@clear-capabilities/agentic-security-scanner 0.145.0 → 0.147.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (195) hide show
  1. package/CHANGELOG.md +266 -0
  2. package/bin/agentic-security.js +3508 -69
  3. package/dist/1122.index.js +779 -0
  4. package/dist/{301.index.js → 1301.index.js} +2 -2
  5. package/dist/1379.index.js +591 -0
  6. package/dist/{444.index.js → 1444.index.js} +2 -2
  7. package/dist/{660.index.js → 1660.index.js} +2 -2
  8. package/dist/{700.index.js → 1700.index.js} +2 -2
  9. package/dist/{905.index.js → 1905.index.js} +3 -3
  10. package/dist/{920.index.js → 1920.index.js} +3 -3
  11. package/dist/{238.index.js → 2238.index.js} +3 -3
  12. package/dist/{271.index.js → 2271.index.js} +2 -2
  13. package/dist/{985.index.js → 2376.index.js} +1260 -340
  14. package/dist/2432.index.js +793 -0
  15. package/dist/2659.index.js +93 -0
  16. package/dist/{826.index.js → 2826.index.js} +2 -2
  17. package/dist/{830.index.js → 2830.index.js} +2 -2
  18. package/dist/2923.index.js +298 -0
  19. package/dist/{1.index.js → 3001.index.js} +5 -5
  20. package/dist/{117.index.js → 3117.index.js} +3 -3
  21. package/dist/3180.index.js +379 -0
  22. package/dist/3276.index.js +117 -0
  23. package/dist/{415.index.js → 3415.index.js} +2 -2
  24. package/dist/{499.index.js → 3499.index.js} +2 -2
  25. package/dist/3518.index.js +450 -0
  26. package/dist/{526.index.js → 3526.index.js} +5 -5
  27. package/dist/{736.index.js → 3736.index.js} +4 -4
  28. package/dist/{839.index.js → 3839.index.js} +4 -4
  29. package/dist/{113.index.js → 4113.index.js} +5 -5
  30. package/dist/{265.index.js → 4265.index.js} +2 -2
  31. package/dist/{384.index.js → 4384.index.js} +3 -3
  32. package/dist/4547.index.js +268 -0
  33. package/dist/4863.index.js +422 -0
  34. package/dist/{970.index.js → 4970.index.js} +2 -2
  35. package/dist/5051.index.js +841 -0
  36. package/dist/{144.index.js → 5144.index.js} +5 -5
  37. package/dist/{333.index.js → 5333.index.js} +3 -3
  38. package/dist/5343.index.js +185 -0
  39. package/dist/5350.index.js +866 -0
  40. package/dist/5561.index.js +436 -0
  41. package/dist/{637.index.js → 5637.index.js} +3 -3
  42. package/dist/{449.index.js → 5830.index.js} +2 -2
  43. package/dist/6626.index.js +532 -0
  44. package/dist/6662.index.js +297 -0
  45. package/dist/{675.index.js → 6675.index.js} +5 -5
  46. package/dist/{730.index.js → 6730.index.js} +6 -6
  47. package/dist/6829.index.js +225 -0
  48. package/dist/6944.index.js +130 -0
  49. package/dist/{178.index.js → 7178.index.js} +3 -3
  50. package/dist/{227.index.js → 7227.index.js} +2 -2
  51. package/dist/7310.index.js +520 -0
  52. package/dist/{552.index.js → 7552.index.js} +4 -4
  53. package/dist/7709.index.js +78 -0
  54. package/dist/8218.index.js +160 -0
  55. package/dist/{476.index.js → 8476.index.js} +4 -4
  56. package/dist/{513.index.js → 8513.index.js} +5 -5
  57. package/dist/{520.index.js → 8520.index.js} +2 -2
  58. package/dist/{718.index.js → 8718.index.js} +2 -2
  59. package/dist/{752.index.js → 8752.index.js} +2 -2
  60. package/dist/8846.index.js +100 -0
  61. package/dist/{435.index.js → 9091.index.js} +560 -189
  62. package/dist/{207.index.js → 9207.index.js} +2 -2
  63. package/dist/{220.index.js → 9220.index.js} +2 -2
  64. package/dist/9390.index.js +163 -0
  65. package/dist/{503.index.js → 9503.index.js} +2 -2
  66. package/dist/{801.index.js → 9801.index.js} +2 -2
  67. package/dist/{824.index.js → 9824.index.js} +2 -2
  68. package/dist/agentic-security.mjs +16 -16
  69. package/dist/agentic-security.mjs.sha256 +1 -1
  70. package/dist/compliance-frameworks/hipaa-security-rule.json +3 -2
  71. package/dist/frontend/index.html +21 -0
  72. package/dist/frontend/src/app.js +176 -0
  73. package/dist/frontend/src/components/evidence-inspector.js +141 -0
  74. package/dist/frontend/src/components/filter-rail.js +119 -0
  75. package/dist/frontend/src/components/query-bar.js +126 -0
  76. package/dist/frontend/src/data/flagship-graph.js +1460 -0
  77. package/dist/frontend/src/export-entry.js +36 -0
  78. package/dist/frontend/src/lib/api-client.js +92 -0
  79. package/dist/frontend/src/lib/contrast.js +34 -0
  80. package/dist/frontend/src/lib/dom.js +24 -0
  81. package/dist/frontend/src/lib/escape-html.js +16 -0
  82. package/dist/frontend/src/lib/flow-path.js +40 -0
  83. package/dist/frontend/src/lib/focus-controls.js +149 -0
  84. package/dist/frontend/src/lib/protection-visual.js +46 -0
  85. package/dist/frontend/src/lib/query-language.js +240 -0
  86. package/dist/frontend/src/lib/row-filters.js +43 -0
  87. package/dist/frontend/src/lib/state.js +84 -0
  88. package/dist/frontend/src/main.js +83 -0
  89. package/dist/frontend/src/shell.js +184 -0
  90. package/dist/frontend/src/views/architecture-view.js +798 -0
  91. package/dist/frontend/src/views/inventory-view.js +292 -0
  92. package/dist/frontend/src/views/privacy-view.js +172 -0
  93. package/dist/frontend/src/views/trace-view.js +206 -0
  94. package/dist/frontend/styles/architecture-view.css +93 -0
  95. package/dist/frontend/styles/filter-rail.css +34 -0
  96. package/dist/frontend/styles/inspector.css +69 -0
  97. package/dist/frontend/styles/inventory-view.css +74 -0
  98. package/dist/frontend/styles/privacy-view.css +86 -0
  99. package/dist/frontend/styles/query-bar.css +107 -0
  100. package/dist/frontend/styles/shell.css +155 -0
  101. package/dist/frontend/styles/tokens.css +128 -0
  102. package/dist/frontend/styles/trace-view.css +95 -0
  103. package/package.json +13 -6
  104. package/src/dataflow/CLAUDE.md +1 -1
  105. package/src/dataflow/catalog.js +42 -0
  106. package/src/dataflow/orm-write-catalog.js +175 -0
  107. package/src/engine.js +92 -1
  108. package/src/ir/CLAUDE.md +1 -0
  109. package/src/ir/chrome-probe.mjs +150 -0
  110. package/src/ir/parser-js.js +94 -7
  111. package/src/lineage/CLAUDE.md +1203 -0
  112. package/src/lineage/DESIGN_DESTINATION_RESOLVER.md +156 -0
  113. package/src/lineage/DESIGN_GRAPH_BUILDER.md +938 -0
  114. package/src/lineage/DESIGN_HANDLING_ANALYZER.md +355 -0
  115. package/src/lineage/DESIGN_INTRAPROCEDURAL.md +628 -0
  116. package/src/lineage/DESIGN_PATH_PROVENANCE.md +3451 -0
  117. package/src/lineage/DESIGN_QUEUE_DETAIL.md +120 -0
  118. package/src/lineage/DESIGN_REGISTRIES.md +880 -0
  119. package/src/lineage/DESIGN_STORE_DETAIL.md +143 -0
  120. package/src/lineage/DESIGN_TRANSIT_PROTECTION.md +245 -0
  121. package/src/lineage/classification.js +56 -0
  122. package/src/lineage/coverage.js +658 -0
  123. package/src/lineage/cross-repo-link.js +107 -0
  124. package/src/lineage/dataflow-graph.schema.json +184 -0
  125. package/src/lineage/decision-story.js +206 -0
  126. package/src/lineage/drift-policy.js +279 -0
  127. package/src/lineage/driver.js +135 -0
  128. package/src/lineage/engine.js +992 -0
  129. package/src/lineage/export-briefing.js +628 -0
  130. package/src/lineage/export-csv.js +62 -0
  131. package/src/lineage/export-json.js +238 -0
  132. package/src/lineage/export-privacy.js +258 -0
  133. package/src/lineage/federation-loader.js +111 -0
  134. package/src/lineage/field-identity.js +78 -0
  135. package/src/lineage/fixtures/build-flagship-fixture.mjs +272 -0
  136. package/src/lineage/fixtures/flagship-graph.json +1453 -0
  137. package/src/lineage/flow-grade.js +221 -0
  138. package/src/lineage/governance-edit.js +169 -0
  139. package/src/lineage/graph-builder.js +1114 -0
  140. package/src/lineage/graph-diff.js +431 -0
  141. package/src/lineage/graph-snapshot.js +180 -0
  142. package/src/lineage/handling-analyzer.js +168 -0
  143. package/src/lineage/ids.js +349 -0
  144. package/src/lineage/impact-assessment.js +76 -0
  145. package/src/lineage/impact-engine.js +268 -0
  146. package/src/lineage/index.js +281 -0
  147. package/src/lineage/language-coverage-tiers.js +58 -0
  148. package/src/lineage/obligation-mapping.js +126 -0
  149. package/src/lineage/obligation-predicates.js +235 -0
  150. package/src/lineage/observation-adapters.js +282 -0
  151. package/src/lineage/observation-correlation.js +622 -0
  152. package/src/lineage/observation-store.js +497 -0
  153. package/src/lineage/path-query.js +410 -0
  154. package/src/lineage/path-store.js +400 -0
  155. package/src/lineage/protection.js +53 -0
  156. package/src/lineage/recipient-profile.js +192 -0
  157. package/src/lineage/recipient-registry.js +394 -0
  158. package/src/lineage/redact-graph.js +224 -0
  159. package/src/lineage/remediation.js +417 -0
  160. package/src/lineage/resolve-destination.js +91 -0
  161. package/src/lineage/runtime-observation.js +464 -0
  162. package/src/lineage/scenario-diff.js +84 -0
  163. package/src/lineage/scenario-engine.js +251 -0
  164. package/src/lineage/scenario.js +101 -0
  165. package/src/lineage/schema.js +167 -0
  166. package/src/lineage/sink-registry.js +427 -0
  167. package/src/lineage/source-registry.js +357 -0
  168. package/src/lineage/source-seeding.js +212 -0
  169. package/src/lineage/summaries.js +590 -0
  170. package/src/lineage/transform-catalog.js +397 -0
  171. package/src/lineage/transit-protection.js +150 -0
  172. package/src/lineage/validate.js +285 -0
  173. package/src/mcp/CLAUDE.md +7 -1
  174. package/src/mcp/dataflow-tools.js +160 -0
  175. package/src/mcp/server.js +1 -1
  176. package/src/mcp/tools.js +2 -1
  177. package/src/pipeline/scan-health.js +19 -1
  178. package/src/posture/CLAUDE.md +19 -0
  179. package/src/posture/artifact-registry.js +52 -0
  180. package/src/posture/auditor-walkthrough.js +76 -0
  181. package/src/posture/compliance-frameworks/hipaa-security-rule.json +3 -2
  182. package/src/posture/obligation-evidence-pack.js +202 -0
  183. package/src/posture/remediation-ledger.js +337 -0
  184. package/src/server/CLAUDE.md +47 -0
  185. package/src/server/graph-loader.js +141 -0
  186. package/src/server/http-server.js +325 -0
  187. package/src/server/routes.js +129 -0
  188. package/src/server/security.js +111 -0
  189. package/src/server/static-assets.js +144 -0
  190. package/src/shared/frontend-root.js +52 -0
  191. package/dist/11.index.js +0 -353
  192. package/dist/259.index.js +0 -975
  193. package/dist/317.index.js +0 -300
  194. package/dist/609.index.js +0 -741
  195. package/dist/838.index.js +0 -152
@@ -0,0 +1,93 @@
1
+ .arch-view {
2
+ width: 100%;
3
+ height: 100%;
4
+ min-height: 480px;
5
+ }
6
+
7
+ .arch-zone-label {
8
+ fill: var(--text-secondary);
9
+ font-family: var(--font-family);
10
+ font-size: var(--font-size-panel-title);
11
+ font-weight: 600;
12
+ }
13
+
14
+ .arch-zone-bg {
15
+ fill: var(--surface-panel);
16
+ stroke: var(--border-default);
17
+ stroke-width: var(--border-width);
18
+ }
19
+
20
+ .arch-node {
21
+ cursor: pointer;
22
+ }
23
+
24
+ .arch-node-box {
25
+ fill: var(--surface-elevated);
26
+ stroke: var(--border-default);
27
+ stroke-width: 1.5px;
28
+ rx: var(--radius-default);
29
+ }
30
+
31
+ .arch-node[data-selected="true"] .arch-node-box {
32
+ stroke: var(--accent-selection);
33
+ stroke-width: 2.5px;
34
+ }
35
+
36
+ .arch-node[data-dimmed="true"] {
37
+ opacity: 0.35;
38
+ }
39
+
40
+ .arch-node-label {
41
+ fill: var(--text-primary);
42
+ font-family: var(--font-family);
43
+ font-size: var(--font-size-node-title);
44
+ }
45
+
46
+ .arch-node-glyph {
47
+ fill: var(--text-secondary);
48
+ font-family: var(--font-mono);
49
+ font-size: 11px;
50
+ }
51
+
52
+ .arch-edge {
53
+ fill: none;
54
+ stroke-width: 2px;
55
+ cursor: pointer;
56
+ }
57
+
58
+ .arch-edge[data-dimmed="true"] {
59
+ opacity: 0.25;
60
+ }
61
+
62
+ .arch-edge[data-selected="true"] {
63
+ stroke-width: 3px;
64
+ }
65
+
66
+ .arch-edge-linestyle-dashed {
67
+ stroke-dasharray: 6 4;
68
+ }
69
+
70
+ .arch-edge-linestyle-dotted {
71
+ stroke-dasharray: 2 3;
72
+ }
73
+
74
+ .arch-edge-glyph {
75
+ font-family: var(--font-mono);
76
+ font-size: 11px;
77
+ }
78
+
79
+ /* Flow Summary panel (renderFlowSummary), rendered into the shell's context
80
+ rail — a plain HTML panel via el(), not part of the <svg> canvas above. */
81
+ .flow-summary {
82
+ display: flex;
83
+ flex-wrap: wrap;
84
+ align-items: center;
85
+ gap: var(--space-2);
86
+ width: 100%;
87
+ }
88
+
89
+ .flow-summary h4 {
90
+ margin: 0;
91
+ font-size: var(--font-size-panel-title);
92
+ color: var(--text-primary);
93
+ }
@@ -0,0 +1,34 @@
1
+ .filter-rail-group {
2
+ margin-bottom: var(--space-2);
3
+ }
4
+
5
+ .filter-rail-group h4 {
6
+ font-size: var(--font-size-body);
7
+ text-transform: uppercase;
8
+ color: var(--text-secondary);
9
+ margin: 0 0 var(--space-1) 0;
10
+ }
11
+
12
+ .filter-chip {
13
+ display: inline-block;
14
+ margin: 2px;
15
+ padding: 2px 8px;
16
+ border-radius: var(--radius-default);
17
+ border: 1px solid var(--border-default);
18
+ background: transparent;
19
+ color: var(--text-secondary);
20
+ font-family: var(--font-family);
21
+ font-size: var(--font-size-code);
22
+ cursor: pointer;
23
+ }
24
+
25
+ .filter-chip[data-active="true"] {
26
+ border-color: var(--accent-selection);
27
+ color: var(--text-primary);
28
+ background: var(--surface-elevated);
29
+ }
30
+
31
+ .filter-chip:focus-visible {
32
+ outline: 2px solid var(--accent-selection);
33
+ outline-offset: 2px;
34
+ }
@@ -0,0 +1,69 @@
1
+ .inspector {
2
+ color: var(--text-primary);
3
+ font-size: var(--font-size-body);
4
+ }
5
+
6
+ .inspector-title {
7
+ font-size: var(--font-size-panel-title);
8
+ margin: 0 0 var(--space-1) 0;
9
+ }
10
+
11
+ .inspector-claim {
12
+ color: var(--text-primary);
13
+ font-weight: 500;
14
+ margin-bottom: var(--space-2);
15
+ }
16
+
17
+ .inspector-section-title {
18
+ font-size: var(--font-size-body);
19
+ text-transform: uppercase;
20
+ color: var(--text-secondary);
21
+ margin: var(--space-2) 0 var(--space-1) 0;
22
+ }
23
+
24
+ .inspector-empty {
25
+ color: var(--text-secondary);
26
+ font-style: italic;
27
+ }
28
+
29
+ .inspector-evidence-list,
30
+ .inspector-limitations-list {
31
+ list-style: none;
32
+ padding: 0;
33
+ margin: 0;
34
+ }
35
+
36
+ .inspector-evidence-item {
37
+ display: flex;
38
+ flex-direction: column;
39
+ padding: var(--space-1) 0;
40
+ border-bottom: var(--border-width) solid var(--border-default);
41
+ }
42
+
43
+ .inspector-evidence-location {
44
+ color: var(--text-secondary);
45
+ font-family: var(--font-mono);
46
+ font-size: var(--font-size-code);
47
+ }
48
+
49
+ .inspector-limitations-list li {
50
+ padding: 4px 0;
51
+ color: var(--status-unknown);
52
+ }
53
+
54
+ .inspector-verdicts {
55
+ margin-top: var(--space-2);
56
+ }
57
+
58
+ .inspector-verdict-row {
59
+ display: flex;
60
+ align-items: center;
61
+ gap: var(--space-1);
62
+ padding: 4px 0;
63
+ }
64
+
65
+ .inspector-verdict-badge {
66
+ border: 1.5px solid;
67
+ border-radius: var(--radius-default);
68
+ padding: 2px 8px;
69
+ }
@@ -0,0 +1,74 @@
1
+ .inventory-view {
2
+ width: 100%;
3
+ overflow-x: auto;
4
+ }
5
+
6
+ .inventory-subnav {
7
+ display: flex;
8
+ flex-wrap: wrap;
9
+ gap: var(--space-1);
10
+ padding: var(--space-1) 0 var(--space-2) 0;
11
+ }
12
+
13
+ .inventory-subnav-button {
14
+ background: transparent;
15
+ border: var(--border-width) solid var(--border-default);
16
+ color: var(--text-secondary);
17
+ border-radius: var(--radius-default);
18
+ padding: 4px var(--space-1);
19
+ cursor: pointer;
20
+ font-family: var(--font-family);
21
+ font-size: var(--font-size-code);
22
+ white-space: nowrap;
23
+ }
24
+ .inventory-subnav-button[data-active="true"] {
25
+ color: var(--text-primary);
26
+ background: var(--surface-elevated);
27
+ box-shadow: inset 0 0 0 var(--border-width) var(--accent-selection);
28
+ }
29
+ .inventory-subnav-button:focus-visible {
30
+ outline: 2px solid var(--accent-selection);
31
+ outline-offset: 2px;
32
+ }
33
+
34
+ .inventory-table {
35
+ width: 100%;
36
+ border-collapse: collapse;
37
+ font-size: var(--font-size-body);
38
+ }
39
+
40
+ .inventory-table th {
41
+ text-align: left;
42
+ padding: var(--space-1) var(--space-2);
43
+ color: var(--text-secondary);
44
+ font-size: var(--font-size-panel-title);
45
+ text-transform: uppercase;
46
+ border-bottom: var(--border-width) solid var(--border-default);
47
+ background: var(--surface-panel);
48
+ position: sticky;
49
+ top: 0;
50
+ cursor: pointer;
51
+ }
52
+
53
+ .inventory-row {
54
+ cursor: pointer;
55
+ border-bottom: var(--border-width) solid var(--border-default);
56
+ }
57
+ .inventory-row td {
58
+ padding: var(--space-1) var(--space-2);
59
+ color: var(--text-primary);
60
+ }
61
+ .inventory-row:hover {
62
+ background: var(--surface-elevated);
63
+ }
64
+ .inventory-row[data-selected="true"] {
65
+ box-shadow: inset 3px 0 0 var(--accent-selection);
66
+ background: var(--surface-elevated);
67
+ }
68
+ .inventory-row[data-visible="false"] {
69
+ display: none;
70
+ }
71
+ .inventory-row:focus-visible {
72
+ outline: 2px solid var(--accent-selection);
73
+ outline-offset: -2px;
74
+ }
@@ -0,0 +1,86 @@
1
+ .privacy-view {
2
+ width: 100%;
3
+ overflow-x: auto;
4
+ }
5
+
6
+ .privacy-table {
7
+ width: 100%;
8
+ border-collapse: collapse;
9
+ font-size: var(--font-size-body);
10
+ }
11
+
12
+ .privacy-table th {
13
+ text-align: left;
14
+ padding: var(--space-1) var(--space-2);
15
+ color: var(--text-secondary);
16
+ font-size: var(--font-size-panel-title);
17
+ text-transform: uppercase;
18
+ border-bottom: var(--border-width) solid var(--border-default);
19
+ background: var(--surface-panel);
20
+ position: sticky;
21
+ top: 0;
22
+ }
23
+
24
+ .privacy-row {
25
+ cursor: pointer;
26
+ border-bottom: var(--border-width) solid var(--border-default);
27
+ }
28
+
29
+ .privacy-row:hover {
30
+ background: var(--surface-elevated);
31
+ }
32
+
33
+ .privacy-row[data-selected="true"] {
34
+ box-shadow: inset 3px 0 0 var(--accent-selection);
35
+ background: var(--surface-elevated);
36
+ }
37
+
38
+ .privacy-row[data-visible="false"] {
39
+ display: none;
40
+ }
41
+
42
+ .privacy-field-cell {
43
+ padding: var(--space-1) var(--space-2);
44
+ color: var(--text-primary);
45
+ font-weight: 500;
46
+ white-space: nowrap;
47
+ }
48
+
49
+ .privacy-stage-cell {
50
+ padding: var(--space-1) var(--space-2);
51
+ color: var(--text-secondary);
52
+ vertical-align: top;
53
+ }
54
+
55
+ .privacy-stage-cell-empty {
56
+ color: var(--border-default);
57
+ }
58
+
59
+ .privacy-stage-cell-empty-label {
60
+ color: inherit;
61
+ }
62
+
63
+ .privacy-protection-cell {
64
+ padding: var(--space-1) var(--space-2);
65
+ vertical-align: top;
66
+ white-space: nowrap;
67
+ }
68
+
69
+ .privacy-governance-badge {
70
+ display: inline-block;
71
+ border: 1px solid var(--status-unknown);
72
+ color: var(--status-unknown);
73
+ border-radius: var(--radius-default);
74
+ padding: 1px 6px;
75
+ font-size: var(--font-size-code);
76
+ margin-top: 4px;
77
+ }
78
+
79
+ .privacy-class-badge {
80
+ display: inline-block;
81
+ border-radius: var(--radius-default);
82
+ padding: 1px 6px;
83
+ font-size: var(--font-size-code);
84
+ margin-right: 4px;
85
+ border: 1px solid var(--border-default);
86
+ }
@@ -0,0 +1,107 @@
1
+ /* Query bar (PRD §15.2) — text input + saved-view chips, living inside the
2
+ shell's existing view-tabs row (shell.css's shell__view-tabs), and the
3
+ focus-control menu (PRD §15.3) appended into the context rail when a
4
+ node/flow is selected on Architecture View. */
5
+
6
+ .shell__query-bar-slot {
7
+ margin-left: auto;
8
+ display: flex;
9
+ align-items: center;
10
+ }
11
+
12
+ .query-bar {
13
+ display: flex;
14
+ align-items: center;
15
+ gap: var(--space-1);
16
+ }
17
+
18
+ .query-bar__input {
19
+ width: 280px;
20
+ padding: 4px var(--space-1);
21
+ border-radius: var(--radius-default);
22
+ border: var(--border-width) solid var(--border-default);
23
+ background: var(--surface-elevated);
24
+ color: var(--text-primary);
25
+ font-family: var(--font-mono);
26
+ font-size: var(--font-size-code);
27
+ }
28
+
29
+ .query-bar__input[aria-invalid="true"] {
30
+ border-color: var(--status-unprotected);
31
+ }
32
+
33
+ .query-bar__input:focus-visible {
34
+ outline: 2px solid var(--accent-selection);
35
+ outline-offset: 2px;
36
+ }
37
+
38
+ .query-bar__error {
39
+ display: none;
40
+ color: var(--status-unprotected);
41
+ font-size: var(--font-size-code);
42
+ max-width: 260px;
43
+ }
44
+
45
+ .query-bar__error[data-visible="true"] {
46
+ display: block;
47
+ }
48
+
49
+ .query-bar__saved-views {
50
+ display: flex;
51
+ gap: 4px;
52
+ }
53
+
54
+ .query-bar__saved-view-chip {
55
+ display: inline-block;
56
+ padding: 2px 8px;
57
+ border-radius: var(--radius-default);
58
+ border: var(--border-width) solid var(--border-default);
59
+ background: transparent;
60
+ color: var(--text-secondary);
61
+ font-family: var(--font-family);
62
+ font-size: var(--font-size-code);
63
+ cursor: pointer;
64
+ }
65
+
66
+ .query-bar__saved-view-chip:hover {
67
+ border-color: var(--accent-selection);
68
+ color: var(--text-primary);
69
+ }
70
+
71
+ .query-bar__saved-view-chip:focus-visible {
72
+ outline: 2px solid var(--accent-selection);
73
+ outline-offset: 2px;
74
+ }
75
+
76
+ .focus-control-menu {
77
+ display: flex;
78
+ flex-wrap: wrap;
79
+ gap: 4px;
80
+ margin-top: var(--space-1);
81
+ }
82
+
83
+ .focus-control-menu__button {
84
+ padding: 2px 8px;
85
+ border-radius: var(--radius-default);
86
+ border: var(--border-width) solid var(--border-default);
87
+ background: transparent;
88
+ color: var(--text-secondary);
89
+ font-family: var(--font-family);
90
+ font-size: var(--font-size-code);
91
+ cursor: pointer;
92
+ }
93
+
94
+ .focus-control-menu__button[data-focus-control="reset"] {
95
+ color: var(--text-primary);
96
+ border-color: var(--accent-selection);
97
+ }
98
+
99
+ .focus-control-menu__button:hover {
100
+ border-color: var(--accent-selection);
101
+ color: var(--text-primary);
102
+ }
103
+
104
+ .focus-control-menu__button:focus-visible {
105
+ outline: 2px solid var(--accent-selection);
106
+ outline-offset: 2px;
107
+ }
@@ -0,0 +1,155 @@
1
+ /* AppShell layout — PRD §7.7 five persistent regions on an 8px spacing grid. */
2
+
3
+ .shell {
4
+ display: grid;
5
+ grid-template-rows: var(--header-height) var(--view-tabs-height) 1fr var(--context-rail-height);
6
+ grid-template-columns: var(--left-rail-width) 1fr var(--right-inspector-width);
7
+ grid-template-areas:
8
+ "header header header"
9
+ "tabs tabs tabs"
10
+ "rail canvas inspector"
11
+ "rail context context";
12
+ height: 100vh;
13
+ width: 100vw;
14
+ background: var(--surface-canvas);
15
+ }
16
+
17
+ .shell__header {
18
+ grid-area: header;
19
+ display: flex;
20
+ align-items: center;
21
+ gap: var(--space-2);
22
+ padding: 0 var(--space-2);
23
+ background: var(--surface-panel);
24
+ border-bottom: var(--border-width) solid var(--border-default);
25
+ }
26
+
27
+ .shell__header-title {
28
+ font-size: var(--font-size-view-title);
29
+ font-weight: 600;
30
+ color: var(--text-primary);
31
+ }
32
+
33
+ .shell__header-meta {
34
+ color: var(--text-secondary);
35
+ font-size: var(--font-size-body);
36
+ }
37
+
38
+ .shell__coverage-banner {
39
+ grid-area: header;
40
+ align-self: end;
41
+ justify-self: stretch;
42
+ margin: 0 var(--space-2) 0 var(--space-2);
43
+ display: none;
44
+ }
45
+ .shell__coverage-banner[data-visible="true"] {
46
+ display: block;
47
+ background: var(--status-unknown);
48
+ color: var(--status-banner-text);
49
+ padding: 4px var(--space-2);
50
+ border-radius: var(--radius-default);
51
+ font-size: var(--font-size-body);
52
+ }
53
+
54
+ .shell__view-tabs {
55
+ grid-area: tabs;
56
+ display: flex;
57
+ align-items: center;
58
+ gap: var(--space-1);
59
+ padding: 0 var(--space-2);
60
+ background: var(--surface-panel);
61
+ border-bottom: var(--border-width) solid var(--border-default);
62
+ }
63
+
64
+ .shell__view-tab {
65
+ background: transparent;
66
+ border: none;
67
+ color: var(--text-secondary);
68
+ font-family: var(--font-family);
69
+ font-size: var(--font-size-panel-title);
70
+ padding: var(--space-1) var(--space-2);
71
+ border-radius: var(--radius-default);
72
+ cursor: pointer;
73
+ }
74
+ .shell__view-tab[aria-selected="true"] {
75
+ color: var(--text-primary);
76
+ background: var(--surface-elevated);
77
+ box-shadow: inset 0 0 0 var(--border-width) var(--accent-selection);
78
+ }
79
+ .shell__view-tab:focus-visible {
80
+ outline: 2px solid var(--accent-selection);
81
+ outline-offset: 2px;
82
+ }
83
+
84
+ .shell__left-rail {
85
+ grid-area: rail;
86
+ background: var(--surface-panel);
87
+ border-right: var(--border-width) solid var(--border-default);
88
+ padding: var(--space-2);
89
+ overflow-y: auto;
90
+ }
91
+
92
+ .shell__canvas {
93
+ grid-area: canvas;
94
+ overflow: auto;
95
+ padding: var(--space-2);
96
+ }
97
+
98
+ .shell__inspector {
99
+ grid-area: inspector;
100
+ background: var(--surface-panel);
101
+ border-left: var(--border-width) solid var(--border-default);
102
+ padding: var(--space-2);
103
+ overflow-y: auto;
104
+ }
105
+
106
+ .shell__context-rail {
107
+ grid-area: context;
108
+ background: var(--surface-panel);
109
+ border-top: var(--border-width) solid var(--border-default);
110
+ padding: 0 var(--space-2);
111
+ display: flex;
112
+ align-items: center;
113
+ color: var(--text-secondary);
114
+ font-size: var(--font-size-body);
115
+ }
116
+
117
+ .shell__inspector-toggle {
118
+ display: none;
119
+ background: transparent;
120
+ border: var(--border-width) solid var(--border-default);
121
+ color: var(--text-primary);
122
+ border-radius: var(--radius-default);
123
+ padding: 4px var(--space-1);
124
+ cursor: pointer;
125
+ font-family: var(--font-family);
126
+ font-size: var(--font-size-body);
127
+ }
128
+ .shell__inspector-toggle:focus-visible {
129
+ outline: 2px solid var(--accent-selection);
130
+ outline-offset: 2px;
131
+ }
132
+
133
+ @media (max-width: 1280px) {
134
+ .shell {
135
+ grid-template-columns: var(--left-rail-collapsed-width) 1fr 0;
136
+ }
137
+ .shell__inspector-toggle {
138
+ display: inline-flex;
139
+ align-items: center;
140
+ }
141
+ .shell__inspector {
142
+ position: fixed;
143
+ top: calc(var(--header-height) + var(--view-tabs-height));
144
+ right: 0;
145
+ bottom: var(--context-rail-height);
146
+ width: min(360px, 90vw);
147
+ z-index: 20;
148
+ box-shadow: -4px 0 16px rgba(0, 0, 0, 0.4);
149
+ transform: translateX(100%);
150
+ transition: transform var(--motion-duration) ease-out;
151
+ }
152
+ .shell__inspector[data-overlay-open="true"] {
153
+ transform: translateX(0);
154
+ }
155
+ }