-exception-id: "${a}" matches more than one exception — add more characters`),this.code="ambiguous-exception-id",this.name="AmbiguousExceptionIdError"}}let ah=`revoked_at IS NULL
+     AND (expires_at IS NULL OR expires_at > :now)
+     AND (max_uses IS NULL OR use_count < max_uses)`;class ai{constructor(a){this.db=a,this.consumeStmt=a.prepare(`UPDATE exceptions
+          SET use_count = use_count + 1, last_used_at = :now, updated_at = :now
+        WHERE id = :id AND ${ah}`),this.insertBlockedStmt=a.prepare(`INSERT OR REPLACE INTO blocked_detections (reference, rule_id, category, value_fingerprint, key_version, masked_value, session_id, repo, blocked_at)
+       VALUES (:reference, :ruleId, :category, :valueFingerprint, :keyVersion, :maskedValue, :sessionId, :repo, :blockedAt)`),this.sweepBlockedStmt=a.prepare("DELETE FROM blocked_detections WHERE blocked_at <= :cutoff")}create(a){try{return Promise.resolve(this.createSync(a))}catch(a){return Promise.reject(a instanceof Error?a:Error(String(a)))}}createSync(a){if(a.conditions?.provider!==void 0)throw Error("provider conditions are not supported yet — a grant with one would never apply");let b=(0,d.randomUUID)(),c=Date.now();try{this.insertExceptionRow(b,a,c)}catch(d){if(!(d instanceof Error&&(2067===d.errcode||d.message.includes("UNIQUE constraint failed"))))throw d;q(this.db,()=>{if(1!==Number(this.db.prepare(`UPDATE exceptions
+                SET revoked_at = :now, revoked_by = :revokedBy,
+                    revoke_reason = 'superseded by a new grant for the same value',
+                    updated_at = :now
+              WHERE rule_id = :ruleId AND value_fingerprint = :valueFingerprint
+                AND key_version = :keyVersion AND revoked_at IS NULL
+                AND ((expires_at IS NOT NULL AND expires_at <= :now)
+                  OR (max_uses IS NOT NULL AND use_count >= max_uses))`).run({now:c,revokedBy:a.createdBy,ruleId:a.ruleId,valueFingerprint:a.valueFingerprint,keyVersion:a.keyVersion}).changes))throw new af(a.ruleId);this.insertExceptionRow(b,a,c)},"IMMEDIATE")}let e=w(this.db.prepare("SELECT * FROM exceptions WHERE id = :id"),{id:b});if(void 0===e)throw Error("exception row not found immediately after insert");return aj(e)}insertExceptionRow(a,b,c){this.db.prepare(`INSERT INTO exceptions (
+             id, rule_id, category, value_fingerprint, key_version, masked_value,
+             scope, expires_at, max_uses, use_count, last_used_at, justification,
+             conditions, created_by, created_via, created_at, updated_at
+           ) VALUES (
+             :id, :ruleId, :category, :valueFingerprint, :keyVersion, :maskedValue,
+             :scope, :expiresAt, :maxUses, 0, NULL, :justification,
+             :conditions, :createdBy, :createdVia, :now, :now
+           )`).run({id:a,ruleId:b.ruleId,category:b.category,valueFingerprint:b.valueFingerprint,keyVersion:b.keyVersion,maskedValue:b.maskedValue,scope:b.scope,expiresAt:null===b.expiresAt?null:(0,h.I8t)(b.expiresAt),maxUses:b.maxUses,justification:b.justification,conditions:null===b.conditions?null:JSON.stringify(b.conditions),createdBy:b.createdBy,createdVia:b.createdVia,now:c})}list(a){let b=a?.includeTerminal?"":`WHERE ${ah}`;return Promise.resolve(B(v(this.db.prepare(`SELECT * FROM exceptions ${b} ORDER BY created_at DESC, rowid DESC`),a?.includeTerminal?{}:{now:Date.now()}),aj))}getByIdPrefix(a){if(0===a.length)return Promise.resolve(void 0);let b=v(this.db.prepare(String.raw`SELECT * FROM exceptions WHERE id LIKE :pattern ESCAPE '\' LIMIT 2`),{pattern:`${l(a)}%`});if(b.length>1)return Promise.reject(new ag(a));let c=b[0];if(!c)return Promise.resolve(void 0);try{return Promise.resolve(aj(c))}catch{return Promise.resolve(void 0)}}revoke(a,b,c){let d=Date.now();return Promise.resolve(1===Number(this.db.prepare(`UPDATE exceptions
+            SET revoked_at = :now, revoked_by = :revokedBy, revoke_reason = :reason, updated_at = :now
+          WHERE id = :id AND revoked_at IS NULL`).run({id:a,revokedBy:b,reason:c??null,now:d}).changes))}consume(a,b=Date.now()){return Promise.resolve(1===Number(this.consumeStmt.run({id:a,now:b}).changes))}activeBundleEntries(a,b=Date.now()){return Promise.resolve(B(v(this.db.prepare(`SELECT * FROM exceptions
+          WHERE key_version = :keyVersion AND ${ah}
+          ORDER BY created_at DESC, rowid DESC`),{keyVersion:a,now:b}),a=>{let b=null===a.conditions?null:JSON.parse(a.conditions);return h.iRC.parse({id:a.id,ruleId:a.rule_id,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,expiresAt:null===a.expires_at?null:(0,h.q11)(a.expires_at),maxUses:a.max_uses,useCount:a.use_count,conditions:b})}))}recordBlocked(a){let b=Date.now();return this.sweepBlockedStmt.run({cutoff:b-864e5}),this.insertBlockedStmt.run({reference:a.reference,ruleId:a.ruleId,category:a.category,valueFingerprint:a.valueFingerprint,keyVersion:a.keyVersion,maskedValue:a.maskedValue,sessionId:a.sessionId,repo:a.repo,blockedAt:b}),Promise.resolve()}recentBlocked(a=18e5){return Promise.resolve(v(this.db.prepare(`SELECT * FROM blocked_detections
+          WHERE blocked_at > :cutoff
+          ORDER BY blocked_at DESC, rowid DESC`),{cutoff:Date.now()-a}).map(a=>({reference:a.reference,ruleId:a.rule_id,category:a.category,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,maskedValue:a.masked_value,sessionId:a.session_id,repo:a.repo,blockedAt:(0,h.q11)(a.blocked_at)})))}sweepTerminal(a,b=Date.now()){return Promise.resolve(Number(this.db.prepare(`DELETE FROM exceptions
+          WHERE updated_at < :cutoff
+            AND (revoked_at IS NOT NULL
+                 OR (expires_at IS NOT NULL AND expires_at <= :now)
+                 OR (max_uses IS NOT NULL AND use_count >= max_uses))`).run({cutoff:b-a,now:b}).changes))}}function aj(a){let b=null===a.conditions?null:JSON.parse(a.conditions);return h.V8B.parse({id:a.id,ruleId:a.rule_id,category:a.category,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,maskedValue:a.masked_value,scope:a.scope,expiresAt:null===a.expires_at?null:(0,h.q11)(a.expires_at),maxUses:a.max_uses,useCount:a.use_count,lastUsedAt:null===a.last_used_at?null:(0,h.q11)(a.last_used_at),justification:a.justification,conditions:b,createdBy:a.created_by,createdVia:a.created_via,createdAt:(0,h.q11)(a.created_at),updatedAt:(0,h.q11)(a.updated_at),revokedAt:null===a.revoked_at?null:(0,h.q11)(a.revoked_at),revokedBy:a.revoked_by,revokeReason:a.revoke_reason})}function ak(a){return`(
+    SELECT fr.status FROM finding_resolution fr
+     WHERE fr.finding_key = ${a}.finding_key
+     ORDER BY fr.created_at DESC, fr.rowid DESC
+     LIMIT 1
+  )`}let al=`(
+  SELECT finding_key, status, method, resolved_at FROM (
+    SELECT fr.finding_key, fr.status, fr.method, fr.resolved_at,
+           ROW_NUMBER() OVER (
+             PARTITION BY fr.finding_key
+             ORDER BY fr.created_at DESC, fr.rowid DESC
+           ) AS rn
+      FROM finding_resolution fr
+  ) WHERE rn = 1
+)`;function am(a){return null===a||""===a?[]:a.split(",")}class an{constructor(a){this.db=a}recentFindings(a){let b=a?.limit??50;return Promise.resolve(v(this.db.prepare(`SELECT f.id, f.audit_event_id AS event_id, d.rule_id, d.category, d.severity,
+                f.masked_match, f.action_taken, f.confidence, e.started_at AS occurred_at,
+                json_extract(e.attributes, '$.source_tool') AS source_tool,
+                e.event_type AS kind
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         WHERE e.event_type IN (${h.hfB})
+         ORDER BY e.started_at DESC, f.rowid DESC
+         LIMIT :limit`),{limit:b}).map(a=>({id:a.id,eventId:a.event_id,ruleId:a.rule_id,category:a.category,severity:a.severity,maskedMatch:a.masked_match,actionTaken:a.action_taken,confidence:a.confidence,occurredAt:(0,h.q11)(a.occurred_at),sourceTool:a.source_tool,kind:a.kind})))}sessionFindingsCount(a){return a?Promise.resolve(z(this.db,`SELECT count(*) AS n FROM inspection_findings f
+           JOIN audit_events e ON e.id = f.audit_event_id
+          WHERE e.root_session_id = :sessionId
+            AND e.event_type IN (${h.hfB})`,{sessionId:a})):Promise.resolve(0)}sessionFirings(a){return Object.fromEntries(A(this.db,`SELECT d.rule_id AS k, count(*) AS n
+           FROM inspection_findings f
+           JOIN audit_events e ON e.id = f.audit_event_id
+           JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+          WHERE e.root_session_id = :sessionId
+            AND e.event_type NOT IN (${h.hfB})
+          GROUP BY d.rule_id`,{sessionId:a}))}listGroupedFindings(a){let b=a.sessionId?" AND e.root_session_id = :sessionId":"",c=`WHERE e.event_type IN (${h.hfB})${b}`,d=a.sessionId?{sessionId:a.sessionId}:{},e=this.groupAggregates(void 0!==a.q&&""!==a.q,{predicate:c,params:d}),f=v(this.db.prepare(`SELECT id, rule_id, category, severity, masked_match, action_taken, confidence,
+                occurred_at, source_tool, repo, file, tool_name, kind, finding_key, latest_status
+         FROM (
+           SELECT f.id AS id, d.rule_id AS rule_id, d.category AS category,
+                  d.severity AS severity, f.masked_match AS masked_match,
+                  f.action_taken AS action_taken, f.confidence AS confidence,
+                  e.started_at AS occurred_at,
+                  json_extract(e.attributes, '$.source_tool') AS source_tool,
+                  json_extract(e.attributes, '$.repo') AS repo,
+                  json_extract(e.attributes, '$.file_path') AS file,
+                  json_extract(e.attributes, '$.tool_name') AS tool_name,
+                  e.event_type AS kind, f.finding_key AS finding_key,
+                  latest.status AS latest_status,
+                  ROW_NUMBER() OVER (
+                    PARTITION BY d.rule_id
+                    ORDER BY e.started_at DESC, f.id DESC
+                  ) AS rn
+             FROM inspection_findings f
+             JOIN audit_events e ON e.id = f.audit_event_id
+             JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+             LEFT JOIN ${al} latest
+               ON latest.finding_key = f.finding_key
+             ${c}
+         )
+         WHERE rn <= :cap
+         ORDER BY occurred_at DESC, id DESC`),{cap:200,...d}).map(a=>({id:a.id,ruleId:a.rule_id,category:a.category,severity:a.severity,maskedMatch:a.masked_match,actionTaken:a.action_taken,confidence:a.confidence,occurredAt:(0,h.q11)(a.occurred_at),sourceTool:a.source_tool,repo:a.repo??"",file:a.file??"",...null===a.tool_name?{}:{toolName:a.tool_name},status:(0,h.xog)({kind:a.kind,findingKey:a.finding_key,latestResolutionStatus:a.latest_status})})),g=(0,h.mAj)(f,{aggregates:e}),i={severity:a.severity,providers:a.provider,actions:a.action,statuses:a.status,subtype:a.subtype,q:a.q},j=(0,h.rG)(g,i),k=(0,h.A6E)((0,h.tXp)(g,i)),l=a.status??[],m={findings:k.reduce((a,b)=>{if(0===l.length)return a+b.instanceCount;let c=e.get(b.id);return a+(c?(0,h.Bfj)(c.statusInputs,l)??b.instanceCount:b.instanceCount)},0),groups:k.length},n=a.limit??h.goN,o=l.length>0?new Set(l):null;return Promise.resolve({totals:m,facets:j,items:k.slice(0,n).map(a=>o?{...a,instances:a.instances.filter(a=>void 0!==a.status&&o.has(a.status))}:a),nextCursor:null,...a.sessionId?{sessionFirings:this.sessionFirings(a.sessionId)}:{}})}groupAggregates(a,b){let c=a?`, group_concat(DISTINCT json_extract(e.attributes, '$.repo')) AS repos,
+           group_concat(DISTINCT json_extract(e.attributes, '$.file_path')) AS files,
+           group_concat(DISTINCT 'via ' || json_extract(e.attributes, '$.tool_name')) AS tool_names`:", NULL AS repos, NULL AS files, NULL AS tool_names";return new Map(this.db.prepare(`SELECT rule_id,
+                sum(tuple_count) AS instance_count,
+                max(latest_at) AS latest_at,
+                group_concat(source_tools) AS source_tools,
+                group_concat(actions_taken) AS actions_taken,
+                group_concat(status_tuple || '|' || tuple_count) AS status_inputs,
+                group_concat(repos) AS repos,
+                group_concat(files) AS files,
+                group_concat(tool_names) AS tool_names
+           FROM (
+             SELECT d.rule_id AS rule_id,
+                    e.event_type || '|' ||
+                      (CASE WHEN f.finding_key IS NULL THEN '' ELSE 'k' END) || '|' ||
+                      coalesce(latest.status, '') AS status_tuple,
+                    count(*) AS tuple_count,
+                    max(e.started_at) AS latest_at,
+                    group_concat(DISTINCT json_extract(e.attributes, '$.source_tool')) AS source_tools,
+                    group_concat(DISTINCT f.action_taken) AS actions_taken
+                    ${c}
+               FROM inspection_findings f
+               JOIN audit_events e ON e.id = f.audit_event_id
+               JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+               LEFT JOIN ${al} latest
+                 ON latest.finding_key = f.finding_key
+              ${b.predicate}
+              GROUP BY d.rule_id, status_tuple
+           )
+          GROUP BY rule_id`).all(b.params).map(b=>[b.rule_id,{instanceCount:b.instance_count,sourceTools:am(b.source_tools),actionsTaken:am(b.actions_taken),statusInputs:am(b.status_inputs).map(a=>{let[b="",c="",d="",e=""]=a.split("|");return{kind:b,findingKey:""===c?null:c,latestResolutionStatus:""===d?null:d,count:Number(e)}}),latestDetectedAt:(0,h.q11)(b.latest_at),...a?{searchText:[b.repos??"",b.files??"",b.tool_names??""].filter(a=>""!==a).join(" ")}:{}}]))}healthSummary(){let a=z(this.db,`SELECT count(*) AS n FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+        WHERE e.event_type IN (${h.hfB})`),b=Object.fromEntries(h.S8C.map(a=>[a,0]));for(let a of v(this.db.prepare(`SELECT f.action_taken AS action_taken, count(*) AS c
+           FROM inspection_findings f
+           JOIN audit_events e ON e.id = f.audit_event_id
+          WHERE e.event_type IN (${h.hfB})
+          GROUP BY f.action_taken`)))a.action_taken in b&&(b[a.action_taken]=a.c);let c={critical:0,high:0,medium:0,low:0};for(let a of v(this.db.prepare(`SELECT d.severity AS severity, count(*) AS c
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         LEFT JOIN ${al} latest
+           ON latest.finding_key = f.finding_key
+         WHERE e.event_type IN (${h.hfB})
+           AND (latest.status IS NULL OR latest.status != 'resolved')
+         GROUP BY d.severity`)))a.severity in c&&(c[a.severity]=a.c);let d=h.IgC,e=new Set(v(this.db.prepare(`SELECT DISTINCT json_extract(target, '$.category') AS category
+         FROM policies WHERE enabled = 1 AND json_extract(target, '$.category') IS NOT NULL`)).map(a=>a.category));return Promise.resolve({findings:a,byAction:b,bySeverity:c,coverage:0===d.length?0:d.filter(a=>e.has(a)).length/d.length})}activityByDay(a=7){let b=864e5*Math.floor(Date.now()/864e5)-(a-1)*864e5,c=v(this.db.prepare(`SELECT date(e.started_at / 1000, 'unixepoch') AS day, f.action_taken AS action, count(*) AS c
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         WHERE e.started_at >= :since
+           AND e.event_type IN (${h.hfB})
+         GROUP BY day, f.action_taken`),{since:b}),d=new Map;for(let c=0;c<a;c++){let a=new Date(b+864e5*c).toISOString().slice(0,10);d.set(a,{day:a,total:0,redacted:0,warned:0,blocked:0})}for(let a of c){let b=d.get(a.day);b&&(b.total+=a.c,"redact"===a.action?b.redacted+=a.c:"warn"===a.action?b.warned+=a.c:"block"===a.action&&(b.blocked+=a.c))}return Promise.resolve([...d.values()].sort((a,b)=>a.day.localeCompare(b.day)))}}class ao{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO inspection_definitions
+         (id, rule_id, name, category, severity, definition, version)
+       VALUES
+         (:id, :ruleId, :name, :category, :severity, :definition, :version)`)}upsert(a){let b=k(a.ruleId,a.version),c=(0,h.JAl)(a,b);return this.insertStmt.run({id:c.id,ruleId:c.ruleId,name:c.name,category:c.category,severity:c.severity,definition:c.definition,version:c.version}),b}}class ap{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT INTO inspection_findings
+         (id, audit_event_id, inspection_definition_id, classified_data_id,
+          span_start, span_end, masked_match, action_taken, confidence,
+          finding_key, first_detected_at)
+       VALUES
+         (:id, :auditEventId, :inspectionDefinitionId, :classifiedDataId,
+          :spanStart, :spanEnd, :maskedMatch, :actionTaken, :confidence,
+          :findingKey,
+          COALESCE(:firstDetectedAt, (SELECT started_at FROM audit_events WHERE id = :auditEventId)))
+       ON CONFLICT(id) DO UPDATE SET
+         inspection_definition_id = excluded.inspection_definition_id
+       ON CONFLICT (finding_key) DO UPDATE SET
+         audit_event_id = excluded.audit_event_id,
+         inspection_definition_id = excluded.inspection_definition_id,
+         classified_data_id = excluded.classified_data_id,
+         span_start = excluded.span_start,
+         span_end = excluded.span_end,
+         masked_match = excluded.masked_match,
+         action_taken = excluded.action_taken,
+         confidence = excluded.confidence`),this.sessionDupStmt=a.prepare(`SELECT 1 FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+        WHERE d.rule_id = :ruleId AND f.masked_match = :maskedMatch
+          AND e.root_session_id = :sessionId
+          AND e.event_type IN (${h.hfB})
+        LIMIT 1`),this.eventDupStmt=a.prepare(`SELECT 1 FROM inspection_findings f
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+        WHERE f.audit_event_id = :auditEventId AND d.rule_id = :ruleId
+          AND f.masked_match = :maskedMatch
+          AND f.span_start = :spanStart AND f.span_end = :spanEnd
+        LIMIT 1`)}isSessionDuplicate(a,b,c){return void 0!==this.sessionDupStmt.get({ruleId:a,maskedMatch:b,sessionId:c})}isEventDuplicate(a,b,c,d,e){return void 0!==this.eventDupStmt.get({auditEventId:a,ruleId:b,maskedMatch:c,spanStart:d,spanEnd:e})}insertFinding(a){let b=(0,h.$3l)(a);this.insertStmt.run(y({id:b.id,auditEventId:b.auditEventId,inspectionDefinitionId:b.inspectionDefinitionId,classifiedDataId:b.classifiedDataId,spanStart:b.spanStart,spanEnd:b.spanEnd,maskedMatch:b.maskedMatch,actionTaken:b.actionTaken,confidence:b.confidence,findingKey:b.findingKey,firstDetectedAt:b.firstDetectedAt}))}}function aq(a){let b=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z-.]+))?$/.exec(a.trim());return b?{core:[Number(b[1]),Number(b[2]),Number(b[3])],pre:b[4]?b[4].split("."):[]}:null}let ar=h.Jr;function as(a){return a.map(a=>{var b;return`${a.namespace}/${a.packId}@${a.version}#${b=a.rulesJson,(0,d.createHash)("sha1").update(b).digest("hex")}`}).sort().join(",")}function at(a){let b=/^(\d+)\.(\d+)\.(\d+)/.exec(a);return b?[Number(b[1]),Number(b[2]),Number(b[3])]:null}class au{constructor(a){this.db=a,this.insertMissingStmt=a.prepare(`INSERT INTO installed_packs (id, namespace, pack_id, version, name, rules_json, enabled, created_at, updated_at)
+       VALUES (:id, :namespace, :packId, :version, :name, :rulesJson, 1, :now, :now)
+       ON CONFLICT (namespace, pack_id) DO NOTHING`),this.upsertAvailableStmt=a.prepare(`INSERT INTO available_packs (id, namespace, pack_id, version, name, rules_json, recorded_by, updated_at)
+       VALUES (:id, :namespace, :packId, :version, :name, :rulesJson, :recordedBy, :now)
+       ON CONFLICT (namespace, pack_id) DO UPDATE SET
+         version = excluded.version,
+         name = excluded.name,
+         rules_json = excluded.rules_json,
+         recorded_by = excluded.recorded_by,
+         updated_at = excluded.updated_at
+       WHERE available_packs.version <> excluded.version
+          OR available_packs.name <> excluded.name
+          OR available_packs.rules_json <> excluded.rules_json`),this.signatureStmt=a.prepare("SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson FROM available_packs")}recordInventory(a,b){if(0!==a.length)try{let c=a.map(a=>({namespace:a.namespace,packId:a.packId,version:a.version,name:a.name,rulesJson:JSON.stringify(a.rules),ruleIds:new Set(a.rules.map(a=>a.id))}));if(this.storedSignature()===as(c))return;let e=Date.now();q(this.db,()=>{let a=this.mirrorState(),f=!1;for(let g of c){let c={id:(0,d.randomUUID)(),namespace:g.namespace,packId:g.packId,version:g.version,name:g.name,rulesJson:g.rulesJson,now:e},h=a.get(`${g.namespace}/${g.packId}`);void 0===h||!function(a,b){let c=at(a.version);if(null===c)return!0;let d=at(b.version);if(null===d)return!1;for(let a=0;a<3;a++){let b=c[a]??0,e=d[a]??0;if(b!==e)return b<e}for(let c of b.ruleIds)if(!a.ruleIds.has(c))return!0;return!1}(g,h)?this.upsertAvailableStmt.run({...c,id:(0,d.randomUUID)(),recordedBy:b?.recordedBy??null}):f=!0,this.insertMissingStmt.run(c)}f||this.pruneAvailable(c.map(a=>`${a.namespace}/${a.packId}`))},"IMMEDIATE")}catch{}}mirrorState(){return new Map(v(this.db.prepare("SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson FROM available_packs")).map(a=>[`${a.namespace}/${a.packId}`,{version:a.version,ruleIds:function(a){let b=new Set,c=L(a,[]);if(!Array.isArray(c))return b;for(let a of c)if(a&&"object"==typeof a){let c=a.id;"string"==typeof c&&b.add(c)}return b}(a.rulesJson)}]))}pruneAvailable(a){let b=v(this.db.prepare("SELECT namespace, pack_id AS packId FROM available_packs")),c=new Set(a),d=this.db.prepare("DELETE FROM available_packs WHERE namespace = ? AND pack_id = ?");for(let a of b)c.has(`${a.namespace}/${a.packId}`)||d.run(a.namespace,a.packId)}applyUpdate(a,b){if(this.db.isTransaction)throw Error("applyUpdate must not be called inside an open transaction");let c=!1;return q(this.db,()=>{this.db.exec("UPDATE _pack_write_gate SET open = 1 WHERE id = 1");let d=this.db.prepare(`UPDATE installed_packs SET
+             version = (SELECT a.version FROM available_packs a
+                        WHERE a.namespace = :namespace AND a.pack_id = :packId),
+             name = (SELECT a.name FROM available_packs a
+                     WHERE a.namespace = :namespace AND a.pack_id = :packId),
+             rules_json = (SELECT a.rules_json FROM available_packs a
+                           WHERE a.namespace = :namespace AND a.pack_id = :packId),
+             updated_at = :now
+           WHERE namespace = :namespace AND pack_id = :packId
+             AND EXISTS (SELECT 1 FROM available_packs a
+                         WHERE a.namespace = :namespace AND a.pack_id = :packId)`).run({namespace:a,packId:b,now:Date.now()});this.db.exec("UPDATE _pack_write_gate SET open = 0 WHERE id = 1"),c=Number(d.changes)>0},"IMMEDIATE"),c}installedRuleset(){let a=v(this.db.prepare("SELECT enabled, policy_id AS policyId, rules_json AS rulesJson, version FROM installed_packs")),b={installedPacks:a.length,enabledPacks:0,rules:[],invalidRules:0,ruleActions:new Map,ruleVersions:new Map};for(let c of a){let a;if(!x(c.enabled))continue;b.enabledPacks+=1;let d=(0,h.DhA)(c.policyId);try{a=JSON.parse(c.rulesJson)}catch{b.invalidRules+=1;continue}if(!Array.isArray(a)){b.invalidRules+=1;continue}for(let e of a){let a=h.jON.safeParse(e);a.success?(b.rules.push(a.data),b.ruleActions.set(a.data.id,d),b.ruleVersions.set(a.data.id,c.version)):b.invalidRules+=1}}return b}newestRecordedBinary(){let a=v(this.db.prepare("SELECT DISTINCT recorded_by AS recordedBy FROM available_packs WHERE recorded_by IS NOT NULL")),b=null;for(let c of a){let a=c.recordedBy.lastIndexOf("@");if(a<=0||a===c.recordedBy.length-1)continue;let d=c.recordedBy.slice(0,a),e=c.recordedBy.slice(a+1);null!==aq(e)&&(null===b||function(a,b){let c=aq(a),d=aq(b);if(!c||!d)return 0;for(let a=0;a<3;a++){let b=c.core[a]??0,e=d.core[a]??0;if(b!==e)return b<e?-1:1}return function(a,b){if(0===a.length&&0===b.length)return 0;if(0===a.length)return 1;if(0===b.length)return -1;let c=Math.min(a.length,b.length);for(let d=0;d<c;d++){let c=a[d]??"",e=b[d]??"";if(c===e)continue;let f=/^\d+$/.test(c),g=/^\d+$/.test(e);if(f&&!g)return -1;if(!f&&g)return 1;if(f&&g)return Number(c)<Number(e)?-1:1;return c<e?-1:1}return a.length===b.length?0:a.length<b.length?-1:1}(c.pre,d.pre)}(e,b.version)>0)&&(b={binary:d,version:e})}return b}counts(){return Promise.resolve(w(this.db.prepare(`SELECT count(*) AS packs,
+                coalesce(sum(json_array_length(rules_json)), 0) AS rules,
+                coalesce(sum(enabled), 0) AS enabled
+         FROM installed_packs`))??{packs:0,rules:0,enabled:0})}countsByPolicyId(){return A(this.db,`SELECT coalesce(policy_id, '${ar}') AS k, count(*) AS n
+         FROM installed_packs
+         GROUP BY k`)}listByPolicyId(a){return v(this.db.prepare(`SELECT namespace, pack_id AS packId, name, enabled, rules_json AS rulesJson
+         FROM installed_packs
+         WHERE coalesce(policy_id, '${ar}') = ?
+         ORDER BY name ASC`),[a]).map(a=>({id:`${a.namespace}/${a.packId}`,name:a.name,ruleCount:ab(a.rulesJson).length,enabled:x(a.enabled)}))}setPolicy(a,b,c){if(null!==c&&!h.HUb.safeParse(c).success)throw Error(`Unknown policy '${c}'. Must be one of: ${h.V0H.join(", ")}.`);return Number(this.db.prepare(`UPDATE installed_packs SET policy_id = :policyId, updated_at = :now
+         WHERE namespace = :namespace AND pack_id = :packId`).run({policyId:c,now:Date.now(),namespace:a,packId:b}).changes)>0}setEnabled(a,b,c){return Number(this.db.prepare(`UPDATE installed_packs SET enabled = :enabled, updated_at = :now
+         WHERE namespace = :namespace AND pack_id = :packId`).run({enabled:+!!c,now:Date.now(),namespace:a,packId:b}).changes)>0}storedSignature(){return as(v(this.signatureStmt))}}class av{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO inventory
+         (id, object_type, location, title, host_id, attributes, first_seen, last_seen)
+       VALUES
+         (:id, :objectType, :location, :title, :hostId, :attributes, :firstSeen, :lastSeen)
+       ON CONFLICT(id) DO UPDATE SET
+         location = excluded.location,
+         title = excluded.title,
+         host_id = excluded.host_id,
+         attributes = excluded.attributes,
+         last_seen = excluded.last_seen`)}upsert(a,b=Date.now()){var c,d;let e=(c=a.objectType,d=a.identityKey,i((0,h.tTV)(["inventory",c,d]))),f=(0,h.gzP)(a,e,b);return this.upsertStmt.run(y({id:f.id,objectType:f.objectType,location:f.location,title:f.title,hostId:f.hostId,attributes:f.attributes,firstSeen:f.firstSeen,lastSeen:f.lastSeen})),e}findById(a){return w(this.db.prepare("SELECT * FROM inventory WHERE id = :id"),{id:a})}distinctTitles(a){return v(this.db.prepare(`SELECT DISTINCT title FROM inventory
+         WHERE object_type = :objectType AND title IS NOT NULL
+         ORDER BY title`),{objectType:a}).map(a=>a.title)}osVersions(){return v(this.db.prepare(`SELECT DISTINCT os_version AS value FROM inventory
+         WHERE object_type = 'host' AND os_version IS NOT NULL
+         ORDER BY value`)).map(a=>a.value)}}let aw=["config","skill","mcp","hook"],ax=new Set(h.SHn.options),ay="(url IS NULL OR (url NOT LIKE '%/.claude/worktrees/%' AND url NOT LIKE '%\\.claude\\worktrees\\%'))",az={claudecode:"Claude Code",cursor:"Cursor",codex:"Codex"},aA={accessCounts:{open:0,approved:0,blocked:0,total:0},findingsCount:0};function aB(a,b){if(a.provider&&ax.has(a.provider))return a.provider;let c=(b.title??"").toLowerCase().replace(/[\s-]/g,"");return c.includes("claudecode")||"claude"===c?"claudecode":c.includes("cursor")?"cursor":c.includes("codex")?"codex":null}function aC(a){return a.some(a=>{let b=L(a.attributes,{});return"sample"!==b.provenance&&"claudecode"===aB(b,a)})}function aD(a){let b={id:a.id,type:a.assetType,name:a.name,sub:a.sub??"",flags:L(a.flagsJson,[])};return"mcp"===a.assetType&&a.effectiveTrust&&(b.trust=a.effectiveTrust),b}function aE(a){let b="update_available"===a.status?["update"]:[],c={source:a.source,scope:a.scope};return void 0!==a.installedVersion&&(c.installedVersion=a.installedVersion),void 0!==a.latestVersion&&(c.latestVersion=a.latestVersion),void 0!==a.updatedAt&&(c.updatedAt=a.updatedAt),{id:a.id,assetType:"skill",name:a.name,sub:`Skill \xb7 ${a.source}`,description:a.description??null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aF(a){let b="egress"===a.status?["risk"]:"conflict"===a.status?["conflict"]:"unknown"===a.status?["unknown"]:[],c={event:a.event,command:a.command,scope:a.scope,status:a.status};return void 0!==a.matcher&&(c.matcher=a.matcher),void 0!==a.pluginName&&(c.pluginName=a.pluginName),a.warnings.length>0&&(c.warnings=a.warnings),{id:a.id,assetType:"hook",name:aI(a.command.trim(),64),sub:a.matcher?`Hook \xb7 ${a.event} \xb7 ${a.matcher}`:`Hook \xb7 ${a.event}`,description:a.warnings.length>0?a.warnings.join(" \xb7 "):null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aG(a){let b={scope:a.scope,transport:a.transport};return void 0!==a.command&&(b.command=a.command),void 0!==a.url&&(b.url=a.url),void 0!==a.envKeys&&(b.envKeys=a.envKeys),void 0!==a.pluginName&&(b.pluginName=a.pluginName),void 0!==a.marketplace&&(b.marketplace=a.marketplace),void 0!==a.project&&(b.project=a.project),{id:a.id,assetType:"mcp",name:a.name,sub:`MCP server \xb7 ${a.transport} \xb7 ${aI(function(a){if(void 0!==a.url)try{return new URL(a.url).host}catch{return a.url}return a.command??a.name}(a),48)}`,description:null,flagsJson:"[]",metaJson:JSON.stringify(b),trust:"unapproved",toolsJson:null,effectiveTrust:a.trust}}function aH(a){let b=a.untracked?["untracked"]:[],c={kind:a.kind,scope:a.scope,path:a.path};return void 0!==a.detail&&(c.detail=a.detail),void 0!==a.entryCount&&(c.entryCount=a.entryCount),void 0!==a.updatedAt&&(c.updatedAt=a.updatedAt),{id:a.id,assetType:"config",name:a.name,sub:a.kind,description:a.detail??null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aI(a,b){return a.length>b?`${a.slice(0,b-1)}…`:a}function aJ(a,b,c){let d=L(a.attributes,{});return{id:a.id,name:a.name??"",repo:a.url??"",visibility:d.visibility??"private",language:d.language??"",policyDefault:d.policyDefault??"approved",updatedAt:new Date(a.lastSeen).toISOString(),accessCounts:b,findingsCount:c}}function aK(a){return{path:a.path,name:a.name,origin:a.origin,access:a.effectiveAccess,isCustom:null!==a.overrideAccess&&a.overrideAccess!==a.defaultAccess,findings:a.findingsCount,blockedAt:null!==a.blockedAtMs?new Date(a.blockedAtMs).toISOString():null,note:a.note}}class aL{constructor(a){this.db=a}getInventoryStats(){let a=A(this.db,"SELECT asset_type AS k, count(*) AS n FROM inventory_asset GROUP BY asset_type"),b={project:0,skill:a.get("skill")??0,mcp:a.get("mcp")??0,hook:a.get("hook")??0,config:a.get("config")??0};b.project=z(this.db,`SELECT count(*) AS n FROM source_project WHERE ${ay}`);let c=A(this.db,`SELECT coalesce(o.trust, a.trust) AS k, count(*) AS n
+         FROM inventory_asset a
+         LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
+         WHERE a.asset_type = 'mcp' AND coalesce(o.trust, a.trust) IS NOT NULL
+         GROUP BY coalesce(o.trust, a.trust)`),d={"known-good":c.get("known-good")??0,risky:c.get("risky")??0,unapproved:c.get("unapproved")??0},e=z(this.db,`SELECT count(*) AS n FROM inventory
+           WHERE object_type = 'harness'
+             AND (last_seen >= :liveSince OR json_extract(attributes, '$.provenance') = 'sample')`,{liveSince:Date.now()-2592e6}),f=z(this.db,"SELECT count(*) AS n FROM inventory_asset WHERE flags_json <> '[]'"),g=z(this.db,"SELECT count(DISTINCT project_id) AS n FROM project_file WHERE findings_count > 0"),h=this.configAssetRows();for(let a of h)b[a.assetType]+=1,"mcp"===a.assetType&&a.effectiveTrust&&(d[a.effectiveTrust]+=1);return Promise.resolve({attention:f+g+h.filter(a=>"[]"!==a.flagsJson).length,byType:b,harnesses:e,mcpTrust:d})}listHarnesses(a){let b=this.fetchHarnessRows();if(0===b.length)return Promise.resolve({items:[]});let c=new Map;for(let a of b){let b=aB(L(a.attributes,{}),a);if(!b)continue;let d=c.get(b);d?d.push(a):c.set(b,[a])}let d=this.assetsByHarness(b.map(a=>a.id),a),e=[...new Set(b.flatMap(a=>L(a.attributes,{}).projectIds??[]))],f=this.fetchProjectsByIds(e),g=this.projectAggregates(e),h=this.configAssetRows(a,aC(b)),i=[];for(let[b,e]of c){let c=e.flatMap(a=>d.get(a.id)??[]),j=e.some(a=>"sample"!==L(a.attributes,{}).provenance)&&"claudecode"===b&&h.length>0?[...c,...h].sort((a,b)=>a.name.localeCompare(b.name)):c;if(a&&0===j.length)continue;let k=e[0];if(!k)continue;let l=L(k.attributes,{}),m=[...new Set(e.flatMap(a=>L(a.attributes,{}).projectIds??[]))].map(a=>f.get(a)).filter(a=>void 0!==a).map(a=>{let b=g.get(a.id)??aA;return aJ(a,b.accessCounts,b.findingsCount)}),n=e.reduce((a,b)=>a+(L(b.attributes,{}).sessions??0),0),o=j.reduce((a,b)=>a+L(b.flagsJson,[]).length,0),p=new Map;for(let a of j){let b=p.get(a.assetType);b?b.push(aD(a)):p.set(a.assetType,[aD(a)])}let q=aw.filter(a=>p.has(a)).map(a=>({type:a,assets:p.get(a)??[]}));i.push({id:b,label:l.label??az[b],kind:l.kind??l.provider??b,version:l.harness_version??k.harnessVersion??"",sessions:n,assetCount:j.length,flagCount:o,projects:m,categories:q})}return Promise.resolve({items:i})}listAssets(a){let b=this.fetchAssets(a.type,a.q);if(0===b.length)return Promise.resolve({groups:[]});let c=new Map;for(let a of b){let b=c.get(a.assetType);b?b.push(a):c.set(a.assetType,[a])}let d=[...c.entries()].map(([a,b])=>{let c=new Map;for(let a of b)for(let b of L(a.flagsJson,[]))c.set(b,(c.get(b)??0)+1);let d={type:a,total:b.length,flagRollup:Object.fromEntries(c),items:b.map(aD)};if("mcp"===a){let a=new Map;for(let c of b)c.effectiveTrust&&a.set(c.effectiveTrust,(a.get(c.effectiveTrust)??0)+1);d.trustRollup=Object.fromEntries(a)}return d});return d.sort((a,b)=>aw.indexOf(a.type)-aw.indexOf(b.type)),Promise.resolve({groups:d})}getAsset(a){let b=this.fetchAssetById(a);return Promise.resolve(b?function(a){let b={id:a.id,type:a.assetType,name:a.name,sub:a.sub??"",flags:L(a.flagsJson,[]),description:a.description??null,trust:"mcp"===a.assetType?a.effectiveTrust??null:null,meta:L(a.metaJson,{}),finding:null};if("mcp"===a.assetType&&null!==a.toolsJson){let c=L(a.toolsJson,[]);b.tools="unapproved"===a.effectiveTrust?c.map(a=>({...a,risk:a.risk??"Tool access blocked: MCP server trust is unapproved."})):c}return b}(b):null)}listProjects(a){let b=this.fetchProjects(a),c=this.projectAggregates(b.map(a=>a.id));return Promise.resolve({items:b.map(a=>{let b=c.get(a.id)??aA;return aJ(a,b.accessCounts,b.findingsCount)})})}getProjectTree(a,b){let c=this.fetchProjectById(a);if(!c)return Promise.resolve(null);let d=L(c.attributes,{}),e={id:c.id,repo:c.url??"",visibility:d.visibility??"private"},f=b.path??"";if("blocked"===b.filter){let b=this.fetchProjectFilesBlocked(a);return b.sort((a,b)=>(b.blockedAtMs??0)-(a.blockedAtMs??0)),Promise.resolve({project:e,path:f,files:b.map(aK)})}if(void 0!==b.q&&""!==b.q)return Promise.resolve({project:e,path:f,files:this.fetchProjectFilesSearch(a,b.q).map(aK)});let g=this.fetchProjectFilesUnder(a,f),h=""===f?"":`${f}/`,i=[],j=new Map;for(let a of g){let b=h.length>0?a.path.slice(h.length):a.path,c=b.indexOf("/");if(-1===c)i.push(a);else{let d=b.slice(0,c),e=j.get(d)??[];e.push(a),j.set(d,e)}}let k=[...j.entries()].sort(([a],[b])=>a.localeCompare(b)).map(([a,b])=>({name:a,path:h.length>0?`${f}/${a}`:a,accessCounts:function(a){let b={open:0,approved:0,blocked:0,total:0};for(let c of a)b.total++,b[c.effectiveAccess]++;return b}(b)}));return Promise.resolve({project:e,path:f,folders:k,files:i.map(aK)})}getProjectFile(a,b){let c=this.fetchProjectById(a);if(!c)return Promise.resolve(null);let d=this.fetchProjectFile(a,b);if(!d)return Promise.resolve(null);let e=L(c.attributes,{});return Promise.resolve({...aK(d),project:{repo:c.url??"",visibility:e.visibility??"private",language:e.language??"",policyDefault:e.policyDefault??"approved",updatedAt:new Date(c.lastSeen).toISOString()},findingsRefs:[]})}setFileAccess(a,b,c){let e=this.fetchProjectFile(a,b);return!!e&&(c===e.defaultAccess?this.db.prepare("DELETE FROM file_access_override WHERE project_id = ? AND path = ?").run(a,b):this.db.prepare(`INSERT INTO file_access_override (id, project_id, path, access, created_at, updated_at)
+           VALUES (:id, :projectId, :path, :access, :now, :now)
+           ON CONFLICT (project_id, path) DO UPDATE SET access = excluded.access, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),projectId:a,path:b,access:c,now:Date.now()}),!0)}setMcpTrust(a,b){let c=this.fetchAssetById(a);return c?"mcp"!==c.assetType?"not_mcp":(b===c.trust?this.db.prepare("DELETE FROM mcp_trust_override WHERE asset_id = ?").run(a):this.db.prepare(`INSERT INTO mcp_trust_override (id, asset_id, trust, created_at, updated_at)
+           VALUES (:id, :assetId, :trust, :now, :now)
+           ON CONFLICT (asset_id) DO UPDATE SET trust = excluded.trust, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),assetId:a,trust:b,now:Date.now()}),this.configRowsCache=void 0,"ok"):"not_found"}fetchHarnessRows(){return v(this.db.prepare(`SELECT id, title, attributes, harness_version AS harnessVersion
+         FROM inventory
+         WHERE object_type = 'harness'
+           AND (last_seen >= :liveSince OR json_extract(attributes, '$.provenance') = 'sample')`),{liveSince:Date.now()-2592e6})}assetsByHarness(a,b){let c=new Map;if(0===a.length)return c;let d=[...a],e=`ha.harness_id IN (${m(a.length)})`;if(b){let a=n(b);e+=` AND ${o(["a.name","a.sub"])}`,d.push(a,a)}for(let a of v(this.db.prepare(`SELECT ha.harness_id AS harnessInvId, a.id, a.asset_type AS assetType, a.name, a.sub,
+                a.description, a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
+                a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
+         FROM harness_asset ha
+         JOIN inventory_asset a ON a.id = ha.asset_id
+         LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
+         WHERE ${e}
+         ORDER BY a.name ASC`),d)){let b=a.harnessInvId,[d]=this.mapAssetRows([a]);if(!d)continue;let e=c.get(b);e?e.push(d):c.set(b,[d])}return c}fetchAssets(a,b){let c=[],d=[];if(a&&a.length>0&&(c.push(`a.asset_type IN (${m(a.length)})`),d.push(...a)),b){let a=n(b);c.push(o(["a.name","a.sub"])),d.push(a,a)}let e=c.length?`WHERE ${c.join(" AND ")}`:"",f=this.mapAssetRows(v(this.db.prepare(`SELECT a.id, a.asset_type AS assetType, a.name, a.sub, a.description,
+                  a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
+                  a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
+           FROM inventory_asset a
+           LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
+           ${e}
+           ORDER BY a.name ASC`),d)),g=this.configAssetRows(b).filter(b=>!a||0===a.length||a.includes(b.assetType));return g.length>0?[...f,...g].sort((a,b)=>a.name.localeCompare(b.name)):f}fetchAssetById(a){return this.mapAssetRows(v(this.db.prepare(`SELECT a.id, a.asset_type AS assetType, a.name, a.sub, a.description,
+                  a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
+                  a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
+           FROM inventory_asset a
+           LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
+           WHERE a.id = ?`),[a]))[0]??this.configAssetRows().find(b=>b.id===a)??null}mapAssetRows(a){return a.map(a=>({id:a.id,assetType:a.assetType,name:a.name,sub:a.sub??null,description:a.description??null,flagsJson:a.flagsJson??"[]",metaJson:a.metaJson??"{}",trust:a.trust??null,toolsJson:a.toolsJson??null,effectiveTrust:a.effectiveTrust??null}))}configAssetRows(a,b){let c=this.liveConfigAssetRows(b);if(!a)return c;let d=a.toLowerCase();return c.filter(a=>a.name.toLowerCase().includes(d)||(a.sub??"").toLowerCase().includes(d))}liveConfigAssetRows(a){if(!(a??aC(this.fetchHarnessRows())))return[];let b=this.latestConfigScanId();if(null===b)return[];if(this.configRowsCache?.scanId===b)return this.configRowsCache.rows;let c=new _(this.db).report(),d=[...c.skills.map(aE),...c.hooks.map(aF),...c.mcpServers.map(aG),...c.configFiles.map(aH)].sort((a,b)=>a.name.localeCompare(b.name));return this.configRowsCache={scanId:b,rows:d},d}latestConfigScanId(){return $(this.db)?.id??null}fetchProjects(a){let b=`SELECT id, url, name, attributes, last_seen AS lastSeen FROM source_project
+               WHERE ${ay}`,c=[];if(a){let d=n(a);b+=` AND ${o(["name","url"])}`,c.push(d,d)}return b+=" ORDER BY name ASC",v(this.db.prepare(b),c)}fetchProjectById(a){return w(this.db.prepare("SELECT id, url, name, attributes, last_seen AS lastSeen FROM source_project WHERE id = ?"),[a])??null}fetchProjectsByIds(a){let b=new Map;if(0===a.length)return b;for(let c of v(this.db.prepare(`SELECT id, url, name, attributes, last_seen AS lastSeen
+         FROM source_project WHERE id IN (${m(a.length)})`),a))b.set(c.id,c);return b}projectAggregates(a){let b=new Map;if(0===a.length)return b;for(let c of v(this.db.prepare(`SELECT f.project_id AS projectId,
+                coalesce(o.access, f.default_access) AS eff,
+                count(*) AS n,
+                coalesce(sum(f.findings_count), 0) AS findings
+         FROM project_file f
+         LEFT JOIN file_access_override o ON o.project_id = f.project_id AND o.path = f.path
+         WHERE f.project_id IN (${m(a.length)})
+         GROUP BY f.project_id, eff`),a)){let a=b.get(c.projectId);a||(a={accessCounts:{open:0,approved:0,blocked:0,total:0},findingsCount:0},b.set(c.projectId,a)),a.accessCounts.total+=c.n,a.accessCounts[c.eff]+=c.n,a.findingsCount+=c.findings}return b}fileSelect(a){return`SELECT f.path, f.name, f.origin, f.default_access AS defaultAccess,
+                   f.findings_count AS findingsCount, f.blocked_at AS blockedAtMs, f.note,
+                   coalesce(o.access, f.default_access) AS effectiveAccess,
+                   o.access AS overrideAccess
+            FROM project_file f
+            LEFT JOIN file_access_override o ON o.project_id = f.project_id AND o.path = f.path
+            WHERE ${a}`}mapFileRows(a){return a.map(a=>({path:a.path,name:a.name,origin:a.origin,defaultAccess:a.defaultAccess,findingsCount:a.findingsCount??0,blockedAtMs:a.blockedAtMs??null,note:a.note??null,effectiveAccess:a.effectiveAccess,overrideAccess:a.overrideAccess??null}))}fetchProjectFilesUnder(a,b){return""===b?this.mapFileRows(v(this.db.prepare(this.fileSelect("f.project_id = ? ORDER BY f.path ASC")),[a])):this.mapFileRows(v(this.db.prepare(this.fileSelect("f.project_id = ? AND f.path LIKE ? ESCAPE '\\' ORDER BY f.path ASC")),[a,`${l(b)}/%`]))}fetchProjectFilesSearch(a,b){let c=n(b);return this.mapFileRows(v(this.db.prepare(this.fileSelect("f.project_id = ? AND (f.path LIKE ? ESCAPE '\\' OR f.name LIKE ? ESCAPE '\\') ORDER BY f.path ASC")),[a,c,c]))}fetchProjectFilesBlocked(a){return this.mapFileRows(v(this.db.prepare(this.fileSelect("f.project_id = ? AND coalesce(o.access, f.default_access) = 'blocked' AND f.blocked_at IS NOT NULL")),[a]))}fetchProjectFile(a,b){return this.mapFileRows(v(this.db.prepare(this.fileSelect("f.project_id = ? AND f.path = ?")),[a,b]))[0]??null}}class aM{constructor(a){this.db=a}readPolicies(){return Promise.resolve(B(v(this.db.prepare("SELECT * FROM policies")),a=>{let b=JSON.parse(a.target),c=a.custom_keywords?JSON.parse(a.custom_keywords):void 0;return h.PEm.parse({id:a.id,scope:a.scope,target:b,action:a.action,enabled:x(a.enabled),customKeywords:c})}))}seedDefaults(){if(z(this.db,"SELECT count(*) AS n FROM policies")>0)return;let a=this.db.prepare(`INSERT INTO policies (id, scope, target, action, enabled, created_at, updated_at)
+       VALUES (:id, 'global', :target, :action, 1, :now, :now)`);r(this.db,()=>{for(let[b,c]of Object.entries(h.unw))a.run({id:(0,d.randomUUID)(),target:JSON.stringify({category:b}),action:c,now:Date.now()})})}upsertCategoryAction(a,b){let c=Date.now();this.db.prepare(`INSERT INTO policies (id, scope, target, action, enabled, created_at, updated_at)
+         VALUES (:id, 'global', :target, :action, 1, :now, :now)
+         ON CONFLICT(scope, target) DO UPDATE SET action = excluded.action, enabled = 1, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),target:JSON.stringify({category:a}),action:b,now:c})}capCategoryActions(){return Number(this.db.prepare(`UPDATE policies SET action='warn', updated_at=:now
+         WHERE scope='global' AND action IN ('block','redact')
+           AND json_extract(target,'$.category') IS NOT NULL`).run({now:Date.now()}).changes)}getCategoryAction(a){let b=this.db.prepare("SELECT action FROM policies WHERE scope='global' AND json_extract(target,'$.category') = :category").get({category:a});return b?.action}}class aN{constructor(a){this.packs=a}getPolicyList(a){if("custom"===a)return Promise.resolve({items:[]});let b=this.packs.countsByPolicyId();return Promise.resolve({items:h.RRF.map(a=>({id:a,kind:"builtin",name:h.ZpU[a].name,enabled:!0,usedByCount:b.get(a)??0}))})}getPolicyStats(){let a=this.packs.countsByPolicyId(),b=h.V0H.reduce((b,c)=>b+(a.get(c)??0),0),c=h.V0H.length;return Promise.resolve({policies:c,builtin:c,custom:0,detectionsGoverned:b})}getPolicyDetail(a){let b=h.V0H.find(b=>b===a);if(void 0===b)return Promise.resolve(null);let c=h.ZpU[b];return Promise.resolve({specVersion:1,id:a,kind:"builtin",name:c.name,enabled:!0,description:c.description,usedBy:this.packs.listByPolicyId(a)})}}class aO{constructor(a){this.db=a,this.maxStampStmt=a.prepare("SELECT coalesce(max(updated_at), 0) AS maxStamp FROM project_file WHERE project_id = :projectId"),this.upsertStmt=a.prepare(`INSERT INTO project_file
+         (id, project_id, path, name, origin, default_access, findings_count, blocked_at, note, created_at, updated_at)
+       VALUES
+         (:id, :projectId, :path, :name, :origin, :defaultAccess, 0, NULL, NULL, :now, :now)
+       ON CONFLICT (project_id, path) DO UPDATE SET
+         name = excluded.name,
+         origin = excluded.origin,
+         default_access = excluded.default_access,
+         updated_at = excluded.updated_at`),this.pruneStmt=a.prepare("DELETE FROM project_file WHERE project_id = :projectId AND updated_at < :now")}replaceForProject(a,b,c){let e=Math.max(c,(w(this.maxStampStmt,{projectId:a})?.maxStamp??0)+1);for(let c of b.files)this.upsertStmt.run({id:(0,d.randomUUID)(),projectId:a,path:c.path,name:c.name,origin:c.origin,defaultAccess:c.defaultAccess,now:e});b.truncated||this.pruneStmt.run({projectId:a,now:e})}}class aP{constructor(a,b=()=>Date.now()){this.db=a,this.now=b,this.insertStmt=a.prepare(`INSERT INTO finding_resolution (id, finding_key, status, method, resolved_at, evidence, created_at)
+       VALUES (:id, :findingKey, :status, :method, :resolvedAt, :evidence, :createdAt)`),this.latestStmt=a.prepare(`SELECT status, method, resolved_at, evidence
+         FROM finding_resolution
+        WHERE finding_key = :findingKey
+        ORDER BY created_at DESC, rowid DESC
+        LIMIT 1`),this.openAtRestStmt=a.prepare(`SELECT DISTINCT f.finding_key AS finding_key
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+        WHERE e.event_type = 'code_change'
+          AND json_extract(e.attributes, '$.file_path') = :path
+          AND f.finding_key IS NOT NULL
+          AND ${ak("f")} IS NOT 'resolved'`),this.resolvedAtRestStmt=a.prepare(`SELECT DISTINCT f.finding_key AS finding_key
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+        WHERE e.event_type = 'code_change'
+          AND json_extract(e.attributes, '$.file_path') = :path
+          AND f.finding_key IS NOT NULL
+          AND ${ak("f")} = 'resolved'`)}insertResolution(a){this.insertStmt.run({id:(0,d.randomUUID)(),findingKey:a.findingKey,status:h.GCf.parse(a.status),method:h.cqq.parse(a.method),resolvedAt:a.resolvedAt,evidence:a.evidence,createdAt:this.now()})}latestByKey(a){let b=w(this.latestStmt,{findingKey:a});if(b)return{status:b.status,method:b.method,resolvedAt:b.resolved_at,evidence:b.evidence??""}}openAtRestKeysForPath(a){return v(this.openAtRestStmt,{path:a}).map(a=>a.finding_key)}resolvedAtRestKeysForPath(a){return v(this.resolvedAtRestStmt,{path:a}).map(a=>a.finding_key)}}class aQ{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO rule_probe_cache (rule_key, verdict, worst_probe_ms, checked_at)
+       VALUES (:ruleKey, :verdict, :worstProbeMs, :checkedAt)
+       ON CONFLICT (rule_key) DO UPDATE SET
+         verdict = excluded.verdict,
+         worst_probe_ms = excluded.worst_probe_ms,
+         checked_at = excluded.checked_at`),this.readStmt=a.prepare("SELECT verdict, worst_probe_ms AS worstProbeMs FROM rule_probe_cache WHERE rule_key = :ruleKey")}getVerdict(a){return w(this.readStmt,{ruleKey:a})}setVerdict(a,b,c){r(this.db,()=>{this.upsertStmt.run({ruleKey:a,verdict:b,worstProbeMs:c,checkedAt:Date.now()})})}}class aR{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO scan_ledger (path, mtime, content_hash, ruleset_hash, scanned_at)
+       VALUES (:path, :mtime, :contentHash, :rulesetHash, :scannedAt)
+       ON CONFLICT (path) DO UPDATE SET
+         mtime = excluded.mtime,
+         content_hash = excluded.content_hash,
+         ruleset_hash = excluded.ruleset_hash,
+         scanned_at = excluded.scanned_at`),this.readStmt=a.prepare(`SELECT path, mtime, content_hash AS contentHash
+       FROM scan_ledger WHERE ruleset_hash = :rulesetHash`)}entriesForRuleset(a){return new Map(v(this.readStmt,{rulesetHash:a}).map(a=>[a.path,{mtime:a.mtime,contentHash:a.contentHash}]))}upsertEntries(a){if(0===a.length)return;let b=Date.now();r(this.db,()=>{for(let c of a)this.upsertStmt.run({path:c.path,mtime:c.mtime,contentHash:c.contentHash,rulesetHash:c.rulesetHash,scannedAt:b})})}}let aS=["critical","high","medium","low"],aT={block:"blocked",redact:"redacted",warn:"warned"},aU=["blocked","redacted","warned"],aV=[{provider:"claudecode",coverage:100,supported:!0},{provider:"cursor",coverage:0,supported:!1},{provider:"codex",coverage:0,supported:!1},{provider:"chatgpt",coverage:0,supported:!1},{provider:"copilot",coverage:0,supported:!1},{provider:"api",coverage:0,supported:!1}],aW={"7d":"day","30d":"day","3m":"week","6m":"week"};function aX(a){return 864e5*Math.floor(a/864e5)}function aY(a){return new Date(a).toISOString().slice(0,10)}class aZ{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}severitySummary(){let a=new Map(v(this.db.prepare(`SELECT d.severity AS severity,
+                COUNT(*) AS count,
+                SUM(CASE
+                      WHEN e.event_type != 'code_change' THEN 1
+                      WHEN f.finding_key IS NULL THEN 0
+                      WHEN latest.status = 'resolved' THEN 1
+                      ELSE 0
+                    END) AS caught,
+                SUM(CASE
+                      WHEN e.event_type = 'code_change'
+                       AND f.finding_key IS NOT NULL
+                       AND (latest.status IS NULL OR latest.status != 'resolved') THEN 1
+                      ELSE 0
+                    END) AS open_at_rest
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         LEFT JOIN ${al} latest
+           ON latest.finding_key = f.finding_key
+         WHERE e.event_type IN (${h.hfB})
+         GROUP BY d.severity`)).map(a=>[a.severity,a])),b=aS.map(b=>({severity:b,count:a.get(b)?.count??0,caught:a.get(b)?.caught??0,openAtRest:a.get(b)?.open_at_rest??0}));return Promise.resolve({total:b.reduce((a,b)=>a+b.count,0),needsRemediation:b.reduce((a,b)=>a+b.openAtRest,0),bySeverity:b})}scanCoverage(a){return Promise.resolve({range:a,providers:aV.map(a=>({...a}))})}enforcementActions(a){let b=864e5*h.eI7[a],c=this.now(),d=c-b,e=this.findingsInRange(c-2*b,c),f={blocked:0,redacted:0,warned:0},g={blocked:0,redacted:0,warned:0};for(let a of e){let b=aT[a.actionTaken];b&&(a.occurredAt>=d?f[b]++:g[b]++)}let i=aU.map(a=>({kind:a,count:f[a],delta:f[a]-g[a]}));return Promise.resolve({range:a,total:i.reduce((a,b)=>a+b.count,0),actions:i})}findingsTimeseries(a){let b=aW[a],c=("day"===b?1:7)*864e5,d=h.eI7[a],e="day"===b?d:Math.ceil(d/7),f=this.now(),g=aX(f)-(d-1)*864e5,i=this.findingsInRange(g,f),j=Array.from({length:e},(a,b)=>({timestamp:aY(g+b*c),critical:0,high:0,medium:0}));for(let a of i){let b=j[Math.floor((a.occurredAt-g)/c)];if(b){var k;("critical"===(k=a.severity)||"high"===k||"medium"===k)&&b[a.severity]++}}return Promise.resolve({range:a,granularity:b,points:j})}mttrTrend(a){let b=aW[a],c=("day"===b?1:7)*864e5,d=h.eI7[a],e="day"===b?d:Math.ceil(d/7),f=this.now(),g=aX(f)-(d-1)*864e5,i=v(this.db.prepare(`SELECT COALESCE(f.first_detected_at, e.started_at) AS first_detected_at, d.severity AS severity,
+                latest.status AS latest_status,
+                latest.method AS latest_method,
+                latest.resolved_at AS latest_resolved_at
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         LEFT JOIN ${al} latest
+           ON latest.finding_key = f.finding_key
+         WHERE f.finding_key IS NOT NULL
+           AND e.event_type IN (${h.hfB})
+           AND EXISTS (
+             SELECT 1 FROM finding_resolution fr
+              WHERE fr.finding_key = f.finding_key
+                AND fr.resolved_at >= :windowStart
+           )`),{windowStart:g}),j=new Map,k=new Map;for(let a of i){if("resolved"!==a.latest_status||"fixed-at-source"!==a.latest_method||null==a.latest_resolved_at||a.latest_resolved_at<g||a.latest_resolved_at>=f)continue;let b=Math.floor((a.latest_resolved_at-g)/c);if(b<0||b>=e)continue;let d=`${String(b)}:${a.severity}`,h=Math.max(0,a.latest_resolved_at-a.first_detected_at);j.set(d,(j.get(d)??0)+h),k.set(d,(k.get(d)??0)+1)}return Promise.resolve({range:a,granularity:b,points:Array.from({length:e},(a,b)=>{let d={};for(let a of aS){let c=`${String(b)}:${a}`,e=k.get(c)??0;d[a]=e>0?(j.get(c)??0)/e:null}return{timestamp:aY(g+b*c),bySeverity:d}})})}topSources(a,b={}){let c=b.limit??5;if("user"===b.kind)return Promise.resolve({range:a,items:[]});let d=this.now(),e=d-864e5*h.eI7[a];return Promise.resolve({range:a,items:v(this.db.prepare(`SELECT json_extract(e.attributes, '$.repo') AS repo, count(*) AS c
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         WHERE e.started_at >= :from AND e.started_at < :to
+           AND e.event_type IN (${h.hfB})
+           AND json_extract(e.attributes, '$.repo') IS NOT NULL
+           AND json_extract(e.attributes, '$.repo') != ''
+         GROUP BY repo
+         ORDER BY c DESC, repo
+         LIMIT :limit`),{from:e,to:d,limit:c}).map(a=>({id:`repo_${a.repo}`,name:a.repo,kind:"repo",findingsCount:a.c}))})}recentlyResolved(a=20){return Promise.resolve({items:v(this.db.prepare(`SELECT f.finding_key AS finding_key,
+                d.rule_id AS rule_id,
+                d.severity AS severity,
+                json_extract(e.attributes, '$.file_path') AS path,
+                COALESCE(f.first_detected_at, e.started_at) AS first_detected_at,
+                latest.resolved_at AS latest_resolved_at
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         LEFT JOIN ${al} latest
+           ON latest.finding_key = f.finding_key
+         WHERE e.event_type = 'code_change'
+           AND f.finding_key IS NOT NULL
+           AND latest.status = 'resolved'
+           AND latest.method = 'fixed-at-source'
+           AND latest.resolved_at IS NOT NULL
+         ORDER BY latest_resolved_at DESC
+         LIMIT :limit`),{limit:a}).map(a=>({findingKey:a.finding_key,ruleId:a.rule_id,severity:a.severity,path:a.path??"",resolvedAt:new Date(a.latest_resolved_at).toISOString(),detectedAt:new Date(a.first_detected_at).toISOString()}))})}findingsInRange(a,b){return v(this.db.prepare(`SELECT e.started_at AS occurred_at, d.severity AS severity, f.action_taken AS action_taken
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+         WHERE e.started_at >= :from AND e.started_at < :to
+           AND e.event_type IN (${h.hfB})
+         ORDER BY e.started_at`),{from:a,to:b}).map(a=>({occurredAt:a.occurred_at,severity:a.severity,actionTaken:a.action_taken}))}}let a$=["provider","internal","external","ip"],a_="('http', 'ws')",a0=`LEFT JOIN egress_decision_override oh ON oh.host = d.host
+             LEFT JOIN egress_decision_override ol ON ol.destination_id = d.id AND ol.host IS NULL`;function a1(a){return{id:a.id,method:a.method,transport:a.transport,url:a.url,template:a.template,dataClass:a.dataClass,lastSeen:new Date(a.lastSeenMs).toISOString(),callSiteCount:a.callSiteCount}}function a2(a,b){let c=b.map(a=>a.transport),d=b.map(a=>a.dataClass),e=b.reduce((a,b)=>a+b.callSiteCount,0),f=b.length>0?Math.max(...b.map(a=>a.lastSeenMs)):a.lastSeenMs;return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,status:(0,h.Gw9)(a.trust,a.overrideDecision),isCustom:(0,h.y_0)(a.trust,a.overrideDecision),lastSeen:new Date(f).toISOString(),endpointCount:b.length,callSiteCount:e,transports:(0,h.by7)(c),dataClasses:(0,h.hzO)(d),review:(0,h.Fnc)(a.trust,c),network:"provider"===a.kind?null:L(a.networkJson,null),endpoints:b.map(a1)}}class a3{constructor(a){this.db=a}stats(){let a=z(this.db,"SELECT count(*) AS n FROM share_destination"),b=z(this.db,"SELECT count(*) AS n FROM share_endpoint"),c=z(this.db,"SELECT count(*) AS n FROM share_call_site"),d=z(this.db,`SELECT count(DISTINCT destination_id) AS n FROM share_endpoint
+       WHERE transport IN ${a_}`),e=z(this.db,`SELECT count(DISTINCT d.id) AS n
+       FROM share_destination d
+       LEFT JOIN share_endpoint e ON e.destination_id = d.id
+         AND e.transport IN ${a_}
+       WHERE d.trust IN ('unverified', 'ip') OR e.id IS NOT NULL`),f=A(this.db,"SELECT kind AS k, count(*) AS n FROM share_destination GROUP BY kind"),g={provider:f.get("provider")??0,internal:f.get("internal")??0,external:f.get("external")??0,ip:f.get("ip")??0},h=A(this.db,"SELECT trust AS k, count(*) AS n FROM share_destination GROUP BY trust");return Promise.resolve({destinations:a,endpoints:b,callSites:c,needsReview:e,insecure:d,byKind:g,byTrust:{recognized:h.get("recognized")??0,internal:h.get("internal")??0,unverified:h.get("unverified")??0,ip:h.get("ip")??0}})}listDestinations(a){let b=void 0===a.q||""===a.q?void 0:a.q,c=this.fetchDestinations(b,a.kind),d=this.groupEndpoints(c.map(a=>a.id)),e=c.map(a=>a2(a,d.get(a.id)??[])),f=new Map;for(let a of e){let b=f.get(a.kind);b?b.push(a):f.set(a.kind,[a])}return Promise.resolve({groups:a$.filter(a=>f.has(a)).map(a=>{let b=f.get(a)??[];return{kind:a,total:b.length,items:b}})})}needsReview(){let a=this.fetchDestinations(void 0,void 0,!0),b=this.groupEndpoints(a.map(a=>a.id));return Promise.resolve({items:a.map(a=>({dest:a,endpoints:b.get(a.id)??[]})).map(({dest:a,endpoints:b})=>({summary:a2(a,b),endpoints:b})).filter(({summary:a})=>a.review.needsReview).map(({summary:a,endpoints:b})=>({id:a.id,kind:a.kind,name:a.name,host:a.host,trust:a.trust,status:a.status,review:a.review,topDataClass:(0,h.C05)(b.map(a=>a.dataClass)),callSiteCount:a.callSiteCount,lastSeen:a.lastSeen})).sort((a,b)=>{let c=(0,h.WSs)(a.review.reasons)-(0,h.WSs)(b.review.reasons);return 0!==c?c:b.lastSeen.localeCompare(a.lastSeen)})})}getDestination(a){let b=this.fetchDestinationById(a);if(!b)return Promise.resolve(null);let c=this.fetchEndpoints([b.id]),d=this.fetchCallSites(c.map(a=>a.id));return Promise.resolve(function(a,b,c){let d=b.map(a=>a.transport),e=b.length>0?Math.max(...b.map(a=>a.lastSeenMs)):a.lastSeenMs,f=new Map;for(let a of c.slice(0,200)){let b={id:a.id,project:a.project,file:a.file,line:a.line,snippet:a.snippet,dynamic:a.dynamic,vendored:a.vendored,projectId:a.projectId},c=f.get(a.endpointId);c?c.push(b):f.set(a.endpointId,[b])}return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,status:(0,h.Gw9)(a.trust,a.overrideDecision),isCustom:(0,h.y_0)(a.trust,a.overrideDecision),lastSeen:new Date(e).toISOString(),transports:(0,h.by7)(d),dataClasses:(0,h.hzO)(b.map(a=>a.dataClass)),review:(0,h.Fnc)(a.trust,d),network:"provider"===a.kind?null:L(a.networkJson,null),note:a.note,endpoints:b.map(a=>({...a1(a),sites:f.get(a.id)??[]}))}}(b,c,d))}setEgressDecision(a,b){let c=!1;return q(this.db,()=>{let e=this.db.prepare("SELECT host FROM share_destination WHERE id = ?").get(a);void 0!==e&&(c=!0,this.db.prepare(`DELETE FROM egress_decision_override
+             WHERE host = :host OR (destination_id = :destinationId AND host IS NULL)`).run({host:e.host,destinationId:a}),null!==b&&this.db.prepare(`INSERT INTO egress_decision_override
+               (id, destination_id, host, decision, created_at, updated_at)
+             VALUES (:id, :destinationId, :host, :decision, :now, :now)`).run({id:(0,d.randomUUID)(),destinationId:a,host:e.host,decision:b,now:Date.now()}))},"IMMEDIATE"),c}recordProjectEgress(a){let{hits:b,droppedFiles:c,truncated:d}=function(a,b){if(a.length<=5e3)return{hits:[...a],droppedFiles:[],truncated:!1};if("walk"===b)return{hits:a.slice(0,5e3),droppedFiles:[],truncated:!0};let c=new Map;for(let b of a){let a=c.get(b.site.file);void 0===a?c.set(b.site.file,[b]):a.push(b)}let d=[],e=[];for(let[a,b]of c)d.length+b.length>5e3?e.push(a):d.push(...b);return{hits:d,droppedFiles:e,truncated:!0}}(a.hits,a.reconcile.mode),e=function(a,b){if("walk"===a.mode||0===b.length)return a;let c=new Set(b);return{mode:"ledger",scannedFiles:a.scannedFiles.filter(a=>!c.has(a)),deletedFiles:a.deletedFiles.filter(a=>!c.has(a))}}(a.reconcile,c),f=Date.now(),g={destinations:0,endpoints:0,callSites:0,truncated:d,droppedFiles:c};return q(this.db,()=>{let h=a.projectId??this.knownProjectId(a.projectKey);this.reconcileCallSites(a.projectKey,e),this.upsertHits(a,b,h,f),this.confirmLastSeen(a.projectKey,f),this.pruneOrphans(),g={...this.projectTotals(a.projectKey),truncated:d,droppedFiles:c}},"IMMEDIATE"),g}reconcileCallSites(a,b){if("walk"===b.mode){let c=b.walkedPrefix.replace(/\/+$/,"");this.db.prepare(`DELETE FROM share_call_site
+           WHERE project_key = :key
+             AND (:prefix = '' OR file = :prefix OR file LIKE :subtree ESCAPE '\\')
+             AND file NOT LIKE '.%'
+             AND file NOT LIKE '%/.%'`).run({key:a,prefix:c,subtree:`${l(c)}/%`});return}let c=[...new Set([...b.scannedFiles,...b.deletedFiles])];for(let b=0;b<c.length;b+=500){let d=c.slice(b,b+500);this.db.prepare(`DELETE FROM share_call_site
+           WHERE project_key = ? AND file IN (${m(d.length)})`).run(a,...d)}}upsertHits(a,b,c,e){if(0===b.length)return;let f=this.db.prepare(`INSERT INTO share_destination
+         (id, kind, name, host, category, trust, network_json, last_seen, provenance,
+          created_at, updated_at)
+       VALUES (:id, :kind, :name, :host, :category, :trust, :networkJson, :now, 'scan', :now, :now)
+       ON CONFLICT (host) DO UPDATE SET
+         kind = excluded.kind,
+         name = excluded.name,
+         category = excluded.category,
+         trust = excluded.trust,
+         network_json = excluded.network_json,
+         last_seen = excluded.last_seen,
+         updated_at = excluded.updated_at`),g=this.db.prepare("SELECT id FROM share_destination WHERE host = ?"),h=this.db.prepare(`INSERT INTO share_endpoint
+         (id, destination_id, method, transport, url, template, data_class, last_seen,
+          created_at, updated_at)
+       VALUES (:id, :destinationId, :method, :transport, :url, :template, :dataClass, :now,
+               :now, :now)
+       ON CONFLICT (destination_id, method, url) DO UPDATE SET
+         transport = excluded.transport,
+         template = excluded.template,
+         data_class = excluded.data_class,
+         last_seen = excluded.last_seen,
+         updated_at = excluded.updated_at`),i=this.db.prepare("SELECT id FROM share_endpoint WHERE destination_id = ? AND method = ? AND url = ?"),j=this.db.prepare(`INSERT INTO share_call_site
+         (id, endpoint_id, project, project_key, file, line, snippet, dynamic, vendored,
+          project_id, created_at, updated_at)
+       VALUES (:id, :endpointId, :project, :projectKey, :file, :line, :snippet, :dynamic,
+               :vendored, :projectId, :now, :now)
+       ON CONFLICT (endpoint_id, project_key, file, line) DO UPDATE SET
+         snippet = excluded.snippet,
+         dynamic = excluded.dynamic,
+         vendored = excluded.vendored,
+         project = excluded.project,
+         project_id = COALESCE(excluded.project_id, share_call_site.project_id),
+         updated_at = excluded.updated_at`),k=new Map,l=new Map;for(let m of b){let b=k.get(m.host);void 0===b&&(f.run({id:(0,d.randomUUID)(),kind:m.kind,name:m.name,host:m.host,category:m.category,trust:m.trust,networkJson:null===m.network?null:JSON.stringify(m.network),now:e}),b=w(g,[m.host])?.id??"",k.set(m.host,b));let n=`${b}\0${m.method}\0${m.url}`,o=l.get(n);void 0===o&&(h.run({id:(0,d.randomUUID)(),destinationId:b,method:m.method,transport:m.transport,url:m.url,template:+!!m.template,dataClass:m.dataClass,now:e}),o=w(i,[b,m.method,m.url])?.id??"",l.set(n,o)),j.run({id:(0,d.randomUUID)(),endpointId:o,project:a.project,projectKey:a.projectKey,file:m.site.file,line:m.site.line,snippet:m.site.snippet,dynamic:+!!m.site.dynamic,vendored:+!!m.site.vendored,projectId:c,now:e})}}knownProjectId(a){return w(this.db.prepare(`SELECT project_id AS projectId FROM share_call_site
+           WHERE project_key = ? AND project_id IS NOT NULL LIMIT 1`),[a])?.projectId??null}confirmLastSeen(a,b){this.db.prepare(`UPDATE share_endpoint SET last_seen = :now, updated_at = :now
+         WHERE id IN (SELECT DISTINCT endpoint_id FROM share_call_site WHERE project_key = :key)`).run({now:b,key:a}),this.db.prepare(`UPDATE share_destination SET last_seen = :now, updated_at = :now
+         WHERE id IN (SELECT DISTINCT e.destination_id
+                      FROM share_endpoint e
+                      JOIN share_call_site c ON c.endpoint_id = e.id
+                      WHERE c.project_key = :key)`).run({now:b,key:a})}pruneOrphans(){this.db.exec(`DELETE FROM share_endpoint
+       WHERE NOT EXISTS (SELECT 1 FROM share_call_site c WHERE c.endpoint_id = share_endpoint.id)`),this.db.exec(`DELETE FROM egress_decision_override
+       WHERE host IS NULL
+         AND destination_id IN (
+           SELECT d.id FROM share_destination d
+           WHERE NOT EXISTS (SELECT 1 FROM share_endpoint e WHERE e.destination_id = d.id))`),this.db.exec(`DELETE FROM share_destination
+       WHERE NOT EXISTS (
+         SELECT 1 FROM share_endpoint e WHERE e.destination_id = share_destination.id)`)}projectTotals(a){return{destinations:z(this.db,`SELECT count(DISTINCT e.destination_id) AS n
+         FROM share_endpoint e
+         JOIN share_call_site c ON c.endpoint_id = e.id
+         WHERE c.project_key = ?`,[a]),endpoints:z(this.db,"SELECT count(DISTINCT endpoint_id) AS n FROM share_call_site WHERE project_key = ?",[a]),callSites:z(this.db,"SELECT count(*) AS n FROM share_call_site WHERE project_key = ?",[a])}}mapDestRow(a){return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,note:a.note,networkJson:a.networkJson,lastSeenMs:a.lastSeenMs,overrideDecision:a.overrideDecision??null}}fetchDestinations(a,b,c=!1){let d,e=`d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
+                  d.network_json AS networkJson, d.last_seen AS lastSeenMs,
+                  d.created_at AS createdAt,
+                  COALESCE(oh.decision, ol.decision) AS overrideDecision`,f=[],g=[];if(b&&b.length>0&&(f.push(`d.kind IN (${m(b.length)})`),g.push(...b)),c&&f.push(`(d.trust IN ('unverified', 'ip')
+          OR EXISTS (SELECT 1 FROM share_endpoint re
+                     WHERE re.destination_id = d.id
+                       AND re.transport IN ${a_}))`),a){let b=n(a);f.push(`(d.name LIKE ? ESCAPE '\\' OR d.category LIKE ? ESCAPE '\\' OR e.url LIKE ? ESCAPE '\\'
+          OR c.project LIKE ? ESCAPE '\\' OR c.file LIKE ? ESCAPE '\\')`),g.push(b,b,b,b,b),d=`SELECT DISTINCT ${e}
+             FROM share_destination d
+             ${a0}
+             LEFT JOIN share_endpoint e ON e.destination_id = d.id
+             LEFT JOIN share_call_site c ON c.endpoint_id = e.id
+             ${f.length?`WHERE ${f.join(" AND ")}`:""}
+             ORDER BY d.created_at ASC, d.id ASC`}else d=`SELECT ${e}
+             FROM share_destination d
+             ${a0}
+             ${f.length?`WHERE ${f.join(" AND ")}`:""}
+             ORDER BY d.created_at ASC, d.id ASC`;return v(this.db.prepare(d),g).map(a=>this.mapDestRow(a))}fetchDestinationById(a){let b=w(this.db.prepare(`SELECT d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
+                d.network_json AS networkJson, d.last_seen AS lastSeenMs,
+                COALESCE(oh.decision, ol.decision) AS overrideDecision
+         FROM share_destination d
+         ${a0}
+         WHERE d.id = ?`),[a]);return b?this.mapDestRow(b):null}fetchEndpoints(a){return 0===a.length?[]:v(this.db.prepare(`SELECT e.id, e.destination_id AS destinationId, e.method, e.transport, e.url,
+                e.template, e.data_class AS dataClass, e.last_seen AS lastSeenMs,
+                count(c.id) AS callSiteCount
+         FROM share_endpoint e
+         LEFT JOIN share_call_site c ON c.endpoint_id = e.id
+         WHERE e.destination_id IN (${m(a.length)})
+         GROUP BY e.id
+         ORDER BY e.created_at ASC, e.id ASC`),a).map(a=>({id:a.id,destinationId:a.destinationId,method:a.method,transport:a.transport,url:a.url,template:1===a.template,dataClass:a.dataClass,lastSeenMs:a.lastSeenMs,callSiteCount:a.callSiteCount}))}groupEndpoints(a){let b=new Map;for(let c of this.fetchEndpoints(a)){let a=b.get(c.destinationId);a?a.push(c):b.set(c.destinationId,[c])}return b}fetchCallSites(a){return 0===a.length?[]:v(this.db.prepare(`SELECT id, endpoint_id AS endpointId, project, file, line, snippet, dynamic, vendored,
+                project_id AS projectId
+         FROM share_call_site
+         WHERE endpoint_id IN (${m(a.length)})
+         ORDER BY created_at ASC, id ASC`),a).map(a=>({id:a.id,endpointId:a.endpointId,project:a.project,file:a.file,line:a.line,snippet:a.snippet,dynamic:1===a.dynamic,vendored:1===a.vendored,projectId:a.projectId}))}}class a4{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO source_project
+         (id, url, name, attributes, first_seen, last_seen)
+       VALUES
+         (:id, :url, :name, :attributes, :firstSeen, :lastSeen)
+       ON CONFLICT(id) DO UPDATE SET
+         url = excluded.url,
+         name = excluded.name,
+         attributes = excluded.attributes,
+         last_seen = excluded.last_seen`)}upsert(a,b=Date.now()){let c=j(a.url),d=(0,h.QCA)(a,c,b);return this.upsertStmt.run(y({id:d.id,url:d.url,name:d.name,attributes:d.attributes,firstSeen:d.firstSeen,lastSeen:d.lastSeen})),c}findById(a){return w(this.db.prepare("SELECT * FROM source_project WHERE id = :id"),{id:a})}distinctNames(){return v(this.db.prepare(`SELECT DISTINCT name FROM source_project
+         WHERE name IS NOT NULL
+         ORDER BY name`)).map(a=>a.name)}}function a5(a,b){return b?{...a,hostId:b}:a}function a6(a){try{a.close()}catch{}}function a7(a){let b=new g.DatabaseSync(a);try{b.exec("PRAGMA journal_mode = WAL"),b.exec("PRAGMA busy_timeout = 2000"),b.exec("PRAGMA foreign_keys = ON")}catch(a){throw a6(b),a}return b}function a8(a){(0,e.mkdirSync)(a,{recursive:!0,mode:448}),D(a,448);let{db:b,events:c,findings:g,policies:m,installedPacks:n,scanLedger:o,exceptions:p,resolutions:v,ruleProbeCache:w,security:x,detections:z,shares:A,policyCatalog:B,inventory:L,inventoryAssets:M,projectFiles:N,activity:O,sourceProject:P,auditEvents:Q,classifiedData:R,inspectionDefinitions:S,inspectionFindings:T,configInventory:U}=function(a){let b=a7(a);try{var c;if(c=b,t(c,"table","tenants")||u(c,"events").includes("tenant_id")){b.close();let c=function(a){let b=`${a}.legacy.${String(Date.now())}.bak`;for(let c of((0,e.renameSync)(a,b),F(b),E(a)))(0,e.existsSync)(c)&&(0,e.rmSync)(c);return b}(a);b=a7(a),s(`Detected an older, incompatible (tenant-bearing) ${C}; backed it up to ${c} and created a fresh store.`)}for(let c of(!function(a,b){var c,d,e;let f=a.prepare("PRAGMA user_version").get().user_version;a.exec("CREATE TABLE IF NOT EXISTS migration_ledger (tag TEXT PRIMARY KEY, applied_at INTEGER NOT NULL)");let g=new Set(a.prepare("SELECT tag FROM migration_ledger").all().map(a=>a.tag)),i=0===g.size&&f>0,l=a.prepare("INSERT OR IGNORE INTO migration_ledger (tag, applied_at) VALUES (?, ?)");for(let[b,c]of h.lFU.entries()){if(g.has(c.tag)||c.tag===I)continue;let d=function(a){let b=[];for(let c of a.matchAll(/CREATE TABLE (?:IF NOT EXISTS )?`([^`]+)`/g))void 0===c[1]||c[1].startsWith("__new_")||b.push({kind:"table",name:c[1]});for(let c of a.matchAll(/ALTER TABLE `([^`]+)` ADD (?:COLUMN )?`([^`]+)`/g))void 0!==c[1]&&void 0!==c[2]&&b.push({kind:"column",table:c[1],name:c[2]});return b}(c.sql),e=d.filter(b=>"column"===b.kind?u(a,b.table,{includeGenerated:!0}).includes(b.name):t(a,"table",b.name));if(e.length>0&&e.length<d.length){let a=d.filter(a=>!e.includes(a)),b=`sqlite migration ${c.tag} has no ledger row, but the store already has ${e.map(G).join(", ")} while missing ${a.map(G).join(", ")} — the schema diverged from the migration history; refusing to replay or skip.`;throw s(b),Error(`[aka] ${b}`)}let h=d.length>0?e.length===d.length:i&&b<f,j=/PRAGMA foreign_keys\s*=\s*OFF/i.test(c.sql),k=H(c.sql);j&&a.exec("PRAGMA foreign_keys = OFF");try{q(a,()=>{for(let b of k){let c=function(a){let b=a.replace(/^(?:\s*--[^\n]*\n?)+/,"").trimStart();return/^CREATE (?:UNIQUE )?INDEX (?:IF NOT EXISTS )?`([^`]+)`/.exec(b)?.[1]}(b);if(void 0===c){if(h)continue}else if(t(a,"index",c))continue;a.exec(b)}if(j&&!h){let b=a.prepare("PRAGMA foreign_key_check").all();if(b.length>0)throw Error(`[aka] sqlite migration ${c.tag} left ${String(b.length)} foreign-key violation(s); rolling back.`)}l.run(c.tag,Date.now())},"IMMEDIATE")}finally{j&&a.exec("PRAGMA foreign_keys = ON")}}f<h.lFU.length&&a.exec(`PRAGMA user_version = ${String(h.lFU.length)}`),c=a,d="audit_events",t(c,"table",d)&&(u(c,d).includes("synced_at")||c.exec(`ALTER TABLE ${d} ADD COLUMN synced_at integer`)),a.exec(`CREATE TABLE IF NOT EXISTS scan_ledger (
+    path TEXT PRIMARY KEY,
+    mtime TEXT NOT NULL,
+    content_hash TEXT NOT NULL,
+    ruleset_hash TEXT NOT NULL,
+    scanned_at INTEGER NOT NULL
+  )`),a.exec(`CREATE TABLE IF NOT EXISTS blocked_detections (
+    reference TEXT PRIMARY KEY,
+    rule_id TEXT NOT NULL,
+    category TEXT NOT NULL,
+    value_fingerprint TEXT NOT NULL,
+    key_version INTEGER NOT NULL,
+    masked_value TEXT NOT NULL,
+    session_id TEXT,
+    repo TEXT,
+    blocked_at INTEGER NOT NULL
+  )`),a.exec(`CREATE TABLE IF NOT EXISTS rule_probe_cache (
+    rule_key TEXT PRIMARY KEY,
+    verdict TEXT NOT NULL,
+    worst_probe_ms REAL NOT NULL,
+    checked_at INTEGER NOT NULL
+  )`),(e=a).exec(`CREATE TABLE IF NOT EXISTS \`_pack_write_gate\` (
+	\`id\` integer PRIMARY KEY NOT NULL,
+	\`open\` integer DEFAULT 0 NOT NULL,
+	CONSTRAINT "ck_pack_write_gate_single_row" CHECK("_pack_write_gate"."id" = 1)
+)`),e.exec("INSERT OR IGNORE INTO _pack_write_gate (id, open) VALUES (1, 0)"),t(e,"table","installed_packs")&&e.exec(`CREATE TRIGGER IF NOT EXISTS trg_installed_packs_write_gate
+BEFORE UPDATE OF version, name, rules_json ON installed_packs
+WHEN (SELECT open FROM _pack_write_gate WHERE id = 1) IS NOT 1
+BEGIN SELECT RAISE(IGNORE); END`),function(a){if(!t(a,"table","audit_events"))return;let b=new Set(u(a,"audit_events",{includeGenerated:!0}));for(let c of J)b.has(c.name)||a.exec(c.ddl)}(a),function(a){try{let b=a.prepare(`SELECT id, url, name, attributes, first_seen AS firstSeen, last_seen AS lastSeen
+         FROM source_project
+         WHERE url IS NOT NULL AND id NOT LIKE 'sample:%'
+         ORDER BY last_seen DESC, id`).all().map(a=>({row:a,canonicalId:j(a.url)})).filter(({row:a,canonicalId:b})=>a.id!==b);if(0===b.length)return;let c=a.prepare(`INSERT INTO source_project (id, url, name, attributes, first_seen, last_seen)
+         VALUES (?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         first_seen = min(first_seen, excluded.first_seen),
+         last_seen = max(last_seen, excluded.last_seen)`),d=a.prepare("UPDATE audit_events SET source_project_id = ? WHERE source_project_id = ?"),e=a.prepare("UPDATE share_call_site SET project_id = ? WHERE project_id = ?"),f=["project_file","file_access_override"].map(b=>({dropCollisions:a.prepare(`DELETE FROM ${b} WHERE project_id = ?
+           AND path IN (SELECT path FROM ${b} WHERE project_id = ?)`),repoint:a.prepare(`UPDATE ${b} SET project_id = ? WHERE project_id = ?`)})),g=a.prepare("DELETE FROM source_project WHERE id = ?");q(a,()=>{for(let{row:a,canonicalId:h}of b){for(let{dropCollisions:b,repoint:e}of(c.run(h,a.url,a.name,a.attributes,a.firstSeen,a.lastSeen),d.run(h,a.id),f))b.run(a.id,h),e.run(h,a.id);e.run(h,a.id),g.run(a.id)}},"IMMEDIATE")}catch(a){s(`source_project id reconcile failed: ${String(a)}`)}}(a),!g.has(I)&&function(a){try{if(!function(a){let b=a.prepare(`SELECT rowid AS rowid, id, source_tool AS sourceTool, kind, occurred_at AS occurredAt,
+            content_hash AS contentHash, content, metadata
+     FROM events WHERE rowid > ? ORDER BY rowid LIMIT ?`),c=a.prepare(`INSERT OR IGNORE INTO audit_events
+       (id, parent_id, root_session_id, event_type, started_at, content, content_hash, attributes)
+     VALUES (:id, :parentId, :rootSessionId, :eventType, :startedAt, :content, :contentHash, :attributes)`),d=a.prepare("INSERT OR IGNORE INTO audit_events (id, event_type, started_at) VALUES (?, 'session', ?)");return K(a,"events",b,a=>{for(let e of a){var b;let a=function(a){if(null!==a)try{return JSON.parse(a)}catch{return}}(e.metadata),f=a?.sessionId??null;null!==f&&d.run(f,e.occurredAt),c.run(y({id:e.id,parentId:f,rootSessionId:f,eventType:e.kind,startedAt:e.occurredAt,content:e.content,contentHash:e.contentHash,attributes:(b={...e,metadata:a},JSON.stringify((0,h.$w9)({id:b.id,sourceTool:b.sourceTool,kind:b.kind,occurredAt:new Date(b.occurredAt).toISOString(),contentHash:b.contentHash,content:b.content,metadata:b.metadata})))}))}})}(a))return!1;let b=a.prepare(`SELECT rowid AS rowid, id, event_id AS eventId, rule_id AS ruleId, category, severity,
+            span_start AS spanStart, span_end AS spanEnd, masked_match AS maskedMatch,
+            action_taken AS actionTaken, confidence, finding_key AS findingKey,
+            first_detected_at AS firstDetectedAt
+     FROM findings WHERE rowid > ? ORDER BY rowid LIMIT ?`),c=a.prepare(`INSERT OR IGNORE INTO inspection_definitions
+       (id, rule_id, name, category, severity, definition, version)
+     VALUES (:id, :ruleId, :name, :category, :severity, :definition, :version)`),d=a.prepare(`INSERT INTO inspection_findings
+       (id, audit_event_id, inspection_definition_id, classified_data_id,
+        span_start, span_end, masked_match, action_taken, confidence,
+        finding_key, first_detected_at)
+     VALUES
+       (:id, :auditEventId, :inspectionDefinitionId, NULL,
+        :spanStart, :spanEnd, :maskedMatch, :actionTaken, :confidence,
+        :findingKey, :firstDetectedAt)
+     ON CONFLICT(id) DO NOTHING
+     ON CONFLICT (finding_key) DO UPDATE SET
+       first_detected_at = CASE
+         WHEN first_detected_at IS NULL THEN excluded.first_detected_at
+         WHEN excluded.first_detected_at IS NULL THEN first_detected_at
+         ELSE min(first_detected_at, excluded.first_detected_at)
+       END`);return K(a,"findings",b,a=>{let b=new Map;for(let e of a){let a=JSON.stringify([e.ruleId,e.category,e.severity]),f=b.get(a);if(void 0===f){let d=`unmigrated/${e.category}/${e.severity}`;f=k(e.ruleId,d),c.run(y({id:f,ruleId:e.ruleId,name:e.ruleId,category:e.category,severity:e.severity,definition:"",version:d})),b.set(a,f)}d.run(y({id:e.id,auditEventId:e.eventId,inspectionDefinitionId:f,spanStart:e.spanStart,spanEnd:e.spanEnd,maskedMatch:e.maskedMatch,actionTaken:e.actionTaken,confidence:e.confidence,findingKey:e.findingKey,firstDetectedAt:e.firstDetectedAt}))}})}catch(a){return s(`legacy history backfill failed: ${String(a)}`),!1}}(a)&&function(a,b){let c=h.lFU.find(a=>a.tag===I);if(c){if(b)try{var d=a,e=b;let c=`${e}.pre-drop.${String(Date.now())}.bak`;d.prepare("VACUUM INTO ?").run(c),F(c)}catch(a){s(`legacy events/findings backup failed; deferring the drop: ${String(a)}`);return}try{q(a,()=>{if(!a.prepare("SELECT 1 FROM migration_ledger WHERE tag = ?").get(c.tag)){for(let b of H(c.sql))a.exec(b);a.prepare("INSERT OR IGNORE INTO migration_ledger (tag, applied_at) VALUES (?, ?)").run(c.tag,Date.now())}},"IMMEDIATE")}catch(a){s(`legacy events/findings drop failed; deferring: ${String(a)}`)}}}(a,b)}(b,a),[a,...E(a)]))D(c,384);let d=new aM(b),f=new au(b),g={events:new ae(b),findings:new an(b),policies:d,installedPacks:f,scanLedger:new aR(b),exceptions:new ai(b),resolutions:new aP(b),ruleProbeCache:new aQ(b),security:new aZ(b),detections:new ad(b),shares:new a3(b),policyCatalog:new aN(f),inventory:new av(b),inventoryAssets:new aL(b),projectFiles:new aO(b),activity:new X(b),sourceProject:new a4(b),auditEvents:new Y(b),classifiedData:new Z(b),inspectionDefinitions:new ao(b),inspectionFindings:new ap(b),configInventory:new _(b)};return d.seedDefaults(),{db:b,...g}}catch(a){throw a6(b),a}}((0,f.join)(a,C));return{events:c,findings:g,policies:m,installedPacks:n,scanLedger:o,exceptions:p,resolutions:v,ruleProbeCache:w,security:x,detections:z,shares:A,policyCatalog:B,inventory:L,inventoryAssets:M,activity:O,sourceProject:P,auditEvents:Q,classifiedData:R,inspectionDefinitions:S,inspectionFindings:T,recordCapture:function(a,c){r(b,()=>{let b=a.metadata?.sessionId;b&&Q.ensureSessionRoot(b,a.occurredAt);let d=function(a,b,c=null){return i((0,h.tTV)(["capture",a??"no_session",b,c??"no_path"]))}(b??null,a.contentHash,a.metadata?.filePath??null);Q.insertAuditEvent({id:d,eventType:a.kind,startedAt:a.occurredAt,parentId:b,rootSessionId:b,content:a.content,contentHash:a.contentHash,attributes:(0,h.$w9)(a)});let e=new Map;for(let a of c){if(b&&T.isSessionDuplicate(a.ruleId,a.maskedMatch,b)||T.isEventDuplicate(d,a.ruleId,a.maskedMatch,a.span.start,a.span.end))continue;let c=`${a.ruleId}@${(0,h.qmP)(a)}`,f=e.get(c);f||(f=S.upsert((0,h.jTf)(a)),e.set(c,f)),T.insertFinding({id:a.id,auditEventId:d,inspectionDefinitionId:f,span:a.span,maskedMatch:a.maskedMatch,actionTaken:a.actionTaken,confidence:a.confidence,findingKey:a.findingKey??void 0})}})},ensureInventory:function(a){let c={};return r(b,()=>{let b=Date.now();a.host&&(c.hostId=L.upsert(a.host,b)),a.harness&&(c.harnessId=L.upsert(a5(a.harness,c.hostId),b)),c.accountId=L.upsert(a5({objectType:"user",identityKey:"local",attributes:{source:"local"}},c.hostId),b),a.project&&(c.sourceProjectId=P.upsert(a.project,b))})?c:{}},recordConfigScan:function(a){r(b,()=>{let b=(0,h.I8t)(a.scanEvent.startedAt);for(let c of a.items)L.upsert(c,b);Q.insertAuditEvent(a.scanEvent);let c=new Map;for(let b of a.definitions??[])c.set(`${b.ruleId}@${b.version}`,S.upsert(b));for(let b of a.findings??[]){let e=c.get(`${b.ruleId}@${b.version}`);e&&T.insertFinding({id:(0,d.randomUUID)(),auditEventId:a.scanEvent.id,inspectionDefinitionId:e,span:b.span,maskedMatch:b.maskedMatch,actionTaken:b.actionTaken,confidence:b.confidence})}})},recordProjectFiles:function(a,c){0!==c.files.length&&r(b,()=>{N.replaceForProject(a,c,Date.now())})},reconcileWorktreeProjects:function(a,c,d){try{let e=c.split(f.sep).join("/"),g=d.split(f.sep).join("/"),h=d===c?"":"url IN (:worktreePosix, :worktreeWin) OR ",i=b.prepare(`SELECT id FROM source_project
+           WHERE id <> :canonicalId
+             AND (${h}url LIKE :pattern ESCAPE '\\' OR url LIKE :patternWin ESCAPE '\\')`).all({canonicalId:a,...d===c?{}:{worktreePosix:g,worktreeWin:g.split("/").join("\\")},pattern:`${l(e)}/.claude/worktrees/%`,patternWin:`${l(e.split("/").join("\\"))}\\\\.claude\\\\worktrees\\\\%`});if(0===i.length)return;q(b,()=>{for(let{id:c}of i)b.prepare("UPDATE audit_events SET source_project_id = :canonicalId WHERE source_project_id = :id").run({canonicalId:a,id:c}),b.prepare("UPDATE OR IGNORE file_access_override SET project_id = :canonicalId WHERE project_id = :id").run({canonicalId:a,id:c}),b.prepare("DELETE FROM file_access_override WHERE project_id = :id").run({id:c}),b.prepare("DELETE FROM project_file WHERE project_id = :id").run({id:c}),b.prepare("DELETE FROM source_project WHERE id = :id").run({id:c})})}catch{}},configInventoryReport:()=>U.report(),facets:function(){return{hosts:L.distinctTitles("host"),harnesses:L.distinctTitles("harness"),osVersions:L.osVersions(),projects:P.distinctNames()}},purgeSampleData:()=>{!function(a){try{if(!a.prepare(`SELECT (
+         EXISTS(SELECT 1 FROM share_destination WHERE provenance = 'sample')
+         OR EXISTS(SELECT 1 FROM audit_events WHERE id LIKE 'sample:activity:%')
+         OR EXISTS(SELECT 1 FROM inventory_asset WHERE provenance = 'sample')
+       ) AS n`).get().n)return;q(a,()=>{a.exec(`DELETE FROM share_call_site WHERE endpoint_id IN (
+           SELECT e.id FROM share_endpoint e
+           JOIN share_destination d ON d.id = e.destination_id
+           WHERE d.provenance = 'sample')`),a.exec(`DELETE FROM egress_decision_override WHERE destination_id IN (
+           SELECT id FROM share_destination WHERE provenance = 'sample')`),a.exec(`DELETE FROM share_endpoint WHERE destination_id IN (
+           SELECT id FROM share_destination WHERE provenance = 'sample')`),a.exec("DELETE FROM share_destination WHERE provenance = 'sample'"),a.exec(`DELETE FROM harness_asset WHERE asset_id IN (SELECT id FROM inventory_asset WHERE provenance = 'sample')
+            OR harness_id IN (SELECT id FROM inventory WHERE object_type = 'harness' AND json_extract(attributes, '$.provenance') = 'sample')`),a.exec("DELETE FROM mcp_trust_override WHERE asset_id IN (SELECT id FROM inventory_asset WHERE provenance = 'sample')"),a.exec("DELETE FROM file_access_override WHERE project_id IN (SELECT id FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample')"),a.exec("DELETE FROM project_file WHERE project_id IN (SELECT id FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample')"),a.exec("DELETE FROM inventory_asset WHERE provenance = 'sample'"),a.exec("DELETE FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample'"),a.exec("DELETE FROM inventory WHERE object_type = 'harness' AND json_extract(attributes, '$.provenance') = 'sample'"),a.exec("DELETE FROM inspection_findings WHERE id LIKE 'sample:activity:%'"),a.exec("DELETE FROM inspection_definitions WHERE id LIKE 'sample:activity:%'"),a.exec("DELETE FROM audit_events WHERE root_session_id LIKE 'sample:activity:%'"),a.exec("DELETE FROM audit_events WHERE id LIKE 'sample:activity:%'"),a.exec(`CREATE TABLE IF NOT EXISTS app_meta (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL
+      )`),a.exec("DELETE FROM app_meta WHERE key LIKE 'sample_seeded:%'")})}catch{}}(b)},transaction:async function a(a){b.exec("BEGIN");try{let c=await a();return b.exec("COMMIT"),c}catch(a){try{b.exec("ROLLBACK")}catch{}throw a}},close:()=>{b.close()}}}function a9(a){let b;try{b=(0,e.readFileSync)((0,f.join)(a,"exception.key"),"utf8")}catch(a){if("ENOENT"===a.code)return null;throw a instanceof Error?a:Error(String(a))}let c=JSON.parse(b);if("object"!=typeof c||null===c)throw Error("exception key file is corrupt: not a JSON object");let{version:d,material:g}=c;if("number"!=typeof d||!Number.isInteger(d)||d<1)throw Error("exception key file is corrupt: bad version");if("string"!=typeof g)throw Error("exception key file is corrupt: bad material");let h=Buffer.from(g,"base64");if(32!==h.length)throw Error("exception key file is corrupt: bad material length");return{version:d,material:h}}function ba(a){return null===a?{status:"absent"}:{status:"present",version:a.version}}c(51455);var bb=c(70542);function bc(){return(0,f.join)((0,bb.homedir)(),".aka")}function bd(a=bc()){return(0,f.join)(a,"data")}function be(a=bc()){let b=function(a){let b;try{b=(0,e.readFileSync)(a,"utf8")}catch{return null}return M(b)??null}((0,f.join)(function(a=bc()){return(0,f.join)(a,"settings")}(a),"settings.json"));if(!b)return(0,h.i1j)();try{return h.hd_.parse(b)}catch{return(0,h.i1j)()}}},59990:(a,b,c)=>{"use strict";c.d(b,{HarnessOverview:()=>k});var d=c(60102),e=c(68191),f=c(48775),g=c(54802),h=c(23601),i=c(50237);let j=["block","redact","warn"];function k({harness:a,events:b,onSelect:c,onSelectProject:k}){let n=(a.categories.find(a=>"mcp"===a.type)?.assets??[]).filter(a=>"unapproved"===a.trust).length,o=b?.items??[],p=b?.counts,q=p?p.block+p.redact+p.warn:0;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)(f.K,{id:a.id,size:38}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"font-display text-base font-semibold",children:a.label}),(0,d.jsxs)("div",{className:"mt-px text-xs text-text-3",children:[a.kind," \xb7 ",a.version]})]})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Recent blocks, redactions & warnings"}),p&&(0,d.jsx)("span",{className:"ml-auto inline-flex items-center gap-1.5",children:j.map(a=>{let b=p[a];return b>0?(0,d.jsxs)(e.Ex,{variant:h.iL[a].tone,children:[b," ",h.iL[a].label.toLowerCase()]},a):null})})]}),0===o.length?(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-dashed border-border-strong px-3 py-3.5 text-text-3",children:[(0,d.jsx)(i.m,{name:"check-circle",className:"size-4 text-ok"}),(0,d.jsx)("span",{className:"text-xs",children:"No blocks, redactions or warnings from this harness"})]}):(0,d.jsxs)("div",{className:"flex flex-col gap-1.5",children:[o.map(a=>{let b=h.iL[a.kind],{day:c,time:f}=function(a){let b=new Date(a),c=b.toLocaleTimeString([],{hour:"2-digit",minute:"2-digit"}),d=new Date,e=a=>new Date(a.getFullYear(),a.getMonth(),a.getDate()).getTime(),f=Math.round((e(d)-e(b))/864e5);return{day:0===f?"Today":1===f?"Yesterday":b.toLocaleDateString([],{month:"short",day:"numeric"}),time:c}}(a.occurredAt);return(0,d.jsxs)("div",{className:"flex items-start gap-2.5 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-7 shrink-0 place-items-center rounded-md",b.bg,b.fg),children:(0,d.jsx)(i.m,{name:b.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:a.title}),(0,d.jsx)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:a.detail})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1",children:[(0,d.jsx)(e.Ex,{variant:b.tone,children:b.label}),(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[c," \xb7 ",f]})]})]},`${a.occurredAt}\xb7${a.title}`)}),q>o.length&&(0,d.jsxs)("div",{className:"pt-0.5 text-center text-xs text-text-3",children:["Showing ",o.length," of ",q," events"]})]})]}),(a.flagCount>0||n>0)&&(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-border bg-sev-high-fill px-3 py-2.5",children:[(0,d.jsx)(i.m,{name:"flag",className:"size-4 shrink-0 text-sev-high"}),(0,d.jsxs)("div",{className:"text-xs font-medium text-text",children:[a.flagCount>0&&`${String(a.flagCount)} item${1===a.flagCount?"":"s"} need review`,a.flagCount>0&&n>0&&" \xb7 ",n>0&&`${String(n)} unapproved MCP${1===n?"":"s"}`]})]}),a.projects.length>0&&(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Projects"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.projects.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.projects.map(a=>(0,d.jsx)(l,{p:a,onSelect:k},a.id))})]}),0===a.categories.length&&0===a.projects.length&&(0,d.jsx)(g.EmptyState,{message:"No projects, skills, MCP servers, hooks or configuration for this harness"}),a.categories.map(a=>{let b=h.pA[a.type];return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:b.label}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.assets.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.assets.map(a=>(0,d.jsx)(m,{it:a,onSelect:c},a.id))})]},a.type)})]})]})}function l({p:a,onSelect:b}){let c=a.accessCounts;return(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a.id)},className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-surface px-2.5 py-2 text-left cursor-pointer hover:bg-surface-2",children:[(0,d.jsx)("span",{className:"size-2.5 shrink-0 rounded-full",style:{background:(0,h.Cs)(a.language)}}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"truncate text-xs font-semibold text-text",children:a.name}),(0,d.jsx)(g.yk,{v:a.visibility})]}),(0,d.jsxs)("div",{className:"mt-0.5 flex items-center gap-1.5 truncate font-mono text-xs text-text-3",children:[(0,d.jsx)(i.m,{name:"repo",className:"size-3 shrink-0"}),a.repo]})]}),(0,d.jsx)(g.AJ,{counts:c}),c.blocked>0&&(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical",children:[c.blocked," blocked"]}),a.findingsCount>0&&(0,d.jsx)(g.Kh,{flags:["findings"],mini:!0}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}function m({it:a,onSelect:b}){let c=(0,h.TW)(a.type),f="mcp"===a.type?a.trust:void 0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a)},className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-surface px-2.5 py-2 text-left cursor-pointer hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-6.5 shrink-0 place-items-center rounded-md",c.bg,c.fg),children:(0,d.jsx)(i.m,{name:c.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-xs font-semibold text-text",children:a.name}),(0,d.jsx)("div",{className:"truncate font-mono text-xs text-text-3 mt-0.5",children:a.sub})]}),f&&(0,d.jsx)(g.As,{value:f}),a.flags.length>0&&(0,d.jsx)(g.Kh,{flags:a.flags,mini:!0}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}},60071:(a,b,c)=>{"use strict";c.d(b,{UpdateModal:()=>h});var d=c(60102),e=c(68191),f=c(80108),g=c(27527);function h({det:a,isUpdating:b,onClose:c,onConfirm:h}){let i=a?a.update?.latestVersion??a.latestVersion??a.version:"",j=a?.update?.latestRuleCount,k=!!a&&i!==a.version;return(0,d.jsx)(e.lG,{open:!!a,onOpenChange:a=>{a||c()},children:(0,d.jsx)(e.Cf,{className:"w-155 max-w-[96vw]","aria-describedby":void 0,children:a&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.L3,{className:"sr-only",children:["Update \xb7 ",a.name]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"grid size-9.5 shrink-0 place-items-center rounded-lg bg-sev-high-fill text-sev-high",children:(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"font-display text-base font-semibold text-text",children:["Update “",a.name,"”"]}),(0,d.jsxs)("div",{className:"text-xs text-text-3",children:["From the detection library \xb7 ",a.publisher??a.namespace]})]}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon",onClick:c,"aria-label":"Close",className:"size-8 text-text-3",children:(0,d.jsx)(f.uv,{"aria-hidden":!0,focusable:!1})})]}),(0,d.jsxs)("div",{className:"flex flex-col gap-5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)("span",{className:"rounded-lg border border-border bg-surface-2 px-3 py-1.5 font-mono text-sm font-semibold text-text-2",children:k?`v${a.version}`:`${String(a.ruleCount)} rules`}),(0,d.jsx)(f.fl,{"aria-hidden":!0,focusable:!1,className:"size-4 text-text-3"}),(0,d.jsx)("span",{className:"rounded-lg border border-sev-high bg-sev-high-fill px-3 py-1.5 font-mono text-sm font-bold text-sev-high",children:k?`v${i}`:`${String(j??a.ruleCount)} rules`}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsx)(g.Jk,{publisher:a.publisher??a.namespace,kind:a.publisherKind??"user"})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-ok bg-ok-fill px-3 py-2.5",children:[(0,d.jsx)(f.C1,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0 text-ok"}),(0,d.jsx)("div",{className:"text-sm text-text-2",children:"Updates are never applied automatically — your enabled state and policy assignment are preserved."})]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-2.5 border-t border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",onClick:c,children:"Cancel"}),(0,d.jsxs)(e.$n,{variant:"solid",tone:"primary",disabled:b,onClick:()=>{h(a.id)},children:[(0,d.jsx)(f.s3,{"aria-hidden":!0,focusable:!1,className:"size-4"}),b?"Updating…":k?`Update to v${i}`:"Update rules"]})]})]})})})}},61040:(a,b,c)=>{"use strict";c.d(b,{ActivityTokenUsageView:()=>l});var d=c(60102),e=c(68191),f=c(83143),g=c(80108),h=c(28928),i=c(10859);function j(){return(0,d.jsx)("span",{className:"grid size-8 shrink-0 place-items-center rounded-lg bg-primary-tint text-primary",children:(0,d.jsx)(g.Uy,{"aria-hidden":!0,focusable:!1,className:"size-4"})})}function k({summary:a}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Provider"}),(0,d.jsx)(e.nd,{children:"Model"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Input"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Output"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Cache"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Total"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Cost"})]})}),(0,d.jsx)(e.BF,{children:a.models.map(a=>(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nA,{className:"text-text-2",children:a.provider}),(0,d.jsx)(e.nA,{className:"font-mono text-text",children:a.model}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.inputTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.outputTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.cacheTokens)}),(0,d.jsx)(e.nA,{className:"text-right font-semibold tabular-nums text-text",children:(0,i.Sk)(a.totalTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text",children:null!==a.estimatedCostUsd?(0,i.UK)(a.estimatedCostUsd):"—"})]},`${a.provider} ${a.model}`))})]})}function l({summary:a,isLoading:b,error:c,rangeLabel:l}){let[m,n]=(0,f.useState)(!1);if(c)return(0,d.jsx)(e.Zp,{className:"mb-3.5 shrink-0 px-5 py-3.5 shadow-sm",children:(0,d.jsx)(h.r,{message:c})});if(b&&!a)return(0,d.jsxs)(e.Zp,{className:"mb-3.5 flex shrink-0 items-center gap-2.5 px-5 py-3.5 shadow-sm","aria-busy":!0,children:[(0,d.jsx)(e.EA,{className:"size-8 shrink-0 rounded-lg"}),(0,d.jsx)(e.EA,{className:"h-5 w-64"})]});if(!(null!==a&&a.models.length>0))return(0,d.jsxs)(e.Zp,{className:"mb-3.5 flex shrink-0 items-center gap-2.5 px-5 py-3.5 shadow-sm",children:[(0,d.jsx)(j,{}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:"text-ui font-semibold text-text",children:"Token usage"}),(0,d.jsx)("div",{className:"text-xs text-text-3",children:"No token usage recorded yet — sessions are reconciled as you work."})]})]});let o=`${String(a.sessionCount)} session${1===a.sessionCount?"":"s"}`,p=(0,i.xd)(a.estimatedCostUsd,a.costIsPartial);return(0,d.jsxs)(e.Zp,{className:"mb-3.5 shrink-0 overflow-hidden shadow-sm",children:[(0,d.jsxs)("button",{type:"button",onClick:()=>{n(a=>!a)},"aria-expanded":m,"aria-controls":"activity-token-usage-body",className:"flex w-full cursor-pointer items-center gap-2.5 px-5 py-3.5 text-left transition-colors hover:bg-surface-2",children:[(0,d.jsx)(j,{}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-baseline gap-x-2 gap-y-0.5",children:[(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:"Token usage"}),l&&(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["\xb7 ",l]})]}),(0,d.jsxs)("div",{className:"mt-0.5 flex flex-wrap items-center gap-x-2.5 gap-y-0.5 text-xs text-text-3",children:[(0,d.jsx)("span",{children:o}),(0,d.jsx)("span",{className:"text-border-strong",children:"\xb7"}),(0,d.jsxs)("span",{className:"font-semibold tabular-nums text-text-2",children:[(0,i.Sk)(a.totalTokens)," tokens"]}),(0,d.jsx)("span",{className:"text-border-strong",children:"\xb7"}),(0,d.jsx)("span",{className:"font-semibold tabular-nums text-text-2",children:p})]})]}),(0,d.jsx)(g.D3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 shrink-0 text-text-3 transition-transform",m&&"rotate-180")})]}),m&&(0,d.jsxs)("div",{id:"activity-token-usage-body",className:"max-h-64 overflow-y-auto border-t border-border px-2 py-2",children:[(0,d.jsx)(k,{summary:a}),a.costIsPartial&&(0,d.jsx)("p",{className:"px-3 pb-1 pt-2 text-xs text-text-3",children:"— = unknown pricing (a local or non-Anthropic model); the cost total is a lower bound."})]})]})}},62502:(a,b,c)=>{"use strict";c.d(b,{FindingsTableView:()=>l});var d=c(60102),e=c(68191),f=c(83143),g=c(9),h=c(80108),i=c(90753),j=c(69428),k=c(14920);function l({groups:a,columns:b,selection:c,expandedIds:g,onToggleExpand:i,onSelectGroup:k,onSelectInstance:l,hasMore:m=!1,isLoading:n=!1,error:q=null,emptyState:r,sessionFirings:s,statusFilter:t}){return(0,d.jsx)(e.Zp,{className:"flex flex-col overflow-hidden shadow-sm h-full",children:(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto p-4",children:[q?(0,d.jsxs)("p",{className:"py-8 text-center text-sm text-sev-critical",children:["Error loading findings: ",q]}):n?(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"Loading findings…"}):0===a.length?r??(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"No findings match these filters."}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{className:"w-10"}),b.map(a=>(0,d.jsx)(e.nd,{children:a.header},a.id))]})}),(0,d.jsx)(e.BF,{children:a.map(a=>{let m=g.has(a.id),n=c?.finding.id===a.id&&!c.instance,q=(0,j.EQ)(a.instances,t);return(0,d.jsxs)(f.Fragment,{children:[(0,d.jsxs)(e.Hj,{onClick:()=>{k(a)},"aria-label":`View details for ${a.subtype} finding`,className:(0,e.cn)("cursor-pointer hover:bg-surface-2",n&&"bg-surface-2"),children:[(0,d.jsx)(e.nA,{className:"text-text-3",children:(0,d.jsx)(e.$n,{"aria-label":m?"Collapse":"Expand",onClick:b=>{b.stopPropagation(),i(a.id)},size:"icon",variant:"ghost",children:(0,d.jsx)(h.vK,{className:(0,e.cn)("size-4 transition-transform",m&&"rotate-90")})})}),b.map(b=>(0,d.jsx)(e.nA,{children:o[b.id](a)},b.id))]}),m&&q.map(f=>(0,d.jsxs)(e.Hj,{onClick:()=>{l(a,f)},"aria-label":`View details for ${a.subtype} finding in ${f.repo}`,className:(0,e.cn)("cursor-pointer hover:bg-surface-2",c?.instance?.id===f.id?"bg-surface-2":"bg-surface-2/50"),children:[(0,d.jsx)(e.nA,{}),b.map(b=>(0,d.jsx)(e.nA,{children:p[b.id](a,f)},b.id))]},f.id)),m&&s&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsx)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:(s[a.id]??0)>0?`Fired ${String(s[a.id])} times in this session's transcript — the session's "triggered" tally counts every firing, this row counts unique values.`:`Caught by live enforcement only — not re-detected in this session's transcript.`})]}),m&&0===q.length&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsxs)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:["No locations with the selected status among the most recently detected — the status column reflects all ",a.instanceCount," locations."]})]}),m&&q.length>0&&q.length<a.instanceCount&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsxs)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:["Showing the ",q.length," most recent of"," ",a.instanceCount," locations."]})]})]},a.id)})})]}),m&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the first ",a.length," types — refine the filters to narrow results."]})]})})}function m({finding:a}){let b=j.y7[a.category]??h.RY;return(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-7 shrink-0 items-center justify-center rounded-lg",(0,j.i9)(a.category)),children:(0,d.jsx)(b,{className:"size-4"})}),(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsx)("span",{className:"font-semibold text-text",children:a.subtype}),(0,d.jsx)("span",{className:"block max-w-[20rem] truncate font-mono text-xs text-text-3",title:a.match.maskedValue,children:a.match.maskedValue})]})]})}function n({status:a}){if(!a)return(0,d.jsx)("span",{className:"text-text-3",children:"—"});let b=j.B5[a];return(0,d.jsx)(e.Ex,{variant:b.badge,className:"h-6",children:b.label})}let o={severity:a=>(0,d.jsx)(e.Pt,{severity:a.severity}),subtype:a=>(0,d.jsx)(m,{finding:a}),sources:a=>(0,d.jsx)(k.B,{ids:a.providers}),locations:a=>(0,d.jsxs)("span",{className:"text-text-3",children:[a.instanceCount," locations"]}),action:a=>(0,d.jsx)(i._,{aggregateAction:a.aggregateAction}),status:a=>(0,d.jsx)(n,{status:a.status}),latest:a=>(0,d.jsx)("span",{className:"text-text-3 text-xs",children:(0,g.K)(a.latestDetectedAt)})},p={severity:a=>(0,d.jsx)(e.Pt,{severity:a.severity}),subtype:(a,b)=>(0,d.jsxs)("div",{className:"flex items-center gap-2.5 pl-1",children:[(0,d.jsx)("span",{className:"-mt-1.5 size-3.5 shrink-0 rounded-bl border-b-[1.5px] border-l-[1.5px] border-border-strong"}),(0,d.jsxs)("div",{className:"flex flex-col gap-px",children:[(0,d.jsx)("span",{className:"font-semibold text-text text-ui",children:b.repo}),(0,d.jsx)("span",{className:"font-mono text-label text-text-3",children:b.id})]})]}),sources:(a,b)=>(0,d.jsx)(k.i,{provider:b.provider}),locations:(a,b)=>(0,d.jsx)("span",{className:"font-mono text-xs text-text-3 block max-w-[20rem] truncate",title:(0,j.xE)(b),children:(0,j.xE)(b)}),action:(a,b)=>(0,d.jsx)(i.T,{action:b.action}),status:(a,b)=>(0,d.jsx)(n,{status:b.status}),latest:(a,b)=>(0,d.jsx)("span",{className:"text-text-3 text-xs",children:(0,g.K)(b.detectedAt)})}},64119:(a,b,c)=>{"use strict";c.d(b,{AppShell:()=>k});var d=c(60102),e=c(68191),f=c(91325),g=c.n(f),h=c(5648),i=c(96602);let j=[{label:"Security",icon:i.Zu,href:"/security"},{label:"Findings",icon:i.kp,href:"/findings"},{label:"Inventory",icon:i.mL,href:"/inventory"},{label:"Data Shares",icon:i._G,href:"/data-shares"},{label:"Activity",icon:i.np,href:"/activity"},{label:"Detections",icon:i.kp,href:"/detections"},{label:"Policies",icon:i.iB,href:"/policies"},{label:"Exceptions",icon:i.RY,href:"/exceptions"},{label:"Scan",icon:i.WI,href:"/scan"},{label:"Updates",icon:i.fN,href:"/updates"},{label:"Settings",icon:i.Ze,href:"/settings"}];function k({children:a}){let b=(0,h.usePathname)();return(0,d.jsxs)("div",{className:"flex h-screen overflow-hidden bg-canvas",children:[(0,d.jsx)(l,{pathname:b}),(0,d.jsxs)("div",{className:"flex min-w-0 flex-1 flex-col",children:[(0,d.jsx)(n,{}),(0,d.jsx)("main",{className:"flex-1 overflow-y-auto",children:a})]})]})}function l({pathname:a}){return(0,d.jsxs)("aside",{className:"flex w-62 flex-col border-r border-border bg-surface shrink-0",children:[(0,d.jsx)("div",{className:"flex h-16 items-center border-b border-text/6 px-5",children:(0,d.jsx)(i.j4,{"aria-label":"AKA",className:"h-8 w-auto text-text"})}),(0,d.jsx)("nav",{className:"flex flex-1 flex-col gap-0.5 overflow-y-auto px-3 py-3.5",children:j.map(b=>(0,d.jsx)(m,{item:b,active:void 0!==b.href&&(a===b.href||a.startsWith(`${b.href}/`))},b.label))})]})}function m({item:a,active:b}){let c=a.icon,f=(0,e.cn)("flex w-full items-center gap-3 rounded-lg px-3 h-10 text-left text-sm group font-medium transition-colors cursor-pointer",b?"bg-primary-tint text-primary font-semibold":"text-text-2 hover:bg-surface-2 hover:text-text"),h=(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 shrink-0",b?"text-primary":"text-text-3 group-hover:text-text-2")}),(0,d.jsx)("span",{className:"flex-1",children:a.label})]});return a.href?(0,d.jsx)(g(),{href:a.href,"aria-current":b?"page":void 0,className:f,children:h}):(0,d.jsx)("button",{type:"button","aria-current":b?"page":void 0,className:f,children:h})}function n(){return(0,d.jsx)("header",{className:"flex items-center gap-4 border-b border-border bg-surface px-6 h-16",children:(0,d.jsx)("div",{className:"ml-auto flex items-center gap-2"})})}},64162:(a,b,c)=>{"use strict";c.d(b,{ProjectPane:()=>k});var d=c(60102),e=c(68191),f=c(83143),g=c(54802),h=c(23601),i=c(50237);function j(a){let b=a.lastIndexOf("/");return -1===b?"":a.slice(0,b)}function k(a){let{proj:b,path:c,onPathChange:f,query:j,tree:k,isLoading:o,error:s,onClose:t}=a,u=j.trim().length>0,v=k?.folders??[],w=k?.files??[],x=b.accessCounts;return(0,d.jsxs)(e.Zp,{className:"flex min-h-0 min-w-0 flex-1 flex-col overflow-hidden",children:[(0,d.jsxs)("div",{className:"border-b border-border px-5 py-3.5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3.5",children:[(0,d.jsx)("div",{className:"min-w-0 flex-1",children:(0,d.jsx)(m,{proj:b,path:c,onPathChange:f})}),(0,d.jsx)(l,{...a}),t&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon","aria-label":"Back to harness",title:"Back to harness",onClick:t,children:(0,d.jsx)(i.m,{name:"x"})})]}),(0,d.jsxs)("div",{className:"mt-3 flex items-start gap-2.5",children:[(0,d.jsx)(g.yk,{v:b.visibility}),(0,d.jsxs)("div",{className:"flex min-w-0 flex-1 gap-2.5 flex-wrap justify-between",children:[(0,d.jsx)("span",{className:"text-xs text-text-3",children:(0,h._t)(b,"source")}),(0,d.jsx)("span",{className:"flex items-center gap-3 text-xs text-text-3",children:h.IF.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("size-2 rounded-sm",h.Pe[a].bar)}),x[a]," ",h.Pe[a].label]},a))})]})]})]}),!u&&a.blocked.length>0&&(0,d.jsx)(r,{...a}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 pb-4 pt-2",children:o&&!k?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-text-3",children:"Loading files…"}):s?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-sev-critical",children:s}):u?w.length>0?(0,d.jsx)(q,{caption:`${String(w.length)} result${1===w.length?"":"s"}`,rows:w,showPath:!0,...a}):(0,d.jsxs)("div",{className:"py-12 text-center text-text-3",children:[(0,d.jsx)(i.m,{name:"search",className:"mx-auto mb-2 size-6"}),(0,d.jsxs)("div",{className:"text-sm",children:["No files match “",j,"”"]})]}):0===v.length&&0===w.length?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-text-3",children:"This folder is empty"}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Name"}),(0,d.jsx)(e.nd,{children:"Origin"}),(0,d.jsx)(e.nd,{children:"LLM access"}),(0,d.jsx)(e.nd,{className:"w-10"})]})}),(0,d.jsxs)(e.BF,{children:[v.map(a=>(0,d.jsx)(n,{folder:a,onOpen:()=>{f([...c,a.name])}},"d"+a.name)),w.map(b=>(0,d.jsx)(p,{file:b,...a},"f"+b.path))]})]})})]})}function l({proj:a,query:b,onQueryChange:c}){return(0,d.jsxs)("div",{className:"relative w-70 shrink-0",children:[(0,d.jsx)(i.m,{name:"search",className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:b,onChange:a=>{c(a.target.value)},placeholder:`Search files in ${a.name}…`,className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-8 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"}),b&&(0,d.jsx)("button",{type:"button","aria-label":"Clear search",onClick:()=>{c("")},className:"absolute right-2 top-1/2 -translate-y-1/2 rounded p-1 text-text-3 hover:text-text",children:(0,d.jsx)(i.m,{name:"x",className:"size-3.5"})})]})}function m({proj:a,path:b,onPathChange:c}){let g=[a.name,...b];return(0,d.jsxs)("div",{className:"flex min-w-0 flex-wrap items-center gap-1.5",children:[b.length>0&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon",className:"size-7",title:"Up one level",onClick:()=>{c(b.slice(0,-1))},children:(0,d.jsx)(i.m,{name:"arrow-up"})}),g.map((a,h)=>{let j=h===g.length-1;return(0,d.jsxs)(f.Fragment,{children:[h>0&&(0,d.jsx)(i.m,{name:"chevron-right",className:"size-3 text-text-3"}),(0,d.jsx)("button",{type:"button",onClick:()=>{c(b.slice(0,h))},className:(0,e.cn)("rounded px-1 py-0.5 text-sm",0===h&&"font-mono",j?"cursor-default font-bold text-text":"font-semibold text-text-2 hover:text-text"),children:a})]},h)})]})}function n({folder:a,onOpen:b}){let c=a.accessCounts;return(0,d.jsxs)(e.Hj,{className:"cursor-pointer hover:bg-surface-2",onClick:b,children:[(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)(i.m,{name:"folder",className:"size-4.5 shrink-0 text-primary"}),(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:a.name}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[c.total," file",1===c.total?"":"s"]})]})}),(0,d.jsx)(e.nA,{className:"text-xs text-text-3",children:"Folder"}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(g.AJ,{counts:c}),c.blocked>0?(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical",children:[c.blocked," blocked"]}):(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[c.total," allowed"]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"grid size-7 place-items-center","aria-hidden":"true",children:(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})})})]})}function o({file:a,showPath:b}){let c=j(a.path),e="blocked"===a.access;return(0,d.jsxs)("div",{className:"flex min-w-0 items-center gap-2.5",children:[(0,d.jsx)(i.m,{name:"file",className:"size-4.5 shrink-0 text-text-3"}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-baseline gap-1.5 whitespace-nowrap",children:[b&&c.length>0&&(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[c,"/"]}),(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name})]}),a.blockedAt&&e&&(0,d.jsxs)("div",{className:"mt-px flex items-center gap-1.5 text-xs text-sev-critical",children:[(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3"}),a.note]})]})]})}function p({file:a,onSetAccess:b,onOpenFile:c,drawerPath:f,showPath:h}){return(0,d.jsxs)(e.Hj,{className:(0,e.cn)("cursor-pointer hover:bg-surface-2",f===a.path&&"bg-surface-2"),onClick:()=>{c(a.path)},children:[(0,d.jsx)(e.nA,{children:(0,d.jsx)(o,{file:a,showPath:h})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(g.TJ,{origin:a.origin})}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(g.kx,{value:a.access,onChange:c=>{b(a.path,c)}}),(0,d.jsx)(g.Vx,{value:a.access})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"grid size-7 place-items-center","aria-hidden":"true",children:(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})})})]})}function q({caption:a,rows:b,showPath:c,...f}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:a}),(0,d.jsx)(e.nd,{children:"Origin"}),(0,d.jsx)(e.nd,{children:"LLM access"}),(0,d.jsx)(e.nd,{className:"w-10"})]})}),(0,d.jsx)(e.BF,{children:b.map(a=>(0,d.jsx)(p,{file:a,showPath:c,...f},a.path))})]})}function r({blocked:a,showBlocked:b,onToggleBlocked:c,onSetAccess:f,onOpenFile:k}){return(0,d.jsxs)("div",{className:"border-b border-border bg-surface-2",children:[(0,d.jsxs)("button",{type:"button",className:"flex w-full items-center gap-2.5 px-4.5 py-3 text-left cursor-pointer",onClick:c,children:[(0,d.jsx)("span",{className:"grid size-6 shrink-0 place-items-center rounded-md bg-sev-critical-fill text-sev-critical",children:(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3.5"})}),(0,d.jsx)("span",{className:"text-ui font-semibold",children:"Recently blocked"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-critical px-2 py-px text-xs font-bold text-white",children:a.length}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:"Auto-blocked on detection — review to adjust"}),(0,d.jsx)(i.m,{name:"chevron-down",className:(0,e.cn)("ml-auto size-4.5 text-text-3 transition-transform",!b&&"-rotate-90")})]}),b&&(0,d.jsx)("div",{className:"flex flex-col gap-2 px-3.5 pb-3",children:a.map(a=>{let b=j(a.path);return(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-baseline gap-1.5 overflow-hidden whitespace-nowrap",children:[b.length>0&&(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[b,"/"]}),(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name})]}),(0,d.jsxs)("div",{className:"mt-0.5 text-xs text-text-3",children:[a.note,a.blockedAt?` \xb7 blocked ${(0,h.v7)(a.blockedAt)}`:""]})]}),(0,d.jsx)(g.kx,{value:a.access,onChange:b=>{f(a.path,b)}}),(0,d.jsx)(g.Vx,{value:a.access}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"primary",size:"sm",onClick:()=>{k(a.path)},children:"Review"})]},a.path)})})]})}},64299:(a,b,c)=>{"use strict";c.d(b,{WorkspaceSettingsFormView:()=>m});var d=c(60102),e=c(16312),f=c(68191),g=c(83143),h=c(43644);let i=[{value:"redact",label:"Redact",description:"Lean toward replacing sensitive values before they reach the model (recommended)."},{value:"warn",label:"Warn only",description:"Lean toward surfacing detections rather than redacting them by default."}],j=[{value:"session-only",label:"Session only",description:"Only activity from after install is inspected (default — never assumed)."},{value:"full",label:"Full",description:"Pre-install surfaces (existing configs, history) may be scanned too. This also lets /aka:setup send what that scan finds — raw values including any secrets and the surrounding transcript text — to the model API to be rated. Switching back to Session only stops future scans; it cannot recall data already sent."}],k=[{value:"revoked",label:"Not granted",description:"The setup scan will not send findings to the model API (default — never assumed)."},{value:"granted",label:"Granted",description:"The setup scan may send each finding, plus surrounding context with any secrets in it masked, to the model API to sort real leaks from noise."}];function l({name:a,choices:b,value:c,onChange:e}){return(0,d.jsx)("div",{className:"flex flex-col gap-2",role:"radiogroup","aria-label":a,children:b.map(b=>(0,d.jsxs)("label",{className:(0,f.cn)("flex cursor-pointer items-start gap-3 rounded-lg border p-3 transition-colors",c===b.value?"border-primary bg-primary-tint":"border-border bg-surface hover:bg-surface-2"),children:[(0,d.jsx)("input",{type:"radio",name:a,checked:c===b.value,onChange:()=>{e(b.value)},className:"mt-1 accent-primary"}),(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"block text-sm font-semibold text-text",children:b.label}),(0,d.jsx)("span",{className:"mt-0.5 block text-xs text-text-2",children:b.description})]})]},b.value))})}function m({settings:a,onSave:b,busy:c,error:m,saved:n}){let[o,p]=(0,g.useState)(a.policy),[q,r]=(0,g.useState)(a.historicalAccess),s=(0,e.DLF)(a.modelJudgeConsent)?"granted":"revoked",[t,u]=(0,g.useState)(s),v=o!==a.policy||q!==a.historicalAccess||t!==s;return(0,d.jsxs)("div",{className:"flex max-w-2xl flex-col gap-6",children:[(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Sensitive-data handling"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Your default leaning for sensitive detections. What actually happens per detection is governed by the per-category Policies, not this global default."}),(0,d.jsx)(l,{name:"policy",choices:i,value:o,onChange:p})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Historical access"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Consent to inspect surfaces that existed before AKA was installed."}),(0,d.jsx)(l,{name:"historicalAccess",choices:j,value:q,onChange:r})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Model-judge consent"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"A separate consent from historical access: this governs whether the /aka:setup scan may send findings to the model API to sort real leaks from noise. The file path is never sent, and any secrets in the surrounding context are masked before it goes."}),(0,d.jsx)(l,{name:"modelJudgeConsent",choices:k,value:t,onChange:u})]}),(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(f.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!v||c,onClick:()=>{b({policy:o,historicalAccess:q,modelJudgeConsent:"granted"===t})},children:c?"Saving…":"Save changes"}),n&&!v&&(0,d.jsx)("span",{className:"text-xs text-ok",children:"Saved."}),m&&(0,d.jsx)("span",{className:"text-xs text-sev-critical",children:m})]})]})}},64846:(a,b,c)=>{"use strict";c.d(b,{HarnessSelect:()=>i});var d=c(60102),e=c(68191),f=c(80108),g=c(48775),h=c(48421);function i({value:a,onChange:b,options:c}){let i=c?h.oo.filter(b=>c.includes(b)||a.includes(b)):h.oo,j=0===a.length,k=a[0],l=j?"All harnesses":1===a.length&&k?g.x[k].label:`${String(a.length)} harnesses`;return(0,d.jsxs)(e.rI,{children:[(0,d.jsxs)(e.ty,{className:(0,e.cn)("group flex h-8.5 w-full items-center gap-2 rounded-lg border bg-surface px-2.5 text-sm outline-none focus-visible:ring-2 focus-visible:ring-primary/40",j?"border-border":"border-primary"),children:[(0,d.jsx)(f.k3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-3.5 shrink-0",j?"text-text-3":"text-primary")}),(0,d.jsx)("span",{className:"flex-1 text-left font-medium text-text",children:l}),!j&&(0,d.jsx)(e.Ex,{variant:"primary",className:"px-1.5 py-0 text-label bg-surface",children:a.length}),(0,d.jsx)(f.D3,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3 transition-transform group-data-[state=open]:rotate-180"})]}),(0,d.jsxs)(e.SQ,{align:"start",className:"w-(--radix-dropdown-menu-trigger-width)",children:[(0,d.jsx)(e.hO,{checked:j,onCheckedChange:()=>{b([])},onSelect:a=>{a.preventDefault()},children:"All harnesses"}),(0,d.jsx)(e.mB,{}),i.map(c=>(0,d.jsx)(e.hO,{checked:a.includes(c),onCheckedChange:()=>{let d=a.includes(c)?a.filter(a=>a!==c):[...a,c];b(d.length===i.length?[]:d)},onSelect:a=>{a.preventDefault()},children:(0,d.jsxs)("span",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"size-2 shrink-0 rounded-xs",style:{background:g.x[c].color}}),g.x[c].label]})},c))]})]})}},67641:(a,b,c)=>{"use strict";c.d(b,{PolicyPicker:()=>f});var d=c(60102),e=c(11294);function f({value:a,onChange:b}){let c=!b;return(0,d.jsx)("div",{className:"inline-flex gap-1 self-start rounded-lg border border-border bg-surface-2 p-0.5"+(c?" opacity-70":""),"aria-disabled":c||void 0,children:e.uR.map(f=>{let g=(0,e.ES)(f),h=a===f,[i,j]=(0,e.vV)(g.tone),k="gray"===g.tone?"var(--color-surface)":j,l=g.icon;return(0,d.jsxs)("button",{type:"button",disabled:c,onClick:b?()=>{b(f)}:void 0,"aria-pressed":h,className:"inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-sm font-semibold "+(c?"cursor-not-allowed ":"cursor-pointer ")+(h?"shadow-sm":"text-text-3"),style:h?{color:i,background:k}:void 0,children:[(0,d.jsx)(l,{"aria-hidden":!0,focusable:!1,className:"size-4"}),g.label]},f)})})}},68191:(a,b,c)=>{"use strict";c.d(b,{Ex:()=>j,$n:()=>o,Zp:()=>p,X9:()=>v,Wu:()=>w,BT:()=>u,aR:()=>q,Lc:()=>s,AG:()=>r,ZB:()=>t,lG:()=>y,R4:()=>B,Cf:()=>z,rr:()=>D,Es:()=>E,c7:()=>A,L3:()=>C,rI:()=>H,hO:()=>N,SQ:()=>L,Hr:()=>J,Ht:()=>M,mB:()=>O,ty:()=>I,pd:()=>P,AM:()=>R,hl:()=>T,Wv:()=>S,Iz:()=>V,tR:()=>W,l6:()=>Y,gC:()=>ab,eb:()=>ac,bq:()=>aa,yv:()=>Z,Pt:()=>l,cj:()=>af,h:()=>ag,Fm:()=>ah,qp:()=>ai,EA:()=>aj,dO:()=>al,XI:()=>am,BF:()=>ao,nA:()=>ar,nd:()=>aq,A0:()=>an,Hj:()=>ap,vw:()=>as,cn:()=>h});var d=c(60102),e=c(59141),f=c(28503);let g=(0,c(48547).zu)({extend:{classGroups:{"font-size":[{text:["ui","label"]}]}}});function h(...a){return g((0,f.$)(a))}let i=(0,e.F)("inline-flex items-center gap-1.5 whitespace-nowrap rounded-full px-2 py-0.5 text-xs font-semibold",{variants:{variant:{default:"bg-surface-3 text-text-2",outline:"border border-border text-text-2",critical:"bg-sev-critical-fill text-sev-critical",high:"bg-sev-high-fill text-sev-high",medium:"bg-sev-medium-fill text-sev-medium",low:"bg-sev-low-fill text-sev-low",success:"bg-ok-fill text-ok",teal:"bg-teal-fill text-teal",primary:"bg-primary-tint text-primary"}},defaultVariants:{variant:"default"}});function j({variant:a,className:b,children:c}){return(0,d.jsx)("span",{className:h(i({variant:a}),b),children:c})}let k={critical:"bg-sev-critical",high:"bg-sev-high",medium:"bg-sev-medium",low:"bg-sev-low"};function l({severity:a}){return(0,d.jsxs)(j,{variant:a,className:"h-6",children:[(0,d.jsx)("span",{className:h("size-1.5 rounded-full",k[a])}),(0,d.jsx)("span",{className:"capitalize",children:a})]})}var m=c(76988);let n=(0,e.F)("inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg font-medium transition-colors cursor-pointer disabled:pointer-events-none disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40 [&_svg]:size-4 [&_svg]:shrink-0",{variants:{variant:{solid:"",outline:"border",ghost:"",link:""},tone:{primary:"",neutral:"",danger:""},size:{sm:"h-8 px-3 text-xs",md:"h-9 px-4 text-sm",icon:"size-9"}},compoundVariants:[{variant:"solid",tone:"primary",class:"bg-primary text-text-inv hover:bg-primary-hover"},{variant:"solid",tone:"neutral",class:"bg-surface-3 text-text hover:bg-border-strong"},{variant:"solid",tone:"danger",class:"bg-sev-critical text-text-inv hover:bg-sev-critical-hover"},{variant:"outline",tone:"primary",class:"border-primary text-primary hover:bg-primary-tint"},{variant:"outline",tone:"neutral",class:"border-border bg-surface text-text hover:bg-surface-2"},{variant:"outline",tone:"danger",class:"border-sev-critical text-sev-critical hover:bg-sev-critical-fill"},{variant:"ghost",tone:"primary",class:"text-primary hover:bg-primary-tint"},{variant:"ghost",tone:"neutral",class:"text-text-2 hover:bg-surface-2 hover:text-text"},{variant:"ghost",tone:"danger",class:"text-sev-critical hover:bg-sev-critical-fill"},{variant:"link",class:"h-auto gap-1 rounded-sm p-0 align-baseline font-semibold underline-offset-4 [&_svg]:size-3.5"},{variant:"link",tone:"primary",class:"text-primary hover:underline"},{variant:"link",tone:"neutral",class:"text-text-2 hover:text-text hover:underline"},{variant:"link",tone:"danger",class:"text-sev-critical hover:underline"}],defaultVariants:{variant:"solid",tone:"neutral",size:"md"}});function o({className:a,variant:b,tone:c,size:e,asChild:f=!1,type:g,...i}){let j=f?m.DX:"button";return(0,d.jsx)(j,{className:h(n({variant:b,tone:c,size:e}),a),...f?{}:{type:g??"button"},...i})}function p({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card",className:h("rounded-xl border border-border bg-surface",a),...b})}function q({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-header",className:h("flex items-center gap-3 px-5 pt-5",a),...b})}function r({className:a,...b}){return(0,d.jsx)("span",{"data-slot":"card-icon",className:h("flex size-7.5 shrink-0 items-center justify-center rounded-lg bg-surface-2 text-text-2",a),...b})}function s({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-heading",className:h("min-w-0",a),...b})}function t({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-title",className:h("text-sm font-semibold text-text",a),...b})}function u({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-description",className:h("text-xs text-text-3",a),...b})}function v({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-action",className:h("ml-auto flex items-center",a),...b})}function w({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-content",className:h("p-5",a),...b})}var x=c(42677);let y=x.Root;function z({className:a,children:b,...c}){return(0,d.jsxs)(x.Portal,{children:[(0,d.jsx)(x.Overlay,{"data-slot":"dialog-overlay",className:"fixed inset-0 z-50 bg-ink/40"}),(0,d.jsx)(x.Content,{"data-slot":"dialog-content",className:h("fixed left-1/2 top-1/2 z-50 flex max-h-[92vh] w-full max-w-lg -translate-x-1/2 -translate-y-1/2 flex-col overflow-hidden rounded-2xl border border-border bg-surface shadow-lg outline-none",a),...c,children:b})]})}function A({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-header",className:h("flex shrink-0 flex-col gap-1 border-b border-border px-5 py-4",a),...b})}function B({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-body",className:h("flex min-h-0 flex-1 flex-col gap-3 overflow-y-auto px-5 py-4",a),...b})}function C({className:a,...b}){return(0,d.jsx)(x.Title,{"data-slot":"dialog-title",className:h("font-display text-base font-semibold text-text",a),...b})}function D({className:a,...b}){return(0,d.jsx)(x.Description,{"data-slot":"dialog-description",className:h("text-xs text-text-3",a),...b})}function E({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-footer",className:h("flex shrink-0 items-center gap-2.5 border-t border-border px-5 py-3.5",a),...b})}x.Trigger,x.Close;var F=c(22018);function G({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"M13 4.5 6.5 11 3 7.5",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}let H=F.Root,I=F.Trigger;F.Group;let J=F.RadioGroup,K="flex cursor-pointer select-none items-center gap-2 rounded-md px-2.5 py-1.5 text-sm text-text-2 outline-none focus:bg-surface-2 focus:text-text data-[disabled]:pointer-events-none data-[disabled]:opacity-50";function L({className:a,sideOffset:b=6,...c}){return(0,d.jsx)(F.Portal,{children:(0,d.jsx)(F.Content,{sideOffset:b,className:h("z-50 min-w-32 overflow-hidden rounded-lg border border-border bg-surface p-1 shadow-lg",a),...c})})}function M({className:a,children:b,...c}){return(0,d.jsxs)(F.RadioItem,{className:h(K,"data-[state=checked]:font-semibold data-[state=checked]:text-text",a),...c,children:[(0,d.jsx)("span",{className:"flex-1",children:b}),(0,d.jsx)(F.ItemIndicator,{children:(0,d.jsx)(G,{className:"size-4 text-primary"})})]})}function N({className:a,children:b,...c}){return(0,d.jsxs)(F.CheckboxItem,{className:h(K,"group data-[state=checked]:font-semibold data-[state=checked]:text-text",a),...c,children:[(0,d.jsx)("span",{className:"grid size-4 shrink-0 place-items-center rounded-[5px] border border-border-strong text-text-inv transition-colors group-data-[state=checked]:border-primary group-data-[state=checked]:bg-primary",children:(0,d.jsx)(F.ItemIndicator,{children:(0,d.jsx)(G,{className:"size-3"})})}),(0,d.jsx)("span",{className:"flex-1",children:b})]})}function O({className:a,...b}){return(0,d.jsx)(F.Separator,{className:h("-mx-1 my-1 h-px bg-border",a),...b})}function P({className:a,type:b="text",...c}){return(0,d.jsx)("input",{type:b,"data-slot":"input",className:h("h-9 w-full rounded-lg border border-border bg-surface px-3 text-sm text-text","truncate placeholder:text-text-3 transition-colors","focus:border-primary focus:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","disabled:cursor-not-allowed disabled:opacity-50",a),...c})}var Q=c(57650);let R=Q.Root,S=Q.Trigger;function T({className:a,align:b="start",sideOffset:c=6,collisionPadding:e=8,...f}){return(0,d.jsx)(Q.Portal,{children:(0,d.jsx)(Q.Content,{align:b,sideOffset:c,collisionPadding:e,className:h("z-50 max-h-(--radix-popover-content-available-height) min-w-32 overflow-y-auto rounded-lg border border-border bg-surface p-1 shadow-lg outline-none",a),...f})})}Q.Close,Q.Anchor;var U=c(12078);function V({className:a,...b}){return(0,d.jsx)(U.Root,{type:"single","data-slot":"segmented-control",className:h("inline-flex items-center gap-0.5 rounded-lg border border-border bg-surface-2 p-0.5",a),...b})}function W({className:a,...b}){return(0,d.jsx)(U.Item,{"data-slot":"segmented-control-item",className:h("inline-flex flex-1 items-center justify-center gap-1.5 whitespace-nowrap rounded-md px-3 py-1.5 text-xs font-semibold text-text-3 transition-colors cursor-pointer","hover:text-text-2 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","data-[state=on]:bg-surface data-[state=on]:text-text data-[state=on]:shadow-sm","[&_svg]:size-4 [&_svg]:shrink-0",a),...b})}var X=c(64013);let Y=X.Root;X.Group;let Z=X.Value;function $({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"m4 6 4 4 4-4",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round"})})}function _({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"M13 4.5 6.5 11 3 7.5",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function aa({className:a,children:b,...c}){return(0,d.jsxs)(X.Trigger,{"data-slot":"select-trigger",className:h("flex h-9 w-full cursor-pointer items-center justify-between gap-2 rounded-lg border border-border bg-surface px-3 text-sm text-text","transition-colors focus:border-primary focus:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","data-[placeholder]:text-text-3 disabled:cursor-not-allowed disabled:opacity-50","[&>span]:truncate",a),...c,children:[b,(0,d.jsx)(X.Icon,{asChild:!0,children:(0,d.jsx)($,{className:"size-4 shrink-0 text-text-3"})})]})}function ab({className:a,children:b,position:c="popper",sideOffset:e=6,...f}){return(0,d.jsx)(X.Portal,{children:(0,d.jsxs)(X.Content,{"data-slot":"select-content",position:c,sideOffset:e,className:h("relative z-50 max-h-(--radix-select-content-available-height) min-w-32 overflow-hidden rounded-lg border border-border bg-surface shadow-lg","popper"===c&&"w-(--radix-select-trigger-width)",a),...f,children:[(0,d.jsx)(ad,{}),(0,d.jsx)(X.Viewport,{className:"p-1",children:b}),(0,d.jsx)(ae,{})]})})}function ac({className:a,children:b,...c}){return(0,d.jsxs)(X.Item,{"data-slot":"select-item",className:h("relative flex w-full cursor-pointer select-none items-center rounded-md py-1.5 pl-2.5 pr-8 text-sm text-text-2 outline-none","hover:bg-surface-2 hover:text-text data-[highlighted]:bg-surface-2 data-[highlighted]:text-text","data-[state=checked]:font-semibold data-[state=checked]:text-text","data-[disabled]:pointer-events-none data-[disabled]:opacity-50",a),...c,children:[(0,d.jsx)(X.ItemText,{children:b}),(0,d.jsx)("span",{className:"absolute right-2.5 flex items-center",children:(0,d.jsx)(X.ItemIndicator,{children:(0,d.jsx)(_,{className:"size-4 text-primary"})})})]})}function ad({className:a,...b}){return(0,d.jsx)(X.ScrollUpButton,{"data-slot":"select-scroll-up-button",className:h("flex cursor-default items-center justify-center py-1 text-text-3",a),...b,children:(0,d.jsx)($,{className:"size-4 rotate-180"})})}function ae({className:a,...b}){return(0,d.jsx)(X.ScrollDownButton,{"data-slot":"select-scroll-down-button",className:h("flex cursor-default items-center justify-center py-1 text-text-3",a),...b,children:(0,d.jsx)($,{className:"size-4"})})}let af=x.Root;function ag({className:a,children:b,...c}){return(0,d.jsxs)(x.Portal,{children:[(0,d.jsx)(x.Overlay,{"data-slot":"sheet-overlay",className:"fixed inset-0 z-40 bg-ink/40 backdrop-blur-[1px]"}),(0,d.jsxs)(x.Content,{"data-slot":"sheet-content",className:h("fixed inset-y-0 right-0 z-50 flex h-full w-full max-w-md flex-col gap-4 overflow-y-auto border-l border-border bg-surface p-6 shadow-lg outline-none",a),...c,children:[b,(0,d.jsxs)(x.Close,{className:"absolute right-4 top-4 cursor-pointer rounded-md text-text-3 transition-colors hover:bg-surface-2 hover:text-text size-8 grid place-content-center",children:[(0,d.jsx)("svg",{"aria-hidden":!0,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round",className:"size-4",children:(0,d.jsx)("path",{d:"M6 6 18 18M18 6 6 18"})}),(0,d.jsx)("span",{className:"sr-only",children:"Close"})]})]})]})}function ah({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"sheet-header",className:h("flex flex-col gap-1 pr-8",a),...b})}function ai({className:a,...b}){return(0,d.jsx)(x.Title,{"data-slot":"sheet-title",className:h("font-display text-lg font-semibold text-text",a),...b})}function aj({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"skeleton","aria-hidden":!0,className:h("animate-pulse rounded-md bg-surface-3",a),...b})}x.Trigger,x.Close;var ak=c(15542);function al({className:a,...b}){return(0,d.jsx)(ak.Root,{"data-slot":"switch",className:h("peer inline-flex h-5.5 w-9.5 shrink-0 cursor-pointer items-center rounded-full p-0.5 transition-colors outline-none focus-visible:ring-2 focus-visible:ring-primary/40 disabled:cursor-not-allowed disabled:opacity-50","data-[state=checked]:bg-ok data-[state=unchecked]:bg-border-strong",a),...b,children:(0,d.jsx)(ak.Thumb,{"data-slot":"switch-thumb",className:"pointer-events-none block size-4.5 rounded-full bg-white shadow-sm transition-transform data-[state=checked]:translate-x-4 data-[state=unchecked]:translate-x-0"})})}function am({className:a,...b}){return(0,d.jsx)("div",{className:"w-full overflow-x-auto",children:(0,d.jsx)("table",{"data-slot":"table",className:h("w-full caption-bottom border-collapse text-sm",a),...b})})}function an({className:a,...b}){return(0,d.jsx)("thead",{"data-slot":"table-header",className:h("[&_tr]:border-b [&_tr]:border-border",a),...b})}function ao({className:a,...b}){return(0,d.jsx)("tbody",{"data-slot":"table-body",className:h("[&_tr:last-child]:border-0",a),...b})}function ap({className:a,onClick:b,onKeyDown:c,tabIndex:e,role:f,...g}){let i="function"==typeof b;return(0,d.jsx)("tr",{"data-slot":"table-row",role:i?f??"button":f,tabIndex:i?e??0:e,onClick:b,onKeyDown:i?function(a){c?.(a),i&&!a.defaultPrevented&&a.target===a.currentTarget&&("Enter"===a.key||" "===a.key)&&(a.preventDefault(),b(a))}:c,className:h("border-b border-text/6 transition-colors",i&&"focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-primary/40",a),...g})}function aq({scope:a="col",className:b,...c}){return(0,d.jsx)("th",{"data-slot":"table-head",scope:a,className:h("px-3 pb-3 text-left align-middle text-label font-semibold uppercase tracking-wider text-text-3",b),...c})}function ar({className:a,...b}){return(0,d.jsx)("td",{"data-slot":"table-cell",className:h("px-3 py-2 align-middle",a),...b})}function as({children:a,icon:b,dot:c,className:e}){return(0,d.jsxs)("span",{className:h("inline-flex h-6 items-center gap-1.5 whitespace-nowrap rounded-md border border-border bg-surface px-2 text-label font-medium text-text-2",e),children:[c&&(0,d.jsx)("span",{className:"size-1.5 shrink-0 rounded-full",style:{background:c}}),b,a]})}},69428:(a,b,c)=>{"use strict";c.d(b,{B5:()=>n,EQ:()=>p,Lp:()=>k,gh:()=>f,i9:()=>j,nU:()=>m,oC:()=>e,pM:()=>o,xE:()=>l,y7:()=>i});var d=c(80108);let e=["critical","high","medium","low"],f={secret:"Secret",pii:"PII",source_code:"Source code",external_share:"External share",mcp_server:"MCP server",customer_data:"Customer data",financial:"Financial",phi:"PHI",custom:"Custom"},g={secret:d.RY,pii:d.ny,source_code:d.lo,external_share:d._G,mcp_server:d.RR,customer_data:d.bN,financial:d.bN,phi:d.ny,custom:d.RY},h={secret:"bg-sev-critical-fill text-sev-critical",pii:"bg-sev-low-fill text-sev-low",source_code:"bg-violet-fill text-violet",external_share:"bg-teal-fill text-teal",mcp_server:"bg-sev-high-fill text-sev-high",customer_data:"bg-sev-high-fill text-sev-high",financial:"bg-sev-high-fill text-sev-high",phi:"bg-sev-low-fill text-sev-low",custom:"bg-surface-2 text-text-2"},i=g,j=a=>h[a]??"bg-surface-2 text-text-2",k={blocked:{label:"Blocked",icon:d.pD,className:"bg-sev-critical-fill text-sev-critical"},redacted:{label:"Redacted",icon:d.jZ,className:"bg-primary-tint text-primary"},warned:{label:"Warned",icon:d._0,className:"bg-sev-high-fill text-sev-high"},allowed:{label:"Allowed",icon:d.Sr,className:"bg-ok-fill text-ok"},monitored:{label:"Monitored",icon:d.bM,className:"bg-surface-3 text-text-2"},quarantined:{label:"Quarantined",icon:d.lm,className:"bg-sev-critical-fill text-sev-critical"}};function l(a){return a.file?a.file:a.toolName?`via ${a.toolName}`:"—"}let m=[{id:"severity",header:"Severity"},{id:"subtype",header:"Type"},{id:"sources",header:"Sources"},{id:"locations",header:"Locations"},{id:"action",header:"Action"},{id:"status",header:"Status"},{id:"latest",header:"Latest"}],n={open:{label:"Open",badge:"high"},handled:{label:"Handled",badge:"primary"},resolved:{label:"Resolved",badge:"success"},dismissed:{label:"Dismissed",badge:"default"}},o=Object.keys(n);function p(a,b){return b&&0!==b.length?a.filter(a=>void 0!==a.status&&b.includes(a.status)):a}},70930:(a,b,c)=>{"use strict";c.d(b,{DETECTION_FILTER_TABS:()=>i,DetectionsListView:()=>k});var d=c(60102),e=c(68191),f=c(80108),g=c(27527),h=c(11294);let i=[["all","All"],["library","Library"],["updates","Updates"]];function j({d:a,sel:b,updateVersion:c,onClick:e}){return(0,d.jsx)("button",{type:"button",onClick:e,className:"w-full cursor-pointer rounded-lg px-3 py-2.5 text-left transition-colors "+(b?"bg-primary-tint":"hover:bg-surface-2"),children:(0,d.jsxs)("div",{className:"min-w-0 flex-1 flex flex-col gap-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 justify-between",children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 min-w-0",children:[(0,d.jsx)("span",{title:a.enabled?"Enabled":"Disabled",className:"size-2 shrink-0 rounded-full "+(a.enabled?"bg-ok ring-3 ring-ok-fill":"bg-border-strong")}),(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name})]}),(0,d.jsxs)("div",{className:"font-mono text-xs text-text-3",children:["v",a.version]})]}),(0,d.jsxs)("div",{className:"flex items-center gap-1.5 justify-between",children:[(0,d.jsx)("span",{className:"font-mono text-xs text-text-3",children:a.id}),(0,d.jsxs)("span",{className:"text-xs text-text-3 shrink-0",children:[a.ruleCount," rule",1===a.ruleCount?"":"s"]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-1.5 mt-1",children:[(0,d.jsx)(g.Ai,{origin:a.origin}),(0,d.jsx)(g.$F,{policy:a.policyId??h.tG}),c?(0,d.jsx)(g.Zp,{version:c}):null]})]})})}function k({items:a,counts:b,activeId:c,query:g,filter:h,onQueryChange:k,onFilterChange:l,onSelect:m,isLoading:n=!1,error:o=null,updatesById:p,filterTabs:q=i}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col overflow-hidden shadow-sm",children:[(0,d.jsxs)("div",{className:"border-b border-border p-3",children:[(0,d.jsxs)("div",{className:"relative",children:[(0,d.jsx)(f.WI,{"aria-hidden":!0,focusable:!1,className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:g,onChange:a=>{k(a.target.value)},spellCheck:!1,placeholder:"Search detections…",className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsx)("div",{className:"mt-2.5 flex flex-wrap gap-1.5",children:q.map(([a,c])=>{let e=h===a,g=b[a]??0,i="updates"===a&&g>0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{l(a)},className:"inline-flex h-7 items-center gap-1.5 cursor-pointer rounded-full border px-2.5 text-xs font-semibold "+(e?i?"border-sev-high bg-sev-high-fill text-sev-high":"border-primary bg-primary-tint text-primary":i?"border-border text-sev-high":"border-border bg-surface text-text-2"),children:[i&&(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c,(0,d.jsx)("span",{className:"text-label font-bold opacity-70",children:g})]},a)})})]}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-0.5 overflow-y-auto p-3",children:n?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-text-3",children:"Loading detections…"}):o?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-sev-critical",children:o}):0===a.length?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-text-3",children:g.trim()?`No detections match “${g.trim()}”`:"No detections in this view"}):a.map(a=>(0,d.jsx)(j,{d:a,sel:a.id===c,updateVersion:p?.get(a.id),onClick:()=>{m(a.id)}},a.id))})]})}},74401:(a,b,c)=>{Promise.resolve().then(c.t.bind(c,77604,23)),Promise.resolve().then(c.t.bind(c,607,23)),Promise.resolve().then(c.t.bind(c,34419,23)),Promise.resolve().then(c.t.bind(c,88918,23)),Promise.resolve().then(c.t.bind(c,18946,23)),Promise.resolve().then(c.t.bind(c,29270,23)),Promise.resolve().then(c.t.bind(c,57334,23)),Promise.resolve().then(c.t.bind(c,84595,23)),Promise.resolve().then(c.t.bind(c,2150,23))},77972:(a,b,c)=>{"use strict";c.d(b,{MatcherModal:()=>j});var d=c(60102),e=c(68191),f=c(80108),g=c(11294);function h({matcher:a}){return"regex"===a.type?(0,d.jsxs)("div",{className:"flex flex-col gap-3",children:[(0,d.jsx)(i,{label:"Pattern",children:(0,d.jsx)("code",{className:"block break-all rounded-md border border-border bg-surface-2 px-2.5 py-2 font-mono text-xs text-text",children:a.pattern})}),(0,d.jsx)(i,{label:"Flags",children:(0,d.jsx)("code",{className:"font-mono text-xs text-text-2",children:a.flags||"—"})}),"number"==typeof a.captureGroup&&(0,d.jsx)(i,{label:"Capture group",children:(0,d.jsx)("span",{className:"font-mono text-xs text-text-2",children:a.captureGroup})})]}):"keyword"===a.type?(0,d.jsxs)("div",{className:"flex flex-col gap-3",children:[(0,d.jsx)(i,{label:"Keywords",children:(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.keywords.map(a=>(0,d.jsx)("span",{className:"inline-flex h-6 items-center rounded-md border border-border bg-surface-2 px-2 font-mono text-xs text-text-2",children:a},a))})}),(0,d.jsx)(i,{label:"Case sensitive",children:(0,d.jsx)("span",{className:"text-xs text-text-2",children:a.caseSensitive?"Yes":"No"})})]}):(0,d.jsx)("div",{className:"flex flex-col gap-3",children:(0,d.jsx)(i,{label:"Validator",children:(0,d.jsx)("code",{className:"font-mono text-xs text-text-2",children:a.name})})})}function i({label:a,children:b}){return(0,d.jsxs)("div",{className:"flex flex-col gap-1.5",children:[(0,d.jsx)("div",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:a}),b]})}function j({rule:a,onClose:b}){let c=!!a,i=a?g.rE[a.matcher.type]:null,j=i?.icon;return(0,d.jsx)(e.lG,{open:c,onOpenChange:a=>{a||b()},children:(0,d.jsx)(e.Cf,{className:"max-w-3xl","aria-describedby":void 0,children:a&&i&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.L3,{className:"sr-only",children:["Rule \xb7 ",a.name]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"grid size-9 shrink-0 place-items-center rounded-lg",style:{background:i.fill,color:i.color},children:j&&(0,d.jsx)(j,{"aria-hidden":!0,focusable:!1,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold text-text",children:a.name}),(0,d.jsx)(e.Pt,{severity:a.severity})]}),(0,d.jsx)("div",{className:"mt-px font-mono text-xs text-text-3",children:a.id})]}),(0,d.jsx)("span",{className:"rounded-full px-2.5 py-1 text-xs font-semibold",style:{background:i.fill,color:i.color},children:i.label}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon",onClick:b,"aria-label":"Close",className:"size-8 text-text-3",children:(0,d.jsx)(f.uv,{"aria-hidden":!0,focusable:!1})})]}),(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"mb-4 flex flex-wrap gap-2",children:[(0,d.jsx)(k,{icon:(0,d.jsx)(f.kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),children:g.gh[a.category]||a.category}),(0,d.jsx)(k,{icon:j&&(0,d.jsx)(j,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),children:i.blurb})]}),(0,d.jsx)(h,{matcher:a.matcher})]})]})})})}function k({icon:a,children:b}){return(0,d.jsxs)("span",{className:"inline-flex h-6 items-center gap-1.5 rounded-md border border-border bg-surface px-2 text-label font-medium text-text-2",children:[a,b]})}},80108:(a,b,c)=>{"use strict";c.d(b,{BH:()=>V,BZ:()=>q,C1:()=>O,CT:()=>D,D3:()=>C,DQ:()=>ae,Ey:()=>J,JM:()=>S,K$:()=>U,Kp:()=>j,O4:()=>ad,OK:()=>p,Qf:()=>G,Qq:()=>$,RR:()=>t,RY:()=>r,SY:()=>Z,Sr:()=>x,Uy:()=>m,WI:()=>B,XA:()=>R,YJ:()=>F,ZL:()=>l,Ze:()=>ab,Zu:()=>n,_0:()=>v,_G:()=>i,aR:()=>H,ai:()=>L,bM:()=>y,bN:()=>u,c1:()=>N,cZ:()=>I,f6:()=>aj,fC:()=>K,fN:()=>ai,fl:()=>k,hF:()=>T,hp:()=>aa,iB:()=>_,iF:()=>w,jZ:()=>h,k3:()=>ac,kp:()=>Q,lm:()=>z,lo:()=>s,mL:()=>A,mo:()=>X,np:()=>W,ny:()=>o,oS:()=>ag,pD:()=>g,qU:()=>af,rX:()=>f,s3:()=>ak,sj:()=>ah,ts:()=>Y,uv:()=>P,vK:()=>E,wy:()=>M});var d=c(60102);let e={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round"},f=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M8 2.5h8L21.5 8v8L16 21.5H8L2.5 16V8L8 2.5Z"}),(0,d.jsx)("path",{d:"M12 8v4"}),(0,d.jsx)("circle",{cx:"12",cy:"16",r:"1",fill:"currentColor",stroke:"none"})]}),g=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"m6 6 12 12"})]}),h=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"3",y:"9",width:"18",height:"6",rx:"1.5",fill:"currentColor",stroke:"none"}),(0,d.jsx)("path",{d:"M3 5h18M3 19h12"})]}),i=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M14 4h6v6"}),(0,d.jsx)("path",{d:"M20 4 11 13"}),(0,d.jsx)("path",{d:"M18 14v4a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h4"})]}),j=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 19V5M6 11l6-6 6 6"})}),k=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M5 12h14M13 6l6 6-6 6"})}),l=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 5v14M6 13l6 6 6-6"})}),m=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M4 20V10M10 20V4M16 20v-7M22 20H2"})}),n=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3 4.5 6v5.5c0 4.6 3.2 7.6 7.5 9 4.3-1.4 7.5-4.4 7.5-9V6L12 3Z"}),(0,d.jsx)("path",{d:"m9 12 2 2 4-4"})]}),o=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"8",r:"3.6"}),(0,d.jsx)("path",{d:"M5.5 20a6.5 6.5 0 0 1 13 0"})]}),p=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 8.4v7.2"}),(0,d.jsx)("circle",{cx:"6",cy:"6",r:"2.4"}),(0,d.jsx)("circle",{cx:"6",cy:"18",r:"2.4"}),(0,d.jsx)("circle",{cx:"18",cy:"7",r:"2.4"}),(0,d.jsx)("path",{d:"M18 9.4a8.6 8.6 0 0 1-8.6 8.6"})]}),q=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3.5 13.6 9 19 10.5 13.6 12 12 17.5 10.4 12 5 10.5 10.4 9 12 3.5Z"}),(0,d.jsx)("path",{d:"M18 16.5 18.7 19 21 19.7 18.7 20.4 18 23 17.3 20.4 15 19.7 17.3 19 18 16.5Z"})]}),r=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"8",cy:"12",r:"4"}),(0,d.jsx)("path",{d:"M11.5 12H21l-2 2.4M16.5 12v3"})]}),s=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m8 8-4 4 4 4M16 8l4 4-4 4M13.5 6l-3 12"})}),t=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"4",y:"4",width:"16",height:"7",rx:"2"}),(0,d.jsx)("rect",{x:"4",y:"13",width:"16",height:"7",rx:"2"}),(0,d.jsx)("circle",{cx:"8",cy:"7.5",r:"1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"8",cy:"16.5",r:"1",fill:"currentColor",stroke:"none"})]}),u=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("ellipse",{cx:"12",cy:"6",rx:"7",ry:"3"}),(0,d.jsx)("path",{d:"M5 6v12c0 1.7 3.1 3 7 3s7-1.3 7-3V6"}),(0,d.jsx)("path",{d:"M5 12c0 1.7 3.1 3 7 3s7-1.3 7-3"})]}),v=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3 2 20h20L12 3Z"}),(0,d.jsx)("path",{d:"M12 9v5"}),(0,d.jsx)("circle",{cx:"12",cy:"17",r:"1",fill:"currentColor",stroke:"none"})]}),w=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M5 21V4M5 4h11l-2 3 2 3H5"})}),x=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m5 12 4.5 4.5L19 7"})}),y=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M2.5 12S6 5.5 12 5.5 21.5 12 21.5 12 18 18.5 12 18.5 2.5 12 2.5 12Z"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"2.6"})]}),z=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 3 4.5 6v5.5c0 4.6 3.2 7.6 7.5 9 4.3-1.4 7.5-4.4 7.5-9V6L12 3Z"})}),A=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"m12 3 9 5-9 5-9-5 9-5Z"}),(0,d.jsx)("path",{d:"m3 13 9 5 9-5M3 16.5l9 5 9-5"})]}),B=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"11",cy:"11",r:"7"}),(0,d.jsx)("path",{d:"m20 20-3.2-3.2"})]}),C=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m6 9 6 6 6-6"})}),D=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"4",y:"5",width:"16",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"M4 9h16M8 3v4M16 3v4"})]}),E=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m9 6 6 6-6 6"})}),F=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m15 6-6 6 6 6"})}),G=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 8h10M18 8h2M4 16h2M10 16h10"}),(0,d.jsx)("circle",{cx:"16",cy:"8",r:"2.2"}),(0,d.jsx)("circle",{cx:"8",cy:"16",r:"2.2"})]}),H=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 4 20 20"}),(0,d.jsx)("path",{d:"M9.5 9.6A2.6 2.6 0 0 0 12 14.6c.7 0 1.3-.25 1.8-.7M6.5 6.7C3.8 8.3 2.5 12 2.5 12S6 18.5 12 18.5c1.5 0 2.8-.4 4-1M17.5 17.3C20.2 15.7 21.5 12 21.5 12S18 5.5 12 5.5c-.5 0-1 0-1.4.1"})]}),I=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M8 4c-2 0-2 2-2 4s0 3-2 4c2 1 2 2 2 4s0 4 2 4M16 4c2 0 2 2 2 4s0 3 2 4c-2 1-2 2-2 4s0 4-2 4"})}),J=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M2 12C2 6.5 6.5 2 12 2a10 10 0 0 1 8 4"}),(0,d.jsx)("path",{d:"M5 19.5C5.5 18 6 15 6 12c0-.7.12-1.37.34-2"}),(0,d.jsx)("path",{d:"M17.29 21.02c.12-.6.43-2.3.5-3.02"}),(0,d.jsx)("path",{d:"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4"}),(0,d.jsx)("path",{d:"M8.65 22c.21-.66.45-1.32.57-2"}),(0,d.jsx)("path",{d:"M14 13.12c0 2.38 0 6.38-1 8.88"}),(0,d.jsx)("path",{d:"M2 16h.01"}),(0,d.jsx)("path",{d:"M21.8 16c.2-2 .13-5.354 0-6"}),(0,d.jsx)("path",{d:"M9 6.8a6 6 0 0 1 9 5.2v2"})]}),K=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M3 12h18"}),(0,d.jsx)("path",{d:"M12 3c2.6 2.6 2.6 15.4 0 18M12 3c-2.6 2.6-2.6 15.4 0 18"})]}),L=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 21V5a1 1 0 0 1 1-1h9a1 1 0 0 1 1 1v16"}),(0,d.jsx)("path",{d:"M15 9h4a1 1 0 0 1 1 1v11"}),(0,d.jsx)("path",{d:"M3 21h18"}),(0,d.jsx)("path",{d:"M8 8h3M8 12h3M8 16h3"})]}),M=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"5",r:"1.4",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"1.4",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"12",cy:"19",r:"1.4",fill:"currentColor",stroke:"none"})]}),N=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 5v14M5 12h14"})}),O=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"m8.5 12 2.3 2.3 4.7-4.6"})]}),P=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M6 6 18 18M18 6 6 18"})}),Q=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M8 6h12M8 12h12M8 18h12"}),(0,d.jsx)("circle",{cx:"3.6",cy:"6",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"12",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"18",r:"1.1",fill:"currentColor",stroke:"none"})]}),R=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"5",y:"11",width:"14",height:"9",rx:"2"}),(0,d.jsx)("path",{d:"M8 11V8a4 4 0 0 1 8 0v3"})]}),S=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 20V9M7 13l5-5 5 5M5 4h14"})}),T=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"6",cy:"18",r:"2.4"}),(0,d.jsx)("path",{d:"M8.4 18H16a3 3 0 0 0 0-6H8a3 3 0 0 1 0-6h7.6"}),(0,d.jsx)("circle",{cx:"18",cy:"6",r:"2.4"})]}),U=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M3 13h5l1.5 3h5L16 13h5"}),(0,d.jsx)("path",{d:"M5 5h14l2 8v5a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-5L5 5Z"})]}),V=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 12h3l2-5 4 14 3-9 2 2h4"})}),W=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 12h4l3 8 4-16 3 8h4"})}),X=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M12 11v5"}),(0,d.jsx)("circle",{cx:"12",cy:"7.7",r:"1",fill:"currentColor",stroke:"none"})]}),Y=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 21s7-6.3 7-11a7 7 0 1 0-14 0c0 4.7 7 11 7 11Z"}),(0,d.jsx)("circle",{cx:"12",cy:"10",r:"2.4"})]}),Z=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h11a1 1 0 0 1 1 1v17l-3-2-3 2-3-2-3 2V4a1 1 0 0 1 1-1Z"}),(0,d.jsx)("path",{d:"M9 8h6M9 12h5"})]}),$=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M7 17 17 7M8 7h9v9"})}),_=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h9l3 3v15H6z"}),(0,d.jsx)("path",{d:"M15 3v3h3"}),(0,d.jsx)("path",{d:"M9 12h6M9 16h4"})]}),aa=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M7 18a4 4 0 0 1-.5-7.97A5.5 5.5 0 0 1 17 9.5a3.75 3.75 0 0 1 .5 7.5H7Z"})}),ab=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2Z"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"3"})]}),ac=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"3",y:"4",width:"18",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"m7 9 3 3-3 3M13 15h4"})]}),ad=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M12 7.5V12l3 2"})]}),ae=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M13 2 4 14h7l-1 8 9-12h-7l1-8Z"})}),af=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 20h4L19 9l-4-4L4 16v4Z"}),(0,d.jsx)("path",{d:"m14 6 4 4"})]}),ag=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h8l4 4v14H6z"}),(0,d.jsx)("path",{d:"M14 3v4h4"})]}),ah=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"})}),ai=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M3 12a9 9 0 0 1 15-6.7L21 8"}),(0,d.jsx)("path",{d:"M21 3v5h-5"}),(0,d.jsx)("path",{d:"M21 12a9 9 0 0 1-15 6.7L3 16"}),(0,d.jsx)("path",{d:"M3 21v-5h5"})]}),aj=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M7 4 3 8l4 4"}),(0,d.jsx)("path",{d:"M3 8h14"}),(0,d.jsx)("path",{d:"m17 20 4-4-4-4"}),(0,d.jsx)("path",{d:"M21 16H7"})]}),ak=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 4v11M7 11l5 5 5-5M5 20h14"})})},80642:()=>{},81860:(a,b,c)=>{"use strict";c.d(b,{TimeRangeSelect:()=>i});var d=c(60102),e=c(68191),f=c(16463);function g(a){return(0,d.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round",...a,children:[(0,d.jsx)("rect",{x:"4",y:"5",width:"16",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"M4 9h16M8 3v4M16 3v4"})]})}function h(a){return(0,d.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round",...a,children:(0,d.jsx)("path",{d:"m6 9 6 6 6-6"})})}function i({value:a,onChange:b}){let c=(0,f.QT)(a);return(0,d.jsxs)(e.rI,{children:[(0,d.jsx)(e.ty,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",size:"md",children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-4 text-text-3"}),c,(0,d.jsx)(h,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"})]})}),(0,d.jsx)(e.SQ,{align:"end",className:"w-44",children:(0,d.jsx)(e.Hr,{value:a,onValueChange:a=>{b(a)},children:f.hn.map(a=>(0,d.jsx)(e.Ht,{value:a.value,children:a.label},a.value))})})]})}},85261:(a,b,c)=>{"use strict";c.d(b,{ScopePicker:()=>i,StateTag:()=>g,StateTagFor:()=>h});var d=c(60102),e=c(68191),f=c(4484);function g({state:a}){return(0,d.jsx)(e.Ex,{variant:f.hv[a],children:a})}function h({exception:a,now:b}){return(0,d.jsx)(g,{state:(0,f.rO)(a,b)})}function i({value:a,onChange:b}){return(0,d.jsx)(e.Iz,{value:a??"",onValueChange:a=>{a&&b(a)},children:f.rU.map(a=>(0,d.jsx)(e.tR,{value:a,children:f.DU[a]},a))})}},86450:(a,b,c)=>{"use strict";c.d(b,{PolicyDetailView:()=>m,PolicyListView:()=>l,PolicyStatsView:()=>j});var d=c(60102),e=c(68191),f=c(11294),g=c(80108),h=c(3230);function i(a){return void 0===a?"—":String(a)}function j({stats:a,loading:b=!1}){return(0,d.jsxs)("div",{className:"grid grid-cols-1 gap-4 sm:grid-cols-2 xl:grid-cols-4",children:[(0,d.jsx)(h.T,{icon:g.iB,iconBg:"var(--color-primary-tint)",iconColor:"var(--color-primary)",label:"Policies",value:i(a?.policies),loading:b}),(0,d.jsx)(h.T,{icon:g.Zu,iconBg:"var(--color-surface-2)",iconColor:"var(--color-text-2)",label:"Built-in",value:i(a?.builtin),loading:b}),(0,d.jsx)(h.T,{icon:g.k3,iconBg:"var(--color-violet-fill)",iconColor:"var(--color-violet)",label:"Custom scripts",value:i(a?.custom),loading:b}),(0,d.jsx)(h.T,{icon:g.kp,iconBg:"var(--color-ok-fill)",iconColor:"var(--color-ok)",label:"Detections governed",value:i(a?.detectionsGoverned),loading:b})]})}function k({policy:a,selected:b,onSelect:c}){let{icon:h,tone:i}=(0,f.ES)(a.id),[j,k]=(0,f.vV)(i),l=a.usedByCount;return(0,d.jsxs)("button",{type:"button",onClick:c,"aria-pressed":b,className:(0,e.cn)("flex w-full cursor-pointer items-center gap-3 rounded-lg p-3 text-left transition-colors",b?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("span",{className:"flex size-7.5 shrink-0 items-center justify-center rounded-lg [&_svg]:size-4",style:{background:k,color:j},children:(0,d.jsx)(h,{"aria-hidden":!0,focusable:!1})}),(0,d.jsxs)("span",{className:"min-w-0 flex-1",children:[(0,d.jsx)("span",{className:"block truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsxs)("span",{className:"mt-px block text-xs text-text-3",children:[l," detection",1===l?"":"s"]})]}),"builtin"===a.kind&&(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3"})]})}function l({items:a,activeId:b,onSelect:c,loading:f=!1,error:g=null}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col overflow-hidden p-2 shadow-sm",children:[(0,d.jsx)("div",{className:"mb-1 px-2.5 pb-1 pt-2 text-label font-semibold uppercase tracking-wider text-text-3",children:"Policies"}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-0.5 overflow-y-auto",children:g?(0,d.jsxs)("p",{className:"px-2.5 py-2 text-sm text-sev-critical",children:["Error loading policies: ",g]}):f?(0,d.jsx)("p",{className:"px-2.5 py-2 text-sm text-text-3",children:"Loading policies…"}):0===a.length?(0,d.jsx)("p",{className:"px-2.5 py-2 text-sm text-text-3",children:"No policies yet."}):a.map(a=>(0,d.jsx)(k,{policy:a,selected:a.id===b,onSelect:()=>{c(a.id)}},a.id))})]})}function m({policy:a}){let{icon:b,tone:c}=(0,f.ES)(a.id),[h,i]=(0,f.vV)(c),j="builtin"===a.kind,k=a.usedBy;return(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"flex size-11 shrink-0 items-center justify-center rounded-xl [&_svg]:size-5.5",style:{background:i,color:h},children:(0,d.jsx)(b,{"aria-hidden":!0,focusable:!1})}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("h2",{className:"font-display text-xl font-semibold text-text",children:a.name}),j&&(0,d.jsx)(e.vw,{icon:(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3"}),children:"Built-in"}),(0,d.jsx)("span",{className:"rounded-full border border-border bg-surface-2 px-2 py-0.5 font-mono text-xs font-semibold text-text-2",children:a.id})]}),(0,d.jsx)("p",{className:"mt-0.5 text-xs text-text-3",children:j?"AKA \xb7 built-in \xb7 no configuration":"Custom policy"})]})]}),(0,d.jsxs)("div",{className:"flex flex-col gap-6 p-5",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-surface-2 px-4 py-3",children:[(0,d.jsx)("p",{className:"text-sm leading-relaxed text-text",children:a.description}),j&&(0,d.jsxs)("p",{className:"mt-2 inline-flex items-center gap-1.5 text-xs text-text-3",children:[(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),"Built-in policy — behavior is fixed and can't be edited."]})]}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Applied by"}),(0,d.jsx)("span",{className:"rounded-full bg-surface-3 px-2 py-0.5 text-xs font-semibold text-text-2",children:k.length})]}),0===k.length?(0,d.jsx)("p",{className:"py-2 text-sm text-text-3",children:"No detections use this policy yet."}):(0,d.jsx)("div",{className:"flex flex-wrap gap-2",children:k.map(a=>(0,d.jsxs)(e.vw,{className:"h-7",dot:a.enabled?"var(--color-ok)":"var(--color-border-strong)",children:[a.name,(0,d.jsxs)("span",{className:"font-mono text-text-3",children:[a.ruleCount," rules"]})]},a.id))})]})]})]})}},86900:(a,b,c)=>{"use strict";c.d(b,{FindingDetailView:()=>o,formatConfidence:()=>m});var d=c(60102),e=c(68191),f=c(9),g=c(43644),h=c(80108),i=c(48775),j=c(90753),k=c(69428),l=c(14920);function m(a){let b=a.toFixed(2);return a>=.9?{label:`High \xb7 ${b}`,tone:"text-ok"}:a>=.7?{label:`Medium \xb7 ${b}`,tone:"text-sev-high"}:{label:`Low \xb7 ${b}`,tone:"text-text-2"}}function n({confidence:a}){let{label:b,tone:c}=m(a);return(0,d.jsx)("span",{className:c,children:b})}function o({selection:a,onSelectInstance:b,onBack:c,footer:i}){let{finding:m,instance:o}=a,r=k.y7[m.category]??h.RY,s=!o,t=m.providers.length,u=function(a){let b=k.gh[a];return b||a}(m.category);return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.Fm,{className:"flex-row items-center gap-2.5 border-b border-border p-4 pr-12",children:[(0,d.jsx)(e.Pt,{severity:m.severity}),(0,d.jsx)(e.qp,{className:"font-mono text-xs font-semibold text-text-3",children:s?u:o.id})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4 overflow-y-auto px-4 pb-4",children:[!s&&(0,d.jsxs)(e.$n,{variant:"link",tone:"primary",size:"sm",onClick:c,className:"self-start",children:[(0,d.jsx)(h.YJ,{"aria-hidden":!0,focusable:!1,className:"size-4"}),"Back to finding"]}),(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-10 shrink-0 items-center justify-center rounded-lg",(0,k.i9)(m.category)),children:(0,d.jsx)(r,{className:"size-5"})}),(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold",children:m.subtype}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:s?`${String(m.instanceCount)} locations \xb7 ${String(t)} tool${t>1?"s":""}`:`${u} \xb7 ${o.repo} \xb7 detected ${(0,f.K)(o.detectedAt)}`})]})]}),(0,d.jsx)(p,{code:m.match.contextPrefix,snippet:m.match.maskedValue,file:s?`${String(m.instanceCount)} locations`:(0,k.xE)(o)}),s?(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Locations"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:m.instances.map(a=>(0,d.jsx)(q,{instance:a,onClick:()=>{b(a)}},a.id))}),m.instances.length<m.instanceCount&&(0,d.jsx)("p",{className:"pt-2 text-xs text-text-3",children:0===m.instances.length?`No locations here match the current filters — the group has ${String(m.instanceCount)} locations in total.`:`Showing the ${String(m.instances.length)} most recent of ${String(m.instanceCount)} locations.`})]}):(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(g.p,{label:"Source tool",children:(0,d.jsx)(l.i,{provider:o.provider})}),(0,d.jsx)(g.p,{label:"Repository",children:(0,d.jsx)("span",{className:"font-mono text-xs wrap-break-word",children:o.repo})}),(0,d.jsx)(g.p,{label:"Location",children:(0,d.jsx)("span",{className:"font-mono text-xs wrap-break-word",children:(0,k.xE)(o)})}),(0,d.jsx)(g.p,{label:"Action taken",children:(0,d.jsx)(j.T,{action:o.action})}),(0,d.jsx)(g.p,{label:"Detected",children:(0,f.K)(o.detectedAt)}),(0,d.jsx)(g.p,{label:"Confidence",children:(0,d.jsx)(n,{confidence:o.confidence})})]}),i]})]})}function p({code:a,snippet:b,file:c}){return(0,d.jsxs)("div",{children:[(0,d.jsxs)(g.e,{className:"flex items-center gap-2",children:["Matched content",(0,d.jsx)(h.aR,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]}),(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-ink p-3.5 font-mono text-xs leading-relaxed text-code-fg",children:[(0,d.jsx)("div",{className:"text-code-muted wrap-break-word",children:`// ${c}`}),(0,d.jsxs)("div",{children:[a,(0,d.jsx)("span",{className:"rounded bg-sev-critical/20 px-1 py-0.5 text-code-err",children:`"${b}"`}),";"]})]})]})}function q({instance:a,onClick:b}){return(0,d.jsxs)("button",{type:"button",onClick:b,className:"flex items-center cursor-pointer gap-3 rounded-lg border border-border bg-surface px-3 py-2.5 text-left transition-colors hover:bg-surface-2",children:[(0,d.jsx)(i.K,{id:a.provider}),(0,d.jsxs)("div",{className:"flex min-w-0 flex-1 flex-col gap-1",children:[(0,d.jsx)("span",{className:"text-xs font-medium text-text",children:a.repo}),(0,d.jsx)("span",{className:"font-mono text-label text-text-3 wrap-break-word",children:(0,k.xE)(a)})]}),(0,d.jsx)(j.T,{action:a.action}),(0,d.jsx)(h.vK,{className:"size-4 shrink-0 text-text-3"})]})}},87553:(a,b,c)=>{Promise.resolve().then(c.t.bind(c,14982,23)),Promise.resolve().then(c.t.bind(c,34169,23)),Promise.resolve().then(c.t.bind(c,73089,23)),Promise.resolve().then(c.t.bind(c,14392,23)),Promise.resolve().then(c.t.bind(c,10024,23)),Promise.resolve().then(c.t.bind(c,26956,23)),Promise.resolve().then(c.t.bind(c,73244,23)),Promise.resolve().then(c.t.bind(c,60493,23)),Promise.resolve().then(c.bind(c,20684))},88731:(a,b,c)=>{"use strict";c.d(b,{BlockedWindowSelect:()=>h});var d=c(60102),e=c(68191),f=c(16463),g=c(80108);function h({value:a,onChange:b}){let c=f.Jy.find(b=>b.value===a)?.label??a;return(0,d.jsxs)(e.rI,{children:[(0,d.jsx)(e.ty,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",tone:"neutral",size:"sm",children:[(0,d.jsx)(g.CT,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),c,(0,d.jsx)(g.D3,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"})]})}),(0,d.jsx)(e.SQ,{align:"end",className:"w-40",children:(0,d.jsx)(e.Hr,{value:a,onValueChange:a=>{b(a)},children:f.Jy.map(a=>(0,d.jsx)(e.Ht,{value:a.value,children:a.label},a.value))})})]})}},90753:(a,b,c)=>{"use strict";c.d(b,{T:()=>i,_:()=>j});var d=c(60102),e=c(68191),f=c(80108),g=c(69428);let h="rounded-full border-transparent px-2.5 text-xs [&_svg]:size-3.5";function i({action:a}){let b=g.Lp[a],c=b.icon;return(0,d.jsx)(e.vw,{icon:(0,d.jsx)(c,{}),className:(0,e.cn)(h,b.className),children:b.label})}function j({aggregateAction:a}){return a?(0,d.jsx)(i,{action:a}):(0,d.jsx)(e.vw,{icon:(0,d.jsx)(f.mL,{}),className:(0,e.cn)(h,"bg-surface-3 text-text-2"),children:"Mixed"})}},91552:(a,b,c)=>{"use strict";c.d(b,{InventoryNav:()=>l});var d=c(60102),e=c(68191),f=c(83143),g=c(48775),h=c(54802),i=c(23601),j=c(50237);let k=[{type:"all",label:"All"},...i.fd.map(a=>({type:a.type,label:"Configuration"===a.label?"Config":a.label.replace(" servers","")}))];function l(a){let{projects:b,assetGroups:c,harnesses:g,viewMode:h,onViewMode:i,typeFilter:l,onTypeFilter:n,query:p,onQuery:q,attention:r,isLoading:s}=a,t=(0,f.useMemo)(()=>{let a={skill:[],mcp:[],hook:[],config:[]};for(let b of c)"project"!==b.type&&(a[b.type]=b.items);return a},[c]),u=(0,f.useMemo)(()=>{let a=p.toLowerCase(),c=b=>!a||b.toLowerCase().includes(a);return b.filter(a=>c(a.name)||c(a.repo))},[b,p]);return(0,d.jsxs)(e.Zp,{className:"flex w-85 shrink-0 flex-col overflow-hidden shadow-sm",children:[(0,d.jsxs)("div",{className:"border-b border-border px-4 pb-3 pt-4",children:[(0,d.jsxs)("div",{className:"mb-3 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold",children:"All assets"}),void 0===r?(0,d.jsx)("span",{className:"ml-auto text-xs text-text-3",children:"…"}):(0,d.jsxs)("span",{className:(0,e.cn)("ml-auto inline-flex items-center gap-1.5 text-xs font-semibold",r?"text-sev-high":"text-ok"),children:[(0,d.jsx)(j.m,{name:r?"flag":"check-circle",className:"size-3.5"}),r?`${String(r)} to review`:"All clear"]})]}),(0,d.jsxs)("div",{className:"relative",children:[(0,d.jsx)(j.m,{name:"search",className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:p,onChange:a=>{q(a.target.value)},placeholder:"Search assets…",className:"h-8.5 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsxs)(e.Iz,{className:"mt-3 flex w-full",value:h,onValueChange:a=>{a&&i(a)},children:[(0,d.jsxs)(e.tR,{value:"tree",children:[(0,d.jsx)(j.m,{name:"layers"})," By harness"]}),(0,d.jsxs)(e.tR,{value:"type",children:[(0,d.jsx)(j.m,{name:"list"})," By type"]})]}),"type"===h&&(0,d.jsx)(e.Iz,{className:"mt-2.5 flex w-full flex-wrap border-0 bg-transparent p-0 gap-1.5",value:l,onValueChange:a=>{a&&n(a)},children:k.map(a=>(0,d.jsx)(e.tR,{value:a.type,className:(0,e.cn)("flex-none rounded-full border border-border bg-surface px-2.5 py-1 text-text-2","data-[state=on]:border-transparent data-[state=on]:bg-text data-[state=on]:text-surface data-[state=on]:shadow-none"),children:a.label},a.type))})]}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto px-2 pb-2.5 pt-1",children:s&&0===g.length&&0===b.length&&0===c.length?(0,d.jsx)("div",{className:"px-3 py-6 text-center text-xs text-text-3",children:"Loading inventory…"}):"tree"===h?(0,d.jsx)(m,{...a}):(0,d.jsx)(o,{...a,projList:u,assetsByType:t})})]})}function m(a){let{harnesses:b,query:c}=a,e=c.toLowerCase(),f=a=>!e||a.toLowerCase().includes(e),g=e?b.map(a=>({...a,projects:a.projects.filter(a=>f(a.name)||f(a.repo)),categories:a.categories.map(a=>({...a,assets:a.assets.filter(a=>f(a.name)||f(a.sub))})).filter(a=>a.assets.length>0)})).filter(a=>a.projects.length>0||a.categories.length>0||f(a.label)||f(a.kind)):b;return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(s,{iconName:"terminal",label:"Harnesses",count:g.length}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:g.length>0?g.map(b=>(0,d.jsx)(n,{h:b,...a},b.id)):(0,d.jsx)(h.EmptyState,{message:c?"No matches":"No harnesses detected"})})]})}function n(a){let{h:b,sel:c,expanded:f,onToggleExpand:h,onSelectHarness:k,onSelectAsset:l,query:m}=a,n=b.projects,o=b.categories,r=f[b.id]??(!!m&&(n.length>0||o.length>0)),s=c?.type==="harness"&&c.id===b.id,t=(o.find(a=>"mcp"===a.type)?.assets??[]).filter(a=>"unapproved"===a.trust).length;return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:(0,e.cn)("flex items-center rounded-lg",s?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("button",{type:"button","aria-label":r?"Collapse":"Expand","aria-expanded":r,onClick:()=>{h(b.id,!r)},className:"my-2.5 ml-2.5 grid size-4.5 shrink-0 cursor-pointer place-items-center rounded text-text-3",children:(0,d.jsx)(j.m,{name:"chevron-right",className:(0,e.cn)("size-3.5 transition-transform",r&&"rotate-90")})}),(0,d.jsxs)("button",{type:"button",className:"flex min-w-0 flex-1 items-center gap-2.5 p-2.5 text-left cursor-pointer",onClick:()=>{k(b.id),r||h(b.id,!0)},children:[(0,d.jsx)(g.K,{id:b.id,size:28}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate text-sm font-semibold text-text",title:b.label,children:b.label}),(0,d.jsxs)("div",{className:"mt-px text-xs text-text-3",children:[b.kind," \xb7 ",b.assetCount," assets"]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-1.5",children:[t>0&&(0,d.jsx)("span",{className:"size-2 rounded-full bg-sev-critical"}),0===b.flagCount?(0,d.jsx)(j.m,{name:"check-circle",className:"size-3.5 text-ok"}):(0,d.jsx)("span",{className:"rounded-full bg-sev-high px-1.5 py-px text-xs font-bold text-white",children:b.flagCount})]})]})]}),r&&(0,d.jsxs)("div",{className:"my-0.5 ml-4 border-l border-border pl-2.5",children:[n.length>0&&(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 px-2 pb-1 pt-2",children:[(0,d.jsx)(j.m,{name:i.WD.icon,className:"size-3 text-text-3"}),(0,d.jsx)("span",{className:"text-label font-bold uppercase tracking-wider text-text-3",children:i.WD.label}),(0,d.jsx)("span",{className:"text-label font-semibold text-text-3",children:n.length})]}),n.map(c=>(0,d.jsx)(p,{p:c,fromHarness:b.id,...a},c.id))]}),o.map(a=>{let e=i.pA[a.type];return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 px-2 pb-1 pt-2",children:[(0,d.jsx)(j.m,{name:e.icon,className:"size-3 text-text-3"}),(0,d.jsx)("span",{className:"text-label font-bold uppercase tracking-wider text-text-3",children:e.label}),(0,d.jsx)("span",{className:"text-label font-semibold text-text-3",children:a.assets.length})]}),a.assets.map(a=>(0,d.jsx)(q,{it:a,indent:!0,fromHarness:b.id,sel:c,onSelectAsset:l},a.id))]},a.type)})]})]})}function o(a){let{typeFilter:b,query:c,projList:e,assetsByType:f}=a,g=c.toLowerCase(),j=a=>!g||a.toLowerCase().includes(g),k=0,l=i.fd.map(c=>{let g;if(g=c.type,"all"!==b&&b!==g)return null;if("project"===c.type){let f=e.length;return 0===f&&"all"===b?null:(f>0&&k++,(0,d.jsxs)("div",{children:[(0,d.jsx)(r,{group:c,items:e.map(a=>({flags:a.findingsCount>0?["findings"]:[]}))}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:0===f?(0,d.jsx)(h.EmptyState,{message:`No ${c.label.toLowerCase()}`}):e.map(b=>(0,d.jsx)(p,{p:b,...a},b.id))})]},c.type))}let i=f[c.type].filter(a=>j(a.name)||j(a.sub));return 0===i.length&&"all"===b?null:(i.length>0&&k++,(0,d.jsxs)("div",{children:[(0,d.jsx)(r,{group:c,items:i,mcpItems:"mcp"===c.type?i:void 0}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:0===i.length?(0,d.jsx)(h.EmptyState,{message:`No ${c.label.toLowerCase()}`}):i.map(b=>(0,d.jsx)(q,{it:b,sel:a.sel,onSelectAsset:a.onSelectAsset},b.id))})]},c.type))});return"all"===b&&0===k?(0,d.jsx)(h.EmptyState,{icon:"search",message:c?`No assets match “${c}”`:"No assets"}):(0,d.jsx)(d.Fragment,{children:l})}function p({p:a,fromHarness:b,selFromHarness:c,sel:f,onSelectProject:g}){let k=a.accessCounts,l=a.findingsCount,m=f?.type==="project"&&f.id===a.id&&(null==b||null==c||b===c);return(0,d.jsxs)("button",{type:"button",onClick:()=>{g(a.id,b)},className:(0,e.cn)("flex w-full flex-col rounded-lg p-2.5 text-left cursor-pointer",m?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsxs)("div",{className:"mb-1.5 flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"size-2 shrink-0 rounded-full",style:{background:(0,i.Cs)(a.language)}}),(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(h.yk,{v:a.visibility})})]}),(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5 font-mono text-xs text-text-3",children:[(0,d.jsx)(j.m,{name:"repo",className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"truncate",title:a.repo,children:a.repo})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)(h.AJ,{counts:k}),k.blocked>0?(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical",children:[k.blocked," blocked"]}):(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[k.total," files"]}),l>0&&(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(h.Kh,{flags:["findings"],mini:!0})})]})]})}function q({it:a,indent:b,fromHarness:c,sel:f,onSelectAsset:g}){let k=f?.type===a.type&&f.id===a.id,l=(0,i.TW)(a.type),m="mcp"===a.type?a.trust:void 0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{g(a,c)},className:(0,e.cn)("flex w-full items-center gap-2.5 rounded-lg py-3 text-left cursor-pointer",b?"px-3":"px-2.5",k?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-7.5 shrink-0 place-items-center rounded-md",l.bg,l.fg),children:(0,d.jsx)(j.m,{name:l.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-xs font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("div",{className:"mt-0.5 truncate font-mono text-label text-text-3",title:a.sub,children:a.sub})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1",children:[m&&(0,d.jsx)(h.As,{value:m}),a.flags.length>0&&(0,d.jsx)(h.Kh,{flags:a.flags,mini:!0})]})]})}function r({group:a,items:b,mcpItems:c}){let f=(0,i.z)(b),g=c?["unapproved","risky"].map(a=>({k:a,n:c.filter(b=>b.trust===a).length})).filter(a=>a.n):[];return(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2.5 pb-1.5 pt-3",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-5 shrink-0 place-items-center rounded",a.bg,a.fg),children:(0,d.jsx)(j.m,{name:a.icon,className:"size-3"})}),(0,d.jsx)("span",{className:"text-xs font-bold uppercase tracking-wider text-text-2",children:a.label}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:b.length}),(0,d.jsxs)("span",{className:"ml-auto inline-flex flex-wrap items-center justify-end gap-1.5",children:[g.map(a=>(0,d.jsxs)(e.Ex,{variant:i.ZY[a.k].tone,children:[a.n," ",i.ZY[a.k].label.toLowerCase()]},a.k)),f.map(a=>(0,d.jsxs)(e.Ex,{variant:i.lx[a.key].tone,children:[a.count," ",i.lx[a.key].short.toLowerCase()]},a.key))]})]})}function s({iconName:a,label:b,count:c}){return(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2.5 pb-1.5 pt-3",children:[(0,d.jsx)("span",{className:"grid size-5 shrink-0 place-items-center rounded bg-surface-2 text-text-2",children:(0,d.jsx)(j.m,{name:a,className:"size-3"})}),(0,d.jsx)("span",{className:"text-xs font-bold uppercase tracking-wider text-text-2",children:b}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:c})]})}},95635:(a,b,c)=>{"use strict";c.d(b,{BlockedLedgerView:()=>k});var d=c(60102),e=c(68191),f=c(9),g=c(16463),h=c(80108),i=c(88731),j=c(4484);function k({items:a,onApprove:b,blockedWindow:c,onBlockedWindowChange:k,keyState:l}){return(0,d.jsxs)("div",{className:"mb-3.5 overflow-hidden rounded-xl border border-sev-high-fill bg-sev-high-fill",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-3.5 py-3",children:[(0,d.jsx)("span",{className:"grid size-6.5 shrink-0 place-items-center rounded-md bg-sev-high text-white",children:(0,d.jsx)(h.pD,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsx)("span",{className:"text-sm font-semibold text-text",children:"Recently blocked"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-high px-2 py-0.5 text-xs font-bold text-white",children:a.length}),(0,d.jsxs)("span",{className:"text-xs text-text-2",children:["Detections blocked in ",g.sr[c]," — approve one to grant an exception"]}),(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(i.BlockedWindowSelect,{value:c,onChange:k})})]}),0===a.length?(0,d.jsx)("div",{className:"px-3.5 pb-3.5 text-xs text-text-2",children:"Nothing blocked in this window."}):(0,d.jsx)("div",{className:"flex flex-col gap-1.5 px-3 pb-3",children:a.map(a=>{let c=(0,j.eF)(a,l);return(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text-3",children:a.reference}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.ruleId}),(0,d.jsx)("span",{className:"font-mono text-xs text-text-2",children:a.maskedValue})]}),(0,d.jsxs)("div",{className:(0,e.cn)("mt-1 text-label text-text-3"),children:[(0,f.K)(a.blockedAt),a.repo?` \xb7 ${a.repo}`:"",null===c?"":" \xb7 not approvable"]}),null===c?null:(0,d.jsx)("div",{className:"mt-1 text-label text-text-3",children:c})]}),(0,d.jsx)(e.$n,{onClick:()=>{b(a.reference)},disabled:null!==c,title:c??void 0,variant:"ghost",tone:"primary",size:"sm",children:"Approve"})]},a.reference)})})]})}},96602:(a,b,c)=>{"use strict";c.d(b,{RY:()=>i,WI:()=>e.WIv,Ze:()=>k,Zu:()=>e.Zus,_G:()=>e._GS,fN:()=>j,iB:()=>l,j4:()=>m,k3:()=>e.k3y,kp:()=>g,mL:()=>e.mLz,np:()=>h,uv:()=>e.uv5});var d=c(60102),e=c(40704);let f={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round"},g=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M8 6h12M8 12h12M8 18h12"}),(0,d.jsx)("circle",{cx:"3.6",cy:"6",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"12",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"18",r:"1.1",fill:"currentColor",stroke:"none"})]}),h=a=>(0,d.jsx)("svg",{...f,...a,children:(0,d.jsx)("path",{d:"M3 12h4l3 8 4-16 3 8h4"})}),i=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("circle",{cx:"7.5",cy:"15.5",r:"4.5"}),(0,d.jsx)("path",{d:"M10.7 12.3 21 2M15 8l3 3M18 5l3 3"})]}),j=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M21 12a9 9 0 1 1-2.64-6.36"}),(0,d.jsx)("path",{d:"M21 3v6h-6"})]}),k=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"3"}),(0,d.jsx)("path",{d:"M19.4 15a1.7 1.7 0 0 0 .34 1.87l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.7 1.7 0 0 0-1.87-.34 1.7 1.7 0 0 0-1.03 1.56V21a2 2 0 1 1-4 0v-.09a1.7 1.7 0 0 0-1.11-1.56 1.7 1.7 0 0 0-1.87.34l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.7 1.7 0 0 0 .34-1.87 1.7 1.7 0 0 0-1.56-1.03H3a2 2 0 1 1 0-4h.09a1.7 1.7 0 0 0 1.56-1.11 1.7 1.7 0 0 0-.34-1.87l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.7 1.7 0 0 0 1.87.34h.08A1.7 1.7 0 0 0 10.12 3V3a2 2 0 1 1 4 0v.09a1.7 1.7 0 0 0 1.03 1.56 1.7 1.7 0 0 0 1.87-.34l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.7 1.7 0 0 0-.34 1.87v.08a1.7 1.7 0 0 0 1.56 1.03H21a2 2 0 1 1 0 4h-.09a1.7 1.7 0 0 0-1.56 1.03Z"})]}),l=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M6 3h9l3 3v15H6z"}),(0,d.jsx)("path",{d:"M15 3v3h3"}),(0,d.jsx)("path",{d:"M9 12h6M9 16h4"})]}),m=a=>(0,d.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:510,height:236,viewBox:"0 0 510 236",fill:"none",...a,children:[(0,d.jsx)("path",{d:"M329.798 26H302.492V169.68H329.798V126.99H344.796L374.425 169.57H405.11L364.293 113.206L403.6 65.6621H371.909L343.689 101.616H329.798V26.0042V26Z",fill:"#1B1F24"}),(0,d.jsx)("path",{d:"M224.398 172C234.998 172 247.996 167.417 254.994 155.653H255.595V169.607H282.394V66.5446H255.595V80.2995H254.994C247.996 68.5362 234.994 63.7539 224.398 63.7539C194.799 63.7539 178 88.6717 178 117.776C178 146.879 194.799 172 224.398 172ZM205.802 117.776C205.802 101.031 213.201 85.2805 230.998 85.2805C248.796 85.2805 256.195 101.031 256.195 117.776C256.195 134.52 248.796 150.469 230.998 150.469C213.201 150.469 205.802 134.52 205.802 117.776Z",fill:"#1B1F24"}),(0,d.jsx)("path",{d:"M452.006 172C462.606 172 475.604 167.417 482.602 155.653H483.203V169.607H510.002V66.5446H483.203V80.2995H482.602C475.604 68.5362 462.602 63.7539 452.006 63.7539C422.407 63.7539 405.608 88.6717 405.608 117.776C405.608 146.879 422.407 172 452.006 172ZM433.409 117.776C433.409 101.031 440.809 85.2805 458.606 85.2805C476.403 85.2805 483.803 101.031 483.803 117.776C483.803 134.52 476.403 150.469 458.606 150.469C440.809 150.469 433.409 134.52 433.409 117.776Z",fill:"#1B1F24"}),(0,d.jsx)("path",{d:"M54 118H0C0 88.3759 24.3759 64 54 64C83.6241 64 108 88.3759 108 118H54Z",fill:"#1B1F24"}),(0,d.jsx)("path",{d:"M54 118H108C108 147.624 83.6241 172 54 172C24.3759 172 0 147.624 0 118H54Z",fill:"#00E0B8"}),(0,d.jsx)("path",{d:"M81 54C95.9117 54 108 41.9117 108 27C108 12.0883 95.9117 0 81 0C66.0883 0 54 12.0883 54 27C54 41.9117 66.0883 54 81 54Z",fill:"#1B1F24"}),(0,d.jsx)("path",{d:"M27 236C41.9117 236 54 223.912 54 209C54 194.088 41.9117 182 27 182C12.0883 182 0 194.088 0 209C0 223.912 12.0883 236 27 236Z",fill:"#00E0B8"})]})},98526:()=>{},98794:()=>{}};