@akasecurity/cli 0.9.5 → 0.9.7

package/web-ui/web-ui/.next/server/chunks/160.js

@@ -1,785 +0,0 @@
-exports.id=160,exports.ids=[160],exports.modules={366:()=>{},619:(a,b,c)=>{"use strict";c.d(b,{NavigationTransitionProvider:()=>e});var d=c(77940);let e=(0,d.registerClientReference)(function(){throw Error("Attempted to call NavigationTransitionProvider() from the server but NavigationTransitionProvider is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/components/NavigationTransition.tsx","NavigationTransitionProvider");(0,d.registerClientReference)(function(){throw Error("Attempted to call useNavigationTransition() from the server but useNavigationTransition is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/components/NavigationTransition.tsx","useNavigationTransition"),(0,d.registerClientReference)(function(){throw Error("Attempted to call NavigationProgressBar() from the server but NavigationProgressBar is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/components/NavigationTransition.tsx","NavigationProgressBar")},3285:(a,b,c)=>{"use strict";c.d(b,{$$:()=>h,Ec:()=>i,V:()=>g});var d=c(88422),e=c(63959);let f={prompt:"Prompt","tool-input":"Tool input","tool-output":"Tool output",file:"File",transcript:"Transcript"},g={display:"Display render","explicit-reveal":"Explicit reveal","view-render":"View render","model-input":"Model input",remediation:"Remediation",purge:"Purge"};function h(){return(0,d.jsx)(e.Ex,{variant:"critical",children:"Reveal to model"})}function i({kind:a}){return(0,d.jsx)(e.Ex,{variant:"outline",children:f[a]})}},3353:(a,b,c)=>{"use strict";c.d(b,{NavigationTransitionProvider:()=>h,n:()=>i,p:()=>j});var d=c(88422),e=c(93776),f=c(88391);let g=(0,f.createContext)(null);function h({children:a}){let b=(0,e.useRouter)(),[c,h]=(0,f.useTransition)(),i=(0,f.useCallback)(a=>{h(()=>{b.push(a)})},[b]),j=(0,f.useMemo)(()=>({isPending:c,push:i}),[c,i]);return(0,d.jsx)(g.Provider,{value:j,children:a})}function i(){let a=(0,f.useContext)(g);if(null===a)throw Error("useNavigationTransition must be used within NavigationTransitionProvider");return a}function j(){let{isPending:a}=i(),[b,c]=(0,f.useState)(!1);return a&&b?(0,d.jsx)("div",{role:"progressbar","aria-label":"Loading",className:"pointer-events-none absolute inset-x-0 top-0 z-50 h-0.5 overflow-hidden",children:(0,d.jsx)("div",{className:"h-full w-full origin-left animate-nav-progress bg-primary-solid"})}):null}},4513:(a,b,c)=>{"use strict";c.d(b,{K:()=>f});let d=new Intl.RelativeTimeFormat("en",{numeric:"auto"}),e=[["year",31536e3],["month",2592e3],["week",604800],["day",86400],["hour",3600],["minute",60]];function f(a){if(!a)return"";let b=Date.parse(a);if(Number.isNaN(b))return"";let c=(b-Date.now())/1e3,f=Math.abs(c);if(f<45)return"just now";for(let[a,b]of e)if(f>=b)return d.format(Math.round(c/b),a);return"just now"}},4990:(a,b,c)=>{"use strict";c.d(b,{FindingsTableView:()=>m});var d=c(88422),e=c(63959),f=c(88391),g=c(4513),h=c(81604),i=c(44361),j=c(76812),k=c(64915);let l={severity:"min-w-[110px] whitespace-nowrap",subtype:"",sources:"min-w-[140px] whitespace-nowrap",locations:"",action:"min-w-[130px] whitespace-nowrap",status:"min-w-[110px] whitespace-nowrap",latest:"min-w-[100px] whitespace-nowrap"};function m({groups:a,columns:b,selection:c,expandedIds:g,onToggleExpand:i,onSelectGroup:k,onSelectInstance:m,hasNextPage:n=!1,hasPreviousPage:o=!1,onNextPage:r,onPreviousPage:s,loadingNextPage:t=!1,pageStart:u,total:v,isLoading:w=!1,error:x=null,emptyState:y,sessionFirings:z,statusFilter:A}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col overflow-hidden shadow-sm h-full",children:[(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto p-4",children:x?(0,d.jsxs)("p",{className:"py-8 text-center text-sm text-sev-critical-ink",children:["Error loading findings: ",x]}):w?(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"Loading findings…"}):0===a.length?y??(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"No findings match these filters."}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{className:"w-10"}),b.map(a=>(0,d.jsx)(e.nd,{className:l[a.id],children:a.header},a.id))]})}),(0,d.jsx)(e.BF,{children:a.map(a=>{let n=g.has(a.id),o=c?.finding.id===a.id&&!c.instance,r=(0,j.EQ)(a.instances,A);return(0,d.jsxs)(f.Fragment,{children:[(0,d.jsxs)(e.Hj,{onClick:()=>{k(a)},"aria-label":`View details for ${a.subtype} finding`,className:(0,e.cn)("cursor-pointer hover:bg-surface-2",o&&"bg-surface-2"),children:[(0,d.jsx)(e.nA,{className:"text-text-3",children:(0,d.jsx)(e.$n,{"aria-label":n?"Collapse":"Expand",onClick:b=>{b.stopPropagation(),i(a.id)},size:"icon",variant:"ghost",children:(0,d.jsx)(h.vK,{className:(0,e.cn)("size-4 transition-transform",n&&"rotate-90")})})}),b.map(b=>(0,d.jsx)(e.nA,{className:l[b.id],children:p[b.id](a)},b.id))]}),n&&r.map(f=>(0,d.jsxs)(e.Hj,{onClick:()=>{m(a,f)},"aria-label":`View details for ${a.subtype} finding in ${f.repo}`,className:(0,e.cn)("cursor-pointer hover:bg-surface-2",c?.instance?.id===f.id?"bg-surface-2":"bg-surface-2/50"),children:[(0,d.jsx)(e.nA,{}),b.map(b=>(0,d.jsx)(e.nA,{className:l[b.id],children:q[b.id](a,f)},b.id))]},f.id)),n&&z&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsx)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:(z[a.id]??0)>0?`Fired ${String(z[a.id])} times in this session's transcript — the session's "triggered" tally counts every firing, this row counts unique values.`:`Caught by live enforcement only — not re-detected in this session's transcript.`})]}),n&&0===r.length&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsxs)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:["No locations with the selected status among the most recently detected — the status column reflects all ",a.instanceCount," locations."]})]}),n&&r.length>0&&r.length<a.instanceCount&&(0,d.jsxs)(e.Hj,{className:"bg-surface-2/50 hover:bg-surface-2/50",children:[(0,d.jsx)(e.nA,{}),(0,d.jsxs)(e.nA,{colSpan:b.length,className:"text-xs text-text-3",children:["Showing the ",r.length," most recent of"," ",a.instanceCount," locations."]})]})]},a.id)})})]})}),r?a.length>0&&(0,d.jsxs)(e.dK,{children:[(0,d.jsx)(e.Eb,{disabled:!o||t,onClick:s}),(0,d.jsx)(e.D2,{children:void 0===v||void 0===u?`${String(a.length)} shown`:`${String(u)}–${String(u+a.length-1)} of ${String(v)} types`}),(0,d.jsx)(e.WA,{disabled:!n||t,loading:t,onClick:r})]}):n&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the first ",a.length," types — refine the filters to narrow results."]})]})}function n({finding:a}){let b=j.y7[a.category]??h.RY;return(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-7 shrink-0 items-center justify-center rounded-lg",(0,j.i9)(a.category)),children:(0,d.jsx)(b,{className:"size-4"})}),(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsx)("span",{className:"font-semibold text-text wrap-anywhere",children:a.subtype}),(0,d.jsx)("span",{className:"font-mono text-xs text-text-3 wrap-anywhere",title:a.match.maskedValue,children:a.match.maskedValue})]})]})}function o({status:a}){if(!a)return(0,d.jsx)("span",{className:"text-text-3",children:"—"});let b=j.B5[a];return(0,d.jsx)(e.Ex,{variant:b.badge,className:"h-6",children:b.label})}let p={severity:a=>(0,d.jsx)(e.Pt,{severity:a.severity}),subtype:a=>(0,d.jsx)(n,{finding:a}),sources:a=>(0,d.jsx)(k.B,{ids:a.providers}),locations:a=>(0,d.jsxs)("span",{className:"text-text-3",children:[a.instanceCount," locations"]}),action:a=>(0,d.jsx)(i._,{aggregateAction:a.aggregateAction}),status:a=>(0,d.jsx)(o,{status:a.status}),latest:a=>(0,d.jsx)("span",{className:"text-text-3 text-xs",children:(0,g.K)(a.latestDetectedAt)})},q={severity:a=>(0,d.jsx)(e.Pt,{severity:a.severity}),subtype:(a,b)=>(0,d.jsxs)("div",{className:"flex items-center gap-2.5 pl-1",children:[(0,d.jsx)("span",{className:"-mt-1.5 size-3.5 shrink-0 rounded-bl border-b-[1.5px] border-l-[1.5px] border-border-strong"}),(0,d.jsxs)("div",{className:"flex flex-col gap-px",children:[(0,d.jsx)("span",{className:"font-semibold text-text text-ui wrap-anywhere",children:b.repo}),(0,d.jsx)("span",{className:"font-mono text-label text-text-3 wrap-anywhere",children:b.id})]})]}),sources:(a,b)=>(0,d.jsx)(k.i,{provider:b.provider}),locations:(a,b)=>(0,d.jsx)("span",{className:"font-mono text-xs text-text-3 wrap-anywhere",children:(0,j.xE)(b)}),action:(a,b)=>(0,d.jsx)(i.T,{action:b.action}),status:(a,b)=>(0,d.jsx)(o,{status:b.status}),latest:(a,b)=>(0,d.jsx)("span",{className:"text-text-3 text-xs",children:(0,g.K)(b.detectedAt)})}},5930:(a,b,c)=>{"use strict";c.d(b,{ProjectPane:()=>k});var d=c(88422),e=c(63959),f=c(88391),g=c(42282),h=c(56633),i=c(88378);function j(a){let b=a.lastIndexOf("/");return -1===b?"":a.slice(0,b)}function k(a){let{proj:b,path:c,onPathChange:f,query:j,tree:k,isLoading:o,error:s,onClose:t}=a,u=j.trim().length>0,v=k?.folders??[],w=k?.files??[],x=b.accessCounts;return(0,d.jsxs)(e.Zp,{className:"flex min-h-0 min-w-0 flex-1 flex-col overflow-hidden",children:[(0,d.jsxs)("div",{className:"border-b border-border px-5 py-3.5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3.5",children:[(0,d.jsx)("div",{className:"min-w-0 flex-1",children:(0,d.jsx)(m,{proj:b,path:c,onPathChange:f})}),(0,d.jsx)(l,{...a}),t&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon","aria-label":"Back to harness",title:"Back to harness",onClick:t,children:(0,d.jsx)(i.m,{name:"x"})})]}),(0,d.jsxs)("div",{className:"mt-3 flex items-start gap-2.5",children:[(0,d.jsx)(g.yk,{v:b.visibility}),(0,d.jsxs)("div",{className:"flex min-w-0 flex-1 gap-2.5 flex-wrap justify-between",children:[(0,d.jsx)("span",{className:"text-xs text-text-3",children:(0,h._t)(b,"source")}),(0,d.jsx)("span",{className:"flex items-center gap-3 text-xs text-text-3",children:h.IF.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("size-2 rounded-sm",h.Pe[a].bar)}),x[a]," ",h.Pe[a].label]},a))})]})]})]}),!u&&a.blocked.length>0&&(0,d.jsx)(r,{...a}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 pb-4 pt-2",children:o&&!k?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-text-3",children:"Loading files…"}):s?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-sev-critical-ink",children:s}):u?w.length>0?(0,d.jsx)(q,{caption:`${String(w.length)} result${1===w.length?"":"s"}`,rows:w,showPath:!0,...a}):(0,d.jsxs)("div",{className:"py-12 text-center text-text-3",children:[(0,d.jsx)(i.m,{name:"search",className:"mx-auto mb-2 size-6"}),(0,d.jsxs)("div",{className:"text-sm",children:["No files match “",j,"”"]})]}):0===v.length&&0===w.length?(0,d.jsx)("div",{className:"py-12 text-center text-sm text-text-3",children:"This folder is empty"}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Name"}),(0,d.jsx)(e.nd,{children:"Origin"}),(0,d.jsx)(e.nd,{children:"LLM access"}),(0,d.jsx)(e.nd,{className:"w-10"})]})}),(0,d.jsxs)(e.BF,{children:[v.map(a=>(0,d.jsx)(n,{folder:a,onOpen:()=>{f([...c,a.name])}},"d"+a.name)),w.map(b=>(0,d.jsx)(p,{file:b,...a},"f"+b.path))]})]})})]})}function l({proj:a,query:b,onQueryChange:c}){return(0,d.jsxs)("div",{className:"relative w-70 shrink-0",children:[(0,d.jsx)(i.m,{name:"search",className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:b,onChange:a=>{c(a.target.value)},placeholder:`Search files in ${a.name}…`,className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-8 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"}),b&&(0,d.jsx)("button",{type:"button","aria-label":"Clear search",onClick:()=>{c("")},className:"absolute right-2 top-1/2 -translate-y-1/2 rounded p-1 text-text-3 hover:text-text",children:(0,d.jsx)(i.m,{name:"x",className:"size-3.5"})})]})}function m({proj:a,path:b,onPathChange:c}){let g=[a.name,...b];return(0,d.jsxs)("div",{className:"flex min-w-0 flex-wrap items-center gap-1.5",children:[b.length>0&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon",className:"size-7",title:"Up one level",onClick:()=>{c(b.slice(0,-1))},children:(0,d.jsx)(i.m,{name:"arrow-up"})}),g.map((a,h)=>{let j=h===g.length-1;return(0,d.jsxs)(f.Fragment,{children:[h>0&&(0,d.jsx)(i.m,{name:"chevron-right",className:"size-3 text-text-3"}),(0,d.jsx)("button",{type:"button",onClick:()=>{c(b.slice(0,h))},className:(0,e.cn)("rounded px-1 py-0.5 text-sm",0===h&&"font-mono",j?"cursor-default font-bold text-text":"font-semibold text-text-2 hover:text-text"),children:a})]},h)})]})}function n({folder:a,onOpen:b}){let c=a.accessCounts;return(0,d.jsxs)(e.Hj,{className:"cursor-pointer hover:bg-surface-2",onClick:b,children:[(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)(i.m,{name:"folder",className:"size-4.5 shrink-0 text-primary"}),(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:a.name}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[c.total," file",1===c.total?"":"s"]})]})}),(0,d.jsx)(e.nA,{className:"text-xs text-text-3",children:"Folder"}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(g.AJ,{counts:c}),c.blocked>0?(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical-ink",children:[c.blocked," blocked"]}):(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[c.total," allowed"]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"grid size-7 place-items-center","aria-hidden":"true",children:(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})})})]})}function o({file:a,showPath:b}){let c=j(a.path),e="blocked"===a.access;return(0,d.jsxs)("div",{className:"flex min-w-0 items-center gap-2.5",children:[(0,d.jsx)(i.m,{name:"file",className:"size-4.5 shrink-0 text-text-3"}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-baseline gap-1.5 whitespace-nowrap",children:[b&&c.length>0&&(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[c,"/"]}),(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name})]}),a.blockedAt&&e&&(0,d.jsxs)("div",{className:"mt-px flex items-center gap-1.5 text-xs text-sev-critical-ink",children:[(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3"}),a.note]})]})]})}function p({file:a,onSetAccess:b,onOpenFile:c,drawerPath:f,showPath:h}){return(0,d.jsxs)(e.Hj,{className:(0,e.cn)("cursor-pointer hover:bg-surface-2",f===a.path&&"bg-surface-2"),onClick:()=>{c(a.path)},children:[(0,d.jsx)(e.nA,{children:(0,d.jsx)(o,{file:a,showPath:h})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(g.TJ,{origin:a.origin})}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(g.kx,{value:a.access,onChange:c=>{b(a.path,c)}}),(0,d.jsx)(g.Vx,{value:a.access})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"grid size-7 place-items-center","aria-hidden":"true",children:(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})})})]})}function q({caption:a,rows:b,showPath:c,...f}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:a}),(0,d.jsx)(e.nd,{children:"Origin"}),(0,d.jsx)(e.nd,{children:"LLM access"}),(0,d.jsx)(e.nd,{className:"w-10"})]})}),(0,d.jsx)(e.BF,{children:b.map(a=>(0,d.jsx)(p,{file:a,showPath:c,...f},a.path))})]})}function r({blocked:a,showBlocked:b,onToggleBlocked:c,onSetAccess:f,onOpenFile:k}){return(0,d.jsxs)("div",{className:"border-b border-border bg-surface-2",children:[(0,d.jsxs)("button",{type:"button",className:"flex w-full items-center gap-2.5 px-4.5 py-3 text-left cursor-pointer",onClick:c,children:[(0,d.jsx)("span",{className:"grid size-6 shrink-0 place-items-center rounded-md bg-sev-critical-fill text-sev-critical-ink",children:(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3.5"})}),(0,d.jsx)("span",{className:"text-ui font-semibold",children:"Recently blocked"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-critical-ink px-2 py-px text-xs font-bold text-on-accent",children:a.length}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:"Auto-blocked on detection — review to adjust"}),(0,d.jsx)(i.m,{name:"chevron-down",className:(0,e.cn)("ml-auto size-4.5 text-text-3 transition-transform",!b&&"-rotate-90")})]}),b&&(0,d.jsx)("div",{className:"flex flex-col gap-2 px-3.5 pb-3",children:a.map(a=>{let b=j(a.path);return(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-baseline gap-1.5 overflow-hidden whitespace-nowrap",children:[b.length>0&&(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[b,"/"]}),(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name})]}),(0,d.jsxs)("div",{className:"mt-0.5 text-xs text-text-3",children:[a.note,a.blockedAt?` \xb7 blocked ${(0,h.v7)(a.blockedAt)}`:""]})]}),(0,d.jsx)(g.kx,{value:a.access,onChange:b=>{f(a.path,b)}}),(0,d.jsx)(g.Vx,{value:a.access}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"primary",size:"sm",onClick:()=>{k(a.path)},children:"Review"})]},a.path)})})]})}},6932:(a,b,c)=>{"use strict";c.d(b,{e:()=>f,p:()=>g});var d=c(88422),e=c(63959);function f({children:a,className:b}){return(0,d.jsx)("span",{className:(0,e.cn)("mb-2 block text-label font-semibold uppercase tracking-wider text-text-3",b),children:a})}function g({label:a,children:b}){return(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),(0,d.jsx)("div",{className:"text-ui font-medium text-text",children:b})]})}},10712:(a,b,c)=>{"use strict";c.d(b,{RecommendedActionsCardView:()=>k});var d=c(88422),e=c(63959),f=c(81604),g=c(97017);let h={critical:"bg-sev-critical-fill text-sev-critical-ink",primary:"bg-primary-tint text-primary",teal:"bg-teal-fill text-teal-ink"},i={block_credentials:f.pD,redact_pii:f.jZ,review_external_share:f._G},j={critical:"critical",high:"primary",medium:"teal",low:"teal"};function k({items:a,isLoading:b,error:c,applyAction:k,dismissAction:l,isMutating:m,mutationError:n}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-primary-tint text-primary",children:(0,d.jsx)(f.BZ,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Recommended actions"}),(0,d.jsx)(e.BT,{children:b?"Loading…":`${String(a.length)} prioritized for your environment`})]}),(0,d.jsx)(e.X9,{children:(0,d.jsx)(e.$n,{variant:"ghost",tone:"primary",size:"sm",children:"View all"})})]}),(0,d.jsx)(e.Wu,{"aria-busy":b,children:c?(0,d.jsx)(g.rJ,{message:c}):b?(0,d.jsx)("div",{className:"flex flex-col gap-3 py-2",children:[0,1,2].map(a=>(0,d.jsx)(e.EA,{className:"h-20 w-full"},a))}):0===a.length?(0,d.jsx)("div",{className:"py-6 text-center text-xs text-text-3",children:"No recommendations right now."}):(0,d.jsxs)(d.Fragment,{children:[n&&(0,d.jsx)(g.rJ,{message:n}),a.map((b,c)=>{let g=i[b.category]??f.rX;return(0,d.jsxs)("div",{className:(0,e.cn)("flex gap-3 py-3",c<a.length-1&&"border-b border-text/6"),children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-8 shrink-0 items-center justify-center rounded-lg",h[j[b.severity]]),children:(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:b.title}),(0,d.jsx)("div",{className:"mt-0.5 text-xs leading-relaxed text-text-2",children:b.description}),(0,d.jsx)("div",{className:"mt-2 flex flex-wrap items-center gap-1.5",children:b.subjects.map(a=>(0,d.jsx)(e.vw,{children:a.label},`${a.type}_${a.id}`))})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1.5",children:["apply"===b.action.mode?(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:m,onClick:()=>{k(b.id)},children:b.action.label}):b.action.href?(0,d.jsx)(e.$n,{asChild:!0,variant:"solid",tone:"primary",size:"sm",children:(0,d.jsx)("a",{href:b.action.href,children:b.action.label})}):(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!0,children:b.action.label}),(0,d.jsx)(e.$n,{variant:"ghost",size:"sm",disabled:m,onClick:()=>{l(b.id)},children:"Dismiss"})]})]},b.id)})]})})]})}},10863:(a,b,c)=>{"use strict";c.d(b,{$F:()=>h,Ai:()=>i,Jk:()=>k,Zp:()=>j});var d=c(88422),e=c(81604),f=c(16614);function g({tone:a,icon:b,children:c,className:e}){let[g,h]=(0,f.vV)(a);return(0,d.jsxs)("span",{className:"inline-flex h-[22px] items-center gap-1.5 whitespace-nowrap rounded-full px-2 text-xs font-semibold "+(e??""),style:{color:g,background:h},children:[b&&(0,d.jsx)(b,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c]})}function h({policy:a}){let b=(0,f.ES)(a),[c,e]=(0,f.vV)(b.tone),g=b.icon;return(0,d.jsxs)("span",{className:"inline-flex h-5 items-center gap-1.5 whitespace-nowrap rounded-full px-2 text-xs font-semibold",style:{color:c,background:e},children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function i({origin:a}){let b=f.H9[a];return(0,d.jsx)(g,{tone:b.tone,icon:b.icon,children:b.label})}function j({version:a}){return(0,d.jsxs)("span",{className:"inline-flex h-6 items-center gap-1.5 whitespace-nowrap rounded-full bg-sev-high-fill px-2 text-xs font-semibold text-sev-high-ink",children:[(0,d.jsx)(e.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a?"Update \xb7 v"+a:"Update"]})}function k({publisher:a,kind:b}){let c=f.jP[b],[e]=(0,f.vV)(c.tone),g=c.icon;return(0,d.jsxs)("span",{className:"inline-flex min-w-0 items-center gap-1.5 text-xs font-semibold text-text-2",children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0",style:{color:e}}),(0,d.jsx)("span",{className:"truncate",title:a,children:a}),c.verified&&(0,d.jsx)("span",{title:c.label,className:"text-[10px] font-bold",style:{color:e},children:"✓"})]})}},11151:(a,b,c)=>{"use strict";c.d(b,{DerefAuditTableView:()=>k});var d=c(88422),e=c(26273),f=c(63959),g=c(4513),h=c(3285);let i={revealed:"border-l-2 border-l-sev-critical bg-sev-critical-fill font-medium",refused:"border-l-2 border-l-sev-high bg-sev-high-fill font-medium"};function j({row:a}){return"model"===a.target&&"revealed"===a.outcome?(0,d.jsx)(f.Ex,{variant:"critical",children:"revealed"}):"refused"===a.outcome?(0,d.jsx)(f.Ex,{variant:"high",children:"refused"}):"unavailable"===a.outcome?(0,d.jsx)(f.Ex,{variant:"outline",children:"unavailable"}):(0,d.jsx)(f.Ex,{variant:"default",children:"revealed"})}function k({rows:a,hiddenBatched:b,showBatched:c,onToggleBatched:k,hasNextPage:l=!1,hasPreviousPage:m=!1,onNextPage:n,onPreviousPage:o,loadingNextPage:p=!1,pageStart:q}){let r=void 0===k?null:(0,d.jsx)(f.$n,{variant:"link",tone:"neutral",onClick:()=>{k(!c)},children:c?"Hide display/render resolutions":"Show them"}),s=!c&&b>0?(0,d.jsxs)("p",{className:"mt-3 flex items-center gap-2 text-xs text-text-3",children:[(0,d.jsxs)("span",{children:[String(b)," display/render"," ",1===b?"resolution":"resolutions"," hidden"]}),r]}):c&&void 0!==k?(0,d.jsx)("p",{className:"mt-3 text-xs text-text-3",children:r}):null,t=0===a.length;return!t||m||l?(0,d.jsxs)("div",{className:"overflow-x-auto rounded-xl border border-border bg-surface p-4",children:[t?(0,d.jsx)("div",{className:"py-10 text-center text-sm text-text-3",children:"These rows moved while you were reading. Step back to see the rest."}):(0,d.jsxs)(f.XI,{children:[(0,d.jsx)(f.A0,{children:(0,d.jsxs)(f.Hj,{children:[(0,d.jsx)(f.nd,{children:"When"}),(0,d.jsx)(f.nd,{children:"Reason"}),(0,d.jsx)(f.nd,{children:"Target"}),(0,d.jsx)(f.nd,{children:"Outcome"}),(0,d.jsx)(f.nd,{children:"Grant"}),(0,d.jsx)(f.nd,{children:"Pointers"})]})}),(0,d.jsx)(f.BF,{children:a.map(a=>"purge"===a.reason?(0,d.jsxs)(f.Hj,{"data-purge":"",className:"bg-surface-2",children:[(0,d.jsx)(f.nA,{className:"text-xs text-text-2",children:(0,g.K)(a.at)}),(0,d.jsxs)(f.nA,{colSpan:5,className:"text-xs font-medium text-text-2",children:["Vault purge —"," ",1===a.pointerCount?"a pointer":`${String(a.pointerCount)} pointers`," ","made permanently unresolvable"]})]},a.id):(0,d.jsxs)(f.Hj,{"data-model-crossing":"model"===a.target?a.outcome:void 0,className:(0,f.cn)("model"===a.target&&i[a.outcome],(0,e.kqf)(a.reason)&&"text-text-3"),children:[(0,d.jsx)(f.nA,{className:"text-xs text-text-2",children:(0,g.K)(a.at)}),(0,d.jsx)(f.nA,{className:"text-xs",children:h.V[a.reason]}),(0,d.jsx)(f.nA,{className:"text-xs",children:"model"===a.target?(0,d.jsx)("span",{className:"font-semibold text-sev-critical-ink",children:"model"}):(0,d.jsx)("span",{className:"text-text-2",children:"human"})}),(0,d.jsx)(f.nA,{children:(0,d.jsx)(j,{row:a})}),(0,d.jsx)(f.nA,{className:"font-mono text-xs text-text-3",children:void 0===a.grantId?"—":a.grantId.slice(0,8)}),(0,d.jsx)(f.nA,{className:"text-xs text-text-2",children:a.pointerCount>1?`\xd7${String(a.pointerCount)}`:"—"})]},a.id))})]}),n?(0,d.jsxs)(f.dK,{children:[(0,d.jsx)(f.Eb,{disabled:!m||p,onClick:o}),(0,d.jsx)(f.D2,{children:void 0===q?`${String(a.length)} shown`:t?"0 resolutions":`${String(q)}–${String(q+a.length-1)} resolutions`}),(0,d.jsx)(f.WA,{disabled:!l||p,loading:p,onClick:n})]}):l&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the most recent ",a.length," resolutions."]}),s]}):(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-surface p-4",children:[(0,d.jsx)("div",{className:"py-10 text-center text-sm text-text-3",children:"No de-references recorded — every resolution of a vaulted value lands here."}),s]})}},13250:(a,b,c)=>{"use strict";c.d(b,{ExceptionsTableView:()=>i});var d=c(88422),e=c(63959),f=c(4513),g=c(29893),h=c(72060);function i({items:a,includeTerminal:b,onSelect:c}){return 0===a.length?(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface py-10 text-center text-sm text-text-3",children:b?"No exceptions have ever been granted.":"No active exceptions — enforcement applies everywhere."}):(0,d.jsx)("div",{className:"overflow-x-auto rounded-xl border border-border bg-surface p-4",children:(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"ID"}),(0,d.jsx)(e.nd,{children:"Rule"}),(0,d.jsx)(e.nd,{children:"Value"}),(0,d.jsx)(e.nd,{children:"Scope"}),(0,d.jsx)(e.nd,{children:"Expires"}),(0,d.jsx)(e.nd,{children:"Uses"}),(0,d.jsx)(e.nd,{children:"Created"}),(0,d.jsx)(e.nd,{children:"State"})]})}),(0,d.jsx)(e.BF,{children:a.map(a=>(0,d.jsxs)(e.Hj,{className:"cursor-pointer","aria-label":`View details for exception ${a.id.slice(0,8)}`,onClick:()=>{c(a.id)},children:[(0,d.jsx)(e.nA,{className:"font-mono text-xs text-text-3",children:a.id.slice(0,8)}),(0,d.jsx)(e.nA,{className:"font-mono text-xs",children:a.ruleId}),(0,d.jsx)(e.nA,{className:"font-mono text-xs",children:(0,d.jsxs)("span",{className:"inline-flex items-center gap-2",children:[a.maskedValue,(0,d.jsx)(g._,{exception:a})]})}),(0,d.jsx)(e.nA,{className:"text-xs",children:h.yr[a.scope]}),(0,d.jsx)(e.nA,{className:"text-xs text-text-2",children:null===a.expiresAt?"—":(0,f.K)(a.expiresAt)}),(0,d.jsx)(e.nA,{className:"text-xs text-text-2",children:null===a.maxUses?String(a.useCount):`${String(a.useCount)}/${String(a.maxUses)}`}),(0,d.jsxs)(e.nA,{className:"text-xs text-text-2",children:[(0,f.K)(a.createdAt)," \xb7 ",h.gi[a.createdVia]]}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(g.StateTagFor,{exception:a})})]},a.id))})]})})}},13848:(a,b,c)=>{"use strict";c.d(b,{A:()=>g,r:()=>f});var d=c(88422),e=c(63959);function f({message:a}){return(0,d.jsxs)("div",{role:"alert",className:"text-xs text-text-3",children:["Couldn’t load data — ",a]})}function g({message:a,className:b}){return(0,d.jsx)("div",{className:(0,e.cn)("w-full py-6 text-center text-xs text-text-3",b),children:a})}},14100:(a,b,c)=>{"use strict";c.d(b,{VaultReuseView:()=>h});var d=c(88422),e=c(63959),f=c(25663);function g(a){return a.occurrences>1||a.sightings.length>1}function h({entries:a,hasNextPage:b=!1,hasPreviousPage:c=!1,onNextPage:h,onPreviousPage:i,loadingNextPage:j=!1,pageStart:k,total:l}){let m=a.filter(g).sort((a,b)=>b.occurrences-a.occurrences),n=0===m.length;return!n||c||b?(0,d.jsxs)("div",{className:"overflow-x-auto rounded-xl border border-border bg-surface p-4",children:[(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Values detected more than once on this machine, most-reused first."}),n?(0,d.jsx)("div",{className:"py-10 text-center text-sm text-text-3",children:"These rows moved while you were reading. Step back to see the rest."}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Value"}),(0,d.jsx)(e.nd,{children:"Occurrences"}),(0,d.jsx)(e.nd,{children:"Seen in"})]})}),(0,d.jsx)(e.BF,{children:m.map(a=>{let b=[...new Set(a.sightings.map(a=>a.location))];return(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nA,{children:(0,d.jsx)(f.Y,{value:null,descriptor:a})}),(0,d.jsx)(e.nA,{className:"text-xs text-text-2",children:String(a.occurrences)}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("ul",{className:"space-y-0.5 pl-3",children:b.map(a=>(0,d.jsx)("li",{className:"font-mono text-xs text-text-2 list-disc py-1",children:a},a))})})]},a.pointerId)})})]}),h?(0,d.jsxs)(e.dK,{children:[(0,d.jsx)(e.Eb,{disabled:!c||j,onClick:i}),(0,d.jsx)(e.D2,{children:void 0===l||void 0===k?`${String(m.length)} shown`:n?`0 of ${String(l)} reused values`:`${String(k)}–${String(k+m.length-1)} of ${String(l)} reused values`}),(0,d.jsx)(e.WA,{disabled:!b||j,loading:j,onClick:h})]}):b&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the first ",m.length," reused values — the rest are in the store."]})]}):(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface py-10 text-center text-sm text-text-3",children:"No reused values detected on this machine."})}},14733:(a,b,c)=>{"use strict";c.d(b,{UpdateStatusCardView:()=>g});var d=c(88422),e=c(63959),f=c(81604);function g({statuses:a,checkedAt:b,onCheckNow:c,onApply:g,applyingId:h,outcomes:i,restartRequired:j,busy:k}){return(0,d.jsxs)(e.Zp,{className:"shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-primary-tint text-primary",children:(0,d.jsx)(f.fN,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Installed components"}),(0,d.jsx)(e.BT,{children:b?`Last checked ${b}`:"Not checked yet"})]}),(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",size:"sm",disabled:k,onClick:c,children:k?"Checking…":"Check now"})]}),(0,d.jsxs)(e.Wu,{children:[j&&(0,d.jsxs)("div",{className:"mb-3 rounded-lg border border-ok-fill bg-ok-fill px-3 py-2 text-xs font-medium text-text",children:["Update installed — restart ",(0,d.jsx)("code",{className:"font-mono",children:"aka dashboard"})," to load the new version."]}),(0,d.jsxs)("div",{className:"flex flex-col",children:[a.map((a,b)=>{let c=i[a.id];return(0,d.jsxs)("div",{className:(0,e.cn)("py-3",b>0&&"border-t border-text/6"),children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:a.name}),(0,d.jsxs)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:[a.installed??"—",a.latest&&a.updateAvailable&&` → ${a.latest}`]})]}),null===a.installed||null===a.latest?(0,d.jsx)(e.Ex,{variant:"default",children:"unknown"}):a.updateAvailable?(0,d.jsx)(e.Ex,{variant:"high",children:"update available"}):(0,d.jsx)(e.Ex,{variant:"success",children:"up to date"}),a.updateAvailable&&(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:null!==h,onClick:()=>{g(a.id)},children:h===a.id?"Updating…":"Update"})]}),c&&(0,d.jsxs)("div",{className:(0,e.cn)("mt-2 rounded-lg border p-2",c.ok?"border-ok-fill bg-ok-fill":"border-sev-critical-fill bg-sev-critical-fill"),children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:c.ok?"Updated.":"Update failed"}),c.output&&(0,d.jsx)("pre",{className:"mt-1 max-h-40 overflow-auto whitespace-pre-wrap font-mono text-label text-text-2",children:c.output})]})]},a.id)}),0===a.length&&(0,d.jsx)("div",{className:"py-6 text-center text-xs text-text-3",children:"Nothing installed to report on yet."})]})]})]})}},15314:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>f,metadata:()=>e});var d=c(87472);c(77158),c(63154),c(75446),c(76114);let e={title:{template:"%s \xb7 AI Traffic Control",default:"AI Traffic Control"},description:"AI Traffic Control (ai-tc) by AKA Security — local-first security dashboard (open source)."};function f({children:a}){return(0,d.jsxs)("html",{lang:"en",suppressHydrationWarning:!0,children:[(0,d.jsx)("head",{children:(0,d.jsx)("script",{dangerouslySetInnerHTML:{__html:'(function(){try{var p=localStorage.getItem("aka-theme");var d=p==="dark"||(p!=="light"&&matchMedia("(prefers-color-scheme: dark)").matches);document.documentElement.classList.toggle("dark",d);}catch(e){}})();'}})}),(0,d.jsx)("body",{children:a})]})}},15936:(a,b,c)=>{"use strict";c.d(b,{HD:()=>k,SU:()=>o,UH:()=>n,Wi:()=>m,eV:()=>j,kX:()=>i,xB:()=>l});var d=c(88422),e=c(63959),f=c(81604),g=c(35729);let h={GET:"bg-sev-low-fill text-sev-low-ink",POST:"bg-ok-fill text-ok-ink",PUT:"bg-sev-high-fill text-sev-high-ink",DELETE:"bg-sev-critical-fill text-sev-critical-ink",SDK:"bg-ok-fill text-ok-ink",REF:"bg-sev-medium-fill text-sev-medium-ink"};function i({method:a}){return(0,d.jsx)("span",{className:(0,e.cn)("inline-flex h-5 items-center rounded px-1.5 font-mono text-label leading-none font-bold py-0.5",h[a]),children:a})}function j({transport:a,plain:b}){let c=g.aD[a],f=c.icon;return b?(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1.5 text-xs font-semibold",c.secure?"text-text-2":"text-sev-critical-ink"),children:[(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c.label,!c.secure&&" \xb7 plaintext"]}):(0,d.jsxs)(e.Ex,{variant:c.secure?"default":"critical",children:[(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c.label]})}function k({cls:a}){let b=g.Hf[a],c=b.icon;return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function l({trust:a}){let b=g.pN[a],c=b.icon;return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b.label]})}function m({kind:a,trust:b,name:c,host:h,size:i=34}){if("provider"===a){let{short:a,color:b}=(0,g.Lh)(c,h);return(0,d.jsx)("span",{className:"inline-flex shrink-0 items-center justify-center rounded-lg font-display font-semibold text-white ring-1 ring-inset ring-mark-edge",style:{width:i,height:i,background:b,fontSize:.34*i},children:a})}let j={width:.5*i,height:.5*i},k="ip"===a?(0,d.jsx)(f.ts,{"aria-hidden":!0,focusable:!1,style:j}):"external"===a||"unverified"===b?(0,d.jsx)(f.ai,{"aria-hidden":!0,focusable:!1,style:j}):(0,d.jsx)(f.RR,{"aria-hidden":!0,focusable:!1,style:j});return(0,d.jsx)("span",{className:(0,e.cn)("grid shrink-0 place-items-center rounded-lg",(0,g.rL)({kind:a,trust:b})),style:{width:i,height:i},children:k})}function n({url:a,big:b}){let c=a.split(/(\$\{[^}]+\})/g);return(0,d.jsx)("span",{className:(0,e.cn)("break-all font-mono",b?"text-ui":"text-xs"),children:c.map((a,b)=>a.startsWith("${")?(0,d.jsx)("span",{className:"rounded bg-primary-tint px-1 font-semibold text-primary",children:a},b):(0,d.jsx)("span",{children:a},b))})}function o(){return(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(f.cZ,{"aria-hidden":!0,focusable:!1,className:"size-2.5"}),"Template"]})}},16614:(a,b,c)=>{"use strict";c.d(b,{ES:()=>l,H9:()=>n,Xg:()=>p,gh:()=>m,jP:()=>o,rE:()=>i,tG:()=>f,uR:()=>k,vV:()=>g,vm:()=>h});var d=c(26273),e=c(81604);let f="monitor";function g(a){return({primary:["var(--color-primary)","var(--color-primary-tint)"],teal:["var(--color-teal-ink)","var(--color-teal-fill)"],green:["var(--color-ok-ink)","var(--color-ok-fill)"],red:["var(--color-sev-critical-ink)","var(--color-sev-critical-fill)"],orange:["var(--color-sev-high-ink)","var(--color-sev-high-fill)"],gray:["var(--color-text-2)","var(--color-surface-3)"],blue:["var(--color-sev-low-ink)","var(--color-sev-low-fill)"],violet:["var(--color-violet-ink)","var(--color-violet-fill)"]})[a]}function h(a){return"regex"===a.type?"/"+a.pattern+"/"+a.flags:"keyword"===a.type?a.keywords.join(" \xb7 "):a.name}let i={regex:{label:"Regex",icon:e.cZ,color:"var(--color-violet-ink)",fill:"var(--color-violet-fill)",blurb:"Pattern match"},keyword:{label:"Keyword",icon:e.Ey,color:"var(--color-teal-ink)",fill:"var(--color-teal-fill)",blurb:"Literal lookup"},validator:{label:"Validator",icon:e.BZ,color:"var(--color-primary)",fill:"var(--color-primary-tint)",blurb:"Checksum / entropy"}},j={monitor:{id:"monitor",label:"Monitor",icon:e.bM,tone:"gray",desc:"Log every match for audit. The request is allowed through untouched."},warn:{id:"warn",label:"Warn",icon:e._0,tone:"orange",desc:"Allow the request, but warn the user inline before it is sent."},redact:{id:"redact",label:"Redact",icon:e.jZ,tone:"primary",desc:"Automatically strip the matched value from the request, then continue."},block:{id:"block",label:"Block",icon:e.pD,tone:"red",desc:"Refuse the request entirely whenever any rule in this detection matches."}},k=d.V0H;function l(a){return(Object.hasOwn(j,a)?j[a]:void 0)??{id:a,label:a,icon:e.iB,tone:"gray",desc:""}}let m={pii:"PII",financial:"Financial",secret:"Secret",phi:"PHI",code_context:"Code context",code_flaw:"Code flaw",custom:"Custom",config:"Configuration"},n={library:{label:"Library",icon:e.fC,tone:"teal",blurb:"Imported from the public library"}},o={labs:{label:"AKA Labs",icon:e.Zu,tone:"teal",verified:!0},org:{label:"Your org",icon:e.ai,tone:"violet",verified:!1},user:{label:"Community",icon:e.ny,tone:"gray",verified:!1}};function p(a){return null==a.update?"unknown":a.update.available?"update-available":"up-to-date"}},17162:(a,b,c)=>{"use strict";c.d(b,{MttrTrendCardView:()=>l});var d=c(88422),e=c(63959),f=c(21172),g=c(63667),h=c(81604);function i(a){if(null===a||Number.isNaN(a))return"—";let b=Math.round(Math.max(0,a)/6e4),c=Math.floor(b/1440),d=Math.floor((b-=24*c*60)/60);return(b-=60*d,c>0)?d>0?`${String(c)}d ${String(d)}h`:`${String(c)}d`:d>0?b>0?`${String(d)}h ${String(b)}m`:`${String(d)}h`:`${String(Math.max(1,b))}m`}var j=c(97017);let k=[{key:"critical",label:"Critical",color:f.l.sevCritical},{key:"high",label:"High",color:f.l.sevHigh},{key:"medium",label:"Medium",color:f.l.sevMedium},{key:"low",label:"Low",color:f.l.sevLow}];function l({points:a,isLoading:b,error:c}){let f=a.every(a=>null===a.critical&&null===a.high&&null===a.medium&&null===a.low),l=a.map(a=>({label:a.label,critical:a.critical,high:a.high,medium:a.medium,low:a.low})),m=a.at(-1)??null;return(0,d.jsxs)(e.Zp,{className:"mt-4 shadow-sm xl:mt-5",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{children:(0,d.jsx)(h.O4,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Time to remediate"}),(0,d.jsx)(e.BT,{children:"Mean time from detection to resolution, by severity"})]}),(0,d.jsx)(e.X9,{className:"gap-3 text-xs text-text-2",children:k.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"size-2 rounded-xs",style:{background:a.color}}),a.label,m&&(0,d.jsx)("span",{className:"text-text-3",children:i(m[a.key])})]},a.key))})]}),(0,d.jsx)(e.Wu,{"aria-busy":b,className:"pb-2",children:c?(0,d.jsx)(j.rJ,{message:c}):b?(0,d.jsx)(e.EA,{className:"h-40 w-full"}):f?(0,d.jsx)(j.AW,{message:"No resolved findings in this range."}):(0,d.jsx)(g.AreaChart,{data:l,series:k,height:160,valueFormat:i})})]})}},19016:(a,b,c)=>{"use strict";c.d(b,{InventoryNav:()=>l});var d=c(88422),e=c(63959),f=c(88391),g=c(22559),h=c(42282),i=c(56633),j=c(88378);let k=[{type:"all",label:"All"},...i.fd.map(a=>({type:a.type,label:"Configuration"===a.label?"Config":a.label.replace(" servers","")}))];function l(a){let{projects:b,assetGroups:c,harnesses:g,viewMode:h,onViewMode:i,typeFilter:l,onTypeFilter:n,query:p,onQuery:q,attention:r,isLoading:s}=a,t=(0,f.useMemo)(()=>{let a={skill:[],mcp:[],hook:[],config:[]};for(let b of c)"project"!==b.type&&(a[b.type]=b.items);return a},[c]),u=(0,f.useMemo)(()=>{let a=p.toLowerCase(),c=b=>!a||b.toLowerCase().includes(a);return b.filter(a=>c(a.name)||c(a.repo))},[b,p]);return(0,d.jsxs)(e.Zp,{className:"flex w-85 shrink-0 flex-col overflow-hidden shadow-sm",children:[(0,d.jsxs)("div",{className:"border-b border-border px-4 pb-3 pt-4",children:[(0,d.jsxs)("div",{className:"mb-3 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold",children:"All assets"}),void 0===r?(0,d.jsx)("span",{className:"ml-auto text-xs text-text-3",children:"…"}):(0,d.jsxs)("span",{className:(0,e.cn)("ml-auto inline-flex items-center gap-1.5 text-xs font-semibold",r?"text-sev-high-ink":"text-ok-ink"),children:[(0,d.jsx)(j.m,{name:r?"flag":"check-circle",className:"size-3.5"}),r?`${String(r)} to review`:"All clear"]})]}),(0,d.jsxs)("div",{className:"relative",children:[(0,d.jsx)(j.m,{name:"search",className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:p,onChange:a=>{q(a.target.value)},placeholder:"Search assets…",className:"h-8.5 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsxs)(e.Iz,{className:"mt-3 flex w-full",value:h,onValueChange:a=>{a&&i(a)},children:[(0,d.jsxs)(e.tR,{value:"tree",children:[(0,d.jsx)(j.m,{name:"layers"})," By harness"]}),(0,d.jsxs)(e.tR,{value:"type",children:[(0,d.jsx)(j.m,{name:"list"})," By type"]})]}),"type"===h&&(0,d.jsx)(e.Iz,{className:"mt-2.5 flex w-full flex-wrap border-0 bg-transparent p-0 gap-1.5",value:l,onValueChange:a=>{a&&n(a)},children:k.map(a=>(0,d.jsx)(e.tR,{value:a.type,className:(0,e.cn)("flex-none rounded-full border border-border bg-surface px-2.5 py-1 text-text-2","data-[state=on]:border-transparent data-[state=on]:bg-text data-[state=on]:text-surface data-[state=on]:shadow-none"),children:a.label},a.type))})]}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto px-2 pb-2.5 pt-1",children:s&&0===g.length&&0===b.length&&0===c.length?(0,d.jsx)("div",{className:"px-3 py-6 text-center text-xs text-text-3",children:"Loading inventory…"}):"tree"===h?(0,d.jsx)(m,{...a}):(0,d.jsx)(o,{...a,projList:u,assetsByType:t})})]})}function m(a){let{harnesses:b,query:c}=a,e=c.toLowerCase(),f=a=>!e||a.toLowerCase().includes(e),g=e?b.map(a=>({...a,projects:a.projects.filter(a=>f(a.name)||f(a.repo)),categories:a.categories.map(a=>({...a,assets:a.assets.filter(a=>f(a.name)||f(a.sub))})).filter(a=>a.assets.length>0)})).filter(a=>a.projects.length>0||a.categories.length>0||f(a.label)||f(a.kind)):b;return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(s,{iconName:"terminal",label:"Harnesses",count:g.length}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:g.length>0?g.map(b=>(0,d.jsx)(n,{h:b,...a},b.id)):(0,d.jsx)(h.EmptyState,{message:c?"No matches":"No harnesses detected"})})]})}function n(a){let{h:b,sel:c,expanded:f,onToggleExpand:h,onSelectHarness:k,onSelectAsset:l,query:m}=a,n=b.projects,o=b.categories,r=f[b.id]??(!!m&&(n.length>0||o.length>0)),s=c?.type==="harness"&&c.id===b.id,t=(o.find(a=>"mcp"===a.type)?.assets??[]).filter(a=>"unapproved"===a.trust).length;return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:(0,e.cn)("flex items-center rounded-lg",s?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("button",{type:"button","aria-label":r?"Collapse":"Expand","aria-expanded":r,onClick:()=>{h(b.id,!r)},className:"my-2.5 ml-2.5 grid size-4.5 shrink-0 cursor-pointer place-items-center rounded text-text-3",children:(0,d.jsx)(j.m,{name:"chevron-right",className:(0,e.cn)("size-3.5 transition-transform",r&&"rotate-90")})}),(0,d.jsxs)("button",{type:"button",className:"flex min-w-0 flex-1 items-center gap-2.5 p-2.5 text-left cursor-pointer",onClick:()=>{k(b.id),r||h(b.id,!0)},children:[(0,d.jsx)(g.K,{id:b.id,size:28}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate text-sm font-semibold text-text",title:b.label,children:b.label}),(0,d.jsxs)("div",{className:"mt-px text-xs text-text-3",children:[b.kind," \xb7 ",b.assetCount," assets"]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-1.5",children:[t>0&&(0,d.jsx)("span",{className:"size-2 rounded-full bg-sev-critical"}),0===b.flagCount?(0,d.jsx)(j.m,{name:"check-circle",className:"size-3.5 text-ok-ink"}):(0,d.jsx)("span",{className:"rounded-full bg-sev-high-ink px-1.5 py-px text-xs font-bold text-on-accent",children:b.flagCount})]})]})]}),r&&(0,d.jsxs)("div",{className:"my-0.5 ml-4 border-l border-border pl-2.5",children:[n.length>0&&(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 px-2 pb-1 pt-2",children:[(0,d.jsx)(j.m,{name:i.WD.icon,className:"size-3 text-text-3"}),(0,d.jsx)("span",{className:"text-label font-bold uppercase tracking-wider text-text-3",children:i.WD.label}),(0,d.jsx)("span",{className:"text-label font-semibold text-text-3",children:n.length})]}),n.map(c=>(0,d.jsx)(p,{p:c,fromHarness:b.id,...a},c.id))]}),o.map(a=>{let e=i.pA[a.type];return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 px-2 pb-1 pt-2",children:[(0,d.jsx)(j.m,{name:e.icon,className:"size-3 text-text-3"}),(0,d.jsx)("span",{className:"text-label font-bold uppercase tracking-wider text-text-3",children:e.label}),(0,d.jsx)("span",{className:"text-label font-semibold text-text-3",children:a.assets.length})]}),a.assets.map(a=>(0,d.jsx)(q,{it:a,indent:!0,fromHarness:b.id,sel:c,onSelectAsset:l},a.id))]},a.type)})]})]})}function o(a){let{typeFilter:b,query:c,projList:e,assetsByType:f}=a,g=c.toLowerCase(),j=a=>!g||a.toLowerCase().includes(g),k=0,l=i.fd.map(c=>{let g;if(g=c.type,"all"!==b&&b!==g)return null;if("project"===c.type){let f=e.length;return 0===f&&"all"===b?null:(f>0&&k++,(0,d.jsxs)("div",{children:[(0,d.jsx)(r,{group:c,items:e.map(a=>({flags:a.findingsCount>0?["findings"]:[]}))}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:0===f?(0,d.jsx)(h.EmptyState,{message:`No ${c.label.toLowerCase()}`}):e.map(b=>(0,d.jsx)(p,{p:b,...a},b.id))})]},c.type))}let i=f[c.type].filter(a=>j(a.name)||j(a.sub));return 0===i.length&&"all"===b?null:(i.length>0&&k++,(0,d.jsxs)("div",{children:[(0,d.jsx)(r,{group:c,items:i,mcpItems:"mcp"===c.type?i:void 0}),(0,d.jsx)("div",{className:"flex flex-col gap-0.5",children:0===i.length?(0,d.jsx)(h.EmptyState,{message:`No ${c.label.toLowerCase()}`}):i.map(b=>(0,d.jsx)(q,{it:b,sel:a.sel,onSelectAsset:a.onSelectAsset},b.id))})]},c.type))});return"all"===b&&0===k?(0,d.jsx)(h.EmptyState,{icon:"search",message:c?`No assets match “${c}”`:"No assets"}):(0,d.jsx)(d.Fragment,{children:l})}function p({p:a,fromHarness:b,selFromHarness:c,sel:f,onSelectProject:g}){let k=a.accessCounts,l=a.findingsCount,m=f?.type==="project"&&f.id===a.id&&(null==b||null==c||b===c);return(0,d.jsxs)("button",{type:"button",onClick:()=>{g(a.id,b)},className:(0,e.cn)("flex w-full flex-col rounded-lg p-2.5 text-left cursor-pointer",m?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsxs)("div",{className:"mb-1.5 flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"size-2 shrink-0 rounded-full",style:{background:(0,i.Cs)(a.language)}}),(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(h.yk,{v:a.visibility})})]}),(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5 font-mono text-xs text-text-3",children:[(0,d.jsx)(j.m,{name:"repo",className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"truncate",title:a.repo,children:a.repo})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)(h.AJ,{counts:k}),k.blocked>0?(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical-ink",children:[k.blocked," blocked"]}):(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[k.total," files"]}),l>0&&(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(h.Kh,{flags:["findings"],mini:!0})})]})]})}function q({it:a,indent:b,fromHarness:c,sel:f,onSelectAsset:g}){let k=f?.type===a.type&&f.id===a.id,l=(0,i.TW)(a.type),m="mcp"===a.type?a.trust:void 0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{g(a,c)},className:(0,e.cn)("flex w-full items-center gap-2.5 rounded-lg py-3 text-left cursor-pointer",b?"px-3":"px-2.5",k?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-7.5 shrink-0 place-items-center rounded-md",l.bg,l.fg),children:(0,d.jsx)(j.m,{name:l.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-xs font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("div",{className:"mt-0.5 truncate font-mono text-label text-text-3",title:a.sub,children:a.sub})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1",children:[m&&(0,d.jsx)(h.As,{value:m}),a.flags.length>0&&(0,d.jsx)(h.Kh,{flags:a.flags,mini:!0})]})]})}function r({group:a,items:b,mcpItems:c}){let f=(0,i.z)(b),g=c?["unapproved","risky"].map(a=>({k:a,n:c.filter(b=>b.trust===a).length})).filter(a=>a.n):[];return(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2.5 pb-1.5 pt-3",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-5 shrink-0 place-items-center rounded",a.bg,a.fg),children:(0,d.jsx)(j.m,{name:a.icon,className:"size-3"})}),(0,d.jsx)("span",{className:"text-xs font-bold uppercase tracking-wider text-text-2",children:a.label}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:b.length}),(0,d.jsxs)("span",{className:"ml-auto inline-flex flex-wrap items-center justify-end gap-1.5",children:[g.map(a=>(0,d.jsxs)(e.Ex,{variant:i.ZY[a.k].tone,children:[a.n," ",i.ZY[a.k].label.toLowerCase()]},a.k)),f.map(a=>(0,d.jsxs)(e.Ex,{variant:i.lx[a.key].tone,children:[a.count," ",i.lx[a.key].short.toLowerCase()]},a.key))]})]})}function s({iconName:a,label:b,count:c}){return(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2.5 pb-1.5 pt-3",children:[(0,d.jsx)("span",{className:"grid size-5 shrink-0 place-items-center rounded bg-surface-2 text-text-2",children:(0,d.jsx)(j.m,{name:a,className:"size-3"})}),(0,d.jsx)("span",{className:"text-xs font-bold uppercase tracking-wider text-text-2",children:b}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:c})]})}},19946:(a,b,c)=>{Promise.resolve().then(c.bind(c,78421)),Promise.resolve().then(c.bind(c,619))},20300:(a,b,c)=>{"use strict";c.d(b,{TimeRangeSelect:()=>i});var d=c(88422),e=c(63959),f=c(48695);function g(a){return(0,d.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round",...a,children:[(0,d.jsx)("rect",{x:"4",y:"5",width:"16",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"M4 9h16M8 3v4M16 3v4"})]})}function h(a){return(0,d.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round",...a,children:(0,d.jsx)("path",{d:"m6 9 6 6 6-6"})})}function i({value:a,onChange:b}){let c=(0,f.QT)(a);return(0,d.jsxs)(e.rI,{children:[(0,d.jsx)(e.ty,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",size:"md",children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-4 text-text-3"}),c,(0,d.jsx)(h,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"})]})}),(0,d.jsx)(e.SQ,{align:"end",className:"w-44",children:(0,d.jsx)(e.Hr,{value:a,onValueChange:a=>{b(a)},children:f.hn.map(a=>(0,d.jsx)(e.Ht,{value:a.value,children:a.label},a.value))})})]})}},21172:(a,b,c)=>{"use strict";c.d(b,{l:()=>d});let d={primary:"var(--color-primary)",ok:"var(--color-ok)",violet:"var(--color-violet)",teal:"var(--color-teal)",sevCritical:"var(--color-sev-critical)",sevHigh:"var(--color-sev-high)",sevMedium:"var(--color-sev-medium)",sevLow:"var(--color-sev-low)",surface:"var(--color-surface)",surface3:"var(--color-surface-3)",border:"var(--color-border)",text2:"var(--color-text-2)",text3:"var(--color-text-3)"}},22434:(a,b,c)=>{"use strict";c.d(b,{RY:()=>i,WI:()=>e.WIv,XA:()=>e.XAi,Ze:()=>k,Zu:()=>e.Zus,_G:()=>e._GS,fN:()=>j,iB:()=>l,j4:()=>m,k3:()=>e.k3y,kp:()=>g,mL:()=>e.mLz,np:()=>h,rX:()=>e.rX,uv:()=>e.uv5});var d=c(88422),e=c(24734);let f={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round"},g=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M8 6h12M8 12h12M8 18h12"}),(0,d.jsx)("circle",{cx:"3.6",cy:"6",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"12",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"18",r:"1.1",fill:"currentColor",stroke:"none"})]}),h=a=>(0,d.jsx)("svg",{...f,...a,children:(0,d.jsx)("path",{d:"M3 12h4l3 8 4-16 3 8h4"})}),i=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("circle",{cx:"7.5",cy:"15.5",r:"4.5"}),(0,d.jsx)("path",{d:"M10.7 12.3 21 2M15 8l3 3M18 5l3 3"})]}),j=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M21 12a9 9 0 1 1-2.64-6.36"}),(0,d.jsx)("path",{d:"M21 3v6h-6"})]}),k=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"3"}),(0,d.jsx)("path",{d:"M19.4 15a1.7 1.7 0 0 0 .34 1.87l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.7 1.7 0 0 0-1.87-.34 1.7 1.7 0 0 0-1.03 1.56V21a2 2 0 1 1-4 0v-.09a1.7 1.7 0 0 0-1.11-1.56 1.7 1.7 0 0 0-1.87.34l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.7 1.7 0 0 0 .34-1.87 1.7 1.7 0 0 0-1.56-1.03H3a2 2 0 1 1 0-4h.09a1.7 1.7 0 0 0 1.56-1.11 1.7 1.7 0 0 0-.34-1.87l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.7 1.7 0 0 0 1.87.34h.08A1.7 1.7 0 0 0 10.12 3V3a2 2 0 1 1 4 0v.09a1.7 1.7 0 0 0 1.03 1.56 1.7 1.7 0 0 0 1.87-.34l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.7 1.7 0 0 0-.34 1.87v.08a1.7 1.7 0 0 0 1.56 1.03H21a2 2 0 1 1 0 4h-.09a1.7 1.7 0 0 0-1.56 1.03Z"})]}),l=a=>(0,d.jsxs)("svg",{...f,...a,children:[(0,d.jsx)("path",{d:"M6 3h9l3 3v15H6z"}),(0,d.jsx)("path",{d:"M15 3v3h3"}),(0,d.jsx)("path",{d:"M9 12h6M9 16h4"})]}),m=a=>(0,d.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:510,height:236,viewBox:"0 0 510 236",fill:"none",...a,children:[(0,d.jsx)("path",{d:"M329.798 26H302.492V169.68H329.798V126.99H344.796L374.425 169.57H405.11L364.293 113.206L403.6 65.6621H371.909L343.689 101.616H329.798V26.0042V26Z",fill:"currentColor"}),(0,d.jsx)("path",{d:"M224.398 172C234.998 172 247.996 167.417 254.994 155.653H255.595V169.607H282.394V66.5446H255.595V80.2995H254.994C247.996 68.5362 234.994 63.7539 224.398 63.7539C194.799 63.7539 178 88.6717 178 117.776C178 146.879 194.799 172 224.398 172ZM205.802 117.776C205.802 101.031 213.201 85.2805 230.998 85.2805C248.796 85.2805 256.195 101.031 256.195 117.776C256.195 134.52 248.796 150.469 230.998 150.469C213.201 150.469 205.802 134.52 205.802 117.776Z",fill:"currentColor"}),(0,d.jsx)("path",{d:"M452.006 172C462.606 172 475.604 167.417 482.602 155.653H483.203V169.607H510.002V66.5446H483.203V80.2995H482.602C475.604 68.5362 462.602 63.7539 452.006 63.7539C422.407 63.7539 405.608 88.6717 405.608 117.776C405.608 146.879 422.407 172 452.006 172ZM433.409 117.776C433.409 101.031 440.809 85.2805 458.606 85.2805C476.403 85.2805 483.803 101.031 483.803 117.776C483.803 134.52 476.403 150.469 458.606 150.469C440.809 150.469 433.409 134.52 433.409 117.776Z",fill:"currentColor"}),(0,d.jsx)("path",{d:"M54 118H0C0 88.3759 24.3759 64 54 64C83.6241 64 108 88.3759 108 118H54Z",fill:"currentColor"}),(0,d.jsx)("path",{d:"M54 118H108C108 147.624 83.6241 172 54 172C24.3759 172 0 147.624 0 118H54Z",fill:"#00E0B8"}),(0,d.jsx)("path",{d:"M81 54C95.9117 54 108 41.9117 108 27C108 12.0883 95.9117 0 81 0C66.0883 0 54 12.0883 54 27C54 41.9117 66.0883 54 81 54Z",fill:"currentColor"}),(0,d.jsx)("path",{d:"M27 236C41.9117 236 54 223.912 54 209C54 194.088 41.9117 182 27 182C12.0883 182 0 194.088 0 209C0 223.912 12.0883 236 27 236Z",fill:"#00E0B8"})]})},22559:(a,b,c)=>{"use strict";c.d(b,{K:()=>f,x:()=>e});var d=c(88422);let e={claudecode:{label:"Claude Code",short:"CC",color:"#C96442"},claudedesktop:{label:"Claude Desktop",short:"CD",color:"#A8553A"},cursor:{label:"Cursor",short:"Cu",color:"#252F3D"},windsurf:{label:"Windsurf",short:"Wf",color:"#0B8F7B"},codex:{label:"Codex CLI",short:"Cx",color:"#10A37F"},antigravity:{label:"Antigravity",short:"Ag",color:"#4285F4"},copilot:{label:"GitHub Copilot",short:"Co",color:"#0581D4"},chatgpt:{label:"ChatGPT",short:"GP",color:"#0d8f6f"},claudeai:{label:"Claude.ai",short:"Ca",color:"#D97757"},api:{label:"Anthropic API",short:"AP",color:"#6058E9"}};function f({id:a,size:b=24}){let c=e[a];return(0,d.jsx)("span",{className:"flex shrink-0 items-center justify-center rounded-lg font-display font-bold text-white ring-1 ring-inset ring-mark-edge",style:{width:b,height:b,background:c.color,fontSize:.36*b},children:c.short})}},23373:(a,b,c)=>{"use strict";c.d(b,{$x:()=>g,Ay:()=>e,Oy:()=>k,Tp:()=>l,ek:()=>i,nR:()=>j,ni:()=>m,oo:()=>f,pS:()=>h});var d=c(81604);let e={claudecode:"CLI agent",cursor:"IDE",copilot:"IDE",codex:"CLI agent",antigravity:"CLI agent",windsurf:"IDE",claudedesktop:"Desktop app",chatgpt:"Web app",claudeai:"Web app",api:"API"},f=["claudecode","cursor","copilot","codex","antigravity","windsurf","claudedesktop","chatgpt","claudeai","api"],g={session:{label:"Session",icon:d.k3,text:"text-text-2",fill:"bg-surface-3"},prompt:{label:"Prompt",icon:d.ny,text:"text-primary",fill:"bg-primary-tint"},response:{label:"Response",icon:d.BZ,text:"text-violet-ink",fill:"bg-violet-fill"},tool:{label:"Tool",icon:d.k3,text:"text-text-2",fill:"bg-surface-3"},hook:{label:"Hook",icon:d.hF,text:"text-sev-low-ink",fill:"bg-sev-low-fill"},detection:{label:"Detection",icon:d.Zu,text:"text-sev-critical-ink",fill:"bg-sev-critical-fill"},share:{label:"Egress",icon:d._G,text:"text-teal-ink",fill:"bg-teal-fill"},permission:{label:"Permission",icon:d.XA,text:"text-sev-high-ink",fill:"bg-sev-high-fill"},commit:{label:"Commit",icon:d.OK,text:"text-text-2",fill:"bg-surface-3"},error:{label:"Error",icon:d._0,text:"text-sev-critical-ink",fill:"bg-sev-critical-fill"},active:{label:"In progress",icon:d.DQ,text:"text-primary",fill:"bg-primary-tint"}},h={Bash:d.k3,Edit:d.qU,Write:d.qU,Read:d.oS,Grep:d.WI,WebFetch:d.fC,Task:d.hF},i=d.k3,j={active:{label:"Live",badge:"success",dot:"bg-ok"},completed:{label:"Completed",badge:"default",dot:"bg-text-3"},interrupted:{label:"Interrupted",badge:"high",dot:"bg-sev-high"},error:{label:"Error",badge:"critical",dot:"bg-sev-critical"}},k={detections:"Findings",shares:"Data Shares",inventory:"Inventory"};function l(a){return Object.entries(a).map(([a,b])=>({name:a,n:b})).sort((a,b)=>b.n-a.n)}function m(a){return Object.values(a).reduce((a,b)=>a+b,0)}},23754:(a,b,c)=>{"use strict";c.d(b,{PolicyDetailView:()=>m,PolicyListView:()=>l,PolicyStatsView:()=>j});var d=c(88422),e=c(63959),f=c(16614),g=c(81604),h=c(97558);function i(a){return void 0===a?"—":String(a)}function j({stats:a,loading:b=!1}){return(0,d.jsxs)("div",{className:"grid grid-cols-1 gap-4 sm:grid-cols-2 xl:grid-cols-4",children:[(0,d.jsx)(h.T,{icon:g.iB,iconBg:"var(--color-primary-tint)",iconColor:"var(--color-primary)",label:"Policies",value:i(a?.policies),loading:b}),(0,d.jsx)(h.T,{icon:g.Zu,iconBg:"var(--color-surface-2)",iconColor:"var(--color-text-2)",label:"Built-in",value:i(a?.builtin),loading:b}),(0,d.jsx)(h.T,{icon:g.k3,iconBg:"var(--color-violet-fill)",iconColor:"var(--color-violet-ink)",label:"Custom scripts",value:i(a?.custom),loading:b}),(0,d.jsx)(h.T,{icon:g.kp,iconBg:"var(--color-ok-fill)",iconColor:"var(--color-ok-ink)",label:"Detections governed",value:i(a?.detectionsGoverned),loading:b})]})}function k({policy:a,selected:b,onSelect:c}){let{icon:h,tone:i}=(0,f.ES)(a.id),[j,k]=(0,f.vV)(i),l=a.usedByCount;return(0,d.jsxs)("button",{type:"button",onClick:c,"aria-pressed":b,className:(0,e.cn)("flex w-full cursor-pointer items-center gap-3 rounded-lg p-3 text-left transition-colors",b?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)("span",{className:"flex size-7.5 shrink-0 items-center justify-center rounded-lg [&_svg]:size-4",style:{background:k,color:j},children:(0,d.jsx)(h,{"aria-hidden":!0,focusable:!1})}),(0,d.jsxs)("span",{className:"min-w-0 flex-1",children:[(0,d.jsx)("span",{className:"block truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsxs)("span",{className:"mt-px block text-xs text-text-3",children:[l," detection",1===l?"":"s"]})]}),"builtin"===a.kind&&(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3"})]})}function l({items:a,activeId:b,onSelect:c,loading:f=!1,error:g=null}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col overflow-hidden p-2 shadow-sm",children:[(0,d.jsx)("div",{className:"mb-1 px-2.5 pb-1 pt-2 text-label font-semibold uppercase tracking-wider text-text-3",children:"Policies"}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-0.5 overflow-y-auto",children:g?(0,d.jsxs)("p",{className:"px-2.5 py-2 text-sm text-sev-critical-ink",children:["Error loading policies: ",g]}):f?(0,d.jsx)("p",{className:"px-2.5 py-2 text-sm text-text-3",children:"Loading policies…"}):0===a.length?(0,d.jsx)("p",{className:"px-2.5 py-2 text-sm text-text-3",children:"No policies yet."}):a.map(a=>(0,d.jsx)(k,{policy:a,selected:a.id===b,onSelect:()=>{c(a.id)}},a.id))})]})}function m({policy:a}){let{icon:b,tone:c}=(0,f.ES)(a.id),[h,i]=(0,f.vV)(c),j="builtin"===a.kind,k=a.usedBy;return(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"flex size-11 shrink-0 items-center justify-center rounded-xl [&_svg]:size-5.5",style:{background:i,color:h},children:(0,d.jsx)(b,{"aria-hidden":!0,focusable:!1})}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("h2",{className:"font-display text-xl font-semibold text-text",children:a.name}),j&&(0,d.jsx)(e.vw,{icon:(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3"}),children:"Built-in"}),(0,d.jsx)("span",{className:"rounded-full border border-border bg-surface-2 px-2 py-0.5 font-mono text-xs font-semibold text-text-2",children:a.id})]}),(0,d.jsx)("p",{className:"mt-0.5 text-xs text-text-3",children:j?"AKA \xb7 built-in \xb7 no configuration":"Custom policy"})]})]}),(0,d.jsxs)("div",{className:"flex flex-col gap-6 p-5",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-surface-2 px-4 py-3",children:[(0,d.jsx)("p",{className:"text-sm leading-relaxed text-text",children:a.description}),j&&(0,d.jsxs)("p",{className:"mt-2 inline-flex items-center gap-1.5 text-xs text-text-3",children:[(0,d.jsx)(g.XA,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),"Built-in policy — behavior is fixed and can't be edited."]})]}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Applied by"}),(0,d.jsx)("span",{className:"rounded-full bg-surface-3 px-2 py-0.5 text-xs font-semibold text-text-2",children:k.length})]}),0===k.length?(0,d.jsx)("p",{className:"py-2 text-sm text-text-3",children:"No detections use this policy yet."}):(0,d.jsx)("div",{className:"flex flex-wrap gap-2",children:k.map(a=>(0,d.jsxs)(e.vw,{className:"h-7",dot:a.enabled?"var(--color-ok)":"var(--color-border-strong)",children:[a.name,(0,d.jsxs)("span",{className:"font-mono text-text-3",children:[a.ruleCount," rules"]})]},a.id))})]})]})]})}},24734:(a,b,c)=>{"use strict";c.d(b,{dtc:()=>G.AddExceptionForm,rX:()=>r.rX,fu:()=>H.ApproveExceptionDialog,i5F:()=>y.AssetDetail,JRA:()=>Q.AvailablePluginsCardView,VBV:()=>J.BlockedLedgerView,Tct:()=>p.ColumnsMenu,VNw:()=>q.VN,spO:()=>e.sp,MXo:()=>T.DataShareDetailView,Imc:()=>U.DataSharesTableView,tlv:()=>N.DerefAuditTableView,MFC:()=>s.DetectionDetailView,A7Z:()=>t.DetectionsListView,ppr:()=>z.EmptyState,Gj:()=>K.ExceptionDetailView,Ebj:()=>L.ExceptionsTableView,_GS:()=>r._G,nUY:()=>q.nU,gsr:()=>q.gs,qWw:()=>q.qW,ToP:()=>A.FileDetailDrawer,Wjr:()=>l.FindingDetailView,FGz:()=>m.FindingsFlatTableView,ikE:()=>n.FindingsLocationsView,oHV:()=>o.FindingsTableView,Dmd:()=>p.FindingsToolbarView,y2Z:()=>B.HarnessOverview,mD3:()=>C.m,_c:()=>D.InventoryNav,mLz:()=>r.mL,XAi:()=>r.XA,wO1:()=>u.MatcherModal,t6e:()=>V.NeedsReviewStripView,ece:()=>g,LKE:()=>x.PolicyDetailView,m$d:()=>x.PolicyListView,kLH:()=>E.ProjectPane,sJz:()=>F.RecommendedActionsCardView,nZB:()=>M.RotateKeyDialog,Tvj:()=>I.ScopePicker,YJs:()=>h.Y,WIv:()=>r.WI,LOI:()=>j.SessionDetailView,md2:()=>k.SessionListView,Zus:()=>r.Zu,hny:()=>e.hn,k3y:()=>r.k3,$nP:()=>i.TimeRangeSelect,b1W:()=>w.UpdateModal,bnY:()=>R.UpdateStatusCardView,y6v:()=>O.VaultInventoryView,gvr:()=>P.VaultReuseView,A30:()=>S.WorkspaceSettingsFormView,uv5:()=>r.uv,XgB:()=>v.Xg,QTF:()=>e.QT});var d=c(21172);c(4513);var e=c(48695);c(63667);var f=c(88422);function g({title:a,sub:b,actions:c}){return(0,f.jsxs)("div",{className:"flex items-start justify-between gap-4 pb-6",children:[(0,f.jsxs)("div",{children:[(0,f.jsx)("h1",{className:"font-display text-2xl font-semibold text-text",children:a}),b&&(0,f.jsx)("p",{className:"mt-1 text-sm text-text-3",children:b})]}),c&&(0,f.jsx)("div",{className:"flex shrink-0 items-center gap-2",children:c})]})}c(22559);var h=c(25663);c(97558);var i=c(20300);c(13848),c(6932),c(63959),c(88391),c(54648),c(56028),c(64129),c(55587),c(95398),c(23373);var j=c(41138),k=c(38877);c(44361);var l=c(77820),m=c(27001),n=c(93342),o=c(4990),p=c(81107),q=c(76812);c(64915);var r=c(81604);c(10863);var s=c(39576),t=c(59178),u=c(76796),v=c(16614);c(72721),c(50805);var w=c(59903),x=c(23754),y=c(57704),z=c(42282);c(56633);var A=c(79405),B=c(80270),C=c(88378),D=c(19016),E=c(5930);d.l.sevCritical,d.l.sevHigh,d.l.sevMedium,d.l.sevLow,r.pD,d.l.sevCritical,r.jZ,d.l.primary,r.rX,d.l.sevHigh,c(97017),d.l.sevCritical,d.l.sevHigh,d.l.sevMedium,c(17162);var F=c(10712),G=c(49361),H=c(57481),I=c(29893),J=c(31227);c(48771);var K=c(98296),L=c(13250);c(72060);var M=c(47325);c(3285);var N=c(11151),O=c(59624),P=c(14100),Q=c(35575),R=c(14733),S=c(57171);c(15936);var T=c(46691),U=c(78349);c(35729);var V=c(43780)},25663:(a,b,c)=>{"use strict";c.d(b,{Y:()=>f});var d=c(88422),e=c(63959);function f({value:a,descriptor:b,className:c}){if(null===a&&null===b)return(0,d.jsx)("span",{"data-slot":"scrubbed-value",className:(0,e.cn)("text-ui text-text-3",c),children:"[unavailable]"});let f=null===b?null:(0,d.jsxs)(e.Ex,{variant:"primary",children:["scrubbed:"," ",void 0===b.provider?b.category:`${b.category}/${b.provider}`]});return(0,d.jsxs)("span",{"data-slot":"scrubbed-value",className:(0,e.cn)("inline-flex flex-wrap items-center gap-2",c),children:[null!==a?(0,d.jsx)("code",{className:"break-all font-mono text-ui text-text",children:a}):(0,d.jsx)("code",{className:"break-all font-mono text-ui text-text-2",children:b?.maskedMatch}),f]})}},26273:(a,b,c)=>{"use strict";function d(a,b){return{input:a,output:b,cacheWrite5m:1.25*a,cacheWrite1h:2*a,cacheRead:.1*a,webSearch:.01}}c.d(b,{PWo:()=>ac,spO:()=>bX,V0H:()=>aS,xdw:()=>i,ap_:()=>g,UKt:()=>h,kqf:()=>bG,qEQ:()=>aA,DLF:()=>bT,hds:()=>bO,y6l:()=>aB});let e={"claude-fable-5":d(10,50),"claude-opus-4-8":d(5,25),"claude-opus-4-7":d(5,25),"claude-opus-4-6":d(5,25),"claude-opus-4-5":d(5,25),"claude-sonnet-5":d(3,15),"claude-sonnet-4-6":d(3,15),"claude-sonnet-4-5":d(3,15),"claude-haiku-4-5":d(1,5)};Object.fromEntries(Object.entries(e).map(([a,b])=>[`anthropic/${a}`,b])),Object.keys(e);let f=new Intl.NumberFormat("en-US",{notation:"compact",maximumFractionDigits:1});function g(a){return f.format(a)}function h(a){return a>0&&a<.1?`$${a.toFixed(4)}`:`$${a.toFixed(2)}`}function i(a,b){return b?`≥ ${h(a)}`:h(a)}var j=c(1710),k=c(61383),l=c(33885);let m=j.k5(["pii","financial","secret","phi","code_context","code_flaw","custom","config"]).meta({id:"DetectionCategory"}),n=j.k5(["critical","high","medium","low"]).meta({id:"Severity"}),o=j.k5(["warn","redact","block","allow","log"]).meta({id:"ActionTaken"});o.options;let p=j.Ik({start:j.ai().int().nonnegative(),end:j.ai().int().nonnegative()}).meta({id:"Span"}),q=j.Ik({id:j.Os(),eventId:j.Os(),ruleId:j.Yj(),category:m,severity:n,span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)}).meta({id:"Finding"});q.meta({id:"DetectedFinding"});let r=j.k5(["blocked","redacted","warned","allowed","quarantined","monitored"]).meta({id:"FindingAction"}),s=j.k5(["claudecode","claudedesktop","cursor","copilot","chatgpt","claudeai","codex","antigravity","api"]).meta({id:"FindingProvider"}),t=j.k5(["secret","pii","source_code","external_share","mcp_server","customer_data","financial","phi","custom"]).meta({id:"FindingCategory"});j.k5(["in-flight","at-rest"]).meta({id:"FindingOrigin"});let u=j.k5(["open","handled","resolved","dismissed"]).meta({id:"FindingStatus"});j.k5(["enforced-in-flight","fixed-at-source","exception","acknowledged","false-positive","redetected"]).meta({id:"ResolutionMethod"});let v=j.Ik({maskedValue:j.Yj(),contextPrefix:j.Yj()}).meta({id:"FindingMatch"}),w=j.Ik({id:j.Yj(),name:j.Yj().nullable()}).meta({id:"FindingDetectionRef"}),x=j.Ik({id:j.Yj(),name:j.Yj()}).meta({id:"FindingPolicyRef"}),y=j.Ik({id:j.Yj(),provider:s,repo:j.Yj(),file:j.Yj(),toolName:j.Yj().optional(),action:r,detectedAt:k.w$(),confidence:j.ai().min(0).max(1),status:u.optional(),eventId:j.Yj().optional(),sessionId:j.Yj().optional()}).meta({id:"FindingInstance"}),z=j.Ik({id:j.Yj(),category:t,subtype:j.Yj(),severity:n,match:v,detection:w,policy:x,instanceCount:j.ai().int().nonnegative(),providers:j.YO(s),aggregateAction:r.nullable(),latestDetectedAt:k.w$(),instances:j.YO(y),status:u.optional()}).meta({id:"FindingGroup"});j.Ik({findings:j.ai().int().nonnegative(),groups:j.ai().int().nonnegative(),bySeverity:j.Ik({critical:j.ai().int().nonnegative(),high:j.ai().int().nonnegative(),medium:j.ai().int().nonnegative(),low:j.ai().int().nonnegative()})}).meta({id:"FindingStats"});let A=j.Ik({value:j.Yj(),count:j.ai().int().nonnegative()}).meta({id:"FindingFacetItem"}),B=j.Ik({severity:j.YO(A),subtype:j.YO(A),provider:j.YO(A),action:j.YO(A),status:j.YO(A),tool:j.YO(A).optional()}).meta({id:"FindingFacets"});j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),status:j.YO(u).optional(),q:j.Yj().optional(),sessionId:j.Yj().optional(),from:k.w$().optional(),includeId:j.Yj().optional(),groupBy:j.eu("type").optional(),limit:l.ai().int().min(1).max(100).optional(),cursor:j.Yj().optional()}),j.Ik({totals:j.Ik({findings:j.ai().int().nonnegative(),groups:j.ai().int().nonnegative()}),facets:B,items:j.YO(z),nextCursor:j.Yj().nullable(),sessionFirings:j.g1(j.Yj(),j.ai().int().nonnegative()).optional()}).meta({id:"ListGroupedFindingsResponse"}),j.Ik({action:r.exclude(["quarantined"]),instanceId:j.Yj().optional()}).meta({id:"ApplyFindingActionRequest"}),z.meta({id:"ApplyFindingActionResponse"}),j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),q:j.Yj().optional(),format:j.k5(["csv","json"]).optional()});let C=y.extend({groupId:j.Yj(),category:t,subtype:j.Yj(),severity:n,match:v,detection:w,policy:x}).meta({id:"FindingInstanceDetail"});j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),status:j.YO(u).optional(),tool:j.YO(j.Yj()).optional(),repo:j.Yj().optional(),file:j.Yj().optional(),q:j.Yj().optional(),sessionId:j.Yj().optional(),from:k.w$().optional(),limit:l.ai().int().min(1).max(200).optional(),cursor:j.Yj().optional()}),j.Ik({totals:j.Ik({findings:j.ai().int().nonnegative()}),facets:B,items:j.YO(C),nextCursor:j.Yj().nullable()}).meta({id:"ListFindingInstancesResponse"});let D=j.Ik({file:j.Yj(),instanceCount:j.ai().int().nonnegative(),maxSeverity:n,latestDetectedAt:k.w$(),status:u.optional(),ruleIds:j.YO(j.Yj())}).meta({id:"FindingLocationFile"}),E=j.Ik({repo:j.Yj(),instanceCount:j.ai().int().nonnegative(),maxSeverity:n,latestDetectedAt:k.w$(),status:u.optional(),files:j.YO(D)}).meta({id:"FindingLocationRepo"});j.Ik({severity:j.YO(n).optional(),subtype:j.YO(j.Yj()).optional(),provider:j.YO(s).optional(),action:j.YO(r).optional(),status:j.YO(u).optional(),tool:j.YO(j.Yj()).optional(),q:j.Yj().optional(),sessionId:j.Yj().optional(),from:k.w$().optional(),limit:l.ai().int().min(1).max(500).optional()}),j.Ik({totals:j.Ik({findings:j.ai().int().nonnegative(),repos:j.ai().int().nonnegative(),files:j.ai().int().nonnegative()}),items:j.YO(E),hasMore:j.zM()}).meta({id:"ListFindingLocationsResponse"});let F=j.k5(["claudecode","cursor","copilot","codex","antigravity","windsurf","claudedesktop","chatgpt","claudeai","api"]).meta({id:"Harness"}),G=j.k5(["host","harness","user","skill","hook","mcp_server","config_file"]).meta({id:"InventoryObjectType"}),H=j.k5(["session","run","tool_call","llm_call","source_lookup","prompt","response","code_change","tool_use","config_scan"]).meta({id:"AuditEventType"}),I=j.g1(j.Yj(),j.L5());j.Ik({host_name:j.Yj().optional(),os:j.Yj().optional(),os_version:j.Yj().optional(),arch:j.Yj().optional()}).catchall(j.L5()),j.Ik({harness_version:j.Yj().optional(),interface:j.Yj().optional()}).catchall(j.L5()),j.Ik({display_name:j.Yj().optional(),email:j.Yj().optional()}).catchall(j.L5()),j.Ik({source:j.Yj().optional(),version:j.Yj().optional(),description:j.Yj().optional(),updated_at:j.Yj().optional(),scope:j.Yj().optional(),plugin_name:j.Yj().optional()}).catchall(j.L5()),j.Ik({event:j.Yj().optional(),matcher:j.Yj().optional(),command:j.Yj().optional(),scope:j.Yj().optional(),plugin_name:j.Yj().optional(),timeout:j.ai().optional()}).catchall(j.L5()),j.Ik({scope:j.Yj().optional(),transport:j.Yj().optional(),command:j.Yj().optional(),url:j.Yj().optional(),env_keys:j.YO(j.Yj()).optional(),plugin_name:j.Yj().optional(),marketplace:j.Yj().optional(),project:j.Yj().optional()}).catchall(j.L5()),j.Ik({kind:j.Yj().optional(),detail:j.Yj().optional(),scope:j.Yj().optional(),updated_at:j.Yj().optional(),entry_count:j.ai().optional()}).catchall(j.L5());let J=j.Ik({model:j.Yj().optional(),provider:j.Yj().optional(),input_tokens:j.ai().int().nonnegative().optional(),output_tokens:j.ai().int().nonnegative().optional(),cache_creation_input_tokens:j.ai().int().nonnegative().optional(),cache_read_input_tokens:j.ai().int().nonnegative().optional(),ephemeral_1h_input_tokens:j.ai().int().nonnegative().optional(),ephemeral_5m_input_tokens:j.ai().int().nonnegative().optional(),web_search_requests:j.ai().int().nonnegative().optional(),web_fetch_requests:j.ai().int().nonnegative().optional(),service_tier:j.Yj().optional(),stop_reason:j.Yj().optional(),message_id:j.Yj().optional(),uuid:j.Yj().optional(),parent_uuid:j.Yj().optional(),run_key:j.Yj().optional()}).catchall(j.L5());j.Ik({sessionId:j.Yj().min(1),messageId:j.Yj().min(1),parentId:j.Yj().min(1),rootSessionId:j.Yj().min(1),startedAt:k.w$(),attributes:J});let K=j.Ik({tool_name:j.Yj().optional(),tool_use_id:j.Yj().optional(),target:j.Yj().optional(),is_error:j.zM().optional(),input_size:j.ai().int().nonnegative().optional(),output_size:j.ai().int().nonnegative().optional(),uuid:j.Yj().optional(),parent_uuid:j.Yj().optional(),run_key:j.Yj().optional()}).catchall(j.L5());j.Ik({source_tool:j.Yj().optional(),file_path:j.Yj().optional(),repo:j.Yj().optional(),tool_name:j.Yj().optional(),gitignored:j.zM().optional(),whole_file:j.zM().optional(),correlation_id:j.uR().optional(),trace_id:j.Yj().regex(/^[0-9a-f]{32}$/).optional(),exception_ids:j.YO(j.Os()).optional()}).catchall(j.L5());let L=j.Ik({ruleId:j.Yj().min(1),ruleName:j.Yj(),ruleVersion:j.Yj().min(1),category:m,severity:n,span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)});j.Ik({sessionId:j.Yj().min(1),toolUseId:j.Yj().min(1),parentId:j.Yj().min(1),rootSessionId:j.Yj().min(1),startedAt:k.w$(),attributes:K,inspections:j.YO(L).default([])});let M=j.Ik({objectType:G,identityKey:j.Yj().min(1),location:j.Yj().optional(),title:j.Yj().optional(),hostId:j.Yj().optional(),attributes:I.default({})}).meta({id:"InventoryInput"}),N=j.Ik({url:j.Yj().min(1),name:j.Yj().optional(),attributes:I.default({})}).meta({id:"SourceProjectInput"}),O=j.Ik({id:j.Yj().min(1),eventType:H,startedAt:k.w$(),endedAt:k.w$().optional(),parentId:j.Yj().optional(),rootSessionId:j.Yj().optional(),hostId:j.Yj().optional(),harnessId:j.Yj().optional(),sourceProjectId:j.Yj().optional(),severity:n.optional(),priority:j.Yj().optional(),content:j.Yj().optional(),contentHash:j.Yj().optional(),attributes:I.optional()}).meta({id:"AuditEventInput"});j.Ik({class:j.Yj().min(1),label:j.Yj().optional(),attributes:I.optional()});let P=j.Ik({ruleId:j.Yj().min(1),version:j.Yj().min(1),name:j.Yj(),category:m,severity:n,definition:j.Yj()});j.Ik({id:j.Yj().min(1),auditEventId:j.Yj().min(1),inspectionDefinitionId:j.Yj().min(1),classifiedDataId:j.Yj().optional(),span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1),findingKey:j.Yj().optional(),firstDetectedAt:k.w$().optional()}),j.Ik({host:M.optional(),harness:M.optional(),project:N.optional()}).meta({id:"InventoryContext"}),j.Ik({hostId:j.Yj().optional(),harnessId:j.Yj().optional(),accountId:j.Yj().optional(),sourceProjectId:j.Yj().optional()}).meta({id:"ResolvedInventory"}),j.Ik({hosts:j.YO(j.Yj()),harnesses:j.YO(j.Yj()),osVersions:j.YO(j.Yj()),projects:j.YO(j.Yj())}).meta({id:"InventoryFacets"});let Q=j.Ik({sessionId:j.Yj(),model:j.Yj(),provider:j.Yj(),inputTokens:j.ai().int().nonnegative(),outputTokens:j.ai().int().nonnegative(),cacheCreation:j.ai().int().nonnegative(),cacheRead:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable()}).meta({id:"TokenRollup"});j.Ik({sessionId:j.Yj(),rollups:j.YO(Q),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable(),costIsPartial:j.zM()});let R=j.Ik({provider:j.Yj(),model:j.Yj(),inputTokens:j.ai().int().nonnegative(),outputTokens:j.ai().int().nonnegative(),cacheTokens:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai().nullable()});j.Ik({models:j.YO(R),sessionCount:j.ai().int().nonnegative(),totalTokens:j.ai().int().nonnegative(),estimatedCostUsd:j.ai(),costIsPartial:j.zM()});let S=j.k5(["active","completed","interrupted","error"]),T=j.k5(["session","prompt","response","tool","hook","detection","share","permission","commit","error","active"]),U=j.k5(["detections","shares","inventory"]),V=j.Ik({id:j.Yj(),occurredAt:k.w$(),kind:T,title:j.Yj(),detail:j.Yj(),tool:j.Yj().nullable(),severity:n.nullable(),link:U.nullable(),targetId:j.Yj().nullable(),internal:j.zM(),flagged:j.zM()}).meta({id:"ActivityAuditEvent"}),W=j.Ik({id:j.Yj(),harness:F,title:j.Yj(),project:j.Yj(),repo:j.Yj(),branches:j.YO(j.Yj()),startedAt:k.w$(),endedAt:k.w$().nullable(),status:S,turns:j.ai().int().nonnegative(),findings:j.ai().int().nonnegative(),shares:j.ai().int().nonnegative()}).meta({id:"ActivitySessionSummary"});W.extend({host:j.Yj(),cwd:j.Yj(),models:j.YO(j.Yj()),version:j.Yj(),tokens:Q,tools:j.g1(j.Yj(),j.ai().int().nonnegative()),files:j.YO(j.Yj()),commits:j.ai().int().nonnegative(),events:j.YO(V)}).meta({id:"ActivitySession"}),j.Ik({tz:j.Yj().optional()});let X=j.Ik({sessionsToday:j.ai().int().nonnegative(),liveNow:j.ai().int().nonnegative(),toolCallsToday:j.ai().int().nonnegative(),findingsToday:j.ai().int().nonnegative(),egressToday:j.ai().int().nonnegative()}).meta({id:"GetActivityStatsResponse"});j.Ik({q:j.Yj().optional(),harness:j.YO(F).optional(),from:j.KC([k.p6(),k.w$()]).optional(),to:j.KC([k.p6(),k.w$()]).optional(),excludeEmpty:j.uE().optional(),limit:l.ai().int().min(1).max(100).default(50),cursor:j.Yj().optional()});let Y=j.Ik({items:j.YO(W),nextCursor:j.Yj().nullable(),emptyCount:j.ai().int().nonnegative()}).meta({id:"ListActivitySessionsResponse"});j.Ik({limit:l.ai().int().min(1).max(500).default(100),cursor:j.Yj().optional(),order:j.k5(["asc","desc"]).default("asc")}),j.Ik({items:j.YO(V),nextCursor:j.Yj().nullable()}).meta({id:"ListSessionEventsResponse"}),j.Ik({format:j.k5(["ndjson","json"]).default("ndjson")}),j.Ik({format:j.k5(["csv","json"]).default("csv"),q:j.Yj().optional(),harness:j.YO(F).optional(),from:j.KC([k.p6(),k.w$()]).optional(),to:j.KC([k.p6(),k.w$()]).optional()}),j.Ik({stats:X,sessions:Y}).meta({id:"ActivityOverviewResponse"});let Z=j.k5(["prompt","response","code_change","tool_use"]).meta({id:"EventKind"});Z.options.map(a=>`'${a}'`).join(",");let $=j.k5(["claude-code","claude-desktop","cursor","chatgpt","claude-ai","github-copilot","codex","antigravity","cli","unknown"]).meta({id:"SourceTool"}),_=j.Ik({sessionId:j.Yj().optional(),repo:j.Yj().optional(),filePath:j.Yj().optional(),toolName:j.Yj().optional(),gitignored:j.zM().optional(),wholeFile:j.zM().optional(),model:j.Yj().optional(),turnIndex:j.ai().int().nonnegative().optional(),correlationId:j.uR().optional(),traceId:j.Yj().regex(/^[0-9a-f]{32}$/).optional(),exceptionIds:j.YO(j.Os()).optional()}).meta({id:"EventMetadata"}),aa=j.Ik({id:j.Os(),sourceTool:$,kind:Z,occurredAt:k.w$(),contentHash:j.Yj(),content:j.Yj(),metadata:_.optional()}).meta({id:"Event"}),ab=aa.meta({id:"IngestEvent"});j.Ik({events:j.YO(ab).min(1).max(100),dedupe:j.eu("content-hash").optional()}).meta({id:"IngestBatch"});let ac=j.k5(["project","skill","mcp","hook","config"]).meta({id:"AssetType"}),ad=j.k5(["open","approved","blocked"]).meta({id:"AccessLevel"}),ae=j.k5(["source","public-dep","vendored","config","data","docs","generated"]).meta({id:"Origin"}),af=j.k5(["known-good","risky","unapproved"]).meta({id:"TrustLevel"}),ag=j.k5(["update","stale","conflict","unknown","change","untracked","risk","findings"]).meta({id:"Flag"}),ah=j.k5(["public","private"]).meta({id:"Visibility"}),ai=j.k5(["block","redact","warn"]).meta({id:"HarnessEventKind"}),aj=j.k5(["claudecode","cursor","codex","antigravity"]).meta({id:"HarnessId"}),ak=j.Ik({open:j.ai().int().nonnegative(),approved:j.ai().int().nonnegative(),blocked:j.ai().int().nonnegative(),total:j.ai().int().nonnegative()}).meta({id:"AccessCounts"}),al=j.Ik({id:j.Yj(),type:ac,name:j.Yj(),sub:j.Yj(),flags:j.YO(ag),trust:af.optional()}).meta({id:"AssetSummary"}),am=j.Ik({id:j.Yj(),name:j.Yj(),repo:j.Yj(),visibility:ah,language:j.Yj(),policyDefault:ad,updatedAt:k.w$(),accessCounts:ak,findingsCount:j.ai().int().nonnegative()}).meta({id:"ProjectSummary"}),an=j.Ik({type:ac,assets:j.YO(al)}),ao=j.Ik({id:aj,label:j.Yj(),kind:j.Yj(),version:j.Yj(),sessions:j.ai().int().nonnegative(),assetCount:j.ai().int().nonnegative(),flagCount:j.ai().int().nonnegative(),projects:j.YO(am),categories:j.YO(an)}).meta({id:"HarnessSummary"});j.Ik({items:j.YO(ao)}).meta({id:"ListHarnessesResponse"});let ap=j.Ik({type:ac,total:j.ai().int().nonnegative(),trustRollup:j.Ik({"known-good":j.ai().int().nonnegative(),risky:j.ai().int().nonnegative(),unapproved:j.ai().int().nonnegative()}).partial().strict().optional(),flagRollup:j.Ik({update:j.ai().int().nonnegative(),stale:j.ai().int().nonnegative(),conflict:j.ai().int().nonnegative(),unknown:j.ai().int().nonnegative(),change:j.ai().int().nonnegative(),untracked:j.ai().int().nonnegative(),risk:j.ai().int().nonnegative(),findings:j.ai().int().nonnegative()}).partial().strict(),items:j.YO(al)}).meta({id:"AssetGroup"});j.Ik({groups:j.YO(ap)}).meta({id:"ListAssetsResponse"});let aq=j.Ik({name:j.Yj(),signature:j.Yj(),description:j.Yj(),write:j.zM(),risk:j.Yj().nullable()}).meta({id:"McpTool"}),ar=j.Ik({id:j.Yj(),title:j.Yj(),note:j.Yj()});al.extend({description:j.Yj().nullable(),trust:af.nullable(),meta:j.g1(j.Yj(),j.L5()),finding:ar.nullable(),tools:j.YO(aq).optional()}).meta({id:"AssetDetail"}),j.Ik({items:j.YO(am)}).meta({id:"ListProjectsResponse"}),j.Ik({attention:j.ai().int().nonnegative(),byType:j.Ik({project:j.ai().int().nonnegative(),skill:j.ai().int().nonnegative(),mcp:j.ai().int().nonnegative(),hook:j.ai().int().nonnegative(),config:j.ai().int().nonnegative()}),harnesses:j.ai().int().nonnegative(),mcpTrust:j.Ik({"known-good":j.ai().int().nonnegative(),risky:j.ai().int().nonnegative(),unapproved:j.ai().int().nonnegative()})}).meta({id:"InventoryStats"});let as=j.Ik({path:j.Yj(),name:j.Yj(),origin:ae,access:ad,isCustom:j.zM(),findings:j.ai().int().nonnegative(),blockedAt:k.w$().nullable().optional(),note:j.Yj().nullable().optional()}).meta({id:"FileSummary"}),at=j.Ik({name:j.Yj(),path:j.Yj(),accessCounts:ak}).meta({id:"FolderSummary"});j.Ik({project:j.Ik({id:j.Yj(),repo:j.Yj(),visibility:ah}),path:j.Yj(),folders:j.YO(at).optional(),files:j.YO(as)}).meta({id:"ProjectTreeResponse"}),as.extend({project:j.Ik({repo:j.Yj(),visibility:ah,language:j.Yj(),policyDefault:ad,updatedAt:k.w$()}),findingsRefs:j.YO(j.Ik({id:j.Yj(),title:j.Yj()}))}).meta({id:"FileDetail"}),j.Ik({path:j.Yj(),access:ad}).meta({id:"SetFileAccessBody"}),j.Ik({file:as,accessCounts:ak}).meta({id:"SetFileAccessResponse"}),j.Ik({trust:af}).meta({id:"SetMcpTrustBody"});let au=j.Ik({kind:ai,title:j.Yj(),detail:j.Yj(),occurredAt:k.w$(),findingId:j.Yj().nullable().optional()}).meta({id:"HarnessEventItem"});j.Ik({counts:j.Ik({block:j.ai().int().nonnegative(),redact:j.ai().int().nonnegative(),warn:j.ai().int().nonnegative()}),items:j.YO(au)}).meta({id:"HarnessEventsResponse"}),j.Ik({jobId:j.Yj(),startedAt:k.w$()}).meta({id:"RescanResponse"}),j.Ik({repo:j.Yj()}).meta({id:"ConnectProjectBody"}),j.Ik({type:j.YO(ac).optional(),q:j.Yj().optional()}),j.Ik({path:j.Yj().optional(),q:j.Yj().optional(),filter:j.k5(["blocked"]).optional()}),j.Ik({path:j.Yj()}),j.Ik({limit:l.ai().int().min(1).max(50).default(7)});let av=j.k5(["once","temporary","permanent"]),aw=j.Ik({repo:j.Yj().optional(),sourceTool:j.Yj().optional(),provider:j.Yj().optional()}).strict(),ax=j.k5(["suppress","reveal_to_model"]),ay=j.Ik({id:j.Os(),ruleId:j.Yj(),category:m,valueFingerprint:j.Yj().regex(/^[0-9a-f]{64}$/),keyVersion:j.ai().int().positive(),maskedValue:j.Yj(),capability:ax.default("suppress"),scope:av,expiresAt:k.w$().nullable(),maxUses:j.ai().int().positive().nullable(),useCount:j.ai().int().nonnegative(),lastUsedAt:k.w$().nullable(),justification:j.Yj().min(1),conditions:aw.nullable(),createdBy:j.Yj(),createdVia:j.k5(["cli-approve","cli-add","web-approve","web-add","api","setup-triage"]),createdAt:k.w$(),updatedAt:k.w$(),revokedAt:k.w$().nullable(),revokedBy:j.Yj().nullable(),revokeReason:j.Yj().nullable()}),az=ay.pick({id:!0,ruleId:!0,valueFingerprint:!0,keyVersion:!0,capability:!0,expiresAt:!0,maxUses:!0,useCount:!0,conditions:!0});function aA(a,b){return"present"===b.status&&b.version===a}function aB(a){if(a<=0)return"Recently blocked detections are invalidated too: the ledger outlives a rotation, so its rows stay listed as a record of what was blocked but stop being approvable. Trigger the detection again to approve it under the new key.";let b=`from the last ${String(24)} hours`,c=1===a?`1 recently blocked detection ${b} is still approvable; after rotating, none are`:`${String(a)} recently blocked detections ${b} are still approvable; after rotating, none are`;return`${c}. They stay listed as a record of what was blocked — trigger the detection again to approve under the new key.`}ay.omit({valueFingerprint:!0}),j.k5(["keyword","regex","validator"]).meta({id:"MatcherType"}),j.k5(["safe","quarantined"]).meta({id:"RuleProbeVerdict"});let aC=j.Ik({type:j.eu("keyword"),keywords:j.YO(j.Yj().min(1)).min(1),caseSensitive:j.zM().default(!1)}),aD=j.Ik({type:j.eu("regex"),pattern:j.Yj().min(1).max(2e3),flags:j.Yj().default("gi"),captureGroup:j.ai().int().nonnegative().optional()}).refine(a=>(function(a,b){try{return new RegExp(a,b),!0}catch{return!1}})(a.pattern,a.flags),{message:"pattern/flags do not form a valid JavaScript regular expression",path:["pattern"]}).refine(a=>void 0!==a.captureGroup||!function(a,b){try{let c=new RegExp(a,b.replace(/[gy]/g,""));return c.exec("")?.[0].length===0}catch{return!1}}(a.pattern,a.flags),{message:'a whole-match regex that can match the empty string (e.g. "\\d*", "a?", "(?:)") can hang the matcher — scope the quantifier to a captureGroup, or require at least one character',path:["pattern"]}),aE=j.Ik({type:j.eu("validator"),name:j.k5(["luhn","entropy","ssn-checksum"]),config:j.g1(j.Yj(),j.L5()).optional()}),aF=j.gM("type",[aC,aD,aE]).meta({id:"Matcher"}),aG=j.Ik({extensions:j.YO(j.Yj().regex(/^\.[A-Za-z0-9]+$/)).min(1)}).meta({id:"AppliesTo"}),aH=j.KC([j.Yj(),j.Ik({name:j.Yj(),config:j.g1(j.Yj(),j.L5()).optional()})]).meta({id:"PostValidatorRef"}),aI=j.Ik({categories:j.YO(m).min(1).optional(),ruleIds:j.YO(j.Yj().min(1)).min(1).optional(),labels:j.YO(j.Yj().min(1)).min(1).optional(),windowChars:j.ai().int().positive().default(160),confidenceBoost:j.ai().min(0).max(.3).optional()}).refine(a=>(a.categories?.length??0)+(a.ruleIds?.length??0)+(a.labels?.length??0)>0,{message:"requiresNearby needs at least one of categories, ruleIds, or labels"}).meta({id:"RequiresNearby"}),aJ=j.Ik({label:j.Yj(),text:j.Yj().max(5e4),shouldMatch:j.zM(),filePath:j.Yj().optional(),expectedSpans:j.YO(j.Ik({start:j.ai(),end:j.ai()})).optional()}).meta({id:"RuleFixture"}),aK=j.Ik({specVersion:j.eu(1),id:j.Yj().regex(/^[a-z][a-z0-9-]*\/[a-z][a-z0-9-]*$/),name:j.Yj(),category:m,severity:n,matcher:aF,appliesTo:aG.optional(),postValidators:j.YO(aH).optional(),requiresNearby:aI.optional(),examples:j.YO(j.Yj()).optional()}).meta({id:"Rule"}),aL=j.Ik({name:j.Yj(),email:j.Rp().optional(),url:j.OZ().optional()}).meta({id:"Author"});j.Ik({specVersion:j.eu(1),id:j.Yj(),name:j.Yj(),version:j.Yj(),rules:j.YO(j.Yj()),description:j.Yj().optional(),author:aL.optional(),license:j.Yj().optional(),sourceUrl:j.OZ().optional()}).meta({id:"PackManifest"});let aM=j.k5(["global","repo","user"]).meta({id:"PolicyScope"}),aN=j.KC([j.Ik({ruleId:j.Yj()}),j.Ik({category:m})]).meta({id:"PolicyTarget"}),aO=j.Ik({id:j.Os(),scope:aM,target:aN,action:o,enabled:j.zM().default(!0),customKeywords:j.YO(j.Yj()).optional(),name:j.Yj().optional()}).meta({id:"Policy"});j.Ik({version:j.Yj(),policies:j.YO(aO),rules:j.YO(aK).optional(),rulesComplete:j.zM().optional(),exceptions:j.YO(az).optional(),ruleVersions:j.g1(j.Yj(),j.Yj()).optional(),customKeywords:j.YO(j.Yj()),fetchedAt:k.w$()}).meta({id:"PolicyBundle"});let aP=["config"];m.options.filter(a=>!aP.includes(a));let aQ={secret:"critical",financial:"critical",code_flaw:"critical",pii:"high",phi:"high",custom:"high",code_context:"low",config:"low"},aR=j.k5(["builtin","custom"]).meta({id:"PolicyKind"}),aS=["monitor","warn","redact","block"],aT=j.k5(aS).meta({id:"BuiltinPolicyId"}),aU={monitor:{name:"Monitor",action:"log",description:"Log every match for audit. The request is allowed through untouched."},warn:{name:"Warn",action:"warn",description:"Allow the request, but warn the user inline before it is sent."},redact:{name:"Redact",action:"redact",description:"Automatically strip the matched value from the request, then continue."},block:{name:"Block",action:"block",description:"Refuse the request entirely whenever any rule in this detection matches."}};Object.fromEntries(m.options.map(a=>[a,aU[function(a){if(aP.includes(a))return"monitor";let b=aQ[a];return"critical"===b||"high"===b?"warn":"monitor"}(a)].action])),Object.fromEntries(aS.map(a=>[a,{id:a,...aU[a]}]));let aV=j.Ik({id:j.Yj(),name:j.Yj(),ruleCount:j.ai().int().nonnegative(),enabled:j.zM()}).meta({id:"UsedByItem"}),aW=j.Ik({id:j.Yj(),kind:aR,name:j.Yj(),enabled:j.zM(),usedByCount:j.ai().int().nonnegative()}).meta({id:"PolicyListItem"});j.Ik({specVersion:j.eu(1),id:j.Yj(),kind:aR,name:j.Yj(),enabled:j.zM(),description:j.Yj(),usedBy:j.YO(aV)}).meta({id:"PolicyDetail"}),j.Ik({policies:j.ai().int().nonnegative(),builtin:j.ai().int().nonnegative(),custom:j.ai().int().nonnegative(),detectionsGoverned:j.ai().int().nonnegative()}).meta({id:"PolicyStatsResponse"}),j.Ik({cursor:j.Yj().optional(),limit:l.ai().int().min(1).max(200).default(50),sourceTool:j.Yj().optional(),kind:j.Yj().optional(),from:k.w$().optional(),to:k.w$().optional()}),j.Ik({items:j.YO(aa),nextCursor:j.Yj().nullable()}).meta({id:"ListEventsResponse"}),j.Ik({accepted:j.ai().int().nonnegative(),duplicates:j.ai().int().nonnegative()}).meta({id:"IngestResponse"}),j.Ik({cursor:j.Yj().optional(),limit:l.ai().int().min(1).max(200).default(50),severity:j.Yj().optional(),category:j.Yj().optional(),eventId:j.Os().optional()}),j.Ik({items:j.YO(q),nextCursor:j.Yj().nullable()}).meta({id:"ListFindingsResponse"}),j.Ik({items:j.YO(aW)}).meta({id:"ListPoliciesResponse"}),aO.omit({id:!0}).meta({id:"CreatePolicyRequest"}),aO.partial().required({id:!0}).meta({id:"UpdatePolicyRequest"}),j.Ik({accepted:j.zM()}).meta({id:"RecordAuditEventResponse"}),j.Ik({error:j.Ik({code:j.Yj(),message:j.Yj(),details:j.L5().optional()})}).meta({id:"ErrorResponse"});let aX=j.k5(["user","project","local","plugin"]),aY=j.Ik({name:j.Yj().min(1),source:j.Yj().min(1),scope:aX,pluginName:j.Yj().optional(),version:j.Yj().optional(),description:j.Yj().optional(),updatedAt:k.w$().optional(),location:j.Yj().optional()}),aZ=j.Ik({event:j.Yj().min(1),matcher:j.Yj().optional(),command:j.Yj().min(1),timeout:j.ai().optional(),scope:aX,pluginName:j.Yj().optional(),location:j.Yj().optional()}),a$=j.Ik({name:j.Yj().min(1),scope:aX,pluginName:j.Yj().optional(),marketplace:j.Yj().optional(),project:j.Yj().optional(),transport:j.Yj().min(1),command:j.Yj().optional(),url:j.Yj().optional(),envKeys:j.YO(j.Yj()).optional(),location:j.Yj().optional()}),a_=j.Ik({name:j.Yj().min(1),path:j.Yj().min(1),scope:aX,kind:j.Yj().min(1),detail:j.Yj().optional(),entryCount:j.ai().optional(),updatedAt:k.w$().optional()});j.Ik({scannedAt:k.w$(),skills:j.YO(aY),hooks:j.YO(aZ),mcpServers:j.YO(a$),configFiles:j.YO(a_),errors:j.YO(j.Ik({source:j.Yj(),reason:j.Yj()}))});let a0=j.Ik({ruleId:j.Yj().min(1),version:j.Yj().min(1),span:p,maskedMatch:j.Yj(),actionTaken:o,confidence:j.ai().min(0).max(1)});j.Ik({items:j.YO(M),scanEvent:O,definitions:j.YO(P).optional(),findings:j.YO(a0).optional()});let a1=j.Yj().regex(/^[a-z][a-z0-9-]*$/),a2=j.Yj().regex(/^[a-z][a-z0-9-]*$/),a3=j.Yj().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z-.]+)?$/),a4=j.k5(["labs","user","org"]),a5=j.k5(["library"]).meta({id:"OriginEnum"}),a6=j.k5(["all","library","custom","customized","updates"]),a7=j.k5(["new","imported","update"]).meta({id:"LibraryStateEnum"}),a8=j.Ik({all:j.ai().int().nonnegative(),library:j.ai().int().nonnegative(),custom:j.ai().int().nonnegative(),customized:j.ai().int().nonnegative(),updates:j.ai().int().nonnegative()}).meta({id:"DetectionCounts"}),a9=j.Ik({id:j.Yj(),name:j.Yj(),version:a3,enabled:j.zM(),origin:a5,publisher:a1.optional(),publisherKind:a4.optional(),ruleCount:j.ai().int().nonnegative(),namespace:a1,packId:a2,policyId:j.Yj().optional(),latestVersion:a3.optional()}).meta({id:"DetectionListItem"});j.Ik({counts:a8,items:j.YO(a9)}).meta({id:"ListDetectionsResponse"}),j.Ik({filter:a6.optional().default("all"),q:j.Yj().optional()}),j.Ik({detections:j.ai().int().nonnegative(),rules:j.ai().int().nonnegative(),active:j.ai().int().nonnegative(),findingsLast30d:j.ai().int().nonnegative()}).meta({id:"DetectionStats"});let ba=j.Ik({id:j.Yj(),name:j.Yj(),category:m,severity:n,matcher:aF}).meta({id:"DetectionRule"}),bb=j.Ik({available:j.zM(),latestVersion:a3,latestRuleCount:j.ai().int().nonnegative().optional()}).nullable().meta({id:"DetectionUpdate"});j.Ik({id:j.Yj(),name:j.Yj(),version:a3,enabled:j.zM(),origin:a5,publisher:a1.optional(),publisherKind:a4.optional(),ruleCount:j.ai().int().nonnegative(),namespace:a1,packId:a2,description:j.Yj().optional(),editedAt:k.w$(),findingsLast30d:j.ai().int().nonnegative(),latestVersion:a3.nullable().optional(),update:bb,rules:j.YO(ba),modified:j.zM(),policyId:j.Yj().optional()}).meta({id:"DetectionDetail"});let bc=j.Ik({id:j.Yj(),name:j.Yj(),publisher:a1,publisherKind:a4.optional(),category:m.optional(),version:a3,ruleCount:j.ai().int().nonnegative(),description:j.Yj().optional(),updatedAt:k.w$(),state:a7,importedAs:j.Yj().nullable()}).meta({id:"LibraryItem"});j.Ik({categories:j.YO(m),items:j.YO(bc)}).meta({id:"ListLibraryResponse"}),j.Ik({libraryId:j.Yj().refine(a=>/^[^/]+\/[^/]+$/.test(a),{message:"libraryId must be in namespace/packId format"})}).meta({id:"ImportDetectionRequest"});let bd=j.k5(["provider","internal","external","ip"]).meta({id:"DestinationKind"}),be=j.k5(["https","http","sftp","grpc","smtp","ws","wss"]).meta({id:"Transport"}),bf=j.k5(["secrets","pii","customer","source","telemetry","logs","metrics","none"]).meta({id:"DataClass"});bf.options;let bg=j.k5(["recognized","internal","unverified","ip"]).meta({id:"ShareTrustLevel"}),bh=j.k5(["allow","block"]).meta({id:"EgressDecision"}),bi=j.k5(["allowed","blocked","review"]).meta({id:"EgressStatus"}),bj=j.k5(["raw_ip","unverified_domain","plaintext_transport"]).meta({id:"ReviewReason"}),bk=j.k5(["GET","POST","PUT","DELETE","SDK","REF"]).meta({id:"HttpMethod"}),bl=j.Ik({needsReview:j.zM(),reasons:j.YO(bj)}).meta({id:"ReviewInfo"}),bm=j.Ik({port:j.ai().int().nullable(),geo:j.Yj().nullable(),ptr:j.Yj().nullable()}).meta({id:"DestinationNetwork"}),bn=j.Ik({id:j.Yj(),method:bk,transport:be,url:j.Yj(),template:j.zM(),dataClass:bf,lastSeen:k.w$(),callSiteCount:j.ai().int().nonnegative()}).meta({id:"EndpointSummary"}),bo=j.Ik({id:j.Yj(),project:j.Yj(),file:j.Yj(),line:j.ai().int().nonnegative(),snippet:j.Yj(),dynamic:j.zM(),vendored:j.zM(),projectId:j.Yj().nullable()}).meta({id:"CallSite"}),bp=bn.extend({sites:j.YO(bo)}).meta({id:"EndpointWithSites"}),bq=j.Ik({id:j.Yj(),kind:bd,name:j.Yj(),host:j.Yj(),category:j.Yj(),trust:bg,status:bi,isCustom:j.zM(),lastSeen:k.w$(),endpointCount:j.ai().int().nonnegative(),callSiteCount:j.ai().int().nonnegative(),transports:j.YO(be),dataClasses:j.YO(bf),review:bl,network:bm.nullable(),endpoints:j.YO(bn)}).meta({id:"ShareDestinationSummary"});bq.omit({endpointCount:!0,callSiteCount:!0,endpoints:!0}).extend({note:j.Yj().nullable(),endpoints:j.YO(bp)}).meta({id:"ShareDestinationDetail"});let br=j.Ik({id:j.Yj(),kind:bd,name:j.Yj(),host:j.Yj(),trust:bg,status:bi,review:bl,topDataClass:bf,callSiteCount:j.ai().int().nonnegative(),lastSeen:k.w$()}).meta({id:"ReviewDestination"}),bs=j.Ik({kind:bd,total:j.ai().int().nonnegative(),items:j.YO(bq)}).meta({id:"ShareDestinationGroup"});j.Ik({groups:j.YO(bs)}).meta({id:"ListShareDestinationsResponse"}),j.Ik({items:j.YO(br)}).meta({id:"NeedsReviewResponse"}),j.Ik({destinations:j.ai().int().nonnegative(),endpoints:j.ai().int().nonnegative(),callSites:j.ai().int().nonnegative(),needsReview:j.ai().int().nonnegative(),insecure:j.ai().int().nonnegative(),byKind:j.Ik({provider:j.ai().int().nonnegative(),internal:j.ai().int().nonnegative(),external:j.ai().int().nonnegative(),ip:j.ai().int().nonnegative()}),byTrust:j.Ik({recognized:j.ai().int().nonnegative(),internal:j.ai().int().nonnegative(),unverified:j.ai().int().nonnegative(),ip:j.ai().int().nonnegative()})}).meta({id:"SharesStats"}),j.Ik({decision:bh.nullable()}).meta({id:"SetEgressDecisionBody"}),j.Ik({destination:bq}).meta({id:"SetEgressDecisionResponse"}),j.Ik({q:j.Yj().optional(),kind:j.YO(bd).optional(),groupBy:j.k5(["destination"]).default("destination"),review:j.uE().default(!1)}),j.Ik({format:j.k5(["csv","json"]).default("csv"),q:j.Yj().optional(),kind:j.YO(bd).optional()});let bt=j.k5(["npm","pypi","go","maven","rubygems","cargo","composer","nuget"]).meta({id:"EgressEcosystem"});j.Ik({id:j.Yj(),name:j.Yj(),category:j.Yj(),hostSuffixes:j.YO(j.Yj()).min(1),apiBase:j.Yj(),defaultDataClasses:j.YO(bf).min(1),sdks:j.jg(bt,j.YO(j.Yj()))}).meta({id:"ProviderRegistryEntry"});let bu=j.Ik({file:j.Yj(),line:j.ai().int().positive(),snippet:j.Yj(),dynamic:j.zM(),vendored:j.zM()}).meta({id:"EgressCallSiteHit"}),bv=j.Ik({host:j.Yj(),kind:bd,name:j.Yj(),category:j.Yj(),trust:bg,network:bm.nullable(),method:bk,transport:be,url:j.Yj(),template:j.zM(),dataClass:bf,site:bu}).meta({id:"ResolvedEgressHit"}),bw=j.gM("mode",[j.Ik({mode:j.eu("walk"),walkedPrefix:j.Yj()}),j.Ik({mode:j.eu("ledger"),scannedFiles:j.YO(j.Yj()),deletedFiles:j.YO(j.Yj())})]).meta({id:"EgressReconcile"});j.Ik({projectKey:j.Yj().min(1),project:j.Yj(),projectId:j.Yj().nullable(),reconcile:bw,hits:j.YO(bv)}).meta({id:"RecordProjectEgressInput"}),j.Ik({destinations:j.ai().int().nonnegative(),endpoints:j.ai().int().nonnegative(),callSites:j.ai().int().nonnegative(),truncated:j.zM(),droppedFiles:j.YO(j.Yj()).default([])}).meta({id:"EgressWriteSummary"});let bx=j.Yj().optional();j.Ik({reference:j.Yj(),scope:j.Yj(),reason:j.Yj(),confirmation:bx}),j.Ik({ruleId:j.Yj(),value:j.Yj(),scope:j.Yj(),reason:j.Yj(),confirmation:bx}),j.Ik({pointer:j.Yj(),scope:j.Yj(),justification:j.Yj(),confirmation:bx}),j.Ik({id:j.Yj(),reason:j.Yj()}),j.Ik({confirmation:j.Yj()}),new WeakMap,new WeakMap;let by=j.Ik({id:j.Os(),namespace:a1,packId:a2,version:a3,name:j.Yj(),enabled:j.zM().default(!0),policyId:j.Yj().optional()}).meta({id:"InstalledPack"});j.Ik({namespace:a1,packId:a2,version:a3}).meta({id:"InstallPackRequest"}),j.Ik({items:j.YO(by)}).meta({id:"ListInstalledPacksResponse"}),j.Ik({enabled:j.zM().optional(),policyId:j.Yj().nullable().optional()}).refine(a=>Object.keys(a).some(b=>void 0!==a[b]),{message:"At least one field must be provided"}).meta({id:"PatchInstalledPackRequest"});let bz=m.options.join("|"),bA=RegExp(`\\[\\[aka:(?:${bz}):[A-Z2-7]{2,7}\\.[A-Z2-7]{26}\\.[A-Z2-7]{16}\\]\\]`),bB=RegExp(`^${bA.source}$`);j.Yj().regex(bB),j.Ik({category:m,keyVersion:j.ai().int().positive(),pointerId:j.Yj(),tag:j.Yj()}),j.Ik({pointerId:j.Yj(),valueFingerprint:j.Yj().regex(/^[0-9a-f]{64}$/),fingerprintKeyVersion:j.ai().int().positive(),keyVersion:j.ai().int().positive(),category:m,ruleId:j.Yj(),maskedMatch:j.Yj(),provider:j.Yj().optional(),ciphertext:j.Yj(),nonce:j.Yj(),authTag:j.Yj(),occurrenceCount:j.ai().int().nonnegative(),firstSeen:j.Yj(),lastSeen:j.Yj()}),j.Ik({category:m,provider:j.Yj().optional(),maskedMatch:j.Yj(),occurrences:j.ai().int().nonnegative(),firstSeen:j.Yj(),lastSeen:j.Yj()}),j.Ik({ruleId:j.Yj(),valueFingerprint:j.Yj().regex(/^[0-9a-f]{64}$/),fingerprintKeyVersion:j.ai().int().positive()});let bC=j.k5(["human","model"]),bD=j.k5(["display","explicit-reveal","view-render","model-input","remediation","purge"]),bE=j.k5(["revealed","refused","unavailable"]),bF=["display","view-render"];function bG(a){return bF.includes(a)}let bH=j.Ik({id:j.Os(),pointerId:j.Yj(),at:j.Yj(),target:bC,reason:bD,outcome:bE,grantId:j.Yj().optional(),pointerCount:j.ai().int().positive().default(1)}),bI=j.k5(["prompt","tool-input","tool-output","file","transcript"]),bJ=j.Ik({location:j.Yj(),kind:bI,firstSeen:j.Yj(),lastSeen:j.Yj()}),bK=j.Ik({pointerId:j.Yj(),category:m,provider:j.Yj().optional(),maskedMatch:j.Yj(),occurrences:j.ai().int().nonnegative(),firstSeen:j.Yj(),lastSeen:j.Yj(),revealGrantId:j.Yj().nullable(),sightings:j.YO(bJ)});j.Ik({limit:l.ai().int().min(1).max(200).optional(),cursor:j.Yj().optional()}),j.Ik({totals:j.Ik({values:j.ai().int().nonnegative()}),items:j.YO(bK),nextCursor:j.Yj().nullable()}),j.Ik({limit:l.ai().int().min(1).max(200).optional(),cursor:j.Yj().optional()}),j.Ik({totals:j.Ik({reused:j.ai().int().nonnegative()}),items:j.YO(bK),nextCursor:j.Yj().nullable()}),j.Ik({includeBatched:j.zM().optional(),limit:l.ai().int().min(1).max(200).optional(),cursor:j.Yj().optional()}),j.Ik({items:j.YO(bH),nextCursor:j.Yj().nullable(),hiddenBatched:j.ai().int().nonnegative()});let bL=j.Yj(),bM=j.k5(["masked","full","off"]),bN=j.Ik({acknowledgedAt:k.w$(),version:j.ai().int().positive()});function bO(a){return a?.version===1}let bP=j.k5(["standalone"]),bQ=j.k5(["redact","warn"]),bR=j.k5(["full","session-only"]),bS=j.Ik({acknowledgedAt:k.w$(),payloadVersion:j.ai().int().positive()});function bT(a){return a?.payloadVersion===1}j.Ik({specVersion:j.ai().int().positive().default(5),runMode:j.vk(a=>"attached"===a?"standalone":a,bP.default("standalone")),policy:bQ.default("redact"),historicalAccess:bR.default("session-only"),dataSharesInPlace:j.zM().default(!0),vaultConsent:bN.optional(),vaultKeyCustody:bL.default("file"),vaultInlineReveal:bM.default("masked"),onboardedAt:k.w$().optional(),modelJudgeConsent:bS.optional()});let bU=j.Ik({path:j.Yj().min(1),name:j.Yj().min(1),origin:ae,defaultAccess:ad});j.Ik({files:j.YO(bU),truncated:j.zM(),scannedAt:j.Yj()});let bV=["7d","30d","3m","6m"],bW=j.k5(bV).meta({id:"TimeRange"}),bX="7d";bW.catch(bX);let bY=j.k5(["still-valid","unknown","invalid"]),bZ=j.Ik({filePath:j.Yj(),span:p.optional()}).strict(),b$=j.Ik({provider:j.Yj(),maskedToken:j.Yj(),where:bZ,state:bY,observedAt:k.w$().optional()}).strict();j.Ik({provider:j.Yj(),maskedToken:j.Yj(),consolePath:j.Yj(),occurrenceSpread:j.ai().int().positive()}).strict();let b_=j.k5(["redact-rotation-checklist","redact-only","set-secret-redact","leave"]),b0=j.k5(["first-run","pre-push","secret-scan"]);j.Ik({entrySource:b0}).strict();let b1=j.Ik({id:b_,label:j.Yj()}),b2=j.Ik({kind:j.eu("decision"),entrySource:b0,secretCount:j.ai().int().positive(),prompt:j.Yj(),options:j.PV([b1.extend({id:j.eu("redact-rotation-checklist")}),b1.extend({id:j.eu("redact-only")}),b1.extend({id:j.eu("set-secret-redact")}),b1.extend({id:j.eu("leave")})])}),b3=j.Ik({kind:j.eu("no-decision")});j.gM("kind",[b2,b3]),j.Ik({rules:j.YO(aK).min(1).max(100),text:j.Yj().max(5e4).optional(),fixtures:j.YO(aJ).max(200).optional()}).refine(a=>void 0!==a.text||(a.fixtures?.length??0)>0,{message:"Provide `text`, `fixtures`, or both — there must be something to test"}).meta({id:"TestRulesRequest"});let b4=j.Ik({ruleId:j.Yj(),category:m,severity:n,span:p,confidence:j.ai().min(0).max(1),match:j.Yj()}).meta({id:"RuleTestMatch"}),b5=j.Ik({label:j.Yj(),shouldMatch:j.zM(),didMatch:j.zM(),passed:j.zM(),matches:j.YO(b4)}).meta({id:"FixtureResult"});j.Ik({adhoc:j.Ik({matches:j.YO(b4)}).optional(),fixtures:j.YO(b5),summary:j.Ik({total:j.ai().int().nonnegative(),passed:j.ai().int().nonnegative(),failed:j.ai().int().nonnegative()}),unsupportedRuleIds:j.YO(j.Yj())}).meta({id:"TestRulesResponse"});let b6=j.Ik({severity:n,count:j.ai().int().nonnegative(),caught:j.ai().int().nonnegative().optional(),openAtRest:j.ai().int().nonnegative().optional()}).meta({id:"SeveritySummaryItem"});j.Ik({total:j.ai().int().nonnegative(),needsRemediation:j.ai().int().nonnegative().optional(),bySeverity:j.YO(b6)}).meta({id:"SeveritySummaryResponse"}),j.Ik({range:j.k5(bV).default(bX)});let b7=j.k5(["blocked","redacted","warned"]).meta({id:"EnforcementActionKind"}),b8=j.Ik({kind:b7,count:j.ai().int().nonnegative(),delta:j.ai().int()}).meta({id:"EnforcementAction"});j.Ik({range:bW,total:j.ai().int().nonnegative(),actions:j.YO(b8)}).meta({id:"EnforcementActionsResponse"});let b9=j.k5(["day","week"]).meta({id:"TimeseriesGranularity"}),ca=j.Ik({timestamp:k.p6(),critical:j.ai().int().nonnegative(),high:j.ai().int().nonnegative(),medium:j.ai().int().nonnegative()}).meta({id:"FindingsTimeseriesPoint"});j.Ik({range:bW,granularity:b9,points:j.YO(ca)}).meta({id:"FindingsTimeseriesResponse"});let cb=j.Ik({timestamp:k.p6(),bySeverity:j.Ik({critical:j.ai().nonnegative().nullable(),high:j.ai().nonnegative().nullable(),medium:j.ai().nonnegative().nullable(),low:j.ai().nonnegative().nullable()})}).meta({id:"MttrTrendPoint"});j.Ik({range:bW,granularity:b9,points:j.YO(cb)}).meta({id:"MttrTrendResponse"});let cc=j.Ik({findingKey:j.Yj(),ruleId:j.Yj(),severity:n,path:j.Yj(),resolvedAt:k.w$(),detectedAt:k.w$()}).meta({id:"ResolvedFeedItem"});j.Ik({items:j.YO(cc)}).meta({id:"RecentlyResolvedResponse"});let cd=["repo","user"],ce=j.k5(cd).meta({id:"SourceKind"}),cf=j.Ik({id:j.Yj(),name:j.Yj(),kind:ce,findingsCount:j.ai().int().nonnegative()}).meta({id:"TopSource"});j.Ik({range:bW,items:j.YO(cf)}).meta({id:"TopSourcesResponse"}),j.Ik({range:j.k5(bV).default(bX),limit:l.ai().int().min(1).max(50).default(5),kind:j.k5(cd).optional()});let cg=j.k5(["claudecode","cursor","codex","antigravity","claudeai","chatgpt","copilot","api"]).meta({id:"Provider"}),ch=j.Ik({provider:cg,coverage:j.ai().int().min(0).max(100),supported:j.zM()}).meta({id:"ScanCoverageProvider"});j.Ik({range:bW,providers:j.YO(ch)}).meta({id:"ScanCoverageResponse"});let ci=j.k5(["repo","user","team","policy","share","rule"]).meta({id:"SubjectType"}),cj=j.Ik({type:ci,id:j.Yj(),label:j.Yj()}).meta({id:"RecommendationSubject"}),ck=j.k5(["apply","navigate"]).meta({id:"RecommendationActionMode"}),cl=j.Ik({mode:ck,type:j.Yj(),label:j.Yj(),href:j.Yj().optional(),policyId:j.Yj().optional(),teamId:j.Yj().optional()}).meta({id:"RecommendationAction"}),cm=j.Ik({id:j.Yj(),category:j.Yj(),severity:n,title:j.Yj(),description:j.Yj(),subjects:j.YO(cj),action:cl}).meta({id:"RecommendedAction"});j.Ik({items:j.YO(cm)}).meta({id:"RecommendedActionsResponse"}),j.Ik({limit:l.ai().int().min(1).max(20).default(3)});let cn=j.Ik({type:j.Yj(),policyId:j.Yj().optional(),teamId:j.Yj().optional()}).meta({id:"AppliedAction"});j.Ik({id:j.Yj(),status:j.eu("applied"),appliedAction:cn}).meta({id:"ApplyRecommendedActionResponse"}),j.Ik({id:j.Yj(),status:j.eu("dismissed")}).meta({id:"DismissRecommendedActionResponse"}),j.Ik({id:j.Yj()}),j.Ik({ruleId:j.Yj(),category:m,severity:n,maskedMatch:j.Yj(),rawMatch:j.Yj(),context:j.Yj(),filePath:j.Yj().optional(),confidence:j.ai().min(0).max(1),id:j.Yj().optional(),valueFingerprint:j.Yj().optional(),keyVersion:j.ai().int().nonnegative().optional()});let co=j.Ik({category:m,action:aT,reasoning:j.Yj(),genuineCount:j.ai().int().nonnegative(),fpCount:j.ai().int().nonnegative(),fpIds:j.YO(j.Yj())});j.Ik({perCategory:j.YO(co),notes:j.Yj()});let cp=j.Ik({total:j.ai().int().nonnegative(),important:j.ai().int().nonnegative(),routine:j.ai().int().nonnegative()}).refine(a=>a.total===a.important+a.routine,{message:"total must equal important + routine",path:["total"]}),cq=j.Ik({ruleId:j.Yj(),category:m,valueFingerprint:j.Yj(),keyVersion:j.ai().int().nonnegative()}),cr=j.Ik({pattern:j.Yj(),count:j.ai().int().nonnegative(),values:j.YO(cq).min(1)}),cs=j.Ik({category:m,count:j.ai().int().nonnegative(),egress:j.zM()}),ct=j.Ik({counts:cp,routineCategories:j.YO(m),surfacedCategories:j.YO(m),findingKinds:j.YO(cs),posture:j.g1(m,aT),maskedFindings:j.YO(b$).optional(),falsePositivePatterns:j.YO(cr).optional()}),cu=co.pick({category:!0,genuineCount:!0,fpCount:!0}).extend({egress:j.zM()});j.Ik({categories:j.YO(cu),posture:j.g1(m,aT)}),j.Ik({frame:ct,copy:j.Yj()}),j.k5(["scan","floor"]);let cv=j.Ik({id:j.k5(["enter-remediation","open-dashboard","not-now"]),label:j.Yj()}),cw=j.PV([cv.extend({id:j.eu("open-dashboard")}),cv.extend({id:j.eu("not-now")})]),cx=j.PV([cv.extend({id:j.eu("enter-remediation")}),cv.extend({id:j.eu("open-dashboard")}),cv.extend({id:j.eu("not-now")})]);j.Ik({worthALook:j.ai().int().nonnegative(),liveKeys:j.ai().int().nonnegative().optional(),options:j.KC([cw,cx])}).refine(a=>a.options.some(a=>"enter-remediation"===a.id)===(a.liveKeys??0)>0,{message:"the chain-entry option is present exactly when liveKeys > 0",path:["options"]}).refine(a=>(a.liveKeys??0)<=a.worthALook,{message:"liveKeys is a subset of worthALook and cannot exceed it",path:["liveKeys"]})},27001:(a,b,c)=>{"use strict";c.d(b,{FindingsFlatTableView:()=>l});var d=c(88422),e=c(63959),f=c(4513),g=c(81604),h=c(44361),i=c(76812),j=c(64915);let k={severity:"min-w-[110px] whitespace-nowrap",sources:"min-w-[140px] whitespace-nowrap",action:"min-w-[130px] whitespace-nowrap",status:"min-w-[110px] whitespace-nowrap",latest:"min-w-[100px] whitespace-nowrap",location:"min-w-[200px]",type:"min-w-[200px]"};function l({items:a,selectedId:b,onSelect:c,onNextPage:l,onPreviousPage:m,hasNextPage:n=!1,hasPreviousPage:o=!1,loadingNextPage:p=!1,pageStart:q,total:r,isLoading:s=!1,emptyState:t}){return(0,d.jsxs)(e.Zp,{className:"flex h-full min-h-0 flex-col overflow-hidden shadow-sm",children:[(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto p-4",children:s?(0,d.jsx)("div",{className:"flex flex-col gap-2 py-2",children:Array.from({length:8},(a,b)=>(0,d.jsx)("div",{className:"h-11 animate-pulse rounded-md bg-surface-3"},b))}):0===a.length?t??(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"No findings match these filters."}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{className:k.severity,children:"Severity"}),(0,d.jsx)(e.nd,{className:k.type,children:"Type"}),(0,d.jsx)(e.nd,{className:k.sources,children:"Source"}),(0,d.jsx)(e.nd,{className:k.location,children:"Location"}),(0,d.jsx)(e.nd,{className:k.action,children:"Action"}),(0,d.jsx)(e.nd,{className:k.status,children:"Status"}),(0,d.jsx)(e.nd,{className:k.latest,children:"Detected"})]})}),(0,d.jsx)(e.BF,{children:a.map(a=>{let l=i.y7[a.category]??g.RY;return(0,d.jsxs)(e.Hj,{"data-state":b===a.id?"selected":void 0,className:"cursor-pointer hover:bg-surface-2",onClick:()=>{c(a)},children:[(0,d.jsx)(e.nA,{className:k.severity,children:(0,d.jsx)(e.Pt,{severity:a.severity})}),(0,d.jsx)(e.nA,{className:k.type,children:(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-7 shrink-0 items-center justify-center rounded-lg",(0,i.i9)(a.category)),children:(0,d.jsx)(l,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:"text-ui font-semibold text-text wrap-anywhere",children:a.subtype}),(0,d.jsx)("div",{className:"font-mono text-xs text-text-3 wrap-anywhere",children:a.match.maskedValue})]})]})}),(0,d.jsx)(e.nA,{className:k.sources,children:(0,d.jsx)(j.i,{provider:a.provider})}),(0,d.jsx)(e.nA,{className:k.location,children:(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:"font-mono text-xs text-text-2 wrap-anywhere",children:(0,i.xE)(a)}),a.repo&&(0,d.jsx)("div",{className:"text-xs text-text-3 wrap-anywhere",children:a.repo})]})}),(0,d.jsx)(e.nA,{className:k.action,children:(0,d.jsx)(h.T,{action:a.action})}),(0,d.jsx)(e.nA,{className:k.status,children:void 0===a.status?(0,d.jsx)("span",{className:"text-text-3",children:"—"}):(0,d.jsx)(e.Ex,{variant:i.B5[a.status].badge,className:"h-6",children:i.B5[a.status].label})}),(0,d.jsx)(e.nA,{className:k.latest,children:(0,d.jsx)("span",{className:"text-text-3 text-xs",children:(0,f.K)(a.detectedAt)})})]},a.id)})})]})}),l&&a.length>0&&(0,d.jsxs)(e.dK,{children:[(0,d.jsx)(e.Eb,{disabled:!o||p,onClick:m}),(0,d.jsx)(e.D2,{children:void 0===r||void 0===q?`${String(a.length)} shown`:`${String(q)}–${String(q+a.length-1)} of ${String(r)} findings`}),(0,d.jsx)(e.WA,{disabled:!n||p,loading:p,onClick:l})]})]})}},27694:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>d});let d=(0,c(77940).registerClientReference)(function(){throw Error("Attempted to call the default export of \"/home/runner/work/ai-tc/ai-tc/web-ui/app/(app)/error.tsx\" from the server, but it's on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/(app)/error.tsx","default")},29893:(a,b,c)=>{"use strict";c.d(b,{ScopePicker:()=>j,StateTag:()=>g,StateTagFor:()=>h,_:()=>i});var d=c(88422),e=c(63959),f=c(72060);function g({state:a}){return(0,d.jsx)(e.Ex,{variant:f.hv[a],children:a})}function h({exception:a,now:b}){return(0,d.jsx)(g,{state:(0,f.rO)(a,b)})}function i({exception:a}){return"reveal_to_model"!==a.capability?null:(0,d.jsx)(e.Ex,{variant:"critical",children:f.y3.reveal_to_model})}function j({value:a,onChange:b}){return(0,d.jsx)(e.Iz,{value:a??"",onValueChange:a=>{a&&b(a)},children:f.rU.map(a=>(0,d.jsx)(e.tR,{value:a,children:f.DU[a]},a))})}},31227:(a,b,c)=>{"use strict";c.d(b,{BlockedLedgerView:()=>k});var d=c(88422),e=c(63959),f=c(4513),g=c(48695),h=c(81604),i=c(48771),j=c(72060);function k({items:a,onApprove:b,blockedWindow:c,onBlockedWindowChange:k,keyState:l}){return(0,d.jsxs)("div",{className:"mb-3.5 overflow-hidden rounded-xl border border-sev-high-fill bg-sev-high-fill",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-3.5 py-3",children:[(0,d.jsx)("span",{className:"grid size-6.5 shrink-0 place-items-center rounded-md bg-sev-high-ink text-on-accent",children:(0,d.jsx)(h.pD,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsx)("span",{className:"text-sm font-semibold text-text",children:"Recently blocked"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-high-ink px-2 py-0.5 text-xs font-bold text-on-accent",children:a.length}),(0,d.jsxs)("span",{className:"text-xs text-text-2",children:["Detections blocked in ",g.sr[c]," — approve one to grant an exception"]}),(0,d.jsx)("span",{className:"ml-auto shrink-0",children:(0,d.jsx)(i.BlockedWindowSelect,{value:c,onChange:k})})]}),0===a.length?(0,d.jsx)("div",{className:"px-3.5 pb-3.5 text-xs text-text-2",children:"Nothing blocked in this window."}):(0,d.jsx)("div",{className:"flex flex-col gap-1.5 px-3 pb-3",children:a.map(a=>{let c=(0,j.eF)(a,l);return(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text-3",children:a.reference}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.ruleId}),(0,d.jsx)("span",{className:"font-mono text-xs text-text-2",children:a.maskedValue})]}),(0,d.jsxs)("div",{className:(0,e.cn)("mt-1 text-label text-text-3"),children:[(0,f.K)(a.blockedAt),a.repo?` \xb7 ${a.repo}`:"",null===c?"":" \xb7 not approvable"]}),null===c?null:(0,d.jsx)("div",{className:"mt-1 text-label text-text-3",children:c})]}),(0,d.jsx)(e.$n,{onClick:()=>{b(a.reference)},disabled:null!==c,title:c??void 0,variant:"ghost",tone:"primary",size:"sm",children:"Approve"})]},a.reference)})})]})}},35575:(a,b,c)=>{"use strict";c.d(b,{AvailablePluginsCardView:()=>g});var d=c(88422),e=c(63959),f=c(81604);function g({plugins:a,onInstall:b,installingId:c,outcomes:g}){return 0===a.length?null:(0,d.jsxs)(e.Zp,{className:"shadow-sm",children:[(0,d.jsxs)(e.aR,{children:[(0,d.jsx)(e.AG,{className:"bg-teal-fill text-teal-ink",children:(0,d.jsx)(f.BZ,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)(e.Lc,{children:[(0,d.jsx)(e.ZB,{children:"Available plugins"}),(0,d.jsx)(e.BT,{children:"Agent integrations you haven’t installed yet"})]})]}),(0,d.jsx)(e.Wu,{children:(0,d.jsx)("div",{className:"flex flex-col",children:a.map((a,f)=>{let h=g[a.id];return(0,d.jsxs)("div",{className:(0,e.cn)("py-3",f>0&&"border-t border-text/6"),children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-sm font-semibold text-text",children:a.name}),a.latest&&(0,d.jsxs)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:["v",a.latest]})]}),(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:null!==c,onClick:()=>{b(a.id)},children:c===a.id?"Installing…":"Install"})]}),h&&(0,d.jsxs)("div",{className:(0,e.cn)("mt-2 rounded-lg border p-2",h.ok?"border-ok-fill bg-ok-fill":"border-sev-critical-fill bg-sev-critical-fill"),children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:h.ok?"Installed — restart Claude Code to load it.":"Install failed"}),h.output&&(0,d.jsx)("pre",{className:"mt-1 max-h-40 overflow-auto whitespace-pre-wrap font-mono text-label text-text-2",children:h.output})]})]},a.id)})})})]})}},35729:(a,b,c)=>{"use strict";c.d(b,{CF:()=>i,EI:()=>f,Hf:()=>g,Lh:()=>o,ZX:()=>l,aD:()=>e,pN:()=>h,rL:()=>m});var d=c(81604);let e={https:{label:"HTTPS",icon:d.XA,secure:!0},http:{label:"HTTP",icon:d.fC,secure:!1},sftp:{label:"SFTP",icon:d.JM,secure:!0},grpc:{label:"gRPC",icon:d.hF,secure:!0},smtp:{label:"SMTP",icon:d.K$,secure:!0},ws:{label:"WS",icon:d.fC,secure:!1},wss:{label:"WSS",icon:d.XA,secure:!0}};function f(a){return a.some(a=>!e[a].secure)}let g={secrets:{label:"Secrets",tone:"critical",icon:d.RY},pii:{label:"PII",tone:"high",icon:d.Ey},customer:{label:"Customer data",tone:"high",icon:d.ny},source:{label:"Source code",tone:"low",icon:d.lo},telemetry:{label:"Telemetry",tone:"teal",icon:d.BH},logs:{label:"Logs",tone:"default",icon:d.kp},metrics:{label:"Metrics",tone:"teal",icon:d.np},none:{label:"No payload",tone:"default",icon:d.mo}},h={recognized:{label:"Known provider",tone:"success",icon:d.C1},internal:{label:"Your organization",tone:"primary",icon:d.Zu},unverified:{label:"Unverified domain",tone:"high",icon:d._0},ip:{label:"Raw IP address",tone:"critical",icon:d.rX}},i={provider:"Providers",internal:"Internal & corporate domains",external:"External domains",ip:"Raw IP addresses"},j={raw_ip:"Connects to a raw IP with no reverse DNS",unverified_domain:"Corporate-looking domain not owned by your org",plaintext_transport:"Sends data over a plaintext transport"},k=["raw_ip","unverified_domain","plaintext_transport"];function l(a){let b=k.find(b=>a.includes(b));return b?j[b]:"Needs review"}function m(a){return"ip"===a.kind?"bg-sev-critical-fill text-sev-critical-ink":"external"===a.kind||"unverified"===a.trust?"bg-sev-high-fill text-sev-high-ink":"bg-primary-tint text-primary"}let n=["#2563EB","#7C3AED","#DB2777","#0891B2","#CA8A04","#059669"];function o(a,b){let c=b??a,d=0;for(let a=0;a<c.length;a++)d=31*d+c.charCodeAt(a)>>>0;return{short:function(a){let b=a.trim().split(/[\s.\-_/]+/u).filter(Boolean),c=b[0]??"";if(b.length<=1)return(c.slice(0,2)||"?").toUpperCase();let d=b[1]??"";return((c[0]??"")+(d[0]??"")).toUpperCase()||"?"}(a),color:n[d%n.length]??"#2563EB"}}},37937:(a,b,c)=>{Promise.resolve().then(c.t.bind(c,94022,23)),Promise.resolve().then(c.t.bind(c,48697,23)),Promise.resolve().then(c.t.bind(c,53217,23)),Promise.resolve().then(c.t.bind(c,24696,23)),Promise.resolve().then(c.t.bind(c,50088,23)),Promise.resolve().then(c.t.bind(c,86476,23)),Promise.resolve().then(c.t.bind(c,56220,23)),Promise.resolve().then(c.t.bind(c,12749,23)),Promise.resolve().then(c.bind(c,89996))},38877:(a,b,c)=>{"use strict";c.d(b,{SessionListView:()=>o});var d=c(88422),e=c(63959),f=c(4513),g=c(81604),h=c(22559),i=c(13848),j=c(56028),k=c(55587),l=c(95398);function m({session:a,selected:b,onSelect:c}){let i=a.findings>0;return(0,d.jsxs)("button",{type:"button",onClick:c,"aria-current":b?"true":void 0,className:(0,e.cn)("relative cursor-pointer block w-full rounded-lg px-3 py-2.5 text-left transition-colors",b?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(h.K,{id:a.harness,size:26}),(0,d.jsx)("div",{className:"min-w-0 flex-1",children:(0,d.jsx)("div",{className:"truncate text-ui font-semibold text-text",title:a.title,children:a.title})}),(0,d.jsx)(j.md,{status:a.status})]}),(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5 font-mono text-label text-text-3",children:[(0,d.jsx)(g.SY,{"aria-hidden":!0,focusable:!1,className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"min-w-0 max-w-[50%] truncate",title:a.project,children:a.project}),(0,d.jsx)("span",{className:"shrink-0 text-text-3",children:"\xb7"}),(0,d.jsx)(g.OK,{"aria-hidden":!0,focusable:!1,className:"size-3 shrink-0"}),(0,d.jsx)("span",{className:"min-w-0 flex-1 truncate",title:a.branches[0],children:a.branches[0]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-x-3 gap-y-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-2",title:new Date(a.startedAt).toLocaleString(),suppressHydrationWarning:!0,children:(0,f.K)(a.startedAt)}),(0,d.jsx)(j.JW,{icon:g.O4,children:(0,k.vV)(a.startedAt,a.endedAt,a.status)}),(0,d.jsxs)(j.JW,{icon:g.kp,children:[a.turns," turns"]}),i&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1 whitespace-nowrap text-xs font-semibold text-sev-critical-ink",children:[(0,d.jsx)(g.Zu,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a.findings]})]})]})}function n(){return(0,d.jsxs)("div",{className:"rounded-lg px-3 py-2.5",children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(e.EA,{className:"size-6.5 shrink-0 rounded-lg"}),(0,d.jsx)(e.EA,{className:"h-4 flex-1"})]}),(0,d.jsx)(e.EA,{className:"mb-2 h-3 w-2/3"}),(0,d.jsx)(e.EA,{className:"h-3 w-1/2"})]})}function o({sessions:a,selectedId:b,onSelect:c,query:f,onQuery:h,harness:j,harnessOptions:o,onHarness:p,isLoading:q,error:r,hasMore:s=!1,emptyCount:t=0,showEmpty:u=!1,onToggleEmpty:v}){let w=(0,k.u3)(a),x=""!==f.trim()||j.length>0,y=1===t?"background session":"background sessions",z=t>0&&v?(0,d.jsx)("div",{className:"px-2 py-2 text-center",children:(0,d.jsx)(e.$n,{variant:"link",tone:"primary",className:"text-label font-normal",onClick:v,children:u?`Hide ${String(t)} ${y}`:`${String(t)} ${y} hidden — show`})}):null;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"shrink-0 border-b border-border p-3",children:[(0,d.jsxs)("div",{className:"mb-2 flex h-8.5 items-center gap-2 rounded-lg border border-border bg-surface-2 px-2.5",children:[(0,d.jsx)(g.WI,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3"}),(0,d.jsx)("input",{value:f,onChange:a=>{h(a.target.value)},placeholder:"Search sessions & events…","aria-label":"Search sessions and events",className:"min-w-0 flex-1 bg-transparent text-sm text-text placeholder:text-text-3 focus:outline-none"})]}),(0,d.jsx)(l.HarnessSelect,{value:j,onChange:p,...o?{options:o}:{}})]}),(0,d.jsx)("div",{className:"min-h-0 flex-1 overflow-y-auto p-2","aria-busy":q,children:r?(0,d.jsx)("div",{className:"p-2",children:(0,d.jsx)(i.r,{message:r})}):q&&0===a.length?(0,d.jsxs)("div",{className:"flex flex-col gap-1",children:[(0,d.jsx)(n,{}),(0,d.jsx)(n,{}),(0,d.jsx)(n,{})]}):0===w.length?(0,d.jsxs)("div",{className:"py-10 text-center text-sm text-text-3",children:[x?"No sessions match":t>0?"No active sessions in this range":"No sessions recorded yet",z]}):(0,d.jsxs)(d.Fragment,{children:[w.map(a=>(0,d.jsxs)("div",{className:"mb-1.5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2 px-2 pb-1.5 pt-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:a.day}),(0,d.jsx)("span",{className:"h-px flex-1 bg-text/6"}),(0,d.jsx)("span",{className:"text-label text-text-3",children:a.items.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1",children:a.items.map(a=>(0,d.jsx)(m,{session:a,selected:a.id===b,onSelect:()=>{c(a.id)}},a.id))})]},a.day)),z,s&&(0,d.jsxs)("div",{className:"px-2 py-3 text-center text-label text-text-3",children:["Showing the most recent ",a.length," sessions — narrow the range to see more."]})]})})]})}},39576:(a,b,c)=>{"use strict";c.d(b,{DetectionDetailView:()=>l});var d=c(88422),e=c(63959),f=c(6932),g=c(81604),h=c(16614),i=c(72721),j=c(50805);function k({rule:a,onOpen:b}){let c=h.rE[a.matcher.type],f=c.icon;return(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-surface p-3.5",children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"grid size-7.5 shrink-0 place-items-center rounded-lg",style:{background:c.fill,color:c.color},children:(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:h.gh[a.category]||a.category})]}),(0,d.jsx)("div",{className:"mt-px font-mono text-label text-text-3",children:a.id})]}),(0,d.jsx)(e.Pt,{severity:a.severity}),(0,d.jsx)("span",{className:"shrink-0 rounded-full px-2.5 py-0.5 text-xs font-semibold",style:{background:c.fill,color:c.color},children:c.label})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("code",{className:"min-w-0 flex-1 truncate rounded-md border border-border bg-surface-2 px-2.5 py-1.5 font-mono text-xs text-text-2",children:(0,h.vm)(a.matcher)}),(0,d.jsxs)(e.$n,{variant:"ghost",tone:"primary",size:"sm",onClick:b,className:"shrink-0",children:["View",(0,d.jsx)(g.vK,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]})]})]})}function l({d:a,onOpenRule:b,onToggleEnabled:c,onChangePolicy:l,onOpenUpdate:m,onRecheck:n,unknownHint:o}){let p=a.policyId??h.tG,q=(0,h.ES)(p),r=q.icon;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsx)("div",{className:"border-b border-border px-5 pb-4 pt-5",children:(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5",children:[(0,d.jsx)("h2",{className:"font-display text-xl font-semibold text-text",children:a.name}),(0,d.jsxs)("span",{className:"rounded-full border border-border bg-surface-2 px-2 py-0.5 font-mono text-xs font-semibold text-text-2",children:["v",a.version]})]}),a.description&&(0,d.jsx)("div",{className:"mt-1.5 text-ui leading-snug text-text-2",children:a.description}),(0,d.jsx)("div",{className:"mt-2 font-mono text-xs text-text-3",children:a.id})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-ui font-semibold "+(a.enabled?"text-ok-ink":"text-text-3"),children:a.enabled?"Enabled":"Disabled"}),c&&(0,d.jsx)(e.dO,{checked:a.enabled,onCheckedChange:c,"aria-label":a.enabled?"Disable detection":"Enable detection"})]}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon","aria-label":"More",className:"size-8.5 text-text-3",children:(0,d.jsx)(g.wy,{"aria-hidden":!0,focusable:!1})})]})]})}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-6 overflow-y-auto p-5",children:[(0,d.jsx)(j.t,{d:a,onOpenUpdate:m,onRecheck:n,unknownHint:o}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-baseline gap-2",children:[(0,d.jsx)(f.e,{children:"Enforcement policy"}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:"applied to every matching request"})]}),(0,d.jsx)(i.PolicyPicker,{value:p,onChange:l}),(0,d.jsxs)("div",{className:"mt-3 flex items-start gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(r,{"aria-hidden":!0,focusable:!1,className:"mt-px size-4 shrink-0",style:{color:(0,h.vV)(q.tone)[0]}}),(0,d.jsx)("div",{className:"text-xs leading-snug text-text-2",children:q.desc})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-3 flex items-center gap-2.5",children:[(0,d.jsx)(f.e,{children:"Rules"}),(0,d.jsx)("span",{className:"rounded-full bg-surface-3 px-2 py-px text-xs font-semibold text-text-2",children:a.rules.length}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsxs)(e.$n,{variant:"outline",tone:"neutral",size:"sm",disabled:!0,title:"Rule authoring coming soon",children:[(0,d.jsx)(g.c1,{"aria-hidden":!0,focusable:!1}),"Add rule"]})]}),(0,d.jsx)("div",{className:"flex flex-col gap-2.5",children:a.rules.map(a=>(0,d.jsx)(k,{rule:a,onOpen:()=>{b(a.id)}},a.id))})]})]})]})}},40772:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>i});var d=c(88422),e=c(63959),f=c(51645),g=c.n(f),h=c(22434);function i({error:a,reset:b}){return(0,d.jsx)("div",{className:"px-8 pb-10 pt-7",children:(0,d.jsx)(e.Zp,{className:"mx-auto max-w-lg",children:(0,d.jsxs)(e.Wu,{className:"flex flex-col items-center gap-4 py-10 text-center",children:[(0,d.jsx)("span",{className:"flex size-11 items-center justify-center rounded-full bg-sev-critical-fill",children:(0,d.jsx)(h.rX,{"aria-hidden":!0,focusable:!1,className:"size-5 text-sev-critical-ink"})}),(0,d.jsxs)("div",{className:"flex flex-col gap-1.5",children:[(0,d.jsx)("h1",{className:"text-lg font-semibold text-text",children:"Something went wrong"}),(0,d.jsx)("p",{className:"text-sm text-text-2",children:"This page could not be rendered from the local store."}),a.digest&&(0,d.jsxs)("p",{className:"pt-1 font-mono text-xs text-text-3",children:["Error digest: ",a.digest]})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",onClick:b,children:"Try again"}),(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",asChild:!0,children:(0,d.jsx)(g(),{href:"/security",children:"Go to Security"})})]})]})})})}},41138:(a,b,c)=>{"use strict";c.d(b,{SessionDetailView:()=>p});var d=c(88422),e=c(63959),f=c(88391),g=c(6932),h=c(81604),i=c(22559),j=c(13848),k=c(56028),l=c(64129),m=c(55587),n=c(23373);function o({session:a,tokenReport:b,liveFindings:c,linkHref:o,toolHref:p}){let q=i.x[a.harness],r=(0,n.Tp)(a.tools),[s,t]=(0,f.useState)(!1);return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"shrink-0 border-b border-border px-5 py-4",children:[(0,d.jsxs)("div",{className:"flex items-start gap-3.5",children:[(0,d.jsx)(i.K,{id:a.harness,size:40}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5",children:[(0,d.jsx)("span",{className:"font-display text-lg font-semibold text-text",children:a.title}),(0,d.jsx)(k.UD,{status:a.status})]}),(0,d.jsxs)("div",{className:"mt-1 flex flex-wrap items-center gap-2 text-ui text-text-3",children:[q.label," \xb7 ",n.Ay[a.harness],(0,d.jsx)("span",{className:"text-text-3",children:"\xb7"}),(0,d.jsx)("span",{className:"font-mono",children:a.id})]})]}),(0,d.jsx)("div",{className:"flex gap-1",children:(0,d.jsx)(e.$n,{variant:"ghost",size:"sm",title:"Export session data as JSON","aria-label":"Export session data as JSON",onClick:()=>{!function(a){if("undefined"==typeof document||"function"!=typeof URL.createObjectURL)return;let b=new Blob([JSON.stringify(a,null,2)],{type:"application/json"}),c=URL.createObjectURL(b),d=document.createElement("a");d.href=c,d.download=`session-${a.id.slice(0,12)}.json`,document.body.appendChild(d),d.click(),d.remove(),URL.revokeObjectURL(c)}(a)},children:(0,d.jsx)(h.s3,{"aria-hidden":!0,focusable:!1,className:"size-4"})})})]}),(0,d.jsxs)("div",{className:"mt-4 grid 2xl:grid-cols-4 grid-cols-3 gap-x-4 gap-y-3.5 max-h-44 overflow-y-auto",children:[(0,d.jsx)(g.p,{label:"Working dir",children:(0,d.jsx)("span",{className:"font-mono break-all",children:a.cwd})}),(0,d.jsx)(g.p,{label:"Branch",children:(0,d.jsx)(k.Lw,{items:a.branches,mono:!0})}),(0,d.jsx)(g.p,{label:"Model",children:(0,d.jsx)(k.Lw,{items:a.models,mono:!0})}),(0,d.jsxs)(g.p,{label:"Started",children:[(0,m.rw)(a.startedAt)," \xb7 ",(0,m.nt)(a.startedAt)]}),(0,d.jsx)(g.p,{label:"Duration",children:(0,m.vV)(a.startedAt,a.endedAt,a.status)}),(0,d.jsx)(g.p,{label:"Turns",children:a.turns}),(0,d.jsx)(g.p,{label:"Findings",children:a.findings>0||c?(0,d.jsxs)("span",{className:"inline-flex flex-wrap items-center gap-x-1.5",children:[a.findings>0&&(0,d.jsxs)("span",{className:"font-semibold text-sev-critical-ink",title:"Detection firings across this session's transcript — the same value fires once per event it appears in",children:[a.findings," triggered"]}),a.findings>0&&c&&(0,d.jsx)("span",{className:"text-text-3",children:"\xb7"}),c&&(0,d.jsxs)("a",{href:c.href,className:"inline-flex items-center gap-0.5 font-semibold text-sev-critical-ink underline-offset-2 hover:underline",title:"Unique findings recorded by live enforcement — open in Findings",children:[c.count," enforced live",(0,d.jsx)(h.Qq,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]})]}):(0,d.jsx)("span",{className:"text-ok-ink",children:"None"})}),(0,d.jsx)(g.p,{label:"Egress",children:a.shares>0?`${String(a.shares)} destinations`:"None"})]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-wrap items-center gap-5 border-b border-border bg-surface-2 px-5 py-3",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3.5",children:[(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),(0,d.jsx)("b",{className:"font-semibold tabular-nums",children:(0,m.Sk)(a.tokens.inputTokens)}),(0,d.jsx)("span",{className:"text-text-3",children:"in"})]}),(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.ZL,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),(0,d.jsx)("b",{className:"font-semibold tabular-nums",children:(0,m.Sk)(a.tokens.outputTokens)}),(0,d.jsx)("span",{className:"text-text-3",children:"out"})]}),(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)(h.DQ,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-primary"}),(0,d.jsxs)("b",{className:"font-semibold tabular-nums text-primary",children:[(0,m.fz)(a.tokens),"%"]}),(0,d.jsx)("span",{className:"text-text-3",children:"cache"})]}),b&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-ui",children:[(0,d.jsx)("b",{className:"font-semibold tabular-nums text-text",children:(0,m.xd)(b.estimatedCostUsd??0,b.costIsPartial)}),(0,d.jsx)("span",{className:"text-text-3",children:"est. cost"})]})]}),(0,d.jsx)("span",{className:"h-5 w-px bg-border"}),(0,d.jsxs)("div",{className:"flex flex-1 flex-wrap items-center gap-2 max-h-22 overflow-y-auto",children:[(0,d.jsxs)("span",{className:"text-xs font-semibold text-text-3",children:[(0,n.ni)(a.tools)," tool calls"]}),r.map(a=>(0,d.jsx)(k.zn,{name:a.name,n:a.n,...p?{href:p(a.name)}:{}},a.name))]})]}),b&&b.rollups.length>1&&(0,d.jsxs)("div",{className:"flex shrink-0 flex-wrap items-center gap-2 border-b border-border bg-surface-2 px-5 py-2.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Cost by model"}),b.rollups.map(a=>(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 rounded-full border border-border bg-surface py-0.5 px-2 text-xs text-text-2",children:[(0,d.jsx)("span",{className:"font-mono text-text",children:a.model}),(0,d.jsx)("span",{className:"tabular-nums text-text-3",children:(0,m.Sk)(a.totalTokens)}),(0,d.jsx)("span",{className:"tabular-nums text-text",children:null!==a.estimatedCostUsd?(0,m.UK)(a.estimatedCostUsd):"—"})]},`${a.provider} ${a.model}`))]}),(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto px-5 py-4.5",children:[(0,d.jsxs)("div",{className:"mb-4 flex items-center gap-2 text-label font-semibold uppercase tracking-wider text-text-3",children:[s?"Raw events":"Audit log",(0,d.jsx)("span",{className:"text-text-3",children:"\xb7"}),(0,d.jsxs)("span",{className:"font-mono text-label font-medium normal-case tracking-normal text-text-3",children:[a.events.length," events"]})]}),s?a.events.length>0?(0,d.jsx)("pre",{className:"overflow-x-auto rounded-lg border border-border bg-surface-2 p-3 text-label leading-relaxed text-text-2",children:JSON.stringify(a.events,null,2)}):(0,d.jsx)(j.A,{message:"No events recorded for this session yet"}):(0,d.jsx)(l.i,{events:a.events,...o?{linkHref:o}:{}})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-2 border-t border-border px-5 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(h.k3,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),(0,d.jsx)("span",{className:"font-mono",children:"Source: ~/.claude/audit.log"}),(0,d.jsxs)(e.$n,{variant:"link",tone:"primary",className:"ml-auto text-ui",onClick:()=>{t(a=>!a)},children:[(0,d.jsx)(h.kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),s?"View timeline":"View raw events"]})]})]})}function p({session:a,isLoading:b,error:c,tokenReport:f,liveFindings:g,linkHref:h,toolHref:i}){return c?(0,d.jsx)("div",{className:"grid h-full place-items-center p-6",children:(0,d.jsx)(j.r,{message:c})}):b&&!a?(0,d.jsxs)("div",{className:"flex h-full flex-col gap-4 p-5","aria-busy":!0,children:[(0,d.jsx)(e.EA,{className:"h-10 w-2/3"}),(0,d.jsx)(e.EA,{className:"h-24 w-full"}),(0,d.jsx)(e.EA,{className:"h-12 w-full"}),(0,d.jsx)(e.EA,{className:"h-40 w-full"})]}):a?(0,d.jsx)(o,{session:a,tokenReport:f??null,liveFindings:g??null,...h?{linkHref:h}:{},...i?{toolHref:i}:{}}):(0,d.jsx)("div",{className:"grid h-full place-items-center p-6",children:(0,d.jsx)(j.A,{message:"Select a session to view its audit timeline"})})}},41640:(a,b,c)=>{"use strict";c.d(b,{AppShell:()=>D});var d=c(88422),e=c(63959),f=c(51645),g=c.n(f),h=c(93776),i=c(22434),j=c(3353),k=c(88391);let l=["light","dark","system"],m="system",n="aka-theme",o="(prefers-color-scheme: dark)";function p(a){return"string"==typeof a&&l.includes(a)}let q=null;function r(){if(null!==q)return q;try{let a=window.localStorage.getItem(n);return p(a)?a:m}catch{return m}}let s=new Set;function t(a){s.add(a);let b=b=>{(null===b.key||b.key===n)&&(q=null,a())};return window.addEventListener("storage",b),()=>{s.delete(a),window.removeEventListener("storage",b)}}function u(){return window.matchMedia(o).matches}function v(a){let b=window.matchMedia(o);return b.addEventListener("change",a),()=>{b.removeEventListener("change",a)}}function w(){return m}function x(){return!1}let y={light:"Light",dark:"Dark",system:"System"};function z({className:a}){return(0,d.jsxs)("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":!0,focusable:!1,className:a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"4"}),(0,d.jsx)("path",{d:"M12 2v2M12 20v2M4.93 4.93l1.41 1.41M17.66 17.66l1.41 1.41M2 12h2M20 12h2M6.34 17.66l-1.41 1.41M19.07 4.93l-1.41 1.41"})]})}function A({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79Z"})})}function B(){let a=(0,k.useSyncExternalStore)(t,r,w),b=(0,k.useSyncExternalStore)(v,u,x),c="system"===a?b?"dark":"light":a;return(0,d.jsxs)(e.rI,{children:[(0,d.jsx)(e.ty,{asChild:!0,children:(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon","aria-label":`Theme: ${y[a]}`,children:(0,d.jsx)("dark"===c?A:z,{className:"size-4"})})}),(0,d.jsx)(e.SQ,{align:"end",children:(0,d.jsx)(e.Hr,{value:a,onValueChange:a=>{if(p(a)){try{window.localStorage.setItem(n,a),q=null}catch{q=a}for(let a of s)a()}},children:l.map(a=>(0,d.jsx)(e.Ht,{value:a,children:y[a]},a))})})]})}let C=[{label:"Security",icon:i.Zu,href:"/security"},{label:"Findings",icon:i.rX,href:"/findings"},{label:"Inventory",icon:i.mL,href:"/inventory"},{label:"Data Shares",icon:i._G,href:"/data-shares"},{label:"Activity",icon:i.np,href:"/activity"},{label:"Detections",icon:i.kp,href:"/detections"},{label:"Policies",icon:i.iB,href:"/policies"},{label:"Exceptions",icon:i.RY,href:"/exceptions"},{label:"Vault",icon:i.XA,href:"/vault"},{label:"Scan",icon:i.WI,href:"/scan"},{label:"Updates",icon:i.fN,href:"/updates"},{label:"Settings",icon:i.Ze,href:"/settings"}];function D({children:a}){let b=(0,h.usePathname)();return(0,d.jsxs)("div",{className:"flex h-screen overflow-hidden bg-canvas",children:[(0,d.jsx)(E,{pathname:b}),(0,d.jsxs)("div",{className:"relative flex min-w-0 flex-1 flex-col",children:[(0,d.jsx)(j.p,{}),(0,d.jsx)(G,{}),(0,d.jsx)("main",{className:"flex-1 overflow-y-auto",children:a})]})]})}function E({pathname:a}){return(0,d.jsxs)("aside",{className:"flex w-62 flex-col border-r border-border bg-surface shrink-0",children:[(0,d.jsx)("div",{className:"flex h-16 items-center border-b border-text/6 px-5",children:(0,d.jsx)(i.j4,{"aria-label":"AKA",className:"h-8 w-auto text-mark-fg"})}),(0,d.jsx)("nav",{className:"flex flex-1 flex-col gap-0.5 overflow-y-auto px-3 py-3.5",children:C.map(b=>(0,d.jsx)(F,{item:b,active:void 0!==b.href&&(a===b.href||a.startsWith(`${b.href}/`))},b.label))})]})}function F({item:a,active:b}){let c=a.icon,f=(0,e.cn)("flex w-full items-center gap-3 rounded-lg px-3 h-10 text-left text-sm group font-medium transition-colors cursor-pointer",b?"bg-primary-tint text-primary font-semibold":"text-text-2 hover:bg-surface-2 hover:text-text"),h=(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 shrink-0",b?"text-primary":"text-text-3 group-hover:text-text-2")}),(0,d.jsx)("span",{className:"flex-1",children:a.label})]});return a.href?(0,d.jsx)(g(),{href:a.href,"aria-current":b?"page":void 0,className:f,children:h}):(0,d.jsx)("button",{type:"button","aria-current":b?"page":void 0,className:f,children:h})}function G(){return(0,d.jsx)("header",{className:"flex items-center gap-4 border-b border-border bg-surface px-6 h-16",children:(0,d.jsx)("div",{className:"ml-auto flex items-center gap-2",children:(0,d.jsx)(B,{})})})}},42282:(a,b,c)=>{"use strict";c.d(b,{AC:()=>k,AJ:()=>n,As:()=>o,EmptyState:()=>i,Kh:()=>q,TJ:()=>s,Vx:()=>m,kx:()=>l,wn:()=>j,yk:()=>r});var d=c(88422),e=c(63959),f=c(56633),g=c(88378);function h({order:a,meta:b,value:c,onChange:f}){return(0,d.jsx)("span",{className:"inline-flex",onClick:a=>{a.stopPropagation()},children:(0,d.jsx)(e.Iz,{value:c,onValueChange:a=>{a&&f(a)},children:a.map(a=>{let f=b[a],h=a===c;return(0,d.jsx)(e.tR,{value:a,title:f.label,className:(0,e.cn)("size-7 flex-none gap-0 px-0 py-0","data-[state=on]:bg-transparent data-[state=on]:text-current data-[state=on]:shadow-none",h?(0,e.cn)(f.fg,f.bg):"text-text-3 hover:text-text-2"),children:(0,d.jsx)(g.m,{name:f.icon})},a)})})})}function i({message:a,icon:b="list",className:c}){return(0,d.jsxs)("div",{className:(0,e.cn)("flex items-center gap-2.5 rounded-lg border border-dashed border-border-strong px-3 py-3.5 text-text-3",c),children:[(0,d.jsx)(g.m,{name:b,className:"size-4 shrink-0"}),(0,d.jsx)("span",{className:"text-xs",children:a})]})}function j({label:a,children:b}){return(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-2 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),b]})}function k({order:a,meta:b,value:c,onChange:f,accentOf:h}){return(0,d.jsx)("div",{className:"flex flex-col gap-2",children:a.map(a=>{let i=b[a],j=a===c;return(0,d.jsxs)("button",{type:"button",onClick:()=>{f(a)},className:(0,e.cn)("flex items-center gap-3 rounded-lg border px-3 py-2.5 text-left cursor-pointer",j?(0,e.cn)(i.bg,"border-current",i.fg):"border-border bg-surface"),children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-8 shrink-0 place-items-center rounded-lg",j?"bg-surface":"bg-surface-2",i.fg),children:(0,d.jsx)(g.m,{name:i.icon,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:(0,e.cn)("text-sm font-semibold",j?i.fg:"text-text"),children:i.label}),(0,d.jsx)("div",{className:"mt-0.5 text-xs text-text-2",children:i.desc})]}),(0,d.jsx)("span",{className:(0,e.cn)("grid size-4.5 shrink-0 place-items-center rounded-full border-[1.5px]",j?(0,e.cn)("border-current text-on-accent",h(i)):"border-border-strong"),children:j&&(0,d.jsx)(g.m,{name:"check",className:"size-3"})})]},a)})})}function l({value:a,onChange:b}){return(0,d.jsx)(h,{order:f.IF,meta:f.Pe,value:a,onChange:b})}function m({value:a}){return(0,d.jsx)("span",{className:(0,e.cn)("min-w-23 whitespace-nowrap text-xs font-semibold",f.Pe[a].fg),children:f.Pe[a].label})}function n({counts:a,className:b}){let c=a.total||1;return(0,d.jsx)("span",{className:(0,e.cn)("flex h-1.5 w-30 overflow-hidden rounded-full bg-surface-3",b),children:f.IF.map(b=>{let e=a[b]/c*100;return e>0?(0,d.jsx)("span",{className:f.Pe[b].bar,style:{width:`${String(e)}%`}},b):null})})}function o({value:a}){let b=f.ZY[a];return(0,d.jsxs)(e.Ex,{variant:b.tone,children:[(0,d.jsx)(g.m,{name:b.icon,className:"size-3"}),b.label]})}function p({flag:a,mini:b}){let c=f.lx[a];return(0,d.jsxs)(e.Ex,{variant:c.tone,children:[(0,d.jsx)(g.m,{name:c.icon,className:b?"size-2.5":"size-3"}),b?c.short:c.label]})}function q({flags:a,mini:b}){return 0===a.length?b?null:(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-xs font-semibold text-ok-ink",children:[(0,d.jsx)(g.m,{name:"check-circle",className:"size-3.5"})," OK"]}):(0,d.jsx)("span",{className:"inline-flex flex-wrap items-center gap-1.5",children:a.map(a=>(0,d.jsx)(p,{flag:a,mini:b},a))})}function r({v:a}){return"public"===a?(0,d.jsxs)(e.Ex,{variant:"success",children:[(0,d.jsx)(g.m,{name:"globe",className:"size-3"})," Public"]}):(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(g.m,{name:"lock",className:"size-3"})," Private"]})}function s({origin:a}){let b=f.Gb[a];return(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(g.m,{name:b.icon,className:"size-3"})," ",b.short]})}},43780:(a,b,c)=>{"use strict";c.d(b,{NeedsReviewStripView:()=>i});var d=c(88422),e=c(63959),f=c(81604),g=c(15936),h=c(35729);function i({items:a,open:b,onToggle:c,onReview:i}){return 0===a.length?null:(0,d.jsxs)("div",{className:"mb-3.5 overflow-hidden rounded-xl border border-sev-critical-fill bg-sev-critical-fill",children:[(0,d.jsxs)("button",{type:"button",onClick:c,"aria-expanded":b,className:"flex w-full cursor-pointer items-center gap-2.5 px-3.5 py-3 text-left",children:[(0,d.jsx)("span",{className:"grid size-6.5 shrink-0 place-items-center rounded-md bg-sev-critical-ink text-on-accent",children:(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-4"})}),(0,d.jsx)("span",{className:"text-sm font-semibold text-text",children:"Needs review"}),(0,d.jsx)("span",{className:"rounded-full bg-sev-critical-ink px-2 text-xs py-0.5 font-bold text-on-accent",children:a.length}),(0,d.jsx)("span",{className:"text-xs text-text-2",children:"Raw IPs, plaintext transfers & unverified domains"}),(0,d.jsx)(f.D3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("ml-auto size-4.5 text-text-3 transition-transform",!b&&"-rotate-90")})]}),b&&(0,d.jsx)("div",{className:"flex flex-col gap-1.5 px-3 pb-3",children:a.map(a=>(0,d.jsxs)("div",{className:"flex items-center gap-3 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)(g.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:30}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("text-xs font-semibold text-text","ip"===a.kind&&"font-mono"),children:a.name}),(0,d.jsx)(g.HD,{cls:a.topDataClass})]}),(0,d.jsxs)("div",{className:"mt-1.5 flex items-center gap-1.5 text-label text-sev-critical-ink",children:[(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),(0,h.ZX)(a.review.reasons)]})]}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:[a.callSiteCount," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.$n,{onClick:()=>{i(a.id)},variant:"ghost",tone:"primary",size:"sm",children:"Review"})]},a.id))})]})}},44361:(a,b,c)=>{"use strict";c.d(b,{T:()=>i,_:()=>j});var d=c(88422),e=c(63959),f=c(81604),g=c(76812);let h="rounded-full border-transparent px-2.5 text-xs [&_svg]:size-3.5";function i({action:a}){let b=g.Lp[a],c=b.icon;return(0,d.jsx)(e.vw,{icon:(0,d.jsx)(c,{}),className:(0,e.cn)(h,b.className),children:b.label})}function j({aggregateAction:a}){return a?(0,d.jsx)(i,{action:a}):(0,d.jsx)(e.vw,{icon:(0,d.jsx)(f.mL,{}),className:(0,e.cn)(h,"bg-surface-3 text-text-2"),children:"Mixed"})}},46691:(a,b,c)=>{"use strict";c.d(b,{DataShareDetailView:()=>n});var d=c(88422),e=c(63959),f=c(4513),g=c(6932),h=c(81604),i=c(15936),j=c(35729);function k({st:a}){return(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-surface p-3",children:[(0,d.jsxs)("div",{className:"mb-1.5 flex items-center gap-2",children:[(0,d.jsx)(h.SY,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-primary"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text",children:a.project}),a.vendored?(0,d.jsx)("span",{className:"ml-auto",children:(0,d.jsx)(e.Ex,{variant:"high",children:"Vendored"})}):a.dynamic&&(0,d.jsx)("span",{className:"ml-auto",children:(0,d.jsxs)(e.Ex,{variant:"default",children:[(0,d.jsx)(h.cZ,{"aria-hidden":!0,focusable:!1,className:"size-2.5"}),"Dynamic"]})})]}),(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[a.file,":",(0,d.jsx)("b",{className:"text-text-2",children:a.line})]}),(0,d.jsxs)("div",{className:"overflow-x-auto whitespace-pre rounded-md bg-ink px-2.5 py-2 font-mono text-xs leading-relaxed text-white mt-0.5",children:[(0,d.jsxs)("span",{className:"text-code-muted",children:[a.file.split("/").pop(),":",a.line,"  "]}),a.snippet]})]})}function l({d:a,onPick:b}){let c=j.pN[a.trust].icon,f=a.endpoints.reduce((a,b)=>a+b.callSiteCount,0);return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:44}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:(0,e.cn)("text-lg font-semibold text-text","ip"===a.kind?"font-mono":"font-display"),children:a.name}),(0,d.jsxs)("div",{className:"mt-0.5 text-xs text-text-3",children:[a.category," \xb7 ",a.endpoints.length," endpoints \xb7 ",f," call sites"]})]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,d.jsx)(i.xB,{trust:a.trust}),a.transports.map(a=>(0,d.jsx)(i.eV,{transport:a},a))]}),(null!==a.note||a.network?.geo!=null)&&(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(c,{"aria-hidden":!0,focusable:!1,className:"mt-0.5 size-4 shrink-0 text-text-2"}),(0,d.jsxs)("div",{className:"text-xs leading-normal text-text-2",children:[a.network?.geo!=null&&(0,d.jsxs)("div",{children:[(0,d.jsx)("b",{className:"text-text",children:"Resolves to "}),a.network.geo,null!=a.network.ptr?" \xb7 "+a.network.ptr:""]}),null!=a.note&&(0,d.jsx)("div",{className:a.network?.geo!=null?"mt-1":"",children:a.note})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Endpoints"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:a.endpoints.map(a=>(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a.id)},className:"flex w-full cursor-pointer items-center gap-2.5 rounded-lg border border-border bg-surface px-3 py-2.5 text-left hover:bg-surface-2",children:[(0,d.jsx)(i.kX,{method:a.method}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)(i.UH,{url:a.url}),(0,d.jsxs)("div",{className:"mt-1 flex items-center gap-2",children:[(0,d.jsx)(i.eV,{transport:a.transport,plain:!0}),(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["\xb7 ",a.callSiteCount," call",1===a.callSiteCount?"":"s"]})]})]}),(0,d.jsx)(h.vK,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0 text-text-3"})]},a.id))})]})]})}function m({d:a,ep:b,onBack:c}){return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)("div",{children:(0,d.jsxs)(e.$n,{onClick:c,size:"sm",variant:"link",tone:"primary",children:[(0,d.jsx)(h.YJ,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),"Back to destination"]})}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2.5",children:[(0,d.jsx)(i.kX,{method:b.method}),(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host,size:22}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.name})]}),(0,d.jsx)("div",{className:"rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:(0,d.jsx)(i.UH,{url:b.url,big:!0})})]}),b.template&&(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-primary-tint px-3 py-2.5",children:[(0,d.jsx)(h.cZ,{"aria-hidden":!0,focusable:!1,className:"mt-0.5 size-4 shrink-0 text-primary"}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-0.5 text-xs font-semibold text-text",children:"Templated URL"}),(0,d.jsxs)("div",{className:"text-xs leading-normal text-text-2",children:["Built at runtime — the"," ",(0,d.jsxs)("span",{className:"rounded bg-primary-tint px-1 font-mono font-semibold text-primary",children:["$","{…}"]})," ","segments vary per request, so individual generated URLs aren’t itemized."]})]})]}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(g.p,{label:"Method",children:b.method}),(0,d.jsx)(g.p,{label:"Transport",children:(0,d.jsx)(i.eV,{transport:b.transport,plain:!0})}),(0,d.jsx)(g.p,{label:"Data classification",children:(0,d.jsx)("span",{className:"inline-flex",children:(0,d.jsx)(i.HD,{cls:b.dataClass})})}),(0,d.jsx)(g.p,{label:"Last seen",children:(0,f.K)(b.lastSeen)})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Call sites"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:b.sites.map(a=>(0,d.jsx)(k,{st:a},a.id))})]})]})}function n({destination:a,endpoint:b,onPick:c,onBack:f,onSetDecision:g,isSettingDecision:i}){let k="blocked"===a.status;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsx)("header",{className:"flex items-center gap-2.5 border-b border-border px-4.5 py-4 pr-12",children:(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 text-xs font-semibold text-text-3",children:[(0,d.jsx)(h._G,{"aria-hidden":!0,focusable:!1,className:"size-4"}),b?"Endpoint":"Destination"]})}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-4 overflow-y-auto p-4.5",children:b?(0,d.jsx)(m,{d:a,ep:b,onBack:f}):(0,d.jsx)(l,{d:a,onPick:c})}),(0,d.jsxs)("footer",{className:"flex flex-col gap-2 border-t border-border p-3.5",children:[(0,d.jsxs)("div",{className:"flex gap-2",children:[(0,d.jsxs)(e.$n,{variant:"outline",className:"flex-1",children:[(0,d.jsx)(h.iB,{"aria-hidden":!0,focusable:!1}),"Add policy"]}),k?(0,d.jsxs)(e.$n,{variant:"outline",className:"flex-1 border-ok-fill text-ok-ink hover:bg-ok-fill",disabled:i,onClick:()=>{g("allow")},children:[(0,d.jsx)(h.Sr,{"aria-hidden":!0,focusable:!1}),"Allow egress"]}):(0,d.jsxs)(e.$n,{variant:"solid",tone:"danger",className:"flex-1",disabled:i,onClick:()=>{g("block")},children:[(0,d.jsx)(h.pD,{"aria-hidden":!0,focusable:!1}),"Block egress"]})]}),a.isCustom&&(0,d.jsxs)(e.$n,{variant:"ghost",size:"sm",tone:"neutral",className:"self-center text-xs text-text-3",disabled:i,onClick:()=>{g(null)},children:["Reset to default (",j.pN[a.trust].label,")"]})]})]})}},47325:(a,b,c)=>{"use strict";c.d(b,{ROTATE_CONFIRMATION:()=>h,RotateKeyDialog:()=>i});var d=c(88422),e=c(63959),f=c(88391),g=c(72060);let h="rotate";function i({open:a,onOpenChange:b,activePermanent:c,approvableBlocked:i,keyVersion:j,onConfirm:k,busy:l,error:m}){let[n,o]=(0,f.useState)(""),p=(0,g.y6)(i);return(0,d.jsx)(e.lG,{open:a,onOpenChange:a=>{a||o(""),b(a)},children:(0,d.jsxs)(e.Cf,{children:[(0,d.jsxs)(e.c7,{children:[(0,d.jsx)(e.L3,{children:"Rotate the fingerprint key"}),(0,d.jsxs)(e.rr,{children:["Rotation mints a fresh key",null!==j&&` (v${String(j)} → v${String(j+1)})`," and"," ",(0,d.jsx)("strong",{children:"invalidates every existing exception"})," — grants cannot be re-keyed and simply stop matching. They remain listed for audit."]})]}),(0,d.jsxs)(e.R4,{children:[c.length>0&&(0,d.jsxs)("div",{className:"rounded-lg border border-sev-high-fill bg-sev-high-fill p-3",children:[(0,d.jsx)("div",{className:"mb-2 text-label font-semibold uppercase tracking-wider text-sev-high-ink",children:"Active permanent grants that will stop applying"}),(0,d.jsx)("ul",{className:"flex flex-col gap-1",children:c.map(a=>(0,d.jsxs)("li",{className:"font-mono text-xs text-text-2",children:[a.ruleId," \xb7 ",a.maskedValue]},a.id))})]}),i>0?(0,d.jsxs)("div",{className:"rounded-lg border border-sev-high-fill bg-sev-high-fill p-3",children:[(0,d.jsx)("div",{className:"mb-2 text-label font-semibold uppercase tracking-wider text-sev-high-ink",children:"Blocked detections that will stop being approvable"}),(0,d.jsx)("p",{className:"text-xs text-text-2",children:p})]}):(0,d.jsx)("p",{className:"text-xs text-text-3",children:p}),(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:["Type"," ",(0,d.jsxs)("span",{className:"font-mono normal-case tracking-normal",children:["“",h,"”"]})," ","to confirm"]}),(0,d.jsx)(e.pd,{value:n,onChange:a=>{o(a.target.value)},autoComplete:"off",className:"font-mono"})]}),m&&(0,d.jsx)("p",{className:"text-xs text-sev-critical-ink",children:m})]}),(0,d.jsxs)(e.Es,{children:[(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:()=>{b(!1)},children:"Cancel"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"danger",size:"sm",disabled:n!==h||l,onClick:()=>{k(n)},children:l?"Rotating…":"Rotate key"})]})]})})}},48695:(a,b,c)=>{"use strict";c.d(b,{Jy:()=>g,QT:()=>f,hn:()=>e,sp:()=>d.spO,sr:()=>h});var d=c(26273);let e=[{value:"7d",label:"Last 7 days"},{value:"30d",label:"Last 30 days"},{value:"3m",label:"Last 3 months"},{value:"6m",label:"Last 6 months"}];function f(a){return e.find(b=>b.value===a)?.label??a}let g=[{value:"30m",label:"Last 30 minutes"},{value:"1h",label:"Last hour"},{value:"4h",label:"Last 4 hours"},{value:"24h",label:"Last 24 hours"}],h={"30m":"the last 30 minutes","1h":"the last hour","4h":"the last 4 hours","24h":"the last 24 hours"}},48771:(a,b,c)=>{"use strict";c.d(b,{BlockedWindowSelect:()=>h});var d=c(88422),e=c(63959),f=c(48695),g=c(81604);function h({value:a,onChange:b}){let c=f.Jy.find(b=>b.value===a)?.label??a;return(0,d.jsxs)(e.rI,{children:[(0,d.jsx)(e.ty,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",tone:"neutral",size:"sm",children:[(0,d.jsx)(g.CT,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"}),c,(0,d.jsx)(g.D3,{"aria-hidden":!0,focusable:!1,className:"size-3.5 text-text-3"})]})}),(0,d.jsx)(e.SQ,{align:"end",className:"w-40",children:(0,d.jsx)(e.Hr,{value:a,onValueChange:a=>{b(a)},children:f.Jy.map(a=>(0,d.jsx)(e.Ht,{value:a.value,children:a.label},a.value))})})]})}},49361:(a,b,c)=>{"use strict";c.d(b,{AddExceptionForm:()=>h});var d=c(88422),e=c(63959),f=c(88391),g=c(29893);function h({rules:a,onSubmit:b,busy:c,error:h}){let[i,j]=(0,f.useState)(""),[k,l]=(0,f.useState)(""),[m,n]=(0,f.useState)(null),[o,p]=(0,f.useState)(""),[q,r]=(0,f.useState)(""),s="permanent"===m,t=""!==i&&""!==k&&null!==m&&""!==o.trim()&&(!s||q===k);return(0,d.jsxs)("div",{className:"flex max-w-xl flex-col gap-4 rounded-xl border border-border bg-surface p-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Detection rule"}),(0,d.jsxs)(e.l6,{value:i,onValueChange:j,children:[(0,d.jsx)(e.bq,{children:(0,d.jsx)(e.yv,{placeholder:"Pick the rule this value matches"})}),(0,d.jsx)(e.gC,{children:a.map(a=>(0,d.jsx)(e.eb,{value:a.id,children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.id})},a.id))})]})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Value to pre-authorize"}),(0,d.jsx)(e.pd,{type:"password",autoComplete:"off",value:k,onChange:a=>{l(a.target.value)},placeholder:"Pasted once; stored only as a keyed fingerprint + masked preview",className:"font-mono"})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Scope — pick one"}),(0,d.jsx)(g.ScopePicker,{value:m,onChange:n})]}),s&&(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Retype the value to confirm a permanent grant"}),(0,d.jsx)(e.pd,{type:"password",autoComplete:"off",value:q,onChange:a=>{r(a.target.value)},className:"font-mono"})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Reason (required — the audit trail)"}),(0,d.jsx)(e.pd,{value:o,onChange:a=>{p(a.target.value)},placeholder:"Why this value may pass"})]}),h&&(0,d.jsx)("p",{className:"text-xs text-sev-critical-ink",children:h}),(0,d.jsx)("div",{children:(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!t||c,onClick:()=>{m&&b({ruleId:i,value:k,scope:m,reason:o.trim(),...s?{confirmation:q}:{}})},children:c?"Verifying…":"Grant exception"})})]})}},50805:(a,b,c)=>{"use strict";c.d(b,{t:()=>i});var d=c(88422),e=c(63959),f=c(81604),g=c(10863),h=c(16614);function i({d:a,onOpenUpdate:b,onRecheck:c,unknownHint:i}){let j=(0,h.Xg)(a),k=a.update?.latestVersion??a.latestVersion??"";return(0,d.jsxs)("div",{className:"overflow-hidden rounded-xl border border-border shrink-0",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2.5 bg-surface-2 px-4 py-3 border-b border-border",children:[(0,d.jsx)(g.Ai,{origin:a.origin}),(0,d.jsx)(g.Jk,{publisher:a.publisher??a.namespace,kind:a.publisherKind??"user"}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsxs)("span",{className:"font-mono text-label text-text-2",children:["tracking v",a.version]})]}),"update-available"===j?(0,d.jsxs)("div",{className:"flex items-center gap-3 bg-sev-high-fill px-4 py-3",children:[(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-4.5 shrink-0 text-sev-high-ink"}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"text-sm font-semibold text-sev-high-ink",children:["Update available \xb7 v",k]}),(0,d.jsx)("div",{className:"mt-px text-xs leading-snug text-text-2",children:"A newer version is published upstream."})]}),b&&(0,d.jsx)(e.$n,{size:"sm",onClick:b,className:"shrink-0 bg-sev-high-ink text-on-accent hover:bg-sev-high-ink",children:"Update"})]}):"up-to-date"===j?(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-4 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(f.C1,{"aria-hidden":!0,focusable:!1,className:"size-4 text-ok-ink"}),"Up to date with upstream"]}):(0,d.jsxs)("div",{className:"flex items-center gap-2.5 px-4 py-2.5 text-xs text-text-3",children:[(0,d.jsx)(f.mo,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0"}),(0,d.jsxs)("span",{className:"min-w-0 flex-1",children:["Update status unknown",i?(0,d.jsxs)(d.Fragment,{children:[" — ",i]}):"."]}),c&&(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:c,children:"Check again"})]})]})}},54648:(a,b,c)=>{"use strict";c.d(b,{ActivityTokenUsageView:()=>l});var d=c(88422),e=c(63959),f=c(88391),g=c(81604),h=c(13848),i=c(55587);function j(){return(0,d.jsx)("span",{className:"grid size-8 shrink-0 place-items-center rounded-lg bg-primary-tint text-primary",children:(0,d.jsx)(g.Uy,{"aria-hidden":!0,focusable:!1,className:"size-4"})})}function k({summary:a}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Provider"}),(0,d.jsx)(e.nd,{children:"Model"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Input"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Output"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Cache"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Total"}),(0,d.jsx)(e.nd,{className:"text-right",children:"Cost"})]})}),(0,d.jsx)(e.BF,{children:a.models.map(a=>(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nA,{className:"text-text-2",children:a.provider}),(0,d.jsx)(e.nA,{className:"font-mono text-text",children:a.model}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.inputTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.outputTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text-2",children:(0,i.Sk)(a.cacheTokens)}),(0,d.jsx)(e.nA,{className:"text-right font-semibold tabular-nums text-text",children:(0,i.Sk)(a.totalTokens)}),(0,d.jsx)(e.nA,{className:"text-right tabular-nums text-text",children:null!==a.estimatedCostUsd?(0,i.UK)(a.estimatedCostUsd):"—"})]},`${a.provider} ${a.model}`))})]})}function l({summary:a,isLoading:b,error:c,rangeLabel:l}){let[m,n]=(0,f.useState)(!1);if(c)return(0,d.jsx)(e.Zp,{className:"mb-3.5 shrink-0 px-5 py-3.5 shadow-sm",children:(0,d.jsx)(h.r,{message:c})});if(b&&!a)return(0,d.jsxs)(e.Zp,{className:"mb-3.5 flex shrink-0 items-center gap-2.5 px-5 py-3.5 shadow-sm","aria-busy":!0,children:[(0,d.jsx)(e.EA,{className:"size-8 shrink-0 rounded-lg"}),(0,d.jsx)(e.EA,{className:"h-5 w-64"})]});if(!(null!==a&&a.models.length>0))return(0,d.jsxs)(e.Zp,{className:"mb-3.5 flex shrink-0 items-center gap-2.5 px-5 py-3.5 shadow-sm",children:[(0,d.jsx)(j,{}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("div",{className:"text-ui font-semibold text-text",children:"Token usage"}),(0,d.jsx)("div",{className:"text-xs text-text-3",children:"No token usage recorded yet — sessions are reconciled as you work."})]})]});let o=`${String(a.sessionCount)} session${1===a.sessionCount?"":"s"}`,p=(0,i.xd)(a.estimatedCostUsd,a.costIsPartial);return(0,d.jsxs)(e.Zp,{className:"mb-3.5 shrink-0 overflow-hidden shadow-sm",children:[(0,d.jsxs)("button",{type:"button",onClick:()=>{n(a=>!a)},"aria-expanded":m,"aria-controls":"activity-token-usage-body",className:"flex w-full cursor-pointer items-center gap-2.5 px-5 py-3.5 text-left transition-colors hover:bg-surface-2",children:[(0,d.jsx)(j,{}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-baseline gap-x-2 gap-y-0.5",children:[(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:"Token usage"}),l&&(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["\xb7 ",l]})]}),(0,d.jsxs)("div",{className:"mt-0.5 flex flex-wrap items-center gap-x-2.5 gap-y-0.5 text-xs text-text-3",children:[(0,d.jsx)("span",{children:o}),(0,d.jsx)("span",{className:"text-text-3",children:"\xb7"}),(0,d.jsxs)("span",{className:"font-semibold tabular-nums text-text-2",children:[(0,i.Sk)(a.totalTokens)," tokens"]}),(0,d.jsx)("span",{className:"text-text-3",children:"\xb7"}),(0,d.jsx)("span",{className:"font-semibold tabular-nums text-text-2",children:p})]})]}),(0,d.jsx)(g.D3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 shrink-0 text-text-3 transition-transform",m&&"rotate-180")})]}),m&&(0,d.jsxs)("div",{id:"activity-token-usage-body",className:"max-h-64 overflow-y-auto border-t border-border px-2 py-2",children:[(0,d.jsx)(k,{summary:a}),a.costIsPartial&&(0,d.jsx)("p",{className:"px-3 pb-1 pt-2 text-xs text-text-3",children:"— = unknown pricing (a local or non-Anthropic model); the cost total is a lower bound."})]})]})}},55587:(a,b,c)=>{"use strict";c.d(b,{Sk:()=>o,UK:()=>d.UKt,fz:()=>n,gE:()=>l,nt:()=>h,rw:()=>j,u3:()=>p,vV:()=>m,xd:()=>d.xdw});var d=c(26273);let e=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],f=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"];function g(a){return new Date(a.getFullYear(),a.getMonth(),a.getDate()).getTime()}function h(a,b=new Date){let c=new Date(a);if(Number.isNaN(c.getTime()))return"";let d=Math.round((g(b)-g(c))/864e5);return 0===d?"Today":1===d?"Yesterday":`${f[c.getDay()]??""}, ${e[c.getMonth()]??""} ${String(c.getDate())}`}let i=new Intl.DateTimeFormat("en-US",{hour:"numeric",minute:"2-digit",hour12:!0});function j(a){let b=Date.parse(a);return Number.isNaN(b)?"":i.format(b)}let k=new Intl.DateTimeFormat("en-US",{hour:"2-digit",minute:"2-digit",second:"2-digit",hourCycle:"h23"});function l(a){let b=Date.parse(a);return Number.isNaN(b)?"":k.format(b)}function m(a,b,c,d=Date.now()){let e=Date.parse(a);if(Number.isNaN(e))return"";let f=Math.max(0,Math.round(((b?Date.parse(b):d)-e)/6e4)),g=Math.floor(f/60),h=f%60,i=g>0?`${String(g)}h ${String(h)}m`:`${String(h)}m`;return"active"===c?`${i} \xb7 live`:i}function n(a){let b=a.cacheRead+a.inputTokens;return b>0?Math.round(100*a.cacheRead/b):0}function o(a){return(0,d.ap_)(a)}function p(a,b=new Date){let c=[];for(let d of a){let a=h(d.startedAt,b),e=c.find(b=>b.day===a);e||(e={day:a,items:[]},c.push(e)),e.items.push(d)}return c}},56028:(a,b,c)=>{"use strict";c.d(b,{JW:()=>i,Lw:()=>k,UD:()=>h,md:()=>g,zn:()=>j});var d=c(88422),e=c(63959),f=c(23373);function g({status:a}){return"active"===a?(0,d.jsxs)("span",{className:"relative flex size-2 shrink-0",title:"Live",children:[(0,d.jsx)("span",{className:"absolute inline-flex h-full w-full animate-ping rounded-full bg-ok opacity-75"}),(0,d.jsx)("span",{className:"relative inline-flex size-2 rounded-full bg-ok"})]}):(0,d.jsx)("span",{className:(0,e.cn)("size-1.5 shrink-0 rounded-full",f.nR[a].dot)})}function h({status:a}){let b=f.nR[a];return(0,d.jsxs)(e.Ex,{variant:b.badge,className:"h-6 gap-1.5",children:[(0,d.jsx)(g,{status:a}),b.label]})}function i({icon:a,children:b}){return(0,d.jsxs)("span",{className:"inline-flex items-center gap-1 whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)(a,{"aria-hidden":!0,focusable:!1,className:"size-3"}),b]})}function j({name:a,n:b,href:c}){let g=f.pS[a]??f.ek,h=(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(g,{"aria-hidden":!0,focusable:!1,className:"size-3 text-text-3"}),a,(0,d.jsx)("span",{className:"tabular-nums text-text",children:b})]}),i="inline-flex items-center gap-1.5 rounded-full border border-border bg-surface-2 py-0.5 px-2 text-xs font-semibold text-text-2";return c?(0,d.jsx)("a",{href:c,title:`Findings captured via ${a}`,className:(0,e.cn)(i,"transition-colors hover:bg-surface-3 hover:text-text"),children:h}):(0,d.jsx)("span",{className:i,children:h})}function k({items:a,mono:b=!1}){return(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.map(a=>(0,d.jsx)("span",{className:(0,e.cn)("rounded-md border border-border bg-surface-2 px-1.5 py-0.5 text-xs text-text",b&&"font-mono"),children:a},a))})}},56633:(a,b,c)=>{"use strict";c.d(b,{Cs:()=>r,Gb:()=>j,IF:()=>e,Pe:()=>d,TW:()=>n,WD:()=>k,ZY:()=>f,_t:()=>t,fd:()=>m,iL:()=>p,lx:()=>h,pA:()=>l,v7:()=>o,yx:()=>g,z:()=>s});let d={open:{label:"Any LLM",icon:"cloud",fg:"text-ok-ink",bg:"bg-ok-fill",bar:"bg-ok",accent:"bg-ok-ink",desc:"Allowed to any model — including public, consumer LLMs."},approved:{label:"Approved only",icon:"shield-check",fg:"text-primary",bg:"bg-primary-tint",bar:"bg-primary",accent:"bg-primary",desc:"Allowed only to approved, governed models."},blocked:{label:"No LLM",icon:"slash-circle",fg:"text-sev-critical-ink",bg:"bg-sev-critical-fill",bar:"bg-sev-critical",accent:"bg-sev-critical-ink",desc:"Never sent to any model. Blocked at the proxy."}},e=["open","approved","blocked"],f={"known-good":{label:"Known good",icon:"shield-check",tone:"success",fg:"text-ok-ink",bg:"bg-ok-fill",iconBg:"bg-ok-ink",desc:"Reviewed & allow-listed. Agents may call it freely."},risky:{label:"Risky",icon:"alert",tone:"high",fg:"text-sev-high-ink",bg:"bg-sev-high-fill",iconBg:"bg-sev-high-ink",desc:"Allowed, but reaches sensitive systems or external hosts. Use with care."},unapproved:{label:"Unapproved",icon:"x-circle",tone:"critical",fg:"text-sev-critical-ink",bg:"bg-sev-critical-fill",iconBg:"bg-sev-critical-ink",desc:"Not reviewed or explicitly denied — calls are blocked at the proxy."}},g=["known-good","risky","unapproved"],h={update:{label:"Update available",short:"Update",icon:"arrow-up",tone:"high"},stale:{label:"Stale",short:"Stale",icon:"clock",tone:"default"},conflict:{label:"Conflict",short:"Conflict",icon:"branch",tone:"critical"},unknown:{label:"Unverified",short:"Unverified",icon:"help",tone:"critical"},change:{label:"Changed",short:"Changed",icon:"edit",tone:"low"},untracked:{label:"Untracked",short:"Untracked",icon:"eye-off",tone:"high"},risk:{label:"Security risk",short:"Risk",icon:"alert",tone:"critical"},findings:{label:"Sensitive data",short:"Findings",icon:"alert",tone:"critical"}},i=["risk","conflict","unknown","change","untracked","update","stale"],j={source:{short:"Source",label:"First-party source code",icon:"code"},"public-dep":{short:"Public dep",label:"Public dependency \xb7 open source",icon:"cloud"},vendored:{short:"Vendored",label:"Vendored third-party",icon:"layers"},config:{short:"Config",label:"Configuration",icon:"settings"},data:{short:"Data",label:"Data \xb7 fixtures",icon:"database"},docs:{short:"Docs",label:"Documentation",icon:"book"},generated:{short:"Generated",label:"Generated artifact",icon:"bolt"}},k={type:"project",label:"Projects",icon:"repo",fg:"text-primary",bg:"bg-primary-tint"},l={skill:{type:"skill",label:"Skills",icon:"sparkles",fg:"text-violet-ink",bg:"bg-violet-fill"},mcp:{type:"mcp",label:"MCP servers",icon:"server",fg:"text-teal-ink",bg:"bg-teal-fill"},hook:{type:"hook",label:"Hooks",icon:"route",fg:"text-sev-low-ink",bg:"bg-sev-low-fill"},config:{type:"config",label:"Configuration",icon:"sliders",fg:"text-teal-ink",bg:"bg-surface-2"}},m=[k,l.skill,l.mcp,l.hook,l.config],n=a=>{let{icon:b,fg:c,bg:d}="project"===a?k:l[a];return{icon:b,fg:c,bg:d}};function o(a){return new Date(a).toLocaleString([],{month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"})}let p={block:{label:"Blocked",icon:"slash-circle",tone:"critical",fg:"text-sev-critical-ink",bg:"bg-sev-critical-fill"},redact:{label:"Redacted",icon:"redact",tone:"teal",fg:"text-teal-ink",bg:"bg-teal-fill"},warn:{label:"Warned",icon:"alert",tone:"high",fg:"text-sev-high-ink",bg:"bg-sev-high-fill"}},q={typescript:"#3178C6",javascript:"#F1E05A",rust:"#DEA584",python:"#3572A5",go:"#00ADD8",ruby:"#701516",java:"#B07219",hcl:"#844FBA",jupyter:"#DA5B0B","jupyter notebook":"#DA5B0B",mdx:"#1B1F24",markdown:"#083FA1",shell:"#89E051",c:"#555555","c++":"#F34B7D","c#":"#178600",php:"#4F5D95",swift:"#F05138",kotlin:"#A97BFF"};function r(a){return q[a.toLowerCase()]??"var(--color-border-strong)"}function s(a){let b={};return a.forEach(a=>{a.flags.forEach(a=>{b[a]=(b[a]??0)+1})}),i.filter(a=>b[a]).map(a=>({key:a,count:b[a]??0}))}function t(a,b){if("public"===a.visibility)return"Public repository — every file is allowed to any LLM by default.";if("public-dep"===b)return"Public, open-source dependency — allowed to any LLM by default, even inside a private repo.";let c="blocked"===a.policyDefault?"No LLM":"Approved only";return`Private repository. First-party files default to “${c}”. Adjust per file as needed.`}},57171:(a,b,c)=>{"use strict";c.d(b,{WorkspaceSettingsFormView:()=>q});var d=c(88422),e=c(26273),f=c(63959),g=c(88391),h=c(6932);let i=[{value:"redact",label:"Redact",description:"Lean toward replacing sensitive values before they reach the model (recommended)."},{value:"warn",label:"Warn only",description:"Lean toward surfacing detections rather than redacting them by default."}],j=[{value:"session-only",label:"Session only",description:"Only activity from after install is inspected (default — never assumed)."},{value:"full",label:"Full",description:"Pre-install surfaces (existing configs, history) may be scanned too. This grant covers reading them only — sending what the scan finds to the model API is the separate Model-judge consent below, which this one does not give. Switching back to Session only stops future scans; it cannot recall data already sent."}],k=[{value:"revoked",label:"Not granted",description:"The setup scan will not send findings to the model API (default — never assumed)."},{value:"granted",label:"Granted",description:"The setup scan may send each finding — its raw, unmasked value including any secret, plus about 120 characters of surrounding context on either side of it with any secrets in that window masked — to the model API to sort real leaks from noise."}],l=[{value:"off",label:"Off (default)",description:"Detected values keep being redacted irreversibly; nothing recoverable is stored."},{value:"on",label:"Vault & redact",description:"A detected value is replaced by a pointer, and an encrypted, recoverable copy is kept in the local vault under ~/.aka — this machine holds recoverable copies of detected secrets, encrypted at rest. The pointers written into files and transcripts show where each secret is used, and which places share the same secret, to anyone who can read those files. Switching back to Off stops new vaulting but does not erase what is already stored — purging the vault from the dashboard's Vault page is what erases it."}],m=[{value:"masked",label:"Masked badge (default)",description:"Pointers render as a masked badge (category and partial value). No raw value is resolved and nothing is written to the audit trail."},{value:"full",label:"Full reveal",description:"Pointers resolve to the real value on screen, capped at two per message and never inside code blocks or quotes. The risk is real: anything the model is induced to mention renders in plaintext where it can be shoulder-surfed, screen-shared, or copy-pasted onward. Every reveal is audited."},{value:"off",label:"Off",description:"Replies are not modified; pointers show as-is."}];function n(a){return a?"on":"off"}function o(a){return void 0!==a&&!(0,e.hds)(a)}function p({name:a,choices:b,value:c,onChange:e}){return(0,d.jsx)("div",{className:"flex flex-col gap-2",role:"radiogroup","aria-label":a,children:b.map(b=>(0,d.jsxs)("label",{className:(0,f.cn)("flex cursor-pointer items-start gap-3 rounded-lg border p-3 transition-colors",c===b.value?"border-primary bg-primary-tint":"border-border bg-surface hover:bg-surface-2"),children:[(0,d.jsx)("input",{type:"radio",name:a,checked:c===b.value,onChange:()=>{e(b.value)},className:"mt-1 accent-primary"}),(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"block text-sm font-semibold text-text",children:b.label}),(0,d.jsx)("span",{className:"mt-0.5 block text-xs text-text-2",children:b.description})]})]},b.value))})}function q({settings:a,onSave:b,busy:c,error:q,saved:r}){let[s,t]=(0,g.useState)(a.policy),[u,v]=(0,g.useState)(a.historicalAccess),w=(0,e.DLF)(a.modelJudgeConsent)?"granted":"revoked",[x,y]=(0,g.useState)(w),[z,A]=(0,g.useState)(n(a.vaultConsent)),[B,C]=(0,g.useState)(a.vaultInlineReveal),D=s!==a.policy||u!==a.historicalAccess||x!==w||z!==n(a.vaultConsent)||B!==a.vaultInlineReveal||"on"===z&&o(a.vaultConsent);return(0,d.jsxs)("div",{className:"flex max-w-4xl flex-col gap-6",children:[(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Sensitive-data handling"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Your default leaning for sensitive detections. What actually happens per detection is governed by the per-category Policies, not this global default."}),(0,d.jsx)(p,{name:"policy",choices:i,value:s,onChange:t})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Historical access"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Consent to inspect surfaces that existed before AKA was installed."}),(0,d.jsx)(p,{name:"historicalAccess",choices:j,value:u,onChange:v})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Model-judge consent"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"A separate consent from historical access: this governs whether the /aka:setup scan may send findings to the model API to sort real leaks from noise. Per finding that is the raw, unmasked value including any secret, about 120 characters of surrounding transcript text on either side of it, the rule, category, severity, masked value and confidence it was scored with, and a sequential counter the model echoes back. The file path is never sent, and any secrets in the surrounding context are masked before it goes. Revoking stops future scans; it cannot recall data already sent."}),(0,d.jsx)(p,{name:"modelJudgeConsent",choices:k,value:x,onChange:y})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Reversible secret vault"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"Whether redaction keeps a recoverable copy of what it removes. Off destroys detected values as it redacts them; Vault & redact keeps an encrypted copy on this machine."}),o(a.vaultConsent)?(0,d.jsx)("p",{className:"mb-3 text-xs text-sev-high-ink","data-slot":"vault-stale-notice",children:'Your grant was recorded against an older version of the vault — vaulting is paused until you re-consent. Saving with "Vault & redact" selected re-consents to the current version.'}):null,(0,d.jsx)(p,{name:"vaultConsent",choices:l,value:z,onChange:A})]}),(0,d.jsxs)("section",{className:"rounded-xl border border-border bg-surface p-5",children:[(0,d.jsx)(h.e,{children:"Inline reveal in the terminal"}),(0,d.jsx)("p",{className:"mb-3 text-xs text-text-3",children:"How a vault pointer renders inside Claude's on-screen replies. Display-only — the transcript and what the model sees always keep the pointer."}),(0,d.jsx)(p,{name:"vaultInlineReveal",choices:m,value:B,onChange:C})]}),(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(f.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!D||c,onClick:()=>{b({policy:s,historicalAccess:u,modelJudgeConsent:"granted"===x,vaultConsent:z,vaultInlineReveal:B})},children:c?"Saving…":"Save changes"}),r&&!D&&(0,d.jsx)("span",{className:"text-xs text-ok-ink",children:"Saved."}),q&&(0,d.jsx)("span",{className:"text-xs text-sev-critical-ink",children:q})]})]})}},57481:(a,b,c)=>{"use strict";c.d(b,{ApproveExceptionDialog:()=>h});var d=c(88422),e=c(63959),f=c(88391),g=c(29893);function h({entry:a,open:b,onOpenChange:c,onSubmit:h,busy:i,error:j}){let[k,l]=(0,f.useState)(null),[m,n]=(0,f.useState)(""),[o,p]=(0,f.useState)(""),q="permanent"===k,r=null!==a&&null!==k&&""!==m.trim()&&(!q||o===a.maskedValue);return(0,d.jsx)(e.lG,{open:b,onOpenChange:a=>{a||(l(null),n(""),p("")),c(a)},children:(0,d.jsxs)(e.Cf,{children:[(0,d.jsxs)(e.c7,{children:[(0,d.jsx)(e.L3,{children:"Approve blocked detection"}),(0,d.jsx)(e.rr,{children:"Grant an explicit, audited bypass for this exact value. Enforcement continues for every other value."})]}),(0,d.jsx)(e.R4,{children:a&&(0,d.jsxs)("div",{className:"flex flex-col gap-4",children:[(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-surface-2 p-3 text-xs",children:[(0,d.jsx)("div",{className:"font-mono font-semibold text-text",children:a.ruleId}),(0,d.jsx)("div",{className:"mt-1 font-mono text-text-2",children:a.maskedValue})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Scope — pick one"}),(0,d.jsx)(g.ScopePicker,{value:k,onChange:l})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Reason (required — the audit trail)"}),(0,d.jsx)(e.pd,{value:m,onChange:a=>{n(a.target.value)},placeholder:"Why this value may pass"})]}),q&&(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1.5 text-label font-semibold uppercase tracking-wider text-text-3",children:"Type the masked value to confirm a permanent grant"}),(0,d.jsx)(e.pd,{value:o,onChange:a=>{p(a.target.value)},placeholder:a.maskedValue,autoComplete:"off",className:"font-mono"})]}),j&&(0,d.jsx)("p",{className:"text-xs text-sev-critical-ink",children:j})]})}),(0,d.jsxs)(e.Es,{children:[(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"sm",onClick:()=>{c(!1)},children:"Cancel"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"primary",size:"sm",disabled:!r||i,onClick:()=>{a&&k&&h({reference:a.reference,scope:k,reason:m.trim(),...q?{confirmation:o}:{}})},children:i?"Granting…":"Grant exception"})]})]})})}},57704:(a,b,c)=>{"use strict";c.d(b,{AssetDetail:()=>k});var d=c(88422),e=c(63959),f=c(88391),g=c(42282),h=c(56633),i=c(88378);let j={skill:"Skill",mcp:"MCP server",hook:"Hook",config:"Configuration file"};function k({asset:a,onTrust:b,onClose:c}){let f="mcp"===a.type,k=a.trust,m=(0,h.TW)(a.type),n=j[a.type];return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-3.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-8.5 shrink-0 place-items-center rounded-lg",m.bg,m.fg),children:(0,d.jsx)(i.m,{name:m.icon,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-sm font-semibold text-text",title:a.name,children:a.name}),(0,d.jsx)("div",{className:"mt-px text-xs text-text-3",children:n})]}),c&&(0,d.jsx)(e.$n,{variant:"ghost",size:"icon","aria-label":"Back to harness",title:"Back to harness",onClick:c,children:(0,d.jsx)(i.m,{name:"x"})})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[f&&k&&(0,d.jsx)(g.As,{value:k}),(0,d.jsx)(g.Kh,{flags:a.flags})]}),a.description&&(0,d.jsx)("div",{className:"text-sm leading-relaxed text-text-2",children:a.description}),f&&k&&(0,d.jsx)(g.wn,{label:"Trust classification",children:(0,d.jsx)(g.AC,{order:h.yx,meta:h.ZY,value:k,onChange:b,accentOf:a=>a.iconBg})}),a.finding&&(0,d.jsx)(g.wn,{label:"Related finding",children:(0,d.jsxs)("button",{type:"button",className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-sev-critical-fill px-3 py-2.5 text-left",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-4 shrink-0 text-sev-critical-ink"}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:a.finding.title}),a.finding.note&&(0,d.jsx)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:a.finding.note})]}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}),(0,d.jsx)(g.wn,{label:"Details",children:(0,d.jsx)("div",{className:"grid grid-cols-2 gap-x-4 gap-y-3.5",children:Object.entries(a.meta).map(([a,b])=>(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-1 text-label font-semibold uppercase tracking-wider text-text-3",children:a}),(0,d.jsx)("div",{className:"wrap-break-word font-mono text-xs font-medium",children:String(b)})]},a))})}),f&&a.tools&&(0,d.jsx)(l,{tools:a.tools,blocked:"unapproved"===k}),(0,d.jsx)("div",{className:"flex flex-wrap gap-2",children:function(a,b){let c;if("skill"===a.type){let b="string"==typeof a.meta.Latest?a.meta.Latest:"";c=a.flags.includes("update")?[{key:"u",primary:!0,icon:"arrow-up",label:`Update to ${b}`.trim()},{key:"c",icon:"book",label:"Changelog"}]:[{key:"r",icon:"refresh",label:"Check for updates"}]}else c="mcp"===a.type?"unapproved"===b?[{key:"a",primary:!0,icon:"shield-check",label:"Approve & allow-list"},{key:"b",icon:"slash-circle",label:"Block server"}]:[{key:"v",icon:"eye",label:"View tools"},{key:"r",icon:"refresh",label:"Re-verify"}]:"hook"===a.type?a.flags.includes("conflict")?[{key:"r",primary:!0,icon:"branch",label:"Resolve run order"},{key:"d",icon:"eye-off",label:"Disable hook"}]:a.flags.includes("unknown")?[{key:"v",primary:!0,icon:"shield-check",label:"Review & verify"},{key:"b",icon:"slash-circle",label:"Block"}]:[{key:"v",icon:"eye",label:"View script"}]:a.flags.includes("risk")?[{key:"r",primary:!0,icon:"shield-check",label:"Review change"},{key:"d",icon:"swap",label:"View diff"}]:a.flags.length?[{key:"d",icon:"swap",label:"View diff"},{key:"m",icon:"check",label:"Mark reviewed"}]:[{key:"o",icon:"eye",label:"Open file"}];return c.map(a=>(0,d.jsxs)(e.$n,{variant:a.primary?"solid":"outline",tone:a.primary?"primary":"neutral",size:"sm",children:[(0,d.jsx)(i.m,{name:a.icon,className:"size-3.5"}),a.label]},a.key))}(a,k)})]})]})}function l({tools:a,blocked:b}){let[c,g]=(0,f.useState)(!1),h=c?a:a.slice(0,4);return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Exposed tools"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.length}),b&&(0,d.jsxs)("span",{className:"ml-auto inline-flex items-center gap-1.5 text-xs font-semibold text-sev-critical-ink",children:[(0,d.jsx)(i.m,{name:"slash-circle",className:"size-3"})," Calls blocked"]})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:h.map(a=>(0,d.jsxs)("div",{className:(0,e.cn)("flex items-start gap-2.5 rounded-lg border px-3 py-2.5",a.risk?"border-sev-high-fill bg-sev-high-fill":"border-border bg-surface",b&&"opacity-70"),children:[(0,d.jsx)("span",{className:(0,e.cn)("mt-px grid size-5.5 shrink-0 place-items-center rounded-md",a.risk?"bg-sev-high-ink text-on-accent":a.write?"bg-surface-2 text-text-2":"bg-teal-fill text-teal-ink"),children:(0,d.jsx)(i.m,{name:a.risk?"alert":a.write?"edit":"eye",className:"size-3"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-baseline gap-1.5",children:[(0,d.jsx)("span",{className:"font-mono text-xs font-semibold text-text",children:a.name}),(0,d.jsx)("span",{className:"font-mono text-xs text-text-3",children:a.signature}),a.write&&!a.risk&&(0,d.jsx)("span",{className:"rounded-full bg-surface-2 px-2 py-px text-xs font-semibold text-text-2",children:"write"})]}),(0,d.jsx)("div",{className:"mt-0.5 text-xs leading-relaxed text-text-2",children:a.description}),a.risk&&(0,d.jsxs)("div",{className:"mt-1 flex items-center gap-1.5 text-xs font-semibold text-sev-high-ink",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-3"})," ",a.risk]})]})]},a.name))}),a.length>4&&(0,d.jsxs)(e.$n,{variant:"ghost",tone:"primary",size:"sm",className:"mt-2 px-0",onClick:()=>{g(!c)},children:[(0,d.jsx)(i.m,{name:"chevron-down",className:(0,e.cn)("size-3.5 transition-transform",c&&"rotate-180")}),c?"Show fewer":`Show all ${String(a.length)} tools`]})]})}},59178:(a,b,c)=>{"use strict";c.d(b,{DETECTION_FILTER_TABS:()=>i,DetectionsListView:()=>k});var d=c(88422),e=c(63959),f=c(81604),g=c(10863),h=c(16614);let i=[["all","All"],["library","Library"],["updates","Updates"]];function j({d:a,sel:b,updateVersion:c,onClick:e}){return(0,d.jsx)("button",{type:"button",onClick:e,className:"w-full cursor-pointer rounded-lg px-3 py-2.5 text-left transition-colors "+(b?"bg-primary-tint":"hover:bg-surface-2"),children:(0,d.jsxs)("div",{className:"min-w-0 flex-1 flex flex-col gap-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 justify-between",children:[(0,d.jsxs)("div",{className:"flex items-center gap-1.5 min-w-0",children:[(0,d.jsx)("span",{title:a.enabled?"Enabled":"Disabled",className:"size-2 shrink-0 rounded-full "+(a.enabled?"bg-ok ring-3 ring-ok-fill":"bg-border-strong")}),(0,d.jsx)("span",{className:"truncate text-sm font-semibold text-text",title:a.name,children:a.name})]}),(0,d.jsxs)("div",{className:"font-mono text-xs text-text-3",children:["v",a.version]})]}),(0,d.jsxs)("div",{className:"flex items-center gap-1.5 justify-between",children:[(0,d.jsx)("span",{className:"font-mono text-xs text-text-3",children:a.id}),(0,d.jsxs)("span",{className:"text-xs text-text-3 shrink-0",children:[a.ruleCount," rule",1===a.ruleCount?"":"s"]})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-1.5 mt-1",children:[(0,d.jsx)(g.Ai,{origin:a.origin}),(0,d.jsx)(g.$F,{policy:a.policyId??h.tG}),c?(0,d.jsx)(g.Zp,{version:c}):null]})]})})}function k({items:a,counts:b,activeId:c,query:g,filter:h,onQueryChange:k,onFilterChange:l,onSelect:m,isLoading:n=!1,error:o=null,updatesById:p,filterTabs:q=i}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col overflow-hidden shadow-sm",children:[(0,d.jsxs)("div",{className:"border-b border-border p-3",children:[(0,d.jsxs)("div",{className:"relative",children:[(0,d.jsx)(f.WI,{"aria-hidden":!0,focusable:!1,className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{value:g,onChange:a=>{k(a.target.value)},spellCheck:!1,placeholder:"Search detections…",className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsx)("div",{className:"mt-2.5 flex flex-wrap gap-1.5",children:q.map(([a,c])=>{let e=h===a,g=b[a]??0,i="updates"===a&&g>0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{l(a)},className:"inline-flex h-7 items-center gap-1.5 cursor-pointer rounded-full border px-2.5 text-xs font-semibold "+(e?i?"border-sev-high bg-sev-high-fill text-sev-high-ink":"border-primary bg-primary-tint text-primary":i?"border-border text-sev-high-ink":"border-border bg-surface text-text-2"),children:[i&&(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-3"}),c,(0,d.jsx)("span",{className:"text-label font-bold opacity-70",children:g})]},a)})})]}),(0,d.jsx)("div",{className:"flex min-h-0 flex-1 flex-col gap-0.5 overflow-y-auto p-3",children:n?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-text-3",children:"Loading detections…"}):o?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-sev-critical-ink",children:o}):0===a.length?(0,d.jsx)("div",{className:"grid flex-1 place-items-center p-6 text-center text-xs text-text-3",children:g.trim()?`No detections match “${g.trim()}”`:"No detections in this view"}):a.map(a=>(0,d.jsx)(j,{d:a,sel:a.id===c,updateVersion:p?.get(a.id),onClick:()=>{m(a.id)}},a.id))})]})}},59492:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>g});var d=c(87472),e=c(78421),f=c(619);function g({children:a}){return(0,d.jsx)(f.NavigationTransitionProvider,{children:(0,d.jsx)(e.AppShell,{children:a})})}},59624:(a,b,c)=>{"use strict";c.d(b,{VaultInventoryView:()=>j});var d=c(88422),e=c(63959),f=c(4513),g=c(25663),h=c(3285);let i={occurrences:"min-w-[120px] whitespace-nowrap",firstSeen:"min-w-[110px] whitespace-nowrap",lastSeen:"min-w-[110px] whitespace-nowrap",grant:"min-w-[140px] whitespace-nowrap",action:"min-w-[120px] whitespace-nowrap"};function j({entries:a,onReveal:b,onRevoke:c,hasNextPage:f=!1,hasPreviousPage:g=!1,onNextPage:h,onPreviousPage:j,loadingNextPage:l=!1,pageStart:m,total:n}){let o=0===a.length;if(o&&!g&&!f)return(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface py-10 text-center text-sm text-text-3",children:"Nothing vaulted yet — values land here when a redact policy fires with vault consent granted."});let p=void 0!==b||void 0!==c;return(0,d.jsxs)("div",{className:"overflow-x-auto rounded-xl border border-border bg-surface p-4",children:[o?(0,d.jsx)("div",{className:"py-10 text-center text-sm text-text-3",children:"These rows moved while you were reading. Step back to see the rest."}):(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{children:"Value"}),(0,d.jsx)(e.nd,{className:i.occurrences,children:"Occurrences"}),(0,d.jsx)(e.nd,{className:i.firstSeen,children:"First seen"}),(0,d.jsx)(e.nd,{className:i.lastSeen,children:"Last seen"}),(0,d.jsx)(e.nd,{className:i.grant,children:"Grant"}),p?(0,d.jsx)(e.nd,{className:i.action,children:"Actions"}):null]})}),(0,d.jsx)(e.BF,{children:a.map(a=>(0,d.jsx)(k,{entry:a,hasActions:p,onReveal:b,onRevoke:c},a.pointerId))})]}),h?(0,d.jsxs)(e.dK,{children:[(0,d.jsx)(e.Eb,{disabled:!g||l,onClick:j}),(0,d.jsx)(e.D2,{children:void 0===n||void 0===m?`${String(a.length)} shown`:o?`0 of ${String(n)} values`:`${String(m)}–${String(m+a.length-1)} of ${String(n)} values`}),(0,d.jsx)(e.WA,{disabled:!f||l,loading:l,onClick:h})]}):f&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the first ",a.length," values — the rest are in the store."]})]})}function k({entry:a,hasActions:b,onReveal:c,onRevoke:j}){let k=a.revealGrantId;return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nA,{children:(0,d.jsx)(g.Y,{value:null,descriptor:a})}),(0,d.jsx)(e.nA,{className:i.occurrences,children:(0,d.jsx)("span",{className:"text-xs text-text-2",children:String(a.occurrences)})}),(0,d.jsx)(e.nA,{className:i.firstSeen,children:(0,d.jsx)("span",{className:"text-xs text-text-2",children:(0,f.K)(a.firstSeen)})}),(0,d.jsx)(e.nA,{className:i.lastSeen,children:(0,d.jsx)("span",{className:"text-xs text-text-2",children:(0,f.K)(a.lastSeen)})}),(0,d.jsx)(e.nA,{className:i.grant,children:null===k?null:(0,d.jsx)(h.$$,{})}),b?(0,d.jsx)(e.nA,{className:i.action,children:(0,d.jsxs)("span",{className:"inline-flex items-center gap-2",children:[void 0===c?null:(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",size:"sm",onClick:()=>{c(a.pointerId)},children:"Reveal"}),null!==k&&void 0!==j?(0,d.jsx)(e.$n,{variant:"ghost",tone:"danger",size:"sm",onClick:()=>{j(k)},children:"Revoke grant"}):null]})}):null]}),a.sightings.length>0?(0,d.jsx)(e.Hj,{children:(0,d.jsx)(e.nA,{colSpan:b?6:5,className:"py-2",children:(0,d.jsxs)("details",{children:[(0,d.jsxs)("summary",{className:"cursor-pointer text-xs font-medium text-text-2",children:["Written to ",String(a.sightings.length)," ",1===a.sightings.length?"location":"locations"," — anyone who can read them sees the correlation"]}),(0,d.jsx)("ul",{className:"mt-2 flex flex-col gap-2",children:a.sightings.map(a=>(0,d.jsxs)("li",{className:"grid grid-cols-[1fr_110px_100px] items-center gap-2 text-xs text-text-2",children:[(0,d.jsx)("code",{className:"break-all font-mono",children:a.location}),(0,d.jsx)("div",{children:(0,d.jsx)(h.Ec,{kind:a.kind})}),(0,d.jsx)("span",{className:"text-text-3",children:(0,f.K)(a.lastSeen)})]},`${a.kind}:${a.location}`))})]})})}):null]})}},59903:(a,b,c)=>{"use strict";c.d(b,{UpdateModal:()=>h});var d=c(88422),e=c(63959),f=c(81604),g=c(10863);function h({det:a,isUpdating:b,onClose:c,onConfirm:h}){let i=a?a.update?.latestVersion??a.latestVersion??a.version:"",j=a?.update?.latestRuleCount,k=!!a&&i!==a.version;return(0,d.jsx)(e.lG,{open:!!a,onOpenChange:a=>{a||c()},children:(0,d.jsx)(e.Cf,{className:"w-155 max-w-[96vw]","aria-describedby":void 0,children:a&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.L3,{className:"sr-only",children:["Update \xb7 ",a.name]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"grid size-9.5 shrink-0 place-items-center rounded-lg bg-sev-high-fill text-sev-high-ink",children:(0,d.jsx)(f.Kp,{"aria-hidden":!0,focusable:!1,className:"size-5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"font-display text-base font-semibold text-text",children:["Update “",a.name,"”"]}),(0,d.jsxs)("div",{className:"text-xs text-text-3",children:["From the detection library \xb7 ",a.publisher??a.namespace]})]}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon",onClick:c,"aria-label":"Close",className:"size-8 text-text-3",children:(0,d.jsx)(f.uv,{"aria-hidden":!0,focusable:!1})})]}),(0,d.jsxs)("div",{className:"flex flex-col gap-5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)("span",{className:"rounded-lg border border-border bg-surface-2 px-3 py-1.5 font-mono text-sm font-semibold text-text-2",children:k?`v${a.version}`:`${String(a.ruleCount)} rules`}),(0,d.jsx)(f.fl,{"aria-hidden":!0,focusable:!1,className:"size-4 text-text-3"}),(0,d.jsx)("span",{className:"rounded-lg border border-sev-high bg-sev-high-fill px-3 py-1.5 font-mono text-sm font-bold text-sev-high-ink",children:k?`v${i}`:`${String(j??a.ruleCount)} rules`}),(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsx)(g.Jk,{publisher:a.publisher??a.namespace,kind:a.publisherKind??"user"})]}),(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-ok bg-ok-fill px-3 py-2.5",children:[(0,d.jsx)(f.C1,{"aria-hidden":!0,focusable:!1,className:"size-4 shrink-0 text-ok-ink"}),(0,d.jsx)("div",{className:"text-sm text-text-2",children:"Updates are never applied automatically — your enabled state and policy assignment are preserved."})]})]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-2.5 border-t border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"flex-1"}),(0,d.jsx)(e.$n,{variant:"outline",tone:"neutral",onClick:c,children:"Cancel"}),(0,d.jsxs)(e.$n,{variant:"solid",tone:"primary",disabled:b,onClick:()=>{h(a.id)},children:[(0,d.jsx)(f.s3,{"aria-hidden":!0,focusable:!1,className:"size-4"}),b?"Updating…":k?`Update to v${i}`:"Update rules"]})]})]})})})}},63408:(a,b,c)=>{Promise.resolve().then(c.bind(c,27694))},63667:(a,b,c)=>{"use strict";c.r(b),c.d(b,{AreaChart:()=>p,Donut:()=>l,Sparkline:()=>m,useMeasuredWidth:()=>o});var d=c(88422),e=c(9672),f=c(56805),g=c(44071),h=c(39966),i=c(9960),j=c(88391),k=c(21172);function l({segments:a,size:b=120,thickness:c=16,children:g}){let h=b/2,i=(0,e.A)().value(a=>a.value).sort(null)(a),j=(0,f.A)().innerRadius(h-c).outerRadius(h);return(0,d.jsxs)("div",{className:"relative shrink-0",style:{width:b,height:b},children:[(0,d.jsx)("div",{"aria-hidden":!0,children:(0,d.jsx)("svg",{width:b,height:b,children:(0,d.jsx)("g",{transform:`translate(${String(h)},${String(h)})`,children:i.map(a=>(0,d.jsx)("path",{d:j(a)??void 0,fill:a.data.color,stroke:"none"},a.data.label))})})}),g&&(0,d.jsx)("div",{className:"absolute inset-0 grid place-items-center text-center",children:g})]})}function m({data:a,color:b,height:c=34,fill:e=!0,strokeWidth:f=2,labels:l,formatValue:m}){let n=`spark-${(0,j.useId)().replace(/:/g,"")}`,[o,p]=(0,j.useState)(null),q=Math.max(...a),r=Math.min(...a),s=q-r||1,t=b=>a.length<=1?50:2+b/(a.length-1)*96,u=a=>c-2-(a-r)/s*(c-4),v=a.map((a,b)=>[t(b),u(a)]),w=(0,g.A)().x(a=>a[0]).y(a=>a[1]).curve(h.G)(v)??void 0,x=(0,i.A)().x(a=>a[0]).y0(c).y1(a=>a[1]).curve(h.G)(v)??void 0,y=(0,d.jsxs)("svg",{"aria-hidden":!0,width:"100%",height:c,viewBox:`0 0 ${String(100)} ${String(c)}`,preserveAspectRatio:"none",className:"block",children:[e&&(0,d.jsx)("defs",{children:(0,d.jsxs)("linearGradient",{id:n,x1:"0",y1:"0",x2:"0",y2:"1",children:[(0,d.jsx)("stop",{offset:"0%",stopColor:b,stopOpacity:.18}),(0,d.jsx)("stop",{offset:"100%",stopColor:b,stopOpacity:0})]})}),e&&(0,d.jsx)("path",{d:x,fill:`url(#${n})`,stroke:"none"}),(0,d.jsx)("path",{d:w,fill:"none",stroke:b,strokeWidth:f,strokeLinecap:"round",strokeLinejoin:"round",vectorEffect:"non-scaling-stroke"})]});if(!(l?.length===a.length&&a.length>0))return y;let z=null===o?void 0:a[o],A=null===o?void 0:l[o];return(0,d.jsxs)("div",{"aria-hidden":!0,className:"relative",onMouseMove:b=>{let c=b.currentTarget.getBoundingClientRect();if(0===c.width)return;let d=(b.clientX-c.left)/c.width*100,e=a.length<=1?0:Math.round((d-2)/96*(a.length-1));p(Math.min(a.length-1,Math.max(0,e)))},onMouseLeave:()=>{p(null)},children:[y,null!==o&&void 0!==z&&void 0!==A&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)("span",{className:"pointer-events-none absolute size-2 -translate-x-1/2 -translate-y-1/2 rounded-full border border-surface/80",style:{left:`${String(t(o)/100*100)}%`,top:u(z),background:b}}),(0,d.jsxs)("div",{className:"pointer-events-none absolute z-10 -translate-x-1/2 whitespace-nowrap",style:{left:`clamp(36px, ${String(t(o)/100*100)}%, calc(100% - 36px))`,bottom:c+6,borderRadius:8,border:`1px solid ${k.l.border}`,background:k.l.surface,padding:"4px 8px",fontSize:12,boxShadow:"0 4px 12px rgb(0 0 0 / 0.08)"},children:[(0,d.jsx)("div",{style:{color:k.l.text3,fontSize:11},children:A}),(0,d.jsx)("div",{className:"font-semibold",style:{color:k.l.text2},children:(m??String)(z)})]})]})]})}let n={top:6,right:6,bottom:0,left:6};function o(){let a=(0,j.useRef)(null),[b,c]=(0,j.useState)(0);return[a,b]}function p({data:a,series:b,height:c=160,valueFormat:e=a=>String(a)}){let f=(0,j.useId)().replace(/:/g,""),[l,m]=o(),[p,q]=(0,j.useState)(null),r=Math.max(0,m-n.left-n.right),s=Math.max(0,c-n.top-n.bottom),t=[];for(let c of a)for(let a of b){let b=c[a.key];"number"==typeof b&&t.push(b)}let u=Math.max(1,...t),v=b=>a.length<=1?0:b/(a.length-1)*r,w=a=>s-a/u*s,x=null===p?null:a[p];return(0,d.jsxs)("div",{ref:l,"aria-hidden":!0,className:"relative",style:{height:c},children:[m>0&&(0,d.jsxs)("svg",{width:m,height:c,onMouseMove:function(b){if(!l.current||0===a.length)return;let c=l.current.getBoundingClientRect(),d=b.clientX-c.left-n.left,e=a.length<=1?0:r/(a.length-1),f=0===e?0:Math.round(d/e);q(Math.min(a.length-1,Math.max(0,f)))},onMouseLeave:()=>{q(null)},children:[(0,d.jsx)("defs",{children:b.map(a=>(0,d.jsxs)("linearGradient",{id:`${f}-${a.key}`,x1:"0",y1:"0",x2:"0",y2:"1",children:[(0,d.jsx)("stop",{offset:"0%",stopColor:a.color,stopOpacity:.16}),(0,d.jsx)("stop",{offset:"100%",stopColor:a.color,stopOpacity:0})]},a.key))}),(0,d.jsxs)("g",{transform:`translate(${String(n.left)},${String(n.top)})`,children:[[0,.25,.5,.75,1].map(a=>(0,d.jsx)("line",{x1:0,x2:r,y1:s*a,y2:s*a,stroke:k.l.border,strokeOpacity:.6},a)),b.map(b=>{let c=(0,i.A)().defined(a=>null!==a[b.key]).x((a,b)=>v(b)).y0(w(0)).y1(a=>w(a[b.key]??0)).curve(h.G)(a)??void 0,e=(0,g.A)().defined(a=>null!==a[b.key]).x((a,b)=>v(b)).y(a=>w(a[b.key]??0)).curve(h.G)(a)??void 0;return(0,d.jsxs)("g",{children:[(0,d.jsx)("path",{d:c,fill:`url(#${f}-${b.key})`,stroke:"none"}),(0,d.jsx)("path",{d:e,fill:"none",stroke:b.color,strokeWidth:2})]},b.key)}),x&&null!==p&&(0,d.jsxs)("g",{children:[(0,d.jsx)("line",{x1:v(p),x2:v(p),y1:0,y2:s,stroke:k.l.border}),b.map(a=>{let b=x[a.key];return null===b?null:(0,d.jsx)("circle",{cx:v(p),cy:w(b),r:3,fill:a.color},a.key)})]})]})]}),x&&null!==p&&(0,d.jsxs)("div",{className:"pointer-events-none absolute top-0 -translate-x-1/2",style:{left:Math.min(m-60,Math.max(60,n.left+v(p))),borderRadius:8,border:`1px solid ${k.l.border}`,background:k.l.surface,padding:"6px 8px",fontSize:12,boxShadow:"0 4px 12px rgb(0 0 0 / 0.08)"},children:[(0,d.jsx)("div",{style:{color:k.l.text3,fontSize:11,marginBottom:4},children:x.label}),b.map(a=>{let b=x[a.key];return null===b?null:(0,d.jsxs)("div",{className:"flex items-center gap-1.5",style:{color:k.l.text2},children:[(0,d.jsx)("span",{className:"size-2 rounded-xs",style:{background:a.color,display:"inline-block"}}),(0,d.jsx)("span",{className:"font-semibold",children:e(b,a.key)})]},a.key)})]})]})}},63959:(a,b,c)=>{"use strict";c.d(b,{Ex:()=>j,$n:()=>o,Zp:()=>p,X9:()=>v,Wu:()=>w,BT:()=>u,aR:()=>q,Lc:()=>s,AG:()=>r,ZB:()=>t,lG:()=>y,R4:()=>B,Cf:()=>z,rr:()=>D,Es:()=>E,c7:()=>A,L3:()=>C,rI:()=>H,hO:()=>N,SQ:()=>L,Hr:()=>J,Ht:()=>M,mB:()=>O,ty:()=>I,pd:()=>P,dK:()=>Q,WA:()=>S,Eb:()=>R,D2:()=>T,AM:()=>X,hl:()=>Z,Wv:()=>Y,Iz:()=>_,tR:()=>aa,l6:()=>ac,gC:()=>ah,eb:()=>ai,bq:()=>ag,yv:()=>ad,Pt:()=>l,cj:()=>al,h:()=>am,Fm:()=>an,qp:()=>ao,EA:()=>ap,dO:()=>ar,XI:()=>as,BF:()=>au,nA:()=>ax,nd:()=>aw,A0:()=>at,Hj:()=>av,tU:()=>az,av:()=>aC,j7:()=>aA,Xi:()=>aB,vw:()=>aD,cn:()=>h});var d=c(88422),e=c(37885),f=c(42927);let g=(0,c(7403).zu)({extend:{classGroups:{"font-size":[{text:["ui","label"]}]}}});function h(...a){return g((0,f.$)(a))}let i=(0,e.F)("inline-flex items-center gap-1.5 whitespace-nowrap rounded-full px-2 py-0.5 text-xs font-semibold",{variants:{variant:{default:"bg-surface-3 text-text-2",outline:"border border-border text-text-2",critical:"bg-sev-critical-fill text-sev-critical-ink",high:"bg-sev-high-fill text-sev-high-ink",medium:"bg-sev-medium-fill text-sev-medium-ink",low:"bg-sev-low-fill text-sev-low-ink",success:"bg-ok-fill text-ok-ink",teal:"bg-teal-fill text-teal-ink",primary:"bg-primary-tint text-primary"}},defaultVariants:{variant:"default"}});function j({variant:a,className:b,children:c}){return(0,d.jsx)("span",{className:h(i({variant:a}),b),children:c})}let k={critical:"bg-sev-critical",high:"bg-sev-high",medium:"bg-sev-medium",low:"bg-sev-low"};function l({severity:a}){return(0,d.jsxs)(j,{variant:a,className:"h-6",children:[(0,d.jsx)("span",{className:h("size-1.5 rounded-full",k[a])}),(0,d.jsx)("span",{className:"capitalize",children:a})]})}var m=c(78788);let n=(0,e.F)("inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg font-medium transition-colors cursor-pointer disabled:pointer-events-none disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40 [&_svg]:size-4 [&_svg]:shrink-0",{variants:{variant:{solid:"",outline:"border",ghost:"",link:""},tone:{primary:"",neutral:"",danger:""},size:{sm:"h-8 px-3 text-xs",md:"h-9 px-4 text-sm",icon:"size-9"}},compoundVariants:[{variant:"solid",tone:"primary",class:"bg-primary-solid text-text-inv hover:bg-primary-hover"},{variant:"solid",tone:"neutral",class:"bg-surface-3 text-text hover:bg-border-strong"},{variant:"solid",tone:"danger",class:"bg-sev-critical-ink text-on-accent hover:bg-sev-critical-hover"},{variant:"outline",tone:"primary",class:"border-primary text-primary hover:bg-primary-tint"},{variant:"outline",tone:"neutral",class:"border-border bg-surface text-text hover:bg-surface-2"},{variant:"outline",tone:"danger",class:"border-sev-critical text-sev-critical-ink hover:bg-sev-critical-fill"},{variant:"ghost",tone:"primary",class:"text-primary hover:bg-primary-tint"},{variant:"ghost",tone:"neutral",class:"text-text-2 hover:bg-surface-2 hover:text-text"},{variant:"ghost",tone:"danger",class:"text-sev-critical-ink hover:bg-sev-critical-fill"},{variant:"link",class:"h-auto gap-1 rounded-sm p-0 align-baseline font-semibold underline-offset-4 [&_svg]:size-3.5"},{variant:"link",tone:"primary",class:"text-primary hover:underline"},{variant:"link",tone:"neutral",class:"text-text-2 hover:text-text hover:underline"},{variant:"link",tone:"danger",class:"text-sev-critical-ink hover:underline"}],defaultVariants:{variant:"solid",tone:"neutral",size:"md"}});function o({className:a,variant:b,tone:c,size:e,asChild:f=!1,type:g,...i}){let j=f?m.DX:"button";return(0,d.jsx)(j,{className:h(n({variant:b,tone:c,size:e}),a),...f?{}:{type:g??"button"},...i})}function p({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card",className:h("rounded-xl border border-border bg-surface",a),...b})}function q({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-header",className:h("flex items-center gap-3 px-5 pt-5",a),...b})}function r({className:a,...b}){return(0,d.jsx)("span",{"data-slot":"card-icon",className:h("flex size-7.5 shrink-0 items-center justify-center rounded-lg bg-surface-2 text-text-2",a),...b})}function s({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-heading",className:h("min-w-0",a),...b})}function t({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-title",className:h("text-sm font-semibold text-text",a),...b})}function u({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-description",className:h("text-xs text-text-3",a),...b})}function v({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-action",className:h("ml-auto flex items-center",a),...b})}function w({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-content",className:h("p-5",a),...b})}var x=c(34221);let y=x.Root;function z({className:a,children:b,...c}){return(0,d.jsxs)(x.Portal,{children:[(0,d.jsx)(x.Overlay,{"data-slot":"dialog-overlay",className:"fixed inset-0 z-50 bg-ink/40"}),(0,d.jsx)(x.Content,{"data-slot":"dialog-content",className:h("fixed left-1/2 top-1/2 z-50 flex max-h-[92vh] w-full max-w-lg -translate-x-1/2 -translate-y-1/2 flex-col overflow-hidden rounded-2xl border border-border bg-surface shadow-lg outline-none",a),...c,children:b})]})}function A({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-header",className:h("flex shrink-0 flex-col gap-1 border-b border-border px-5 py-4",a),...b})}function B({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-body",className:h("flex min-h-0 flex-1 flex-col gap-3 overflow-y-auto px-5 py-4",a),...b})}function C({className:a,...b}){return(0,d.jsx)(x.Title,{"data-slot":"dialog-title",className:h("font-display text-base font-semibold text-text",a),...b})}function D({className:a,...b}){return(0,d.jsx)(x.Description,{"data-slot":"dialog-description",className:h("text-xs text-text-3",a),...b})}function E({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"dialog-footer",className:h("flex shrink-0 items-center gap-2.5 border-t border-border px-5 py-3.5",a),...b})}x.Trigger,x.Close;var F=c(17679);function G({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"M13 4.5 6.5 11 3 7.5",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}let H=F.Root,I=F.Trigger;F.Group;let J=F.RadioGroup,K="flex cursor-pointer select-none items-center gap-2 rounded-md px-2.5 py-1.5 text-sm text-text-2 outline-none focus:bg-surface-2 focus:text-text data-[disabled]:pointer-events-none data-[disabled]:opacity-50";function L({className:a,sideOffset:b=6,...c}){return(0,d.jsx)(F.Portal,{children:(0,d.jsx)(F.Content,{sideOffset:b,className:h("z-50 min-w-32 overflow-hidden rounded-lg border border-border bg-surface p-1 shadow-lg",a),...c})})}function M({className:a,children:b,...c}){return(0,d.jsxs)(F.RadioItem,{className:h(K,"data-[state=checked]:font-semibold data-[state=checked]:text-text",a),...c,children:[(0,d.jsx)("span",{className:"flex-1",children:b}),(0,d.jsx)(F.ItemIndicator,{children:(0,d.jsx)(G,{className:"size-4 text-primary"})})]})}function N({className:a,children:b,...c}){return(0,d.jsxs)(F.CheckboxItem,{className:h(K,"group data-[state=checked]:font-semibold data-[state=checked]:text-text",a),...c,children:[(0,d.jsx)("span",{className:"grid size-4 shrink-0 place-items-center rounded-[5px] border border-border-strong text-text-inv transition-colors group-data-[state=checked]:border-primary-solid group-data-[state=checked]:bg-primary-solid",children:(0,d.jsx)(F.ItemIndicator,{children:(0,d.jsx)(G,{className:"size-3"})})}),(0,d.jsx)("span",{className:"flex-1",children:b})]})}function O({className:a,...b}){return(0,d.jsx)(F.Separator,{className:h("-mx-1 my-1 h-px bg-border",a),...b})}function P({className:a,type:b="text",...c}){return(0,d.jsx)("input",{type:b,"data-slot":"input",className:h("h-9 w-full rounded-lg border border-border bg-surface px-3 text-sm text-text","truncate placeholder:text-text-3 transition-colors","focus:border-primary focus:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","disabled:cursor-not-allowed disabled:opacity-50",a),...c})}function Q({className:a,...b}){return(0,d.jsx)("nav",{"data-slot":"pagination",role:"navigation","aria-label":"Pagination",className:h("flex items-center justify-center gap-3 py-4",a),...b})}function R({children:a,...b}){return(0,d.jsxs)(o,{"data-slot":"pagination-previous",variant:"outline",tone:"neutral",size:"sm",...b,children:[(0,d.jsx)(U,{"aria-hidden":!0,focusable:!1}),a??"Previous"]})}function S({loading:a=!1,children:b,disabled:c=!1,...e}){return(0,d.jsxs)(o,{"data-slot":"pagination-next",variant:"outline",tone:"neutral",size:"sm",disabled:c||a,...e,children:[b??(a?"Loading…":"Next"),a?(0,d.jsxs)("svg",{"aria-hidden":!0,focusable:!1,viewBox:"0 0 16 16",className:"size-3.5 animate-spin",fill:"none",children:[(0,d.jsx)("circle",{cx:"8",cy:"8",r:"6",stroke:"currentColor",strokeOpacity:"0.25",strokeWidth:"2"}),(0,d.jsx)("path",{d:"M14 8a6 6 0 0 0-6-6",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round"})]}):(0,d.jsx)(V,{"aria-hidden":!0,focusable:!1})]})}function T({className:a,...b}){return(0,d.jsx)("p",{"data-slot":"pagination-status","aria-live":"polite",className:h("text-xs text-text-3",a),...b})}function U(a){return(0,d.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round",...a,children:(0,d.jsx)("path",{d:"m15 6-6 6 6 6"})})}function V(a){return(0,d.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round",...a,children:(0,d.jsx)("path",{d:"m9 6 6 6-6 6"})})}var W=c(79946);let X=W.Root,Y=W.Trigger;function Z({className:a,align:b="start",sideOffset:c=6,collisionPadding:e=8,...f}){return(0,d.jsx)(W.Portal,{children:(0,d.jsx)(W.Content,{align:b,sideOffset:c,collisionPadding:e,className:h("z-50 max-h-(--radix-popover-content-available-height) min-w-32 overflow-y-auto rounded-lg border border-border bg-surface p-1 shadow-lg outline-none",a),...f})})}W.Close,W.Anchor;var $=c(54663);function _({className:a,...b}){return(0,d.jsx)($.Root,{type:"single","data-slot":"segmented-control",className:h("inline-flex items-center gap-0.5 rounded-lg border border-border bg-surface-2 p-0.5",a),...b})}function aa({className:a,...b}){return(0,d.jsx)($.Item,{"data-slot":"segmented-control-item",className:h("inline-flex flex-1 items-center justify-center gap-1.5 whitespace-nowrap rounded-md px-3 py-1.5 text-xs font-semibold text-text-3 transition-colors cursor-pointer","hover:text-text-2 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","data-[state=on]:bg-surface data-[state=on]:text-text data-[state=on]:shadow-sm","[&_svg]:size-4 [&_svg]:shrink-0",a),...b})}var ab=c(26265);let ac=ab.Root;ab.Group;let ad=ab.Value;function ae({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"m4 6 4 4 4-4",stroke:"currentColor",strokeWidth:"1.6",strokeLinecap:"round",strokeLinejoin:"round"})})}function af({className:a}){return(0,d.jsx)("svg",{viewBox:"0 0 16 16",fill:"none","aria-hidden":!0,focusable:!1,className:a,children:(0,d.jsx)("path",{d:"M13 4.5 6.5 11 3 7.5",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function ag({className:a,children:b,...c}){return(0,d.jsxs)(ab.Trigger,{"data-slot":"select-trigger",className:h("flex h-9 w-full cursor-pointer items-center justify-between gap-2 rounded-lg border border-border bg-surface px-3 text-sm text-text","transition-colors focus:border-primary focus:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","data-[placeholder]:text-text-3 disabled:cursor-not-allowed disabled:opacity-50","[&>span]:truncate",a),...c,children:[b,(0,d.jsx)(ab.Icon,{asChild:!0,children:(0,d.jsx)(ae,{className:"size-4 shrink-0 text-text-3"})})]})}function ah({className:a,children:b,position:c="popper",sideOffset:e=6,...f}){return(0,d.jsx)(ab.Portal,{children:(0,d.jsxs)(ab.Content,{"data-slot":"select-content",position:c,sideOffset:e,className:h("relative z-50 max-h-(--radix-select-content-available-height) min-w-32 overflow-hidden rounded-lg border border-border bg-surface shadow-lg","popper"===c&&"w-(--radix-select-trigger-width)",a),...f,children:[(0,d.jsx)(aj,{}),(0,d.jsx)(ab.Viewport,{className:"p-1",children:b}),(0,d.jsx)(ak,{})]})})}function ai({className:a,children:b,...c}){return(0,d.jsxs)(ab.Item,{"data-slot":"select-item",className:h("relative flex w-full cursor-pointer select-none items-center rounded-md py-1.5 pl-2.5 pr-8 text-sm text-text-2 outline-none","hover:bg-surface-2 hover:text-text data-[highlighted]:bg-surface-2 data-[highlighted]:text-text","data-[state=checked]:font-semibold data-[state=checked]:text-text","data-[disabled]:pointer-events-none data-[disabled]:opacity-50",a),...c,children:[(0,d.jsx)(ab.ItemText,{children:b}),(0,d.jsx)("span",{className:"absolute right-2.5 flex items-center",children:(0,d.jsx)(ab.ItemIndicator,{children:(0,d.jsx)(af,{className:"size-4 text-primary"})})})]})}function aj({className:a,...b}){return(0,d.jsx)(ab.ScrollUpButton,{"data-slot":"select-scroll-up-button",className:h("flex cursor-default items-center justify-center py-1 text-text-3",a),...b,children:(0,d.jsx)(ae,{className:"size-4 rotate-180"})})}function ak({className:a,...b}){return(0,d.jsx)(ab.ScrollDownButton,{"data-slot":"select-scroll-down-button",className:h("flex cursor-default items-center justify-center py-1 text-text-3",a),...b,children:(0,d.jsx)(ae,{className:"size-4"})})}let al=x.Root;function am({className:a,children:b,...c}){return(0,d.jsxs)(x.Portal,{children:[(0,d.jsx)(x.Overlay,{"data-slot":"sheet-overlay",className:"fixed inset-0 z-40 bg-ink/40 backdrop-blur-[1px]"}),(0,d.jsxs)(x.Content,{"data-slot":"sheet-content",className:h("fixed inset-y-0 right-0 z-50 flex h-full w-full max-w-md flex-col gap-4 overflow-y-auto border-l border-border bg-surface p-6 shadow-lg outline-none",a),...c,children:[b,(0,d.jsxs)(x.Close,{className:"absolute right-4 top-4 cursor-pointer rounded-md text-text-3 transition-colors hover:bg-surface-2 hover:text-text size-8 grid place-content-center",children:[(0,d.jsx)("svg",{"aria-hidden":!0,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round",className:"size-4",children:(0,d.jsx)("path",{d:"M6 6 18 18M18 6 6 18"})}),(0,d.jsx)("span",{className:"sr-only",children:"Close"})]})]})]})}function an({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"sheet-header",className:h("flex flex-col gap-1 pr-8",a),...b})}function ao({className:a,...b}){return(0,d.jsx)(x.Title,{"data-slot":"sheet-title",className:h("font-display text-lg font-semibold text-text",a),...b})}function ap({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"skeleton","aria-hidden":!0,className:h("animate-pulse rounded-md bg-surface-3",a),...b})}x.Trigger,x.Close;var aq=c(95854);function ar({className:a,...b}){return(0,d.jsx)(aq.Root,{"data-slot":"switch",className:h("peer inline-flex h-5.5 w-9.5 shrink-0 cursor-pointer items-center rounded-full p-0.5 transition-colors outline-none focus-visible:ring-2 focus-visible:ring-primary/40 disabled:cursor-not-allowed disabled:opacity-50","data-[state=checked]:bg-ok data-[state=unchecked]:bg-border-strong",a),...b,children:(0,d.jsx)(aq.Thumb,{"data-slot":"switch-thumb",className:"pointer-events-none block size-4.5 rounded-full bg-switch-thumb shadow-sm transition-transform data-[state=checked]:translate-x-4 data-[state=unchecked]:translate-x-0"})})}function as({className:a,...b}){return(0,d.jsx)("div",{className:"w-full overflow-x-auto",children:(0,d.jsx)("table",{"data-slot":"table",className:h("w-full caption-bottom border-collapse text-sm",a),...b})})}function at({className:a,...b}){return(0,d.jsx)("thead",{"data-slot":"table-header",className:h("[&_tr]:border-b [&_tr]:border-border",a),...b})}function au({className:a,...b}){return(0,d.jsx)("tbody",{"data-slot":"table-body",className:h("[&_tr:last-child]:border-0",a),...b})}function av({className:a,onClick:b,onKeyDown:c,tabIndex:e,role:f,...g}){let i="function"==typeof b;return(0,d.jsx)("tr",{"data-slot":"table-row",role:i?f??"button":f,tabIndex:i?e??0:e,onClick:b,onKeyDown:i?function(a){c?.(a),i&&!a.defaultPrevented&&a.target===a.currentTarget&&("Enter"===a.key||" "===a.key)&&(a.preventDefault(),b(a))}:c,className:h("border-b border-text/6 transition-colors",i&&"focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-primary/40",a),...g})}function aw({scope:a="col",className:b,...c}){return(0,d.jsx)("th",{"data-slot":"table-head",scope:a,className:h("px-3 pb-3 text-left align-middle text-label font-semibold uppercase tracking-wider text-text-3",b),...c})}function ax({className:a,...b}){return(0,d.jsx)("td",{"data-slot":"table-cell",className:h("px-3 py-2 align-middle",a),...b})}var ay=c(25319);let az=ay.Root;function aA({className:a,...b}){return(0,d.jsx)(ay.List,{"data-slot":"tabs-list",className:h("inline-flex items-center gap-0.5 rounded-lg border border-border bg-surface-2 p-0.5",a),...b})}function aB({className:a,...b}){return(0,d.jsx)(ay.Trigger,{"data-slot":"tabs-trigger",className:h("inline-flex items-center justify-center gap-1.5 whitespace-nowrap rounded-md px-3 py-1.5 text-xs font-semibold text-text-3 transition-colors cursor-pointer","hover:text-text-2 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40","data-[state=active]:bg-surface data-[state=active]:text-text data-[state=active]:shadow-sm","[&_svg]:size-4 [&_svg]:shrink-0",a),...b})}function aC({className:a,...b}){return(0,d.jsx)(ay.Content,{"data-slot":"tabs-content",className:h("focus-visible:outline-none",a),...b})}function aD({children:a,icon:b,dot:c,className:e}){return(0,d.jsxs)("span",{className:h("inline-flex h-6 items-center gap-1.5 whitespace-nowrap rounded-md border border-border bg-surface px-2 text-label font-medium text-text-2",e),children:[c&&(0,d.jsx)("span",{className:"size-1.5 shrink-0 rounded-full",style:{background:c}}),b,a]})}},64129:(a,b,c)=>{"use strict";c.d(b,{i:()=>j});var d=c(88422),e=c(63959),f=c(81604),g=c(55587),h=c(23373);function i({event:a,first:b,last:c,linkHref:i}){let j=h.$x[a.kind],k="tool"===a.kind&&a.tool?h.pS[a.tool]??j.icon:j.icon,l="active"===a.kind,m="tool"===a.kind||"commit"===a.kind,n=a.link?h.Oy[a.link]:null,o=a.link&&i?i(a.link,a.targetId):null;return(0,d.jsxs)("div",{className:"grid grid-cols-[60px_24px_1fr] gap-x-3",children:[(0,d.jsx)("div",{className:"whitespace-nowrap pt-1.5 text-right font-mono text-label text-text-3",children:(0,g.gE)(a.occurredAt)}),(0,d.jsxs)("div",{className:"relative flex justify-center",children:[!(b&&c)&&(0,d.jsx)("span",{className:(0,e.cn)("absolute left-1/2 w-px -translate-x-1/2 bg-border",b?"bottom-0 top-3":c?"top-0 h-3":"inset-y-0")}),(0,d.jsxs)("span",{className:(0,e.cn)("relative z-10 grid size-6 place-items-center rounded-md ring-2 ring-surface",j.fill,j.text),children:[l&&(0,d.jsx)("span",{className:"absolute inset-0 animate-ping rounded-md bg-current opacity-30"}),(0,d.jsx)(k,{"aria-hidden":!0,focusable:!1,className:"relative size-3.5"})]})]}),(0,d.jsxs)("div",{className:(0,e.cn)("pt-0.5",c?"pb-0":"pb-4.5"),children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"text-ui font-semibold text-text",children:a.title}),a.severity&&(0,d.jsx)(e.Pt,{severity:a.severity}),a.flagged&&(0,d.jsxs)(e.Ex,{variant:"critical",className:"h-6 gap-1.5",children:[(0,d.jsx)(f._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"Flagged"]}),a.internal&&(0,d.jsxs)(e.Ex,{variant:"primary",className:"h-6 gap-1.5",children:[(0,d.jsx)(f.Zu,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"Internal"]})]}),(0,d.jsxs)("div",{className:(0,e.cn)("mt-0.5 text-xs text-text-2",m&&"font-mono"),children:[a.detail,n&&o&&(0,d.jsx)(e.$n,{asChild:!0,variant:"link",tone:"primary",className:"ml-2 text-xs font-normal",children:(0,d.jsxs)("a",{href:o,children:["Open in ",n,(0,d.jsx)(f.Qq,{"aria-hidden":!0,focusable:!1})]})})]})]})]})}function j({events:a,linkHref:b}){return(0,d.jsx)("div",{children:a.map((c,e)=>(0,d.jsx)(i,{event:c,first:0===e,last:e===a.length-1,...b?{linkHref:b}:{}},c.id))})}},64915:(a,b,c)=>{"use strict";c.d(b,{B:()=>f,i:()=>g});var d=c(88422),e=c(22559);function f({ids:a}){return(0,d.jsx)("div",{className:"flex items-center -space-x-1.5",children:a.map(a=>(0,d.jsx)("span",{title:e.x[a].label,className:"inline-flex rounded-lg ring-2 ring-surface",children:(0,d.jsx)(e.K,{id:a})},a))})}function g({provider:a}){return(0,d.jsxs)("span",{className:"inline-flex items-center gap-2 font-display text-xs text-text",children:[(0,d.jsx)(e.K,{id:a}),e.x[a].label]})}},72060:(a,b,c)=>{"use strict";c.d(b,{DU:()=>l,eF:()=>f,gi:()=>j,hv:()=>g,rO:()=>e,rU:()=>k,y3:()=>i,y6:()=>d.y6l,yr:()=>h});var d=c(26273);function e(a,b=Date.now()){return null!==a.revokedAt?"revoked":null!==a.maxUses&&a.useCount>=a.maxUses?"consumed":null!==a.expiresAt&&Date.parse(a.expiresAt)<=b?"expired":"active"}function f(a,b){if((0,d.qEQ)(a.keyVersion,b))return null;switch(b.status){case"unreadable":return"The fingerprint key file cannot be read, so no recorded detection can be matched right now. Check the permissions on ~/.aka/data — do not delete the key.";case"absent":return"The fingerprint key file is missing, so the fingerprint recorded for this detection can no longer be matched. Trigger the detection again.";default:return`Recorded under fingerprint key v${String(a.keyVersion)}; the key is now v${String(b.version)}, so a grant from it could never match. Trigger the detection again.`}}let g={active:"success",consumed:"default",expired:"default",revoked:"critical"},h={once:"Once",temporary:"Temporary",permanent:"Permanent"},i={suppress:"Suppress",reveal_to_model:"Reveal to model"},j={"cli-approve":"CLI approve","cli-add":"CLI add","web-approve":"Web approve","web-add":"Web add",api:"API","setup-triage":"Setup triage"},k=["once","30m","1h","24h","permanent"],l={once:"Once","30m":"30 min","1h":"1 hour","24h":"24 hours",permanent:"Permanent"}},72721:(a,b,c)=>{"use strict";c.d(b,{PolicyPicker:()=>f});var d=c(88422),e=c(16614);function f({value:a,onChange:b}){let c=!b;return(0,d.jsx)("div",{className:"inline-flex gap-1 self-start rounded-lg border border-border bg-surface-2 p-0.5"+(c?" opacity-70":""),"aria-disabled":c||void 0,children:e.uR.map(f=>{let g=(0,e.ES)(f),h=a===f,[i,j]=(0,e.vV)(g.tone),k="gray"===g.tone?"var(--color-surface)":j,l=g.icon;return(0,d.jsxs)("button",{type:"button",disabled:c,onClick:b?()=>{b(f)}:void 0,"aria-pressed":h,className:"inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-sm font-semibold "+(c?"cursor-not-allowed ":"cursor-pointer ")+(h?"shadow-sm":"text-text-3"),style:h?{color:i,background:k}:void 0,children:[(0,d.jsx)(l,{"aria-hidden":!0,focusable:!1,className:"size-4"}),g.label]},f)})})}},72785:(a,b,c)=>{Promise.resolve().then(c.t.bind(c,54556,23)),Promise.resolve().then(c.t.bind(c,80999,23)),Promise.resolve().then(c.t.bind(c,95691,23)),Promise.resolve().then(c.t.bind(c,85534,23)),Promise.resolve().then(c.t.bind(c,69242,23)),Promise.resolve().then(c.t.bind(c,79486,23)),Promise.resolve().then(c.t.bind(c,80894,23)),Promise.resolve().then(c.t.bind(c,87451,23)),Promise.resolve().then(c.t.bind(c,4286,23))},73136:(a,b,c)=>{Promise.resolve().then(c.bind(c,40772))},75261:(a,b,c)=>{"use strict";c.d(b,{S8C:()=>x,Itg:()=>ag,PWo:()=>ar,RRF:()=>a9,ZpU:()=>bc,HUb:()=>a8,hfB:()=>am,unw:()=>bb,b2L:()=>O,goN:()=>M,Jr:()=>bd,hdu:()=>cA,mBk:()=>cz,V8B:()=>aN,IgC:()=>a4,iRC:()=>aO,yA3:()=>A,Bfx:()=>B,GCf:()=>D,TUN:()=>R,SHn:()=>ay,V0H:()=>a7,u8Q:()=>cB,viY:()=>co,PEm:()=>a2,eI7:()=>cX,cqq:()=>E,jON:()=>a$,lFU:()=>d,PhW:()=>ae,AI$:()=>v,zJK:()=>cW,hd_:()=>cJ,_5V:()=>cm,W4_:()=>q,tXp:()=>b9,plk:()=>bC,mAj:()=>b3,Fnc:()=>dG,ryv:()=>p,tTV:()=>ad,qmP:()=>cS,_6W:()=>cb,rG:()=>cd,Bfj:()=>b8,fj8:()=>ci,q_t:()=>n,i1j:()=>cK,xog:()=>b2,hzO:()=>dI,by7:()=>dH,Gw9:()=>dE,q11:()=>f,U7X:()=>v,JB8:()=>b1,y_0:()=>dF,qEQ:()=>aR,I8t:()=>e,am1:()=>cf,SSj:()=>cl,OHL:()=>cZ,DhA:()=>be,WSs:()=>dL,a45:()=>bA,A6E:()=>cc,pnU:()=>bB,V9M:()=>cN,ImG:()=>aQ,$w9:()=>cR,jTf:()=>cT,$BP:()=>cO,GyT:()=>aP,JAl:()=>cP,$3l:()=>cQ,MgS:()=>cj,gzP:()=>cL,QCA:()=>cM,C05:()=>dJ});let d=[{tag:"0000_acoustic_felicia_hardy",sql:"CREATE TABLE `audit_events` (\n	`id` text PRIMARY KEY NOT NULL,\n	`parent_id` text,\n	`root_session_id` text,\n	`event_type` text NOT NULL,\n	`host_id` text,\n	`harness_id` text,\n	`source_project_id` text,\n	`started_at` integer NOT NULL,\n	`ended_at` integer,\n	`severity` text,\n	`priority` text,\n	`content` text,\n	`content_hash` text,\n	`attributes` text,\n	FOREIGN KEY (`parent_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`root_session_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`host_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`harness_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`source_project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_parent` ON `audit_events` (`parent_id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_session` ON `audit_events` (`root_session_id`,`started_at`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_harness_t` ON `audit_events` (`harness_id`,`started_at`);--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_project_t` ON `audit_events` (`source_project_id`,`started_at`);--\x3e statement-breakpoint\nCREATE TABLE `classified_data` (\n	`id` text PRIMARY KEY NOT NULL,\n	`class` text NOT NULL,\n	`label` text,\n	`attributes` text\n);\n--\x3e statement-breakpoint\nCREATE TABLE `events` (\n	`id` text PRIMARY KEY NOT NULL,\n	`source_tool` text NOT NULL,\n	`kind` text NOT NULL,\n	`occurred_at` integer NOT NULL,\n	`content_hash` text NOT NULL,\n	`content` text NOT NULL,\n	`metadata` text\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_events_occurred` ON `events` (`occurred_at`);--\x3e statement-breakpoint\nCREATE TABLE `findings` (\n	`id` text PRIMARY KEY NOT NULL,\n	`event_id` text NOT NULL,\n	`rule_id` text NOT NULL,\n	`category` text NOT NULL,\n	`severity` text NOT NULL,\n	`span_start` integer NOT NULL,\n	`span_end` integer NOT NULL,\n	`masked_match` text NOT NULL,\n	`action_taken` text NOT NULL,\n	`confidence` real NOT NULL,\n	FOREIGN KEY (`event_id`) REFERENCES `events`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_findings_event` ON `findings` (`event_id`);--\x3e statement-breakpoint\nCREATE TABLE `inspection_definitions` (\n	`id` text PRIMARY KEY NOT NULL,\n	`rule_id` text NOT NULL,\n	`name` text NOT NULL,\n	`category` text NOT NULL,\n	`severity` text NOT NULL,\n	`definition` text NOT NULL,\n	`version` text NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE TABLE `inspection_findings` (\n	`id` text PRIMARY KEY NOT NULL,\n	`audit_event_id` text NOT NULL,\n	`inspection_definition_id` text NOT NULL,\n	`classified_data_id` text,\n	`span_start` integer NOT NULL,\n	`span_end` integer NOT NULL,\n	`masked_match` text NOT NULL,\n	`action_taken` text NOT NULL,\n	`confidence` real NOT NULL,\n	FOREIGN KEY (`audit_event_id`) REFERENCES `audit_events`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`inspection_definition_id`) REFERENCES `inspection_definitions`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`classified_data_id`) REFERENCES `classified_data`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inspection_findings_event` ON `inspection_findings` (`audit_event_id`);--\x3e statement-breakpoint\nCREATE TABLE `installed_packs` (\n	`id` text PRIMARY KEY NOT NULL,\n	`namespace` text NOT NULL,\n	`pack_id` text NOT NULL,\n	`version` text NOT NULL,\n	`name` text NOT NULL,\n	`rules_json` text NOT NULL,\n	`enabled` integer DEFAULT true NOT NULL,\n	`policy_id` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_installed_packs_pack` ON `installed_packs` (`namespace`,`pack_id`);--\x3e statement-breakpoint\nCREATE TABLE `inventory` (\n	`id` text PRIMARY KEY NOT NULL,\n	`object_type` text NOT NULL,\n	`location` text,\n	`title` text,\n	`host_id` text,\n	`attributes` text NOT NULL,\n	`os_version` text GENERATED ALWAYS AS (json_extract(attributes, '$.os_version')) VIRTUAL,\n	`harness_version` text GENERATED ALWAYS AS (json_extract(attributes, '$.harness_version')) VIRTUAL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL,\n	FOREIGN KEY (`host_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type` ON `inventory` (`object_type`);--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type_osver` ON `inventory` (`object_type`,`os_version`);--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_type_harnessver` ON `inventory` (`object_type`,`harness_version`);--\x3e statement-breakpoint\nCREATE TABLE `policies` (\n	`id` text PRIMARY KEY NOT NULL,\n	`scope` text DEFAULT 'global' NOT NULL,\n	`target` text NOT NULL,\n	`action` text NOT NULL,\n	`enabled` integer DEFAULT true NOT NULL,\n	`custom_keywords` text,\n	`name` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_policies_scope_target` ON `policies` (`scope`,`target`);--\x3e statement-breakpoint\nCREATE TABLE `source_project` (\n	`id` text PRIMARY KEY NOT NULL,\n	`url` text,\n	`name` text,\n	`attributes` text NOT NULL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL\n);\n"},{tag:"0001_adorable_marten_broadcloak",sql:"ALTER TABLE `audit_events` ADD `input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `output_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.output_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `cache_creation_input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_creation_input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `cache_read_input_tokens` integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_read_input_tokens')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `model` text GENERATED ALWAYS AS (json_extract(attributes, '$.model')) VIRTUAL;--\x3e statement-breakpoint\nALTER TABLE `audit_events` ADD `provider` text GENERATED ALWAYS AS (json_extract(attributes, '$.provider')) VIRTUAL;--\x3e statement-breakpoint\nCREATE INDEX `idx_audit_session_type` ON `audit_events` (`root_session_id`,`started_at`) WHERE event_type = 'llm_call';"},{tag:"0002_groovy_big_bertha",sql:"CREATE TABLE `exceptions` (\n	`id` text PRIMARY KEY NOT NULL,\n	`rule_id` text NOT NULL,\n	`category` text NOT NULL,\n	`value_fingerprint` text NOT NULL,\n	`key_version` integer NOT NULL,\n	`masked_value` text NOT NULL,\n	`scope` text NOT NULL,\n	`expires_at` integer,\n	`max_uses` integer,\n	`use_count` integer DEFAULT 0 NOT NULL,\n	`last_used_at` integer,\n	`justification` text NOT NULL,\n	`conditions` text,\n	`created_by` text NOT NULL,\n	`created_via` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	`revoked_at` integer,\n	`revoked_by` text,\n	`revoke_reason` text\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_exceptions_active` ON `exceptions` (`rule_id`,`value_fingerprint`,`key_version`) WHERE revoked_at IS NULL;"},{tag:"0003_rich_sage",sql:"CREATE TABLE `egress_decision_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text NOT NULL,\n	`decision` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override` ON `egress_decision_override` (`destination_id`);--\x3e statement-breakpoint\nCREATE TABLE `file_access_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`project_id` text NOT NULL,\n	`path` text NOT NULL,\n	`access` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_file_access_override_project` ON `file_access_override` (`project_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_file_access_override` ON `file_access_override` (`project_id`,`path`);--\x3e statement-breakpoint\nCREATE TABLE `harness_asset` (\n	`id` text PRIMARY KEY NOT NULL,\n	`harness_id` text NOT NULL,\n	`asset_id` text NOT NULL,\n	`created_at` integer NOT NULL,\n	FOREIGN KEY (`harness_id`) REFERENCES `inventory`(`id`) ON UPDATE no action ON DELETE no action,\n	FOREIGN KEY (`asset_id`) REFERENCES `inventory_asset`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_harness_asset_harness` ON `harness_asset` (`harness_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_harness_asset` ON `harness_asset` (`harness_id`,`asset_id`);--\x3e statement-breakpoint\nCREATE TABLE `inventory_asset` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_type` text NOT NULL,\n	`name` text NOT NULL,\n	`sub` text,\n	`description` text,\n	`flags_json` text DEFAULT '[]' NOT NULL,\n	`meta_json` text DEFAULT '{}' NOT NULL,\n	`trust` text,\n	`tools_json` text,\n	`provenance` text DEFAULT 'scan' NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_inventory_asset_type` ON `inventory_asset` (`asset_type`);--\x3e statement-breakpoint\nCREATE TABLE `mcp_trust_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_id` text NOT NULL,\n	`trust` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`asset_id`) REFERENCES `inventory_asset`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_mcp_trust_override` ON `mcp_trust_override` (`asset_id`);--\x3e statement-breakpoint\nCREATE TABLE `project_file` (\n	`id` text PRIMARY KEY NOT NULL,\n	`project_id` text NOT NULL,\n	`path` text NOT NULL,\n	`name` text NOT NULL,\n	`origin` text NOT NULL,\n	`default_access` text NOT NULL,\n	`findings_count` integer DEFAULT 0 NOT NULL,\n	`blocked_at` integer,\n	`note` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`project_id`) REFERENCES `source_project`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_project_file_project` ON `project_file` (`project_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_project_file` ON `project_file` (`project_id`,`path`);--\x3e statement-breakpoint\nCREATE TABLE `share_call_site` (\n	`id` text PRIMARY KEY NOT NULL,\n	`endpoint_id` text NOT NULL,\n	`project` text NOT NULL,\n	`file` text NOT NULL,\n	`line` integer NOT NULL,\n	`snippet` text NOT NULL,\n	`dynamic` integer DEFAULT false NOT NULL,\n	`vendored` integer DEFAULT false NOT NULL,\n	`project_id` text,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`endpoint_id`) REFERENCES `share_endpoint`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_call_site_endpoint` ON `share_call_site` (`endpoint_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_call_site` ON `share_call_site` (`endpoint_id`,`project`,`file`,`line`);--\x3e statement-breakpoint\nCREATE TABLE `share_destination` (\n	`id` text PRIMARY KEY NOT NULL,\n	`kind` text NOT NULL,\n	`name` text NOT NULL,\n	`host` text NOT NULL,\n	`category` text NOT NULL,\n	`trust` text NOT NULL,\n	`note` text,\n	`network_json` text,\n	`last_seen` integer NOT NULL,\n	`provenance` text DEFAULT 'scan' NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_destination_kind` ON `share_destination` (`kind`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_destination_host` ON `share_destination` (`host`);--\x3e statement-breakpoint\nCREATE TABLE `share_endpoint` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text NOT NULL,\n	`method` text NOT NULL,\n	`transport` text NOT NULL,\n	`url` text NOT NULL,\n	`template` integer DEFAULT false NOT NULL,\n	`data_class` text NOT NULL,\n	`last_seen` integer NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE no action\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_share_endpoint_dest` ON `share_endpoint` (`destination_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_endpoint` ON `share_endpoint` (`destination_id`,`method`,`url`);"},{tag:"0004_glorious_mindworm",sql:"CREATE TABLE `available_packs` (\n	`id` text PRIMARY KEY NOT NULL,\n	`namespace` text NOT NULL,\n	`pack_id` text NOT NULL,\n	`version` text NOT NULL,\n	`name` text NOT NULL,\n	`rules_json` text NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_available_packs_pack` ON `available_packs` (`namespace`,`pack_id`);"},{tag:"0005_fast_vindicator",sql:'PRAGMA foreign_keys=OFF;--\x3e statement-breakpoint\nCREATE TABLE `__new_mcp_trust_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`asset_id` text NOT NULL,\n	`trust` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nINSERT INTO `__new_mcp_trust_override`("id", "asset_id", "trust", "created_at", "updated_at") SELECT "id", "asset_id", "trust", "created_at", "updated_at" FROM `mcp_trust_override`;--\x3e statement-breakpoint\nDROP TABLE `mcp_trust_override`;--\x3e statement-breakpoint\nALTER TABLE `__new_mcp_trust_override` RENAME TO `mcp_trust_override`;--\x3e statement-breakpoint\nPRAGMA foreign_keys=ON;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_mcp_trust_override` ON `mcp_trust_override` (`asset_id`);'},{tag:"0006_magenta_flatman",sql:'CREATE TABLE `_pack_write_gate` (\n	`id` integer PRIMARY KEY NOT NULL,\n	`open` integer DEFAULT 0 NOT NULL,\n	CONSTRAINT "ck_pack_write_gate_single_row" CHECK("_pack_write_gate"."id" = 1)\n);\n--\x3e statement-breakpoint\nALTER TABLE `available_packs` ADD `recorded_by` text;--\x3e statement-breakpoint\nINSERT OR IGNORE INTO _pack_write_gate (id, open) VALUES (1, 0);\n--\x3e statement-breakpoint\nCREATE TRIGGER trg_installed_packs_write_gate\nBEFORE UPDATE OF version, name, rules_json ON installed_packs\nWHEN (SELECT open FROM _pack_write_gate WHERE id = 1) IS NOT 1\nBEGIN SELECT RAISE(IGNORE); END;'},{tag:"0007_thick_stick",sql:"CREATE TABLE `finding_resolution` (\n	`id` text PRIMARY KEY NOT NULL,\n	`finding_key` text NOT NULL,\n	`status` text NOT NULL,\n	`method` text NOT NULL,\n	`resolved_at` integer NOT NULL,\n	`evidence` text,\n	`created_at` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_finding_resolution_key` ON `finding_resolution` (`finding_key`);--\x3e statement-breakpoint\nALTER TABLE `findings` ADD `finding_key` text;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_findings_key` ON `findings` (`finding_key`);"},{tag:"0008_freezing_selene",sql:"ALTER TABLE `findings` ADD `first_detected_at` integer;--\x3e statement-breakpoint\nUPDATE `findings` SET `first_detected_at` = (SELECT `occurred_at` FROM `events` WHERE `events`.`id` = `findings`.`event_id`) WHERE `first_detected_at` IS NULL;"},{tag:"0009_findings_path_expression_index",sql:"-- Custom migration: partial expression index for the resolver's per-path reads.\n--\n-- openAtRestKeysForPath / resolvedAtRestKeysForPath (and the scanner's tier-3\n-- open-key probe) filter at-rest events by\n--   e.kind = 'code_change' AND json_extract(e.metadata, '$.filePath') = :path\n-- once per changed/deleted file on every scan — previously a full events scan\n-- per file. json_extract is deterministic, so SQLite allows it in an index;\n-- the WHERE kind = 'code_change' keeps the index to exactly the rows those\n-- queries can match (in-flight events are never path-addressed).\nCREATE INDEX `idx_events_code_change_path` ON `events` (json_extract(`metadata`, '$.filePath')) WHERE `kind` = 'code_change';\n"},{tag:"0010_events_session_expression_index",sql:"-- Custom migration: partial expression index for session-scoped finding reads.\n--\n-- sessionFindingsCount, the session-scoped listGroupedFindings paths, and the\n-- insert-time session dedup all filter live-capture events by\n--   json_extract(e.metadata, '$.sessionId') = :sessionId\n-- — previously a full findings-join scan with a JSON parse per row. The\n-- IS NOT NULL predicate keeps the index to session-stamped events only (an\n-- equality probe implies non-null, so SQLite still uses it).\nCREATE INDEX `idx_events_session_id` ON `events` (json_extract(`metadata`, '$.sessionId')) WHERE json_extract(`metadata`, '$.sessionId') IS NOT NULL;\n"},{tag:"0011_egress_writer",sql:'-- Stable per-project reconcile key for egress call sites, plus a host-keyed\n-- egress decision override that survives destination pruning.\n--\n-- DROP INDEX IF EXISTS, not a bare DROP: the applier replays a pending\n-- migration\'s non-index statements verbatim, so a store that lost\n-- uq_share_call_site out of band would throw here — and on the plugin hook path\n-- that throw is swallowed fail-open, silently stopping capture.\n--\n-- Existing rows carry the old key\'s discriminator into project_key\n-- (\'legacy:\' || project), so the new unique index is a re-encoding of the old\n-- one and cannot collide on rows the old one allowed. Leaving them on the\n-- column default would collapse two projects\' identical file/line hits onto\n-- one key and abort the whole migration. Writer keys are \'git:\'/\'path:\'-\n-- prefixed, so a backfilled row never collides with a captured one either.\n--\n-- egress_decision_override.destination_id becomes nullable with ON DELETE SET\n-- NULL, which SQLite can only do by rebuilding the table. `host` is ADDed\n-- before the rebuild so the copy has a column to read and so the migration\n-- still presents two probeable columns to the applier\'s evidence check.\nALTER TABLE `share_call_site` ADD `project_key` text DEFAULT \'\' NOT NULL;--\x3e statement-breakpoint\nUPDATE `share_call_site` SET `project_key` = \'legacy:\' || `project`;--\x3e statement-breakpoint\nDROP INDEX IF EXISTS `uq_share_call_site`;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_call_site` ON `share_call_site` (`endpoint_id`,`project_key`,`file`,`line`);--\x3e statement-breakpoint\nCREATE INDEX `idx_share_call_site_project` ON `share_call_site` (`project_key`,`endpoint_id`);--\x3e statement-breakpoint\nALTER TABLE `egress_decision_override` ADD `host` text;--\x3e statement-breakpoint\nPRAGMA foreign_keys=OFF;--\x3e statement-breakpoint\nCREATE TABLE `__new_egress_decision_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text,\n	`host` text,\n	`decision` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE set null\n);\n--\x3e statement-breakpoint\nINSERT INTO `__new_egress_decision_override`("id", "destination_id", "host", "decision", "created_at", "updated_at") SELECT "id", "destination_id", "host", "decision", "created_at", "updated_at" FROM `egress_decision_override`;--\x3e statement-breakpoint\nDROP TABLE `egress_decision_override`;--\x3e statement-breakpoint\nALTER TABLE `__new_egress_decision_override` RENAME TO `egress_decision_override`;--\x3e statement-breakpoint\nPRAGMA foreign_keys=ON;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override` ON `egress_decision_override` (`destination_id`);--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override_host` ON `egress_decision_override` (`host`) WHERE `host` IS NOT NULL;\n'},{tag:"0012_handy_the_captain",sql:"ALTER TABLE `inspection_findings` ADD `finding_key` text;--\x3e statement-breakpoint\nALTER TABLE `inspection_findings` ADD `first_detected_at` integer;--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_inspection_findings_key` ON `inspection_findings` (`finding_key`);"},{tag:"0013_legacy_history_backfill_support",sql:"-- Legacy-to-generalized backfill support: the schema the resumable\n-- events/findings -> audit_events/inspection_findings copy needs (the row\n-- copy itself runs as a batched post-migration installer, not here — see\n-- @akasecurity/persistence's migrations.ts), plus the audit_events read-path\n-- indexes replacing the ones the legacy events table carried (0009/0010).\n\n-- Tracks how far the batched, resumable copy has advanced through each legacy\n-- table, by rowid, so a copy interrupted mid-run resumes instead of\n-- restarting, and a completed copy is a cheap no-op on every later open.\nCREATE TABLE `legacy_copy_watermark` (\n	`source` text PRIMARY KEY NOT NULL,\n	`last_rowid` integer DEFAULT 0 NOT NULL\n);\n--\x3e statement-breakpoint\n-- Serves the time-range read family that scans a single event_type across a\n-- start/end window (e.g. the Activity timeline) without a full-table scan.\nCREATE INDEX `idx_audit_type_t` ON `audit_events` (`event_type`,`started_at`);\n--\x3e statement-breakpoint\n-- Partial expression index mirroring `idx_events_code_change_path` (0009) for\n-- the generalized audit_events/attributes pair: file-path reads filter\n-- `event_type = 'code_change' AND json_extract(attributes, '$.file_path') = :path`.\nCREATE INDEX `idx_audit_code_change_path` ON `audit_events` (json_extract(`attributes`, '$.file_path')) WHERE `event_type` = 'code_change';\n--\x3e statement-breakpoint\n-- Synthesizes a stub session root (event_type = 'session', no attributes) for\n-- every legacy `events.metadata.sessionId` that has no audit_events row yet.\n-- audit_events.root_session_id is a self-FK, enforced with foreign-key\n-- checking on, and INSERT OR IGNORE does not suppress a foreign-key violation\n-- (only UNIQUE/PK/NOT NULL/CHECK) — so this must run before the events copy\n-- resolves root_session_id, or every session-scoped row's insert fails.\n-- started_at takes the earliest legacy occurred_at recorded under that\n-- session, so the stub root's own timeline position is never later than\n-- anything it will end up parenting.\nINSERT INTO audit_events (id, event_type, root_session_id, started_at)\nSELECT\n	json_extract(metadata, '$.sessionId'),\n	'session',\n	NULL,\n	min(occurred_at)\nFROM events\nWHERE json_valid(metadata)\n	AND json_extract(metadata, '$.sessionId') IS NOT NULL\n	AND json_extract(metadata, '$.sessionId') NOT IN (SELECT id FROM audit_events)\nGROUP BY json_extract(metadata, '$.sessionId');\n"},{tag:"0014_drop_legacy_events_findings",sql:"-- Custom migration: drops the frozen legacy `events`/`findings` tables\n-- (superseded by audit_events/inspection_definitions/inspection_findings) and\n-- replaces them with read-only views of the same name.\n--\n-- persistence's migrations.ts applies this migration ONLY once the batched\n-- history backfill (see runLegacyHistoryBackfill) has fully drained both\n-- tables, and only after copying the live file aside — see\n-- backupBeforeLegacyDrop in packages/persistence/src/migrations.ts. A store\n-- still mid-copy keeps its real tables and this migration stays pending.\n--\n-- The views exist for skew: the `aka` CLI and the Claude Code plugin update\n-- independently against one shared store, so an older, already-installed\n-- binary can open a store a newer binary already dropped these tables on.\n-- Every already-shipped repository constructor prepares its SQL eagerly at\n-- open time, so a bare \"table not found\" would fail the WHOLE open, not just\n-- a findings-specific read — these views keep `prepare()` succeeding so an\n-- old binary's unrelated features keep working; its own reads stay truthful,\n-- and its rare (already fail-open) writes fail at run time instead.\n--\n-- The 0009/0010 expression indexes existed only over the legacy `events`\n-- table; DROP TABLE below would remove them implicitly, but they are\n-- dropped explicitly first so the intent reads clearly. IF EXISTS so a store\n-- that reached here with an index missing out of band (an adopted-tag store\n-- whose physical index was never built) does not throw a deterministic \"no\n-- such index\" out of the fail-open drop path.\nDROP INDEX IF EXISTS `idx_events_code_change_path`;\n--\x3e statement-breakpoint\nDROP INDEX IF EXISTS `idx_events_session_id`;\n--\x3e statement-breakpoint\n-- `findings.event_id` references `events.id` — drop the child first.\nDROP TABLE `findings`;\n--\x3e statement-breakpoint\nDROP TABLE `events`;\n--\x3e statement-breakpoint\n-- Legacy `events` shape, projected from audit_events: `kind`/`occurred_at`/\n-- `source_tool` become real columns again (source_tool round-trips through\n-- the attributes bag, the only place a capture-typed audit row keeps it);\n-- `metadata` is reconstructed as the old camelCase JSON object from the new\n-- snake_case attributes bag, with `root_session_id` folded back in as\n-- `sessionId` (the one legacy metadata key that became a column, never an\n-- attribute, on the new table). Constrained to the four capture kinds so\n-- structural rows (session/run/tool_call/llm_call/source_lookup/config_scan)\n-- never leak into a legacy reader's result set — the old `events` table\n-- never held them either.\nCREATE VIEW `events` AS\nSELECT\n  id,\n  json_extract(attributes, '$.source_tool') AS source_tool,\n  event_type AS kind,\n  started_at AS occurred_at,\n  content_hash,\n  content,\n  -- Plugin-local bookkeeping column that `ensureSyncedAtColumn` adds to the\n  -- real `events` table at open time. A pre-cutover binary runs that probe on\n  -- EVERY open; without this projection its `columnNames('events')` check\n  -- misses `synced_at` and issues `ALTER TABLE events ADD COLUMN` against this\n  -- view, which SQLite rejects (\"Cannot add a column to a view\") — a hard,\n  -- non-fail-open crash of the whole open, the exact skew failure these views\n  -- exist to prevent. Projecting it (always NULL; no reader consumes it)\n  -- short-circuits that ALTER.\n  NULL AS synced_at,\n  json_object(\n    'sessionId', root_session_id,\n    'repo', json_extract(attributes, '$.repo'),\n    'filePath', json_extract(attributes, '$.file_path'),\n    'toolName', json_extract(attributes, '$.tool_name'),\n    'gitignored', json_extract(attributes, '$.gitignored'),\n    'wholeFile', json_extract(attributes, '$.whole_file'),\n    'model', json_extract(attributes, '$.model'),\n    'turnIndex', json_extract(attributes, '$.turn_index'),\n    'correlationId', json_extract(attributes, '$.correlation_id'),\n    'traceId', json_extract(attributes, '$.trace_id'),\n    'exceptionIds', json_extract(attributes, '$.exception_ids')\n  ) AS metadata\nFROM audit_events\nWHERE event_type IN ('prompt', 'response', 'code_change', 'tool_use');\n--\x3e statement-breakpoint\n-- A plain single-row INSERT (the old writer's shape — no ON CONFLICT) is\n-- accepted by prepare() against a view once an INSTEAD OF INSERT trigger\n-- exists, so it fails at run time instead of at open — landing in the same\n-- fail-open path the caller already wraps its write in.\nCREATE TRIGGER `trg_events_ro`\nINSTEAD OF INSERT ON `events`\nBEGIN SELECT RAISE(ABORT, 'events is read-only; write to audit_events instead'); END;\n--\x3e statement-breakpoint\n-- Legacy `findings` shape: rule_id/category/severity come from the joined\n-- inspection_definitions row (the legacy table inlined them per-row; the\n-- generalized schema normalizes them out into the shared definition). A view\n-- has no rowid of its own, so the underlying table's rowid is re-exposed\n-- explicitly under that name — a legacy reader ordering by `f.rowid` would\n-- otherwise fail to resolve the column at all. Joined to audit_events for the\n-- same four-capture-kind constraint as the events view above (a finding\n-- attached to a tool_call/config_scan row never existed in the legacy table\n-- either — see the persistence findings repository's identical predicate).\nCREATE VIEW `findings` AS\nSELECT\n  f.id AS id,\n  f.rowid AS rowid,\n  f.audit_event_id AS event_id,\n  d.rule_id AS rule_id,\n  d.category AS category,\n  d.severity AS severity,\n  f.span_start AS span_start,\n  f.span_end AS span_end,\n  f.masked_match AS masked_match,\n  f.action_taken AS action_taken,\n  f.confidence AS confidence,\n  f.finding_key AS finding_key,\n  f.first_detected_at AS first_detected_at\nFROM inspection_findings f\nJOIN audit_events e ON e.id = f.audit_event_id\nJOIN inspection_definitions d ON d.id = f.inspection_definition_id\nWHERE e.event_type IN ('prompt', 'response', 'code_change', 'tool_use');\n--\x3e statement-breakpoint\n-- Defense in depth only: SQLite refuses to plan ANY upsert against a view\n-- (\"cannot UPSERT a view\") no matter what trigger exists, so this can never\n-- rescue the real legacy writer, which always used\n-- `ON CONFLICT (finding_key) DO UPDATE` — that statement still fails at\n-- prepare() on an old binary, same as it would with no trigger at all. This\n-- only covers a plain-INSERT shape, should one ever exist.\nCREATE TRIGGER `trg_findings_ro`\nINSTEAD OF INSERT ON `findings`\nBEGIN SELECT RAISE(ABORT, 'findings is read-only; write to inspection_findings instead'); END;\n"},{tag:"0015_busy_vengeance",sql:"CREATE TABLE `secret_vault` (\n	`pointer_id` text PRIMARY KEY NOT NULL,\n	`value_fingerprint` text NOT NULL,\n	`fingerprint_key_version` integer NOT NULL,\n	`key_version` integer NOT NULL,\n	`category` text NOT NULL,\n	`rule_id` text NOT NULL,\n	`masked_match` text NOT NULL,\n	`provider` text,\n	`ciphertext` text NOT NULL,\n	`nonce` text NOT NULL,\n	`auth_tag` text NOT NULL,\n	`occurrence_count` integer DEFAULT 1 NOT NULL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_secret_vault_value` ON `secret_vault` (`value_fingerprint`);--\x3e statement-breakpoint\nCREATE TABLE `secret_vault_deref` (\n	`id` text PRIMARY KEY NOT NULL,\n	`pointer_id` text NOT NULL,\n	`at` integer NOT NULL,\n	`target` text NOT NULL,\n	`reason` text NOT NULL,\n	`outcome` text NOT NULL,\n	`grant_id` text,\n	`pointer_count` integer DEFAULT 1 NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_pointer` ON `secret_vault_deref` (`pointer_id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_reason_at` ON `secret_vault_deref` (`reason`,`at`);"},{tag:"0016_breezy_zodiak",sql:"ALTER TABLE `exceptions` ADD `capability` text DEFAULT 'suppress' NOT NULL;"},{tag:"0017_rainy_kat_farrell",sql:"CREATE TABLE `secret_vault_sighting` (\n	`id` text PRIMARY KEY NOT NULL,\n	`pointer_id` text NOT NULL,\n	`location` text NOT NULL,\n	`kind` text NOT NULL,\n	`first_seen` integer NOT NULL,\n	`last_seen` integer NOT NULL\n);\n--\x3e statement-breakpoint\nCREATE UNIQUE INDEX `uq_secret_vault_sighting` ON `secret_vault_sighting` (`pointer_id`,`location`);"},{tag:"0018_serious_tana_nile",sql:"ALTER TABLE `secret_vault` ADD `format_version` integer DEFAULT 2 NOT NULL;"},{tag:"0019_audit_started_at_index",sql:"CREATE INDEX `idx_audit_started_at` ON `audit_events` (`started_at`);"},{tag:"0020_secret_vault_pagination_indexes",sql:"CREATE INDEX `idx_secret_vault_last_seen` ON `secret_vault` (`last_seen`,`pointer_id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_secret_vault_reuse` ON `secret_vault` (`occurrence_count`,`pointer_id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_at` ON `secret_vault_deref` (`at`,`id`);--\x3e statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_signal` ON `secret_vault_deref` (`at`,`id`) WHERE `reason` NOT IN ('display', 'view-render');"}];function e(a){return new Date(a).getTime()}function f(a){return new Date(a).toISOString()}function g(a,b){return{input:a,output:b,cacheWrite5m:1.25*a,cacheWrite1h:2*a,cacheRead:.1*a,webSearch:.01}}let h={input:0,output:0,cacheWrite5m:0,cacheWrite1h:0,cacheRead:0,webSearch:0},i={"claude-fable-5":g(10,50),"claude-opus-4-8":g(5,25),"claude-opus-4-7":g(5,25),"claude-opus-4-6":g(5,25),"claude-opus-4-5":g(5,25),"claude-sonnet-5":g(3,15),"claude-sonnet-4-6":g(3,15),"claude-sonnet-4-5":g(3,15),"claude-haiku-4-5":g(1,5)},j={...Object.fromEntries(Object.entries(i).map(([a,b])=>[`anthropic/${a}`,b])),"ollama/*":h,"local/*":h},k={standard:1,batch:.5,priority:1.5},l=Object.keys(i);function m(a){let b=a.replace(/^(us|eu|apac|global)\./,"").replace(/^anthropic[./]/,"").replace(/@[\w-]+$/,"").replace(/-v\d+:\d+$/,"").replace(/:\d+$/,"").replace(/-\d{8}$/,"");for(let a of l)if(b===a)return a;return b}let n={normalizeModelId(a,b){let c=a.trim().toLowerCase();if("ollama"===c||"local"===c)return{provider:c,model:"*"};if("anthropic"===c||"bedrock"===c||"vertex"===c)return{provider:c,model:m(b)};let d=/^anthropic\/(.+)$/.exec(b);return d?.[1]!==void 0?{provider:c,model:m(d[1])}:{provider:c,model:b}},costFor({provider:a,model:b,usage:c}){var d;let e=this.normalizeModelId(a,b),f=j[`${e.provider}/${e.model}`];return void 0===f?null:((c.inputTokens??0)*f.input+(c.outputTokens??0)*f.output+(c.cacheWrite1hTokens??0)*f.cacheWrite1h+(c.cacheWrite5mTokens??0)*f.cacheWrite5m+(c.cacheReadTokens??0)*f.cacheRead)/1e6*(void 0===(d=c.serviceTier)?1:k[d]??1)+(c.webSearchRequests??0)*f.webSearch}};new Intl.NumberFormat("en-US",{notation:"compact",maximumFractionDigits:1});let o=a=>a??0;function p(a,b){let c=new Map;for(let{sessionId:d,attributes:e}of a){let a=e.provider??"unknown",f=e.model??"unknown",g=`${a} ${f}`,h=c.get(d);void 0===h&&(h=new Map,c.set(d,h));let i=h.get(g);void 0===i&&(i={provider:a,model:f,input:0,output:0,cacheCreation:0,cacheRead:0,costUsd:0,priced:!1},h.set(g,i)),i.input+=o(e.input_tokens),i.output+=o(e.output_tokens),i.cacheCreation+=o(e.cache_creation_input_tokens),i.cacheRead+=o(e.cache_read_input_tokens);let j=b.costFor({provider:a,model:f,usage:function(a){let b={inputTokens:o(a.input_tokens),outputTokens:o(a.output_tokens),cacheWrite1hTokens:o(a.ephemeral_1h_input_tokens),cacheWrite5mTokens:o(a.ephemeral_5m_input_tokens),cacheReadTokens:o(a.cache_read_input_tokens),webSearchRequests:o(a.web_search_requests)};return void 0!==a.service_tier&&(b.serviceTier=a.service_tier),b}(e)});null!==j&&(i.costUsd+=j,i.priced=!0)}let d=[];for(let[a,b]of c){let c=[],e=0,f=0,g=!1,h=!1;for(let d of b.values()){let b=d.input+d.output+d.cacheCreation+d.cacheRead;e+=b;let i=d.priced?d.costUsd:null;null===i?h=!0:(g=!0,f+=i),c.push({sessionId:a,model:d.model,provider:d.provider,inputTokens:d.input,outputTokens:d.output,cacheCreation:d.cacheCreation,cacheRead:d.cacheRead,totalTokens:b,estimatedCostUsd:i})}c.sort((a,b)=>b.totalTokens-a.totalTokens),d.push({sessionId:a,rollups:c,totalTokens:e,estimatedCostUsd:g?f:null,costIsPartial:h})}return d.sort((a,b)=>b.totalTokens-a.totalTokens),d}function q(a){let b=new Map,c=0,d=0,e=!1;for(let f of a){for(let a of f.rollups){let c=`${a.provider} ${a.model}`,d=b.get(c);void 0===d&&(d={provider:a.provider,model:a.model,inputTokens:0,outputTokens:0,cacheTokens:0,totalTokens:0,costUsd:0,priced:!1},b.set(c,d)),d.inputTokens+=a.inputTokens,d.outputTokens+=a.outputTokens,d.cacheTokens+=a.cacheCreation+a.cacheRead,d.totalTokens+=a.totalTokens,null===a.estimatedCostUsd?e=!0:(d.costUsd+=a.estimatedCostUsd,d.priced=!0)}c+=f.totalTokens,null!==f.estimatedCostUsd&&(d+=f.estimatedCostUsd),f.costIsPartial&&(e=!0)}return{models:[...b.values()].sort((a,b)=>b.totalTokens-a.totalTokens).map(a=>({provider:a.provider,model:a.model,inputTokens:a.inputTokens,outputTokens:a.outputTokens,cacheTokens:a.cacheTokens,totalTokens:a.totalTokens,estimatedCostUsd:a.priced?a.costUsd:null})),sessionCount:a.length,totalTokens:c,estimatedCostUsd:d,costIsPartial:e}}var r=c(48231),s=c(98361),t=c(92603);let u=r.k5(["pii","financial","secret","phi","code_context","code_flaw","custom","config"]).meta({id:"DetectionCategory"}),v=r.k5(["critical","high","medium","low"]).meta({id:"Severity"}),w=r.k5(["warn","redact","block","allow","log"]).meta({id:"ActionTaken"}),x=w.options,y=r.Ik({start:r.ai().int().nonnegative(),end:r.ai().int().nonnegative()}).meta({id:"Span"}),z=r.Ik({id:r.Os(),eventId:r.Os(),ruleId:r.Yj(),category:u,severity:v,span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)}).meta({id:"Finding"});z.meta({id:"DetectedFinding"});let A=r.k5(["blocked","redacted","warned","allowed","quarantined","monitored"]).meta({id:"FindingAction"}),B=r.k5(["claudecode","claudedesktop","cursor","copilot","chatgpt","claudeai","codex","antigravity","api"]).meta({id:"FindingProvider"}),C=r.k5(["secret","pii","source_code","external_share","mcp_server","customer_data","financial","phi","custom"]).meta({id:"FindingCategory"});r.k5(["in-flight","at-rest"]).meta({id:"FindingOrigin"});let D=r.k5(["open","handled","resolved","dismissed"]).meta({id:"FindingStatus"}),E=r.k5(["enforced-in-flight","fixed-at-source","exception","acknowledged","false-positive","redetected"]).meta({id:"ResolutionMethod"}),F=r.Ik({maskedValue:r.Yj(),contextPrefix:r.Yj()}).meta({id:"FindingMatch"}),G=r.Ik({id:r.Yj(),name:r.Yj().nullable()}).meta({id:"FindingDetectionRef"}),H=r.Ik({id:r.Yj(),name:r.Yj()}).meta({id:"FindingPolicyRef"}),I=r.Ik({id:r.Yj(),provider:B,repo:r.Yj(),file:r.Yj(),toolName:r.Yj().optional(),action:A,detectedAt:s.w$(),confidence:r.ai().min(0).max(1),status:D.optional(),eventId:r.Yj().optional(),sessionId:r.Yj().optional()}).meta({id:"FindingInstance"}),J=r.Ik({id:r.Yj(),category:C,subtype:r.Yj(),severity:v,match:F,detection:G,policy:H,instanceCount:r.ai().int().nonnegative(),providers:r.YO(B),aggregateAction:A.nullable(),latestDetectedAt:s.w$(),instances:r.YO(I),status:D.optional()}).meta({id:"FindingGroup"});r.Ik({findings:r.ai().int().nonnegative(),groups:r.ai().int().nonnegative(),bySeverity:r.Ik({critical:r.ai().int().nonnegative(),high:r.ai().int().nonnegative(),medium:r.ai().int().nonnegative(),low:r.ai().int().nonnegative()})}).meta({id:"FindingStats"});let K=r.Ik({value:r.Yj(),count:r.ai().int().nonnegative()}).meta({id:"FindingFacetItem"}),L=r.Ik({severity:r.YO(K),subtype:r.YO(K),provider:r.YO(K),action:r.YO(K),status:r.YO(K),tool:r.YO(K).optional()}).meta({id:"FindingFacets"}),M=50;r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),status:r.YO(D).optional(),q:r.Yj().optional(),sessionId:r.Yj().optional(),from:s.w$().optional(),includeId:r.Yj().optional(),groupBy:r.eu("type").optional(),limit:t.ai().int().min(1).max(100).optional(),cursor:r.Yj().optional()}),r.Ik({totals:r.Ik({findings:r.ai().int().nonnegative(),groups:r.ai().int().nonnegative()}),facets:L,items:r.YO(J),nextCursor:r.Yj().nullable(),sessionFirings:r.g1(r.Yj(),r.ai().int().nonnegative()).optional()}).meta({id:"ListGroupedFindingsResponse"}),r.Ik({action:A.exclude(["quarantined"]),instanceId:r.Yj().optional()}).meta({id:"ApplyFindingActionRequest"}),J.meta({id:"ApplyFindingActionResponse"}),r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),q:r.Yj().optional(),format:r.k5(["csv","json"]).optional()});let N=I.extend({groupId:r.Yj(),category:C,subtype:r.Yj(),severity:v,match:F,detection:G,policy:H}).meta({id:"FindingInstanceDetail"}),O=50;r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),status:r.YO(D).optional(),tool:r.YO(r.Yj()).optional(),repo:r.Yj().optional(),file:r.Yj().optional(),q:r.Yj().optional(),sessionId:r.Yj().optional(),from:s.w$().optional(),limit:t.ai().int().min(1).max(200).optional(),cursor:r.Yj().optional()}),r.Ik({totals:r.Ik({findings:r.ai().int().nonnegative()}),facets:L,items:r.YO(N),nextCursor:r.Yj().nullable()}).meta({id:"ListFindingInstancesResponse"});let P=r.Ik({file:r.Yj(),instanceCount:r.ai().int().nonnegative(),maxSeverity:v,latestDetectedAt:s.w$(),status:D.optional(),ruleIds:r.YO(r.Yj())}).meta({id:"FindingLocationFile"}),Q=r.Ik({repo:r.Yj(),instanceCount:r.ai().int().nonnegative(),maxSeverity:v,latestDetectedAt:s.w$(),status:D.optional(),files:r.YO(P)}).meta({id:"FindingLocationRepo"});r.Ik({severity:r.YO(v).optional(),subtype:r.YO(r.Yj()).optional(),provider:r.YO(B).optional(),action:r.YO(A).optional(),status:r.YO(D).optional(),tool:r.YO(r.Yj()).optional(),q:r.Yj().optional(),sessionId:r.Yj().optional(),from:s.w$().optional(),limit:t.ai().int().min(1).max(500).optional()}),r.Ik({totals:r.Ik({findings:r.ai().int().nonnegative(),repos:r.ai().int().nonnegative(),files:r.ai().int().nonnegative()}),items:r.YO(Q),hasMore:r.zM()}).meta({id:"ListFindingLocationsResponse"});let R=r.k5(["claudecode","cursor","copilot","codex","antigravity","windsurf","claudedesktop","chatgpt","claudeai","api"]).meta({id:"Harness"}),S={"claude-code":"claudecode","claude-desktop":"claudedesktop","github-copilot":"copilot",cursor:"cursor",chatgpt:"chatgpt",codex:"codex",antigravity:"antigravity","claude-ai":"claudeai"},T=r.k5(["host","harness","user","skill","hook","mcp_server","config_file"]).meta({id:"InventoryObjectType"}),U=r.k5(["session","run","tool_call","llm_call","source_lookup","prompt","response","code_change","tool_use","config_scan"]).meta({id:"AuditEventType"}),V=r.g1(r.Yj(),r.L5());r.Ik({host_name:r.Yj().optional(),os:r.Yj().optional(),os_version:r.Yj().optional(),arch:r.Yj().optional()}).catchall(r.L5()),r.Ik({harness_version:r.Yj().optional(),interface:r.Yj().optional()}).catchall(r.L5()),r.Ik({display_name:r.Yj().optional(),email:r.Yj().optional()}).catchall(r.L5()),r.Ik({source:r.Yj().optional(),version:r.Yj().optional(),description:r.Yj().optional(),updated_at:r.Yj().optional(),scope:r.Yj().optional(),plugin_name:r.Yj().optional()}).catchall(r.L5()),r.Ik({event:r.Yj().optional(),matcher:r.Yj().optional(),command:r.Yj().optional(),scope:r.Yj().optional(),plugin_name:r.Yj().optional(),timeout:r.ai().optional()}).catchall(r.L5()),r.Ik({scope:r.Yj().optional(),transport:r.Yj().optional(),command:r.Yj().optional(),url:r.Yj().optional(),env_keys:r.YO(r.Yj()).optional(),plugin_name:r.Yj().optional(),marketplace:r.Yj().optional(),project:r.Yj().optional()}).catchall(r.L5()),r.Ik({kind:r.Yj().optional(),detail:r.Yj().optional(),scope:r.Yj().optional(),updated_at:r.Yj().optional(),entry_count:r.ai().optional()}).catchall(r.L5());let W=r.Ik({model:r.Yj().optional(),provider:r.Yj().optional(),input_tokens:r.ai().int().nonnegative().optional(),output_tokens:r.ai().int().nonnegative().optional(),cache_creation_input_tokens:r.ai().int().nonnegative().optional(),cache_read_input_tokens:r.ai().int().nonnegative().optional(),ephemeral_1h_input_tokens:r.ai().int().nonnegative().optional(),ephemeral_5m_input_tokens:r.ai().int().nonnegative().optional(),web_search_requests:r.ai().int().nonnegative().optional(),web_fetch_requests:r.ai().int().nonnegative().optional(),service_tier:r.Yj().optional(),stop_reason:r.Yj().optional(),message_id:r.Yj().optional(),uuid:r.Yj().optional(),parent_uuid:r.Yj().optional(),run_key:r.Yj().optional()}).catchall(r.L5());r.Ik({sessionId:r.Yj().min(1),messageId:r.Yj().min(1),parentId:r.Yj().min(1),rootSessionId:r.Yj().min(1),startedAt:s.w$(),attributes:W});let X=r.Ik({tool_name:r.Yj().optional(),tool_use_id:r.Yj().optional(),target:r.Yj().optional(),is_error:r.zM().optional(),input_size:r.ai().int().nonnegative().optional(),output_size:r.ai().int().nonnegative().optional(),uuid:r.Yj().optional(),parent_uuid:r.Yj().optional(),run_key:r.Yj().optional()}).catchall(r.L5());r.Ik({source_tool:r.Yj().optional(),file_path:r.Yj().optional(),repo:r.Yj().optional(),tool_name:r.Yj().optional(),gitignored:r.zM().optional(),whole_file:r.zM().optional(),correlation_id:r.uR().optional(),trace_id:r.Yj().regex(/^[0-9a-f]{32}$/).optional(),exception_ids:r.YO(r.Os()).optional()}).catchall(r.L5());let Y=r.Ik({ruleId:r.Yj().min(1),ruleName:r.Yj(),ruleVersion:r.Yj().min(1),category:u,severity:v,span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)});r.Ik({sessionId:r.Yj().min(1),toolUseId:r.Yj().min(1),parentId:r.Yj().min(1),rootSessionId:r.Yj().min(1),startedAt:s.w$(),attributes:X,inspections:r.YO(Y).default([])});let Z=r.Ik({objectType:T,identityKey:r.Yj().min(1),location:r.Yj().optional(),title:r.Yj().optional(),hostId:r.Yj().optional(),attributes:V.default({})}).meta({id:"InventoryInput"}),$=r.Ik({url:r.Yj().min(1),name:r.Yj().optional(),attributes:V.default({})}).meta({id:"SourceProjectInput"}),_=r.Ik({id:r.Yj().min(1),eventType:U,startedAt:s.w$(),endedAt:s.w$().optional(),parentId:r.Yj().optional(),rootSessionId:r.Yj().optional(),hostId:r.Yj().optional(),harnessId:r.Yj().optional(),sourceProjectId:r.Yj().optional(),severity:v.optional(),priority:r.Yj().optional(),content:r.Yj().optional(),contentHash:r.Yj().optional(),attributes:V.optional()}).meta({id:"AuditEventInput"});r.Ik({class:r.Yj().min(1),label:r.Yj().optional(),attributes:V.optional()});let aa=r.Ik({ruleId:r.Yj().min(1),version:r.Yj().min(1),name:r.Yj(),category:u,severity:v,definition:r.Yj()});r.Ik({id:r.Yj().min(1),auditEventId:r.Yj().min(1),inspectionDefinitionId:r.Yj().min(1),classifiedDataId:r.Yj().optional(),span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1),findingKey:r.Yj().optional(),firstDetectedAt:s.w$().optional()}),r.Ik({host:Z.optional(),harness:Z.optional(),project:$.optional()}).meta({id:"InventoryContext"}),r.Ik({hostId:r.Yj().optional(),harnessId:r.Yj().optional(),accountId:r.Yj().optional(),sourceProjectId:r.Yj().optional()}).meta({id:"ResolvedInventory"}),r.Ik({hosts:r.YO(r.Yj()),harnesses:r.YO(r.Yj()),osVersions:r.YO(r.Yj()),projects:r.YO(r.Yj())}).meta({id:"InventoryFacets"});let ab=r.Ik({sessionId:r.Yj(),model:r.Yj(),provider:r.Yj(),inputTokens:r.ai().int().nonnegative(),outputTokens:r.ai().int().nonnegative(),cacheCreation:r.ai().int().nonnegative(),cacheRead:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable()}).meta({id:"TokenRollup"});r.Ik({sessionId:r.Yj(),rollups:r.YO(ab),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable(),costIsPartial:r.zM()});let ac=r.Ik({provider:r.Yj(),model:r.Yj(),inputTokens:r.ai().int().nonnegative(),outputTokens:r.ai().int().nonnegative(),cacheTokens:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai().nullable()});function ad(a){return JSON.stringify(a)}r.Ik({models:r.YO(ac),sessionCount:r.ai().int().nonnegative(),totalTokens:r.ai().int().nonnegative(),estimatedCostUsd:r.ai(),costIsPartial:r.zM()});let ae=r.k5(["active","completed","interrupted","error"]),af=r.k5(["session","prompt","response","tool","hook","detection","share","permission","commit","error","active"]),ag=r.k5(["detections","shares","inventory"]),ah=r.Ik({id:r.Yj(),occurredAt:s.w$(),kind:af,title:r.Yj(),detail:r.Yj(),tool:r.Yj().nullable(),severity:v.nullable(),link:ag.nullable(),targetId:r.Yj().nullable(),internal:r.zM(),flagged:r.zM()}).meta({id:"ActivityAuditEvent"}),ai=r.Ik({id:r.Yj(),harness:R,title:r.Yj(),project:r.Yj(),repo:r.Yj(),branches:r.YO(r.Yj()),startedAt:s.w$(),endedAt:s.w$().nullable(),status:ae,turns:r.ai().int().nonnegative(),findings:r.ai().int().nonnegative(),shares:r.ai().int().nonnegative()}).meta({id:"ActivitySessionSummary"});ai.extend({host:r.Yj(),cwd:r.Yj(),models:r.YO(r.Yj()),version:r.Yj(),tokens:ab,tools:r.g1(r.Yj(),r.ai().int().nonnegative()),files:r.YO(r.Yj()),commits:r.ai().int().nonnegative(),events:r.YO(ah)}).meta({id:"ActivitySession"}),r.Ik({tz:r.Yj().optional()});let aj=r.Ik({sessionsToday:r.ai().int().nonnegative(),liveNow:r.ai().int().nonnegative(),toolCallsToday:r.ai().int().nonnegative(),findingsToday:r.ai().int().nonnegative(),egressToday:r.ai().int().nonnegative()}).meta({id:"GetActivityStatsResponse"});r.Ik({q:r.Yj().optional(),harness:r.YO(R).optional(),from:r.KC([s.p6(),s.w$()]).optional(),to:r.KC([s.p6(),s.w$()]).optional(),excludeEmpty:r.uE().optional(),limit:t.ai().int().min(1).max(100).default(50),cursor:r.Yj().optional()});let ak=r.Ik({items:r.YO(ai),nextCursor:r.Yj().nullable(),emptyCount:r.ai().int().nonnegative()}).meta({id:"ListActivitySessionsResponse"});r.Ik({limit:t.ai().int().min(1).max(500).default(100),cursor:r.Yj().optional(),order:r.k5(["asc","desc"]).default("asc")}),r.Ik({items:r.YO(ah),nextCursor:r.Yj().nullable()}).meta({id:"ListSessionEventsResponse"}),r.Ik({format:r.k5(["ndjson","json"]).default("ndjson")}),r.Ik({format:r.k5(["csv","json"]).default("csv"),q:r.Yj().optional(),harness:r.YO(R).optional(),from:r.KC([s.p6(),s.w$()]).optional(),to:r.KC([s.p6(),s.w$()]).optional()}),r.Ik({stats:aj,sessions:ak}).meta({id:"ActivityOverviewResponse"});let al=r.k5(["prompt","response","code_change","tool_use"]).meta({id:"EventKind"}),am=al.options.map(a=>`'${a}'`).join(","),an=r.k5(["claude-code","claude-desktop","cursor","chatgpt","claude-ai","github-copilot","codex","antigravity","cli","unknown"]).meta({id:"SourceTool"}),ao=r.Ik({sessionId:r.Yj().optional(),repo:r.Yj().optional(),filePath:r.Yj().optional(),toolName:r.Yj().optional(),gitignored:r.zM().optional(),wholeFile:r.zM().optional(),model:r.Yj().optional(),turnIndex:r.ai().int().nonnegative().optional(),correlationId:r.uR().optional(),traceId:r.Yj().regex(/^[0-9a-f]{32}$/).optional(),exceptionIds:r.YO(r.Os()).optional()}).meta({id:"EventMetadata"}),ap=r.Ik({id:r.Os(),sourceTool:an,kind:al,occurredAt:s.w$(),contentHash:r.Yj(),content:r.Yj(),metadata:ao.optional()}).meta({id:"Event"}),aq=ap.meta({id:"IngestEvent"});r.Ik({events:r.YO(aq).min(1).max(100),dedupe:r.eu("content-hash").optional()}).meta({id:"IngestBatch"});let ar=r.k5(["project","skill","mcp","hook","config"]).meta({id:"AssetType"}),as=r.k5(["open","approved","blocked"]).meta({id:"AccessLevel"}),at=r.k5(["source","public-dep","vendored","config","data","docs","generated"]).meta({id:"Origin"}),au=r.k5(["known-good","risky","unapproved"]).meta({id:"TrustLevel"}),av=r.k5(["update","stale","conflict","unknown","change","untracked","risk","findings"]).meta({id:"Flag"}),aw=r.k5(["public","private"]).meta({id:"Visibility"}),ax=r.k5(["block","redact","warn"]).meta({id:"HarnessEventKind"}),ay=r.k5(["claudecode","cursor","codex","antigravity"]).meta({id:"HarnessId"}),az=r.Ik({open:r.ai().int().nonnegative(),approved:r.ai().int().nonnegative(),blocked:r.ai().int().nonnegative(),total:r.ai().int().nonnegative()}).meta({id:"AccessCounts"}),aA=r.Ik({id:r.Yj(),type:ar,name:r.Yj(),sub:r.Yj(),flags:r.YO(av),trust:au.optional()}).meta({id:"AssetSummary"}),aB=r.Ik({id:r.Yj(),name:r.Yj(),repo:r.Yj(),visibility:aw,language:r.Yj(),policyDefault:as,updatedAt:s.w$(),accessCounts:az,findingsCount:r.ai().int().nonnegative()}).meta({id:"ProjectSummary"}),aC=r.Ik({type:ar,assets:r.YO(aA)}),aD=r.Ik({id:ay,label:r.Yj(),kind:r.Yj(),version:r.Yj(),sessions:r.ai().int().nonnegative(),assetCount:r.ai().int().nonnegative(),flagCount:r.ai().int().nonnegative(),projects:r.YO(aB),categories:r.YO(aC)}).meta({id:"HarnessSummary"});r.Ik({items:r.YO(aD)}).meta({id:"ListHarnessesResponse"});let aE=r.Ik({type:ar,total:r.ai().int().nonnegative(),trustRollup:r.Ik({"known-good":r.ai().int().nonnegative(),risky:r.ai().int().nonnegative(),unapproved:r.ai().int().nonnegative()}).partial().strict().optional(),flagRollup:r.Ik({update:r.ai().int().nonnegative(),stale:r.ai().int().nonnegative(),conflict:r.ai().int().nonnegative(),unknown:r.ai().int().nonnegative(),change:r.ai().int().nonnegative(),untracked:r.ai().int().nonnegative(),risk:r.ai().int().nonnegative(),findings:r.ai().int().nonnegative()}).partial().strict(),items:r.YO(aA)}).meta({id:"AssetGroup"});r.Ik({groups:r.YO(aE)}).meta({id:"ListAssetsResponse"});let aF=r.Ik({name:r.Yj(),signature:r.Yj(),description:r.Yj(),write:r.zM(),risk:r.Yj().nullable()}).meta({id:"McpTool"}),aG=r.Ik({id:r.Yj(),title:r.Yj(),note:r.Yj()});aA.extend({description:r.Yj().nullable(),trust:au.nullable(),meta:r.g1(r.Yj(),r.L5()),finding:aG.nullable(),tools:r.YO(aF).optional()}).meta({id:"AssetDetail"}),r.Ik({items:r.YO(aB)}).meta({id:"ListProjectsResponse"}),r.Ik({attention:r.ai().int().nonnegative(),byType:r.Ik({project:r.ai().int().nonnegative(),skill:r.ai().int().nonnegative(),mcp:r.ai().int().nonnegative(),hook:r.ai().int().nonnegative(),config:r.ai().int().nonnegative()}),harnesses:r.ai().int().nonnegative(),mcpTrust:r.Ik({"known-good":r.ai().int().nonnegative(),risky:r.ai().int().nonnegative(),unapproved:r.ai().int().nonnegative()})}).meta({id:"InventoryStats"});let aH=r.Ik({path:r.Yj(),name:r.Yj(),origin:at,access:as,isCustom:r.zM(),findings:r.ai().int().nonnegative(),blockedAt:s.w$().nullable().optional(),note:r.Yj().nullable().optional()}).meta({id:"FileSummary"}),aI=r.Ik({name:r.Yj(),path:r.Yj(),accessCounts:az}).meta({id:"FolderSummary"});r.Ik({project:r.Ik({id:r.Yj(),repo:r.Yj(),visibility:aw}),path:r.Yj(),folders:r.YO(aI).optional(),files:r.YO(aH)}).meta({id:"ProjectTreeResponse"}),aH.extend({project:r.Ik({repo:r.Yj(),visibility:aw,language:r.Yj(),policyDefault:as,updatedAt:s.w$()}),findingsRefs:r.YO(r.Ik({id:r.Yj(),title:r.Yj()}))}).meta({id:"FileDetail"}),r.Ik({path:r.Yj(),access:as}).meta({id:"SetFileAccessBody"}),r.Ik({file:aH,accessCounts:az}).meta({id:"SetFileAccessResponse"}),r.Ik({trust:au}).meta({id:"SetMcpTrustBody"});let aJ=r.Ik({kind:ax,title:r.Yj(),detail:r.Yj(),occurredAt:s.w$(),findingId:r.Yj().nullable().optional()}).meta({id:"HarnessEventItem"});r.Ik({counts:r.Ik({block:r.ai().int().nonnegative(),redact:r.ai().int().nonnegative(),warn:r.ai().int().nonnegative()}),items:r.YO(aJ)}).meta({id:"HarnessEventsResponse"}),r.Ik({jobId:r.Yj(),startedAt:s.w$()}).meta({id:"RescanResponse"}),r.Ik({repo:r.Yj()}).meta({id:"ConnectProjectBody"}),r.Ik({type:r.YO(ar).optional(),q:r.Yj().optional()}),r.Ik({path:r.Yj().optional(),q:r.Yj().optional(),filter:r.k5(["blocked"]).optional()}),r.Ik({path:r.Yj()}),r.Ik({limit:t.ai().int().min(1).max(50).default(7)});let aK=r.k5(["once","temporary","permanent"]),aL=r.Ik({repo:r.Yj().optional(),sourceTool:r.Yj().optional(),provider:r.Yj().optional()}).strict(),aM=r.k5(["suppress","reveal_to_model"]),aN=r.Ik({id:r.Os(),ruleId:r.Yj(),category:u,valueFingerprint:r.Yj().regex(/^[0-9a-f]{64}$/),keyVersion:r.ai().int().positive(),maskedValue:r.Yj(),capability:aM.default("suppress"),scope:aK,expiresAt:s.w$().nullable(),maxUses:r.ai().int().positive().nullable(),useCount:r.ai().int().nonnegative(),lastUsedAt:s.w$().nullable(),justification:r.Yj().min(1),conditions:aL.nullable(),createdBy:r.Yj(),createdVia:r.k5(["cli-approve","cli-add","web-approve","web-add","api","setup-triage"]),createdAt:s.w$(),updatedAt:s.w$(),revokedAt:s.w$().nullable(),revokedBy:r.Yj().nullable(),revokeReason:r.Yj().nullable()}),aO=aN.pick({id:!0,ruleId:!0,valueFingerprint:!0,keyVersion:!0,capability:!0,expiresAt:!0,maxUses:!0,useCount:!0,conditions:!0});function aP(a){let{valueFingerprint:b,...c}=a;return c}function aQ(a){let{valueFingerprint:b,...c}=a;return c}function aR(a,b){return"present"===b.status&&b.version===a}aN.omit({valueFingerprint:!0}),r.k5(["keyword","regex","validator"]).meta({id:"MatcherType"}),r.k5(["safe","quarantined"]).meta({id:"RuleProbeVerdict"});let aS=r.Ik({type:r.eu("keyword"),keywords:r.YO(r.Yj().min(1)).min(1),caseSensitive:r.zM().default(!1)}),aT=r.Ik({type:r.eu("regex"),pattern:r.Yj().min(1).max(2e3),flags:r.Yj().default("gi"),captureGroup:r.ai().int().nonnegative().optional()}).refine(a=>(function(a,b){try{return new RegExp(a,b),!0}catch{return!1}})(a.pattern,a.flags),{message:"pattern/flags do not form a valid JavaScript regular expression",path:["pattern"]}).refine(a=>void 0!==a.captureGroup||!function(a,b){try{let c=new RegExp(a,b.replace(/[gy]/g,""));return c.exec("")?.[0].length===0}catch{return!1}}(a.pattern,a.flags),{message:'a whole-match regex that can match the empty string (e.g. "\\d*", "a?", "(?:)") can hang the matcher — scope the quantifier to a captureGroup, or require at least one character',path:["pattern"]}),aU=r.Ik({type:r.eu("validator"),name:r.k5(["luhn","entropy","ssn-checksum"]),config:r.g1(r.Yj(),r.L5()).optional()}),aV=r.gM("type",[aS,aT,aU]).meta({id:"Matcher"}),aW=r.Ik({extensions:r.YO(r.Yj().regex(/^\.[A-Za-z0-9]+$/)).min(1)}).meta({id:"AppliesTo"}),aX=r.KC([r.Yj(),r.Ik({name:r.Yj(),config:r.g1(r.Yj(),r.L5()).optional()})]).meta({id:"PostValidatorRef"}),aY=r.Ik({categories:r.YO(u).min(1).optional(),ruleIds:r.YO(r.Yj().min(1)).min(1).optional(),labels:r.YO(r.Yj().min(1)).min(1).optional(),windowChars:r.ai().int().positive().default(160),confidenceBoost:r.ai().min(0).max(.3).optional()}).refine(a=>(a.categories?.length??0)+(a.ruleIds?.length??0)+(a.labels?.length??0)>0,{message:"requiresNearby needs at least one of categories, ruleIds, or labels"}).meta({id:"RequiresNearby"}),aZ=r.Ik({label:r.Yj(),text:r.Yj().max(5e4),shouldMatch:r.zM(),filePath:r.Yj().optional(),expectedSpans:r.YO(r.Ik({start:r.ai(),end:r.ai()})).optional()}).meta({id:"RuleFixture"}),a$=r.Ik({specVersion:r.eu(1),id:r.Yj().regex(/^[a-z][a-z0-9-]*\/[a-z][a-z0-9-]*$/),name:r.Yj(),category:u,severity:v,matcher:aV,appliesTo:aW.optional(),postValidators:r.YO(aX).optional(),requiresNearby:aY.optional(),examples:r.YO(r.Yj()).optional()}).meta({id:"Rule"}),a_=r.Ik({name:r.Yj(),email:r.Rp().optional(),url:r.OZ().optional()}).meta({id:"Author"});r.Ik({specVersion:r.eu(1),id:r.Yj(),name:r.Yj(),version:r.Yj(),rules:r.YO(r.Yj()),description:r.Yj().optional(),author:a_.optional(),license:r.Yj().optional(),sourceUrl:r.OZ().optional()}).meta({id:"PackManifest"});let a0=r.k5(["global","repo","user"]).meta({id:"PolicyScope"}),a1=r.KC([r.Ik({ruleId:r.Yj()}),r.Ik({category:u})]).meta({id:"PolicyTarget"}),a2=r.Ik({id:r.Os(),scope:a0,target:a1,action:w,enabled:r.zM().default(!0),customKeywords:r.YO(r.Yj()).optional(),name:r.Yj().optional()}).meta({id:"Policy"});r.Ik({version:r.Yj(),policies:r.YO(a2),rules:r.YO(a$).optional(),rulesComplete:r.zM().optional(),exceptions:r.YO(aO).optional(),ruleVersions:r.g1(r.Yj(),r.Yj()).optional(),customKeywords:r.YO(r.Yj()),fetchedAt:s.w$()}).meta({id:"PolicyBundle"});let a3=["config"],a4=u.options.filter(a=>!a3.includes(a)),a5={secret:"critical",financial:"critical",code_flaw:"critical",pii:"high",phi:"high",custom:"high",code_context:"low",config:"low"},a6=r.k5(["builtin","custom"]).meta({id:"PolicyKind"}),a7=["monitor","warn","redact","block"],a8=r.k5(a7).meta({id:"BuiltinPolicyId"}),a9=a7,ba={monitor:{name:"Monitor",action:"log",description:"Log every match for audit. The request is allowed through untouched."},warn:{name:"Warn",action:"warn",description:"Allow the request, but warn the user inline before it is sent."},redact:{name:"Redact",action:"redact",description:"Automatically strip the matched value from the request, then continue."},block:{name:"Block",action:"block",description:"Refuse the request entirely whenever any rule in this detection matches."}},bb=Object.fromEntries(u.options.map(a=>[a,ba[function(a){if(a3.includes(a))return"monitor";let b=a5[a];return"critical"===b||"high"===b?"warn":"monitor"}(a)].action])),bc=Object.fromEntries(a7.map(a=>[a,{id:a,...ba[a]}])),bd="monitor";function be(a){let b=a8.safeParse(a??bd);return bc[b.success?b.data:bd].action}let bf=r.Ik({id:r.Yj(),name:r.Yj(),ruleCount:r.ai().int().nonnegative(),enabled:r.zM()}).meta({id:"UsedByItem"}),bg=r.Ik({id:r.Yj(),kind:a6,name:r.Yj(),enabled:r.zM(),usedByCount:r.ai().int().nonnegative()}).meta({id:"PolicyListItem"});r.Ik({specVersion:r.eu(1),id:r.Yj(),kind:a6,name:r.Yj(),enabled:r.zM(),description:r.Yj(),usedBy:r.YO(bf)}).meta({id:"PolicyDetail"}),r.Ik({policies:r.ai().int().nonnegative(),builtin:r.ai().int().nonnegative(),custom:r.ai().int().nonnegative(),detectionsGoverned:r.ai().int().nonnegative()}).meta({id:"PolicyStatsResponse"}),r.Ik({cursor:r.Yj().optional(),limit:t.ai().int().min(1).max(200).default(50),sourceTool:r.Yj().optional(),kind:r.Yj().optional(),from:s.w$().optional(),to:s.w$().optional()}),r.Ik({items:r.YO(ap),nextCursor:r.Yj().nullable()}).meta({id:"ListEventsResponse"}),r.Ik({accepted:r.ai().int().nonnegative(),duplicates:r.ai().int().nonnegative()}).meta({id:"IngestResponse"}),r.Ik({cursor:r.Yj().optional(),limit:t.ai().int().min(1).max(200).default(50),severity:r.Yj().optional(),category:r.Yj().optional(),eventId:r.Os().optional()}),r.Ik({items:r.YO(z),nextCursor:r.Yj().nullable()}).meta({id:"ListFindingsResponse"}),r.Ik({items:r.YO(bg)}).meta({id:"ListPoliciesResponse"}),a2.omit({id:!0}).meta({id:"CreatePolicyRequest"}),a2.partial().required({id:!0}).meta({id:"UpdatePolicyRequest"}),r.Ik({accepted:r.zM()}).meta({id:"RecordAuditEventResponse"}),r.Ik({error:r.Ik({code:r.Yj(),message:r.Yj(),details:r.L5().optional()})}).meta({id:"ErrorResponse"});let bh=r.k5(["user","project","local","plugin"]),bi=r.Ik({name:r.Yj().min(1),source:r.Yj().min(1),scope:bh,pluginName:r.Yj().optional(),version:r.Yj().optional(),description:r.Yj().optional(),updatedAt:s.w$().optional(),location:r.Yj().optional()}),bj=r.Ik({event:r.Yj().min(1),matcher:r.Yj().optional(),command:r.Yj().min(1),timeout:r.ai().optional(),scope:bh,pluginName:r.Yj().optional(),location:r.Yj().optional()}),bk=r.Ik({name:r.Yj().min(1),scope:bh,pluginName:r.Yj().optional(),marketplace:r.Yj().optional(),project:r.Yj().optional(),transport:r.Yj().min(1),command:r.Yj().optional(),url:r.Yj().optional(),envKeys:r.YO(r.Yj()).optional(),location:r.Yj().optional()}),bl=r.Ik({name:r.Yj().min(1),path:r.Yj().min(1),scope:bh,kind:r.Yj().min(1),detail:r.Yj().optional(),entryCount:r.ai().optional(),updatedAt:s.w$().optional()});r.Ik({scannedAt:s.w$(),skills:r.YO(bi),hooks:r.YO(bj),mcpServers:r.YO(bk),configFiles:r.YO(bl),errors:r.YO(r.Ik({source:r.Yj(),reason:r.Yj()}))});let bm=r.Ik({ruleId:r.Yj().min(1),version:r.Yj().min(1),span:y,maskedMatch:r.Yj(),actionTaken:w,confidence:r.ai().min(0).max(1)});r.Ik({items:r.YO(Z),scanEvent:_,definitions:r.YO(aa).optional(),findings:r.YO(bm).optional()});let bn=r.Yj().regex(/^[a-z][a-z0-9-]*$/),bo=r.Yj().regex(/^[a-z][a-z0-9-]*$/),bp=r.Yj().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z-.]+)?$/),bq=r.k5(["labs","user","org"]),br=r.k5(["library"]).meta({id:"OriginEnum"}),bs=r.k5(["all","library","custom","customized","updates"]),bt=r.k5(["new","imported","update"]).meta({id:"LibraryStateEnum"}),bu=r.Ik({all:r.ai().int().nonnegative(),library:r.ai().int().nonnegative(),custom:r.ai().int().nonnegative(),customized:r.ai().int().nonnegative(),updates:r.ai().int().nonnegative()}).meta({id:"DetectionCounts"}),bv=r.Ik({id:r.Yj(),name:r.Yj(),version:bp,enabled:r.zM(),origin:br,publisher:bn.optional(),publisherKind:bq.optional(),ruleCount:r.ai().int().nonnegative(),namespace:bn,packId:bo,policyId:r.Yj().optional(),latestVersion:bp.optional()}).meta({id:"DetectionListItem"});r.Ik({counts:bu,items:r.YO(bv)}).meta({id:"ListDetectionsResponse"}),r.Ik({filter:bs.optional().default("all"),q:r.Yj().optional()}),r.Ik({detections:r.ai().int().nonnegative(),rules:r.ai().int().nonnegative(),active:r.ai().int().nonnegative(),findingsLast30d:r.ai().int().nonnegative()}).meta({id:"DetectionStats"});let bw=r.Ik({id:r.Yj(),name:r.Yj(),category:u,severity:v,matcher:aV}).meta({id:"DetectionRule"}),bx=r.Ik({available:r.zM(),latestVersion:bp,latestRuleCount:r.ai().int().nonnegative().optional()}).nullable().meta({id:"DetectionUpdate"});r.Ik({id:r.Yj(),name:r.Yj(),version:bp,enabled:r.zM(),origin:br,publisher:bn.optional(),publisherKind:bq.optional(),ruleCount:r.ai().int().nonnegative(),namespace:bn,packId:bo,description:r.Yj().optional(),editedAt:s.w$(),findingsLast30d:r.ai().int().nonnegative(),latestVersion:bp.nullable().optional(),update:bx,rules:r.YO(bw),modified:r.zM(),policyId:r.Yj().optional()}).meta({id:"DetectionDetail"});let by=r.Ik({id:r.Yj(),name:r.Yj(),publisher:bn,publisherKind:bq.optional(),category:u.optional(),version:bp,ruleCount:r.ai().int().nonnegative(),description:r.Yj().optional(),updatedAt:s.w$(),state:bt,importedAs:r.Yj().nullable()}).meta({id:"LibraryItem"});function bz(a){return{id:`${a.namespace}/${a.packId}`,name:a.name,version:a.version,enabled:a.enabled,origin:"library",namespace:a.namespace,packId:a.packId,ruleCount:a.ruleCount,...null!=a.policyId?{policyId:a.policyId}:{},...null!=a.latestVersion?{latestVersion:a.latestVersion}:{}}}function bA(a,b,c){let d=a.rules.flatMap(a=>{let b=aV.safeParse(a.matcher);return b.success?[{id:a.id,name:a.name,category:a.category,severity:a.severity,matcher:b.data}]:[]});return{id:`${a.namespace}/${a.packId}`,name:a.name,version:a.version,enabled:a.enabled,origin:"library",namespace:a.namespace,packId:a.packId,ruleCount:a.rules.length,editedAt:a.updatedAt.toISOString(),findingsLast30d:b,latestVersion:c?c.latestVersion:null,update:c,rules:d,modified:!1,...null!=a.policyId?{policyId:a.policyId}:{}}}function bB(a){let b=a.indexOf("/");return b<1||b===a.length-1?null:{namespace:a.slice(0,b),packId:a.slice(b+1)}}function bC(a,b){let c=a.filter(a=>null!=a.latestVersion),d={all:a.length,library:a.length,custom:0,customized:0,updates:c.length},e=b.filter,f="custom"===e||"customized"===e?[]:"updates"===e?[...c]:[...a];if(b.q){let a=b.q.toLowerCase();f=f.filter(b=>b.name.toLowerCase().includes(a)||b.packId.toLowerCase().includes(a)||b.namespace.toLowerCase().includes(a))}return f.sort((a,b)=>a.enabled!==b.enabled?a.enabled?-1:1:a.name.localeCompare(b.name)),{counts:d,items:f.map(bz)}}r.Ik({categories:r.YO(u),items:r.YO(by)}).meta({id:"ListLibraryResponse"}),r.Ik({libraryId:r.Yj().refine(a=>/^[^/]+\/[^/]+$/.test(a),{message:"libraryId must be in namespace/packId format"})}).meta({id:"ImportDetectionRequest"});let bD=r.k5(["provider","internal","external","ip"]).meta({id:"DestinationKind"}),bE=r.k5(["https","http","sftp","grpc","smtp","ws","wss"]).meta({id:"Transport"}),bF=r.k5(["secrets","pii","customer","source","telemetry","logs","metrics","none"]).meta({id:"DataClass"}),bG=bF.options,bH=r.k5(["recognized","internal","unverified","ip"]).meta({id:"ShareTrustLevel"}),bI=r.k5(["allow","block"]).meta({id:"EgressDecision"}),bJ=r.k5(["allowed","blocked","review"]).meta({id:"EgressStatus"}),bK=r.k5(["raw_ip","unverified_domain","plaintext_transport"]).meta({id:"ReviewReason"}),bL=r.k5(["GET","POST","PUT","DELETE","SDK","REF"]).meta({id:"HttpMethod"}),bM=r.Ik({needsReview:r.zM(),reasons:r.YO(bK)}).meta({id:"ReviewInfo"}),bN=r.Ik({port:r.ai().int().nullable(),geo:r.Yj().nullable(),ptr:r.Yj().nullable()}).meta({id:"DestinationNetwork"}),bO=r.Ik({id:r.Yj(),method:bL,transport:bE,url:r.Yj(),template:r.zM(),dataClass:bF,lastSeen:s.w$(),callSiteCount:r.ai().int().nonnegative()}).meta({id:"EndpointSummary"}),bP=r.Ik({id:r.Yj(),project:r.Yj(),file:r.Yj(),line:r.ai().int().nonnegative(),snippet:r.Yj(),dynamic:r.zM(),vendored:r.zM(),projectId:r.Yj().nullable()}).meta({id:"CallSite"}),bQ=bO.extend({sites:r.YO(bP)}).meta({id:"EndpointWithSites"}),bR=r.Ik({id:r.Yj(),kind:bD,name:r.Yj(),host:r.Yj(),category:r.Yj(),trust:bH,status:bJ,isCustom:r.zM(),lastSeen:s.w$(),endpointCount:r.ai().int().nonnegative(),callSiteCount:r.ai().int().nonnegative(),transports:r.YO(bE),dataClasses:r.YO(bF),review:bM,network:bN.nullable(),endpoints:r.YO(bO)}).meta({id:"ShareDestinationSummary"});bR.omit({endpointCount:!0,callSiteCount:!0,endpoints:!0}).extend({note:r.Yj().nullable(),endpoints:r.YO(bQ)}).meta({id:"ShareDestinationDetail"});let bS=r.Ik({id:r.Yj(),kind:bD,name:r.Yj(),host:r.Yj(),trust:bH,status:bJ,review:bM,topDataClass:bF,callSiteCount:r.ai().int().nonnegative(),lastSeen:s.w$()}).meta({id:"ReviewDestination"}),bT=r.Ik({kind:bD,total:r.ai().int().nonnegative(),items:r.YO(bR)}).meta({id:"ShareDestinationGroup"});r.Ik({groups:r.YO(bT)}).meta({id:"ListShareDestinationsResponse"}),r.Ik({items:r.YO(bS)}).meta({id:"NeedsReviewResponse"}),r.Ik({destinations:r.ai().int().nonnegative(),endpoints:r.ai().int().nonnegative(),callSites:r.ai().int().nonnegative(),needsReview:r.ai().int().nonnegative(),insecure:r.ai().int().nonnegative(),byKind:r.Ik({provider:r.ai().int().nonnegative(),internal:r.ai().int().nonnegative(),external:r.ai().int().nonnegative(),ip:r.ai().int().nonnegative()}),byTrust:r.Ik({recognized:r.ai().int().nonnegative(),internal:r.ai().int().nonnegative(),unverified:r.ai().int().nonnegative(),ip:r.ai().int().nonnegative()})}).meta({id:"SharesStats"}),r.Ik({decision:bI.nullable()}).meta({id:"SetEgressDecisionBody"}),r.Ik({destination:bR}).meta({id:"SetEgressDecisionResponse"}),r.Ik({q:r.Yj().optional(),kind:r.YO(bD).optional(),groupBy:r.k5(["destination"]).default("destination"),review:r.uE().default(!1)}),r.Ik({format:r.k5(["csv","json"]).default("csv"),q:r.Yj().optional(),kind:r.YO(bD).optional()});let bU=r.k5(["npm","pypi","go","maven","rubygems","cargo","composer","nuget"]).meta({id:"EgressEcosystem"});r.Ik({id:r.Yj(),name:r.Yj(),category:r.Yj(),hostSuffixes:r.YO(r.Yj()).min(1),apiBase:r.Yj(),defaultDataClasses:r.YO(bF).min(1),sdks:r.jg(bU,r.YO(r.Yj()))}).meta({id:"ProviderRegistryEntry"});let bV=r.Ik({file:r.Yj(),line:r.ai().int().positive(),snippet:r.Yj(),dynamic:r.zM(),vendored:r.zM()}).meta({id:"EgressCallSiteHit"}),bW=r.Ik({host:r.Yj(),kind:bD,name:r.Yj(),category:r.Yj(),trust:bH,network:bN.nullable(),method:bL,transport:bE,url:r.Yj(),template:r.zM(),dataClass:bF,site:bV}).meta({id:"ResolvedEgressHit"}),bX=r.gM("mode",[r.Ik({mode:r.eu("walk"),walkedPrefix:r.Yj()}),r.Ik({mode:r.eu("ledger"),scannedFiles:r.YO(r.Yj()),deletedFiles:r.YO(r.Yj())})]).meta({id:"EgressReconcile"});r.Ik({projectKey:r.Yj().min(1),project:r.Yj(),projectId:r.Yj().nullable(),reconcile:bX,hits:r.YO(bW)}).meta({id:"RecordProjectEgressInput"}),r.Ik({destinations:r.ai().int().nonnegative(),endpoints:r.ai().int().nonnegative(),callSites:r.ai().int().nonnegative(),truncated:r.zM(),droppedFiles:r.YO(r.Yj()).default([])}).meta({id:"EgressWriteSummary"});let bY=r.Yj().optional();function bZ(a){return({log:"monitored",block:"blocked",redact:"redacted",warn:"warned",allow:"allowed"})[a]??"allowed"}function b$(a){return"code_context"===a?"source_code":a}function b_(a){return S[a]??"api"}r.Ik({reference:r.Yj(),scope:r.Yj(),reason:r.Yj(),confirmation:bY}),r.Ik({ruleId:r.Yj(),value:r.Yj(),scope:r.Yj(),reason:r.Yj(),confirmation:bY}),r.Ik({pointer:r.Yj(),scope:r.Yj(),justification:r.Yj(),confirmation:bY}),r.Ik({id:r.Yj(),reason:r.Yj()}),r.Ik({confirmation:r.Yj()});let b0=["open","handled","dismissed","resolved"];function b1(a){let b=new Set(a.filter(a=>void 0!==a));if(0!==b.size){for(let a of b0)if(b.has(a))return a}}function b2(a){return"code_change"!==a.kind?"handled":null===a.findingKey?"open":"resolved"===a.latestResolutionStatus?"resolved":"dismissed"===a.latestResolutionStatus?"dismissed":"open"}function b3(a,b={}){let c=b.overrides,d=b.packNames,e=b.aggregates,f=new Map;for(let b of a){let a=f.get(b.ruleId);a?a.push(b):f.set(b.ruleId,[b])}let g=[];for(let[a,b]of f){let f=b.map(a=>{let b=c?.get(a.id)??a.actionTaken;return{id:a.id,provider:b_(a.sourceTool),repo:a.repo,file:a.file,...void 0===a.toolName?{}:{toolName:a.toolName},...void 0===a.eventId?{}:{eventId:a.eventId},...void 0===a.sessionId?{}:{sessionId:a.sessionId},action:bZ(b),detectedAt:a.occurredAt,confidence:a.confidence,status:a.status}}),h=e?.get(a),i=h?.latestDetectedAt??b.reduce((a,b)=>b.occurredAt>a?b.occurredAt:a,b[0]?.occurredAt??new Date(0).toISOString()),j=new Set,k=(h?[...new Set(h.sourceTools.map(b_))].sort():f.map(a=>a.provider)).filter(a=>!j.has(a)&&(j.add(a),!0)),l=new Set(h?h.actionsTaken.map(bZ):f.map(a=>a.action)),m=1===l.size?[...l][0]??null:null,n=b[0]?.severity??"low",o={id:a,name:d?.get(a)??null},p=b$(b[0]?.category??"custom"),q={id:`category:${p}`,name:p},r={maskedValue:b[0]?.maskedMatch??"",contextPrefix:""},s=b1(h?h.statusInputs.map(b2):f.map(a=>a.status)),t={id:a,category:p,subtype:a,severity:n,match:r,detection:o,policy:q,instanceCount:h?.instanceCount??f.length,providers:k,aggregateAction:m,latestDetectedAt:i,instances:f,status:s};h&&(b6.set(t,[...l]),void 0!==h.searchText&&b4.set(t,b5(t,h.searchText))),g.push(t)}return g}let b4=new WeakMap;function b5(a,b){return[a.subtype,a.category,a.match.maskedValue,a.policy.name,a.id,...a.instances.map(a=>a.repo),...a.instances.map(a=>a.file),...a.instances.map(a=>a.toolName?`via ${a.toolName}`:""),...a.instances.map(a=>a.id),...void 0===b?[]:[b]].join(" ").toLowerCase()}let b6=new WeakMap;function b7(a){let b=b6.get(a);if(void 0!==b)return b;let c=[...new Set(a.instances.map(a=>a.action))];return b6.set(a,c),c}function b8(a,b){let c=new Set(b),d=0;for(let b of a){if(void 0===b.count)return null;c.has(b2(b))&&(d+=b.count)}return d}function b9(a,b){let c=a;if(b.severity&&b.severity.length>0){let a=new Set(b.severity);c=c.filter(b=>a.has(b.severity))}if(b.providers&&b.providers.length>0){let a=new Set(b.providers);c=c.filter(b=>b.providers.some(b=>a.has(b)))}if(b.actions&&b.actions.length>0){let a=new Set(b.actions);c=c.filter(b=>b7(b).some(b=>a.has(b)))}if(b.subtype&&b.subtype.length>0){let a=new Set(b.subtype);c=c.filter(b=>a.has(b.subtype))}if(b.statuses&&b.statuses.length>0){let a=new Set(b.statuses);c=c.filter(b=>void 0!==b.status&&a.has(b.status))}if(b.q){let a=b.q.toLowerCase();c=c.filter(b=>(function(a){let b=b4.get(a);if(void 0!==b)return b;let c=b5(a);return b4.set(a,c),c})(b).includes(a))}return c}let ca={critical:0,high:1,medium:2,low:3};function cb(a,b){let c=(ca[a.severity]??-1)-(ca[b.severity]??-1);if(0!==c)return c;let d=b.latestDetectedAt.localeCompare(a.latestDetectedAt);return 0!==d?d:a.id.localeCompare(b.id)}function cc(a){return[...a].sort(cb)}function cd(a,b){let c=b9(a,{providers:b.providers,actions:b.actions,statuses:b.statuses,q:b.q,subtype:b.subtype}),d=new Map;for(let a of c)d.set(a.severity,(d.get(a.severity)??0)+1);let e=b9(a,{actions:b.actions,statuses:b.statuses,q:b.q,subtype:b.subtype,severity:b.severity}),f=new Map;for(let a of e)for(let b of a.providers)f.set(b,(f.get(b)??0)+1);let g=b9(a,{providers:b.providers,statuses:b.statuses,q:b.q,subtype:b.subtype,severity:b.severity}),h=new Map;for(let a of g)for(let b of b7(a))h.set(b,(h.get(b)??0)+1);let i=b9(a,{providers:b.providers,actions:b.actions,statuses:b.statuses,q:b.q,severity:b.severity}),j=new Map;for(let a of i)j.set(a.subtype,(j.get(a.subtype)??0)+1);let k=b9(a,{providers:b.providers,actions:b.actions,q:b.q,subtype:b.subtype,severity:b.severity}),l=new Map;for(let a of k)void 0!==a.status&&l.set(a.status,(l.get(a.status)??0)+1);let m=a=>[...a.entries()].map(([a,b])=>({value:a,count:b}));return{severity:m(d),provider:m(f),action:m(h),subtype:m(j),status:m(l)}}let ce=["severity","subtype","providers","actions","statuses","tools","repo","file","q"];function cf(a,b,c){for(let d of ce)if(d!==c&&!function(a,b,c){switch(c){case"severity":return!b.severity?.length||b.severity.includes(a.severity);case"subtype":return!b.subtype?.length||b.subtype.includes(a.ruleId);case"providers":return!b.providers?.length||b.providers.includes(b_(a.sourceTool));case"actions":return!b.actions?.length||b.actions.includes(bZ(a.actionTaken));case"statuses":return!b.statuses?.length||void 0!==a.status&&b.statuses.includes(a.status);case"tools":return!b.tools?.length||void 0!==a.toolName&&b.tools.includes(a.toolName);case"repo":return void 0===b.repo||""===b.repo||a.repo===b.repo;case"file":return void 0===b.file||""===b.file||a.file===b.file;case"q":return!b.q||[a.ruleId,a.category,a.maskedMatch,a.repo,a.file,a.toolName?`via ${a.toolName}`:"",a.id].join(" ").toLowerCase().includes(b.q.toLowerCase())}}(a,b,d))return!1;return!0}function cg(a){return[...a.entries()].map(([a,b])=>({value:a,count:b})).sort((a,b)=>b.count-a.count||a.value.localeCompare(b.value))}function ch(a,b){a.set(b,(a.get(b)??0)+1)}function ci(a){let b=new Map,c=new Map,d=new Map,e=new Map,f=new Map,g=new Map;return{add(h){cf(h,a,"severity")&&ch(b,h.severity),cf(h,a,"subtype")&&ch(c,h.ruleId),cf(h,a,"providers")&&ch(d,b_(h.sourceTool)),cf(h,a,"actions")&&ch(e,bZ(h.actionTaken)),void 0!==h.status&&cf(h,a,"statuses")&&ch(f,h.status),void 0!==h.toolName&&cf(h,a,"tools")&&ch(g,h.toolName)},facets:()=>({severity:cg(b),subtype:cg(c),provider:cg(d),action:cg(e),status:cg(f),tool:cg(g)})}}function cj(a){let b=b$(a.category);return{id:a.id,provider:b_(a.sourceTool),repo:a.repo,file:a.file,...void 0===a.toolName?{}:{toolName:a.toolName},eventId:a.eventId,...void 0===a.sessionId?{}:{sessionId:a.sessionId},action:bZ(a.actionTaken),detectedAt:a.occurredAt,confidence:a.confidence,...void 0===a.status?{}:{status:a.status},groupId:a.ruleId,category:b,subtype:a.ruleId,severity:a.severity,match:{maskedValue:a.maskedMatch,contextPrefix:""},detection:{id:a.ruleId,name:null},policy:{id:`category:${b}`,name:b}}}let ck={critical:0,high:1,medium:2,low:3};function cl(){return{instanceCount:0,maxSeverityRank:Number.MAX_SAFE_INTEGER,maxSeverity:"low",latestDetectedAt:"",statuses:[],ruleIds:new Set}}function cm(a,b){a.instanceCount+=1;let c=ck[b.severity]??Number.MAX_SAFE_INTEGER-1;c<a.maxSeverityRank&&(a.maxSeverityRank=c,a.maxSeverity=b.severity),b.occurredAt>a.latestDetectedAt&&(a.latestDetectedAt=b.occurredAt),a.statuses.push(b.status),a.ruleIds.add(b.ruleId)}let cn=r.Ik({id:r.Os(),namespace:bn,packId:bo,version:bp,name:r.Yj(),enabled:r.zM().default(!0),policyId:r.Yj().optional()}).meta({id:"InstalledPack"});r.Ik({namespace:bn,packId:bo,version:bp}).meta({id:"InstallPackRequest"}),r.Ik({items:r.YO(cn)}).meta({id:"ListInstalledPacksResponse"}),r.Ik({enabled:r.zM().optional(),policyId:r.Yj().nullable().optional()}).refine(a=>Object.keys(a).some(b=>void 0!==a[b]),{message:"At least one field must be provided"}).meta({id:"PatchInstalledPackRequest"});let co=2,cp=u.options.join("|"),cq=RegExp(`\\[\\[aka:(?:${cp}):[A-Z2-7]{2,7}\\.[A-Z2-7]{26}\\.[A-Z2-7]{16}\\]\\]`),cr=RegExp(`^${cq.source}$`);r.Yj().regex(cr),r.Ik({category:u,keyVersion:r.ai().int().positive(),pointerId:r.Yj(),tag:r.Yj()}),r.Ik({pointerId:r.Yj(),valueFingerprint:r.Yj().regex(/^[0-9a-f]{64}$/),fingerprintKeyVersion:r.ai().int().positive(),keyVersion:r.ai().int().positive(),category:u,ruleId:r.Yj(),maskedMatch:r.Yj(),provider:r.Yj().optional(),ciphertext:r.Yj(),nonce:r.Yj(),authTag:r.Yj(),occurrenceCount:r.ai().int().nonnegative(),firstSeen:r.Yj(),lastSeen:r.Yj()}),r.Ik({category:u,provider:r.Yj().optional(),maskedMatch:r.Yj(),occurrences:r.ai().int().nonnegative(),firstSeen:r.Yj(),lastSeen:r.Yj()}),r.Ik({ruleId:r.Yj(),valueFingerprint:r.Yj().regex(/^[0-9a-f]{64}$/),fingerprintKeyVersion:r.ai().int().positive()});let cs=r.k5(["human","model"]),ct=r.k5(["display","explicit-reveal","view-render","model-input","remediation","purge"]),cu=r.k5(["revealed","refused","unavailable"]),cv=r.Ik({id:r.Os(),pointerId:r.Yj(),at:r.Yj(),target:cs,reason:ct,outcome:cu,grantId:r.Yj().optional(),pointerCount:r.ai().int().positive().default(1)}),cw=r.k5(["prompt","tool-input","tool-output","file","transcript"]),cx=r.Ik({location:r.Yj(),kind:cw,firstSeen:r.Yj(),lastSeen:r.Yj()}),cy=r.Ik({pointerId:r.Yj(),category:u,provider:r.Yj().optional(),maskedMatch:r.Yj(),occurrences:r.ai().int().nonnegative(),firstSeen:r.Yj(),lastSeen:r.Yj(),revealGrantId:r.Yj().nullable(),sightings:r.YO(cx)}),cz=50,cA=50,cB=200;r.Ik({limit:t.ai().int().min(1).max(cB).optional(),cursor:r.Yj().optional()}),r.Ik({totals:r.Ik({values:r.ai().int().nonnegative()}),items:r.YO(cy),nextCursor:r.Yj().nullable()}),r.Ik({limit:t.ai().int().min(1).max(cB).optional(),cursor:r.Yj().optional()}),r.Ik({totals:r.Ik({reused:r.ai().int().nonnegative()}),items:r.YO(cy),nextCursor:r.Yj().nullable()}),r.Ik({includeBatched:r.zM().optional(),limit:t.ai().int().min(1).max(cB).optional(),cursor:r.Yj().optional()}),r.Ik({items:r.YO(cv),nextCursor:r.Yj().nullable(),hiddenBatched:r.ai().int().nonnegative()});let cC=r.Yj(),cD=r.k5(["masked","full","off"]),cE=r.Ik({acknowledgedAt:s.w$(),version:r.ai().int().positive()}),cF=r.k5(["standalone"]),cG=r.k5(["redact","warn"]),cH=r.k5(["full","session-only"]),cI=r.Ik({acknowledgedAt:s.w$(),payloadVersion:r.ai().int().positive()}),cJ=r.Ik({specVersion:r.ai().int().positive().default(5),runMode:r.vk(a=>"attached"===a?"standalone":a,cF.default("standalone")),policy:cG.default("redact"),historicalAccess:cH.default("session-only"),dataSharesInPlace:r.zM().default(!0),vaultConsent:cE.optional(),vaultKeyCustody:cC.default("file"),vaultInlineReveal:cD.default("masked"),onboardedAt:s.w$().optional(),modelJudgeConsent:cI.optional()});function cK(){return cJ.parse({})}function cL(a,b,c){return{id:b,objectType:a.objectType,location:a.location??null,title:a.title??null,hostId:a.hostId??null,attributes:JSON.stringify(a.attributes),firstSeen:c,lastSeen:c}}function cM(a,b,c){return{id:b,url:a.url,name:a.name??null,attributes:JSON.stringify(a.attributes),firstSeen:c,lastSeen:c}}function cN(a){return{id:a.id,parentId:a.parentId??null,rootSessionId:a.rootSessionId??null,eventType:a.eventType,hostId:a.hostId??null,harnessId:a.harnessId??null,sourceProjectId:a.sourceProjectId??null,startedAt:e(a.startedAt),endedAt:a.endedAt?e(a.endedAt):null,severity:a.severity??null,priority:a.priority??null,content:a.content??null,contentHash:a.contentHash??null,attributes:a.attributes?JSON.stringify(a.attributes):null}}function cO(a,b){return{id:b,class:a.class,label:a.label??null,attributes:a.attributes?JSON.stringify(a.attributes):null}}function cP(a,b){return{id:b,ruleId:a.ruleId,name:a.name,category:a.category,severity:a.severity,definition:a.definition,version:a.version}}function cQ(a){return{id:a.id,auditEventId:a.auditEventId,inspectionDefinitionId:a.inspectionDefinitionId,classifiedDataId:a.classifiedDataId??null,spanStart:a.span.start,spanEnd:a.span.end,maskedMatch:a.maskedMatch,actionTaken:a.actionTaken,confidence:a.confidence,findingKey:a.findingKey??null,firstDetectedAt:a.firstDetectedAt?e(a.firstDetectedAt):null}}function cR(a){let b=a.metadata;return{source_tool:a.sourceTool,...b?.repo!==void 0?{repo:b.repo}:{},...b?.filePath!==void 0?{file_path:b.filePath}:{},...b?.toolName!==void 0?{tool_name:b.toolName}:{},...b?.gitignored!==void 0?{gitignored:b.gitignored}:{},...b?.wholeFile!==void 0?{whole_file:b.wholeFile}:{},...b?.correlationId!==void 0?{correlation_id:b.correlationId}:{},...b?.traceId!==void 0?{trace_id:b.traceId}:{},...b?.exceptionIds!==void 0?{exception_ids:b.exceptionIds}:{},...b?.model!==void 0?{model:b.model}:{},...b?.turnIndex!==void 0?{turn_index:b.turnIndex}:{}}}function cS(a){return`capture/${a.category}/${a.severity}`}function cT(a){return{ruleId:a.ruleId,version:cS(a),name:a.ruleId,category:a.category,severity:a.severity,definition:JSON.stringify({ruleId:a.ruleId})}}let cU=r.Ik({path:r.Yj().min(1),name:r.Yj().min(1),origin:at,defaultAccess:as});r.Ik({files:r.YO(cU),truncated:r.zM(),scannedAt:r.Yj()});let cV=["7d","30d","3m","6m"],cW=r.k5(cV).meta({id:"TimeRange"}),cX={"7d":7,"30d":30,"3m":90,"6m":180},cY=cW.catch("7d");function cZ(a){return cY.parse(a)}let c$=r.k5(["still-valid","unknown","invalid"]),c_=r.Ik({filePath:r.Yj(),span:y.optional()}).strict(),c0=r.Ik({provider:r.Yj(),maskedToken:r.Yj(),where:c_,state:c$,observedAt:s.w$().optional()}).strict();r.Ik({provider:r.Yj(),maskedToken:r.Yj(),consolePath:r.Yj(),occurrenceSpread:r.ai().int().positive()}).strict();let c1=r.k5(["redact-rotation-checklist","redact-only","set-secret-redact","leave"]),c2=r.k5(["first-run","pre-push","secret-scan"]);r.Ik({entrySource:c2}).strict();let c3=r.Ik({id:c1,label:r.Yj()}),c4=r.Ik({kind:r.eu("decision"),entrySource:c2,secretCount:r.ai().int().positive(),prompt:r.Yj(),options:r.PV([c3.extend({id:r.eu("redact-rotation-checklist")}),c3.extend({id:r.eu("redact-only")}),c3.extend({id:r.eu("set-secret-redact")}),c3.extend({id:r.eu("leave")})])}),c5=r.Ik({kind:r.eu("no-decision")});r.gM("kind",[c4,c5]),r.Ik({rules:r.YO(a$).min(1).max(100),text:r.Yj().max(5e4).optional(),fixtures:r.YO(aZ).max(200).optional()}).refine(a=>void 0!==a.text||(a.fixtures?.length??0)>0,{message:"Provide `text`, `fixtures`, or both — there must be something to test"}).meta({id:"TestRulesRequest"});let c6=r.Ik({ruleId:r.Yj(),category:u,severity:v,span:y,confidence:r.ai().min(0).max(1),match:r.Yj()}).meta({id:"RuleTestMatch"}),c7=r.Ik({label:r.Yj(),shouldMatch:r.zM(),didMatch:r.zM(),passed:r.zM(),matches:r.YO(c6)}).meta({id:"FixtureResult"});r.Ik({adhoc:r.Ik({matches:r.YO(c6)}).optional(),fixtures:r.YO(c7),summary:r.Ik({total:r.ai().int().nonnegative(),passed:r.ai().int().nonnegative(),failed:r.ai().int().nonnegative()}),unsupportedRuleIds:r.YO(r.Yj())}).meta({id:"TestRulesResponse"});let c8=r.Ik({severity:v,count:r.ai().int().nonnegative(),caught:r.ai().int().nonnegative().optional(),openAtRest:r.ai().int().nonnegative().optional()}).meta({id:"SeveritySummaryItem"});r.Ik({total:r.ai().int().nonnegative(),needsRemediation:r.ai().int().nonnegative().optional(),bySeverity:r.YO(c8)}).meta({id:"SeveritySummaryResponse"}),r.Ik({range:r.k5(cV).default("7d")});let c9=r.k5(["blocked","redacted","warned"]).meta({id:"EnforcementActionKind"}),da=r.Ik({kind:c9,count:r.ai().int().nonnegative(),delta:r.ai().int()}).meta({id:"EnforcementAction"});r.Ik({range:cW,total:r.ai().int().nonnegative(),actions:r.YO(da)}).meta({id:"EnforcementActionsResponse"});let db=r.k5(["day","week"]).meta({id:"TimeseriesGranularity"}),dc=r.Ik({timestamp:s.p6(),critical:r.ai().int().nonnegative(),high:r.ai().int().nonnegative(),medium:r.ai().int().nonnegative()}).meta({id:"FindingsTimeseriesPoint"});r.Ik({range:cW,granularity:db,points:r.YO(dc)}).meta({id:"FindingsTimeseriesResponse"});let dd=r.Ik({timestamp:s.p6(),bySeverity:r.Ik({critical:r.ai().nonnegative().nullable(),high:r.ai().nonnegative().nullable(),medium:r.ai().nonnegative().nullable(),low:r.ai().nonnegative().nullable()})}).meta({id:"MttrTrendPoint"});r.Ik({range:cW,granularity:db,points:r.YO(dd)}).meta({id:"MttrTrendResponse"});let de=r.Ik({findingKey:r.Yj(),ruleId:r.Yj(),severity:v,path:r.Yj(),resolvedAt:s.w$(),detectedAt:s.w$()}).meta({id:"ResolvedFeedItem"});r.Ik({items:r.YO(de)}).meta({id:"RecentlyResolvedResponse"});let df=["repo","user"],dg=r.k5(df).meta({id:"SourceKind"}),dh=r.Ik({id:r.Yj(),name:r.Yj(),kind:dg,findingsCount:r.ai().int().nonnegative()}).meta({id:"TopSource"});r.Ik({range:cW,items:r.YO(dh)}).meta({id:"TopSourcesResponse"}),r.Ik({range:r.k5(cV).default("7d"),limit:t.ai().int().min(1).max(50).default(5),kind:r.k5(df).optional()});let di=r.k5(["claudecode","cursor","codex","antigravity","claudeai","chatgpt","copilot","api"]).meta({id:"Provider"}),dj=r.Ik({provider:di,coverage:r.ai().int().min(0).max(100),supported:r.zM()}).meta({id:"ScanCoverageProvider"});r.Ik({range:cW,providers:r.YO(dj)}).meta({id:"ScanCoverageResponse"});let dk=r.k5(["repo","user","team","policy","share","rule"]).meta({id:"SubjectType"}),dl=r.Ik({type:dk,id:r.Yj(),label:r.Yj()}).meta({id:"RecommendationSubject"}),dm=r.k5(["apply","navigate"]).meta({id:"RecommendationActionMode"}),dn=r.Ik({mode:dm,type:r.Yj(),label:r.Yj(),href:r.Yj().optional(),policyId:r.Yj().optional(),teamId:r.Yj().optional()}).meta({id:"RecommendationAction"}),dp=r.Ik({id:r.Yj(),category:r.Yj(),severity:v,title:r.Yj(),description:r.Yj(),subjects:r.YO(dl),action:dn}).meta({id:"RecommendedAction"});r.Ik({items:r.YO(dp)}).meta({id:"RecommendedActionsResponse"}),r.Ik({limit:t.ai().int().min(1).max(20).default(3)});let dq=r.Ik({type:r.Yj(),policyId:r.Yj().optional(),teamId:r.Yj().optional()}).meta({id:"AppliedAction"});r.Ik({id:r.Yj(),status:r.eu("applied"),appliedAction:dq}).meta({id:"ApplyRecommendedActionResponse"}),r.Ik({id:r.Yj(),status:r.eu("dismissed")}).meta({id:"DismissRecommendedActionResponse"}),r.Ik({id:r.Yj()}),r.Ik({ruleId:r.Yj(),category:u,severity:v,maskedMatch:r.Yj(),rawMatch:r.Yj(),context:r.Yj(),filePath:r.Yj().optional(),confidence:r.ai().min(0).max(1),id:r.Yj().optional(),valueFingerprint:r.Yj().optional(),keyVersion:r.ai().int().nonnegative().optional()});let dr=r.Ik({category:u,action:a8,reasoning:r.Yj(),genuineCount:r.ai().int().nonnegative(),fpCount:r.ai().int().nonnegative(),fpIds:r.YO(r.Yj())});r.Ik({perCategory:r.YO(dr),notes:r.Yj()});let ds=r.Ik({total:r.ai().int().nonnegative(),important:r.ai().int().nonnegative(),routine:r.ai().int().nonnegative()}).refine(a=>a.total===a.important+a.routine,{message:"total must equal important + routine",path:["total"]}),dt=r.Ik({ruleId:r.Yj(),category:u,valueFingerprint:r.Yj(),keyVersion:r.ai().int().nonnegative()}),du=r.Ik({pattern:r.Yj(),count:r.ai().int().nonnegative(),values:r.YO(dt).min(1)}),dv=r.Ik({category:u,count:r.ai().int().nonnegative(),egress:r.zM()}),dw=r.Ik({counts:ds,routineCategories:r.YO(u),surfacedCategories:r.YO(u),findingKinds:r.YO(dv),posture:r.g1(u,a8),maskedFindings:r.YO(c0).optional(),falsePositivePatterns:r.YO(du).optional()}),dx=dr.pick({category:!0,genuineCount:!0,fpCount:!0}).extend({egress:r.zM()});r.Ik({categories:r.YO(dx),posture:r.g1(u,a8)}),r.Ik({frame:dw,copy:r.Yj()}),r.k5(["scan","floor"]);let dy=r.Ik({id:r.k5(["enter-remediation","open-dashboard","not-now"]),label:r.Yj()}),dz=r.PV([dy.extend({id:r.eu("open-dashboard")}),dy.extend({id:r.eu("not-now")})]),dA=r.PV([dy.extend({id:r.eu("enter-remediation")}),dy.extend({id:r.eu("open-dashboard")}),dy.extend({id:r.eu("not-now")})]);r.Ik({worthALook:r.ai().int().nonnegative(),liveKeys:r.ai().int().nonnegative().optional(),options:r.KC([dz,dA])}).refine(a=>a.options.some(a=>"enter-remediation"===a.id)===(a.liveKeys??0)>0,{message:"the chain-entry option is present exactly when liveKeys > 0",path:["options"]}).refine(a=>(a.liveKeys??0)<=a.worthALook,{message:"liveKeys is a subset of worthALook and cannot exceed it",path:["liveKeys"]});let dB=new Set(["recognized","internal"]);function dC(a){return dB.has(a)?"allowed":"review"}function dD(a){return"block"===a?"blocked":"allowed"}function dE(a,b){return null===b?dC(a):dD(b)}function dF(a,b){return null!==b&&dD(b)!==dC(a)}function dG(a,b){let c=function(a,b){let c=[];return"ip"===a&&c.push("raw_ip"),"unverified"===a&&c.push("unverified_domain"),(b.includes("http")||b.includes("ws"))&&c.push("plaintext_transport"),c}(a,b);return{needsReview:c.length>0,reasons:c}}function dH(a){return Array.from(new Set(a))}function dI(a){let b=new Set(a);return bG.filter(a=>b.has(a))}function dJ(a){return dI(a)[0]??"none"}let dK={raw_ip:0,unverified_domain:1,plaintext_transport:2};function dL(a){return 0===a.length?1/0:Math.min(...a.map(a=>dK[a]))}},76085:(a,b,c)=>{"use strict";c.d(b,{Zp:()=>i,X9:()=>o,Wu:()=>p,BT:()=>n,aR:()=>j,Lc:()=>l,AG:()=>k,ZB:()=>m,kI:()=>s,EA:()=>v,cn:()=>h});var d=c(87472),e=c(64307),f=c(99949);let g=(0,c(25285).zu)({extend:{classGroups:{"font-size":[{text:["ui","label"]}]}}});function h(...a){return g((0,f.$)(a))}function i({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card",className:h("rounded-xl border border-border bg-surface",a),...b})}function j({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-header",className:h("flex items-center gap-3 px-5 pt-5",a),...b})}function k({className:a,...b}){return(0,d.jsx)("span",{"data-slot":"card-icon",className:h("flex size-7.5 shrink-0 items-center justify-center rounded-lg bg-surface-2 text-text-2",a),...b})}function l({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-heading",className:h("min-w-0",a),...b})}function m({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-title",className:h("text-sm font-semibold text-text",a),...b})}function n({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-description",className:h("text-xs text-text-3",a),...b})}function o({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-action",className:h("ml-auto flex items-center",a),...b})}function p({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"card-content",className:h("p-5",a),...b})}(0,e.F)("inline-flex items-center gap-1.5 whitespace-nowrap rounded-full px-2 py-0.5 text-xs font-semibold",{variants:{variant:{default:"bg-surface-3 text-text-2",outline:"border border-border text-text-2",critical:"bg-sev-critical-fill text-sev-critical-ink",high:"bg-sev-high-fill text-sev-high-ink",medium:"bg-sev-medium-fill text-sev-medium-ink",low:"bg-sev-low-fill text-sev-low-ink",success:"bg-ok-fill text-ok-ink",teal:"bg-teal-fill text-teal-ink",primary:"bg-primary-tint text-primary"}},defaultVariants:{variant:"default"}}),(0,e.F)("inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg font-medium transition-colors cursor-pointer disabled:pointer-events-none disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary/40 [&_svg]:size-4 [&_svg]:shrink-0",{variants:{variant:{solid:"",outline:"border",ghost:"",link:""},tone:{primary:"",neutral:"",danger:""},size:{sm:"h-8 px-3 text-xs",md:"h-9 px-4 text-sm",icon:"size-9"}},compoundVariants:[{variant:"solid",tone:"primary",class:"bg-primary-solid text-text-inv hover:bg-primary-hover"},{variant:"solid",tone:"neutral",class:"bg-surface-3 text-text hover:bg-border-strong"},{variant:"solid",tone:"danger",class:"bg-sev-critical-ink text-on-accent hover:bg-sev-critical-hover"},{variant:"outline",tone:"primary",class:"border-primary text-primary hover:bg-primary-tint"},{variant:"outline",tone:"neutral",class:"border-border bg-surface text-text hover:bg-surface-2"},{variant:"outline",tone:"danger",class:"border-sev-critical text-sev-critical-ink hover:bg-sev-critical-fill"},{variant:"ghost",tone:"primary",class:"text-primary hover:bg-primary-tint"},{variant:"ghost",tone:"neutral",class:"text-text-2 hover:bg-surface-2 hover:text-text"},{variant:"ghost",tone:"danger",class:"text-sev-critical-ink hover:bg-sev-critical-fill"},{variant:"link",class:"h-auto gap-1 rounded-sm p-0 align-baseline font-semibold underline-offset-4 [&_svg]:size-3.5"},{variant:"link",tone:"primary",class:"text-primary hover:underline"},{variant:"link",tone:"neutral",class:"text-text-2 hover:text-text hover:underline"},{variant:"link",tone:"danger",class:"text-sev-critical-ink hover:underline"}],defaultVariants:{variant:"solid",tone:"neutral",size:"md"}});var q=c(11035);q.Root,q.Trigger,q.Close;var r=c(90196);function s({value:a,max:b,color:c,height:e=8,className:f,style:g,...i}){let j=Math.min(b,Math.max(0,a)),k=b>0?j/b*100:0;return(0,d.jsx)("span",{"data-slot":"meter",role:"meter","aria-valuenow":j,"aria-valuemin":0,"aria-valuemax":b,className:h("block flex-1 overflow-hidden rounded-full bg-surface-3",f),style:{height:e,...g},...i,children:(0,d.jsx)("span",{className:"block h-full rounded-full",style:{width:`${String(k)}%`,background:c}})})}r.Root,r.Trigger,r.Group,r.RadioGroup;var t=c(92736);t.Root,t.Trigger,t.Close,t.Anchor;var u=c(83375);function v({className:a,...b}){return(0,d.jsx)("div",{"data-slot":"skeleton","aria-hidden":!0,className:h("animate-pulse rounded-md bg-surface-3",a),...b})}u.Root,u.Group,u.Value,q.Root,q.Trigger,q.Close,c(43197).Root},76114:()=>{},76796:(a,b,c)=>{"use strict";c.d(b,{MatcherModal:()=>j});var d=c(88422),e=c(63959),f=c(81604),g=c(16614);function h({matcher:a}){return"regex"===a.type?(0,d.jsxs)("div",{className:"flex flex-col gap-3",children:[(0,d.jsx)(i,{label:"Pattern",children:(0,d.jsx)("code",{className:"block break-all rounded-md border border-border bg-surface-2 px-2.5 py-2 font-mono text-xs text-text",children:a.pattern})}),(0,d.jsx)(i,{label:"Flags",children:(0,d.jsx)("code",{className:"font-mono text-xs text-text-2",children:a.flags||"—"})}),"number"==typeof a.captureGroup&&(0,d.jsx)(i,{label:"Capture group",children:(0,d.jsx)("span",{className:"font-mono text-xs text-text-2",children:a.captureGroup})})]}):"keyword"===a.type?(0,d.jsxs)("div",{className:"flex flex-col gap-3",children:[(0,d.jsx)(i,{label:"Keywords",children:(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.keywords.map(a=>(0,d.jsx)("span",{className:"inline-flex h-6 items-center rounded-md border border-border bg-surface-2 px-2 font-mono text-xs text-text-2",children:a},a))})}),(0,d.jsx)(i,{label:"Case sensitive",children:(0,d.jsx)("span",{className:"text-xs text-text-2",children:a.caseSensitive?"Yes":"No"})})]}):(0,d.jsx)("div",{className:"flex flex-col gap-3",children:(0,d.jsx)(i,{label:"Validator",children:(0,d.jsx)("code",{className:"font-mono text-xs text-text-2",children:a.name})})})}function i({label:a,children:b}){return(0,d.jsxs)("div",{className:"flex flex-col gap-1.5",children:[(0,d.jsx)("div",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:a}),b]})}function j({rule:a,onClose:b}){let c=!!a,i=a?g.rE[a.matcher.type]:null,j=i?.icon;return(0,d.jsx)(e.lG,{open:c,onOpenChange:a=>{a||b()},children:(0,d.jsx)(e.Cf,{className:"max-w-3xl","aria-describedby":void 0,children:a&&i&&(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.L3,{className:"sr-only",children:["Rule \xb7 ",a.name]}),(0,d.jsxs)("div",{className:"flex shrink-0 items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)("span",{className:"grid size-9 shrink-0 place-items-center rounded-lg",style:{background:i.fill,color:i.color},children:j&&(0,d.jsx)(j,{"aria-hidden":!0,focusable:!1,className:"size-4.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold text-text",children:a.name}),(0,d.jsx)(e.Pt,{severity:a.severity})]}),(0,d.jsx)("div",{className:"mt-px font-mono text-xs text-text-3",children:a.id})]}),(0,d.jsx)("span",{className:"rounded-full px-2.5 py-1 text-xs font-semibold",style:{background:i.fill,color:i.color},children:i.label}),(0,d.jsx)(e.$n,{variant:"ghost",tone:"neutral",size:"icon",onClick:b,"aria-label":"Close",className:"size-8 text-text-3",children:(0,d.jsx)(f.uv,{"aria-hidden":!0,focusable:!1})})]}),(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{className:"mb-4 flex flex-wrap gap-2",children:[(0,d.jsx)(k,{icon:(0,d.jsx)(f.kp,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),children:g.gh[a.category]||a.category}),(0,d.jsx)(k,{icon:j&&(0,d.jsx)(j,{"aria-hidden":!0,focusable:!1,className:"size-3.5"}),children:i.blurb})]}),(0,d.jsx)(h,{matcher:a.matcher})]})]})})})}function k({icon:a,children:b}){return(0,d.jsxs)("span",{className:"inline-flex h-6 items-center gap-1.5 rounded-md border border-border bg-surface px-2 text-label font-medium text-text-2",children:[a,b]})}},76812:(a,b,c)=>{"use strict";c.d(b,{B5:()=>n,EQ:()=>p,Lp:()=>k,VN:()=>r,gh:()=>f,gs:()=>q,i9:()=>j,nU:()=>m,oC:()=>e,pM:()=>o,qW:()=>s,xE:()=>l,y7:()=>i});var d=c(81604);let e=["critical","high","medium","low"],f={secret:"Secret",pii:"PII",source_code:"Source code",external_share:"External share",mcp_server:"MCP server",customer_data:"Customer data",financial:"Financial",phi:"PHI",custom:"Custom"},g={secret:d.RY,pii:d.ny,source_code:d.lo,external_share:d._G,mcp_server:d.RR,customer_data:d.bN,financial:d.bN,phi:d.ny,custom:d.RY},h={secret:"bg-sev-critical-fill text-sev-critical-ink",pii:"bg-sev-low-fill text-sev-low-ink",source_code:"bg-violet-fill text-violet-ink",external_share:"bg-teal-fill text-teal-ink",mcp_server:"bg-sev-high-fill text-sev-high-ink",customer_data:"bg-sev-high-fill text-sev-high-ink",financial:"bg-sev-high-fill text-sev-high-ink",phi:"bg-sev-low-fill text-sev-low-ink",custom:"bg-surface-2 text-text-2"},i=g,j=a=>h[a]??"bg-surface-2 text-text-2",k={blocked:{label:"Blocked",icon:d.pD,className:"bg-sev-critical-fill text-sev-critical-ink"},redacted:{label:"Redacted",icon:d.jZ,className:"bg-primary-tint text-primary"},warned:{label:"Warned",icon:d._0,className:"bg-sev-high-fill text-sev-high-ink"},allowed:{label:"Allowed",icon:d.Sr,className:"bg-ok-fill text-ok-ink"},monitored:{label:"Monitored",icon:d.bM,className:"bg-surface-3 text-text-2"},quarantined:{label:"Quarantined",icon:d.lm,className:"bg-sev-critical-fill text-sev-critical-ink"}};function l(a){return a.file?a.file:a.toolName?`via ${a.toolName}`:"—"}let m=[{id:"severity",header:"Severity"},{id:"subtype",header:"Type"},{id:"sources",header:"Sources"},{id:"locations",header:"Locations"},{id:"action",header:"Action"},{id:"status",header:"Status"},{id:"latest",header:"Latest"}],n={open:{label:"Open",badge:"high"},handled:{label:"Handled",badge:"primary"},resolved:{label:"Resolved",badge:"success"},dismissed:{label:"Dismissed",badge:"default"}},o=Object.keys(n);function p(a,b){return b&&0!==b.length?a.filter(a=>void 0!==a.status&&b.includes(a.status)):a}let q=["grouped","flat","files"],r="grouped",s={grouped:"By type",flat:"All findings",files:"By location"}},77820:(a,b,c)=>{"use strict";c.d(b,{FindingDetailView:()=>o,formatConfidence:()=>m});var d=c(88422),e=c(63959),f=c(4513),g=c(6932),h=c(81604),i=c(22559),j=c(44361),k=c(76812),l=c(64915);function m(a){let b=a.toFixed(2);return a>=.9?{label:`High \xb7 ${b}`,tone:"text-ok-ink"}:a>=.7?{label:`Medium \xb7 ${b}`,tone:"text-sev-high-ink"}:{label:`Low \xb7 ${b}`,tone:"text-text-2"}}function n({confidence:a}){let{label:b,tone:c}=m(a);return(0,d.jsx)("span",{className:c,children:b})}function o({selection:a,onSelectInstance:b,onBack:c,footer:i}){let{finding:m,instance:o}=a,r=k.y7[m.category]??h.RY,s=!o,t=m.providers.length,u=function(a){let b=k.gh[a];return b||a}(m.category);return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(e.Fm,{className:"flex-row items-center gap-2.5 border-b border-border p-4 pr-12",children:[(0,d.jsx)(e.Pt,{severity:m.severity}),(0,d.jsx)(e.qp,{className:"font-mono text-xs font-semibold text-text-3",children:s?u:o.id})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4 overflow-y-auto px-4 pb-4",children:[!s&&(0,d.jsxs)(e.$n,{variant:"link",tone:"primary",size:"sm",onClick:c,className:"self-start",children:[(0,d.jsx)(h.YJ,{"aria-hidden":!0,focusable:!1,className:"size-4"}),"Back to finding"]}),(0,d.jsxs)("div",{className:"flex items-start gap-3",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-10 shrink-0 items-center justify-center rounded-lg",(0,k.i9)(m.category)),children:(0,d.jsx)(r,{className:"size-5"})}),(0,d.jsxs)("div",{className:"flex flex-col",children:[(0,d.jsx)("span",{className:"font-display text-base font-semibold",children:m.subtype}),(0,d.jsx)("span",{className:"text-xs text-text-3",children:s?`${String(m.instanceCount)} locations \xb7 ${String(t)} tool${t>1?"s":""}`:`${u} \xb7 ${o.repo} \xb7 detected ${(0,f.K)(o.detectedAt)}`})]})]}),(0,d.jsx)(p,{code:m.match.contextPrefix,snippet:m.match.maskedValue,file:s?`${String(m.instanceCount)} locations`:(0,k.xE)(o)}),s?(0,d.jsxs)("div",{children:[(0,d.jsx)(g.e,{children:"Locations"}),(0,d.jsx)("div",{className:"flex flex-col gap-2",children:m.instances.map(a=>(0,d.jsx)(q,{instance:a,onClick:()=>{b(a)}},a.id))}),m.instances.length<m.instanceCount&&(0,d.jsx)("p",{className:"pt-2 text-xs text-text-3",children:0===m.instances.length?`No locations here match the current filters — the group has ${String(m.instanceCount)} locations in total.`:`Showing the ${String(m.instances.length)} most recent of ${String(m.instanceCount)} locations.`})]}):(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(g.p,{label:"Source tool",children:(0,d.jsx)(l.i,{provider:o.provider})}),(0,d.jsx)(g.p,{label:"Repository",children:(0,d.jsx)("span",{className:"font-mono text-xs wrap-break-word",children:o.repo})}),(0,d.jsx)(g.p,{label:"Location",children:(0,d.jsx)("span",{className:"font-mono text-xs wrap-break-word",children:(0,k.xE)(o)})}),(0,d.jsx)(g.p,{label:"Action taken",children:(0,d.jsx)(j.T,{action:o.action})}),(0,d.jsx)(g.p,{label:"Detected",children:(0,f.K)(o.detectedAt)}),(0,d.jsx)(g.p,{label:"Confidence",children:(0,d.jsx)(n,{confidence:o.confidence})})]}),i]})]})}function p({code:a,snippet:b,file:c}){return(0,d.jsxs)("div",{children:[(0,d.jsxs)(g.e,{className:"flex items-center gap-2",children:["Matched content",(0,d.jsx)(h.aR,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})]}),(0,d.jsxs)("div",{className:"rounded-lg border border-border bg-ink p-3.5 font-mono text-xs leading-relaxed text-code-fg",children:[(0,d.jsx)("div",{className:"text-code-muted wrap-break-word",children:`// ${c}`}),(0,d.jsxs)("div",{children:[a,(0,d.jsx)("span",{className:"rounded bg-sev-critical/20 px-1 py-0.5 text-code-err wrap-break-word",children:`"${b}"`}),";"]})]})]})}function q({instance:a,onClick:b}){return(0,d.jsxs)("button",{type:"button",onClick:b,className:"flex items-center cursor-pointer gap-3 rounded-lg border border-border bg-surface px-3 py-2.5 text-left transition-colors hover:bg-surface-2",children:[(0,d.jsx)(i.K,{id:a.provider}),(0,d.jsxs)("div",{className:"flex min-w-0 flex-1 flex-col gap-1",children:[(0,d.jsx)("span",{className:"text-xs font-medium text-text",children:a.repo}),(0,d.jsx)("span",{className:"font-mono text-label text-text-3 wrap-break-word",children:(0,k.xE)(a)})]}),(0,d.jsx)(j.T,{action:a.action}),(0,d.jsx)(h.vK,{className:"size-4 shrink-0 text-text-3"})]})}},78257:(a,b,c)=>{Promise.resolve().then(c.bind(c,34221)),Promise.resolve().then(c.bind(c,17679)),Promise.resolve().then(c.bind(c,79946)),Promise.resolve().then(c.bind(c,26265)),Promise.resolve().then(c.bind(c,95854)),Promise.resolve().then(c.bind(c,25319)),Promise.resolve().then(c.bind(c,54663))},78349:(a,b,c)=>{"use strict";c.d(b,{DataSharesTableView:()=>o});var d=c(88422),e=c(63959),f=c(88391),g=c(4513),h=c(81604),i=c(15936),j=c(35729);function k({classes:a}){return(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-1.5",children:[a.slice(0,3).map(a=>(0,d.jsx)(i.HD,{cls:a},a)),a.length>3&&(0,d.jsxs)("span",{className:"text-xs text-text-3",children:["+",a.length-3]})]})}function l({d:a,expanded:b,selected:c,onToggle:f,onOpen:l}){let m=(0,j.EI)(a.transports);return(0,d.jsxs)(e.Hj,{onClick:l,"aria-label":`View details for destination ${a.name}`,className:(0,e.cn)("cursor-pointer",c?"bg-primary-tint":"hover:bg-surface-2"),children:[(0,d.jsx)(e.nA,{className:"w-9",children:(0,d.jsx)(e.$n,{"aria-label":b?"Collapse":"Expand",onClick:a=>{a.stopPropagation(),f()},variant:"ghost",size:"sm",children:(0,d.jsx)(h.vK,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 transition-transform",b&&"rotate-90")})})}),(0,d.jsx)(e.nA,{children:(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)(i.Wi,{kind:a.kind,trust:a.trust,name:a.name,host:a.host}),(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("whitespace-nowrap font-semibold text-text","ip"===a.kind&&"font-mono"),children:a.name}),m&&(0,d.jsx)("span",{title:"Sends over plaintext",className:"inline-flex text-sev-critical-ink",children:(0,d.jsx)(h._0,{"aria-hidden":!0,focusable:!1,className:"size-3.5"})})]}),(0,d.jsxs)("div",{className:"whitespace-nowrap text-xs text-text-3",children:[a.category,a.network?.geo?" \xb7 "+a.network.geo:""]})]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.xB,{trust:a.trust})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)("div",{className:"flex flex-wrap gap-1.5",children:a.transports.map(a=>(0,d.jsx)(i.eV,{transport:a},a))})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(k,{classes:a.dataClasses})}),(0,d.jsxs)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)("b",{className:"text-text",children:a.endpointCount})," endpoint",1===a.endpointCount?"":"s"," \xb7 ",(0,d.jsx)("b",{className:"text-text",children:a.callSiteCount})," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:(0,g.K)(a.lastSeen)})]})}function m({ep:a,selected:b,onClick:c}){return(0,d.jsxs)(e.Hj,{onClick:c,"aria-label":`View details for endpoint ${a.method} ${a.url}`,className:(0,e.cn)("cursor-pointer",b?"bg-primary-tint":"bg-surface-2 hover:bg-surface-3"),children:[(0,d.jsx)(e.nA,{className:"w-9"}),(0,d.jsx)(e.nA,{colSpan:2,children:(0,d.jsxs)("div",{className:"flex min-w-0 items-center gap-2.5 pl-1.5 py-1",children:[(0,d.jsx)("span",{className:"h-3.5 w-3.5 shrink-0 rounded-bl border-b-[1.5px] border-l-[1.5px] border-border-strong"}),(0,d.jsx)(i.kX,{method:a.method}),(0,d.jsxs)("span",{className:"flex min-w-0 items-center gap-2",children:[(0,d.jsx)(i.UH,{url:a.url}),a.template&&(0,d.jsx)(i.SU,{})]})]})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.eV,{transport:a.transport})}),(0,d.jsx)(e.nA,{children:(0,d.jsx)(i.HD,{cls:a.dataClass})}),(0,d.jsxs)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:[(0,d.jsx)("b",{className:"text-text",children:a.callSiteCount})," call",1===a.callSiteCount?"":"s"]}),(0,d.jsx)(e.nA,{className:"whitespace-nowrap text-xs text-text-3",children:(0,g.K)(a.lastSeen)})]})}function n({group:a}){return(0,d.jsx)(e.Hj,{className:"border-0 hover:bg-transparent",children:(0,d.jsx)(e.nA,{colSpan:7,className:"pb-2 pt-4",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:j.CF[a.kind]}),(0,d.jsx)("span",{className:"rounded-full border border-border bg-surface-2 px-1.5 text-label py-0.5 font-semibold text-text-2",children:a.total}),("ip"===a.kind||"external"===a.kind)&&(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1 text-xs","ip"===a.kind?"text-sev-critical-ink":"text-sev-high-ink"),children:[(0,d.jsx)(h._0,{"aria-hidden":!0,focusable:!1,className:"size-3"}),"review recommended"]})]})})})}function o({groups:a,expanded:b,forceExpand:c,selection:g,drawerOpen:h,onToggle:i,onOpenDest:j,onOpenEndpoint:k}){return(0,d.jsxs)(e.XI,{children:[(0,d.jsx)(e.A0,{children:(0,d.jsxs)(e.Hj,{children:[(0,d.jsx)(e.nd,{className:"w-9"}),(0,d.jsx)(e.nd,{children:"Destination"}),(0,d.jsx)(e.nd,{children:"Trust"}),(0,d.jsx)(e.nd,{children:"Transport"}),(0,d.jsx)(e.nd,{children:"Data sent"}),(0,d.jsx)(e.nd,{children:"Footprint"}),(0,d.jsx)(e.nd,{children:"Last seen"})]})}),(0,d.jsx)(e.BF,{children:a.map(a=>(0,d.jsxs)(f.Fragment,{children:[(0,d.jsx)(n,{group:a}),a.items.map(a=>{let e=(c??!1)||!!b[a.id],n=h&&g?.id===a.id&&null==g.endpointId;return(0,d.jsxs)(f.Fragment,{children:[(0,d.jsx)(l,{d:a,expanded:e,selected:n,onToggle:()=>{i(a.id)},onOpen:()=>{j(a.id)}}),e&&a.endpoints.map(b=>(0,d.jsx)(m,{ep:b,selected:h&&g?.id===a.id&&g.endpointId===b.id,onClick:()=>{k(a.id,b.id)}},b.id))]},a.id)})]},a.kind))})]})}},78421:(a,b,c)=>{"use strict";c.d(b,{AppShell:()=>d});let d=(0,c(77940).registerClientReference)(function(){throw Error("Attempted to call AppShell() from the server but AppShell is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/ai-tc/ai-tc/web-ui/app/components/AppShell.tsx","AppShell")},79044:(a,b,c)=>{"use strict";c.d(b,{FI:()=>am,WR:()=>ak,KS:()=>bt,tI:()=>bs,eS:()=>br,Ji:()=>bo,y9:()=>bq,xR:()=>bu});var d=c(77598),e=c(76760),f=c(79868),g=c(75261);function h(a){return(0,d.createHash)("sha256").update(a).digest("hex")}function i(a){return h((0,g.tTV)(["source_project",a]))}function j(a,b){return h((0,g.tTV)(["inspection_definition",a,b]))}var k=c(73024);c(75919);let l="aka.db";function m(a,b){if(!function(a){try{return(0,k.lstatSync)(a).isSymbolicLink()}catch{return!1}}(a))try{(0,k.chmodSync)(a,b)}catch{}}function n(a){return[`${a}-wal`,`${a}-shm`,`${a}-journal`]}function o(a){for(let b of[a,...n(a)])m(b,384)}function p(a,b){return`${a}.${b}.${String(Date.now())}.${(0,d.randomUUID)().slice(0,8)}.bak`}function q(a){let b,c=(0,e.dirname)(a),d=`${(0,e.basename)(a)}.`;try{b=(0,k.readdirSync)(c)}catch{return}for(let a of b){if(!a.startsWith(d)||!a.endsWith(".bak.partial"))continue;let b=(0,e.join)(c,a);try{Date.now()-(0,k.statSync)(b).mtimeMs>3e5&&(0,k.rmSync)(b,{force:!0})}catch{}}}function r(a,b){let c=`${b}.partial`;try{(0,k.rmSync)(c,{force:!0}),a.prepare("VACUUM INTO ?").run(c),m(c,384),(0,k.renameSync)(c,b)}catch(a){try{(0,k.rmSync)(c,{force:!0})}catch{}throw a}}function s(a){return a.replace(/\\/g,"\\\\").replace(/%/g,"\\%").replace(/_/g,"\\_")}function t(a){return Array.from({length:a},()=>"?").join(", ")}function u(a){return`%${s(a)}%`}function v(a){return`(${a.map(a=>`${a} LIKE ? ESCAPE '\\'`).join(" OR ")})`}let w=0;function x(a,b,c="DEFERRED"){if(a.isTransaction){let c=`aka_sp_${String(w+=1)}`;a.exec(`SAVEPOINT ${c}`);try{b(),a.exec(`RELEASE ${c}`)}catch(b){try{a.exec(`ROLLBACK TO ${c}`),a.exec(`RELEASE ${c}`)}catch{}throw b}return}a.exec("IMMEDIATE"===c?"BEGIN IMMEDIATE":"BEGIN");try{b(),a.exec("COMMIT")}catch(b){try{a.exec("ROLLBACK")}catch{}throw b}}function y(a,b,c="DEFERRED"){let d=a.isTransaction;try{return x(a,b,c),!0}catch(b){if(!a.isTransaction&&d)throw b;return!1}}function z(a){process.stderr.write(`[aka] ${a}
-`)}function A(a,b,c){return void 0!==a.prepare("SELECT 1 FROM sqlite_master WHERE type = ? AND name = ? LIMIT 1").get(b,c)}function B(a,b,c){let d=c?.includeGenerated?"table_xinfo":"table_info";return a.prepare(`PRAGMA ${d}(${b})`).all().map(a=>a.name)}function C(a,b){return void 0===b?a.all():Array.isArray(b)?a.all(...b):a.all(b)}function D(a,b){return void 0===b?a.get():Array.isArray(b)?a.get(...b):a.get(b)}function E(a){return 1===a||!0===a}function F(a){let b={};for(let[c,d]of Object.entries(a))b[c]=void 0===d?null:d;return b}function G(a,b,c){return D(a.prepare(b),c)?.n??0}function H(a,b,c){let d=new Map;for(let e of C(a.prepare(b),c))d.set(e.k,e.n);return d}function I(a,b){let c=[];for(let d of a)try{c.push(b(d))}catch{}return c}function J(a){return"column"===a.kind?`column ${a.table}.${a.name}`:`table ${a.name}`}function K(a){return a.split(/-->\s*statement-breakpoint/).map(a=>a.trim()).filter(a=>a.length>0)}let L="0014_drop_legacy_events_findings",M=[{name:"input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.input_tokens')) VIRTUAL"},{name:"output_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN output_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.output_tokens')) VIRTUAL"},{name:"cache_creation_input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN cache_creation_input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_creation_input_tokens')) VIRTUAL"},{name:"cache_read_input_tokens",ddl:"ALTER TABLE audit_events ADD COLUMN cache_read_input_tokens integer GENERATED ALWAYS AS (json_extract(attributes, '$.cache_read_input_tokens')) VIRTUAL"},{name:"model",ddl:"ALTER TABLE audit_events ADD COLUMN model text GENERATED ALWAYS AS (json_extract(attributes, '$.model')) VIRTUAL"},{name:"provider",ddl:"ALTER TABLE audit_events ADD COLUMN provider text GENERATED ALWAYS AS (json_extract(attributes, '$.provider')) VIRTUAL"}];function N(a,b,c,d){let e=function(a,b){let c=a.prepare("SELECT last_rowid AS lastRowid FROM legacy_copy_watermark WHERE source = ?").get(b);return c?.lastRowid??0}(a,b),f=0;for(;f<1e3;){let g=c.all(e,200);if(0===g.length||(x(a,()=>{var c;d(g),e=g[g.length-1]?.rowid??e,c=e,a.prepare(`INSERT INTO legacy_copy_watermark (source, last_rowid) VALUES (?, ?)
-     ON CONFLICT(source) DO UPDATE SET last_rowid = excluded.last_rowid`).run(b,c)},"IMMEDIATE"),f+=g.length,g.length<200))return!0}return!1}function O(a,b){if(null==a)return b;try{return JSON.parse(a)}catch{return b}}function P(a){if(null!=a)try{let b=JSON.parse(a);if("object"==typeof b&&null!==b)return b}catch{}}function Q(a){return Buffer.from(JSON.stringify(a)).toString("base64url")}function R(a){let b=P(Buffer.from(a,"base64url").toString("utf8"));return void 0!==b&&"startedAtMs"in b&&"id"in b&&Number.isInteger(b.startedAtMs)&&"string"==typeof b.id?b:null}let S="max(started_at, coalesce(ended_at, started_at))";function T(){try{return Intl.DateTimeFormat().resolvedOptions().timeZone}catch{return"UTC"}}let U={session:"session",prompt:"prompt",response:"response",tool_call:"tool",hook:"hook",detection:"detection",share:"share",permission:"permission",commit:"commit",error:"error",active:"active"};function V(a){if(!a)return[];let b=O(a,null);return Array.isArray(b)?b:[]}function W(a){let b=g.TUN.safeParse(a);return b.success?b.data:"claudecode"}function X(a,b,c){let d=Math.max(a.started_at,b.lastActivityMs),{status:e,endedAtMs:f}=function(a,b,c){if(a.status){let b=g.PhW.safeParse(a.status);if(b.success)return{status:b.data,endedAtMs:a.ended_at}}return null!==a.ended_at?{status:"completed",endedAtMs:a.ended_at}:b>=c-18e5?{status:"active",endedAtMs:null}:{status:"completed",endedAtMs:b}}(a,d,c);return{id:a.id,harness:W(a.harness),title:a.title||a.project||a.repo||`Session ${a.id.slice(0,8)}`,project:a.project??"",repo:a.repo??"",branches:V(a.branches),startedAt:(0,g.q11)(a.started_at),endedAt:null===f?null:(0,g.q11)(f),status:e,turns:b.turns,findings:b.findings,shares:b.shares}}function Y(a){let b=U[a.event_type];if(!b)return null;let c=a.severity?g.U7X.safeParse(a.severity):null,d=a.link?g.Itg.safeParse(a.link):null;return{id:a.id,occurredAt:(0,g.q11)(a.started_at),kind:b,title:a.title??"",detail:a.detail??"",tool:a.tool,severity:c?.success?c.data:null,link:d?.success?d.data:null,targetId:a.target_id,internal:E(a.internal),flagged:E(a.flagged)}}let Z=`
-  id,
-  event_type,
-  started_at,
-  coalesce(content, json_extract(attributes, '$.tool_name')) AS title,
-  coalesce(json_extract(attributes, '$.detail'), json_extract(attributes, '$.target')) AS detail,
-  coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool')) AS tool,
-  json_extract(attributes, '$.severity') AS severity,
-  json_extract(attributes, '$.link') AS link,
-  json_extract(attributes, '$.targetId') AS target_id,
-  json_extract(attributes, '$.internal') AS internal,
-  json_extract(attributes, '$.flagged') AS flagged`,$="event_type = 'session'",_=`EXISTS (
-  SELECT 1 FROM audit_events c
-  WHERE c.root_session_id = audit_events.id
-    AND c.event_type NOT IN ('hook', 'config_scan'))`;class aa{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}stats(a){let{startMs:b,endMs:c}=function a(b,c){let d;try{d=new Intl.DateTimeFormat("en-US",{timeZone:b,year:"numeric",month:"2-digit",day:"2-digit",hour:"2-digit",minute:"2-digit",second:"2-digit",hourCycle:"h23"}).formatToParts(new Date(c))}catch{let d=T();return b===d?function(a){let b=864e5*Math.floor(a/864e5);return{startMs:b,endMs:b+864e5}}(c):a(d,c)}let e=Object.fromEntries(d.map(a=>[a.type,a.value])),f=Number(e.year),g=Number(e.month),h=Number(e.day),i=Number(e.hour),j=Date.UTC(f,g-1,h,i,Number(e.minute),Number(e.second))-c,k=Date.UTC(f,g-1,h,0,0,0)-j;return{startMs:k,endMs:k+864e5}}(a??T(),this.now()),d=G(this.db,`SELECT count(*) AS n FROM audit_events
-           WHERE ${$} AND started_at >= ? AND started_at < ?
-             AND ${_}`,[b,c]),e=this.now()-18e5,f=G(this.db,`SELECT count(*) AS n FROM audit_events s
-           WHERE s.event_type = 'session' AND s.ended_at IS NULL
-             AND max(
-               s.started_at,
-               coalesce(
-                 (SELECT max(${S}) FROM audit_events e WHERE e.root_session_id = s.id),
-                 s.started_at
-               )
-             ) >= ?`,[e]),g=G(this.db,`SELECT count(*) AS n FROM audit_events
-           WHERE event_type = 'tool_call' AND started_at >= ? AND started_at < ?`,[b,c]);return Promise.resolve({sessionsToday:d,liveNow:f,toolCallsToday:g,findingsToday:G(this.db,`SELECT count(*) AS n FROM inspection_findings f
-           JOIN audit_events e ON e.id = f.audit_event_id
-           WHERE e.started_at >= ? AND e.started_at < ?`,[b,c]),egressToday:G(this.db,`SELECT count(DISTINCT json_extract(attributes, '$.destination')) AS n
-           FROM audit_events
-           WHERE event_type = 'share' AND started_at >= ? AND started_at < ?`,[b,c])})}listSessions(a){let b=a.cursor?R(a.cursor):null,c=a.to?(0,g.I8t)(a.to):this.now(),d=a.from?(0,g.I8t)(a.from):void 0,e=[$],f=[];if(a.harness&&a.harness.length>0&&(e.push(`coalesce(json_extract(attributes, '$.harness'), 'claudecode') IN (${t(a.harness.length)})`),f.push(...a.harness)),void 0!==d&&(e.push("started_at >= ?"),f.push(d)),e.push("started_at <= ?"),f.push(c),a.q){let b=u(a.q);e.push(`(content LIKE ? ESCAPE '\\'
-          OR json_extract(attributes, '$.project') LIKE ? ESCAPE '\\'
-          OR json_extract(attributes, '$.repo') LIKE ? ESCAPE '\\'
-          OR json_extract(attributes, '$.branches') LIKE ? ESCAPE '\\'
-          OR EXISTS (
-            SELECT 1 FROM audit_events d
-            WHERE d.root_session_id = audit_events.id
-              AND (d.content LIKE ? ESCAPE '\\'
-                   OR json_extract(d.attributes, '$.detail') LIKE ? ESCAPE '\\')))`),f.push(b,b,b,b,b,b)}let h=G(this.db,`SELECT count(*) AS n FROM audit_events
-        WHERE ${[...e,`NOT ${_}`].join(" AND ")}`,f);a.excludeEmpty&&e.push(_),b&&(e.push("(started_at < ? OR (started_at = ? AND id < ?))"),f.push(b.startedAtMs,b.startedAtMs,b.id));let i=a.limit,j=C(this.db.prepare(`SELECT id,
-                json_extract(attributes, '$.harness') AS harness,
-                content AS title,
-                json_extract(attributes, '$.project') AS project,
-                json_extract(attributes, '$.repo') AS repo,
-                json_extract(attributes, '$.branches') AS branches,
-                json_extract(attributes, '$.status') AS status,
-                started_at,
-                ended_at
-         FROM audit_events
-         WHERE ${e.join(" AND ")}
-         ORDER BY started_at DESC, id DESC
-         LIMIT ?`),[...f,i+1]),k=j.length>i,l=k?j.slice(0,i):j,m=this.rollupsFor(l.map(a=>a.id)),n=this.now(),o=l.map(a=>X(a,m.get(a.id)??{turns:0,findings:0,shares:0,lastActivityMs:0},n)),p=l[l.length-1];return Promise.resolve({items:o,nextCursor:k&&p?Q({startedAtMs:p.started_at,id:p.id}):null,emptyCount:h})}getSession(a){let b=D(this.db.prepare(`SELECT id,
-                json_extract(attributes, '$.harness') AS harness,
-                content AS title,
-                json_extract(attributes, '$.project') AS project,
-                json_extract(attributes, '$.repo') AS repo,
-                json_extract(attributes, '$.branches') AS branches,
-                json_extract(attributes, '$.status') AS status,
-                json_extract(attributes, '$.host') AS host,
-                json_extract(attributes, '$.cwd') AS cwd,
-                json_extract(attributes, '$.models') AS models,
-                json_extract(attributes, '$.version') AS version,
-                json_extract(attributes, '$.files') AS files,
-                started_at,
-                ended_at
-         FROM audit_events
-         WHERE id = ? AND event_type = 'session'
-         LIMIT 1`),[a]);if(!b)return Promise.resolve(null);let c=C(this.db.prepare(`SELECT ${Z}
-         FROM audit_events
-         WHERE id = ? OR root_session_id = ?
-         ORDER BY started_at ASC, id ASC`),[a,a]).map(Y).filter(a=>null!==a),d=D(this.db.prepare(`SELECT
-           coalesce(sum(input_tokens), 0) AS input,
-           coalesce(sum(output_tokens), 0) AS output,
-           coalesce(sum(cache_creation_input_tokens), 0) AS cache_creation,
-           coalesce(sum(cache_read_input_tokens), 0) AS cache_read
-         FROM audit_events
-         WHERE root_session_id = ? AND event_type = 'llm_call'`),[a])??{input:0,output:0,cache_creation:0,cache_read:0},e=D(this.db.prepare(`SELECT model, provider FROM audit_events
-         WHERE root_session_id = ? AND event_type = 'llm_call'
-         ORDER BY started_at ASC, id ASC
-         LIMIT 1`),[a]),f=C(this.db.prepare(`SELECT coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool')) AS tool,
-                count(*) AS n
-         FROM audit_events
-         WHERE root_session_id = ? AND event_type = 'tool_call'
-         GROUP BY coalesce(json_extract(attributes, '$.tool_name'), json_extract(attributes, '$.tool'))`),[a]),g=C(this.db.prepare(`SELECT DISTINCT model FROM audit_events
-         WHERE root_session_id = ? AND event_type = 'llm_call' AND model IS NOT NULL AND model <> ''
-         ORDER BY model`),[a]).map(a=>a.model),h=G(this.db,`SELECT count(*) AS n FROM audit_events
-           WHERE root_session_id = ? AND event_type = 'commit'`,[a]),i=this.rollupsFor([a]).get(a)??{turns:0,findings:0,shares:0,lastActivityMs:0},j={sessionId:a,model:e?.model??"",provider:e?.provider??"",inputTokens:d.input,outputTokens:d.output,cacheCreation:d.cache_creation,cacheRead:d.cache_read,totalTokens:d.input+d.output+d.cache_creation+d.cache_read,estimatedCostUsd:null};return Promise.resolve({...X(b,i,this.now()),host:b.host??"",cwd:b.cwd??"",models:g.length>0?g:V(b.models),version:b.version??"",tokens:j,tools:Object.fromEntries(f.flatMap(a=>a.tool?[[a.tool,a.n]]:[])),files:V(b.files),commits:h,events:c})}tokenReports(a){let b=this.readLlmCallLeaves(void 0===a?{}:{fromMs:a});return Promise.resolve((0,g.ryv)(b,g.q_t))}tokenReportForSession(a){return Promise.resolve((0,g.ryv)(this.readLlmCallLeaves({sessionId:a}),g.q_t)[0]??null)}harnessFacets(a){let b=C(this.db.prepare(`SELECT DISTINCT coalesce(json_extract(attributes, '$.harness'), 'claudecode') AS harness
-         FROM audit_events WHERE ${$}${void 0===a?"":" AND started_at >= ?"}`),void 0===a?void 0:[a]),c=new Set;for(let a of b)c.add(W(a.harness));return Promise.resolve([...c])}readLlmCallLeaves(a={}){let b=["event_type = 'llm_call'","attributes IS NOT NULL"],c=[];return void 0!==a.sessionId&&(b.push("root_session_id = ?"),c.push(a.sessionId)),void 0!==a.fromMs&&(b.push("started_at >= ?"),c.push(a.fromMs)),I(C(this.db.prepare(`SELECT root_session_id AS sessionId, attributes
-           FROM audit_events
-          WHERE ${b.join(" AND ")}`),c).filter(a=>null!==a.sessionId),a=>({sessionId:a.sessionId,attributes:JSON.parse(a.attributes)}))}rollupsFor(a){let b=new Map(a.map(a=>[a,{turns:0,findings:0,shares:0,lastActivityMs:0}]));if(0===a.length)return b;let c=t(a.length);for(let d of C(this.db.prepare(`SELECT root_session_id AS id, max(${S}) AS m FROM audit_events
-         WHERE root_session_id IN (${c})
-         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&null!==d.m&&(a.lastActivityMs=d.m)}for(let d of C(this.db.prepare(`SELECT root_session_id AS id, count(*) AS n FROM audit_events
-         WHERE root_session_id IN (${c}) AND event_type = 'prompt'
-         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.turns=d.n)}for(let d of C(this.db.prepare(`SELECT root_session_id AS id,
-                count(DISTINCT json_extract(attributes, '$.run_key')) AS n
-         FROM audit_events
-         WHERE root_session_id IN (${c}) AND event_type = 'llm_call'
-           AND json_extract(attributes, '$.run_key') IS NOT NULL
-         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.turns=Math.max(a.turns,d.n))}for(let d of C(this.db.prepare(`SELECT e.root_session_id AS id, count(*) AS n FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         WHERE e.root_session_id IN (${c})
-         GROUP BY e.root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.findings=d.n)}for(let d of C(this.db.prepare(`SELECT root_session_id AS id,
-                count(DISTINCT json_extract(attributes, '$.destination')) AS n
-         FROM audit_events
-         WHERE root_session_id IN (${c}) AND event_type = 'share'
-         GROUP BY root_session_id`),a)){if(null===d.id)continue;let a=b.get(d.id);a&&(a.shares=d.n)}return b}}class ab{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO audit_events
-         (id, parent_id, root_session_id, event_type,
-          host_id, harness_id, source_project_id, started_at, ended_at,
-          severity, priority, content, content_hash, attributes)
-       VALUES
-         (:id, :parentId, :rootSessionId, :eventType,
-          :hostId, :harnessId, :sourceProjectId, :startedAt, :endedAt,
-          :severity, :priority, :content, :contentHash, :attributes)`),this.upsertLlmCallStmt=a.prepare(`INSERT INTO audit_events
-         (id, parent_id, root_session_id, event_type,
-          host_id, harness_id, source_project_id, started_at, ended_at,
-          severity, priority, content, content_hash, attributes)
-       VALUES
-         (:id, :parentId, :rootSessionId, :eventType,
-          :hostId, :harnessId, :sourceProjectId, :startedAt, :endedAt,
-          :severity, :priority, :content, :contentHash, :attributes)
-       ON CONFLICT(id) DO UPDATE SET
-         attributes = excluded.attributes,
-         ended_at   = excluded.ended_at
-       WHERE COALESCE(json_extract(excluded.attributes, '$.output_tokens'), 0)
-           > COALESCE(json_extract(audit_events.attributes, '$.output_tokens'), 0)`)}runInTransaction(a){x(this.db,a)}insertAuditEvent(a){let b=(0,g.V9M)(a);this.insertStmt.run(F({id:b.id,parentId:b.parentId,rootSessionId:b.rootSessionId,eventType:b.eventType,hostId:b.hostId,harnessId:b.harnessId,sourceProjectId:b.sourceProjectId,startedAt:b.startedAt,endedAt:b.endedAt,severity:b.severity,priority:b.priority,content:b.content,contentHash:b.contentHash,attributes:b.attributes}))}ensureSessionRoot(a,b){this.insertAuditEvent({id:a,eventType:"session",startedAt:b})}insertLlmCall(a){var b,c;let d=(0,g.I8t)(a.startedAt);if(!Number.isFinite(d))return;let e=(b=a.sessionId,c=a.messageId,h((0,g.tTV)(["audit_event_llm_call",b,c])));this.upsertLlmCallStmt.run(F({id:e,parentId:a.parentId,rootSessionId:a.rootSessionId,eventType:"llm_call",hostId:null,harnessId:null,sourceProjectId:null,startedAt:d,endedAt:null,severity:null,priority:null,content:null,contentHash:null,attributes:JSON.stringify(a.attributes)}))}insertToolCall(a){var b,c;let d=(0,g.I8t)(a.startedAt);if(!Number.isFinite(d))return;let e=(b=a.sessionId,c=a.toolUseId,h((0,g.tTV)(["audit_event_tool_call",b,c])));this.insertStmt.run(F({id:e,parentId:a.parentId,rootSessionId:a.rootSessionId,eventType:"tool_call",hostId:null,harnessId:null,sourceProjectId:null,startedAt:d,endedAt:null,severity:null,priority:null,content:null,contentHash:null,attributes:JSON.stringify(a.attributes)}))}findById(a){return D(this.db.prepare("SELECT * FROM audit_events WHERE id = :id"),{id:a})}sessionProvider(a){let b=this.findById(a);if(!b?.attributes)return;let c=P(b.attributes)?.provider;if("string"==typeof c)return c}llmCallLeaves(){return C(this.db.prepare(`SELECT root_session_id AS sessionId, attributes
-           FROM audit_events
-          WHERE event_type = 'llm_call' AND attributes IS NOT NULL`))}}class ac{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO classified_data (id, class, label, attributes)
-       VALUES (:id, :class, :label, :attributes)`)}upsert(a){var b;let c=(b=a.class,h((0,g.tTV)(["classified_data",b]))),d=(0,g.$BP)(a,c);return this.insertStmt.run(F({id:d.id,class:d.class,label:d.label,attributes:d.attributes})),c}}function ad(a){return D(a.prepare(`SELECT id, started_at, attributes FROM audit_events
-          WHERE event_type = 'config_scan'
-          ORDER BY started_at DESC, id DESC LIMIT 1`))}class ae{constructor(a){this.db=a}report(){let a=ad(this.db);if(!a)return{scannedAt:null,skills:[],hooks:[],mcpServers:[],configFiles:[],topics:[]};let b=C(this.db.prepare(`SELECT id, object_type AS objectType, title, location, attributes FROM inventory
-          WHERE object_type IN ('skill', 'hook', 'mcp_server', 'config_file') AND last_seen >= :startedAt
-          ORDER BY object_type, title`),{startedAt:a.started_at}),c=C(this.db.prepare(`SELECT f.masked_match AS maskedMatch, d.rule_id AS ruleId, d.name AS name
-           FROM inspection_findings f
-           JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-          WHERE f.audit_event_id = :scanId`),{scanId:a.id}),d=[],e=[],f=[],g=[],h=this.trustOverrides();for(let a of b){let b=P(a.attributes);b&&("skill"===a.objectType?d.push(function(a,b){let c={id:a.id,name:a.title??"(unnamed)",source:af(b.source)??"unknown",scope:af(b.scope)??"unknown",status:"unknown"},d=af(b.description);void 0!==d&&(c.description=d);let e=af(b.version);void 0!==e&&(c.installedVersion=e);let f=af(b.updated_at);return void 0!==f&&(c.updatedAt=f),c}(a,b)):"hook"===a.objectType?e.push(function(a,b,c){let d=af(b.command)??"",e=c.filter(a=>a.maskedMatch===d),f={id:a.id,event:af(b.event)??"unknown",command:d,scope:af(b.scope)??"unknown",status:e.some(a=>"hook-external-egress"===a.ruleId)?"egress":e.some(a=>"hook-conflict"===a.ruleId)?"conflict":e.some(a=>"hook-unknown"===a.ruleId)?"unknown":"active",warnings:e.map(a=>a.name)},g=af(b.matcher);void 0!==g&&(f.matcher=g);let h=af(b.plugin_name);return void 0!==h&&(f.pluginName=h),f}(a,b,c)):"mcp_server"===a.objectType?f.push(function(a,b,c){let d={id:a.id,name:a.title??"(unnamed)",scope:af(b.scope)??"unknown",transport:af(b.transport)??"unknown",trust:c.get(a.id)??"unapproved"},e=af(b.command);void 0!==e&&(d.command=e);let f=af(b.url);if(void 0!==f&&(d.url=f),Array.isArray(b.env_keys)){let a=b.env_keys.filter(a=>"string"==typeof a);a.length>0&&(d.envKeys=a)}let g=af(b.plugin_name);void 0!==g&&(d.pluginName=g);let h=af(b.marketplace);void 0!==h&&(d.marketplace=h);let i=af(b.project);return void 0!==i&&(d.project=i),d}(a,b,h)):g.push(function(a,b){let c=af(b.scope)??"unknown",d={id:a.id,name:a.title??"(unnamed)",path:a.location??"",scope:c,kind:af(b.kind)??"Configuration file",untracked:"local"===c},e=af(b.detail);void 0!==e&&(d.detail=e),"number"==typeof b.entry_count&&(d.entryCount=b.entry_count);let f=af(b.updated_at);return void 0!==f&&(d.updatedAt=f),d}(a,b)))}return{scannedAt:new Date(a.started_at).toISOString(),skills:d,hooks:e,mcpServers:f,configFiles:g,topics:function(a,b,c,d,e){let f=[],g=a.filter(a=>"update_available"===a.status).length,h={topic:"skills",count:a.length};g>0&&(h.attention=`${String(g)} updates`),f.push(h);let i=b.filter(a=>"egress"===a.status).length,j=b.filter(a=>"conflict"===a.status).length,k=b.filter(a=>"unknown"===a.status).length,l=[];i>0&&l.push(`${String(i)} egress`),k>0&&l.push(`${String(k)} unknown`),j>0&&l.push(`${String(j)} conflict${j>1?"s":""}`);let m={topic:"hooks",count:b.length};l.length>0&&(m.attention=l.join(" \xb7 ")),f.push(m);let n=c.filter(a=>"unapproved"===a.trust).length,o={topic:"mcp",count:c.length};n>0&&(o.attention=`${String(n)} unapproved`),f.push(o);let p=d.filter(a=>a.untracked).length,q={topic:"config_files",count:d.length};p>0&&(q.attention=`${String(p)} untracked`),f.push(q);let r=function(a){let b=P(a)?.errors;return"number"==typeof b?b:0}(e),s={topic:"configuration",count:r};return r>0&&(s.attention=`${String(r)} sources failed to parse`),f.push(s),f}(d,e,f,g,a.attributes)}}trustOverrides(){let a=C(this.db.prepare("SELECT asset_id AS assetId, trust FROM mcp_trust_override")),b=new Map;for(let c of a)("known-good"===c.trust||"risky"===c.trust||"unapproved"===c.trust)&&b.set(c.assetId,c.trust);return b}}function af(a){return"string"==typeof a?a:void 0}function ag(a){let b=O(a,[]);if(!Array.isArray(b))return[];let c=[];for(let a of b)a&&"object"==typeof a&&c.push(a);return c}function ah(a,b){return a.version!==b.version||a.rulesJson!==b.rulesJson}class ai{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}listDetections(a){let b=C(this.db.prepare(`SELECT namespace, pack_id AS packId, version, name, enabled, policy_id AS policyId,
-                rules_json AS rulesJson
-         FROM installed_packs`)),c=this.availableByPack(),d=b.map(a=>{let b=c.get(`${a.namespace}/${a.packId}`);return{namespace:a.namespace,packId:a.packId,version:a.version,name:a.name,enabled:E(a.enabled),ruleCount:ag(a.rulesJson).length,policyId:a.policyId,...b&&ah(a,b)?{latestVersion:b.version}:{}}});return Promise.resolve((0,g.plk)(d,a))}availableByPack(){return new Map(C(this.db.prepare(`SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson
-         FROM available_packs`)).map(a=>[`${a.namespace}/${a.packId}`,a]))}getDetectionStats(){let a=C(this.db.prepare("SELECT enabled, rules_json AS rulesJson FROM installed_packs")),b=0,c=0,d=new Set;for(let e of a){E(e.enabled)&&(c+=1);let a=ag(e.rulesJson);for(let c of(b+=a.length,a))"string"==typeof c.id&&d.add(c.id)}return Promise.resolve({detections:a.length,rules:b,active:c,findingsLast30d:this.countFindingsLast30d([...d])})}getDetectionDetail(a){let b=(0,g.pnU)(a);if(!b)return Promise.resolve(null);let{namespace:c,packId:d}=b,e=D(this.db.prepare(`SELECT namespace, pack_id AS packId, version, name, enabled, policy_id AS policyId,
-                rules_json AS rulesJson, updated_at AS updatedAt
-         FROM installed_packs
-         WHERE namespace = ? AND pack_id = ?`),[c,d]);if(!e)return Promise.resolve(null);let f=ag(e.rulesJson),h=f.map(a=>a.id).filter(a=>"string"==typeof a),i=this.countFindingsLast30d(h),j=this.availableByPack().get(`${e.namespace}/${e.packId}`),k=j?ah(e,j)?{available:!0,latestVersion:j.version,latestRuleCount:ag(j.rulesJson).length}:{available:!1,latestVersion:j.version}:null;return Promise.resolve((0,g.a45)({namespace:e.namespace,packId:e.packId,version:e.version,name:e.name,enabled:E(e.enabled),rules:f,updatedAt:new Date(e.updatedAt),policyId:e.policyId},i,k))}countFindingsLast30d(a){if(0===a.length)return 0;let b=this.now()-2592e6,c=t(a.length);return G(this.db,`SELECT count(*) AS n
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         WHERE e.started_at >= ?
-           AND e.event_type IN (${g.hfB})
-           AND d.rule_id IN (${c})`,[b,...a])}}class aj{constructor(a){this.db=a}contentHashes(){return Promise.resolve(new Set(C(this.db.prepare(`SELECT content_hash FROM audit_events
-         WHERE event_type IN (${g.hfB})`)).map(a=>a.content_hash)))}}let ak=864e5;class al extends Error{constructor(a){super(`duplicate-active-exception: an active exception already exists for rule "${a}" and this value — revoke it before granting a new one`),this.code="duplicate-active-exception",this.name="DuplicateActiveExceptionError"}}class am extends Error{constructor(a){super(`ambiguous-exception-id: "${a}" matches more than one exception — add more characters`),this.code="ambiguous-exception-id",this.name="AmbiguousExceptionIdError"}}let an=`revoked_at IS NULL
-     AND (expires_at IS NULL OR expires_at > :now)
-     AND (max_uses IS NULL OR use_count < max_uses)`,ao=`capability = 'reveal_to_model'
-     AND conditions IS NULL
-     AND ${an}`;class ap{constructor(a,b=()=>Date.now()){this.db=a,this.now=b,this.consumeStmt=a.prepare(`UPDATE exceptions
-          SET use_count = use_count + 1, last_used_at = :now, updated_at = :now
-        WHERE id = :id AND ${an}`),this.insertBlockedStmt=a.prepare(`INSERT OR REPLACE INTO blocked_detections (reference, rule_id, category, value_fingerprint, key_version, masked_value, session_id, repo, blocked_at)
-       VALUES (:reference, :ruleId, :category, :valueFingerprint, :keyVersion, :maskedValue, :sessionId, :repo, :blockedAt)`),this.sweepBlockedStmt=a.prepare("DELETE FROM blocked_detections WHERE blocked_at <= :cutoff")}create(a){try{return Promise.resolve(this.createSync(a))}catch(a){return Promise.reject(a instanceof Error?a:Error(String(a)))}}createSync(a){if(a.conditions?.provider!==void 0)throw Error("provider conditions are not supported yet — a grant with one would never apply");let b=(0,d.randomUUID)(),c=this.now();try{this.insertExceptionRow(b,a,c)}catch(d){if(!(d instanceof Error&&(2067===d.errcode||d.message.includes("UNIQUE constraint failed"))))throw d;x(this.db,()=>{if(1!==Number(this.db.prepare(`UPDATE exceptions
-                SET revoked_at = :now, revoked_by = :revokedBy,
-                    revoke_reason = 'superseded by a new grant for the same value',
-                    updated_at = :now
-              WHERE rule_id = :ruleId AND value_fingerprint = :valueFingerprint
-                AND key_version = :keyVersion AND revoked_at IS NULL
-                AND ((expires_at IS NOT NULL AND expires_at <= :now)
-                  OR (max_uses IS NOT NULL AND use_count >= max_uses))`).run({now:c,revokedBy:a.createdBy,ruleId:a.ruleId,valueFingerprint:a.valueFingerprint,keyVersion:a.keyVersion}).changes))throw new al(a.ruleId);this.insertExceptionRow(b,a,c)},"IMMEDIATE")}let e=D(this.db.prepare("SELECT * FROM exceptions WHERE id = :id"),{id:b});if(void 0===e)throw Error("exception row not found immediately after insert");return aq(e)}insertExceptionRow(a,b,c){this.db.prepare(`INSERT INTO exceptions (
-             id, rule_id, category, value_fingerprint, key_version, masked_value,
-             capability, scope, expires_at, max_uses, use_count, last_used_at,
-             justification, conditions, created_by, created_via, created_at, updated_at
-           ) VALUES (
-             :id, :ruleId, :category, :valueFingerprint, :keyVersion, :maskedValue,
-             :capability, :scope, :expiresAt, :maxUses, 0, NULL, :justification,
-             :conditions, :createdBy, :createdVia, :now, :now
-           )`).run({id:a,ruleId:b.ruleId,category:b.category,valueFingerprint:b.valueFingerprint,keyVersion:b.keyVersion,maskedValue:b.maskedValue,capability:b.capability??"suppress",scope:b.scope,expiresAt:null===b.expiresAt?null:(0,g.I8t)(b.expiresAt),maxUses:b.maxUses,justification:b.justification,conditions:null===b.conditions?null:JSON.stringify(b.conditions),createdBy:b.createdBy,createdVia:b.createdVia,now:c})}list(a){let b=a?.includeTerminal?"":`WHERE ${an}`;return Promise.resolve(I(C(this.db.prepare(`SELECT * FROM exceptions ${b} ORDER BY created_at DESC, rowid DESC`),a?.includeTerminal?{}:{now:this.now()}),aq))}getByIdPrefix(a){if(0===a.length)return Promise.resolve(void 0);let b=C(this.db.prepare(String.raw`SELECT * FROM exceptions WHERE id LIKE :pattern ESCAPE '\' LIMIT 2`),{pattern:`${s(a)}%`});if(b.length>1)return Promise.reject(new am(a));let c=b[0];if(!c)return Promise.resolve(void 0);try{return Promise.resolve(aq(c))}catch{return Promise.resolve(void 0)}}revoke(a,b,c){let d=this.now();return Promise.resolve(1===Number(this.db.prepare(`UPDATE exceptions
-            SET revoked_at = :now, revoked_by = :revokedBy, revoke_reason = :reason, updated_at = :now
-          WHERE id = :id AND revoked_at IS NULL`).run({id:a,revokedBy:b,reason:c??null,now:d}).changes))}consume(a,b=this.now()){return Promise.resolve(1===Number(this.consumeStmt.run({id:a,now:b}).changes))}activeBundleEntries(a,b=this.now()){return Promise.resolve(I(C(this.db.prepare(`SELECT * FROM exceptions
-          WHERE key_version = :keyVersion AND ${an}
-          ORDER BY created_at DESC, rowid DESC`),{keyVersion:a,now:b}),a=>{let b=null===a.conditions?null:JSON.parse(a.conditions);return g.iRC.parse({id:a.id,ruleId:a.rule_id,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,capability:a.capability,expiresAt:null===a.expires_at?null:(0,g.q11)(a.expires_at),maxUses:a.max_uses,useCount:a.use_count,conditions:b})}))}recordBlocked(a){let b=this.now();return this.sweepBlockedStmt.run({cutoff:b-ak}),this.insertBlockedStmt.run({reference:a.reference,ruleId:a.ruleId,category:a.category,valueFingerprint:a.valueFingerprint,keyVersion:a.keyVersion,maskedValue:a.maskedValue,sessionId:a.sessionId,repo:a.repo,blockedAt:b}),Promise.resolve()}recentBlocked(a=18e5){return Promise.resolve(C(this.db.prepare(`SELECT * FROM blocked_detections
-          WHERE blocked_at > :cutoff
-          ORDER BY blocked_at DESC, rowid DESC`),{cutoff:this.now()-a}).map(a=>({reference:a.reference,ruleId:a.rule_id,category:a.category,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,maskedValue:a.masked_value,sessionId:a.session_id,repo:a.repo,blockedAt:(0,g.q11)(a.blocked_at)})))}activeRevealGrant(a,b,c,d){try{let e=d??this.now(),f=D(this.db.prepare(`SELECT id FROM exceptions
-            WHERE rule_id = :ruleId AND value_fingerprint = :valueFingerprint
-              AND key_version = :keyVersion
-              AND ${ao}
-            LIMIT 1`),{ruleId:a,valueFingerprint:b,keyVersion:c,now:e});return Promise.resolve(f??null)}catch(a){return Promise.reject(a instanceof Error?a:Error(String(a)))}}sweepTerminal(a,b=this.now()){return Promise.resolve(Number(this.db.prepare(`DELETE FROM exceptions
-          WHERE updated_at < :cutoff
-            AND (revoked_at IS NOT NULL
-                 OR (expires_at IS NOT NULL AND expires_at <= :now)
-                 OR (max_uses IS NOT NULL AND use_count >= max_uses))`).run({cutoff:b-a,now:b}).changes))}}function aq(a){let b=null===a.conditions?null:JSON.parse(a.conditions);return g.V8B.parse({id:a.id,ruleId:a.rule_id,category:a.category,valueFingerprint:a.value_fingerprint,keyVersion:a.key_version,maskedValue:a.masked_value,capability:a.capability,scope:a.scope,expiresAt:null===a.expires_at?null:(0,g.q11)(a.expires_at),maxUses:a.max_uses,useCount:a.use_count,lastUsedAt:null===a.last_used_at?null:(0,g.q11)(a.last_used_at),justification:a.justification,conditions:b,createdBy:a.created_by,createdVia:a.created_via,createdAt:(0,g.q11)(a.created_at),updatedAt:(0,g.q11)(a.updated_at),revokedAt:null===a.revoked_at?null:(0,g.q11)(a.revoked_at),revokedBy:a.revoked_by,revokeReason:a.revoke_reason})}function ar(a){return`(
-    SELECT fr.status FROM finding_resolution fr
-     WHERE fr.finding_key = ${a}.finding_key
-     ORDER BY fr.created_at DESC, fr.rowid DESC
-     LIMIT 1
-  )`}let as=`(
-  SELECT finding_key, status, method, resolved_at FROM (
-    SELECT fr.finding_key, fr.status, fr.method, fr.resolved_at,
-           ROW_NUMBER() OVER (
-             PARTITION BY fr.finding_key
-             ORDER BY fr.created_at DESC, fr.rowid DESC
-           ) AS rn
-      FROM finding_resolution fr
-  ) WHERE rn = 1
-)`;function at(a,b){return(0,g._6W)({severity:a.maxSeverity,latestDetectedAt:a.latestDetectedAt,id:""},{severity:b.maxSeverity,latestDetectedAt:b.latestDetectedAt,id:""})}function au(a){return null===a||""===a?[]:a.split(",")}function av(a){return(0,g.xog)({kind:a.kind,findingKey:a.finding_key,latestResolutionStatus:a.latest_status})}class aw{constructor(a){this.db=a}recentFindings(a){let b=a?.limit??50;return Promise.resolve(C(this.db.prepare(`SELECT f.id, f.audit_event_id AS event_id, d.rule_id, d.category, d.severity,
-                f.masked_match, f.action_taken, f.confidence, e.started_at AS occurred_at,
-                json_extract(e.attributes, '$.source_tool') AS source_tool,
-                e.event_type AS kind
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         WHERE e.event_type IN (${g.hfB})
-         ORDER BY e.started_at DESC, f.rowid DESC
-         LIMIT :limit`),{limit:b}).map(a=>({id:a.id,eventId:a.event_id,ruleId:a.rule_id,category:a.category,severity:a.severity,maskedMatch:a.masked_match,actionTaken:a.action_taken,confidence:a.confidence,occurredAt:(0,g.q11)(a.occurred_at),sourceTool:a.source_tool,kind:a.kind})))}sessionFindingsCount(a){return a?Promise.resolve(G(this.db,`SELECT count(*) AS n FROM inspection_findings f
-           JOIN audit_events e ON e.id = f.audit_event_id
-          WHERE e.root_session_id = :sessionId
-            AND e.event_type IN (${g.hfB})`,{sessionId:a})):Promise.resolve(0)}sessionFirings(a){return Object.fromEntries(H(this.db,`SELECT d.rule_id AS k, count(*) AS n
-           FROM inspection_findings f
-           JOIN audit_events e ON e.id = f.audit_event_id
-           JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-          WHERE e.root_session_id = :sessionId
-            AND e.event_type NOT IN (${g.hfB})
-          GROUP BY d.rule_id`,{sessionId:a}))}listGroupedFindings(a){let b=a.sessionId?" AND e.root_session_id = :sessionId":"",c=void 0===a.from?void 0:(0,g.I8t)(a.from),d=`WHERE e.event_type IN (${g.hfB})${b}${void 0===c?"":" AND e.started_at >= :fromMs"}`,e={...a.sessionId?{sessionId:a.sessionId}:{},...void 0===c?{}:{fromMs:c}},f=this.groupAggregates(void 0!==a.q&&""!==a.q,{predicate:d,params:e}),h=C(this.db.prepare(`SELECT id, rule_id, category, severity, masked_match, action_taken, confidence,
-                occurred_at, source_tool, repo, file, tool_name, event_id, session_id,
-                kind, finding_key, latest_status
-         FROM (
-           SELECT f.id AS id, d.rule_id AS rule_id, d.category AS category,
-                  d.severity AS severity, f.masked_match AS masked_match,
-                  f.action_taken AS action_taken, f.confidence AS confidence,
-                  e.started_at AS occurred_at,
-                  json_extract(e.attributes, '$.source_tool') AS source_tool,
-                  json_extract(e.attributes, '$.repo') AS repo,
-                  json_extract(e.attributes, '$.file_path') AS file,
-                  json_extract(e.attributes, '$.tool_name') AS tool_name,
-                  f.audit_event_id AS event_id, e.root_session_id AS session_id,
-                  e.event_type AS kind, f.finding_key AS finding_key,
-                  latest.status AS latest_status,
-                  ROW_NUMBER() OVER (
-                    PARTITION BY d.rule_id
-                    ORDER BY e.started_at DESC, f.id DESC
-                  ) AS rn
-             FROM inspection_findings f
-             JOIN audit_events e ON e.id = f.audit_event_id
-             JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-             LEFT JOIN ${as} latest
-               ON latest.finding_key = f.finding_key
-             ${d}
-         )
-         WHERE rn <= :cap
-         ORDER BY occurred_at DESC, id DESC`),{cap:200,...e}).map(a=>({id:a.id,ruleId:a.rule_id,category:a.category,severity:a.severity,maskedMatch:a.masked_match,actionTaken:a.action_taken,confidence:a.confidence,occurredAt:(0,g.q11)(a.occurred_at),sourceTool:a.source_tool,repo:a.repo??"",file:a.file??"",...null===a.tool_name?{}:{toolName:a.tool_name},eventId:a.event_id,...null===a.session_id?{}:{sessionId:a.session_id},status:av(a)})),i=(0,g.mAj)(h,{aggregates:f}),j={severity:a.severity,providers:a.provider,actions:a.action,statuses:a.status,subtype:a.subtype,q:a.q},k=(0,g.rG)(i,j),l=(0,g.A6E)((0,g.tXp)(i,j)),m=a.status??[],n={findings:l.reduce((a,b)=>{if(0===m.length)return a+b.instanceCount;let c=f.get(b.id);return a+(c?(0,g.Bfj)(c.statusInputs,m)??b.instanceCount:b.instanceCount)},0),groups:l.length},o=a.limit??g.goN,p=void 0===a.cursor?null:function(a){let b=P(Buffer.from(a,"base64url").toString("utf8"));return void 0!==b&&"string"==typeof b.sev&&"string"==typeof b.t&&"string"==typeof b.id?{severity:b.sev,latestDetectedAt:b.t,id:b.id}:null}(a.cursor),q=null===p?0:function(a,b){let c=a.findIndex(a=>(0,g._6W)(a,b)>0);return -1===c?a.length:c}(l,p),r=l.slice(q,q+o),s=r.at(-1),t=q+o<l.length&&s?function(a){let b={sev:a.severity,t:a.latestDetectedAt,id:a.id};return Buffer.from(JSON.stringify(b)).toString("base64url")}(s):null,u=void 0===a.includeId||""===a.includeId?void 0:function(a,b,c){if(!b.some(a=>a.id===c||a.instances.some(a=>a.id===c)))return a.find(a=>a.id===c||a.instances.some(a=>a.id===c))}(l,r,a.includeId),v=m.length>0?new Set(m):null;return Promise.resolve({totals:n,facets:k,items:[...r,...u?[u]:[]].map(a=>v?{...a,instances:a.instances.filter(a=>void 0!==a.status&&v.has(a.status))}:a),nextCursor:t,...a.sessionId?{sessionFirings:this.sessionFirings(a.sessionId)}:{}})}listFindingInstances(a){let b,c={severity:a.severity,subtype:a.subtype,providers:a.provider,actions:a.action,statuses:a.status,tools:a.tool,repo:a.repo,file:a.file,q:a.q},d=a.limit??g.b2L,e=void 0===a.cursor?null:R(a.cursor),f=(0,g.fj8)(c),h=[],i=0,j=!1;for(let e of this.scanFindingRows({sessionId:a.sessionId,from:a.from}))f.add(e),(0,g.am1)(e,c)&&(i+=1,h.length<d?(h.push((0,g.MgS)(e)),b=e):j=!0);let k=j&&b?Q({startedAtMs:(0,g.I8t)(b.occurredAt),id:b.id}):null;if(null!==e){let b=this.pageAfter(e,c,d,a);return Promise.resolve({totals:{findings:i},facets:f.facets(),items:b.items,nextCursor:b.nextCursor})}return Promise.resolve({totals:{findings:i},facets:f.facets(),items:h,nextCursor:k})}pageAfter(a,b,c,d){let e,f=[],h=!1;for(let i of this.scanFindingRows({sessionId:d.sessionId,from:d.from,after:a}))if((0,g.am1)(i,b))if(f.length<c)f.push((0,g.MgS)(i)),e=i;else{h=!0;break}return{items:f,nextCursor:h&&e?Q({startedAtMs:(0,g.I8t)(e.occurredAt),id:e.id}):null}}listFindingLocations(a){let b={severity:a.severity,subtype:a.subtype,providers:a.provider,actions:a.action,statuses:a.status,tools:a.tool,q:a.q},c=a.limit??100,d=new Map,e=0;for(let c of this.scanFindingRows({sessionId:a.sessionId,from:a.from})){if(!(0,g.am1)(c,b))continue;e+=1;let a=d.get(c.repo);void 0===a&&(a=new Map,d.set(c.repo,a));let f=a.get(c.file);void 0===f&&(f=(0,g.SSj)(),a.set(c.file,f)),(0,g._5V)(f,c)}let f=0,h=[...d.entries()].map(([a,b])=>{f+=b.size;let c=[...b.entries()].map(([a,b])=>({file:a,instanceCount:b.instanceCount,maxSeverity:b.maxSeverity,latestDetectedAt:b.latestDetectedAt,...void 0===(0,g.JB8)(b.statuses)?{}:{status:(0,g.JB8)(b.statuses)},ruleIds:[...b.ruleIds].slice(0,20)})).sort(at),d=c.reduce((a,b)=>({instanceCount:a.instanceCount+b.instanceCount,maxSeverity:0>at(b,a)?b.maxSeverity:a.maxSeverity,latestDetectedAt:b.latestDetectedAt>a.latestDetectedAt?b.latestDetectedAt:a.latestDetectedAt}),{instanceCount:0,maxSeverity:c[0]?.maxSeverity??"low",latestDetectedAt:""}),e=c.map(a=>a.status),h=(0,g.JB8)(e);return{repo:a,instanceCount:d.instanceCount,maxSeverity:d.maxSeverity,latestDetectedAt:d.latestDetectedAt,...void 0===h?{}:{status:h},files:c}});return h.sort(at),Promise.resolve({totals:{findings:e,repos:h.length,files:f},items:h.slice(0,c),hasMore:h.length>c})}*scanFindingRows(a){let b=[`e.event_type IN (${g.hfB})`],c=[];void 0!==a.sessionId&&""!==a.sessionId&&(b.push("e.root_session_id = ?"),c.push(a.sessionId)),void 0!==a.from&&(b.push("e.started_at >= ?"),c.push((0,g.I8t)(a.from)));let d=`SELECT f.id AS id, d.rule_id AS rule_id, d.category AS category,
-              d.severity AS severity, f.masked_match AS masked_match,
-              f.action_taken AS action_taken, f.confidence AS confidence,
-              e.started_at AS occurred_at,
-              json_extract(e.attributes, '$.source_tool') AS source_tool,
-              json_extract(e.attributes, '$.repo') AS repo,
-              json_extract(e.attributes, '$.file_path') AS file,
-              json_extract(e.attributes, '$.tool_name') AS tool_name,
-              f.audit_event_id AS event_id, e.root_session_id AS session_id,
-              e.event_type AS kind, f.finding_key AS finding_key,
-              ${ar("f")} AS latest_status
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-        WHERE ${b.join(" AND ")}
-          AND (e.started_at < ? OR (e.started_at = ? AND f.id < ?))
-        ORDER BY e.started_at DESC, f.id DESC
-        LIMIT ?`,e=a.after??{startedAtMs:Number.MAX_SAFE_INTEGER,id:"￿"};for(;;){let a=C(this.db.prepare(d),[...c,e.startedAtMs,e.startedAtMs,e.id,1e3]);for(let b of a)yield{id:b.id,ruleId:b.rule_id,category:b.category,severity:b.severity,maskedMatch:b.masked_match,actionTaken:b.action_taken,confidence:b.confidence,occurredAt:(0,g.q11)(b.occurred_at),sourceTool:b.source_tool,repo:b.repo??"",file:b.file??"",...null===b.tool_name?{}:{toolName:b.tool_name},eventId:b.event_id,...null===b.session_id?{}:{sessionId:b.session_id},status:av(b)};if(a.length<1e3)return;let b=a[a.length-1];if(void 0===b)return;e={startedAtMs:b.occurred_at,id:b.id}}}groupAggregates(a,b){let c=a?`, group_concat(DISTINCT json_extract(e.attributes, '$.repo')) AS repos,
-           group_concat(DISTINCT json_extract(e.attributes, '$.file_path')) AS files,
-           group_concat(DISTINCT 'via ' || json_extract(e.attributes, '$.tool_name')) AS tool_names`:", NULL AS repos, NULL AS files, NULL AS tool_names";return new Map(this.db.prepare(`SELECT rule_id,
-                sum(tuple_count) AS instance_count,
-                max(latest_at) AS latest_at,
-                group_concat(source_tools) AS source_tools,
-                group_concat(actions_taken) AS actions_taken,
-                group_concat(status_tuple || '|' || tuple_count) AS status_inputs,
-                group_concat(repos) AS repos,
-                group_concat(files) AS files,
-                group_concat(tool_names) AS tool_names
-           FROM (
-             SELECT d.rule_id AS rule_id,
-                    e.event_type || '|' ||
-                      (CASE WHEN f.finding_key IS NULL THEN '' ELSE 'k' END) || '|' ||
-                      coalesce(latest.status, '') AS status_tuple,
-                    count(*) AS tuple_count,
-                    max(e.started_at) AS latest_at,
-                    group_concat(DISTINCT json_extract(e.attributes, '$.source_tool')) AS source_tools,
-                    group_concat(DISTINCT f.action_taken) AS actions_taken
-                    ${c}
-               FROM inspection_findings f
-               JOIN audit_events e ON e.id = f.audit_event_id
-               JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-               LEFT JOIN ${as} latest
-                 ON latest.finding_key = f.finding_key
-              ${b.predicate}
-              GROUP BY d.rule_id, status_tuple
-           )
-          GROUP BY rule_id`).all(b.params).map(b=>[b.rule_id,{instanceCount:b.instance_count,sourceTools:au(b.source_tools),actionsTaken:au(b.actions_taken),statusInputs:au(b.status_inputs).map(a=>{let[b="",c="",d="",e=""]=a.split("|");return{kind:b,findingKey:""===c?null:c,latestResolutionStatus:""===d?null:d,count:Number(e)}}),latestDetectedAt:(0,g.q11)(b.latest_at),...a?{searchText:[b.repos??"",b.files??"",b.tool_names??""].filter(a=>""!==a).join(" ")}:{}}]))}healthSummary(){let a=G(this.db,`SELECT count(*) AS n FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-        WHERE e.event_type IN (${g.hfB})`),b=Object.fromEntries(g.S8C.map(a=>[a,0]));for(let a of C(this.db.prepare(`SELECT f.action_taken AS action_taken, count(*) AS c
-           FROM inspection_findings f
-           JOIN audit_events e ON e.id = f.audit_event_id
-          WHERE e.event_type IN (${g.hfB})
-          GROUP BY f.action_taken`)))a.action_taken in b&&(b[a.action_taken]=a.c);let c={critical:0,high:0,medium:0,low:0};for(let a of C(this.db.prepare(`SELECT d.severity AS severity, count(*) AS c
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         LEFT JOIN ${as} latest
-           ON latest.finding_key = f.finding_key
-         WHERE e.event_type IN (${g.hfB})
-           AND (latest.status IS NULL OR latest.status != 'resolved')
-         GROUP BY d.severity`)))a.severity in c&&(c[a.severity]=a.c);let d=g.IgC,e=new Set(C(this.db.prepare(`SELECT DISTINCT json_extract(target, '$.category') AS category
-         FROM policies WHERE enabled = 1 AND json_extract(target, '$.category') IS NOT NULL`)).map(a=>a.category));return Promise.resolve({findings:a,byAction:b,bySeverity:c,coverage:0===d.length?0:d.filter(a=>e.has(a)).length/d.length})}activityByDay(a=7){let b=864e5*Math.floor(Date.now()/864e5)-(a-1)*864e5,c=C(this.db.prepare(`SELECT date(e.started_at / 1000, 'unixepoch') AS day, f.action_taken AS action, count(*) AS c
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         WHERE e.started_at >= :since
-           AND e.event_type IN (${g.hfB})
-         GROUP BY day, f.action_taken`),{since:b}),d=new Map;for(let c=0;c<a;c++){let a=new Date(b+864e5*c).toISOString().slice(0,10);d.set(a,{day:a,total:0,redacted:0,warned:0,blocked:0})}for(let a of c){let b=d.get(a.day);b&&(b.total+=a.c,"redact"===a.action?b.redacted+=a.c:"warn"===a.action?b.warned+=a.c:"block"===a.action&&(b.blocked+=a.c))}return Promise.resolve([...d.values()].sort((a,b)=>a.day.localeCompare(b.day)))}}class ax{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT OR IGNORE INTO inspection_definitions
-         (id, rule_id, name, category, severity, definition, version)
-       VALUES
-         (:id, :ruleId, :name, :category, :severity, :definition, :version)`)}upsert(a){let b=j(a.ruleId,a.version),c=(0,g.JAl)(a,b);return this.insertStmt.run({id:c.id,ruleId:c.ruleId,name:c.name,category:c.category,severity:c.severity,definition:c.definition,version:c.version}),b}}class ay{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT INTO inspection_findings
-         (id, audit_event_id, inspection_definition_id, classified_data_id,
-          span_start, span_end, masked_match, action_taken, confidence,
-          finding_key, first_detected_at)
-       VALUES
-         (:id, :auditEventId, :inspectionDefinitionId, :classifiedDataId,
-          :spanStart, :spanEnd, :maskedMatch, :actionTaken, :confidence,
-          :findingKey,
-          COALESCE(:firstDetectedAt, (SELECT started_at FROM audit_events WHERE id = :auditEventId)))
-       ON CONFLICT(id) DO UPDATE SET
-         inspection_definition_id = excluded.inspection_definition_id
-       ON CONFLICT (finding_key) DO UPDATE SET
-         audit_event_id = excluded.audit_event_id,
-         inspection_definition_id = excluded.inspection_definition_id,
-         classified_data_id = excluded.classified_data_id,
-         span_start = excluded.span_start,
-         span_end = excluded.span_end,
-         masked_match = excluded.masked_match,
-         action_taken = excluded.action_taken,
-         confidence = excluded.confidence`),this.sessionDupStmt=a.prepare(`SELECT 1 FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-        WHERE d.rule_id = :ruleId AND f.masked_match = :maskedMatch
-          AND e.root_session_id = :sessionId
-          AND e.event_type IN (${g.hfB})
-        LIMIT 1`),this.eventDupStmt=a.prepare(`SELECT 1 FROM inspection_findings f
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-        WHERE f.audit_event_id = :auditEventId AND d.rule_id = :ruleId
-          AND f.masked_match = :maskedMatch
-          AND f.span_start = :spanStart AND f.span_end = :spanEnd
-        LIMIT 1`)}isSessionDuplicate(a,b,c){return void 0!==this.sessionDupStmt.get({ruleId:a,maskedMatch:b,sessionId:c})}isEventDuplicate(a,b,c,d,e){return void 0!==this.eventDupStmt.get({auditEventId:a,ruleId:b,maskedMatch:c,spanStart:d,spanEnd:e})}insertFinding(a){let b=(0,g.$3l)(a);this.insertStmt.run(F({id:b.id,auditEventId:b.auditEventId,inspectionDefinitionId:b.inspectionDefinitionId,classifiedDataId:b.classifiedDataId,spanStart:b.spanStart,spanEnd:b.spanEnd,maskedMatch:b.maskedMatch,actionTaken:b.actionTaken,confidence:b.confidence,findingKey:b.findingKey,firstDetectedAt:b.firstDetectedAt}))}}function az(a){let b=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z-.]+))?$/.exec(a.trim());return b?{core:[Number(b[1]),Number(b[2]),Number(b[3])],pre:b[4]?b[4].split("."):[]}:null}let aA=g.Jr;function aB(a){return a.map(a=>{var b;return`${a.namespace}/${a.packId}@${a.version}#${b=a.rulesJson,(0,d.createHash)("sha1").update(b).digest("hex")}`}).sort().join(",")}function aC(a){let b=/^(\d+)\.(\d+)\.(\d+)/.exec(a);return b?[Number(b[1]),Number(b[2]),Number(b[3])]:null}class aD{constructor(a){this.db=a,this.insertMissingStmt=a.prepare(`INSERT INTO installed_packs (id, namespace, pack_id, version, name, rules_json, enabled, created_at, updated_at)
-       VALUES (:id, :namespace, :packId, :version, :name, :rulesJson, 1, :now, :now)
-       ON CONFLICT (namespace, pack_id) DO NOTHING`),this.upsertAvailableStmt=a.prepare(`INSERT INTO available_packs (id, namespace, pack_id, version, name, rules_json, recorded_by, updated_at)
-       VALUES (:id, :namespace, :packId, :version, :name, :rulesJson, :recordedBy, :now)
-       ON CONFLICT (namespace, pack_id) DO UPDATE SET
-         version = excluded.version,
-         name = excluded.name,
-         rules_json = excluded.rules_json,
-         recorded_by = excluded.recorded_by,
-         updated_at = excluded.updated_at
-       WHERE available_packs.version <> excluded.version
-          OR available_packs.name <> excluded.name
-          OR available_packs.rules_json <> excluded.rules_json`),this.signatureStmt=a.prepare("SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson FROM available_packs")}recordInventory(a,b){if(0!==a.length)try{let c=a.map(a=>({namespace:a.namespace,packId:a.packId,version:a.version,name:a.name,rulesJson:JSON.stringify(a.rules),ruleIds:new Set(a.rules.map(a=>a.id))}));if(this.storedSignature()===aB(c))return;let e=Date.now();x(this.db,()=>{let a=this.mirrorState(),f=!1;for(let g of c){let c={id:(0,d.randomUUID)(),namespace:g.namespace,packId:g.packId,version:g.version,name:g.name,rulesJson:g.rulesJson,now:e},h=a.get(`${g.namespace}/${g.packId}`);void 0===h||!function(a,b){let c=aC(a.version);if(null===c)return!0;let d=aC(b.version);if(null===d)return!1;for(let a=0;a<3;a++){let b=c[a]??0,e=d[a]??0;if(b!==e)return b<e}for(let c of b.ruleIds)if(!a.ruleIds.has(c))return!0;return!1}(g,h)?this.upsertAvailableStmt.run({...c,id:(0,d.randomUUID)(),recordedBy:b?.recordedBy??null}):f=!0,this.insertMissingStmt.run(c)}f||this.pruneAvailable(c.map(a=>`${a.namespace}/${a.packId}`))},"IMMEDIATE")}catch{}}mirrorState(){return new Map(C(this.db.prepare("SELECT namespace, pack_id AS packId, version, rules_json AS rulesJson FROM available_packs")).map(a=>[`${a.namespace}/${a.packId}`,{version:a.version,ruleIds:function(a){let b=new Set,c=O(a,[]);if(!Array.isArray(c))return b;for(let a of c)if(a&&"object"==typeof a){let c=a.id;"string"==typeof c&&b.add(c)}return b}(a.rulesJson)}]))}pruneAvailable(a){let b=C(this.db.prepare("SELECT namespace, pack_id AS packId FROM available_packs")),c=new Set(a),d=this.db.prepare("DELETE FROM available_packs WHERE namespace = ? AND pack_id = ?");for(let a of b)c.has(`${a.namespace}/${a.packId}`)||d.run(a.namespace,a.packId)}applyUpdate(a,b){if(this.db.isTransaction)throw Error("applyUpdate must not be called inside an open transaction");let c=!1;return x(this.db,()=>{this.db.exec("UPDATE _pack_write_gate SET open = 1 WHERE id = 1");let d=this.db.prepare(`UPDATE installed_packs SET
-             version = (SELECT a.version FROM available_packs a
-                        WHERE a.namespace = :namespace AND a.pack_id = :packId),
-             name = (SELECT a.name FROM available_packs a
-                     WHERE a.namespace = :namespace AND a.pack_id = :packId),
-             rules_json = (SELECT a.rules_json FROM available_packs a
-                           WHERE a.namespace = :namespace AND a.pack_id = :packId),
-             updated_at = :now
-           WHERE namespace = :namespace AND pack_id = :packId
-             AND EXISTS (SELECT 1 FROM available_packs a
-                         WHERE a.namespace = :namespace AND a.pack_id = :packId)`).run({namespace:a,packId:b,now:Date.now()});this.db.exec("UPDATE _pack_write_gate SET open = 0 WHERE id = 1"),c=Number(d.changes)>0},"IMMEDIATE"),c}installedRuleset(){let a=C(this.db.prepare("SELECT enabled, policy_id AS policyId, rules_json AS rulesJson, version FROM installed_packs")),b={installedPacks:a.length,enabledPacks:0,rules:[],invalidRules:0,ruleActions:new Map,ruleVersions:new Map};for(let c of a){let a;if(!E(c.enabled))continue;b.enabledPacks+=1;let d=(0,g.DhA)(c.policyId);try{a=JSON.parse(c.rulesJson)}catch{b.invalidRules+=1;continue}if(!Array.isArray(a)){b.invalidRules+=1;continue}for(let e of a){let a=g.jON.safeParse(e);a.success?(b.rules.push(a.data),b.ruleActions.set(a.data.id,d),b.ruleVersions.set(a.data.id,c.version)):b.invalidRules+=1}}return b}newestRecordedBinary(){let a=C(this.db.prepare("SELECT DISTINCT recorded_by AS recordedBy FROM available_packs WHERE recorded_by IS NOT NULL")),b=null;for(let c of a){let a=c.recordedBy.lastIndexOf("@");if(a<=0||a===c.recordedBy.length-1)continue;let d=c.recordedBy.slice(0,a),e=c.recordedBy.slice(a+1);null!==az(e)&&(null===b||function(a,b){let c=az(a),d=az(b);if(!c||!d)return 0;for(let a=0;a<3;a++){let b=c.core[a]??0,e=d.core[a]??0;if(b!==e)return b<e?-1:1}return function(a,b){if(0===a.length&&0===b.length)return 0;if(0===a.length)return 1;if(0===b.length)return -1;let c=Math.min(a.length,b.length);for(let d=0;d<c;d++){let c=a[d]??"",e=b[d]??"";if(c===e)continue;let f=/^\d+$/.test(c),g=/^\d+$/.test(e);if(f&&!g)return -1;if(!f&&g)return 1;if(f&&g)return Number(c)<Number(e)?-1:1;return c<e?-1:1}return a.length===b.length?0:a.length<b.length?-1:1}(c.pre,d.pre)}(e,b.version)>0)&&(b={binary:d,version:e})}return b}counts(){return Promise.resolve(D(this.db.prepare(`SELECT count(*) AS packs,
-                coalesce(sum(json_array_length(rules_json)), 0) AS rules,
-                coalesce(sum(enabled), 0) AS enabled
-         FROM installed_packs`))??{packs:0,rules:0,enabled:0})}countsByPolicyId(){return H(this.db,`SELECT coalesce(policy_id, '${aA}') AS k, count(*) AS n
-         FROM installed_packs
-         GROUP BY k`)}listByPolicyId(a){return C(this.db.prepare(`SELECT namespace, pack_id AS packId, name, enabled, rules_json AS rulesJson
-         FROM installed_packs
-         WHERE coalesce(policy_id, '${aA}') = ?
-         ORDER BY name ASC`),[a]).map(a=>({id:`${a.namespace}/${a.packId}`,name:a.name,ruleCount:ag(a.rulesJson).length,enabled:E(a.enabled)}))}setPolicy(a,b,c){if(null!==c&&!g.HUb.safeParse(c).success)throw Error(`Unknown policy '${c}'. Must be one of: ${g.V0H.join(", ")}.`);return Number(this.db.prepare(`UPDATE installed_packs SET policy_id = :policyId, updated_at = :now
-         WHERE namespace = :namespace AND pack_id = :packId`).run({policyId:c,now:Date.now(),namespace:a,packId:b}).changes)>0}setEnabled(a,b,c){return Number(this.db.prepare(`UPDATE installed_packs SET enabled = :enabled, updated_at = :now
-         WHERE namespace = :namespace AND pack_id = :packId`).run({enabled:+!!c,now:Date.now(),namespace:a,packId:b}).changes)>0}storedSignature(){return aB(C(this.signatureStmt))}}class aE{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO inventory
-         (id, object_type, location, title, host_id, attributes, first_seen, last_seen)
-       VALUES
-         (:id, :objectType, :location, :title, :hostId, :attributes, :firstSeen, :lastSeen)
-       ON CONFLICT(id) DO UPDATE SET
-         location = excluded.location,
-         title = excluded.title,
-         host_id = excluded.host_id,
-         attributes = excluded.attributes,
-         last_seen = excluded.last_seen`)}upsert(a,b=Date.now()){var c,d;let e=(c=a.objectType,d=a.identityKey,h((0,g.tTV)(["inventory",c,d]))),f=(0,g.gzP)(a,e,b);return this.upsertStmt.run(F({id:f.id,objectType:f.objectType,location:f.location,title:f.title,hostId:f.hostId,attributes:f.attributes,firstSeen:f.firstSeen,lastSeen:f.lastSeen})),e}findById(a){return D(this.db.prepare("SELECT * FROM inventory WHERE id = :id"),{id:a})}distinctTitles(a){return C(this.db.prepare(`SELECT DISTINCT title FROM inventory
-         WHERE object_type = :objectType AND title IS NOT NULL
-         ORDER BY title`),{objectType:a}).map(a=>a.title)}osVersions(){return C(this.db.prepare(`SELECT DISTINCT os_version AS value FROM inventory
-         WHERE object_type = 'host' AND os_version IS NOT NULL
-         ORDER BY value`)).map(a=>a.value)}}let aF=["config","skill","mcp","hook"],aG=new Set(g.SHn.options),aH="(url IS NULL OR (url NOT LIKE '%/.claude/worktrees/%' AND url NOT LIKE '%\\.claude\\worktrees\\%'))",aI={claudecode:"Claude Code",cursor:"Cursor",codex:"Codex",antigravity:"Antigravity"},aJ={accessCounts:{open:0,approved:0,blocked:0,total:0},findingsCount:0};function aK(a,b){if(a.provider&&aG.has(a.provider))return a.provider;let c=(b.title??"").toLowerCase().replace(/[\s-]/g,"");return c.includes("claudecode")||"claude"===c?"claudecode":c.includes("cursor")?"cursor":c.includes("codex")?"codex":c.includes("antigravity")?"antigravity":null}function aL(a){return a.some(a=>{let b=O(a.attributes,{});return"sample"!==b.provenance&&"claudecode"===aK(b,a)})}function aM(a){let b={id:a.id,type:a.assetType,name:a.name,sub:a.sub??"",flags:O(a.flagsJson,[])};return"mcp"===a.assetType&&a.effectiveTrust&&(b.trust=a.effectiveTrust),b}function aN(a){let b="update_available"===a.status?["update"]:[],c={source:a.source,scope:a.scope};return void 0!==a.installedVersion&&(c.installedVersion=a.installedVersion),void 0!==a.latestVersion&&(c.latestVersion=a.latestVersion),void 0!==a.updatedAt&&(c.updatedAt=a.updatedAt),{id:a.id,assetType:"skill",name:a.name,sub:`Skill \xb7 ${a.source}`,description:a.description??null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aO(a){let b="egress"===a.status?["risk"]:"conflict"===a.status?["conflict"]:"unknown"===a.status?["unknown"]:[],c={event:a.event,command:a.command,scope:a.scope,status:a.status};return void 0!==a.matcher&&(c.matcher=a.matcher),void 0!==a.pluginName&&(c.pluginName=a.pluginName),a.warnings.length>0&&(c.warnings=a.warnings),{id:a.id,assetType:"hook",name:aR(a.command.trim(),64),sub:a.matcher?`Hook \xb7 ${a.event} \xb7 ${a.matcher}`:`Hook \xb7 ${a.event}`,description:a.warnings.length>0?a.warnings.join(" \xb7 "):null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aP(a){let b={scope:a.scope,transport:a.transport};return void 0!==a.command&&(b.command=a.command),void 0!==a.url&&(b.url=a.url),void 0!==a.envKeys&&(b.envKeys=a.envKeys),void 0!==a.pluginName&&(b.pluginName=a.pluginName),void 0!==a.marketplace&&(b.marketplace=a.marketplace),void 0!==a.project&&(b.project=a.project),{id:a.id,assetType:"mcp",name:a.name,sub:`MCP server \xb7 ${a.transport} \xb7 ${aR(function(a){if(void 0!==a.url)try{return new URL(a.url).host}catch{return a.url}return a.command??a.name}(a),48)}`,description:null,flagsJson:"[]",metaJson:JSON.stringify(b),trust:"unapproved",toolsJson:null,effectiveTrust:a.trust}}function aQ(a){let b=a.untracked?["untracked"]:[],c={kind:a.kind,scope:a.scope,path:a.path};return void 0!==a.detail&&(c.detail=a.detail),void 0!==a.entryCount&&(c.entryCount=a.entryCount),void 0!==a.updatedAt&&(c.updatedAt=a.updatedAt),{id:a.id,assetType:"config",name:a.name,sub:a.kind,description:a.detail??null,flagsJson:JSON.stringify(b),metaJson:JSON.stringify(c),trust:null,toolsJson:null,effectiveTrust:null}}function aR(a,b){return a.length>b?`${a.slice(0,b-1)}…`:a}function aS(a,b,c){let d=O(a.attributes,{});return{id:a.id,name:a.name??"",repo:a.url??"",visibility:d.visibility??"private",language:d.language??"",policyDefault:d.policyDefault??"approved",updatedAt:new Date(a.lastSeen).toISOString(),accessCounts:b,findingsCount:c}}function aT(a){return{path:a.path,name:a.name,origin:a.origin,access:a.effectiveAccess,isCustom:null!==a.overrideAccess&&a.overrideAccess!==a.defaultAccess,findings:a.findingsCount,blockedAt:null!==a.blockedAtMs?new Date(a.blockedAtMs).toISOString():null,note:a.note}}class aU{constructor(a){this.db=a}getInventoryStats(){let a=H(this.db,"SELECT asset_type AS k, count(*) AS n FROM inventory_asset GROUP BY asset_type"),b={project:0,skill:a.get("skill")??0,mcp:a.get("mcp")??0,hook:a.get("hook")??0,config:a.get("config")??0};b.project=G(this.db,`SELECT count(*) AS n FROM source_project WHERE ${aH}`);let c=H(this.db,`SELECT coalesce(o.trust, a.trust) AS k, count(*) AS n
-         FROM inventory_asset a
-         LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
-         WHERE a.asset_type = 'mcp' AND coalesce(o.trust, a.trust) IS NOT NULL
-         GROUP BY coalesce(o.trust, a.trust)`),d={"known-good":c.get("known-good")??0,risky:c.get("risky")??0,unapproved:c.get("unapproved")??0},e=G(this.db,`SELECT count(*) AS n FROM inventory
-           WHERE object_type = 'harness'
-             AND (last_seen >= :liveSince OR json_extract(attributes, '$.provenance') = 'sample')`,{liveSince:Date.now()-2592e6}),f=G(this.db,"SELECT count(*) AS n FROM inventory_asset WHERE flags_json <> '[]'"),g=G(this.db,"SELECT count(DISTINCT project_id) AS n FROM project_file WHERE findings_count > 0"),h=this.configAssetRows();for(let a of h)b[a.assetType]+=1,"mcp"===a.assetType&&a.effectiveTrust&&(d[a.effectiveTrust]+=1);return Promise.resolve({attention:f+g+h.filter(a=>"[]"!==a.flagsJson).length,byType:b,harnesses:e,mcpTrust:d})}listHarnesses(a){let b=this.fetchHarnessRows();if(0===b.length)return Promise.resolve({items:[]});let c=new Map;for(let a of b){let b=aK(O(a.attributes,{}),a);if(!b)continue;let d=c.get(b);d?d.push(a):c.set(b,[a])}let d=this.assetsByHarness(b.map(a=>a.id),a),e=[...new Set(b.flatMap(a=>O(a.attributes,{}).projectIds??[]))],f=this.fetchProjectsByIds(e),g=this.projectAggregates(e),h=this.configAssetRows(a,aL(b)),i=[];for(let[b,e]of c){let c=e.flatMap(a=>d.get(a.id)??[]),j=e.some(a=>"sample"!==O(a.attributes,{}).provenance)&&"claudecode"===b&&h.length>0?[...c,...h].sort((a,b)=>a.name.localeCompare(b.name)):c;if(a&&0===j.length)continue;let k=e[0];if(!k)continue;let l=O(k.attributes,{}),m=[...new Set(e.flatMap(a=>O(a.attributes,{}).projectIds??[]))].map(a=>f.get(a)).filter(a=>void 0!==a).map(a=>{let b=g.get(a.id)??aJ;return aS(a,b.accessCounts,b.findingsCount)}),n=e.reduce((a,b)=>a+(O(b.attributes,{}).sessions??0),0),o=j.reduce((a,b)=>a+O(b.flagsJson,[]).length,0),p=new Map;for(let a of j){let b=p.get(a.assetType);b?b.push(aM(a)):p.set(a.assetType,[aM(a)])}let q=aF.filter(a=>p.has(a)).map(a=>({type:a,assets:p.get(a)??[]}));i.push({id:b,label:l.label??aI[b],kind:l.kind??l.provider??b,version:l.harness_version??k.harnessVersion??"",sessions:n,assetCount:j.length,flagCount:o,projects:m,categories:q})}return Promise.resolve({items:i})}listAssets(a){let b=this.fetchAssets(a.type,a.q);if(0===b.length)return Promise.resolve({groups:[]});let c=new Map;for(let a of b){let b=c.get(a.assetType);b?b.push(a):c.set(a.assetType,[a])}let d=[...c.entries()].map(([a,b])=>{let c=new Map;for(let a of b)for(let b of O(a.flagsJson,[]))c.set(b,(c.get(b)??0)+1);let d={type:a,total:b.length,flagRollup:Object.fromEntries(c),items:b.map(aM)};if("mcp"===a){let a=new Map;for(let c of b)c.effectiveTrust&&a.set(c.effectiveTrust,(a.get(c.effectiveTrust)??0)+1);d.trustRollup=Object.fromEntries(a)}return d});return d.sort((a,b)=>aF.indexOf(a.type)-aF.indexOf(b.type)),Promise.resolve({groups:d})}getAsset(a){let b=this.fetchAssetById(a);return Promise.resolve(b?function(a){let b={id:a.id,type:a.assetType,name:a.name,sub:a.sub??"",flags:O(a.flagsJson,[]),description:a.description??null,trust:"mcp"===a.assetType?a.effectiveTrust??null:null,meta:O(a.metaJson,{}),finding:null};if("mcp"===a.assetType&&null!==a.toolsJson){let c=O(a.toolsJson,[]);b.tools="unapproved"===a.effectiveTrust?c.map(a=>({...a,risk:a.risk??"Tool access blocked: MCP server trust is unapproved."})):c}return b}(b):null)}listProjects(a){let b=this.fetchProjects(a),c=this.projectAggregates(b.map(a=>a.id));return Promise.resolve({items:b.map(a=>{let b=c.get(a.id)??aJ;return aS(a,b.accessCounts,b.findingsCount)})})}getProjectTree(a,b){let c=this.fetchProjectById(a);if(!c)return Promise.resolve(null);let d=O(c.attributes,{}),e={id:c.id,repo:c.url??"",visibility:d.visibility??"private"},f=b.path??"";if("blocked"===b.filter){let b=this.fetchProjectFilesBlocked(a);return b.sort((a,b)=>(b.blockedAtMs??0)-(a.blockedAtMs??0)),Promise.resolve({project:e,path:f,files:b.map(aT)})}if(void 0!==b.q&&""!==b.q)return Promise.resolve({project:e,path:f,files:this.fetchProjectFilesSearch(a,b.q).map(aT)});let g=this.fetchProjectFilesUnder(a,f),h=""===f?"":`${f}/`,i=[],j=new Map;for(let a of g){let b=h.length>0?a.path.slice(h.length):a.path,c=b.indexOf("/");if(-1===c)i.push(a);else{let d=b.slice(0,c),e=j.get(d)??[];e.push(a),j.set(d,e)}}let k=[...j.entries()].sort(([a],[b])=>a.localeCompare(b)).map(([a,b])=>({name:a,path:h.length>0?`${f}/${a}`:a,accessCounts:function(a){let b={open:0,approved:0,blocked:0,total:0};for(let c of a)b.total++,b[c.effectiveAccess]++;return b}(b)}));return Promise.resolve({project:e,path:f,folders:k,files:i.map(aT)})}getProjectFile(a,b){let c=this.fetchProjectById(a);if(!c)return Promise.resolve(null);let d=this.fetchProjectFile(a,b);if(!d)return Promise.resolve(null);let e=O(c.attributes,{});return Promise.resolve({...aT(d),project:{repo:c.url??"",visibility:e.visibility??"private",language:e.language??"",policyDefault:e.policyDefault??"approved",updatedAt:new Date(c.lastSeen).toISOString()},findingsRefs:[]})}setFileAccess(a,b,c){let e=this.fetchProjectFile(a,b);return!!e&&(c===e.defaultAccess?this.db.prepare("DELETE FROM file_access_override WHERE project_id = ? AND path = ?").run(a,b):this.db.prepare(`INSERT INTO file_access_override (id, project_id, path, access, created_at, updated_at)
-           VALUES (:id, :projectId, :path, :access, :now, :now)
-           ON CONFLICT (project_id, path) DO UPDATE SET access = excluded.access, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),projectId:a,path:b,access:c,now:Date.now()}),!0)}setMcpTrust(a,b){let c=this.fetchAssetById(a);return c?"mcp"!==c.assetType?"not_mcp":(b===c.trust?this.db.prepare("DELETE FROM mcp_trust_override WHERE asset_id = ?").run(a):this.db.prepare(`INSERT INTO mcp_trust_override (id, asset_id, trust, created_at, updated_at)
-           VALUES (:id, :assetId, :trust, :now, :now)
-           ON CONFLICT (asset_id) DO UPDATE SET trust = excluded.trust, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),assetId:a,trust:b,now:Date.now()}),this.configRowsCache=void 0,"ok"):"not_found"}fetchHarnessRows(){return C(this.db.prepare(`SELECT id, title, attributes, harness_version AS harnessVersion
-         FROM inventory
-         WHERE object_type = 'harness'
-           AND (last_seen >= :liveSince OR json_extract(attributes, '$.provenance') = 'sample')`),{liveSince:Date.now()-2592e6})}assetsByHarness(a,b){let c=new Map;if(0===a.length)return c;let d=[...a],e=`ha.harness_id IN (${t(a.length)})`;if(b){let a=u(b);e+=` AND ${v(["a.name","a.sub"])}`,d.push(a,a)}for(let a of C(this.db.prepare(`SELECT ha.harness_id AS harnessInvId, a.id, a.asset_type AS assetType, a.name, a.sub,
-                a.description, a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
-                a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
-         FROM harness_asset ha
-         JOIN inventory_asset a ON a.id = ha.asset_id
-         LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
-         WHERE ${e}
-         ORDER BY a.name ASC`),d)){let b=a.harnessInvId,[d]=this.mapAssetRows([a]);if(!d)continue;let e=c.get(b);e?e.push(d):c.set(b,[d])}return c}fetchAssets(a,b){let c=[],d=[];if(a&&a.length>0&&(c.push(`a.asset_type IN (${t(a.length)})`),d.push(...a)),b){let a=u(b);c.push(v(["a.name","a.sub"])),d.push(a,a)}let e=c.length?`WHERE ${c.join(" AND ")}`:"",f=this.mapAssetRows(C(this.db.prepare(`SELECT a.id, a.asset_type AS assetType, a.name, a.sub, a.description,
-                  a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
-                  a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
-           FROM inventory_asset a
-           LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
-           ${e}
-           ORDER BY a.name ASC`),d)),g=this.configAssetRows(b).filter(b=>!a||0===a.length||a.includes(b.assetType));return g.length>0?[...f,...g].sort((a,b)=>a.name.localeCompare(b.name)):f}fetchAssetById(a){return this.mapAssetRows(C(this.db.prepare(`SELECT a.id, a.asset_type AS assetType, a.name, a.sub, a.description,
-                  a.flags_json AS flagsJson, a.meta_json AS metaJson, a.trust,
-                  a.tools_json AS toolsJson, coalesce(o.trust, a.trust) AS effectiveTrust
-           FROM inventory_asset a
-           LEFT JOIN mcp_trust_override o ON o.asset_id = a.id
-           WHERE a.id = ?`),[a]))[0]??this.configAssetRows().find(b=>b.id===a)??null}mapAssetRows(a){return a.map(a=>({id:a.id,assetType:a.assetType,name:a.name,sub:a.sub??null,description:a.description??null,flagsJson:a.flagsJson??"[]",metaJson:a.metaJson??"{}",trust:a.trust??null,toolsJson:a.toolsJson??null,effectiveTrust:a.effectiveTrust??null}))}configAssetRows(a,b){let c=this.liveConfigAssetRows(b);if(!a)return c;let d=a.toLowerCase();return c.filter(a=>a.name.toLowerCase().includes(d)||(a.sub??"").toLowerCase().includes(d))}liveConfigAssetRows(a){if(!(a??aL(this.fetchHarnessRows())))return[];let b=this.latestConfigScanId();if(null===b)return[];if(this.configRowsCache?.scanId===b)return this.configRowsCache.rows;let c=new ae(this.db).report(),d=[...c.skills.map(aN),...c.hooks.map(aO),...c.mcpServers.map(aP),...c.configFiles.map(aQ)].sort((a,b)=>a.name.localeCompare(b.name));return this.configRowsCache={scanId:b,rows:d},d}latestConfigScanId(){return ad(this.db)?.id??null}fetchProjects(a){let b=`SELECT id, url, name, attributes, last_seen AS lastSeen FROM source_project
-               WHERE ${aH}`,c=[];if(a){let d=u(a);b+=` AND ${v(["name","url"])}`,c.push(d,d)}return b+=" ORDER BY name ASC",C(this.db.prepare(b),c)}fetchProjectById(a){return D(this.db.prepare("SELECT id, url, name, attributes, last_seen AS lastSeen FROM source_project WHERE id = ?"),[a])??null}fetchProjectsByIds(a){let b=new Map;if(0===a.length)return b;for(let c of C(this.db.prepare(`SELECT id, url, name, attributes, last_seen AS lastSeen
-         FROM source_project WHERE id IN (${t(a.length)})`),a))b.set(c.id,c);return b}projectAggregates(a){let b=new Map;if(0===a.length)return b;for(let c of C(this.db.prepare(`SELECT f.project_id AS projectId,
-                coalesce(o.access, f.default_access) AS eff,
-                count(*) AS n,
-                coalesce(sum(f.findings_count), 0) AS findings
-         FROM project_file f
-         LEFT JOIN file_access_override o ON o.project_id = f.project_id AND o.path = f.path
-         WHERE f.project_id IN (${t(a.length)})
-         GROUP BY f.project_id, eff`),a)){let a=b.get(c.projectId);a||(a={accessCounts:{open:0,approved:0,blocked:0,total:0},findingsCount:0},b.set(c.projectId,a)),a.accessCounts.total+=c.n,a.accessCounts[c.eff]+=c.n,a.findingsCount+=c.findings}return b}fileSelect(a){return`SELECT f.path, f.name, f.origin, f.default_access AS defaultAccess,
-                   f.findings_count AS findingsCount, f.blocked_at AS blockedAtMs, f.note,
-                   coalesce(o.access, f.default_access) AS effectiveAccess,
-                   o.access AS overrideAccess
-            FROM project_file f
-            LEFT JOIN file_access_override o ON o.project_id = f.project_id AND o.path = f.path
-            WHERE ${a}`}mapFileRows(a){return a.map(a=>({path:a.path,name:a.name,origin:a.origin,defaultAccess:a.defaultAccess,findingsCount:a.findingsCount??0,blockedAtMs:a.blockedAtMs??null,note:a.note??null,effectiveAccess:a.effectiveAccess,overrideAccess:a.overrideAccess??null}))}fetchProjectFilesUnder(a,b){return""===b?this.mapFileRows(C(this.db.prepare(this.fileSelect("f.project_id = ? ORDER BY f.path ASC")),[a])):this.mapFileRows(C(this.db.prepare(this.fileSelect("f.project_id = ? AND f.path LIKE ? ESCAPE '\\' ORDER BY f.path ASC")),[a,`${s(b)}/%`]))}fetchProjectFilesSearch(a,b){let c=u(b);return this.mapFileRows(C(this.db.prepare(this.fileSelect("f.project_id = ? AND (f.path LIKE ? ESCAPE '\\' OR f.name LIKE ? ESCAPE '\\') ORDER BY f.path ASC")),[a,c,c]))}fetchProjectFilesBlocked(a){return this.mapFileRows(C(this.db.prepare(this.fileSelect("f.project_id = ? AND coalesce(o.access, f.default_access) = 'blocked' AND f.blocked_at IS NOT NULL")),[a]))}fetchProjectFile(a,b){return this.mapFileRows(C(this.db.prepare(this.fileSelect("f.project_id = ? AND f.path = ?")),[a,b]))[0]??null}}class aV{constructor(a){this.db=a}readPolicies(){return Promise.resolve(I(C(this.db.prepare("SELECT * FROM policies")),a=>{let b=JSON.parse(a.target),c=a.custom_keywords?JSON.parse(a.custom_keywords):void 0;return g.PEm.parse({id:a.id,scope:a.scope,target:b,action:a.action,enabled:E(a.enabled),customKeywords:c})}))}seedDefaults(){if(G(this.db,"SELECT count(*) AS n FROM policies")>0)return;let a=this.db.prepare(`INSERT INTO policies (id, scope, target, action, enabled, created_at, updated_at)
-       VALUES (:id, 'global', :target, :action, 1, :now, :now)`);y(this.db,()=>{for(let[b,c]of Object.entries(g.unw))a.run({id:(0,d.randomUUID)(),target:JSON.stringify({category:b}),action:c,now:Date.now()})})}upsertCategoryAction(a,b){let c=Date.now();this.db.prepare(`INSERT INTO policies (id, scope, target, action, enabled, created_at, updated_at)
-         VALUES (:id, 'global', :target, :action, 1, :now, :now)
-         ON CONFLICT(scope, target) DO UPDATE SET action = excluded.action, enabled = 1, updated_at = excluded.updated_at`).run({id:(0,d.randomUUID)(),target:JSON.stringify({category:a}),action:b,now:c})}capCategoryActions(){return Number(this.db.prepare(`UPDATE policies SET action='warn', updated_at=:now
-         WHERE scope='global' AND action IN ('block','redact')
-           AND json_extract(target,'$.category') IS NOT NULL`).run({now:Date.now()}).changes)}getCategoryAction(a){let b=this.db.prepare("SELECT action FROM policies WHERE scope='global' AND json_extract(target,'$.category') = :category").get({category:a});return b?.action}}class aW{constructor(a){this.packs=a}getPolicyList(a){if("custom"===a)return Promise.resolve({items:[]});let b=this.packs.countsByPolicyId();return Promise.resolve({items:g.RRF.map(a=>({id:a,kind:"builtin",name:g.ZpU[a].name,enabled:!0,usedByCount:b.get(a)??0}))})}getPolicyStats(){let a=this.packs.countsByPolicyId(),b=g.V0H.reduce((b,c)=>b+(a.get(c)??0),0),c=g.V0H.length;return Promise.resolve({policies:c,builtin:c,custom:0,detectionsGoverned:b})}getPolicyDetail(a){let b=g.V0H.find(b=>b===a);if(void 0===b)return Promise.resolve(null);let c=g.ZpU[b];return Promise.resolve({specVersion:1,id:a,kind:"builtin",name:c.name,enabled:!0,description:c.description,usedBy:this.packs.listByPolicyId(a)})}}class aX{constructor(a){this.db=a,this.maxStampStmt=a.prepare("SELECT coalesce(max(updated_at), 0) AS maxStamp FROM project_file WHERE project_id = :projectId"),this.upsertStmt=a.prepare(`INSERT INTO project_file
-         (id, project_id, path, name, origin, default_access, findings_count, blocked_at, note, created_at, updated_at)
-       VALUES
-         (:id, :projectId, :path, :name, :origin, :defaultAccess, 0, NULL, NULL, :now, :now)
-       ON CONFLICT (project_id, path) DO UPDATE SET
-         name = excluded.name,
-         origin = excluded.origin,
-         default_access = excluded.default_access,
-         updated_at = excluded.updated_at`),this.pruneStmt=a.prepare("DELETE FROM project_file WHERE project_id = :projectId AND updated_at < :now")}replaceForProject(a,b,c){let e=Math.max(c,(D(this.maxStampStmt,{projectId:a})?.maxStamp??0)+1);for(let c of b.files)this.upsertStmt.run({id:(0,d.randomUUID)(),projectId:a,path:c.path,name:c.name,origin:c.origin,defaultAccess:c.defaultAccess,now:e});b.truncated||this.pruneStmt.run({projectId:a,now:e})}}class aY{constructor(a,b=()=>Date.now()){this.db=a,this.now=b,this.insertStmt=a.prepare(`INSERT INTO finding_resolution (id, finding_key, status, method, resolved_at, evidence, created_at)
-       VALUES (:id, :findingKey, :status, :method, :resolvedAt, :evidence, :createdAt)`),this.latestStmt=a.prepare(`SELECT status, method, resolved_at, evidence
-         FROM finding_resolution
-        WHERE finding_key = :findingKey
-        ORDER BY created_at DESC, rowid DESC
-        LIMIT 1`),this.openAtRestStmt=a.prepare(`SELECT DISTINCT f.finding_key AS finding_key
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-        WHERE e.event_type = 'code_change'
-          AND json_extract(e.attributes, '$.file_path') = :path
-          AND f.finding_key IS NOT NULL
-          AND ${ar("f")} IS NOT 'resolved'`),this.resolvedAtRestStmt=a.prepare(`SELECT DISTINCT f.finding_key AS finding_key
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-        WHERE e.event_type = 'code_change'
-          AND json_extract(e.attributes, '$.file_path') = :path
-          AND f.finding_key IS NOT NULL
-          AND ${ar("f")} = 'resolved'`)}insertResolution(a){this.insertStmt.run({id:(0,d.randomUUID)(),findingKey:a.findingKey,status:g.GCf.parse(a.status),method:g.cqq.parse(a.method),resolvedAt:a.resolvedAt,evidence:a.evidence,createdAt:this.now()})}latestByKey(a){let b=D(this.latestStmt,{findingKey:a});if(b)return{status:b.status,method:b.method,resolvedAt:b.resolved_at,evidence:b.evidence??""}}openAtRestKeysForPath(a){return C(this.openAtRestStmt,{path:a}).map(a=>a.finding_key)}resolvedAtRestKeysForPath(a){return C(this.resolvedAtRestStmt,{path:a}).map(a=>a.finding_key)}}class aZ{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO rule_probe_cache (rule_key, verdict, worst_probe_ms, checked_at)
-       VALUES (:ruleKey, :verdict, :worstProbeMs, :checkedAt)
-       ON CONFLICT (rule_key) DO UPDATE SET
-         verdict = excluded.verdict,
-         worst_probe_ms = excluded.worst_probe_ms,
-         checked_at = excluded.checked_at`),this.readStmt=a.prepare("SELECT verdict, worst_probe_ms AS worstProbeMs FROM rule_probe_cache WHERE rule_key = :ruleKey"),this.countQuarantinedStmt=a.prepare("SELECT COUNT(*) AS n FROM rule_probe_cache WHERE verdict = 'quarantined'"),this.clearQuarantinedStmt=a.prepare("DELETE FROM rule_probe_cache WHERE verdict = 'quarantined'")}getVerdict(a){return D(this.readStmt,{ruleKey:a})}countQuarantined(){return D(this.countQuarantinedStmt,{})?.n??0}clearQuarantined(){let a=this.countQuarantined();return{refused:!y(this.db,()=>{this.clearQuarantinedStmt.run()}),cleared:a-this.countQuarantined()}}setVerdict(a,b,c){y(this.db,()=>{this.upsertStmt.run({ruleKey:a,verdict:b,worstProbeMs:c,checkedAt:Date.now()})})}}class a${constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO scan_ledger (path, mtime, content_hash, ruleset_hash, scanned_at)
-       VALUES (:path, :mtime, :contentHash, :rulesetHash, :scannedAt)
-       ON CONFLICT (path) DO UPDATE SET
-         mtime = excluded.mtime,
-         content_hash = excluded.content_hash,
-         ruleset_hash = excluded.ruleset_hash,
-         scanned_at = excluded.scanned_at`),this.readStmt=a.prepare(`SELECT path, mtime, content_hash AS contentHash
-       FROM scan_ledger WHERE ruleset_hash = :rulesetHash`)}entriesForRuleset(a){return new Map(C(this.readStmt,{rulesetHash:a}).map(a=>[a.path,{mtime:a.mtime,contentHash:a.contentHash}]))}upsertEntries(a){if(0===a.length)return;let b=Date.now();y(this.db,()=>{for(let c of a)this.upsertStmt.run({path:c.path,mtime:c.mtime,contentHash:c.contentHash,rulesetHash:c.rulesetHash,scannedAt:b})})}}function a_(a,b){return void 0===a?b:Math.min(Math.max(1,Math.trunc(a)),g.u8Q)}let a0=`(v.occurrence_count > 1
-     OR (SELECT count(*) FROM secret_vault_sighting s WHERE s.pointer_id = v.pointer_id) > 1)`,a1=`v.pointer_id, v.category, v.rule_id, v.masked_match, v.provider,
-          v.occurrence_count, v.first_seen, v.last_seen`,a2=`
-  pointer_id AS pointerId,
-  value_fingerprint AS valueFingerprint,
-  fingerprint_key_version AS fingerprintKeyVersion,
-  key_version AS keyVersion,
-  format_version AS formatVersion,
-  category,
-  rule_id AS ruleId,
-  masked_match AS maskedMatch,
-  provider,
-  ciphertext,
-  nonce,
-  auth_tag AS authTag,
-  occurrence_count AS occurrenceCount,
-  first_seen AS firstSeen,
-  last_seen AS lastSeen`;function a3(a){let{provider:b,...c}=a;return null===b?c:{...c,provider:b}}class a4{constructor(a){this.db=a,this.insertStmt=a.prepare(`INSERT INTO secret_vault (
-         pointer_id, value_fingerprint, fingerprint_key_version, key_version,
-         format_version, category, rule_id, masked_match, provider,
-         ciphertext, nonce, auth_tag,
-         occurrence_count, first_seen, last_seen
-       ) VALUES (
-         :pointerId, :valueFingerprint, :fingerprintKeyVersion, :keyVersion,
-         :formatVersion, :category, :ruleId, :maskedMatch, :provider,
-         :ciphertext, :nonce, :authTag,
-         1, :now, :now
-       )`),this.bumpStmt=a.prepare(`UPDATE secret_vault
-       SET occurrence_count = occurrence_count + 1, last_seen = :now
-       WHERE value_fingerprint = :valueFingerprint`),this.byPointerStmt=a.prepare(`SELECT ${a2} FROM secret_vault WHERE pointer_id = :pointerId`),this.byFingerprintStmt=a.prepare(`SELECT ${a2} FROM secret_vault WHERE value_fingerprint = :valueFingerprint`),this.listStmt=a.prepare(`SELECT ${a2} FROM secret_vault ORDER BY first_seen`),this.replaceCiphertextStmt=a.prepare(`UPDATE secret_vault
-       SET key_version = :keyVersion, ciphertext = :ciphertext, nonce = :nonce, auth_tag = :authTag
-       WHERE pointer_id = :pointerId`),this.refreshFingerprintStmt=a.prepare(`UPDATE secret_vault
-       SET value_fingerprint = :valueFingerprint, fingerprint_key_version = :fingerprintKeyVersion
-       WHERE pointer_id = :pointerId`),this.derefStmt=a.prepare(`INSERT INTO secret_vault_deref (id, pointer_id, at, target, reason, outcome, grant_id, pointer_count)
-       VALUES (:id, :pointerId, :at, :target, :reason, :outcome, :grantId, :pointerCount)`)}upsert(a,b){let c=!1;x(this.db,()=>{if(void 0===D(this.byFingerprintStmt,{valueFingerprint:a.valueFingerprint})){this.insertStmt.run(F({pointerId:a.pointerId,valueFingerprint:a.valueFingerprint,fingerprintKeyVersion:a.fingerprintKeyVersion,keyVersion:a.keyVersion,formatVersion:a.formatVersion??g.viY,category:a.category,ruleId:a.ruleId,maskedMatch:a.maskedMatch,provider:a.provider,ciphertext:a.ciphertext,nonce:a.nonce,authTag:a.authTag,now:b})),c=!0;return}this.bumpStmt.run({valueFingerprint:a.valueFingerprint,now:b})},"IMMEDIATE");let d=D(this.byFingerprintStmt,{valueFingerprint:a.valueFingerprint});if(void 0===d)throw Error("vault: row vanished immediately after write");return{row:a3(d),minted:c}}byPointerId(a){let b=D(this.byPointerStmt,{pointerId:a});return void 0===b?null:a3(b)}byValueFingerprint(a){let b=D(this.byFingerprintStmt,{valueFingerprint:a});return void 0===b?null:a3(b)}recordDeref(a){this.derefStmt.run(F({id:a.id,pointerId:a.pointerId,at:a.at,target:a.target,reason:a.reason,outcome:a.outcome,grantId:a.grantId,pointerCount:a.pointerCount??1}))}listAll(){return C(this.listStmt).map(a3)}replaceCiphertext(a,b){this.replaceCiphertextStmt.run({pointerId:a,...b})}refreshFingerprint(a,b){this.refreshFingerprintStmt.run({pointerId:a,...b})}purgeAll(){let a=0;return x(this.db,()=>{a=this.countEntries(),this.db.exec("DELETE FROM secret_vault")},"IMMEDIATE"),a}recordSighting(a,b){this.db.prepare(`INSERT INTO secret_vault_sighting (id, pointer_id, location, kind, first_seen, last_seen)
-         VALUES (:id, :pointerId, :location, :kind, :now, :now)
-         ON CONFLICT (pointer_id, location) DO UPDATE SET last_seen = :now`).run({id:(0,d.randomUUID)(),pointerId:a.pointerId,location:a.location,kind:a.kind,now:b})}sightingsFor(a){let b=new Map(a.map(a=>[a,[]]));if(0===a.length)return b;for(let c of C(this.db.prepare(`SELECT pointer_id, location, kind, first_seen, last_seen
-           FROM secret_vault_sighting
-          WHERE pointer_id IN (${t(a.length)})
-          ORDER BY last_seen DESC`),a))b.get(c.pointer_id)?.push({location:c.location,kind:c.kind,firstSeen:new Date(c.first_seen).toISOString(),lastSeen:new Date(c.last_seen).toISOString()});return b}toInventoryEntries(a){let b=this.sightingsFor(a.map(a=>a.pointer_id));return a.map(a=>({pointerId:a.pointer_id,category:a.category,...null===a.provider?{}:{provider:a.provider},maskedMatch:a.masked_match,occurrences:a.occurrence_count,firstSeen:new Date(a.first_seen).toISOString(),lastSeen:new Date(a.last_seen).toISOString(),revealGrantId:a.grant_id,sightings:b.get(a.pointer_id)??[]}))}listInventory(a={},b=Date.now()){let c=a_(a.limit,g.mBk),d=void 0===a.cursor?null:R(a.cursor),e=null===d?"":"WHERE (v.last_seen < :cursorLastSeen OR (v.last_seen = :cursorLastSeen AND v.pointer_id < :cursorPointerId))",f=C(this.db.prepare(`SELECT ${a1},
-                (SELECT e.id FROM exceptions e
-                  WHERE e.rule_id = v.rule_id
-                    AND e.value_fingerprint = v.value_fingerprint
-                    AND e.key_version = v.fingerprint_key_version
-                    AND ${ao}
-                  LIMIT 1) AS grant_id
-           FROM secret_vault v
-           ${e}
-          ORDER BY v.last_seen DESC, v.pointer_id DESC
-          LIMIT :limit`),F({now:b,limit:c+1,...null===d?{}:{cursorLastSeen:d.startedAtMs,cursorPointerId:d.id}})),h=f.length>c,i=h?f.slice(0,c):f,j=i[i.length-1];return{totals:{values:this.countEntries()},items:this.toInventoryEntries(i),nextCursor:h&&j?Q({startedAtMs:j.last_seen,id:j.pointer_id}):null}}listReuse(a={},b=Date.now()){var c;let d=a_(a.limit,g.mBk),e=void 0===a.cursor?null:function(a){let b=P(Buffer.from(a,"base64url").toString("utf8"));return void 0!==b&&Number.isInteger(b.occurrences)&&"string"==typeof b.pointerId?{occurrences:b.occurrences,pointerId:b.pointerId}:null}(a.cursor),f=null===e?"":`AND (v.occurrence_count < :cursorOccurrences
-              OR (v.occurrence_count = :cursorOccurrences AND v.pointer_id < :cursorPointerId))`,h=C(this.db.prepare(`SELECT ${a1},
-                (SELECT e.id FROM exceptions e
-                  WHERE e.rule_id = v.rule_id
-                    AND e.value_fingerprint = v.value_fingerprint
-                    AND e.key_version = v.fingerprint_key_version
-                    AND ${ao}
-                  LIMIT 1) AS grant_id
-           FROM secret_vault v
-          WHERE ${a0} ${f}
-          ORDER BY v.occurrence_count DESC, v.pointer_id DESC
-          LIMIT :limit`),F({now:b,limit:d+1,...null===e?{}:{cursorOccurrences:e.occurrences,cursorPointerId:e.pointerId}})),i=h.length>d,j=i?h.slice(0,d):h,k=j[j.length-1];return{totals:{reused:this.countReused()},items:this.toInventoryEntries(j),nextCursor:i&&k?(c={occurrences:k.occurrence_count,pointerId:k.pointer_id},Buffer.from(JSON.stringify(c)).toString("base64url")):null}}listDerefs(a={}){let b=a_(a.limit,g.hdu),c=void 0===a.cursor?null:R(a.cursor),d=[];!0!==a.includeBatched&&d.push("reason NOT IN ('display', 'view-render')"),null!==c&&d.push("(at < :cursorAt OR (at = :cursorAt AND id < :cursorId))");let e=0===d.length?"":`WHERE ${d.join(" AND ")}`,f=C(this.db.prepare(`SELECT id, pointer_id, at, target, reason, outcome, grant_id, pointer_count
-           FROM secret_vault_deref ${e}
-          ORDER BY at DESC, id DESC LIMIT :limit`),F({limit:b+1,...null===c?{}:{cursorAt:c.startedAtMs,cursorId:c.id}})),h=f.length>b,i=h?f.slice(0,b):f,j=i[i.length-1],k=!0===a.includeBatched?0:G(this.db,"SELECT count(*) AS n FROM secret_vault_deref WHERE reason IN ('display', 'view-render')");return{items:i.map(a=>({id:a.id,pointerId:a.pointer_id,at:new Date(a.at).toISOString(),target:a.target,reason:a.reason,outcome:a.outcome,...null===a.grant_id?{}:{grantId:a.grant_id},pointerCount:a.pointer_count})),nextCursor:h&&j?Q({startedAtMs:j.at,id:j.id}):null,hiddenBatched:k}}countEntries(){return G(this.db,"SELECT COUNT(*) AS n FROM secret_vault")}countReused(){return G(this.db,`SELECT COUNT(*) AS n FROM secret_vault v WHERE ${a0}`)}}let a5=["critical","high","medium","low"],a6={block:"blocked",redact:"redacted",warn:"warned"},a7=["blocked","redacted","warned"],a8=[{provider:"claudecode",coverage:100,supported:!0},{provider:"cursor",coverage:0,supported:!1},{provider:"codex",coverage:80,supported:!0},{provider:"antigravity",coverage:60,supported:!0},{provider:"claudeai",coverage:0,supported:!1},{provider:"chatgpt",coverage:0,supported:!1},{provider:"copilot",coverage:0,supported:!1},{provider:"api",coverage:0,supported:!1}],a9={"7d":"day","30d":"day","3m":"week","6m":"week"};function ba(a){return 864e5*Math.floor(a/864e5)}function bb(a){return new Date(a).toISOString().slice(0,10)}class bc{constructor(a,b=()=>Date.now()){this.db=a,this.now=b}severitySummary(){let a=new Map(C(this.db.prepare(`SELECT d.severity AS severity,
-                COUNT(*) AS count,
-                SUM(CASE
-                      WHEN e.event_type != 'code_change' THEN 1
-                      WHEN f.finding_key IS NULL THEN 0
-                      WHEN latest.status = 'resolved' THEN 1
-                      ELSE 0
-                    END) AS caught,
-                SUM(CASE
-                      WHEN e.event_type = 'code_change'
-                       AND f.finding_key IS NOT NULL
-                       AND (latest.status IS NULL OR latest.status != 'resolved') THEN 1
-                      ELSE 0
-                    END) AS open_at_rest
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         LEFT JOIN ${as} latest
-           ON latest.finding_key = f.finding_key
-         WHERE e.event_type IN (${g.hfB})
-         GROUP BY d.severity`)).map(a=>[a.severity,a])),b=a5.map(b=>({severity:b,count:a.get(b)?.count??0,caught:a.get(b)?.caught??0,openAtRest:a.get(b)?.open_at_rest??0}));return Promise.resolve({total:b.reduce((a,b)=>a+b.count,0),needsRemediation:b.reduce((a,b)=>a+b.openAtRest,0),bySeverity:b})}scanCoverage(a){return Promise.resolve({range:a,providers:a8.map(a=>({...a}))})}enforcementActions(a){let b=864e5*g.eI7[a],c=this.now(),d=c-b,e=this.findingsInRange(c-2*b,c),f={blocked:0,redacted:0,warned:0},h={blocked:0,redacted:0,warned:0};for(let a of e){let b=a6[a.actionTaken];b&&(a.occurredAt>=d?f[b]++:h[b]++)}let i=a7.map(a=>({kind:a,count:f[a],delta:f[a]-h[a]}));return Promise.resolve({range:a,total:i.reduce((a,b)=>a+b.count,0),actions:i})}findingsTimeseries(a){let b=a9[a],c=("day"===b?1:7)*864e5,d=g.eI7[a],e="day"===b?d:Math.ceil(d/7),f=this.now(),h=ba(f)-(d-1)*864e5,i=this.findingsInRange(h,f),j=Array.from({length:e},(a,b)=>({timestamp:bb(h+b*c),critical:0,high:0,medium:0}));for(let a of i){let b=j[Math.floor((a.occurredAt-h)/c)];if(b){var k;("critical"===(k=a.severity)||"high"===k||"medium"===k)&&b[a.severity]++}}return Promise.resolve({range:a,granularity:b,points:j})}mttrTrend(a){let b=a9[a],c=("day"===b?1:7)*864e5,d=g.eI7[a],e="day"===b?d:Math.ceil(d/7),f=this.now(),h=ba(f)-(d-1)*864e5,i=C(this.db.prepare(`SELECT COALESCE(f.first_detected_at, e.started_at) AS first_detected_at, d.severity AS severity,
-                latest.status AS latest_status,
-                latest.method AS latest_method,
-                latest.resolved_at AS latest_resolved_at
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         LEFT JOIN ${as} latest
-           ON latest.finding_key = f.finding_key
-         WHERE f.finding_key IS NOT NULL
-           AND e.event_type IN (${g.hfB})
-           AND EXISTS (
-             SELECT 1 FROM finding_resolution fr
-              WHERE fr.finding_key = f.finding_key
-                AND fr.resolved_at >= :windowStart
-           )`),{windowStart:h}),j=new Map,k=new Map;for(let a of i){if("resolved"!==a.latest_status||"fixed-at-source"!==a.latest_method||null==a.latest_resolved_at||a.latest_resolved_at<h||a.latest_resolved_at>=f)continue;let b=Math.floor((a.latest_resolved_at-h)/c);if(b<0||b>=e)continue;let d=`${String(b)}:${a.severity}`,g=Math.max(0,a.latest_resolved_at-a.first_detected_at);j.set(d,(j.get(d)??0)+g),k.set(d,(k.get(d)??0)+1)}return Promise.resolve({range:a,granularity:b,points:Array.from({length:e},(a,b)=>{let d={};for(let a of a5){let c=`${String(b)}:${a}`,e=k.get(c)??0;d[a]=e>0?(j.get(c)??0)/e:null}return{timestamp:bb(h+b*c),bySeverity:d}})})}topSources(a,b={}){let c=b.limit??5;if("user"===b.kind)return Promise.resolve({range:a,items:[]});let d=this.now(),e=d-864e5*g.eI7[a];return Promise.resolve({range:a,items:C(this.db.prepare(`SELECT json_extract(e.attributes, '$.repo') AS repo, count(*) AS c
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         WHERE e.started_at >= :from AND e.started_at < :to
-           AND e.event_type IN (${g.hfB})
-           AND json_extract(e.attributes, '$.repo') IS NOT NULL
-           AND json_extract(e.attributes, '$.repo') != ''
-         GROUP BY repo
-         ORDER BY c DESC, repo
-         LIMIT :limit`),{from:e,to:d,limit:c}).map(a=>({id:`repo_${a.repo}`,name:a.repo,kind:"repo",findingsCount:a.c}))})}recentlyResolved(a=20){return Promise.resolve({items:C(this.db.prepare(`SELECT f.finding_key AS finding_key,
-                d.rule_id AS rule_id,
-                d.severity AS severity,
-                json_extract(e.attributes, '$.file_path') AS path,
-                COALESCE(f.first_detected_at, e.started_at) AS first_detected_at,
-                latest.resolved_at AS latest_resolved_at
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         LEFT JOIN ${as} latest
-           ON latest.finding_key = f.finding_key
-         WHERE e.event_type = 'code_change'
-           AND f.finding_key IS NOT NULL
-           AND latest.status = 'resolved'
-           AND latest.method = 'fixed-at-source'
-           AND latest.resolved_at IS NOT NULL
-         ORDER BY latest_resolved_at DESC
-         LIMIT :limit`),{limit:a}).map(a=>({findingKey:a.finding_key,ruleId:a.rule_id,severity:a.severity,path:a.path??"",resolvedAt:new Date(a.latest_resolved_at).toISOString(),detectedAt:new Date(a.first_detected_at).toISOString()}))})}findingsInRange(a,b){return C(this.db.prepare(`SELECT e.started_at AS occurred_at, d.severity AS severity, f.action_taken AS action_taken
-         FROM inspection_findings f
-         JOIN audit_events e ON e.id = f.audit_event_id
-         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
-         WHERE e.started_at >= :from AND e.started_at < :to
-           AND e.event_type IN (${g.hfB})
-         ORDER BY e.started_at`),{from:a,to:b}).map(a=>({occurredAt:a.occurred_at,severity:a.severity,actionTaken:a.action_taken}))}}let bd=["provider","internal","external","ip"],be="('http', 'ws')",bf=`LEFT JOIN egress_decision_override oh ON oh.host = d.host
-             LEFT JOIN egress_decision_override ol ON ol.destination_id = d.id AND ol.host IS NULL`;function bg(a){return{id:a.id,method:a.method,transport:a.transport,url:a.url,template:a.template,dataClass:a.dataClass,lastSeen:new Date(a.lastSeenMs).toISOString(),callSiteCount:a.callSiteCount}}function bh(a,b){let c=b.map(a=>a.transport),d=b.map(a=>a.dataClass),e=b.reduce((a,b)=>a+b.callSiteCount,0),f=b.length>0?Math.max(...b.map(a=>a.lastSeenMs)):a.lastSeenMs;return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,status:(0,g.Gw9)(a.trust,a.overrideDecision),isCustom:(0,g.y_0)(a.trust,a.overrideDecision),lastSeen:new Date(f).toISOString(),endpointCount:b.length,callSiteCount:e,transports:(0,g.by7)(c),dataClasses:(0,g.hzO)(d),review:(0,g.Fnc)(a.trust,c),network:"provider"===a.kind?null:O(a.networkJson,null),endpoints:b.map(bg)}}class bi{constructor(a){this.db=a}stats(){let a=G(this.db,"SELECT count(*) AS n FROM share_destination"),b=G(this.db,"SELECT count(*) AS n FROM share_endpoint"),c=G(this.db,"SELECT count(*) AS n FROM share_call_site"),d=G(this.db,`SELECT count(DISTINCT destination_id) AS n FROM share_endpoint
-       WHERE transport IN ${be}`),e=G(this.db,`SELECT count(DISTINCT d.id) AS n
-       FROM share_destination d
-       LEFT JOIN share_endpoint e ON e.destination_id = d.id
-         AND e.transport IN ${be}
-       WHERE d.trust IN ('unverified', 'ip') OR e.id IS NOT NULL`),f=H(this.db,"SELECT kind AS k, count(*) AS n FROM share_destination GROUP BY kind"),g={provider:f.get("provider")??0,internal:f.get("internal")??0,external:f.get("external")??0,ip:f.get("ip")??0},h=H(this.db,"SELECT trust AS k, count(*) AS n FROM share_destination GROUP BY trust");return Promise.resolve({destinations:a,endpoints:b,callSites:c,needsReview:e,insecure:d,byKind:g,byTrust:{recognized:h.get("recognized")??0,internal:h.get("internal")??0,unverified:h.get("unverified")??0,ip:h.get("ip")??0}})}listDestinations(a){let b=void 0===a.q||""===a.q?void 0:a.q,c=this.fetchDestinations(b,a.kind),d=this.groupEndpoints(c.map(a=>a.id)),e=c.map(a=>bh(a,d.get(a.id)??[])),f=new Map;for(let a of e){let b=f.get(a.kind);b?b.push(a):f.set(a.kind,[a])}return Promise.resolve({groups:bd.filter(a=>f.has(a)).map(a=>{let b=f.get(a)??[];return{kind:a,total:b.length,items:b}})})}needsReview(){let a=this.fetchDestinations(void 0,void 0,!0),b=this.groupEndpoints(a.map(a=>a.id));return Promise.resolve({items:a.map(a=>({dest:a,endpoints:b.get(a.id)??[]})).map(({dest:a,endpoints:b})=>({summary:bh(a,b),endpoints:b})).filter(({summary:a})=>a.review.needsReview).map(({summary:a,endpoints:b})=>({id:a.id,kind:a.kind,name:a.name,host:a.host,trust:a.trust,status:a.status,review:a.review,topDataClass:(0,g.C05)(b.map(a=>a.dataClass)),callSiteCount:a.callSiteCount,lastSeen:a.lastSeen})).sort((a,b)=>{let c=(0,g.WSs)(a.review.reasons)-(0,g.WSs)(b.review.reasons);return 0!==c?c:b.lastSeen.localeCompare(a.lastSeen)})})}getDestination(a){let b=this.fetchDestinationById(a);if(!b)return Promise.resolve(null);let c=this.fetchEndpoints([b.id]),d=this.fetchCallSites(c.map(a=>a.id));return Promise.resolve(function(a,b,c){let d=b.map(a=>a.transport),e=b.length>0?Math.max(...b.map(a=>a.lastSeenMs)):a.lastSeenMs,f=new Map;for(let a of c.slice(0,200)){let b={id:a.id,project:a.project,file:a.file,line:a.line,snippet:a.snippet,dynamic:a.dynamic,vendored:a.vendored,projectId:a.projectId},c=f.get(a.endpointId);c?c.push(b):f.set(a.endpointId,[b])}return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,status:(0,g.Gw9)(a.trust,a.overrideDecision),isCustom:(0,g.y_0)(a.trust,a.overrideDecision),lastSeen:new Date(e).toISOString(),transports:(0,g.by7)(d),dataClasses:(0,g.hzO)(b.map(a=>a.dataClass)),review:(0,g.Fnc)(a.trust,d),network:"provider"===a.kind?null:O(a.networkJson,null),note:a.note,endpoints:b.map(a=>({...bg(a),sites:f.get(a.id)??[]}))}}(b,c,d))}setEgressDecision(a,b){let c=!1;return x(this.db,()=>{let e=this.db.prepare("SELECT host FROM share_destination WHERE id = ?").get(a);void 0!==e&&(c=!0,this.db.prepare(`DELETE FROM egress_decision_override
-             WHERE host = :host OR (destination_id = :destinationId AND host IS NULL)`).run({host:e.host,destinationId:a}),null!==b&&this.db.prepare(`INSERT INTO egress_decision_override
-               (id, destination_id, host, decision, created_at, updated_at)
-             VALUES (:id, :destinationId, :host, :decision, :now, :now)`).run({id:(0,d.randomUUID)(),destinationId:a,host:e.host,decision:b,now:Date.now()}))},"IMMEDIATE"),c}recordProjectEgress(a){let{hits:b,droppedFiles:c,truncated:d}=function(a,b){if(a.length<=5e3)return{hits:[...a],droppedFiles:[],truncated:!1};if("walk"===b)return{hits:a.slice(0,5e3),droppedFiles:[],truncated:!0};let c=new Map;for(let b of a){let a=c.get(b.site.file);void 0===a?c.set(b.site.file,[b]):a.push(b)}let d=[],e=[];for(let[a,b]of c)d.length+b.length>5e3?e.push(a):d.push(...b);return{hits:d,droppedFiles:e,truncated:!0}}(a.hits,a.reconcile.mode),e=function(a,b){if("walk"===a.mode||0===b.length)return a;let c=new Set(b);return{mode:"ledger",scannedFiles:a.scannedFiles.filter(a=>!c.has(a)),deletedFiles:a.deletedFiles.filter(a=>!c.has(a))}}(a.reconcile,c),f=Date.now(),g={destinations:0,endpoints:0,callSites:0,truncated:d,droppedFiles:c};return x(this.db,()=>{let h=a.projectId??this.knownProjectId(a.projectKey);this.reconcileCallSites(a.projectKey,e),this.upsertHits(a,b,h,f),this.confirmLastSeen(a.projectKey,f),this.pruneOrphans(),g={...this.projectTotals(a.projectKey),truncated:d,droppedFiles:c}},"IMMEDIATE"),g}reconcileCallSites(a,b){if("walk"===b.mode){let c=b.walkedPrefix.replace(/\/+$/,"");this.db.prepare(`DELETE FROM share_call_site
-           WHERE project_key = :key
-             AND (:prefix = '' OR file = :prefix OR file LIKE :subtree ESCAPE '\\')
-             AND file NOT LIKE '.%'
-             AND file NOT LIKE '%/.%'`).run({key:a,prefix:c,subtree:`${s(c)}/%`});return}let c=[...new Set([...b.scannedFiles,...b.deletedFiles])];for(let b=0;b<c.length;b+=500){let d=c.slice(b,b+500);this.db.prepare(`DELETE FROM share_call_site
-           WHERE project_key = ? AND file IN (${t(d.length)})`).run(a,...d)}}upsertHits(a,b,c,e){if(0===b.length)return;let f=this.db.prepare(`INSERT INTO share_destination
-         (id, kind, name, host, category, trust, network_json, last_seen, provenance,
-          created_at, updated_at)
-       VALUES (:id, :kind, :name, :host, :category, :trust, :networkJson, :now, 'scan', :now, :now)
-       ON CONFLICT (host) DO UPDATE SET
-         kind = excluded.kind,
-         name = excluded.name,
-         category = excluded.category,
-         trust = excluded.trust,
-         network_json = excluded.network_json,
-         last_seen = excluded.last_seen,
-         updated_at = excluded.updated_at`),g=this.db.prepare("SELECT id FROM share_destination WHERE host = ?"),h=this.db.prepare(`INSERT INTO share_endpoint
-         (id, destination_id, method, transport, url, template, data_class, last_seen,
-          created_at, updated_at)
-       VALUES (:id, :destinationId, :method, :transport, :url, :template, :dataClass, :now,
-               :now, :now)
-       ON CONFLICT (destination_id, method, url) DO UPDATE SET
-         transport = excluded.transport,
-         template = excluded.template,
-         data_class = excluded.data_class,
-         last_seen = excluded.last_seen,
-         updated_at = excluded.updated_at`),i=this.db.prepare("SELECT id FROM share_endpoint WHERE destination_id = ? AND method = ? AND url = ?"),j=this.db.prepare(`INSERT INTO share_call_site
-         (id, endpoint_id, project, project_key, file, line, snippet, dynamic, vendored,
-          project_id, created_at, updated_at)
-       VALUES (:id, :endpointId, :project, :projectKey, :file, :line, :snippet, :dynamic,
-               :vendored, :projectId, :now, :now)
-       ON CONFLICT (endpoint_id, project_key, file, line) DO UPDATE SET
-         snippet = excluded.snippet,
-         dynamic = excluded.dynamic,
-         vendored = excluded.vendored,
-         project = excluded.project,
-         project_id = COALESCE(excluded.project_id, share_call_site.project_id),
-         updated_at = excluded.updated_at`),k=new Map,l=new Map;for(let m of b){let b=k.get(m.host);void 0===b&&(f.run({id:(0,d.randomUUID)(),kind:m.kind,name:m.name,host:m.host,category:m.category,trust:m.trust,networkJson:null===m.network?null:JSON.stringify(m.network),now:e}),b=D(g,[m.host])?.id??"",k.set(m.host,b));let n=`${b}\0${m.method}\0${m.url}`,o=l.get(n);void 0===o&&(h.run({id:(0,d.randomUUID)(),destinationId:b,method:m.method,transport:m.transport,url:m.url,template:+!!m.template,dataClass:m.dataClass,now:e}),o=D(i,[b,m.method,m.url])?.id??"",l.set(n,o)),j.run({id:(0,d.randomUUID)(),endpointId:o,project:a.project,projectKey:a.projectKey,file:m.site.file,line:m.site.line,snippet:m.site.snippet,dynamic:+!!m.site.dynamic,vendored:+!!m.site.vendored,projectId:c,now:e})}}knownProjectId(a){return D(this.db.prepare(`SELECT project_id AS projectId FROM share_call_site
-           WHERE project_key = ? AND project_id IS NOT NULL LIMIT 1`),[a])?.projectId??null}confirmLastSeen(a,b){this.db.prepare(`UPDATE share_endpoint SET last_seen = :now, updated_at = :now
-         WHERE id IN (SELECT DISTINCT endpoint_id FROM share_call_site WHERE project_key = :key)`).run({now:b,key:a}),this.db.prepare(`UPDATE share_destination SET last_seen = :now, updated_at = :now
-         WHERE id IN (SELECT DISTINCT e.destination_id
-                      FROM share_endpoint e
-                      JOIN share_call_site c ON c.endpoint_id = e.id
-                      WHERE c.project_key = :key)`).run({now:b,key:a})}pruneOrphans(){this.db.exec(`DELETE FROM share_endpoint
-       WHERE NOT EXISTS (SELECT 1 FROM share_call_site c WHERE c.endpoint_id = share_endpoint.id)`),this.db.exec(`DELETE FROM egress_decision_override
-       WHERE host IS NULL
-         AND destination_id IN (
-           SELECT d.id FROM share_destination d
-           WHERE NOT EXISTS (SELECT 1 FROM share_endpoint e WHERE e.destination_id = d.id))`),this.db.exec(`DELETE FROM share_destination
-       WHERE NOT EXISTS (
-         SELECT 1 FROM share_endpoint e WHERE e.destination_id = share_destination.id)`)}projectTotals(a){return{destinations:G(this.db,`SELECT count(DISTINCT e.destination_id) AS n
-         FROM share_endpoint e
-         JOIN share_call_site c ON c.endpoint_id = e.id
-         WHERE c.project_key = ?`,[a]),endpoints:G(this.db,"SELECT count(DISTINCT endpoint_id) AS n FROM share_call_site WHERE project_key = ?",[a]),callSites:G(this.db,"SELECT count(*) AS n FROM share_call_site WHERE project_key = ?",[a])}}mapDestRow(a){return{id:a.id,kind:a.kind,name:a.name,host:a.host,category:a.category,trust:a.trust,note:a.note,networkJson:a.networkJson,lastSeenMs:a.lastSeenMs,overrideDecision:a.overrideDecision??null}}fetchDestinations(a,b,c=!1){let d,e=`d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
-                  d.network_json AS networkJson, d.last_seen AS lastSeenMs,
-                  d.created_at AS createdAt,
-                  COALESCE(oh.decision, ol.decision) AS overrideDecision`,f=[],g=[];if(b&&b.length>0&&(f.push(`d.kind IN (${t(b.length)})`),g.push(...b)),c&&f.push(`(d.trust IN ('unverified', 'ip')
-          OR EXISTS (SELECT 1 FROM share_endpoint re
-                     WHERE re.destination_id = d.id
-                       AND re.transport IN ${be}))`),a){let b=u(a);f.push(`(d.name LIKE ? ESCAPE '\\' OR d.category LIKE ? ESCAPE '\\' OR e.url LIKE ? ESCAPE '\\'
-          OR c.project LIKE ? ESCAPE '\\' OR c.file LIKE ? ESCAPE '\\')`),g.push(b,b,b,b,b),d=`SELECT DISTINCT ${e}
-             FROM share_destination d
-             ${bf}
-             LEFT JOIN share_endpoint e ON e.destination_id = d.id
-             LEFT JOIN share_call_site c ON c.endpoint_id = e.id
-             ${f.length?`WHERE ${f.join(" AND ")}`:""}
-             ORDER BY d.created_at ASC, d.id ASC`}else d=`SELECT ${e}
-             FROM share_destination d
-             ${bf}
-             ${f.length?`WHERE ${f.join(" AND ")}`:""}
-             ORDER BY d.created_at ASC, d.id ASC`;return C(this.db.prepare(d),g).map(a=>this.mapDestRow(a))}fetchDestinationById(a){let b=D(this.db.prepare(`SELECT d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
-                d.network_json AS networkJson, d.last_seen AS lastSeenMs,
-                COALESCE(oh.decision, ol.decision) AS overrideDecision
-         FROM share_destination d
-         ${bf}
-         WHERE d.id = ?`),[a]);return b?this.mapDestRow(b):null}fetchEndpoints(a){return 0===a.length?[]:C(this.db.prepare(`SELECT e.id, e.destination_id AS destinationId, e.method, e.transport, e.url,
-                e.template, e.data_class AS dataClass, e.last_seen AS lastSeenMs,
-                count(c.id) AS callSiteCount
-         FROM share_endpoint e
-         LEFT JOIN share_call_site c ON c.endpoint_id = e.id
-         WHERE e.destination_id IN (${t(a.length)})
-         GROUP BY e.id
-         ORDER BY e.created_at ASC, e.id ASC`),a).map(a=>({id:a.id,destinationId:a.destinationId,method:a.method,transport:a.transport,url:a.url,template:1===a.template,dataClass:a.dataClass,lastSeenMs:a.lastSeenMs,callSiteCount:a.callSiteCount}))}groupEndpoints(a){let b=new Map;for(let c of this.fetchEndpoints(a)){let a=b.get(c.destinationId);a?a.push(c):b.set(c.destinationId,[c])}return b}fetchCallSites(a){return 0===a.length?[]:C(this.db.prepare(`SELECT id, endpoint_id AS endpointId, project, file, line, snippet, dynamic, vendored,
-                project_id AS projectId
-         FROM share_call_site
-         WHERE endpoint_id IN (${t(a.length)})
-         ORDER BY created_at ASC, id ASC`),a).map(a=>({id:a.id,endpointId:a.endpointId,project:a.project,file:a.file,line:a.line,snippet:a.snippet,dynamic:1===a.dynamic,vendored:1===a.vendored,projectId:a.projectId}))}}class bj{constructor(a){this.db=a,this.upsertStmt=a.prepare(`INSERT INTO source_project
-         (id, url, name, attributes, first_seen, last_seen)
-       VALUES
-         (:id, :url, :name, :attributes, :firstSeen, :lastSeen)
-       ON CONFLICT(id) DO UPDATE SET
-         url = excluded.url,
-         name = excluded.name,
-         attributes = excluded.attributes,
-         last_seen = excluded.last_seen`)}upsert(a,b=Date.now()){let c=i(a.url),d=(0,g.QCA)(a,c,b);return this.upsertStmt.run(F({id:d.id,url:d.url,name:d.name,attributes:d.attributes,firstSeen:d.firstSeen,lastSeen:d.lastSeen})),c}findById(a){return D(this.db.prepare("SELECT * FROM source_project WHERE id = :id"),{id:a})}distinctNames(){return C(this.db.prepare(`SELECT DISTINCT name FROM source_project
-         WHERE name IS NOT NULL
-         ORDER BY name`)).map(a=>a.name)}}let bk=Symbol("aka.persistence.unsafeTestOnlyRawHandle");function bl(a,b){return b?{...a,hostId:b}:a}function bm(a){try{a.close()}catch{}}function bn(a){let b=new f.DatabaseSync(a);try{b.exec("PRAGMA journal_mode = WAL"),b.exec("PRAGMA busy_timeout = 2000"),b.exec("PRAGMA foreign_keys = ON")}catch(a){throw bm(b),a}return b}function bo(a){(0,k.mkdirSync)(a,{recursive:!0,mode:448}),m(a,448);let{db:b,events:c,findings:f,policies:t,installedPacks:u,scanLedger:v,secretVault:w,exceptions:C,resolutions:D,ruleProbeCache:E,security:G,detections:H,shares:I,policyCatalog:O,inventory:P,inventoryAssets:Q,projectFiles:R,activity:S,sourceProject:T,auditEvents:U,classifiedData:V,inspectionDefinitions:W,inspectionFindings:X,configInventory:Y}=function(a){let b=bn(a);try{var c;if(c=b,A(c,"table","tenants")||B(c,"events").includes("tenant_id")){let c=function(a,b){let c;q(b);let d=p(b,"legacy"),e=!1;try{r(a,d),e=!0}catch(a){c=a}finally{a.close()}if(!e){z(`Could not snapshot the incompatible ${l} (${String(c)}); moving the store aside with its sidecars instead.`);let a=[];(0,k.renameSync)(b,d),a.push([d,b]);try{for(let c of n(b)){let e=`${d}${c.slice(b.length)}`;try{(0,k.renameSync)(c,e),a.push([e,c])}catch{(0,k.rmSync)(c,{force:!0})}}}catch(b){for(let[b,c]of a.reverse())try{(0,k.renameSync)(b,c)}catch{}throw b}return o(d),d}try{for(let a of((0,k.rmSync)(b,{force:!0}),n(b)))(0,k.rmSync)(a,{force:!0})}catch(a){if((0,k.existsSync)(b))try{(0,k.rmSync)(d,{force:!0})}catch{}throw a}return d}(b,a);b=bn(a),z(`Detected an older, incompatible (tenant-bearing) ${l}; backed it up to ${c} and created a fresh store.`)}!function(a,b){var c,d,e;let f=a.prepare("PRAGMA user_version").get().user_version;a.exec("CREATE TABLE IF NOT EXISTS migration_ledger (tag TEXT PRIMARY KEY, applied_at INTEGER NOT NULL)");let h=new Set(a.prepare("SELECT tag FROM migration_ledger").all().map(a=>a.tag)),k=0===h.size&&f>0,l=a.prepare("INSERT OR IGNORE INTO migration_ledger (tag, applied_at) VALUES (?, ?)");for(let[b,c]of g.lFU.entries()){if(h.has(c.tag)||c.tag===L)continue;let d=function(a){let b=[];for(let c of a.matchAll(/CREATE TABLE (?:IF NOT EXISTS )?`([^`]+)`/g))void 0===c[1]||c[1].startsWith("__new_")||b.push({kind:"table",name:c[1]});for(let c of a.matchAll(/ALTER TABLE `([^`]+)` ADD (?:COLUMN )?`([^`]+)`/g))void 0!==c[1]&&void 0!==c[2]&&b.push({kind:"column",table:c[1],name:c[2]});return b}(c.sql),e=d.filter(b=>"column"===b.kind?B(a,b.table,{includeGenerated:!0}).includes(b.name):A(a,"table",b.name));if(e.length>0&&e.length<d.length){let a=d.filter(a=>!e.includes(a)),b=`sqlite migration ${c.tag} has no ledger row, but the store already has ${e.map(J).join(", ")} while missing ${a.map(J).join(", ")} — the schema diverged from the migration history; refusing to replay or skip.`;throw z(b),Error(`[aka] ${b}`)}let g=d.length>0?e.length===d.length:k&&b<f,i=/PRAGMA foreign_keys\s*=\s*OFF/i.test(c.sql),j=K(c.sql);i&&a.exec("PRAGMA foreign_keys = OFF");try{x(a,()=>{for(let b of j){let c=function(a){let b=a.replace(/^(?:\s*--[^\n]*\n?)+/,"").trimStart();return/^CREATE (?:UNIQUE )?INDEX (?:IF NOT EXISTS )?`([^`]+)`/.exec(b)?.[1]}(b);if(void 0===c){if(g)continue}else if(A(a,"index",c))continue;a.exec(b)}if(i&&!g){let b=a.prepare("PRAGMA foreign_key_check").all();if(b.length>0)throw Error(`[aka] sqlite migration ${c.tag} left ${String(b.length)} foreign-key violation(s); rolling back.`)}l.run(c.tag,Date.now())},"IMMEDIATE")}finally{i&&a.exec("PRAGMA foreign_keys = ON")}}f<g.lFU.length&&a.exec(`PRAGMA user_version = ${String(g.lFU.length)}`),c=a,d="audit_events",A(c,"table",d)&&(B(c,d).includes("synced_at")||c.exec(`ALTER TABLE ${d} ADD COLUMN synced_at integer`)),a.exec(`CREATE TABLE IF NOT EXISTS scan_ledger (
-    path TEXT PRIMARY KEY,
-    mtime TEXT NOT NULL,
-    content_hash TEXT NOT NULL,
-    ruleset_hash TEXT NOT NULL,
-    scanned_at INTEGER NOT NULL
-  )`),a.exec(`CREATE TABLE IF NOT EXISTS blocked_detections (
-    reference TEXT PRIMARY KEY,
-    rule_id TEXT NOT NULL,
-    category TEXT NOT NULL,
-    value_fingerprint TEXT NOT NULL,
-    key_version INTEGER NOT NULL,
-    masked_value TEXT NOT NULL,
-    session_id TEXT,
-    repo TEXT,
-    blocked_at INTEGER NOT NULL
-  )`),a.exec(`CREATE TABLE IF NOT EXISTS rule_probe_cache (
-    rule_key TEXT PRIMARY KEY,
-    verdict TEXT NOT NULL,
-    worst_probe_ms REAL NOT NULL,
-    checked_at INTEGER NOT NULL
-  )`),(e=a).exec(`CREATE TABLE IF NOT EXISTS \`_pack_write_gate\` (
-	\`id\` integer PRIMARY KEY NOT NULL,
-	\`open\` integer DEFAULT 0 NOT NULL,
-	CONSTRAINT "ck_pack_write_gate_single_row" CHECK("_pack_write_gate"."id" = 1)
-)`),e.exec("INSERT OR IGNORE INTO _pack_write_gate (id, open) VALUES (1, 0)"),A(e,"table","installed_packs")&&e.exec(`CREATE TRIGGER IF NOT EXISTS trg_installed_packs_write_gate
-BEFORE UPDATE OF version, name, rules_json ON installed_packs
-WHEN (SELECT open FROM _pack_write_gate WHERE id = 1) IS NOT 1
-BEGIN SELECT RAISE(IGNORE); END`),function(a){if(!A(a,"table","audit_events"))return;let b=new Set(B(a,"audit_events",{includeGenerated:!0}));for(let c of M)b.has(c.name)||a.exec(c.ddl)}(a),function(a){try{let b=a.prepare(`SELECT id, url, name, attributes, first_seen AS firstSeen, last_seen AS lastSeen
-         FROM source_project
-         WHERE url IS NOT NULL AND id NOT LIKE 'sample:%'
-         ORDER BY last_seen DESC, id`).all().map(a=>({row:a,canonicalId:i(a.url)})).filter(({row:a,canonicalId:b})=>a.id!==b);if(0===b.length)return;let c=a.prepare(`INSERT INTO source_project (id, url, name, attributes, first_seen, last_seen)
-         VALUES (?, ?, ?, ?, ?, ?)
-       ON CONFLICT(id) DO UPDATE SET
-         first_seen = min(first_seen, excluded.first_seen),
-         last_seen = max(last_seen, excluded.last_seen)`),d=a.prepare("UPDATE audit_events SET source_project_id = ? WHERE source_project_id = ?"),e=a.prepare("UPDATE share_call_site SET project_id = ? WHERE project_id = ?"),f=["project_file","file_access_override"].map(b=>({dropCollisions:a.prepare(`DELETE FROM ${b} WHERE project_id = ?
-           AND path IN (SELECT path FROM ${b} WHERE project_id = ?)`),repoint:a.prepare(`UPDATE ${b} SET project_id = ? WHERE project_id = ?`)})),g=a.prepare("DELETE FROM source_project WHERE id = ?");x(a,()=>{for(let{row:a,canonicalId:h}of b){for(let{dropCollisions:b,repoint:e}of(c.run(h,a.url,a.name,a.attributes,a.firstSeen,a.lastSeen),d.run(h,a.id),f))b.run(a.id,h),e.run(h,a.id);e.run(h,a.id),g.run(a.id)}},"IMMEDIATE")}catch(a){z(`source_project id reconcile failed: ${String(a)}`)}}(a),!h.has(L)&&function(a){try{if(!function(a){let b=a.prepare(`SELECT rowid AS rowid, id, source_tool AS sourceTool, kind, occurred_at AS occurredAt,
-            content_hash AS contentHash, content, metadata
-     FROM events WHERE rowid > ? ORDER BY rowid LIMIT ?`),c=a.prepare(`INSERT OR IGNORE INTO audit_events
-       (id, parent_id, root_session_id, event_type, started_at, content, content_hash, attributes)
-     VALUES (:id, :parentId, :rootSessionId, :eventType, :startedAt, :content, :contentHash, :attributes)`),d=a.prepare("INSERT OR IGNORE INTO audit_events (id, event_type, started_at) VALUES (?, 'session', ?)");return N(a,"events",b,a=>{for(let e of a){var b;let a=function(a){if(null!==a)try{return JSON.parse(a)}catch{return}}(e.metadata),f=a?.sessionId??null;null!==f&&d.run(f,e.occurredAt),c.run(F({id:e.id,parentId:f,rootSessionId:f,eventType:e.kind,startedAt:e.occurredAt,content:e.content,contentHash:e.contentHash,attributes:(b={...e,metadata:a},JSON.stringify((0,g.$w9)({id:b.id,sourceTool:b.sourceTool,kind:b.kind,occurredAt:new Date(b.occurredAt).toISOString(),contentHash:b.contentHash,content:b.content,metadata:b.metadata})))}))}})}(a))return!1;let b=a.prepare(`SELECT rowid AS rowid, id, event_id AS eventId, rule_id AS ruleId, category, severity,
-            span_start AS spanStart, span_end AS spanEnd, masked_match AS maskedMatch,
-            action_taken AS actionTaken, confidence, finding_key AS findingKey,
-            first_detected_at AS firstDetectedAt
-     FROM findings WHERE rowid > ? ORDER BY rowid LIMIT ?`),c=a.prepare(`INSERT OR IGNORE INTO inspection_definitions
-       (id, rule_id, name, category, severity, definition, version)
-     VALUES (:id, :ruleId, :name, :category, :severity, :definition, :version)`),d=a.prepare(`INSERT INTO inspection_findings
-       (id, audit_event_id, inspection_definition_id, classified_data_id,
-        span_start, span_end, masked_match, action_taken, confidence,
-        finding_key, first_detected_at)
-     VALUES
-       (:id, :auditEventId, :inspectionDefinitionId, NULL,
-        :spanStart, :spanEnd, :maskedMatch, :actionTaken, :confidence,
-        :findingKey, :firstDetectedAt)
-     ON CONFLICT(id) DO NOTHING
-     ON CONFLICT (finding_key) DO UPDATE SET
-       first_detected_at = CASE
-         WHEN first_detected_at IS NULL THEN excluded.first_detected_at
-         WHEN excluded.first_detected_at IS NULL THEN first_detected_at
-         ELSE min(first_detected_at, excluded.first_detected_at)
-       END`);return N(a,"findings",b,a=>{let b=new Map;for(let e of a){let a=JSON.stringify([e.ruleId,e.category,e.severity]),f=b.get(a);if(void 0===f){let d=`unmigrated/${e.category}/${e.severity}`;f=j(e.ruleId,d),c.run(F({id:f,ruleId:e.ruleId,name:e.ruleId,category:e.category,severity:e.severity,definition:"",version:d})),b.set(a,f)}d.run(F({id:e.id,auditEventId:e.eventId,inspectionDefinitionId:f,spanStart:e.spanStart,spanEnd:e.spanEnd,maskedMatch:e.maskedMatch,actionTaken:e.actionTaken,confidence:e.confidence,findingKey:e.findingKey,firstDetectedAt:e.firstDetectedAt}))}})}catch(a){return z(`legacy history backfill failed: ${String(a)}`),!1}}(a)&&function(a,b){let c=g.lFU.find(a=>a.tag===L);if(c){if(b)try{var d=a,e=b;q(e);let c=p(e,"pre-drop");r(d,c)}catch(a){z(`legacy events/findings backup failed; deferring the drop: ${String(a)}`);return}try{x(a,()=>{if(!a.prepare("SELECT 1 FROM migration_ledger WHERE tag = ?").get(c.tag)){for(let b of K(c.sql))a.exec(b);a.prepare("INSERT OR IGNORE INTO migration_ledger (tag, applied_at) VALUES (?, ?)").run(c.tag,Date.now())}},"IMMEDIATE")}catch(a){z(`legacy events/findings drop failed; deferring: ${String(a)}`)}}}(a,b)}(b,a),o(a);let d=new aV(b),e=new aD(b),f={events:new aj(b),findings:new aw(b),policies:d,installedPacks:e,scanLedger:new a$(b),secretVault:new a4(b),exceptions:new ap(b),resolutions:new aY(b),ruleProbeCache:new aZ(b),security:new bc(b),detections:new ai(b),shares:new bi(b),policyCatalog:new aW(e),inventory:new aE(b),inventoryAssets:new aU(b),projectFiles:new aX(b),activity:new aa(b),sourceProject:new bj(b),auditEvents:new ab(b),classifiedData:new ac(b),inspectionDefinitions:new ax(b),inspectionFindings:new ay(b),configInventory:new ae(b)};return d.seedDefaults(),{db:b,...f}}catch(a){throw bm(b),a}}((0,e.join)(a,l));return{events:c,findings:f,policies:t,installedPacks:u,scanLedger:v,secretVault:w,exceptions:C,resolutions:D,ruleProbeCache:E,security:G,detections:H,shares:I,policyCatalog:O,inventory:P,inventoryAssets:Q,activity:S,sourceProject:T,auditEvents:U,classifiedData:V,inspectionDefinitions:W,inspectionFindings:X,recordCapture:function(a,c){y(b,()=>{let b=a.metadata?.sessionId;b&&U.ensureSessionRoot(b,a.occurredAt);let d=function(a,b,c=null){return h((0,g.tTV)(["capture",a??"no_session",b,c??"no_path"]))}(b??null,a.contentHash,a.metadata?.filePath??null);U.insertAuditEvent({id:d,eventType:a.kind,startedAt:a.occurredAt,parentId:b,rootSessionId:b,content:a.content,contentHash:a.contentHash,attributes:(0,g.$w9)(a)});let e=new Map;for(let a of c){if(b&&X.isSessionDuplicate(a.ruleId,a.maskedMatch,b)||X.isEventDuplicate(d,a.ruleId,a.maskedMatch,a.span.start,a.span.end))continue;let c=`${a.ruleId}@${(0,g.qmP)(a)}`,f=e.get(c);f||(f=W.upsert((0,g.jTf)(a)),e.set(c,f)),X.insertFinding({id:a.id,auditEventId:d,inspectionDefinitionId:f,span:a.span,maskedMatch:a.maskedMatch,actionTaken:a.actionTaken,confidence:a.confidence,findingKey:a.findingKey??void 0})}})},ensureInventory:function(a){let c={};return y(b,()=>{let b=Date.now();a.host&&(c.hostId=P.upsert(a.host,b)),a.harness&&(c.harnessId=P.upsert(bl(a.harness,c.hostId),b)),c.accountId=P.upsert(bl({objectType:"user",identityKey:"local",attributes:{source:"local"}},c.hostId),b),a.project&&(c.sourceProjectId=T.upsert(a.project,b))})?c:{}},recordConfigScan:function(a){y(b,()=>{let b=(0,g.I8t)(a.scanEvent.startedAt);for(let c of a.items)P.upsert(c,b);U.insertAuditEvent(a.scanEvent);let c=new Map;for(let b of a.definitions??[])c.set(`${b.ruleId}@${b.version}`,W.upsert(b));for(let b of a.findings??[]){let e=c.get(`${b.ruleId}@${b.version}`);e&&X.insertFinding({id:(0,d.randomUUID)(),auditEventId:a.scanEvent.id,inspectionDefinitionId:e,span:b.span,maskedMatch:b.maskedMatch,actionTaken:b.actionTaken,confidence:b.confidence})}})},recordProjectFiles:function(a,c){0!==c.files.length&&y(b,()=>{R.replaceForProject(a,c,Date.now())})},reconcileWorktreeProjects:function(a,c,d){try{let f=c.split(e.sep).join("/"),g=d.split(e.sep).join("/"),h=d===c?"":"url IN (:worktreePosix, :worktreeWin) OR ",i=b.prepare(`SELECT id FROM source_project
-           WHERE id <> :canonicalId
-             AND (${h}url LIKE :pattern ESCAPE '\\' OR url LIKE :patternWin ESCAPE '\\')`).all({canonicalId:a,...d===c?{}:{worktreePosix:g,worktreeWin:g.split("/").join("\\")},pattern:`${s(f)}/.claude/worktrees/%`,patternWin:`${s(f.split("/").join("\\"))}\\\\.claude\\\\worktrees\\\\%`});if(0===i.length)return;x(b,()=>{for(let{id:c}of i)b.prepare("UPDATE audit_events SET source_project_id = :canonicalId WHERE source_project_id = :id").run({canonicalId:a,id:c}),b.prepare("UPDATE OR IGNORE file_access_override SET project_id = :canonicalId WHERE project_id = :id").run({canonicalId:a,id:c}),b.prepare("DELETE FROM file_access_override WHERE project_id = :id").run({id:c}),b.prepare("DELETE FROM project_file WHERE project_id = :id").run({id:c}),b.prepare("DELETE FROM source_project WHERE id = :id").run({id:c})})}catch{}},configInventoryReport:()=>Y.report(),facets:function(){return{hosts:P.distinctTitles("host"),harnesses:P.distinctTitles("harness"),osVersions:P.osVersions(),projects:T.distinctNames()}},purgeSampleData:()=>{!function(a){try{if(!a.prepare(`SELECT (
-         EXISTS(SELECT 1 FROM share_destination WHERE provenance = 'sample')
-         OR EXISTS(SELECT 1 FROM audit_events WHERE id LIKE 'sample:activity:%')
-         OR EXISTS(SELECT 1 FROM inventory_asset WHERE provenance = 'sample')
-       ) AS n`).get().n)return;x(a,()=>{a.exec(`DELETE FROM share_call_site WHERE endpoint_id IN (
-           SELECT e.id FROM share_endpoint e
-           JOIN share_destination d ON d.id = e.destination_id
-           WHERE d.provenance = 'sample')`),a.exec(`DELETE FROM egress_decision_override WHERE destination_id IN (
-           SELECT id FROM share_destination WHERE provenance = 'sample')`),a.exec(`DELETE FROM share_endpoint WHERE destination_id IN (
-           SELECT id FROM share_destination WHERE provenance = 'sample')`),a.exec("DELETE FROM share_destination WHERE provenance = 'sample'"),a.exec(`DELETE FROM harness_asset WHERE asset_id IN (SELECT id FROM inventory_asset WHERE provenance = 'sample')
-            OR harness_id IN (SELECT id FROM inventory WHERE object_type = 'harness' AND json_extract(attributes, '$.provenance') = 'sample')`),a.exec("DELETE FROM mcp_trust_override WHERE asset_id IN (SELECT id FROM inventory_asset WHERE provenance = 'sample')"),a.exec("DELETE FROM file_access_override WHERE project_id IN (SELECT id FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample')"),a.exec("DELETE FROM project_file WHERE project_id IN (SELECT id FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample')"),a.exec("DELETE FROM inventory_asset WHERE provenance = 'sample'"),a.exec("DELETE FROM source_project WHERE json_extract(attributes, '$.provenance') = 'sample'"),a.exec("DELETE FROM inventory WHERE object_type = 'harness' AND json_extract(attributes, '$.provenance') = 'sample'"),a.exec("DELETE FROM inspection_findings WHERE id LIKE 'sample:activity:%'"),a.exec("DELETE FROM inspection_definitions WHERE id LIKE 'sample:activity:%'"),a.exec("DELETE FROM audit_events WHERE root_session_id LIKE 'sample:activity:%'"),a.exec("DELETE FROM audit_events WHERE id LIKE 'sample:activity:%'"),a.exec(`CREATE TABLE IF NOT EXISTS app_meta (
-        key TEXT PRIMARY KEY,
-        value TEXT NOT NULL
-      )`),a.exec("DELETE FROM app_meta WHERE key LIKE 'sample_seeded:%'")})}catch{}}(b)},transaction:async function a(a){b.exec("BEGIN");try{let c=await a();return b.exec("COMMIT"),c}catch(a){try{b.exec("ROLLBACK")}catch{}throw a}},close:()=>{b.close()},[bk]:b}}var bp=c(48161);function bq(a){let b;try{b=(0,k.readFileSync)((0,e.join)(a,"exception.key"),"utf8")}catch(a){if("ENOENT"===a.code)return null;throw a instanceof Error?a:Error(String(a))}let c=JSON.parse(b);if("object"!=typeof c||null===c)throw Error("exception key file is corrupt: not a JSON object");let{version:d,material:f}=c;if("number"!=typeof d||!Number.isInteger(d)||d<1)throw Error("exception key file is corrupt: bad version");if("string"!=typeof f)throw Error("exception key file is corrupt: bad material");let g=Buffer.from(f,"base64");if(32!==g.length)throw Error("exception key file is corrupt: bad material length");return{version:d,material:g}}function br(a){return null===a?{status:"absent"}:{status:"present",version:a.version}}function bs(){return(0,e.join)((0,bp.homedir)(),".aka")}function bt(a=bs()){return(0,e.join)(a,"data")}function bu(a=bs()){let b=function(a){let b;try{b=(0,k.readFileSync)(a,"utf8")}catch{return null}return P(b)??null}((0,e.join)(function(a=bs()){return(0,e.join)(a,"settings")}(a),"settings.json"));if(!b)return(0,g.i1j)();try{return g.hd_.parse(b)}catch{return(0,g.i1j)()}}new Int32Array(new SharedArrayBuffer(4)),c(51455),c(31421),Symbol("aka.vault.consentAbsent"),Symbol("aka.vault.unavailable")},79405:(a,b,c)=>{"use strict";c.d(b,{FileDetailDrawer:()=>j});var d=c(88422),e=c(63959),f=c(6932),g=c(42282),h=c(56633),i=c(88378);function j({file:a,onChange:b}){let c=h.Gb[a.origin],j=a.project;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)(e.Fm,{className:"flex-row items-center gap-2.5 py-4 px-5",children:[(0,d.jsx)("span",{className:"grid size-7.5 shrink-0 place-items-center rounded-lg bg-surface-2 text-text-2",children:(0,d.jsx)(i.m,{name:"file",className:"size-4.5"})}),(0,d.jsx)(e.qp,{className:"min-w-0 truncate font-mono text-sm",children:a.name})]}),(0,d.jsxs)("div",{className:"mt-1 flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto border-t border-border py-4 px-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"break-all font-mono text-xs text-text-3",children:[j.repo," › ",a.path]}),(0,d.jsxs)("div",{className:"mt-2 flex items-center gap-2",children:[(0,d.jsx)(g.TJ,{origin:a.origin}),(0,d.jsx)(g.yk,{v:j.visibility}),a.findings>0&&(0,d.jsxs)("span",{className:"inline-flex items-center gap-1.5 rounded-full bg-sev-critical-fill px-2 py-0.5 text-xs font-semibold text-sev-critical-ink",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-3"}),a.findings," finding",1===a.findings?"":"s"]})]})]}),(0,d.jsx)(g.wn,{label:"LLM access",children:(0,d.jsx)(g.AC,{order:h.IF,meta:h.Pe,value:a.access,onChange:b,accentOf:a=>a.accent})}),(0,d.jsxs)("div",{className:"flex gap-2.5 rounded-lg border border-border bg-surface-2 px-3 py-2.5",children:[(0,d.jsx)(i.m,{name:c.icon,className:"size-4.5 shrink-0 text-text-2"}),(0,d.jsxs)("div",{children:[(0,d.jsx)("div",{className:"mb-0.5 text-xs font-semibold",children:"Why this default"}),(0,d.jsx)("div",{className:"text-xs leading-relaxed text-text-2",children:(0,h._t)(j,a.origin)})]})]}),a.findingsRefs.length>0&&(0,d.jsx)(g.wn,{label:"Related findings",children:(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.findingsRefs.map(b=>(0,d.jsxs)("button",{type:"button",className:"flex w-full cursor-pointer items-center gap-2.5 rounded-lg border border-border bg-primary-tint px-3 py-2.5 text-left",children:[(0,d.jsx)(i.m,{name:"alert",className:"size-4 shrink-0 text-sev-critical-ink"}),(0,d.jsx)("span",{className:"flex-1 text-xs font-medium text-text",children:b.title||a.note}),(0,d.jsx)("span",{className:"text-xs text-primary",children:"Open in Findings"}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 text-text-3"})]},b.id))})}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-3 gap-y-3.5",children:[(0,d.jsx)(f.p,{label:"Repository",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:j.repo})}),(0,d.jsx)(f.p,{label:"Visibility",children:"public"===j.visibility?"Public":"Private"}),(0,d.jsx)(f.p,{label:"Origin",children:c.label}),(0,d.jsx)(f.p,{label:"Set by",children:a.isCustom?(0,d.jsx)("span",{className:"text-primary",children:"You"}):"Default policy"}),(0,d.jsx)(f.p,{label:"Language",children:j.language}),(0,d.jsx)(f.p,{label:"Last activity",children:(0,h.v7)(a.blockedAt??j.updatedAt)})]})]})]})}},80270:(a,b,c)=>{"use strict";c.d(b,{HarnessOverview:()=>k});var d=c(88422),e=c(63959),f=c(22559),g=c(42282),h=c(56633),i=c(88378);let j=["block","redact","warn"];function k({harness:a,events:b,onSelect:c,onSelectProject:k}){let n=(a.categories.find(a=>"mcp"===a.type)?.assets??[]).filter(a=>"unapproved"===a.trust).length,o=b?.items??[],p=b?.counts,q=p?p.block+p.redact+p.warn:0;return(0,d.jsxs)("div",{className:"flex h-full min-h-0 flex-col",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3 border-b border-border px-5 py-4",children:[(0,d.jsx)(f.K,{id:a.id,size:38}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"font-display text-base font-semibold",children:a.label}),(0,d.jsxs)("div",{className:"mt-px text-xs text-text-3",children:[a.kind," \xb7 ",a.version]})]})]}),(0,d.jsxs)("div",{className:"flex min-h-0 flex-1 flex-col gap-4.5 overflow-y-auto p-5",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2.5 flex items-center gap-2",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Recent blocks, redactions & warnings"}),p&&(0,d.jsx)("span",{className:"ml-auto inline-flex items-center gap-1.5",children:j.map(a=>{let b=p[a];return b>0?(0,d.jsxs)(e.Ex,{variant:h.iL[a].tone,children:[b," ",h.iL[a].label.toLowerCase()]},a):null})})]}),0===o.length?(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-dashed border-border-strong px-3 py-3.5 text-text-3",children:[(0,d.jsx)(i.m,{name:"check-circle",className:"size-4 text-ok-ink"}),(0,d.jsx)("span",{className:"text-xs",children:"No blocks, redactions or warnings from this harness"})]}):(0,d.jsxs)("div",{className:"flex flex-col gap-1.5",children:[o.map(a=>{let b=h.iL[a.kind],{day:c,time:f}=function(a){let b=new Date(a),c=b.toLocaleTimeString([],{hour:"2-digit",minute:"2-digit"}),d=new Date,e=a=>new Date(a.getFullYear(),a.getMonth(),a.getDate()).getTime(),f=Math.round((e(d)-e(b))/864e5);return{day:0===f?"Today":1===f?"Yesterday":b.toLocaleDateString([],{month:"short",day:"numeric"}),time:c}}(a.occurredAt);return(0,d.jsxs)("div",{className:"flex items-start gap-2.5 rounded-lg border border-border bg-surface px-3 py-2.5",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-7 shrink-0 place-items-center rounded-md",b.bg,b.fg),children:(0,d.jsx)(i.m,{name:b.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"text-xs font-semibold text-text",children:a.title}),(0,d.jsx)("div",{className:"mt-0.5 font-mono text-xs text-text-3",children:a.detail})]}),(0,d.jsxs)("div",{className:"flex shrink-0 flex-col items-end gap-1",children:[(0,d.jsx)(e.Ex,{variant:b.tone,children:b.label}),(0,d.jsxs)("span",{className:"font-mono text-xs text-text-3",children:[c," \xb7 ",f]})]})]},`${a.occurredAt}\xb7${a.title}`)}),q>o.length&&(0,d.jsxs)("div",{className:"pt-0.5 text-center text-xs text-text-3",children:["Showing ",o.length," of ",q," events"]})]})]}),(a.flagCount>0||n>0)&&(0,d.jsxs)("div",{className:"flex items-center gap-2.5 rounded-lg border border-border bg-sev-high-fill px-3 py-2.5",children:[(0,d.jsx)(i.m,{name:"flag",className:"size-4 shrink-0 text-sev-high-ink"}),(0,d.jsxs)("div",{className:"text-xs font-medium text-text",children:[a.flagCount>0&&`${String(a.flagCount)} item${1===a.flagCount?"":"s"} need review`,a.flagCount>0&&n>0&&" \xb7 ",n>0&&`${String(n)} unapproved MCP${1===n?"":"s"}`]})]}),a.projects.length>0&&(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:"Projects"}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.projects.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.projects.map(a=>(0,d.jsx)(l,{p:a,onSelect:k},a.id))})]}),0===a.categories.length&&0===a.projects.length&&(0,d.jsx)(g.EmptyState,{message:"No projects, skills, MCP servers, hooks or configuration for this harness"}),a.categories.map(a=>{let b=h.pA[a.type];return(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"mb-2 flex items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-label font-semibold uppercase tracking-wider text-text-3",children:b.label}),(0,d.jsx)("span",{className:"text-xs font-semibold text-text-3",children:a.assets.length})]}),(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.assets.map(a=>(0,d.jsx)(m,{it:a,onSelect:c},a.id))})]},a.type)})]})]})}function l({p:a,onSelect:b}){let c=a.accessCounts;return(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a.id)},className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-surface px-2.5 py-2 text-left cursor-pointer hover:bg-surface-2",children:[(0,d.jsx)("span",{className:"size-2.5 shrink-0 rounded-full",style:{background:(0,h.Cs)(a.language)}}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"truncate text-xs font-semibold text-text",children:a.name}),(0,d.jsx)(g.yk,{v:a.visibility})]}),(0,d.jsxs)("div",{className:"mt-0.5 flex items-center gap-1.5 truncate font-mono text-xs text-text-3",children:[(0,d.jsx)(i.m,{name:"repo",className:"size-3 shrink-0"}),a.repo]})]}),(0,d.jsx)(g.AJ,{counts:c}),c.blocked>0&&(0,d.jsxs)("span",{className:"text-xs font-semibold text-sev-critical-ink",children:[c.blocked," blocked"]}),a.findingsCount>0&&(0,d.jsx)(g.Kh,{flags:["findings"],mini:!0}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}function m({it:a,onSelect:b}){let c=(0,h.TW)(a.type),f="mcp"===a.type?a.trust:void 0;return(0,d.jsxs)("button",{type:"button",onClick:()=>{b(a)},className:"flex w-full items-center gap-2.5 rounded-lg border border-border bg-surface px-2.5 py-2 text-left cursor-pointer hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("grid size-6.5 shrink-0 place-items-center rounded-md",c.bg,c.fg),children:(0,d.jsx)(i.m,{name:c.icon,className:"size-3.5"})}),(0,d.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,d.jsx)("div",{className:"truncate font-mono text-xs font-semibold text-text",children:a.name}),(0,d.jsx)("div",{className:"truncate font-mono text-xs text-text-3 mt-0.5",children:a.sub})]}),f&&(0,d.jsx)(g.As,{value:f}),a.flags.length>0&&(0,d.jsx)(g.Kh,{flags:a.flags,mini:!0}),(0,d.jsx)(i.m,{name:"chevron-right",className:"size-4 shrink-0 text-text-3"})]})}},80906:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>e});var d=c(16353);let e=async a=>[{type:"image/svg+xml",sizes:"any",url:(0,d.fillMetadataSegment)(".",await a.params,"icon.svg")+"?f88cc4549cfe61ae"}]},81107:(a,b,c)=>{"use strict";c.d(b,{ColumnsMenu:()=>o,FindingsToolbarView:()=>m});var d=c(88422),e=c(63959),f=c(97017),g=c(81604),h=c(22559),i=c(76812);let j=a=>a.charAt(0).toUpperCase()+a.slice(1),k=a=>a in h.x?h.x[a].label:a;function l(a,b,c){let d=new Set(a.map(a=>a.value));return[...a,...b.filter(a=>!d.has(a)).map(a=>({value:a,label:c(a),count:0}))]}function m({facets:a,filters:b,onFiltersChange:c,query:e,onQueryChange:h,findingCount:m,typeCount:o}){let p=new Map(a.severity.map(a=>[a.value,a.count])),q=i.oC.map(a=>({value:a,label:j(a),count:p.get(a)??0})),r=new Map(a.status.map(a=>[a.value,a.count])),s=i.pM.map(a=>({value:a,label:i.B5[a].label,count:r.get(a)??0})),t=l(a.subtype.map(a=>({value:a.value,label:a.value,count:a.count})),b.type,a=>a),u=l(a.provider.map(a=>({value:a.value,label:k(a.value),count:a.count})),b.provider,k),v=l(a.action.map(a=>({value:a.value,label:j(a.value),count:a.count})),b.action,j),w=(a,d)=>{c({...b,[a]:d})};return(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsxs)("div",{className:"relative w-64",children:[(0,d.jsx)(g.WI,{className:"absolute left-3 top-1/2 size-4 -translate-y-1/2 text-text-3"}),(0,d.jsx)("input",{type:"text","aria-label":"Search findings",placeholder:"Search findings…",value:e,onChange:a=>{h(a.target.value)},className:"h-9 w-full rounded-lg border border-border bg-surface-2 pl-9 pr-3 text-sm text-text placeholder:text-text-3 focus:border-primary focus:outline-none"})]}),(0,d.jsx)(n,{label:"Severity",options:q,selected:b.severity,onChange:a=>{w("severity",a)}}),(0,d.jsx)(n,{label:"Type",options:t,selected:b.type,onChange:a=>{w("type",a)}}),(0,d.jsx)(n,{label:"Provider",options:u,selected:b.provider,onChange:a=>{w("provider",a)}}),(0,d.jsx)(n,{label:"Action",options:v,selected:b.action,onChange:a=>{w("action",a)}}),(0,d.jsx)(n,{label:"Status",options:s,selected:b.status,onChange:a=>{w("status",a)}}),(0,d.jsx)("span",{className:"h-6 bg-border w-px"}),(0,d.jsxs)("span",{className:"text-sm text-text-3",children:[(0,d.jsx)("span",{className:"font-semibold text-text",children:f.jq.format(m)})," finding",1===m?"":"s"," \xb7"," ",(0,d.jsx)("span",{className:"font-semibold text-text",children:f.jq.format(o)})," type",1===o?"":"s"]})]})}function n({label:a,options:b,selected:c,onChange:f}){let h=c.length>0;return(0,d.jsxs)(e.AM,{children:[(0,d.jsxs)(e.Wv,{className:(0,e.cn)("inline-flex h-8 items-center gap-1.5 rounded-lg border px-3 text-sm font-medium transition-colors cursor-pointer",h?"border-primary bg-primary-tint text-primary":"border-border text-text-2 bg-surface hover:bg-surface-2"),children:[a,h&&(0,d.jsx)("span",{className:"flex size-4 items-center justify-center rounded-full bg-primary-solid text-[10px] font-semibold text-text-inv",children:c.length}),(0,d.jsx)(g.D3,{className:"size-3.5"})]}),(0,d.jsxs)(e.hl,{className:"min-w-52 max-h-80",children:[b.map(a=>{let b=c.includes(a.value);return(0,d.jsxs)("button",{type:"button",onClick:()=>{var b;b=a.value,f(c.includes(b)?c.filter(a=>a!==b):[...c,b])},className:"flex w-full cursor-pointer items-center gap-2 rounded-md px-2 py-1.5 text-left text-sm text-text hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-4 shrink-0 items-center justify-center rounded border",b?"border-primary-solid bg-primary-solid text-text-inv":"border-border"),children:b&&(0,d.jsx)(g.Sr,{className:"size-3"})}),(0,d.jsx)("span",{className:"flex-1",children:a.label}),void 0!==a.count&&(0,d.jsx)("span",{className:"text-xs tabular-nums text-text-3",children:a.count})]},a.value)}),h&&(0,d.jsx)("button",{type:"button",onClick:()=>{f([])},className:"mt-1 flex w-full cursor-pointer items-center rounded-md border-t border-border px-2 py-1.5 text-left text-sm text-text-2 hover:bg-surface-2",children:"Clear"})]})]})}function o({columns:a,visibility:b,onChange:c}){let f=a=>!1!==b[a],h=a.filter(a=>f(a.id)).length;return(0,d.jsxs)(e.AM,{children:[(0,d.jsx)(e.Wv,{asChild:!0,children:(0,d.jsxs)(e.$n,{variant:"outline",children:[(0,d.jsx)(g.Qf,{})," Columns"]})}),(0,d.jsx)(e.hl,{align:"end",className:"min-w-44 p-1",children:a.map(a=>{let i=f(a.id);return(0,d.jsxs)("button",{type:"button",onClick:()=>{i&&1===h?c({}):c({...b,[a.id]:!i})},className:"flex w-full cursor-pointer items-center gap-2 rounded-md px-2 py-1.5 text-left text-sm text-text hover:bg-surface-2",children:[(0,d.jsx)("span",{className:(0,e.cn)("flex size-4 shrink-0 items-center justify-center rounded border",i?"border-primary-solid bg-primary-solid text-text-inv":"border-border"),children:i&&(0,d.jsx)(g.Sr,{className:"size-3"})}),a.header]},a.id)})})]})}},81604:(a,b,c)=>{"use strict";c.d(b,{BH:()=>V,BZ:()=>q,C1:()=>O,CT:()=>D,D3:()=>C,DQ:()=>ae,Ey:()=>J,JM:()=>S,K$:()=>U,Kp:()=>j,O4:()=>ad,OK:()=>p,Qf:()=>G,Qq:()=>$,RR:()=>t,RY:()=>r,SY:()=>Z,Sr:()=>x,Uy:()=>m,WI:()=>B,XA:()=>R,YJ:()=>F,ZL:()=>l,Ze:()=>ab,Zu:()=>n,_0:()=>v,_G:()=>i,aR:()=>H,ai:()=>L,bM:()=>y,bN:()=>u,c1:()=>N,cZ:()=>I,f6:()=>aj,fC:()=>K,fN:()=>ai,fl:()=>k,hF:()=>T,hp:()=>aa,iB:()=>_,iF:()=>w,jZ:()=>h,k3:()=>ac,kp:()=>Q,lm:()=>z,lo:()=>s,mL:()=>A,mo:()=>X,np:()=>W,ny:()=>o,oS:()=>ag,pD:()=>g,qU:()=>af,rX:()=>f,s3:()=>ak,sj:()=>ah,ts:()=>Y,uv:()=>P,vK:()=>E,wy:()=>M});var d=c(88422);let e={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.6,strokeLinecap:"round",strokeLinejoin:"round"},f=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M8 2.5h8L21.5 8v8L16 21.5H8L2.5 16V8L8 2.5Z"}),(0,d.jsx)("path",{d:"M12 8v4"}),(0,d.jsx)("circle",{cx:"12",cy:"16",r:"1",fill:"currentColor",stroke:"none"})]}),g=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"m6 6 12 12"})]}),h=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"3",y:"9",width:"18",height:"6",rx:"1.5",fill:"currentColor",stroke:"none"}),(0,d.jsx)("path",{d:"M3 5h18M3 19h12"})]}),i=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M14 4h6v6"}),(0,d.jsx)("path",{d:"M20 4 11 13"}),(0,d.jsx)("path",{d:"M18 14v4a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h4"})]}),j=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 19V5M6 11l6-6 6 6"})}),k=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M5 12h14M13 6l6 6-6 6"})}),l=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 5v14M6 13l6 6 6-6"})}),m=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M4 20V10M10 20V4M16 20v-7M22 20H2"})}),n=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3 4.5 6v5.5c0 4.6 3.2 7.6 7.5 9 4.3-1.4 7.5-4.4 7.5-9V6L12 3Z"}),(0,d.jsx)("path",{d:"m9 12 2 2 4-4"})]}),o=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"8",r:"3.6"}),(0,d.jsx)("path",{d:"M5.5 20a6.5 6.5 0 0 1 13 0"})]}),p=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 8.4v7.2"}),(0,d.jsx)("circle",{cx:"6",cy:"6",r:"2.4"}),(0,d.jsx)("circle",{cx:"6",cy:"18",r:"2.4"}),(0,d.jsx)("circle",{cx:"18",cy:"7",r:"2.4"}),(0,d.jsx)("path",{d:"M18 9.4a8.6 8.6 0 0 1-8.6 8.6"})]}),q=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3.5 13.6 9 19 10.5 13.6 12 12 17.5 10.4 12 5 10.5 10.4 9 12 3.5Z"}),(0,d.jsx)("path",{d:"M18 16.5 18.7 19 21 19.7 18.7 20.4 18 23 17.3 20.4 15 19.7 17.3 19 18 16.5Z"})]}),r=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"8",cy:"12",r:"4"}),(0,d.jsx)("path",{d:"M11.5 12H21l-2 2.4M16.5 12v3"})]}),s=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m8 8-4 4 4 4M16 8l4 4-4 4M13.5 6l-3 12"})}),t=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"4",y:"4",width:"16",height:"7",rx:"2"}),(0,d.jsx)("rect",{x:"4",y:"13",width:"16",height:"7",rx:"2"}),(0,d.jsx)("circle",{cx:"8",cy:"7.5",r:"1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"8",cy:"16.5",r:"1",fill:"currentColor",stroke:"none"})]}),u=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("ellipse",{cx:"12",cy:"6",rx:"7",ry:"3"}),(0,d.jsx)("path",{d:"M5 6v12c0 1.7 3.1 3 7 3s7-1.3 7-3V6"}),(0,d.jsx)("path",{d:"M5 12c0 1.7 3.1 3 7 3s7-1.3 7-3"})]}),v=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 3 2 20h20L12 3Z"}),(0,d.jsx)("path",{d:"M12 9v5"}),(0,d.jsx)("circle",{cx:"12",cy:"17",r:"1",fill:"currentColor",stroke:"none"})]}),w=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M5 21V4M5 4h11l-2 3 2 3H5"})}),x=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m5 12 4.5 4.5L19 7"})}),y=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M2.5 12S6 5.5 12 5.5 21.5 12 21.5 12 18 18.5 12 18.5 2.5 12 2.5 12Z"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"2.6"})]}),z=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 3 4.5 6v5.5c0 4.6 3.2 7.6 7.5 9 4.3-1.4 7.5-4.4 7.5-9V6L12 3Z"})}),A=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"m12 3 9 5-9 5-9-5 9-5Z"}),(0,d.jsx)("path",{d:"m3 13 9 5 9-5M3 16.5l9 5 9-5"})]}),B=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"11",cy:"11",r:"7"}),(0,d.jsx)("path",{d:"m20 20-3.2-3.2"})]}),C=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m6 9 6 6 6-6"})}),D=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"4",y:"5",width:"16",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"M4 9h16M8 3v4M16 3v4"})]}),E=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m9 6 6 6-6 6"})}),F=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"m15 6-6 6 6 6"})}),G=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 8h10M18 8h2M4 16h2M10 16h10"}),(0,d.jsx)("circle",{cx:"16",cy:"8",r:"2.2"}),(0,d.jsx)("circle",{cx:"8",cy:"16",r:"2.2"})]}),H=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 4 20 20"}),(0,d.jsx)("path",{d:"M9.5 9.6A2.6 2.6 0 0 0 12 14.6c.7 0 1.3-.25 1.8-.7M6.5 6.7C3.8 8.3 2.5 12 2.5 12S6 18.5 12 18.5c1.5 0 2.8-.4 4-1M17.5 17.3C20.2 15.7 21.5 12 21.5 12S18 5.5 12 5.5c-.5 0-1 0-1.4.1"})]}),I=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M8 4c-2 0-2 2-2 4s0 3-2 4c2 1 2 2 2 4s0 4 2 4M16 4c2 0 2 2 2 4s0 3 2 4c-2 1-2 2-2 4s0 4-2 4"})}),J=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M2 12C2 6.5 6.5 2 12 2a10 10 0 0 1 8 4"}),(0,d.jsx)("path",{d:"M5 19.5C5.5 18 6 15 6 12c0-.7.12-1.37.34-2"}),(0,d.jsx)("path",{d:"M17.29 21.02c.12-.6.43-2.3.5-3.02"}),(0,d.jsx)("path",{d:"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4"}),(0,d.jsx)("path",{d:"M8.65 22c.21-.66.45-1.32.57-2"}),(0,d.jsx)("path",{d:"M14 13.12c0 2.38 0 6.38-1 8.88"}),(0,d.jsx)("path",{d:"M2 16h.01"}),(0,d.jsx)("path",{d:"M21.8 16c.2-2 .13-5.354 0-6"}),(0,d.jsx)("path",{d:"M9 6.8a6 6 0 0 1 9 5.2v2"})]}),K=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M3 12h18"}),(0,d.jsx)("path",{d:"M12 3c2.6 2.6 2.6 15.4 0 18M12 3c-2.6 2.6-2.6 15.4 0 18"})]}),L=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 21V5a1 1 0 0 1 1-1h9a1 1 0 0 1 1 1v16"}),(0,d.jsx)("path",{d:"M15 9h4a1 1 0 0 1 1 1v11"}),(0,d.jsx)("path",{d:"M3 21h18"}),(0,d.jsx)("path",{d:"M8 8h3M8 12h3M8 16h3"})]}),M=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"5",r:"1.4",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"1.4",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"12",cy:"19",r:"1.4",fill:"currentColor",stroke:"none"})]}),N=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 5v14M5 12h14"})}),O=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"m8.5 12 2.3 2.3 4.7-4.6"})]}),P=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M6 6 18 18M18 6 6 18"})}),Q=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M8 6h12M8 12h12M8 18h12"}),(0,d.jsx)("circle",{cx:"3.6",cy:"6",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"12",r:"1.1",fill:"currentColor",stroke:"none"}),(0,d.jsx)("circle",{cx:"3.6",cy:"18",r:"1.1",fill:"currentColor",stroke:"none"})]}),R=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"5",y:"11",width:"14",height:"9",rx:"2"}),(0,d.jsx)("path",{d:"M8 11V8a4 4 0 0 1 8 0v3"})]}),S=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 20V9M7 13l5-5 5 5M5 4h14"})}),T=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"6",cy:"18",r:"2.4"}),(0,d.jsx)("path",{d:"M8.4 18H16a3 3 0 0 0 0-6H8a3 3 0 0 1 0-6h7.6"}),(0,d.jsx)("circle",{cx:"18",cy:"6",r:"2.4"})]}),U=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M3 13h5l1.5 3h5L16 13h5"}),(0,d.jsx)("path",{d:"M5 5h14l2 8v5a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-5L5 5Z"})]}),V=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 12h3l2-5 4 14 3-9 2 2h4"})}),W=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 12h4l3 8 4-16 3 8h4"})}),X=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M12 11v5"}),(0,d.jsx)("circle",{cx:"12",cy:"7.7",r:"1",fill:"currentColor",stroke:"none"})]}),Y=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12 21s7-6.3 7-11a7 7 0 1 0-14 0c0 4.7 7 11 7 11Z"}),(0,d.jsx)("circle",{cx:"12",cy:"10",r:"2.4"})]}),Z=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h11a1 1 0 0 1 1 1v17l-3-2-3 2-3-2-3 2V4a1 1 0 0 1 1-1Z"}),(0,d.jsx)("path",{d:"M9 8h6M9 12h5"})]}),$=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M7 17 17 7M8 7h9v9"})}),_=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h9l3 3v15H6z"}),(0,d.jsx)("path",{d:"M15 3v3h3"}),(0,d.jsx)("path",{d:"M9 12h6M9 16h4"})]}),aa=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M7 18a4 4 0 0 1-.5-7.97A5.5 5.5 0 0 1 17 9.5a3.75 3.75 0 0 1 .5 7.5H7Z"})}),ab=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2Z"}),(0,d.jsx)("circle",{cx:"12",cy:"12",r:"3"})]}),ac=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("rect",{x:"3",y:"4",width:"18",height:"16",rx:"2"}),(0,d.jsx)("path",{d:"m7 9 3 3-3 3M13 15h4"})]}),ad=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("circle",{cx:"12",cy:"12",r:"9"}),(0,d.jsx)("path",{d:"M12 7.5V12l3 2"})]}),ae=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M13 2 4 14h7l-1 8 9-12h-7l1-8Z"})}),af=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M4 20h4L19 9l-4-4L4 16v4Z"}),(0,d.jsx)("path",{d:"m14 6 4 4"})]}),ag=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M6 3h8l4 4v14H6z"}),(0,d.jsx)("path",{d:"M14 3v4h4"})]}),ah=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M3 6a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"})}),ai=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M3 12a9 9 0 0 1 15-6.7L21 8"}),(0,d.jsx)("path",{d:"M21 3v5h-5"}),(0,d.jsx)("path",{d:"M21 12a9 9 0 0 1-15 6.7L3 16"}),(0,d.jsx)("path",{d:"M3 21v-5h5"})]}),aj=a=>(0,d.jsxs)("svg",{...e,...a,children:[(0,d.jsx)("path",{d:"M7 4 3 8l4 4"}),(0,d.jsx)("path",{d:"M3 8h14"}),(0,d.jsx)("path",{d:"m17 20 4-4-4-4"}),(0,d.jsx)("path",{d:"M21 16H7"})]}),ak=a=>(0,d.jsx)("svg",{...e,...a,children:(0,d.jsx)("path",{d:"M12 4v11M7 11l5 5 5-5M5 20h14"})})},82214:()=>{},82994:(a,b,c)=>{Promise.resolve().then(c.bind(c,41640)),Promise.resolve().then(c.bind(c,3353))},87985:(a,b,c)=>{Promise.resolve().then(c.bind(c,11035)),Promise.resolve().then(c.bind(c,90196)),Promise.resolve().then(c.bind(c,92736)),Promise.resolve().then(c.bind(c,83375)),Promise.resolve().then(c.bind(c,33900)),Promise.resolve().then(c.bind(c,43197)),Promise.resolve().then(c.bind(c,61971))},88378:(a,b,c)=>{"use strict";c.d(b,{m:()=>h});var d=c(63959),e=c(88391),f=c(81604);let g={alert:f._0,"alert-octagon":f.rX,"arrow-up":f.Kp,bolt:f.DQ,book:f.oS,branch:f.OK,check:f.Sr,"check-circle":f.C1,"chevron-down":f.D3,"chevron-right":f.vK,clock:f.O4,cloud:f.hp,code:f.lo,database:f.bN,edit:f.qU,"external-share":f._G,eye:f.bM,"eye-off":f.aR,file:f.oS,flag:f.iF,folder:f.sj,globe:f.fC,help:f.mo,info:f.mo,layers:f.mL,list:f.kp,lock:f.XA,plus:f.c1,redact:f.jZ,refresh:f.fN,repo:f.SY,route:f.hF,search:f.WI,server:f.RR,settings:f.Ze,"shield-check":f.Zu,"slash-circle":f.pD,sliders:f.Qf,sparkles:f.BZ,swap:f.f6,terminal:f.k3,x:f.uv,"x-circle":f.pD};function h({name:a,className:b}){return(0,e.createElement)(g[a],{"aria-hidden":!0,focusable:!1,className:(0,d.cn)("size-4",b)})}},93342:(a,b,c)=>{"use strict";c.d(b,{FindingsLocationsView:()=>j});var d=c(88422),e=c(63959),f=c(88391),g=c(4513),h=c(81604),i=c(76812);function j({items:a,expandedRepos:b,onToggleRepo:c,onSelectFile:i,hasMore:j=!1,isLoading:m=!1,emptyState:n}){return(0,d.jsx)(e.Zp,{className:"flex h-full min-h-0 flex-col overflow-hidden shadow-sm",children:(0,d.jsxs)("div",{className:"min-h-0 flex-1 overflow-y-auto p-4",children:[m?(0,d.jsx)("div",{className:"flex flex-col gap-2 py-2",children:Array.from({length:6},(a,b)=>(0,d.jsx)("div",{className:"h-12 animate-pulse rounded-md bg-surface-3"},b))}):0===a.length?n??(0,d.jsx)("p",{className:"py-8 text-center text-sm text-text-3",children:"No findings match these filters."}):(0,d.jsx)("div",{className:"flex flex-col gap-1.5",children:a.map(a=>{let j=b.has(a.repo);return(0,d.jsxs)(f.Fragment,{children:[(0,d.jsxs)("button",{type:"button","aria-expanded":j,onClick:()=>{c(a.repo)},className:"flex w-full items-center gap-3 rounded-lg border border-border px-3 py-2.5 text-left hover:bg-surface-2",children:[(0,d.jsx)(h.vK,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-4 shrink-0 text-text-3 transition-transform",j&&"rotate-90")}),(0,d.jsx)(e.Pt,{severity:a.maxSeverity}),(0,d.jsx)("span",{className:(0,e.cn)("min-w-0 flex-1 truncate text-ui font-semibold",a.repo?"font-mono text-text":"italic text-text-3"),children:a.repo||"No repository recorded"}),(0,d.jsx)(k,{status:a.status}),(0,d.jsxs)("span",{className:"shrink-0 text-xs text-text-3",children:[a.instanceCount," ",1===a.instanceCount?"finding":"findings"," \xb7"," ",a.files.length," ",1===a.files.length?"file":"files"]}),(0,d.jsx)("span",{className:"shrink-0 text-xs text-text-3",children:(0,g.K)(a.latestDetectedAt)})]}),j&&a.files.map(b=>(0,d.jsx)(l,{file:b,onSelect:b.file?()=>{i(a.repo,b.file)}:void 0},`${a.repo}\0${b.file}`))]},a.repo||"\0unnamed")})}),j&&(0,d.jsxs)("p",{className:"mt-4 text-center text-xs text-text-3",children:["Showing the first ",a.length," repositories — refine the filters to narrow results."]})]})})}function k({status:a}){if(void 0===a)return null;let b=i.B5[a];return(0,d.jsx)(e.Ex,{variant:b.badge,className:"h-6 shrink-0",children:b.label})}function l({file:a,onSelect:b}){let c=(0,d.jsxs)("div",{className:"grid grid-cols-[100px_1fr_1fr_100px_100px] w-full gap-2",children:[(0,d.jsx)("div",{children:(0,d.jsx)(e.Pt,{severity:a.maxSeverity})}),(0,d.jsx)("span",{className:(0,e.cn)("font-mono text-xs break-words [word-break:break-word]",a.file?"text-text-2":"italic text-text-3"),children:a.file||"No file recorded"}),(0,d.jsx)("span",{className:"text-xs text-text-3 break-words [word-break:break-word]",children:a.ruleIds.join(", ")}),(0,d.jsx)("span",{className:"shrink-0 text-xs text-text-3",children:a.instanceCount}),(0,d.jsx)("span",{className:"shrink-0 text-xs text-text-3",children:(0,g.K)(a.latestDetectedAt)})]}),f="flex w-full items-center gap-3 rounded-md py-1.5 pl-10 pr-3 text-left";return b?(0,d.jsx)("button",{type:"button",onClick:b,className:(0,e.cn)(f,"cursor-pointer hover:bg-surface-2"),children:c}):(0,d.jsx)("div",{className:f,children:c})}},95398:(a,b,c)=>{"use strict";c.d(b,{HarnessSelect:()=>i});var d=c(88422),e=c(63959),f=c(81604),g=c(22559),h=c(23373);function i({value:a,onChange:b,options:c}){let i=c?h.oo.filter(b=>c.includes(b)||a.includes(b)):h.oo,j=0===a.length,k=a[0],l=j?"All harnesses":1===a.length&&k?g.x[k].label:`${String(a.length)} harnesses`;return(0,d.jsxs)(e.rI,{children:[(0,d.jsxs)(e.ty,{className:(0,e.cn)("group flex h-8.5 w-full items-center gap-2 rounded-lg border bg-surface px-2.5 text-sm outline-none focus-visible:ring-2 focus-visible:ring-primary/40",j?"border-border":"border-primary"),children:[(0,d.jsx)(f.k3,{"aria-hidden":!0,focusable:!1,className:(0,e.cn)("size-3.5 shrink-0",j?"text-text-3":"text-primary")}),(0,d.jsx)("span",{className:"flex-1 text-left font-medium text-text",children:l}),!j&&(0,d.jsx)(e.Ex,{variant:"primary",className:"px-1.5 py-0 text-label bg-surface",children:a.length}),(0,d.jsx)(f.D3,{"aria-hidden":!0,focusable:!1,className:"size-3.5 shrink-0 text-text-3 transition-transform group-data-[state=open]:rotate-180"})]}),(0,d.jsxs)(e.SQ,{align:"start",className:"w-(--radix-dropdown-menu-trigger-width)",children:[(0,d.jsx)(e.hO,{checked:j,onCheckedChange:()=>{b([])},onSelect:a=>{a.preventDefault()},children:"All harnesses"}),(0,d.jsx)(e.mB,{}),i.map(c=>(0,d.jsx)(e.hO,{checked:a.includes(c),onCheckedChange:()=>{let d=a.includes(c)?a.filter(a=>a!==c):[...a,c];b(d.length===i.length?[]:d)},onSelect:a=>{a.preventDefault()},children:(0,d.jsxs)("span",{className:"flex items-center gap-2",children:[(0,d.jsx)("span",{className:"size-2 shrink-0 rounded-xs",style:{background:g.x[c].color}}),g.x[c].label]})},c))]})]})}},97017:(a,b,c)=>{"use strict";c.d(b,{AW:()=>e.A,rJ:()=>e.r,jq:()=>d});let d=new Intl.NumberFormat("en-US");var e=c(13848)},97558:(a,b,c)=>{"use strict";c.d(b,{T:()=>j});var d=c(88422),e=c(63959),f=c(21172),g=c(63667),h=c(81604);function i({label:a,tone:b="neutral",dir:c}){let f="up"===c?h.Kp:"down"===c?h.ZL:null;return(0,d.jsxs)("span",{className:(0,e.cn)("inline-flex items-center gap-1 text-xs font-semibold","positive"===b?"text-ok-ink":"negative"===b?"text-sev-critical-ink":"text-text-3"),children:[f&&(0,d.jsx)(f,{"aria-hidden":!0,focusable:!1,className:"size-3"}),a]})}function j({icon:a,iconBg:b,iconColor:c,label:h,value:j,delta:k,spark:l,sparkColor:m,sparkLabels:n,sparkFormatValue:o,loading:p=!1}){return(0,d.jsxs)(e.Zp,{className:"flex flex-col gap-2.5 p-4.5 shadow-sm","aria-busy":p||void 0,children:[(0,d.jsxs)("div",{className:"flex items-center gap-2.5",children:[(0,d.jsx)("span",{className:"grid size-8.5 shrink-0 place-items-center rounded-lg",style:{background:b,color:c},children:(0,d.jsx)(a,{"aria-hidden":!0,focusable:!1,className:"size-4.5"})}),(0,d.jsx)("span",{className:"text-ui font-medium text-text-2",children:h})]}),p?(0,d.jsx)(e.EA,{className:"my-1 h-7 w-10"}):(0,d.jsxs)("div",{className:"flex items-end justify-between gap-2",children:[(0,d.jsx)("span",{className:"font-display text-3xl font-semibold leading-none tracking-[-0.03em] text-text",children:j}),k&&(0,d.jsx)(i,{...k})]}),l&&!p&&(0,d.jsx)("div",{className:"mt-0.5",children:(0,d.jsx)(g.Sparkline,{data:l,color:m??f.l.primary,height:34,...n?{labels:n}:{},...o?{formatValue:o}:{}})})]})}},98296:(a,b,c)=>{"use strict";c.d(b,{ExceptionDetailView:()=>k});var d=c(88422),e=c(63959),f=c(88391),g=c(4513),h=c(6932),i=c(29893),j=c(72060);function k({exception:a,onRevoke:b,busy:c,error:k}){let[l,m]=(0,f.useState)(""),n=(0,j.rO)(a);return(0,d.jsxs)("div",{className:"flex flex-col gap-6 rounded-xl border border-border bg-surface p-5",children:[(0,d.jsxs)("div",{className:"flex items-center gap-3",children:[(0,d.jsx)("span",{className:"font-mono text-sm font-semibold text-text",children:a.id.slice(0,8)}),(0,d.jsx)(i.StateTagFor,{exception:a}),(0,d.jsx)(i._,{exception:a})]}),"reveal_to_model"===a.capability&&(0,d.jsxs)("div",{className:"rounded-lg border border-sev-critical-fill bg-sev-critical-fill p-3",children:[(0,d.jsx)(h.e,{className:"text-sev-critical-ink",children:"Reveal to model"}),(0,d.jsx)("p",{className:"text-sm text-text-2",children:"While this grant is active, the model can receive this value's raw form at tool boundaries. Every crossing is audited in the vault's de-reference trail."})]}),(0,d.jsxs)("div",{className:"grid grid-cols-2 gap-x-6 gap-y-4 md:grid-cols-3",children:[(0,d.jsx)(h.p,{label:"Rule",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.ruleId})}),(0,d.jsx)(h.p,{label:"Category",children:a.category}),(0,d.jsx)(h.p,{label:"Approved value",children:(0,d.jsx)("span",{className:"font-mono text-xs",children:a.maskedValue})}),(0,d.jsxs)(h.p,{label:"Scope",children:[j.yr[a.scope],"permanent"===a.scope&&" — until revoked"]}),(0,d.jsx)(h.p,{label:"Expires",children:null===a.expiresAt?"—":(0,g.K)(a.expiresAt)}),(0,d.jsxs)(h.p,{label:"Uses",children:[null===a.maxUses?String(a.useCount):`${String(a.useCount)}/${String(a.maxUses)}`,a.lastUsedAt&&` \xb7 last ${(0,g.K)(a.lastUsedAt)}`]}),(0,d.jsxs)(h.p,{label:"Created",children:[(0,g.K)(a.createdAt)," by ",a.createdBy," via"," ",j.gi[a.createdVia]]}),(0,d.jsx)(h.p,{label:"Key version",children:String(a.keyVersion)})]}),(0,d.jsxs)("div",{children:[(0,d.jsx)(h.e,{children:"Justification"}),(0,d.jsx)("p",{className:"text-sm text-text-2",children:a.justification})]}),null!==a.revokedAt&&(0,d.jsxs)("div",{className:"rounded-lg border border-sev-critical-fill bg-sev-critical-fill p-3",children:[(0,d.jsx)(h.e,{className:"text-sev-critical-ink",children:"Revoked"}),(0,d.jsxs)("p",{className:"text-sm text-text-2",children:[(0,g.K)(a.revokedAt)," by ",a.revokedBy??"unknown",a.revokeReason?` — ${a.revokeReason}`:""]})]}),b&&"active"===n&&(0,d.jsxs)("div",{className:"border-t border-border pt-4",children:[(0,d.jsx)(h.e,{children:"Revoke this grant"}),(0,d.jsx)("p",{className:"mb-2 text-xs text-text-3",children:"Revocation is immediate and terminal; the row is retained as audit evidence."}),(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)(e.pd,{value:l,onChange:a=>{m(a.target.value)},placeholder:"Reason (recorded in the audit trail)",className:"max-w-sm"}),(0,d.jsx)(e.$n,{variant:"solid",tone:"danger",size:"sm",disabled:c,onClick:()=>{b(l.trim())},children:"Revoke"})]}),k&&(0,d.jsx)("p",{className:"mt-2 text-xs text-sev-critical-ink",children:k})]})]})}},98958:(a,b,c)=>{"use strict";c.d(b,{QT:()=>i,Qv:()=>k,TH:()=>l,U5:()=>j,Z3:()=>g,vy:()=>f,x_:()=>h});var d=c(87472),e=c(76085);function f({actions:a=!1}){return(0,d.jsxs)("div",{className:"flex items-start justify-between gap-4 pb-6",children:[(0,d.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,d.jsx)(e.EA,{className:"h-7 w-44"}),(0,d.jsx)(e.EA,{className:"h-4 w-72"})]}),a&&(0,d.jsx)(e.EA,{className:"h-8 w-32"})]})}function g(){return(0,d.jsxs)("div",{className:"flex items-center gap-2 pb-1",children:[(0,d.jsx)(e.EA,{className:"h-8 w-64"}),(0,d.jsx)(e.EA,{className:"h-8 w-24"}),(0,d.jsx)(e.EA,{className:"h-8 w-24"}),(0,d.jsx)(e.EA,{className:"h-8 w-24"}),(0,d.jsx)(e.EA,{className:"ml-auto h-8 w-20"})]})}function h({rows:a=8}){return(0,d.jsxs)("div",{className:"mt-4 overflow-hidden rounded-lg border border-border",children:[(0,d.jsxs)("div",{className:"flex items-center gap-4 border-b border-border bg-surface-2 px-4 py-2.5",children:[(0,d.jsx)(e.EA,{className:"h-3.5 w-20"}),(0,d.jsx)(e.EA,{className:"h-3.5 w-40"}),(0,d.jsx)(e.EA,{className:"h-3.5 w-24"}),(0,d.jsx)(e.EA,{className:"ml-auto h-3.5 w-16"})]}),Array.from({length:a},(a,b)=>(0,d.jsxs)("div",{className:"flex items-center gap-4 border-b border-border px-4 py-3 last:border-b-0",children:[(0,d.jsx)(e.EA,{className:"h-5 w-16"}),(0,d.jsx)(e.EA,{className:"h-4 w-56"}),(0,d.jsx)(e.EA,{className:"h-4 w-28"}),(0,d.jsx)(e.EA,{className:"ml-auto h-4 w-14"})]},b))]})}function i({tiles:a=5}){return(0,d.jsx)("div",{className:"grid grid-cols-2 gap-3 pb-4 sm:grid-cols-3 lg:grid-cols-5",children:Array.from({length:a},(a,b)=>(0,d.jsx)(e.EA,{className:"h-20"},b))})}function j({cards:a=3,className:b}){return(0,d.jsx)("div",{className:(0,e.cn)("grid grid-cols-1 gap-4 lg:grid-cols-3",b),children:Array.from({length:a},(a,b)=>(0,d.jsx)(e.EA,{className:"h-56"},b))})}function k({className:a}){return(0,d.jsx)(e.EA,{className:(0,e.cn)("h-64 w-full",a)})}function l(){return(0,d.jsxs)("div",{className:"mt-4 flex min-h-0 flex-1 gap-4",children:[(0,d.jsx)("div",{className:"flex w-80 shrink-0 flex-col gap-2 rounded-lg border border-border p-3",children:Array.from({length:8},(a,b)=>(0,d.jsx)(e.EA,{className:"h-14"},b))}),(0,d.jsxs)("div",{className:"min-h-0 flex-1 rounded-lg border border-border p-4",children:[(0,d.jsx)(e.EA,{className:"h-8 w-64"}),(0,d.jsx)("div",{className:"mt-4 grid grid-cols-2 gap-3",children:Array.from({length:6},(a,b)=>(0,d.jsx)(e.EA,{className:"h-10"},b))}),(0,d.jsx)(e.EA,{className:"mt-6 h-72 w-full"})]})]})}}};