@dailephd/my-frontend-observer 0.9.0 → 0.10.0

package/docs/reports/v0.9.1-batch2-hard-gate-validation-integration.md

@@ -0,0 +1,262 @@
+# v0.9.1 Batch 2 report: hard-gate validation integration
+
+## 1. VERDICT
+
+`PASS_V0_9_1_PWA_HARD_GATE_ISOLATION`
+
+The isolated PWA hard gate is now a permanent npm command. It is part of
+`npm run test:security`, and through that it is part of pre-release readiness.
+The full regression chain passed. No production file, dependency, or version
+changed. v0.9.1 implementation is complete. v0.9.1 is not released.
+
+## 2. Repository identity
+
+1. Repository: `C:\Users\daile\Projects\my-frontend-observer`
+2. Branch: `feature/v0.9.1-pwa-hard-gate-isolation`
+3. Starting HEAD: `6874fd4b9690244673bd1b0e39bad0dd01cf397d` (Batch 1 commit)
+4. Package version: `0.9.0` in `package.json`, in `package-lock.json`, and in
+   `package-lock.json` `packages[""]`
+5. `docs/reports/v0.9-architecture-retrieval.md` is still marked skip-worktree
+   (`git ls-files -v` shows `S`). It was not touched.
+6. Runtime: Node `v24.20.0`, Playwright `1.62.1`, Vitest `4.1.11`, Windows 11
+
+## 3. Batch 1 entry gate
+
+PASS. Batch 1 ended with `PASS_V0_9_1_BATCH1_PWA_HARD_GATE_ISOLATED` at
+`6874fd4`. At the start of Batch 2 the worktree was clean and HEAD was that
+commit. `tests/browser/pwaHardening.test.ts` still has every Batch 1 element: a
+fresh evidence root, server, temporary persistent profile, and BrowserContext
+for the gate. It also has the separate activation and control proofs, the shell
+precache proof, the `/api/` cache exclusion proof, the live evidence proof, the
+Node-side server-down proof, the offline shell reload, the stale-evidence
+absence checks, and deterministic cleanup. Batch 2 did not change that file.
+
+## 4. Root cause carried forward
+
+1. `OLD_READINESS_PREDICATE`: `(await navigator.serviceWorker.getRegistration())?.active !== undefined`
+2. `OLD_ACTIVE_VALUE_AT_FAILURE`: `null` (the worker was still installing)
+3. `OLD_CLIENT_CONTROLLER_AT_FAILURE`: `null`
+4. `WHY_OLD_PREDICATE_PASSED`: `null !== undefined` is `true`. The check passed
+   as soon as a registration existed, before activation or control. The server
+   then closed too early. The precache held only 5 entries, and the reload
+   failed with `net::ERR_CONNECTION_REFUSED`.
+5. `CORRECT_ACTIVE_PROOF`: `registration.active !== null`, read from
+   `await navigator.serviceWorker.ready`
+6. `CURRENT_CLIENT_CONTROL_PROOF`: `navigator.serviceWorker.controller !== null`
+
+Shared state hid the bug in normal order. Earlier tests in the same describe
+block had already activated a controlling worker on the same server origin.
+Selected alone, the server starts on a new random port, so no worker existed yet
+for that origin.
+
+Classification remains `TEST_DEFECT`. No product defect was found.
+
+## 5. Dedicated isolated command
+
+`package.json` now has exactly one new script:
+
+`"test:pwa-hard-gate": "vitest run --config vitest.browser.config.ts tests/browser/pwaHardening.test.ts -t \"HARD GATE\""`
+
+No alias was added. The command exists because a passing full browser or
+security suite does not prove that the hard gate can run on its own.
+
+Direct runs after adding the script:
+
+1. `npm run test:pwa-hard-gate` run 1: PASS (1 passed, 6 skipped)
+2. `npm run test:pwa-hard-gate` run 2, straight after: PASS (1 passed,
+   6 skipped)
+
+## 6. Security-suite integration
+
+`test:security` now runs three stages joined with `&&`:
+
+1. the existing unit security tests (unchanged)
+2. the existing browser security tests, including the full
+   `tests/browser/pwaHardening.test.ts` (unchanged)
+3. `npm run test:pwa-hard-gate` (new)
+
+The isolated run is added on top. The full PWA file still runs in stage 2.
+`test:browser` was not changed and still runs every `tests/browser/**/*.test.ts`
+file, including the full PWA file.
+
+## 7. Pre-release-readiness integration
+
+1. `PRE_RELEASE_WORKFLOW_ALREADY_CALLS_TEST_SECURITY = true`. The `candidate`
+   job in `.github/workflows/pre-release-readiness.yml` has the step
+   `Security test suite (npm run test:security)`.
+2. `WORKFLOW_YAML_CHANGE_REQUIRED = false`. Candidate readiness now gets the
+   isolated gate through the updated npm script. The workflow YAML was not
+   modified.
+
+## 8. Full PWA file validation
+
+`npx vitest run --config vitest.browser.config.ts tests/browser/pwaHardening.test.ts`
+
+PASS. 7 passed.
+
+## 9. Isolated hard-gate repeated validation
+
+1. Direct run 1 (section 5): PASS
+2. Direct run 2 (section 5): PASS
+3. First step of the regression chain: PASS (1 passed, 6 skipped)
+4. Inside `npm run test:security`: PASS (1 passed, 6 skipped)
+5. Last step of the regression chain, after every full suite: PASS
+   (1 passed, 6 skipped)
+
+Run 5 shows that the full suites did not become a hidden prerequisite again.
+
+## 10. Browser-suite validation
+
+`npm run test:browser`: PASS. 29 test files, 275 tests passed.
+
+## 11. Security-suite validation
+
+`npm run test:security`: PASS. The output shows all three stages ran:
+
+1. unit security: 16 files, 168 tests passed
+2. browser security: 3 files, 77 tests passed
+3. the npm banner `> @dailephd/my-frontend-observer@0.9.0 test:pwa-hard-gate`,
+   then 1 file, 1 test passed, 6 skipped
+
+Stage 3 was confirmed from the command output, not only from `package.json`.
+
+## 12. Full unit regression
+
+`npm test`: PASS. 89 test files, 1454 tests passed.
+
+No repository test checks package script strings, so no static script test was
+added. Running `npm run test:pwa-hard-gate` is the primary proof.
+
+## 13. Build validation
+
+`npm run build`: PASS. The Workbox precache still has 10 entries (7 unique
+URLs). `sw.js` has no runtime caching rules.
+
+## 14. Documentation validation
+
+`npm run check:docs`: PASS (17 required files). It ran in the regression chain
+after the documentation edits. It was run again after this report was written
+(see section 19).
+
+## 15. Package-boundary validation
+
+`npm pack --dry-run`: PASS. Candidate filename
+`dailephd-my-frontend-observer-0.9.0.tgz`, 369 files, 1.0 MB packed, 4.0 MB
+unpacked.
+
+The file list was searched for `tests/`, `.my-dev-kit-workflow`, `examples/`,
+`pwa-profile`, `hard-gate`, and the agent-control files. The only match was
+`docs/reports/v0.9.1-batch1-pwa-hard-gate-isolation.md`. That is a report
+included by the existing `"files": ["dist", "README.md", "CHANGELOG.md", "docs",
+"LICENSE"]` allowlist, like every other report. No tests, `examples/v09-demo`,
+workflow state, Chromium profiles, or evidence roots are in the package.
+
+## 16. Product-code audit
+
+`git diff --name-only 6874fd4` shows no path under `src/`, `viewer/`, or
+`.github/`. `viewer/vite.config.ts` and the service-worker caching policy were
+not changed.
+
+1. `PRODUCTION_FILES_CHANGED = false`
+2. `PRODUCT_SEMANTICS_CHANGED = false`
+3. `PRODUCT_DEFECT_DISCOVERED = false`
+
+## 17. Dependency/version audit
+
+1. `dependencies`, `devDependencies`, `peerDependencies`, and
+   `optionalDependencies` are the same as at `6874fd4`.
+2. `package-lock.json` did not change.
+3. The version is `0.9.0` in all three places.
+4. No `npm version`, `npm publish`, tag, GitHub Release, or release branch.
+
+## 18. Documentation reconciliation
+
+1. `docs/CURRENT_STATE.md`: the v0.9.1 section now says implementation complete
+   and unreleased. It records the reproduction, the two-part root cause, the
+   new ownership and proofs, the command integration, and that production
+   behavior is unchanged. The planning background is kept below it.
+2. `docs/ROADMAP.md`: only the v0.9.1 status wording changed, from planned to
+   implemented and unreleased. The objective, constraints, exclusions, and
+   acceptance are unchanged.
+3. `docs/PROJECT_OVERVIEW.md`: v0.9.1 is complete but unreleased. PWA
+   hard/security acceptance no longer depends on prior test order or
+   persistent browser state. v0.10 is still future.
+4. `docs/PROJECT_MILESTONES.md`: a status line was added to the existing
+   v0.9.1 maintenance note. It says the invariant is implemented and release is
+   pending. Milestone 9 semantics are unchanged.
+5. `docs/DEVELOPMENT.md`: the gate-isolation section now gives
+   `npm run test:pwa-hard-gate`, says when to run it, and says it must pass on
+   its own.
+6. `docs/CI_CD.md`: the v0.9.1 wording is now implemented. It says
+   `test:security` runs the isolated gate, that candidate readiness gets it
+   automatically, and that the workflow YAML did not change.
+7. `CHANGELOG.md`: one maintenance bullet under `[Unreleased]`. No `0.9.1`
+   section was created.
+
+`docs/plans/v0.9.1-implementation-plan.md`, the historical `docs/reports/v0.9-*.md`
+reports, and the Batch 1 report were not changed.
+
+The durable rule stays in `DEVELOPMENT.md`, `CI_CD.md`, and
+`PROJECT_MILESTONES.md`: tests labeled `HARD GATE`, `SECURITY GATE`, or
+`ACCEPTANCE GATE` must set up their own material prerequisites and pass on
+their own from fresh state. It is now implemented policy.
+
+## 19. Changed files
+
+1. `package.json`
+2. `CHANGELOG.md`
+3. `docs/CURRENT_STATE.md`
+4. `docs/ROADMAP.md`
+5. `docs/PROJECT_MILESTONES.md`
+6. `docs/PROJECT_OVERVIEW.md`
+7. `docs/DEVELOPMENT.md`
+8. `docs/CI_CD.md`
+9. `docs/reports/v0.9.1-batch2-hard-gate-validation-integration.md`
+
+Generated paths:
+
+1. Regression logs in the Claude Code session scratchpad `regression\` folder,
+   outside the repository and not committed
+2. `dist/` from `npm run build` (ignored build output)
+3. Temporary test directories under the OS temp directory. They were all
+   removed. After every run, no `my-frontend-observer-pwa-hard-gate-profile-*`,
+   `my-frontend-observer-pwa-hard-gate-evidence-*`, or
+   `my-frontend-observer-pwa-profile-*` directories remained.
+4. `npm pack --dry-run` wrote no tarball.
+
+Full regression order, all exit 0:
+
+1. `npm run test:pwa-hard-gate`
+2. `npm run typecheck`
+3. `npm run lint`
+4. `npm test`
+5. `npm run test:browser`
+6. `npm run test:security`
+7. `npm run build`
+8. `npm run check:docs`
+9. `npm pack --dry-run`
+10. `npm run test:pwa-hard-gate`
+
+After this report was written, `npm run check:docs` and `git diff --check`
+were run again before the commit.
+
+## 20. Remaining release-readiness work
+
+Not done in this batch, and not claimed:
+
+1. the v0.9.1 integration PR from this feature branch into `master`, with
+   required PR CI
+2. exact-candidate cross-platform pre-release readiness: one tarball, hashed,
+   installed on Windows, Linux, and macOS. `test:security` now includes the
+   isolated gate on each platform.
+3. release preparation: version bump to `0.9.1`, a `0.9.1` CHANGELOG section,
+   and final state documents
+4. user-authorized publication, tag, and GitHub Release
+
+Notes carried from Batch 1:
+
+1. The focused `/api/` cache test still uses the old weak `?.active !== undefined`
+   wait. It is correct in file order because it runs after the registration
+   test on the same origin. It is not labeled as a gate.
+2. `.my-dev-kit-workflow/v0.8/batch-08/pwa-profile` still exists on disk. No
+   test uses it.

package/docs/reports/v0.9.1-pre-release-readiness.md

@@ -0,0 +1,206 @@
+# v0.9.1 Pre-release Readiness
+
+## 1. VERDICT
+
+`PASS_V0_9_1_PR_RUN_A_COMPLETE`
+
+This report records the first complete cross-platform readiness proof for the
+v0.9.1 maintenance candidate. It is not final merged-master readiness. A new
+complete PR workflow is required after this report is committed because the
+report changes the candidate package.
+
+## 2. Repository identity
+
+- Repository: `dailephd/my-frontend-observer`
+- Local repository: `C:\Users\daile\Projects\my-frontend-observer`
+- Branch: `feature/v0.9.1-pwa-hard-gate-isolation`
+- Implementation entry HEAD: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+- Base before integration: `985d0ce47a070fd9f84eae478f4098df00d57bd8`
+- Feature contains base: PASS
+
+## 3. v0.9.1 maintenance scope
+
+v0.9.1 is a test and validation maintenance patch. It makes the PWA server-down
+HARD GATE independently reproducible and adds the permanent command
+`npm run test:pwa-hard-gate`. No production PWA behavior is intentionally
+changed.
+
+## 4. v0.9.0 baseline
+
+The package baseline remains `0.9.0`. `package.json`, `package-lock.json`, and
+`package-lock.json` `packages[""].version` all remain `0.9.0`.
+
+## 5. Batch 1 implementation
+
+Batch 1 is recorded in
+`docs/reports/v0.9.1-batch1-pwa-hard-gate-isolation.md`. The implementation
+isolates the server-down PWA test from prior test order, persistent Chromium
+profiles, and prior service-worker cache state.
+
+## 6. Batch 2 permanent gate integration
+
+Batch 2 is recorded in
+`docs/reports/v0.9.1-batch2-hard-gate-validation-integration.md`. The isolated
+gate is exposed as `npm run test:pwa-hard-gate` and is included in
+`npm run test:security`. No workflow YAML change was required.
+
+## 7. Product-change audit
+
+The implementation diff changes tests, scripts/package metadata, and
+documentation only. No intended changes occur under `src/`, `viewer/src/`, or
+`viewer/vite.config.ts`.
+
+- `PRODUCT_FILES_CHANGED = false`
+- `PRODUCT_SEMANTICS_CHANGED = false`
+- `PRODUCT_DEFECT_DISCOVERED = false`
+- `PRODUCT_CHANGE_REQUIRED = false`
+
+## 8. Isolated hard-gate invariant
+
+The prior readiness predicate was:
+
+```text
+registration?.active !== undefined
+```
+
+At failure time, active registration state was `null` and the current page
+controller was `null`. The old predicate falsely passed because `null !==
+undefined`. The corrected proof requires:
+
+```text
+registration.active !== null
+navigator.serviceWorker.controller !== null
+```
+
+The experiment also proves shell precache, zero `/api/` cache entries, live
+evidence visibility, actual server unavailability, offline shell rendering,
+evidence becoming unavailable, and stale evidence remaining absent.
+
+## 9. Local validation
+
+All required local commands passed:
+
+```text
+npm run test:pwa-hard-gate
+npm run typecheck
+npm run lint
+npm test
+npm run test:browser
+npm run test:security
+npm run build
+npm run check:docs
+npm pack --dry-run
+```
+
+The local security chain executed and passed `npm run test:pwa-hard-gate`.
+`LOCAL_SECURITY_CHAIN_ISOLATED_HARD_GATE = PASS`.
+
+## 10. PR_RUN_A identity
+
+- PR: #16
+- URL: https://github.com/dailephd/my-frontend-observer/pull/16
+- Event: `pull_request`
+- Head branch: `feature/v0.9.1-pwa-hard-gate-isolation`
+- Head SHA: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+- Run ID: `35624170324`
+- Run URL: https://github.com/dailephd/my-frontend-observer/actions/runs/35624170324
+- Conclusion: PASS
+
+## 11. Candidate package identity
+
+- Filename: `dailephd-my-frontend-observer-0.9.0.tgz`
+- SHA-256: `63ba0cee49dc976cd55515ae387c7d1e46b226fd090eb931483c9be3a92bfa5c`
+- File count: `370`
+- Package version: `0.9.0`
+- Candidate head SHA: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+
+The same exact candidate was verified by the Windows, Linux, and macOS smoke
+jobs.
+
+## 12. Candidate Linux security result
+
+The candidate job passed its security unit tests, browser security tests, and
+the final isolated gate invocation. Its log includes the exact command
+`npm run test:pwa-hard-gate`, one HARD GATE test passed with six focused tests
+skipped, and no failure.
+
+## 13. Windows exact-package result
+
+PASS. The Windows smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 14. Linux exact-package result
+
+PASS. The Linux smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 15. macOS exact-package result
+
+PASS. The macOS smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 16. Windows tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 17. Linux tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 18. macOS tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 19. Package-content audit
+
+The npm dry-run and exact candidate contents exclude implementation tests,
+temporary PWA profiles, temporary evidence roots, `.my-dev-kit-workflow/`,
+`examples/v09-demo/`, and generated tutorial artifacts. Normal `dist`, docs,
+license, README, changelog, and package metadata remain present.
+
+## 20. Schema/dependency/version audit
+
+- Observation schema: `1.2.0`
+- Comparison schema: `1.0.0`
+- Frontend contract schema: `1.0.0`
+- Evaluation schema: `1.0.0`
+- Bounded agent context schema: `1.0.0`
+- External reference schema: `1.0.0`
+- Visual annotation schema: `1.0.0`
+- Viewer protocol: `1.3.0`
+- `DEPENDENCY_CHANGED = false`
+- `PACKAGE_VERSION_CHANGED = false`
+- Package version: `0.9.0`
+
+## 21. Readiness-report candidate mutation
+
+This tracked report changes the candidate bytes because it is included under
+`docs/`. The report must therefore be committed and pushed, followed by a new
+complete PR workflow against the report-containing head.
+
+## 22. PR_RUN_B
+
+Not started at report creation. PR_RUN_B is required after the report commit
+and must pass the candidate, all three exact-package smoke jobs, and all three
+tutorial jobs.
+
+## 23. Integration handoff
+
+Integration is not yet authorized by this report alone. After PR_RUN_B passes,
+merge PR #16 using the repository merge-commit convention. Preserve both the
+implementation branch and the planning branch.
+
+## 24. Remaining exact-master validation
+
+After the merge, manually dispatch `Pre-release readiness` on the exact merged
+`master` SHA because the workflow does not run automatically on pushes to
+`master`. Require the complete seven-job matrix, verify the isolated hard gate
+again in the Linux candidate job, and leave local `master` at that validated
+merged SHA. Version bumping, tagging, publishing, GitHub Release creation, and
+release-branch creation remain out of scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dailephd/my-frontend-observer",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
@@ -34,7 +34,8 @@
     "lint": "eslint .",
     "test": "vitest run --passWithNoTests",
     "test:browser": "vitest run --config vitest.browser.config.ts --passWithNoTests",
-    "test:security": "vitest run tests/unit/policy.test.ts tests/unit/viewerServer.test.ts tests/unit/viewerEvidenceServer.test.ts tests/unit/referenceViewerServer.test.ts tests/unit/contextViewerServer.test.ts tests/unit/paths.test.ts tests/unit/evidenceDiscovery.test.ts tests/unit/projectWorkflow.test.ts tests/unit/projectCheckService.test.ts tests/unit/projectCheckResult.test.ts tests/unit/viewerAuthoringSecurity.test.ts tests/unit/viewerAnnotationAuthoring.test.ts tests/unit/viewerAnnotationEvidence.test.ts tests/unit/viewerAnnotationContractPromotion.test.ts tests/unit/viewerAnnotationReferenceMaterialization.test.ts tests/unit/evidenceDiscoveryTempDirectories.test.ts && vitest run --config vitest.browser.config.ts tests/browser/chromiumAdapter.test.ts tests/browser/pwaHardening.test.ts tests/browser/projectCheckWorkflow.test.ts",
+    "test:security": "vitest run tests/unit/policy.test.ts tests/unit/viewerServer.test.ts tests/unit/viewerEvidenceServer.test.ts tests/unit/referenceViewerServer.test.ts tests/unit/contextViewerServer.test.ts tests/unit/paths.test.ts tests/unit/evidenceDiscovery.test.ts tests/unit/projectWorkflow.test.ts tests/unit/projectCheckService.test.ts tests/unit/projectCheckResult.test.ts tests/unit/viewerAuthoringSecurity.test.ts tests/unit/viewerAnnotationAuthoring.test.ts tests/unit/viewerAnnotationEvidence.test.ts tests/unit/viewerAnnotationContractPromotion.test.ts tests/unit/viewerAnnotationReferenceMaterialization.test.ts tests/unit/evidenceDiscoveryTempDirectories.test.ts && vitest run --config vitest.browser.config.ts tests/browser/chromiumAdapter.test.ts tests/browser/pwaHardening.test.ts tests/browser/projectCheckWorkflow.test.ts && npm run test:pwa-hard-gate",
+    "test:pwa-hard-gate": "vitest run --config vitest.browser.config.ts tests/browser/pwaHardening.test.ts -t \"HARD GATE\"",
     "check:docs": "node scripts/check-docs.mjs"
   },
   "devDependencies": {

package/dist/viewer/assets/index-BN41MI7m.css

@@ -1 +0,0 @@
-:root{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light dark;--bg:#0f172a;--panel:#1e293b;--border:#334155;--text:#e2e8f0;--text-dim:#94a3b8;--accent:#38bdf8;--error-bg:#450a0a;--error-border:#dc2626}@media (prefers-color-scheme:dark){:root{--lightningcss-light: ;--lightningcss-dark:initial}}*{box-sizing:border-box}html,body,#root{height:100%;margin:0}body{background:var(--bg);color:var(--text);font-family:system-ui,-apple-system,Segoe UI,sans-serif}.app-shell{flex-direction:column;height:100%;display:flex}.app-shell__header{border-bottom:1px solid var(--border);justify-content:space-between;align-items:center;padding:.75rem 1rem;display:flex}.app-shell__identity{flex-direction:column;line-height:1.2;display:flex}.app-shell__title{font-size:1rem;font-weight:600}.app-shell__subtitle{color:var(--text-dim);font-size:.8rem}.status-banner{border-bottom:1px solid var(--border);justify-content:space-between;gap:1rem;padding:.4rem 1rem;font-size:.8rem;display:flex}.status-banner--loading,.status-banner--ok{color:var(--text-dim)}.status-banner--error{background:var(--error-bg);color:#fecaca;border-bottom-color:var(--error-border)}.app-shell__body{flex:1;grid-template-columns:220px 1fr 280px;min-height:0;display:grid}.app-shell__nav,.app-shell__workspace,.app-shell__details{padding:1rem;overflow:auto}.app-shell__nav{border-right:1px solid var(--border)}.app-shell__details{border-left:1px solid var(--border)}.placeholder-note{color:var(--text-dim);font-size:.85rem;line-height:1.5}.install-affordance{border:1px solid var(--border);border-radius:6px;padding:.35rem .7rem;font-size:.8rem}.install-affordance--available{background:var(--accent);color:#0f172a;border-color:var(--accent);cursor:pointer}.install-affordance--unavailable{color:var(--text-dim)}.evidence-list{flex-direction:column;gap:.4rem;margin:0;padding:0;list-style:none;display:flex}.evidence-list__truncated-note{color:var(--text-dim);font-size:.75rem}.evidence-list__item{text-align:left;background:var(--panel);border:1px solid var(--border);width:100%;color:var(--text);cursor:pointer;border-radius:6px;flex-direction:column;align-items:flex-start;gap:.15rem;padding:.4rem .5rem;font-size:.75rem;display:flex}.evidence-list__item--selected{border-color:var(--accent)}.evidence-list__family{font-weight:600}.evidence-list__id{color:var(--text-dim);font-family:monospace}.evidence-list__state{font-size:.7rem}.evidence-list__state--supported{color:#4ade80}.evidence-list__state--unsupported-version,.evidence-list__state--invalid-structure,.evidence-list__state--malformed-json,.evidence-list__state--unreadable{color:#f87171}.evidence-list__state--unrecognized-kind{color:var(--text-dim)}.evidence-list__error,.artifact-preview__error,.artifact-preview__unsupported{color:#fecaca;font-size:.85rem}.artifact-preview__summary{color:var(--text-dim);font-size:.85rem}.artifact-preview__raw{background:var(--panel);border:1px solid var(--border);white-space:pre-wrap;word-break:break-word;border-radius:6px;max-height:60vh;padding:.75rem;font-size:.7rem;overflow:auto}.evidence-details{font-size:.75rem}.evidence-details dt{color:var(--text-dim);margin-top:.5rem}.evidence-details dd{word-break:break-word;margin:.1rem 0 0}.observation-workspace{flex-direction:column;gap:.5rem;height:100%;font-size:.75rem;display:flex}.observation-workspace__toolbar{border-bottom:1px solid var(--border);gap:1rem;padding-bottom:.4rem;display:flex}.observation-workspace__toolbar label{cursor:pointer;align-items:center;gap:.3rem;display:flex}.observation-workspace__panes{flex:1;grid-template-columns:160px 1fr 260px;gap:.75rem;min-height:0;display:grid}.observation-workspace__targets,.observation-workspace__inspector{overflow:auto}.observation-workspace__visual{border:1px solid var(--border);background:#000;border-radius:6px;justify-content:center;align-items:flex-start;display:flex;overflow:auto}.target-overlay-svg{width:100%;height:auto;display:block}.target-overlay-svg__rect{fill:#38bdf81f;stroke:var(--accent);stroke-width:2px;cursor:pointer;vector-effect:non-scaling-stroke}.target-overlay-svg__rect--selected{fill:#4ade8033;stroke:#4ade80}.target-overlay-svg__rect:focus-visible{outline:2px solid #facc15}.target-overlay-svg__label{fill:#f8fafc;paint-order:stroke;stroke:#0f172a;stroke-width:3px;font-size:12px}.target-overlay-svg__relationship{stroke:#facc15;stroke-width:1.5px;stroke-dasharray:4 3;vector-effect:non-scaling-stroke}.target-list{flex-direction:column;gap:.3rem;margin:0;padding:0;list-style:none;display:flex}.target-list__item{text-align:left;background:var(--panel);border:1px solid var(--border);width:100%;color:var(--text);cursor:pointer;border-radius:6px;flex-direction:column;align-items:flex-start;padding:.3rem .45rem;font-size:.7rem;display:flex}.target-list__item--selected{border-color:#4ade80}.target-list__item--not-found,.target-list__item--ambiguous,.target-list__item--unavailable{opacity:.75}.target-list__name{font-family:monospace;font-weight:600}.target-list__status{color:var(--text-dim)}.inspector h3,.inspector h4{margin:.4rem 0 .3rem;font-size:.8rem}.inspector__fields{margin:0}.evidence-field{margin-bottom:.4rem}.evidence-field dt{color:var(--text-dim);font-size:.68rem}.evidence-field dd{word-break:break-word;margin:0}.evidence-field__source{color:var(--text-dim);font-size:.65rem}.evidence-field--unavailable dd,.evidence-field--not-applicable dd{color:var(--text-dim);font-style:italic}.relationships-section__note{color:var(--text-dim);font-size:.68rem}.relationships-section__list{margin:.3rem 0;padding:0;list-style:none}.relationships-section__unresolved{color:var(--text-dim);font-size:.68rem}.inspector__error{color:#fecaca}.target-overlay-svg__rect--highlighted{stroke:#facc15;fill:#facc1526}.comparison-workspace,.evaluation-workspace{flex-direction:column;gap:.6rem;height:100%;font-size:.75rem;display:flex;overflow:auto}.comparability-banner{border:1px solid var(--border);border-radius:6px;padding:.4rem .6rem}.comparability-banner--comparable{border-color:#4ade80}.comparability-banner--comparable-with-warnings{border-color:#facc15}.comparability-banner--incomparable{background:var(--error-bg);border-color:#f87171}.comparability-banner ul{margin:.3rem 0 0;padding-left:1rem}.comparability-reason--blocking{color:#fecaca}.comparability-reason--warning{color:#fde68a}.comparability-reason--unassessed{color:var(--text-dim)}.comparison-workspace__truncated{color:#fde68a;border:1px solid #facc15;border-radius:6px;padding:.4rem .6rem}.comparison-workspace__panes{grid-template-columns:1fr 1fr;gap:.75rem;min-height:260px;display:grid}.comparison-pane{border:1px solid var(--border);background:#000;border-radius:6px;padding:.4rem;overflow:auto}.comparison-pane__label{color:var(--text-dim);text-transform:uppercase;margin:0 0 .3rem;font-size:.7rem}.comparison-workspace__details,.evaluation-workspace__details{flex-direction:column;gap:.6rem;display:flex}.comparison-workspace__details section,.evaluation-workspace__details section{border-top:1px solid var(--border);padding-top:.4rem}.comparison-workspace__details h4,.evaluation-workspace__details h4{margin:0 0 .3rem;font-size:.75rem}.comparison-list{flex-direction:column;gap:.25rem;margin:0;padding:0;list-style:none;display:flex}.comparison-list__item{text-align:left;background:var(--panel);border:1px solid var(--border);width:100%;color:var(--text);cursor:pointer;border-radius:6px;padding:.3rem .45rem;font-size:.7rem}.comparison-list__item:disabled{cursor:default;opacity:.7}.comparison-list__meta{color:var(--text-dim);font-size:.65rem;display:block}.overall-verdict{text-align:center;border:2px solid var(--border);border-radius:8px;padding:.6rem .8rem;font-size:1rem}.overall-verdict--PASS{color:#4ade80;border-color:#4ade80}.overall-verdict--FAIL{color:#f87171;background:var(--error-bg);border-color:#f87171}.clause-list{flex-direction:column;gap:.3rem;margin:0;padding:0;list-style:none;display:flex}.clause-row{border:1px solid var(--border);border-radius:6px;padding:.3rem .45rem}.clause-row--fail{border-color:#f87171}.clause-row--pass{border-color:#4ade80}.clause-row--conflict{border-color:#fb923c}.clause-row--unavailable{border-color:var(--text-dim)}.clause-row__button{color:var(--text);text-align:left;cursor:pointer;background:0 0;border:none;flex-wrap:wrap;align-items:center;gap:.4rem;width:100%;font-size:.7rem;display:flex}.clause-row__button:disabled{cursor:default}.clause-row__id{font-family:monospace;font-weight:600}.clause-row__badge{border:1px solid var(--border);border-radius:4px;padding:.05rem .3rem;font-size:.6rem}.clause-row__badge--active{color:#4ade80;border-color:#4ade80}.clause-row__badge--superseded{color:var(--text-dim)}.clause-row__category{color:var(--text-dim);text-transform:uppercase;font-size:.6rem}.clause-row__status{margin-left:auto}.clause-row__unresolved{color:#fde68a;margin:.2rem 0 0;font-size:.65rem}.clause-row__primitive{color:var(--text-dim);word-break:break-word;margin:.2rem 0 0;font-family:monospace;font-size:.62rem}.reference-region-overlay-svg__rect--has-requirement{stroke-dasharray:4 2}.reference-workspace{flex-direction:column;gap:.6rem;height:100%;font-size:.75rem;display:flex;overflow:auto}.reference-workspace__panes{grid-template-columns:1fr 1fr;gap:.75rem;min-height:260px;display:grid}.reference-pane{border:1px solid var(--border);border-radius:6px;padding:.4rem;overflow:auto}.reference-workspace__candidate-select,.reference-workspace__evaluation-select{flex-direction:column;gap:.2rem;margin-bottom:.4rem;font-size:.7rem;display:flex}.reference-workspace__candidate-select select,.reference-workspace__evaluation-select select{background:var(--panel);color:var(--text);border:1px solid var(--border);border-radius:4px;padding:.2rem}.reference-workspace__details{flex-direction:column;gap:.6rem;display:flex}.reference-adequacy{border:1px solid var(--border);border-radius:6px;padding:.3rem .5rem;font-size:.7rem}.reference-adequacy--adequate{border-color:#4ade80}.reference-adequacy--partial{border-color:#facc15}.reference-adequacy--inadequate{border-color:#f87171}.target-overlay-svg--pannable{cursor:grab}.target-overlay-svg--pannable:active{cursor:grabbing}.zoom-controls{align-items:center;gap:.3rem;margin-bottom:.3rem;font-size:.68rem;display:flex}.zoom-controls button{background:var(--panel);color:var(--text);border:1px solid var(--border);cursor:pointer;border-radius:4px;padding:.1rem .4rem}.zoom-controls__scale{color:var(--text-dim);text-align:center;min-width:3rem}.reference-workspace__lock{align-items:center;gap:.4rem;margin-bottom:.4rem;font-size:.68rem;display:flex}.reference-workspace__lock button{background:var(--panel);color:var(--text);border:1px solid var(--border);cursor:pointer;border-radius:4px;padding:.15rem .5rem}.reference-workspace__lock button[aria-pressed=true]{color:#4ade80;border-color:#4ade80}.reference-workspace__lock button:disabled{cursor:default;opacity:.6}.reference-fidelity-panel{flex-direction:column;gap:.4rem;display:flex}.reference-fidelity-panel__toolbar button{background:var(--panel);color:var(--text);border:1px solid var(--border);cursor:pointer;border-radius:4px;padding:.25rem .6rem}.reference-fidelity-panel__toolbar button:disabled{cursor:default;opacity:.7}.reference-fidelity-panel__units{color:var(--text-dim);font-size:.62rem}.reference-fidelity-state{border:2px solid var(--border);border-radius:6px;padding:.4rem .6rem;font-size:.85rem}.reference-fidelity-state--pass{color:#4ade80;border-color:#4ade80}.reference-fidelity-state--fail{color:#f87171;background:var(--error-bg);border-color:#f87171}.reference-fidelity-state--not-evaluated{border-color:var(--text-dim);color:var(--text-dim)}.reference-workspace__independence-note{color:#fde68a;border-top:1px solid var(--border);padding-top:.3rem;font-size:.7rem}.app-shell__mode-toggle{gap:.3rem;margin-left:auto;margin-right:.5rem;display:flex}.app-shell__mode-toggle button{background:var(--panel);color:var(--text);border:1px solid var(--border);cursor:pointer;border-radius:4px;padding:.2rem .6rem;font-size:.75rem}.app-shell__mode-toggle button[aria-pressed=true]{border-color:var(--accent);color:var(--accent)}.app-shell__body--context{display:block}.app-shell__workspace--context{height:100%;padding:.75rem;overflow:auto}.context-workspace{flex-direction:column;gap:.8rem;font-size:.78rem;display:flex}.context-workspace section{border-top:1px solid var(--border);padding-top:.5rem}.context-summary-grid{grid-template-columns:max-content 1fr;gap:.2rem .8rem;font-size:.8rem;display:grid}.context-summary-grid dt{color:var(--text-dim)}.context-adequacy-badge{border:1px solid var(--border);border-radius:4px;padding:.05rem .4rem;font-weight:600;display:inline-block}.context-adequacy-badge--adequate{color:#4ade80;border-color:#4ade80}.context-adequacy-badge--partial{color:#facc15;border-color:#facc15}.context-adequacy-badge--inadequate{color:#f87171;border-color:#f87171}.context-sources{flex-direction:column;gap:.4rem;display:flex}.context-source-row{border:1px solid var(--border);border-radius:6px;flex-wrap:wrap;align-items:center;gap:.5rem;padding:.3rem .5rem;display:flex}.context-source-row__label{font-family:monospace}.context-source-row__status{border:1px solid var(--border);border-radius:4px;padding:.05rem .35rem;font-size:.7rem}.context-source-row__status--resolved{color:#4ade80;border-color:#4ade80}.context-source-row__status--ambiguous{color:#fb923c;border-color:#fb923c}.context-source-row__status--missing{border-color:var(--text-dim);color:var(--text-dim)}.context-target-source-list{margin:.3rem 0 0;padding-left:1rem;font-size:.7rem}.context-correlation-heading{color:var(--text-dim);margin:.2rem 0;font-size:.68rem}.context-correlation-row--selected{outline:1px solid var(--accent)}.context-required-loss{background:var(--error-bg);color:#fecaca;border:1px solid #f87171;border-radius:6px;padding:.4rem .6rem}.raw-evidence-viewer button{background:var(--panel);color:var(--text);border:1px solid var(--border);cursor:pointer;border-radius:4px;padding:.15rem .5rem;font-size:.68rem}.annotation-toolbar{border-bottom:1px solid var(--border);flex-wrap:wrap;align-items:center;gap:.75rem;padding-bottom:.4rem;display:flex}.annotation-toolbar .zoom-controls{margin-bottom:0}.annotation-toolbar__modes{gap:.25rem;display:flex}.annotation-toolbar__mode,.annotation-panel__actions button,.annotation-panel__association-actions button,.annotation-panel__saved-item{background:var(--panel);color:var(--text);border:1px solid var(--border);font:inherit;cursor:pointer;border-radius:4px;padding:.15rem .5rem}.annotation-toolbar__mode--active{border-color:var(--accent);background:#38bdf833}.annotation-panel__actions button:disabled,.annotation-panel__association-actions button:disabled{opacity:.5;cursor:not-allowed}.annotation-toolbar__note{align-items:center;gap:.3rem;display:flex}.annotation-toolbar__note input{width:12rem;font:inherit}.annotation-toolbar__read-only,.annotation-panel__read-only{color:var(--text-dim);font-style:italic}.annotation-panel{border-bottom:1px solid var(--border);flex-direction:column;gap:.4rem;margin-bottom:.6rem;padding-bottom:.6rem;display:flex}.annotation-panel h3,.annotation-panel h4{margin:.2rem 0}.annotation-panel__saved-list{flex-direction:column;gap:.25rem;margin:0;padding:0;list-style:none;display:flex}.annotation-panel__saved-item{text-align:left;flex-direction:column;width:100%;display:flex}.annotation-panel__saved-item--active{border-color:#4ade80}.annotation-panel__saved-id{word-break:break-all;font-family:ui-monospace,monospace}.annotation-panel__saved-meta,.annotation-panel__parent,.annotation-panel__interpretation{color:var(--text-dim);word-break:break-all;margin:0}.annotation-panel__actions,.annotation-panel__association-actions{flex-wrap:wrap;gap:.3rem;display:flex}.annotation-panel__association-actions label,.annotation-panel__note-editor{flex-direction:column;gap:.2rem;width:100%;display:flex}.annotation-panel__note-editor textarea{min-height:3rem;font:inherit}.annotation-panel__status--success{color:#4ade80}.annotation-panel__error{color:#fca5a5;margin:0}.target-overlay-svg__rect--inert{pointer-events:none}.target-overlay-svg--mode-point,.target-overlay-svg--mode-rectangle,.target-overlay-svg--mode-line,.target-overlay-svg--mode-arrow,.target-overlay-svg--mode-note{cursor:crosshair;touch-action:none}.target-overlay-svg--mode-pan{touch-action:none}.annotation-layer .annotation-layer__mark{pointer-events:none}.annotation-layer--selectable .annotation-layer__mark{pointer-events:visiblePainted;cursor:move}.annotation-layer__mark:focus-visible{outline:2px solid #facc15}.annotation-layer__shape{fill:none;stroke:#f472b6;stroke-width:3px;vector-effect:non-scaling-stroke}.annotation-layer__shape--area{fill:#f472b61f}.annotation-layer__shape--filled{fill:#f472b6}.annotation-layer__note-text{fill:#fdf2f8;paint-order:stroke;stroke:#500724;stroke-width:3px;font-size:14px}.annotation-layer__mark--selected .annotation-layer__shape{stroke:#facc15}.annotation-layer__mark--selected .annotation-layer__shape--filled{fill:#facc15}.annotation-layer__mark--preview .annotation-layer__shape{stroke-dasharray:6 4;opacity:.8}.reference-workspace>*{flex-shrink:0}.reference-pane .annotation-toolbar{margin-bottom:.3rem}.annotation-panel__group{border:1px solid var(--border);border-radius:4px;margin:0;padding:.3rem .4rem}.annotation-panel__group legend{color:var(--text-dim);padding:0 .2rem}.annotation-panel__requirement-form{flex-wrap:wrap;align-items:flex-end;gap:.3rem;display:flex}.annotation-panel__requirement-form label,.annotation-panel__association-actions label{flex-direction:column;gap:.15rem;display:flex}.annotation-panel__requirement-form button{background:var(--panel);color:var(--text);border:1px solid var(--border);font:inherit;cursor:pointer;border-radius:4px;padding:.15rem .5rem}.annotation-panel__requirement-form button:disabled{opacity:.5;cursor:not-allowed}.annotation-panel__hint{color:var(--text-dim);font-style:italic}.annotation-panel__intent{background:var(--panel);border:1px solid var(--border);white-space:pre-wrap;word-break:break-all;border-radius:4px;margin:0;padding:.3rem}.annotation-panel__proposal-list{word-break:break-all;margin:0;padding-left:1rem}.candidate-region-preview{pointer-events:none}.candidate-region-preview__rect{fill:none;stroke-width:2px;vector-effect:non-scaling-stroke}.candidate-region-preview__rect--create{stroke:#34d399;stroke-dasharray:8 4;fill:#34d3991a}.candidate-region-preview__rect--refine-original{stroke:#94a3b8;stroke-dasharray:2 3}.candidate-region-preview__rect--refine-candidate{stroke:#fb923c;stroke-dasharray:8 4;fill:#fb923c1a}.candidate-region-preview__label{fill:#ecfdf5;paint-order:stroke;stroke:#022c22;stroke-width:3px;font-size:11px}.annotation-panel__promotion{border-top:1px solid var(--border);flex-direction:column;gap:.3rem;padding-top:.4rem;display:flex}.annotation-panel__promotion button,.annotation-panel__group>button{background:var(--panel);color:var(--text);border:1px solid var(--border);font:inherit;cursor:pointer;border-radius:4px;align-self:flex-start;padding:.15rem .5rem}.annotation-panel__promotion button:disabled,.annotation-panel__group>button:disabled{opacity:.5;cursor:not-allowed}.annotation-panel__promotion-status{color:var(--text-dim);margin:.3rem 0}.annotation-panel__materialization .annotation-panel__status p{margin:0}