@i4ctime/q-ring 0.11.7 → 0.12.0

package/dist/dashboard-HHJY73JX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/dashboard.ts","../src/core/dashboard-client.ts","../src/core/dashboard-html.ts"],"sourcesContent":["/**\n * Quantum Status Dashboard: local HTTP server with SSE live updates.\n *\n * Collects a full snapshot of all quantum state every few seconds and\n * pushes it to connected browsers. Never exposes secret values.\n */\n\nimport { createServer, type IncomingMessage, type ServerResponse, type Server } from \"node:http\";\nimport { randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { listSecrets } from \"./keyring.js\";\nimport { checkDecay, type DecayStatus, type QuantumEnvelope } from \"./envelope.js\";\nimport { listEntanglements, type EntanglementPair } from \"./entanglement.js\";\nimport { tunnelList } from \"./tunnel.js\";\nimport { queryAudit, detectAnomalies, type AuditEvent, type AccessAnomaly, type AuditAction } from \"./observer.js\";\nimport { collapseEnvironment, readProjectConfig, type CollapseResult } from \"./collapse.js\";\nimport { listHooks, type HookEntry, type HookType } from \"./hooks.js\";\nimport { listApprovals } from \"./approval.js\";\nimport { listMemory } from \"./memory.js\";\nimport { getPolicySummary } from \"./policy.js\";\nimport { getDashboardHtml } from \"./dashboard-html.js\";\nimport { PACKAGE_VERSION } from \"../version.js\";\n\nexport interface SecretSnapshot {\n  key: string;\n  scope: string;\n  type: \"collapsed\" | \"superposition\";\n  environments?: string[];\n  defaultEnv?: string;\n  decay: DecayStatus;\n  accessCount: number;\n  lastAccessedAt?: string;\n  createdAt: string;\n  updatedAt: string;\n  description?: string;\n  tags?: string[];\n  entangled?: { service: string; key: string }[];\n  /** Validation provider name (e.g. \"openai\", \"stripe\") */\n  provider?: string;\n  /** Whether reads require explicit approval via MCP */\n  requiresApproval?: boolean;\n  /** Just-In-Time provisioner name, if any */\n  jitProvider?: string;\n  /** Whether the rotation format is declared on this envelope */\n  hasRotationFormat: boolean;\n}\n\nexport interface TunnelSnapshot {\n  id: string;\n  createdAt: number;\n  expiresAt?: number;\n  accessCount: number;\n  maxReads?: number;\n}\n\nexport interface ApprovalSnapshot {\n  id: string;\n  key: string;\n  scope: string;\n  reason: string;\n  grantedBy: string;\n  grantedAt: string;\n  expiresAt: string;\n  /** Seconds remaining until expiry; negative if expired */\n  secondsRemaining: number;\n  /** True if HMAC verifies and not expired */\n  valid: boolean;\n  /** True if HMAC failed (forged/tampered) */\n  tampered: boolean;\n}\n\nexport interface HookSnapshot {\n  id: string;\n  type: HookType;\n  description?: string;\n  enabled: boolean;\n  match: HookEntry[\"match\"];\n  /** A short, human-readable summary of the match criteria */\n  matchSummary: string;\n}\n\nexport interface ManifestSnapshot {\n  /** Total declared keys in `.q-ring.json` `secrets` */\n  declared: number;\n  /** Number marked `required: true` */\n  required: number;\n  /** Required keys that are missing from project scope */\n  missing: string[];\n  /** Required keys that are present but expired */\n  expired: string[];\n  /** Required keys that are present but stale */\n  stale: string[];\n}\n\nexport interface PolicySnapshot {\n  hasMcpPolicy: boolean;\n  hasExecPolicy: boolean;\n  hasSecretPolicy: boolean;\n  /** Counts per restriction so the UI can render at-a-glance dots */\n  counts: {\n    allowTools: number;\n    denyTools: number;\n    deniedKeys: number;\n    deniedTags: number;\n    allowCommands: number;\n    denyCommands: number;\n    requireApprovalForTags: number;\n    requireRotationFormatForTags: number;\n  };\n  maxTtlSeconds?: number;\n  maxRuntimeSeconds?: number;\n}\n\nexport interface AuditMetrics {\n  /** Counts grouped by action over the audited window */\n  byAction: Record<AuditAction, number>;\n  /** Counts by source (cli, mcp, agent, etc.) */\n  bySource: Record<string, number>;\n  /** Top accessed keys (read action) over the window */\n  topRead: Array<{ key: string; reads: number }>;\n  /** Total events read for the metrics window */\n  total: number;\n  /** Window covered by the metrics, in seconds */\n  windowSeconds: number;\n}\n\nexport interface ScopeBreakdown {\n  global: number;\n  project: number;\n  team: number;\n  org: number;\n}\n\nexport interface DashboardSnapshot {\n  /** Snapshot generation timestamp (ISO) */\n  timestamp: string;\n  /** q-ring version that produced the snapshot */\n  version: string;\n  /** Project path in use (for manifest/policy resolution) */\n  projectPath: string;\n  /** All visible secrets (no values) */\n  secrets: SecretSnapshot[];\n  /** Headline counts of secret health */\n  health: { healthy: number; stale: number; expired: number; noDecay: number; total: number };\n  /** Counts per scope */\n  scopes: ScopeBreakdown;\n  /** Secrets that require approval before MCP read */\n  protectedCount: number;\n  /** Active entanglement links */\n  entanglements: EntanglementPair[];\n  /** In-memory tunnels */\n  tunnels: TunnelSnapshot[];\n  /** Recent audit events (most recent first; \"list\" filtered out) */\n  audit: AuditEvent[];\n  /** Aggregate audit metrics (read counts, top keys, source breakdown) */\n  auditMetrics: AuditMetrics;\n  /** Detected access anomalies */\n  anomalies: AccessAnomaly[];\n  /** Auto-detected environment & detection source */\n  environment: CollapseResult | null;\n  /** `.q-ring.json` manifest analysis (declared vs missing) */\n  manifest: ManifestSnapshot | null;\n  /** Governance policy summary */\n  policy: PolicySnapshot;\n  /** Active approval tokens (HMAC-verified) */\n  approvals: ApprovalSnapshot[];\n  /** Registered hooks (shell/http/signal) */\n  hooks: HookSnapshot[];\n  /** Agent memory key count */\n  memoryKeys: number;\n}\n\nconst AUDIT_WINDOW_SECONDS = 24 * 60 * 60; // 24h\n\nfunction toSecretSnapshot(entry: {\n  key: string;\n  scope: string;\n  envelope?: QuantumEnvelope;\n  decay?: DecayStatus;\n}): SecretSnapshot {\n  const envelope = entry.envelope;\n  const decay = envelope ? checkDecay(envelope) : {\n    isExpired: false,\n    isStale: false,\n    lifetimePercent: 0,\n    secondsRemaining: null,\n    timeRemaining: null,\n  };\n\n  return {\n    key: entry.key,\n    scope: entry.scope,\n    type: envelope?.states ? \"superposition\" : \"collapsed\",\n    environments: envelope?.states ? Object.keys(envelope.states) : undefined,\n    defaultEnv: envelope?.defaultEnv,\n    decay,\n    accessCount: envelope?.meta.accessCount ?? 0,\n    lastAccessedAt: envelope?.meta.lastAccessedAt,\n    createdAt: envelope?.meta.createdAt ?? \"\",\n    updatedAt: envelope?.meta.updatedAt ?? \"\",\n    description: envelope?.meta.description,\n    tags: envelope?.meta.tags,\n    entangled: envelope?.meta.entangled,\n    provider: envelope?.meta.provider,\n    requiresApproval: envelope?.meta.requiresApproval,\n    jitProvider: envelope?.meta.jitProvider,\n    hasRotationFormat: !!envelope?.meta.rotationFormat,\n  };\n}\n\nfunction summariseHookMatch(match: HookEntry[\"match\"]): string {\n  const parts: string[] = [];\n  if (match.key) parts.push(`key=${match.key}`);\n  if (match.keyPattern) parts.push(`pattern=${match.keyPattern}`);\n  if (match.tag) parts.push(`tag=${match.tag}`);\n  if (match.scope) parts.push(`scope=${match.scope}`);\n  if (match.action?.length) parts.push(`on=${match.action.join(\"|\")}`);\n  return parts.length ? parts.join(\" · \") : \"any change\";\n}\n\nfunction buildManifest(\n  projectPath: string,\n  secrets: SecretSnapshot[],\n): ManifestSnapshot | null {\n  const config = readProjectConfig(projectPath);\n  if (!config?.secrets) return null;\n  const declared = Object.keys(config.secrets);\n  const projectSecrets = new Map(\n    secrets.filter((s) => s.scope === \"project\").map((s) => [s.key, s]),\n  );\n\n  const required: string[] = [];\n  const missing: string[] = [];\n  const expired: string[] = [];\n  const stale: string[] = [];\n\n  for (const key of declared) {\n    const entry = config.secrets[key];\n    if (entry.required) required.push(key);\n    const present = projectSecrets.get(key);\n    if (!present) {\n      if (entry.required) missing.push(key);\n      continue;\n    }\n    if (present.decay.isExpired) expired.push(key);\n    else if (present.decay.isStale) stale.push(key);\n  }\n\n  return {\n    declared: declared.length,\n    required: required.length,\n    missing,\n    expired,\n    stale,\n  };\n}\n\nfunction buildPolicySnapshot(projectPath: string): PolicySnapshot {\n  const summary = getPolicySummary(projectPath);\n  const mcp = summary.details.mcp ?? {};\n  const exec = summary.details.exec ?? {};\n  const sec = summary.details.secrets ?? {};\n  return {\n    hasMcpPolicy: summary.hasMcpPolicy,\n    hasExecPolicy: summary.hasExecPolicy,\n    hasSecretPolicy: summary.hasSecretPolicy,\n    counts: {\n      allowTools: mcp.allowTools?.length ?? 0,\n      denyTools: mcp.denyTools?.length ?? 0,\n      deniedKeys: mcp.deniedKeys?.length ?? 0,\n      deniedTags: mcp.deniedTags?.length ?? 0,\n      allowCommands: exec.allowCommands?.length ?? 0,\n      denyCommands: exec.denyCommands?.length ?? 0,\n      requireApprovalForTags: sec.requireApprovalForTags?.length ?? 0,\n      requireRotationFormatForTags: sec.requireRotationFormatForTags?.length ?? 0,\n    },\n    maxTtlSeconds: sec.maxTtlSeconds,\n    maxRuntimeSeconds: exec.maxRuntimeSeconds,\n  };\n}\n\nfunction buildAuditMetrics(events: AuditEvent[]): AuditMetrics {\n  const byAction = {} as Record<AuditAction, number>;\n  const bySource: Record<string, number> = {};\n  const readCounts = new Map<string, number>();\n\n  for (const e of events) {\n    byAction[e.action] = (byAction[e.action] ?? 0) + 1;\n    bySource[e.source] = (bySource[e.source] ?? 0) + 1;\n    if (e.action === \"read\" && e.key) {\n      readCounts.set(e.key, (readCounts.get(e.key) ?? 0) + 1);\n    }\n  }\n\n  const topRead = [...readCounts.entries()]\n    .map(([key, reads]) => ({ key, reads }))\n    .sort((a, b) => b.reads - a.reads)\n    .slice(0, 10);\n\n  return {\n    byAction,\n    bySource,\n    topRead,\n    total: events.length,\n    windowSeconds: AUDIT_WINDOW_SECONDS,\n  };\n}\n\nexport function collectSnapshot(): DashboardSnapshot {\n  const projectPath = process.cwd();\n  const entries = listSecrets({ source: \"api\", silent: true, projectPath });\n\n  const secrets = entries.map(toSecretSnapshot);\n\n  let healthy = 0;\n  let stale = 0;\n  let expired = 0;\n  let noDecay = 0;\n  let protectedCount = 0;\n  const scopes: ScopeBreakdown = { global: 0, project: 0, team: 0, org: 0 };\n\n  for (const s of secrets) {\n    if (!s.decay.timeRemaining) noDecay++;\n    else if (s.decay.isExpired) expired++;\n    else if (s.decay.isStale) stale++;\n    else healthy++;\n    if (s.requiresApproval) protectedCount++;\n    if (s.scope === \"global\") scopes.global++;\n    else if (s.scope === \"project\") scopes.project++;\n    else if (s.scope === \"team\") scopes.team++;\n    else if (s.scope === \"org\") scopes.org++;\n  }\n\n  const auditWindow = queryAudit({\n    since: new Date(Date.now() - AUDIT_WINDOW_SECONDS * 1000).toISOString(),\n  }).filter((e) => e.action !== \"list\");\n\n  const recent = auditWindow.slice(0, 80);\n\n  const approvals = listApprovals().map<ApprovalSnapshot>((a) => ({\n    id: a.id,\n    key: a.key,\n    scope: a.scope,\n    reason: a.reason,\n    grantedBy: a.grantedBy,\n    grantedAt: a.grantedAt,\n    expiresAt: a.expiresAt,\n    secondsRemaining: Math.floor(\n      (new Date(a.expiresAt).getTime() - Date.now()) / 1000,\n    ),\n    valid: a.valid && !a.tampered,\n    tampered: a.tampered,\n  }));\n\n  const hookEntries = listHooks().map<HookSnapshot>((h) => ({\n    id: h.id,\n    type: h.type,\n    description: h.description,\n    enabled: h.enabled,\n    match: h.match,\n    matchSummary: summariseHookMatch(h.match),\n  }));\n\n  return {\n    timestamp: new Date().toISOString(),\n    version: PACKAGE_VERSION,\n    projectPath,\n    secrets,\n    health: { healthy, stale, expired, noDecay, total: secrets.length },\n    scopes,\n    protectedCount,\n    entanglements: listEntanglements(),\n    tunnels: tunnelList(),\n    audit: recent,\n    auditMetrics: buildAuditMetrics(auditWindow),\n    anomalies: detectAnomalies(),\n    environment: collapseEnvironment({ projectPath }),\n    manifest: buildManifest(projectPath, secrets),\n    policy: buildPolicySnapshot(projectPath),\n    approvals,\n    hooks: hookEntries,\n    memoryKeys: listMemory().length,\n  };\n}\n\nexport interface DashboardServerOptions {\n  port?: number;\n}\n\nfunction timingSafeStringEqual(a: string, b: string): boolean {\n  const ab = Buffer.from(a, \"utf8\");\n  const bb = Buffer.from(b, \"utf8\");\n  if (ab.length !== bb.length) return false;\n  return timingSafeEqual(ab, bb);\n}\n\nexport function startDashboardServer(\n  options: DashboardServerOptions = {},\n): { port: number; token: string; url: string; close: () => void; server: Server } {\n  const port = options.port ?? 9876;\n  const clients = new Set<ServerResponse>();\n  let intervalHandle: ReturnType<typeof setInterval> | null = null;\n\n  // Per-launch bearer token. The dashboard binds to 127.0.0.1, but on a shared\n  // host any local user/process could otherwise read key names, the audit log,\n  // and approvals. Every route requires this token (passed as ?token=).\n  const token = randomBytes(24).toString(\"base64url\");\n  const html = getDashboardHtml(token);\n\n  function broadcast() {\n    const snapshot = collectSnapshot();\n    const data = `data: ${JSON.stringify(snapshot)}\\n\\n`;\n    for (const res of clients) {\n      if (res.writableEnded || res.destroyed) {\n        clients.delete(res);\n        continue;\n      }\n      try {\n        const ok = res.write(data);\n        if (!ok) {\n          clients.delete(res);\n          try { res.end(); } catch { try { res.destroy(); } catch { /* noop */ } }\n        }\n      } catch {\n        clients.delete(res);\n        try { res.end(); } catch { try { res.destroy(); } catch { /* noop */ } }\n      }\n    }\n  }\n\n  const server = createServer((req: IncomingMessage, res: ServerResponse) => {\n    let pathname: string;\n    let query: URLSearchParams;\n    try {\n      const parsed = new URL(req.url ?? \"/\", \"http://127.0.0.1\");\n      pathname = parsed.pathname;\n      query = parsed.searchParams;\n    } catch {\n      res.writeHead(400, { \"Content-Type\": \"text/plain; charset=utf-8\" });\n      res.end(\"Bad Request: invalid URL\");\n      return;\n    }\n\n    const provided = query.get(\"token\") ?? \"\";\n    if (!timingSafeStringEqual(provided, token)) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain; charset=utf-8\" });\n      res.end(\"Forbidden: missing or invalid token\");\n      return;\n    }\n\n    if (pathname === \"/events\") {\n      res.writeHead(200, {\n        \"Content-Type\": \"text/event-stream\",\n        \"Cache-Control\": \"no-cache\",\n        Connection: \"keep-alive\",\n      });\n\n      const snapshot = collectSnapshot();\n      res.write(`data: ${JSON.stringify(snapshot)}\\n\\n`);\n\n      clients.add(res);\n      req.on(\"close\", () => clients.delete(res));\n      return;\n    }\n\n    if (pathname === \"/api/status\") {\n      const snapshot = collectSnapshot();\n      res.writeHead(200, {\n        \"Content-Type\": \"application/json\",\n      });\n      res.end(JSON.stringify(snapshot, null, 2));\n      return;\n    }\n\n    res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(html);\n  });\n\n  server.listen(port, \"127.0.0.1\", () => {\n    intervalHandle = setInterval(broadcast, 5000);\n    if (intervalHandle && typeof intervalHandle === \"object\" && \"unref\" in intervalHandle) {\n      intervalHandle.unref();\n    }\n  });\n\n  return {\n    port,\n    token,\n    url: `http://127.0.0.1:${port}/?token=${token}`,\n    close: () => {\n      if (intervalHandle) clearInterval(intervalHandle);\n      for (const res of clients) {\n        try { res.end(); } catch { /* noop */ }\n      }\n      clients.clear();\n      server.close();\n    },\n    server,\n  };\n}\n","// AUTO-GENERATED by scripts/build-dashboard-client.mjs — do not edit by hand.\n// Bundled status-dashboard client: Preact 10.29.2 + htm 3.1.1 + app.\n// Source: src/dashboard-client/main.js. Regenerate with: pnpm run build:dashboard\n\nexport const DASHBOARD_CLIENT = \"\\\"use strict\\\";(()=>{var G,g,we,et,N,ge,Ce,Se,se,W,L,Me,le,ae,oe,tt,O={},Y=[],nt=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Q=Array.isArray;function R(t,e){for(var n in e)t[n]=e[n];return t}function re(t){t&&t.parentNode&&t.parentNode.removeChild(t)}function ce(t,e,n){var s,o,a,l={};for(a in e)a==\\\"key\\\"?s=e[a]:a==\\\"ref\\\"?o=e[a]:l[a]=e[a];if(arguments.length>2&&(l.children=arguments.length>3?G.call(arguments,2):n),typeof t==\\\"function\\\"&&t.defaultProps!=null)for(a in t.defaultProps)l[a]===void 0&&(l[a]=t.defaultProps[a]);return z(t,l,s,o,null)}function z(t,e,n,s,o){var a={type:t,props:e,key:n,ref:s,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:o==null?++we:o,__i:-1,__u:0};return o==null&&g.vnode!=null&&g.vnode(a),a}function X(t){return t.children}function K(t,e){this.props=t,this.context=e}function D(t,e){if(e==null)return t.__?D(t.__,t.__i+1):null;for(var n;e<t.__k.length;e++)if((n=t.__k[e])!=null&&n.__e!=null)return n.__e;return typeof t.type==\\\"function\\\"?D(t):null}function st(t){if(t.__P&&t.__d){var e=t.__v,n=e.__e,s=[],o=[],a=R({},e);a.__v=e.__v+1,g.vnode&&g.vnode(a),de(t.__P,a,e,t.__n,t.__P.namespaceURI,32&e.__u?[n]:null,s,n==null?D(e):n,!!(32&e.__u),o),a.__v=e.__v,a.__.__k[a.__i]=a,Re(s,a,o),e.__e=e.__=null,a.__e!=n&&Ae(a)}}function Ae(t){if((t=t.__)!=null&&t.__c!=null)return t.__e=t.__c.base=null,t.__k.some(function(e){if(e!=null&&e.__e!=null)return t.__e=t.__c.base=e.__e}),Ae(t)}function ke(t){(!t.__d&&(t.__d=!0)&&N.push(t)&&!J.__r++||ge!=g.debounceRendering)&&((ge=g.debounceRendering)||Ce)(J)}function J(){try{for(var t,e=1;N.length;)N.length>e&&N.sort(Se),t=N.shift(),e=N.length,st(t)}finally{N.length=J.__r=0}}function Ee(t,e,n,s,o,a,l,d,_,c,i){var r,p,v,f,C,k,y,h=s&&s.__k||Y,$=e.length;for(_=at(n,e,h,_,$),r=0;r<$;r++)(v=n.__k[r])!=null&&(p=v.__i!=-1&&h[v.__i]||O,v.__i=r,k=de(t,v,p,o,a,l,d,_,c,i),f=v.__e,v.ref&&p.ref!=v.ref&&(p.ref&&ue(p.ref,null,v),i.push(v.ref,v.__c||f,v)),C==null&&f!=null&&(C=f),(y=!!(4&v.__u))||p.__k===v.__k?(_=Pe(v,_,t,y),y&&p.__e&&(p.__e=null)):typeof v.type==\\\"function\\\"&&k!==void 0?_=k:f&&(_=f.nextSibling),v.__u&=-7);return n.__e=C,_}function at(t,e,n,s,o){var a,l,d,_,c,i=n.length,r=i,p=0;for(t.__k=new Array(o),a=0;a<o;a++)(l=e[a])!=null&&typeof l!=\\\"boolean\\\"&&typeof l!=\\\"function\\\"?(typeof l==\\\"string\\\"||typeof l==\\\"number\\\"||typeof l==\\\"bigint\\\"||l.constructor==String?l=t.__k[a]=z(null,l,null,null,null):Q(l)?l=t.__k[a]=z(X,{children:l},null,null,null):l.constructor===void 0&&l.__b>0?l=t.__k[a]=z(l.type,l.props,l.key,l.ref?l.ref:null,l.__v):t.__k[a]=l,_=a+p,l.__=t,l.__b=t.__b+1,d=null,(c=l.__i=ot(l,n,_,r))!=-1&&(r--,(d=n[c])&&(d.__u|=2)),d==null||d.__v==null?(c==-1&&(o>i?p--:o<i&&p++),typeof l.type!=\\\"function\\\"&&(l.__u|=4)):c!=_&&(c==_-1?p--:c==_+1?p++:(c>_?p--:p++,l.__u|=4))):t.__k[a]=null;if(r)for(a=0;a<i;a++)(d=n[a])!=null&&(2&d.__u)==0&&(d.__e==s&&(s=D(d)),Ne(d,d));return s}function Pe(t,e,n,s){var o,a;if(typeof t.type==\\\"function\\\"){for(o=t.__k,a=0;o&&a<o.length;a++)o[a]&&(o[a].__=t,e=Pe(o[a],e,n,s));return e}t.__e!=e&&(s&&(e&&t.type&&!e.parentNode&&(e=D(t)),n.insertBefore(t.__e,e||null)),e=t.__e);do e=e&&e.nextSibling;while(e!=null&&e.nodeType==8);return e}function ot(t,e,n,s){var o,a,l,d=t.key,_=t.type,c=e[n],i=c!=null&&(2&c.__u)==0;if(c===null&&d==null||i&&d==c.key&&_==c.type)return n;if(s>(i?1:0)){for(o=n-1,a=n+1;o>=0||a<e.length;)if((c=e[l=o>=0?o--:a++])!=null&&(2&c.__u)==0&&d==c.key&&_==c.type)return l}return-1}function be(t,e,n){e[0]==\\\"-\\\"?t.setProperty(e,n==null?\\\"\\\":n):t[e]=n==null?\\\"\\\":typeof n!=\\\"number\\\"||nt.test(e)?n:n+\\\"px\\\"}function V(t,e,n,s,o){var a,l;e:if(e==\\\"style\\\")if(typeof n==\\\"string\\\")t.style.cssText=n;else{if(typeof s==\\\"string\\\"&&(t.style.cssText=s=\\\"\\\"),s)for(e in s)n&&e in n||be(t.style,e,\\\"\\\");if(n)for(e in n)s&&n[e]==s[e]||be(t.style,e,n[e])}else if(e[0]==\\\"o\\\"&&e[1]==\\\"n\\\")a=e!=(e=e.replace(Me,\\\"$1\\\")),l=e.toLowerCase(),e=l in t||e==\\\"onFocusOut\\\"||e==\\\"onFocusIn\\\"?l.slice(2):e.slice(2),t.l||(t.l={}),t.l[e+a]=n,n?s?n[L]=s[L]:(n[L]=le,t.addEventListener(e,a?oe:ae,a)):t.removeEventListener(e,a?oe:ae,a);else{if(o==\\\"http://www.w3.org/2000/svg\\\")e=e.replace(/xlink(H|:h)/,\\\"h\\\").replace(/sName$/,\\\"s\\\");else if(e!=\\\"width\\\"&&e!=\\\"height\\\"&&e!=\\\"href\\\"&&e!=\\\"list\\\"&&e!=\\\"form\\\"&&e!=\\\"tabIndex\\\"&&e!=\\\"download\\\"&&e!=\\\"rowSpan\\\"&&e!=\\\"colSpan\\\"&&e!=\\\"role\\\"&&e!=\\\"popover\\\"&&e in t)try{t[e]=n==null?\\\"\\\":n;break e}catch{}typeof n==\\\"function\\\"||(n==null||n===!1&&e[4]!=\\\"-\\\"?t.removeAttribute(e):t.setAttribute(e,e==\\\"popover\\\"&&n==1?\\\"\\\":n))}}function xe(t){return function(e){if(this.l){var n=this.l[e.type+t];if(e[W]==null)e[W]=le++;else if(e[W]<n[L])return;return n(g.event?g.event(e):e)}}}function de(t,e,n,s,o,a,l,d,_,c){var i,r,p,v,f,C,k,y,h,$,b,T,F,B,ne,P=e.type;if(e.constructor!==void 0)return null;128&n.__u&&(_=!!(32&n.__u),a=[d=e.__e=n.__e]),(i=g.__b)&&i(e);e:if(typeof P==\\\"function\\\")try{if(y=e.props,h=P.prototype&&P.prototype.render,$=(i=P.contextType)&&s[i.__c],b=i?$?$.props.value:i.__:s,n.__c?k=(r=e.__c=n.__c).__=r.__E:(h?e.__c=r=new P(y,b):(e.__c=r=new K(y,b),r.constructor=P,r.render=lt),$&&$.sub(r),r.state||(r.state={}),r.__n=s,p=r.__d=!0,r.__h=[],r._sb=[]),h&&r.__s==null&&(r.__s=r.state),h&&P.getDerivedStateFromProps!=null&&(r.__s==r.state&&(r.__s=R({},r.__s)),R(r.__s,P.getDerivedStateFromProps(y,r.__s))),v=r.props,f=r.state,r.__v=e,p)h&&P.getDerivedStateFromProps==null&&r.componentWillMount!=null&&r.componentWillMount(),h&&r.componentDidMount!=null&&r.__h.push(r.componentDidMount);else{if(h&&P.getDerivedStateFromProps==null&&y!==v&&r.componentWillReceiveProps!=null&&r.componentWillReceiveProps(y,b),e.__v==n.__v||!r.__e&&r.shouldComponentUpdate!=null&&r.shouldComponentUpdate(y,r.__s,b)===!1){e.__v!=n.__v&&(r.props=y,r.state=r.__s,r.__d=!1),e.__e=n.__e,e.__k=n.__k,e.__k.some(function(H){H&&(H.__=e)}),Y.push.apply(r.__h,r._sb),r._sb=[],r.__h.length&&l.push(r);break e}r.componentWillUpdate!=null&&r.componentWillUpdate(y,r.__s,b),h&&r.componentDidUpdate!=null&&r.__h.push(function(){r.componentDidUpdate(v,f,C)})}if(r.context=b,r.props=y,r.__P=t,r.__e=!1,T=g.__r,F=0,h)r.state=r.__s,r.__d=!1,T&&T(e),i=r.render(r.props,r.state,r.context),Y.push.apply(r.__h,r._sb),r._sb=[];else do r.__d=!1,T&&T(e),i=r.render(r.props,r.state,r.context),r.state=r.__s;while(r.__d&&++F<25);r.state=r.__s,r.getChildContext!=null&&(s=R(R({},s),r.getChildContext())),h&&!p&&r.getSnapshotBeforeUpdate!=null&&(C=r.getSnapshotBeforeUpdate(v,f)),B=i!=null&&i.type===X&&i.key==null?Te(i.props.children):i,d=Ee(t,Q(B)?B:[B],e,n,s,o,a,l,d,_,c),r.base=e.__e,e.__u&=-161,r.__h.length&&l.push(r),k&&(r.__E=r.__=null)}catch(H){if(e.__v=null,_||a!=null)if(H.then){for(e.__u|=_?160:128;d&&d.nodeType==8&&d.nextSibling;)d=d.nextSibling;a[a.indexOf(d)]=null,e.__e=d}else{for(ne=a.length;ne--;)re(a[ne]);ie(e)}else e.__e=n.__e,e.__k=n.__k,H.then||ie(e);g.__e(H,e,n)}else a==null&&e.__v==n.__v?(e.__k=n.__k,e.__e=n.__e):d=e.__e=it(n.__e,e,n,s,o,a,l,_,c);return(i=g.diffed)&&i(e),128&e.__u?void 0:d}function ie(t){t&&(t.__c&&(t.__c.__e=!0),t.__k&&t.__k.some(ie))}function Re(t,e,n){for(var s=0;s<n.length;s++)ue(n[s],n[++s],n[++s]);g.__c&&g.__c(e,t),t.some(function(o){try{t=o.__h,o.__h=[],t.some(function(a){a.call(o)})}catch(a){g.__e(a,o.__v)}})}function Te(t){return typeof t!=\\\"object\\\"||t==null||t.__b>0?t:Q(t)?t.map(Te):t.constructor!==void 0?null:R({},t)}function it(t,e,n,s,o,a,l,d,_){var c,i,r,p,v,f,C,k=n.props||O,y=e.props,h=e.type;if(h==\\\"svg\\\"?o=\\\"http://www.w3.org/2000/svg\\\":h==\\\"math\\\"?o=\\\"http://www.w3.org/1998/Math/MathML\\\":o||(o=\\\"http://www.w3.org/1999/xhtml\\\"),a!=null){for(c=0;c<a.length;c++)if((v=a[c])&&\\\"setAttribute\\\"in v==!!h&&(h?v.localName==h:v.nodeType==3)){t=v,a[c]=null;break}}if(t==null){if(h==null)return document.createTextNode(y);t=document.createElementNS(o,h,y.is&&y),d&&(g.__m&&g.__m(e,a),d=!1),a=null}if(h==null)k===y||d&&t.data==y||(t.data=y);else{if(a=h==\\\"textarea\\\"&&y.defaultValue!=null?null:a&&G.call(t.childNodes),!d&&a!=null)for(k={},c=0;c<t.attributes.length;c++)k[(v=t.attributes[c]).name]=v.value;for(c in k)v=k[c],c==\\\"dangerouslySetInnerHTML\\\"?r=v:c==\\\"children\\\"||c in y||c==\\\"value\\\"&&\\\"defaultValue\\\"in y||c==\\\"checked\\\"&&\\\"defaultChecked\\\"in y||V(t,c,null,v,o);for(c in y)v=y[c],c==\\\"children\\\"?p=v:c==\\\"dangerouslySetInnerHTML\\\"?i=v:c==\\\"value\\\"?f=v:c==\\\"checked\\\"?C=v:d&&typeof v!=\\\"function\\\"||k[c]===v||V(t,c,v,k[c],o);if(i)d||r&&(i.__html==r.__html||i.__html==t.innerHTML)||(t.innerHTML=i.__html),e.__k=[];else if(r&&(t.innerHTML=\\\"\\\"),Ee(e.type==\\\"template\\\"?t.content:t,Q(p)?p:[p],e,n,s,h==\\\"foreignObject\\\"?\\\"http://www.w3.org/1999/xhtml\\\":o,a,l,a?a[0]:n.__k&&D(n,0),d,_),a!=null)for(c=a.length;c--;)re(a[c]);d&&h!=\\\"textarea\\\"||(c=\\\"value\\\",h==\\\"progress\\\"&&f==null?t.removeAttribute(\\\"value\\\"):f!=null&&(f!==t[c]||h==\\\"progress\\\"&&!f||h==\\\"option\\\"&&f!=k[c])&&V(t,c,f,k[c],o),c=\\\"checked\\\",C!=null&&C!=t[c]&&V(t,c,C,k[c],o))}return t}function ue(t,e,n){try{if(typeof t==\\\"function\\\"){var s=typeof t.__u==\\\"function\\\";s&&t.__u(),s&&e==null||(t.__u=t(e))}else t.current=e}catch(o){g.__e(o,n)}}function Ne(t,e,n){var s,o;if(g.unmount&&g.unmount(t),(s=t.ref)&&(s.current&&s.current!=t.__e||ue(s,null,e)),(s=t.__c)!=null){if(s.componentWillUnmount)try{s.componentWillUnmount()}catch(a){g.__e(a,e)}s.base=s.__P=null}if(s=t.__k)for(o=0;o<s.length;o++)s[o]&&Ne(s[o],e,n||typeof t.type!=\\\"function\\\");n||re(t.__e),t.__c=t.__=t.__e=void 0}function lt(t,e,n){return this.constructor(t,n)}function qe(t,e,n){var s,o,a,l;e==document&&(e=document.documentElement),g.__&&g.__(t,e),o=(s=typeof n==\\\"function\\\")?null:n&&n.__k||e.__k,a=[],l=[],de(e,t=(!s&&n||e).__k=ce(X,null,[t]),o||O,O,e.namespaceURI,!s&&n?[n]:o?null:e.firstChild?G.call(e.childNodes):null,a,!s&&n?n:o?o.__e:e.firstChild,s,l),Re(a,t,l)}G=Y.slice,g={__e:function(t,e,n,s){for(var o,a,l;e=e.__;)if((o=e.__c)&&!o.__)try{if((a=o.constructor)&&a.getDerivedStateFromError!=null&&(o.setState(a.getDerivedStateFromError(t)),l=o.__d),o.componentDidCatch!=null&&(o.componentDidCatch(t,s||{}),l=o.__d),l)return o.__E=o}catch(d){t=d}throw t}},we=0,et=function(t){return t!=null&&t.constructor===void 0},K.prototype.setState=function(t,e){var n;n=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=R({},this.state),typeof t==\\\"function\\\"&&(t=t(R({},n),this.props)),t&&R(n,t),t!=null&&this.__v&&(e&&this._sb.push(e),ke(this))},K.prototype.forceUpdate=function(t){this.__v&&(this.__e=!0,t&&this.__h.push(t),ke(this))},K.prototype.render=X,N=[],Ce=typeof Promise==\\\"function\\\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,Se=function(t,e){return t.__v.__b-e.__v.__b},J.__r=0,se=Math.random().toString(8),W=\\\"__d\\\"+se,L=\\\"__a\\\"+se,Me=/(PointerCapture)$|Capture$/i,le=0,ae=xe(!1),oe=xe(!0),tt=0;var U,x,_e,He,I=0,Ve=[],w=g,De=w.__b,je=w.__r,Le=w.diffed,Ue=w.__c,Ie=w.unmount,Fe=w.__;function ve(t,e){w.__h&&w.__h(x,t,I||e),I=0;var n=x.__H||(x.__H={__:[],__h:[]});return t>=n.__.length&&n.__.push({}),n.__[t]}function q(t){return I=1,rt(ze,t)}function rt(t,e,n){var s=ve(U++,2);if(s.t=t,!s.__c&&(s.__=[n?n(e):ze(void 0,e),function(d){var _=s.__N?s.__N[0]:s.__[0],c=s.t(_,d);_!==c&&(s.__N=[c,s.__[1]],s.__c.setState({}))}],s.__c=x,!x.__f)){var o=function(d,_,c){if(!s.__c.__H)return!0;var i=s.__c.__H.__.filter(function(p){return p.__c});if(i.every(function(p){return!p.__N}))return!a||a.call(this,d,_,c);var r=s.__c.props!==d;return i.some(function(p){if(p.__N){var v=p.__[0];p.__=p.__N,p.__N=void 0,v!==p.__[0]&&(r=!0)}}),a&&a.call(this,d,_,c)||r};x.__f=!0;var a=x.shouldComponentUpdate,l=x.componentWillUpdate;x.componentWillUpdate=function(d,_,c){if(this.__e){var i=a;a=void 0,o(d,_,c),a=i}l&&l.call(this,d,_,c)},x.shouldComponentUpdate=o}return s.__N||s.__}function ee(t,e){var n=ve(U++,3);!w.__s&&We(n.__H,e)&&(n.__=t,n.u=e,x.__H.__h.push(n))}function fe(t){return I=5,te(function(){return{current:t}},[])}function te(t,e){var n=ve(U++,7);return We(n.__H,e)&&(n.__=t(),n.__H=e,n.__h=t),n.__}function ye(t,e){return I=8,te(function(){return t},e)}function ct(){for(var t;t=Ve.shift();){var e=t.__H;if(t.__P&&e)try{e.__h.some(Z),e.__h.some(pe),e.__h=[]}catch(n){e.__h=[],w.__e(n,t.__v)}}}w.__b=function(t){x=null,De&&De(t)},w.__=function(t,e){t&&e.__k&&e.__k.__m&&(t.__m=e.__k.__m),Fe&&Fe(t,e)},w.__r=function(t){je&&je(t),U=0;var e=(x=t.__c).__H;e&&(_e===x?(e.__h=[],x.__h=[],e.__.some(function(n){n.__N&&(n.__=n.__N),n.u=n.__N=void 0})):(e.__h.some(Z),e.__h.some(pe),e.__h=[],U=0)),_e=x},w.diffed=function(t){Le&&Le(t);var e=t.__c;e&&e.__H&&(e.__H.__h.length&&(Ve.push(e)!==1&&He===w.requestAnimationFrame||((He=w.requestAnimationFrame)||dt)(ct)),e.__H.__.some(function(n){n.u&&(n.__H=n.u),n.u=void 0})),_e=x=null},w.__c=function(t,e){e.some(function(n){try{n.__h.some(Z),n.__h=n.__h.filter(function(s){return!s.__||pe(s)})}catch(s){e.some(function(o){o.__h&&(o.__h=[])}),e=[],w.__e(s,n.__v)}}),Ue&&Ue(t,e)},w.unmount=function(t){Ie&&Ie(t);var e,n=t.__c;n&&n.__H&&(n.__H.__.some(function(s){try{Z(s)}catch(o){e=o}}),n.__H=void 0,e&&w.__e(e,n.__v))};var Be=typeof requestAnimationFrame==\\\"function\\\";function dt(t){var e,n=function(){clearTimeout(s),Be&&cancelAnimationFrame(e),setTimeout(t)},s=setTimeout(n,35);Be&&(e=requestAnimationFrame(n))}function Z(t){var e=x,n=t.__c;typeof n==\\\"function\\\"&&(t.__c=void 0,n()),x=e}function pe(t){var e=x;t.__c=t.__(),x=e}function We(t,e){return!t||t.length!==e.length||e.some(function(n,s){return n!==t[s]})}function ze(t,e){return typeof e==\\\"function\\\"?e(t):e}var Oe=function(t,e,n,s){var o;e[0]=0;for(var a=1;a<e.length;a++){var l=e[a++],d=e[a]?(e[0]|=l?1:2,n[e[a++]]):e[++a];l===3?s[0]=d:l===4?s[1]=Object.assign(s[1]||{},d):l===5?(s[1]=s[1]||{})[e[++a]]=d:l===6?s[1][e[++a]]+=d+\\\"\\\":l?(o=t.apply(d,Oe(t,d,n,[\\\"\\\",null])),s.push(o),d[0]?e[0]|=2:(e[a-2]=0,e[a]=o)):s.push(d)}return s},Ke=new Map;function Ye(t){var e=Ke.get(this);return e||(e=new Map,Ke.set(this,e)),(e=Oe(this,e.get(t)||(e.set(t,e=(function(n){for(var s,o,a=1,l=\\\"\\\",d=\\\"\\\",_=[0],c=function(p){a===1&&(p||(l=l.replace(/^\\\\s*\\\\n\\\\s*|\\\\s*\\\\n\\\\s*$/g,\\\"\\\")))?_.push(0,p,l):a===3&&(p||l)?(_.push(3,p,l),a=2):a===2&&l===\\\"...\\\"&&p?_.push(4,p,0):a===2&&l&&!p?_.push(5,0,!0,l):a>=5&&((l||!p&&a===5)&&(_.push(a,0,l,o),a=6),p&&(_.push(a,p,0,o),a=6)),l=\\\"\\\"},i=0;i<n.length;i++){i&&(a===1&&c(),c(i));for(var r=0;r<n[i].length;r++)s=n[i][r],a===1?s===\\\"<\\\"?(c(),_=[_],a=3):l+=s:a===4?l===\\\"--\\\"&&s===\\\">\\\"?(a=1,l=\\\"\\\"):l=s+l[0]:d?s===d?d=\\\"\\\":l+=s:s==='\\\"'||s===\\\"'\\\"?d=s:s===\\\">\\\"?(c(),a=1):a&&(s===\\\"=\\\"?(a=5,o=l,l=\\\"\\\"):s===\\\"/\\\"&&(a<5||n[i][r+1]===\\\">\\\")?(c(),a===3&&(_=_[0]),a=_,(_=_[0]).push(2,0,a),a=0):s===\\\" \\\"||s===\\\"\\t\\\"||s===`\\n`||s===\\\"\\\\r\\\"?(c(),a=2):l+=s),a===3&&l===\\\"!--\\\"&&(a=4,_=_[0])}return c(),_})(t)),e),arguments,[])).length>1?e:e[0]}var u=Ye.bind(ce),Je=window.__QRING__&&window.__QRING__.token||\\\"\\\",he=Je?\\\"?token=\\\"+encodeURIComponent(Je):\\\"\\\",A=t=>'<svg width=\\\"14\\\" height=\\\"14\\\" viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"url(#neon-grad)\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\">'+t+\\\"</svg>\\\",m={health:A('<path d=\\\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\\\"/>'),environment:A('<polyline points=\\\"22 12 18 12 15 21 9 3 6 12 2 12\\\"/>'),decay:A('<path d=\\\"M5 22h14\\\"/><path d=\\\"M5 2h14\\\"/><path d=\\\"M17 22v-4.172a2 2 0 0 0-.586-1.414L12 12l-4.414 4.414A2 2 0 0 0 7 17.828V22\\\"/><path d=\\\"M7 2v4.172a2 2 0 0 0 .586 1.414L12 12l4.414-4.414A2 2 0 0 0 17 6.172V2\\\"/>'),superposition:A('<polygon points=\\\"12 2 2 7 12 12 22 7 12 2\\\"/><polyline points=\\\"2 17 12 22 22 17\\\"/><polyline points=\\\"2 12 12 17 22 12\\\"/>'),entangle:A('<path d=\\\"M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71\\\"/><path d=\\\"M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71\\\"/>'),tunnel:A('<path d=\\\"M9 10h.01\\\"/><path d=\\\"M15 10h.01\\\"/><path d=\\\"M12 2a8 8 0 0 0-8 8v12l3-3 2.5 2.5L12 19l2.5 2.5L17 19l3 3V10a8 8 0 0 0-8-8z\\\"/>'),anomaly:A('<path d=\\\"M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z\\\"/><line x1=\\\"12\\\" y1=\\\"9\\\" x2=\\\"12\\\" y2=\\\"13\\\"/><line x1=\\\"12\\\" y1=\\\"17\\\" x2=\\\"12.01\\\" y2=\\\"17\\\"/>'),audit:A('<circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"10\\\"/><circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"6\\\"/><circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"2\\\"/>'),key:A('<path d=\\\"M21 2l-2 2m-7.61 7.61a5.5 5.5 0 1 1-7.778 7.778 5.5 5.5 0 0 1 7.777-7.777zm0 0L15.5 7.5m0 0l3 3L22 7l-3-3m-3.5 3.5L19 4\\\"/>'),hook:A('<path d=\\\"M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71\\\"/><path d=\\\"M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71\\\"/>'),approve:A('<path d=\\\"M9 11l3 3L22 4\\\"/><path d=\\\"M21 12v7a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h11\\\"/>'),manifest:A('<path d=\\\"M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z\\\"/><polyline points=\\\"14 2 14 8 20 8\\\"/><line x1=\\\"16\\\" y1=\\\"13\\\" x2=\\\"8\\\" y2=\\\"13\\\"/><line x1=\\\"16\\\" y1=\\\"17\\\" x2=\\\"8\\\" y2=\\\"17\\\"/>'),policy:A('<path d=\\\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\\\"/><path d=\\\"M9 12l2 2 4-4\\\"/>'),memory:A('<rect x=\\\"4\\\" y=\\\"4\\\" width=\\\"16\\\" height=\\\"16\\\" rx=\\\"2\\\"/><rect x=\\\"9\\\" y=\\\"9\\\" width=\\\"6\\\" height=\\\"6\\\"/><line x1=\\\"9\\\" y1=\\\"2\\\" x2=\\\"9\\\" y2=\\\"4\\\"/><line x1=\\\"15\\\" y1=\\\"2\\\" x2=\\\"15\\\" y2=\\\"4\\\"/><line x1=\\\"9\\\" y1=\\\"20\\\" x2=\\\"9\\\" y2=\\\"22\\\"/><line x1=\\\"15\\\" y1=\\\"20\\\" x2=\\\"15\\\" y2=\\\"22\\\"/><line x1=\\\"20\\\" y1=\\\"9\\\" x2=\\\"22\\\" y2=\\\"9\\\"/><line x1=\\\"20\\\" y1=\\\"14\\\" x2=\\\"22\\\" y2=\\\"14\\\"/><line x1=\\\"2\\\" y1=\\\"9\\\" x2=\\\"4\\\" y2=\\\"9\\\"/><line x1=\\\"2\\\" y1=\\\"14\\\" x2=\\\"4\\\" y2=\\\"14\\\"/>'),folder:'<svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><path d=\\\"M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z\\\"/></svg>',search:'<svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><circle cx=\\\"11\\\" cy=\\\"11\\\" r=\\\"8\\\"/><line x1=\\\"21\\\" y1=\\\"21\\\" x2=\\\"16.65\\\" y2=\\\"16.65\\\"/></svg>',lock:'<svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><rect x=\\\"3\\\" y=\\\"11\\\" width=\\\"18\\\" height=\\\"11\\\" rx=\\\"2\\\" ry=\\\"2\\\"/><path d=\\\"M7 11V7a5 5 0 0 1 10 0v4\\\"/></svg>'};function me(t){if(!t)return\\\"env-default\\\";let e=t.toLowerCase();return e===\\\"prod\\\"||e===\\\"production\\\"?\\\"env-prod\\\":e===\\\"staging\\\"||e===\\\"stage\\\"?\\\"env-staging\\\":e===\\\"dev\\\"||e===\\\"development\\\"?\\\"env-dev\\\":e===\\\"test\\\"||e===\\\"testing\\\"?\\\"env-test\\\":\\\"env-default\\\"}function Qe(t,e){return e||t>=90?\\\"var(--danger)\\\":t>=75?\\\"var(--warning)\\\":\\\"var(--accent)\\\"}function Xe(t){let e=new Date(t);return String(e.getHours()).padStart(2,\\\"0\\\")+\\\":\\\"+String(e.getMinutes()).padStart(2,\\\"0\\\")+\\\":\\\"+String(e.getSeconds()).padStart(2,\\\"0\\\")}function Ze(t){if(!t)return\\\"\\\\u2014\\\";let e=Math.floor((Date.now()-new Date(t).getTime())/1e3);return isNaN(e)?\\\"\\\\u2014\\\":e<5?\\\"just now\\\":e<60?e+\\\"s ago\\\":e<3600?Math.floor(e/60)+\\\"m ago\\\":e<86400?Math.floor(e/3600)+\\\"h ago\\\":Math.floor(e/86400)+\\\"d ago\\\"}function $e(t){return t==null?\\\"\\\\u2014\\\":t<0?\\\"expired\\\":t<60?t+\\\"s\\\":t<3600?Math.floor(t/60)+\\\"m\\\":t<86400?Math.floor(t/3600)+\\\"h\\\":Math.floor(t/86400)+\\\"d\\\"}var j=({svg:t})=>u`<span style=\\\"display:contents\\\" dangerouslySetInnerHTML=${{__html:t}} />`;function S({icon:t,title:e,aside:n,asideStyle:s}){return u`<div class=\\\"card-title\\\">\\n    <${j} svg=${t} />${e}\\n    ${n!=null?u`<span class=\\\"title-aside\\\" style=${s||\\\"\\\"}>${n}</span>`:null}\\n  </div>`}function M({delay:t=0,wide:e=!1,style:n=\\\"\\\",children:s}){let o=\\\"card\\\"+(e?\\\" grid-wide\\\":\\\"\\\"),a=\\\"animation-delay:\\\"+t+\\\"ms\\\"+(n?\\\";\\\"+n:\\\"\\\");return u`<div class=${o} style=${a}>${s}</div>`}function E({children:t,cta:e}){return u`<div class=\\\"empty\\\">${t}${e?u`<span class=\\\"empty-cta\\\">${e}</span>`:null}</div>`}function Ge({snap:t,paused:e,connState:n,onPause:s,onRefresh:o,lastUpdate:a}){let l=e?\\\"paused\\\":n===\\\"live\\\"?\\\"live\\\":n===\\\"reconnecting\\\"?\\\"reconnecting\\\\u2026\\\":\\\"connecting\\\\u2026\\\",d=\\\"status-dot\\\"+(e?\\\" paused\\\":n===\\\"reconnecting\\\"?\\\" disconnected\\\":\\\"\\\");return u`\\n    <header class=\\\"header\\\">\\n      <div class=\\\"header-left\\\">\\n        <h1>\\n          <span class=\\\"q-icon\\\"><svg width=\\\"26\\\" height=\\\"26\\\" viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"url(#neon-grad)\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\" aria-hidden=\\\"true\\\" focusable=\\\"false\\\"><circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"10\\\"/><circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"6\\\"/><circle cx=\\\"12\\\" cy=\\\"12\\\" r=\\\"2\\\"/></svg></span>\\n          <span class=\\\"brand\\\">q-ring</span>\\n          <span class=\\\"sub\\\">quantum status</span>\\n        </h1>\\n        <span class=\\\"meta-chip\\\" title=\\\"q-ring version\\\">\\n          <svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><polyline points=\\\"20 6 9 17 4 12\\\"/></svg>\\n          ${\\\" v\\\"+(t?t.version:\\\"\\\")}\\n        </span>\\n        <span class=\\\"meta-chip\\\" title=\\\"Project working directory\\\">\\n          <${j} svg=${m.folder} /> ${t?t.projectPath:\\\"\\\"}\\n        </span>\\n      </div>\\n      <div class=\\\"header-right\\\">\\n        <span class=\\\"conn-label\\\" title=\\\"Last update from the live stream\\\"><span>${a}</span></span>\\n        <button class=\\\"btn\\\" type=\\\"button\\\" title=\\\"Pause / resume the live stream (P)\\\" onClick=${s}>\\n          ${e?u`<svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><polygon points=\\\"5 3 19 12 5 21 5 3\\\"/></svg>`:u`<svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><rect x=\\\"6\\\" y=\\\"4\\\" width=\\\"4\\\" height=\\\"16\\\" rx=\\\"1\\\"/><rect x=\\\"14\\\" y=\\\"4\\\" width=\\\"4\\\" height=\\\"16\\\" rx=\\\"1\\\"/></svg>`}\\n          <span>${e?\\\"Resume\\\":\\\"Pause\\\"}</span>\\n        </button>\\n        <button class=\\\"btn\\\" type=\\\"button\\\" title=\\\"Force-refresh now (R)\\\" onClick=${o}>\\n          <svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><path d=\\\"M21 12a9 9 0 1 1-3.5-7.1\\\"/><polyline points=\\\"21 3 21 9 15 9\\\"/></svg>\\n          Refresh\\n        </button>\\n        <a class=\\\"btn\\\" href=${\\\"/api/status\\\"+he} target=\\\"_blank\\\" rel=\\\"noopener\\\" title=\\\"Open the raw JSON snapshot in a new tab\\\">\\n          <svg viewBox=\\\"0 0 24 24\\\" fill=\\\"none\\\" stroke=\\\"currentColor\\\" stroke-width=\\\"2\\\" stroke-linecap=\\\"round\\\" stroke-linejoin=\\\"round\\\"><polyline points=\\\"16 18 22 12 16 6\\\"/><polyline points=\\\"8 6 2 12 8 18\\\"/></svg>\\n          JSON\\n        </a>\\n        <span class=\\\"conn-label\\\"><span class=${d}></span><span>${l}</span></span>\\n      </div>\\n    </header>\\n  `}function ut({snap:t}){let e=t,n=e.auditMetrics||{total:0,byAction:{},topRead:[]},s=n.byAction.read||0,o=(n.byAction.write||0)+(n.byAction.delete||0)+(n.byAction.rotate||0),a=n.byAction.policy_deny||0,l=(e.hooks||[]).filter(i=>i.enabled).length,d=(e.approvals||[]).filter(i=>i.valid).length,_=(e.anomalies||[]).length,c=[{label:\\\"Secrets\\\",icon:m.key,value:e.health.total,sub:e.health.healthy+\\\" healthy \\\\xB7 \\\"+e.health.stale+\\\" stale \\\\xB7 \\\"+e.health.expired+\\\" expired\\\",cls:\\\"\\\"},{label:\\\"Environment\\\",icon:m.environment,value:e.environment?e.environment.env:\\\"none\\\",sub:e.environment?\\\"via \\\"+e.environment.source:\\\"no env detected\\\",cls:e.environment?\\\"\\\":\\\"dim\\\"},{label:\\\"Protected\\\",icon:m.lock,value:e.protectedCount,sub:\\\"require approval\\\",cls:e.protectedCount>0?\\\"warning\\\":\\\"dim\\\"},{label:\\\"Approvals\\\",icon:m.approve,value:d,sub:\\\"active grants\\\",cls:d>0?\\\"green\\\":\\\"dim\\\"},{label:\\\"Hooks\\\",icon:m.hook,value:l,sub:\\\"enabled / \\\"+(e.hooks||[]).length+\\\" total\\\",cls:l>0?\\\"\\\":\\\"dim\\\"},{label:\\\"Reads (24h)\\\",icon:m.audit,value:s,sub:o+\\\" writes \\\\xB7 \\\"+a+\\\" denied\\\",cls:\\\"\\\"},{label:\\\"Anomalies\\\",icon:m.anomaly,value:_,sub:_?\\\"investigate now\\\":\\\"all clear\\\",cls:_?\\\"danger\\\":\\\"green\\\"}];return u`<section class=\\\"kpi-strip\\\">\\n    ${c.map(i=>u`<div class=\\\"kpi\\\" key=${i.label}>\\n        <div class=\\\"kpi-label\\\"><${j} svg=${i.icon} />${i.label}</div>\\n        <div class=\\\"kpi-value ${i.cls}\\\">${i.value}</div>\\n        <div class=\\\"kpi-sub\\\">${i.sub}</div>\\n      </div>`)}\\n  </section>`}function _t({snap:t,delay:e}){let n=t.health,s=n.total||1,o=42,a=2*Math.PI*o,l=[{v:n.healthy,c:\\\"var(--accent)\\\"},{v:n.stale,c:\\\"var(--warning)\\\"},{v:n.expired,c:\\\"var(--danger)\\\"},{v:n.noDecay,c:\\\"var(--text-dim)\\\"}],d=0,_=l.map((i,r)=>{let p=i.v/s*a,v=u`<circle key=${r} cx=\\\"50\\\" cy=\\\"50\\\" r=${o} fill=\\\"none\\\" stroke=${i.c} stroke-width=\\\"12\\\" stroke-dasharray=${p+\\\" \\\"+(a-p)} stroke-dashoffset=${-d} stroke-linecap=\\\"round\\\" opacity=\\\"0.85\\\" />`;return d+=p,v}),c=t.scopes||{global:0,project:0,team:0,org:0};return u`<${M} delay=${e}>\\n    <${S} icon=${m.health} title=\\\"Health Summary\\\" aside=${n.healthy+\\\"/\\\"+n.total+\\\" healthy\\\"} />\\n    <div class=\\\"health-row\\\">\\n      <div class=\\\"donut-wrap\\\">\\n        <svg viewBox=\\\"0 0 100 100\\\" width=\\\"100\\\" height=\\\"100\\\">${_}</svg>\\n        <div class=\\\"donut-label\\\">${n.total}<small>secrets</small></div>\\n      </div>\\n      <div class=\\\"health-legend\\\">\\n        <div class=\\\"legend-item\\\"><span class=\\\"legend-dot\\\" style=\\\"background:var(--accent)\\\"></span>Healthy ${n.healthy}</div>\\n        <div class=\\\"legend-item\\\"><span class=\\\"legend-dot\\\" style=\\\"background:var(--warning)\\\"></span>Stale ${n.stale}</div>\\n        <div class=\\\"legend-item\\\"><span class=\\\"legend-dot\\\" style=\\\"background:var(--danger)\\\"></span>Expired ${n.expired}</div>\\n        <div class=\\\"legend-item\\\"><span class=\\\"legend-dot\\\" style=\\\"background:var(--text-dim)\\\"></span>No decay ${n.noDecay}</div>\\n      </div>\\n    </div>\\n    <div class=\\\"scope-row\\\">\\n      ${[\\\"global\\\",\\\"project\\\",\\\"team\\\",\\\"org\\\"].filter(i=>c[i]).map(i=>u`<span class=\\\"scope-pill\\\" key=${i}><strong>${c[i]}</strong>${i}</span>`)}\\n    </div>\\n  <//>`}function pt({snap:t,delay:e}){let n=t.environment;return u`<${M} delay=${e}>\\n    <${S} icon=${m.environment} title=\\\"Environment\\\" />\\n    ${n?u`<div class=\\\"env-status\\\"><span class=\\\"env-big env-pill ${me(n.env)}\\\">${n.env}</span><span class=\\\"env-source\\\">detected via ${n.source}</span></div>`:u`<${E} cta=\\\"$ qring env --project-path .\\\">No environment detected.<//>`}\\n  <//>`}function vt({snap:t,delay:e}){let n=t.manifest;if(!n)return u`<${M} delay=${e}>\\n      <${S} icon=${m.manifest} title=\\\"Manifest\\\" />\\n      <${E} cta=${u`$ qring wizard <name>`}>No <code>.q-ring.json</code> manifest in this project.<//>\\n    <//>`;let s=n.required-n.missing.length-n.expired.length-n.stale.length,o=n.required?Math.max(0,Math.round(s/n.required*100)):100,a=n.missing.length?\\\"var(--danger)\\\":n.expired.length||n.stale.length?\\\"var(--warning)\\\":\\\"var(--green)\\\",l=(_,c,i)=>u`<div class=\\\"label\\\">${_} (${c.length})</div><div>${c.map(r=>u`<span class=\\\"key-pill ${i}\\\" key=${r}>${r}</span>`)}</div>`,d=n.missing.length||n.expired.length||n.stale.length;return u`<${M} delay=${e}>\\n    <${S} icon=${m.manifest} title=\\\"Manifest\\\" aside=${n.required+\\\" required / \\\"+n.declared+\\\" declared\\\"} />\\n    <div class=\\\"manifest-bars\\\">\\n      <div class=\\\"manifest-row\\\"><span style=\\\"min-width:54px\\\">healthy</span><div class=\\\"manifest-bar\\\"><div class=\\\"manifest-fill\\\" style=${\\\"width:\\\"+o+\\\"%;background:\\\"+a}></div></div><span>${o}%</span></div>\\n    </div>\\n    <div class=\\\"manifest-list\\\">\\n      ${n.missing.length?l(\\\"Missing required\\\",n.missing,\\\"miss\\\"):null}\\n      ${n.expired.length?l(\\\"Expired\\\",n.expired,\\\"exp\\\"):null}\\n      ${n.stale.length?l(\\\"Stale\\\",n.stale,\\\"exp\\\"):null}\\n      ${d?null:u`<div class=\\\"label\\\">All required keys present and healthy.</div>`}\\n    </div>\\n  <//>`}function ft({snap:t,delay:e}){let n=t.policy||{counts:{}},s=n.counts||{};if(!(n.hasMcpPolicy||n.hasExecPolicy||n.hasSecretPolicy))return u`<${M} delay=${e}>\\n      <${S} icon=${m.policy} title=\\\"Policy\\\" />\\n      <${E} cta=${u`add <code>policy</code> to <code>.q-ring.json</code>`}>No governance policy declared.<//>\\n    <//>`;let a=({label:d,value:_})=>u`<div class=\\\"policy-row\\\"><span class=\\\"policy-label\\\">${d}</span><span class=\\\"policy-value ${_?\\\"\\\":\\\"zero\\\"}\\\">${_||\\\"\\\\u2014\\\"}</span></div>`,l=[n.hasMcpPolicy?\\\"mcp\\\":\\\"\\\",n.hasExecPolicy?\\\"exec\\\":\\\"\\\",n.hasSecretPolicy?\\\"secrets\\\":\\\"\\\"].filter(Boolean).join(\\\" \\\\xB7 \\\")||\\\"none\\\";return u`<${M} delay=${e}>\\n    <${S} icon=${m.policy} title=\\\"Policy\\\" aside=${l} />\\n    <div class=\\\"policy-rows\\\">\\n      <${a} label=\\\"MCP allow tools\\\" value=${s.allowTools} />\\n      <${a} label=\\\"MCP deny tools\\\" value=${s.denyTools} />\\n      <${a} label=\\\"Denied keys\\\" value=${s.deniedKeys} />\\n      <${a} label=\\\"Denied tags\\\" value=${s.deniedTags} />\\n      <${a} label=\\\"Exec allow\\\" value=${s.allowCommands} />\\n      <${a} label=\\\"Exec deny\\\" value=${s.denyCommands} />\\n      <${a} label=\\\"Tag → approval\\\" value=${s.requireApprovalForTags} />\\n      <${a} label=\\\"Tag → rotation\\\" value=${s.requireRotationFormatForTags} />\\n      ${n.maxTtlSeconds?u`<${a} label=\\\"Max TTL\\\" value=${$e(n.maxTtlSeconds)} />`:null}\\n      ${n.maxRuntimeSeconds?u`<${a} label=\\\"Max exec runtime\\\" value=${$e(n.maxRuntimeSeconds)} />`:null}\\n    </div>\\n  <//>`}function yt({snap:t,delay:e}){let n=(t.secrets||[]).filter(s=>s.decay&&s.decay.timeRemaining).sort((s,o)=>(s.decay.secondsRemaining||0)-(o.decay.secondsRemaining||0));return u`<${M} delay=${e}>\\n    <${S} icon=${m.decay} title=\\\"Decay Timers\\\" aside=${n.length+\\\" tracked\\\"} />\\n    ${n.length?u`<div class=\\\"decay-list\\\">${n.slice(0,12).map(s=>{let o=Math.min(s.decay.lifetimePercent,100),a=Qe(o,s.decay.isExpired),l=s.decay.isExpired?\\\"expired\\\":s.decay.timeRemaining||\\\"\\\";return u`<div class=\\\"decay-item\\\" key=${s.scope+\\\":\\\"+s.key}>\\n            <span class=\\\"decay-key\\\" title=${s.key}>${s.key}</span>\\n            <div class=\\\"decay-bar\\\"><div class=\\\"decay-fill\\\" style=${\\\"width:\\\"+o+\\\"%;background:\\\"+a}></div></div>\\n            <span class=\\\"decay-time\\\" style=${\\\"color:\\\"+a}>${l}</span>\\n          </div>`})}</div>`:u`<${E} cta=\\\"$ qring set KEY --ttl 86400\\\">No secrets with decay configured.<//>`}\\n  <//>`}function ht({snap:t,delay:e}){let n=(t.secrets||[]).filter(s=>s.type===\\\"superposition\\\"&&s.environments&&s.environments.length);return u`<${M} delay=${e}>\\n    <${S} icon=${m.superposition} title=\\\"Superposition\\\" aside=${n.length+\\\" multi-env\\\"} />\\n    ${n.length?u`<div class=\\\"super-list\\\">${n.slice(0,14).map(s=>u`<div class=\\\"super-item\\\" key=${s.scope+\\\":\\\"+s.key}>\\n          <span class=\\\"super-key\\\">${s.key}</span>\\n          ${(s.environments||[]).map(o=>u`<span class=\\\"env-pill ${me(o)}\\\" key=${o}>${o}${o===s.defaultEnv?\\\" \\\\u2713\\\":\\\"\\\"}</span>`)}\\n        </div>`)}</div>`:u`<${E} cta=\\\"$ qring set KEY --env prod\\\">No secrets in superposition.<//>`}\\n  <//>`}function $t({snap:t,delay:e}){let n=t.entanglements||[],s=new Set,o=n.filter(a=>{let l=[a.source.service,a.source.key,a.target.service,a.target.key].sort().join(\\\"|\\\");return s.has(l)?!1:(s.add(l),!0)});return u`<${M} delay=${e}>\\n    <${S} icon=${m.entangle} title=\\\"Entanglement\\\" aside=${o.length+\\\" pair\\\"+(o.length===1?\\\"\\\":\\\"s\\\")} />\\n    ${o.length?u`<div class=\\\"entangle-list\\\">${o.slice(0,12).map((a,l)=>u`<div class=\\\"entangle-pair\\\" key=${l}>\\n          <span>${a.source.key}</span><span class=\\\"entangle-arrow\\\">↔</span><span>${a.target.key}</span>\\n        </div>`)}</div>`:u`<${E} cta=\\\"$ qring entangle KEY_A KEY_B\\\">No entangled secrets.<//>`}\\n  <//>`}function mt({snap:t,delay:e}){let n=t.tunnels||[];return u`<${M} delay=${e}>\\n    <${S} icon=${m.tunnel} title=\\\"Quantum Tunnels\\\" aside=${n.length+\\\" live\\\"} />\\n    ${n.length?u`<div class=\\\"tunnel-list\\\">${n.map(s=>{let o=s.expiresAt?Math.max(0,Math.floor((s.expiresAt-Date.now())/1e3)):null;return u`<div class=\\\"tunnel-card\\\" key=${s.id}>${s.id}<div class=\\\"tunnel-meta\\\">\\n            <span>reads: ${s.accessCount}${s.maxReads?\\\"/\\\"+s.maxReads:\\\"\\\"}</span>\\n            ${o!==null?u`<span>expires: ${o}s</span>`:u`<span>no expiry</span>`}\\n          </div></div>`})}</div>`:u`<${E} cta=${u`$ qring tunnel create <value>`}>No active tunnels.<//>`}\\n  <//>`}function gt({snap:t,delay:e}){let n=t.approvals||[];return u`<${M} delay=${e}>\\n    <${S} icon=${m.approve} title=\\\"Approvals\\\" aside=${n.filter(s=>s.valid).length+\\\" valid\\\"} />\\n    ${n.length?u`<div class=\\\"approval-list\\\">${n.slice(0,8).map(s=>{let o=s.tampered?\\\"tampered\\\":s.secondsRemaining<300?\\\"expiring\\\":\\\"\\\";return u`<div class=\\\"approval-card ${o}\\\" key=${s.id}>\\n            <div class=\\\"approval-head\\\"><span>${s.key}${s.tampered?\\\" \\\\u26A0 TAMPERED\\\":\\\"\\\"}</span><span>${$e(s.secondsRemaining)} left</span></div>\\n            <div class=\\\"approval-reason\\\">${s.reason||\\\"(no reason)\\\"}</div>\\n            <div class=\\\"approval-meta\\\"><span>scope:${s.scope}</span><span>by:${s.grantedBy}</span></div>\\n          </div>`})}</div>`:u`<${E} cta=${'$ qring approve KEY --for 1800 --reason \\\"...\\\"'}>No active approvals.<//>`}\\n  <//>`}function kt({snap:t,delay:e}){let n=t.hooks||[];return u`<${M} delay=${e}>\\n    <${S} icon=${m.hook} title=\\\"Hooks\\\" aside=${n.filter(s=>s.enabled).length+\\\" enabled / \\\"+n.length} />\\n    ${n.length?u`<div class=\\\"hooks-list\\\">${n.slice(0,8).map(s=>u`<div class=\\\"hook-row ${s.enabled?\\\"\\\":\\\"disabled\\\"}\\\" key=${s.id}>\\n          <span class=\\\"hook-type ${s.type}\\\">${s.type}</span>\\n          <span class=\\\"hook-summary\\\" title=${s.matchSummary}>${s.description||s.matchSummary}</span>\\n          <span class=\\\"hook-id\\\">${s.id}</span>\\n        </div>`)}</div>`:u`<${E} cta=${'$ qring hook add --tag payments --action rotate --exec \\\"...\\\"'}>No hooks registered.<//>`}\\n  <//>`}function bt({snap:t,delay:e}){return u`<${M} delay=${e}>\\n    <${S} icon=${m.memory} title=\\\"Agent Memory\\\" />\\n    <div class=\\\"empty\\\" style=\\\"display:flex;align-items:baseline;gap:8px;font-style:normal\\\">\\n      <span style=\\\"font-size:1.6rem;font-weight:700;color:var(--text-primary);font-family:var(--font-display)\\\">${t.memoryKeys||0}</span>\\n      <span>memory key${t.memoryKeys===1?\\\"\\\":\\\"s\\\"} encrypted at <code>~/.config/q-ring/agent-memory.enc</code></span>\\n    </div>\\n  <//>`}function xt({snap:t,delay:e}){let n=t.anomalies||[];if(!n.length)return u`<${M} delay=${e} wide=${!0}>\\n      <${S} icon=${m.anomaly} title=\\\"Anomaly Alerts\\\" aside=\\\"all clear\\\" asideStyle=\\\"color:var(--green)\\\" />\\n      <${E}>No anomalies detected — quantum field is stable.<//>\\n    <//>`;let s=o=>o===\\\"tampered\\\"?\\\"$ qring audit:verify\\\":o===\\\"burst\\\"?\\\"$ qring audit --key \\\\u2026 --action read\\\":o===\\\"unusual-hour\\\"?'$ qring audit --action read --since \\\"1am\\\"':\\\"$ qring audit --limit 100\\\";return u`<${M} delay=${e} wide=${!0}>\\n    <${S} icon=${m.anomaly} title=\\\"Anomaly Alerts\\\" aside=${n.length+\\\" active\\\"} asideStyle=\\\"color:var(--danger)\\\" />\\n    <div class=\\\"anomaly-list\\\">${n.map((o,a)=>u`<div class=\\\"anomaly-card\\\" key=${a}>\\n      <div class=\\\"anomaly-type\\\">${o.type}</div>\\n      <div class=\\\"anomaly-desc\\\">${o.description}</div>\\n      <div class=\\\"anomaly-hint\\\">${s(o.type)}</div>\\n    </div>`)}</div>\\n  <//>`}function wt(t,e){let n=e.trim().toLowerCase();return n?n===\\\"expired\\\"?t.filter(s=>s.decay&&s.decay.isExpired):n===\\\"stale\\\"?t.filter(s=>s.decay&&s.decay.isStale&&!s.decay.isExpired):n===\\\"protected\\\"?t.filter(s=>s.requiresApproval):t.filter(s=>[s.key,s.scope,s.type,s.provider||\\\"\\\",s.defaultEnv||\\\"\\\",(s.environments||[]).join(\\\" \\\"),(s.tags||[]).join(\\\" \\\")].join(\\\" \\\").toLowerCase().indexOf(n)!==-1):t.slice()}function Ct(t,e){let n=e.dir===\\\"asc\\\"?1:-1;return t.sort((s,o)=>{let a,l;switch(e.col){case\\\"key\\\":a=s.key,l=o.key;break;case\\\"scope\\\":a=s.scope,l=o.scope;break;case\\\"env\\\":a=s.defaultEnv||(s.environments||[])[0]||\\\"\\\",l=o.defaultEnv||(o.environments||[])[0]||\\\"\\\";break;case\\\"type\\\":a=s.type,l=o.type;break;case\\\"decay\\\":a=s.decay&&s.decay.secondsRemaining!=null?s.decay.secondsRemaining:1/0,l=o.decay&&o.decay.secondsRemaining!=null?o.decay.secondsRemaining:1/0;break;case\\\"tags\\\":a=(s.tags||[]).join(\\\",\\\"),l=(o.tags||[]).join(\\\",\\\");break;default:a=s.lastAccessedAt?new Date(s.lastAccessedAt).getTime():0,l=o.lastAccessedAt?new Date(o.lastAccessedAt).getTime():0}return a<l?-1*n:a>l?1*n:0})}function St({snap:t,query:e,setQuery:n,sort:s,setSort:o,searchRef:a}){let l=t.secrets||[],d=te(()=>Ct(wt(l,e),s),[l,e,s]),_=[{id:\\\"key\\\",label:\\\"Key\\\"},{id:\\\"scope\\\",label:\\\"Scope\\\"},{id:\\\"env\\\",label:\\\"Env\\\"},{id:\\\"type\\\",label:\\\"Type\\\"},{id:\\\"decay\\\",label:\\\"Decay\\\"},{id:\\\"tags\\\",label:\\\"Tags\\\"},{id:\\\"lastAccessedAt\\\",label:\\\"Last read\\\"}],c=i=>{s.col===i?o({col:i,dir:s.dir===\\\"asc\\\"?\\\"desc\\\":\\\"asc\\\"}):o({col:i,dir:i===\\\"key\\\"?\\\"asc\\\":\\\"desc\\\"})};return u`<section><${M} wide=${!0} style=\\\"margin-bottom:16px\\\">\\n    <${S} icon=${m.key} title=\\\"Secrets\\\" aside=${d.length+\\\" of \\\"+l.length} />\\n    <div class=\\\"secrets-toolbar\\\">\\n      <label class=\\\"search\\\"><${j} svg=${m.search} /><input ref=${a} id=\\\"secretsSearch\\\" type=\\\"search\\\" placeholder=\\\"Filter by key, scope, env, tag, provider…\\\" autocomplete=\\\"off\\\" value=${e} onInput=${i=>n(i.target.value)} /></label>\\n      <button class=\\\"btn\\\" type=\\\"button\\\" onClick=${()=>n(\\\"expired\\\")}>${t.health.expired||0} expired</button>\\n      <button class=\\\"btn\\\" type=\\\"button\\\" onClick=${()=>n(\\\"stale\\\")}>${t.health.stale||0} stale</button>\\n      <button class=\\\"btn\\\" type=\\\"button\\\" onClick=${()=>n(\\\"protected\\\")}>${t.protectedCount||0} protected</button>\\n      <button class=\\\"btn\\\" type=\\\"button\\\" onClick=${()=>n(\\\"\\\")}>clear</button>\\n    </div>\\n    <div class=\\\"secrets-table-wrap\\\">\\n      ${d.length?u`<table class=\\\"secrets-table\\\">\\n            <thead><tr>${_.map(i=>u`<th key=${i.id} class=${s.col===i.id?\\\"sorted\\\":\\\"\\\"} onClick=${()=>c(i.id)}>${i.label}<span class=\\\"sort-arrow\\\">${s.dir===\\\"asc\\\"?\\\"\\\\u25B2\\\":\\\"\\\\u25BC\\\"}</span></th>`)}</tr></thead>\\n            <tbody>${d.map(i=>{let r=i.type===\\\"superposition\\\"?(i.environments||[]).map(f=>u`<span class=\\\"env-pill ${me(f)}\\\" style=\\\"margin-right:3px\\\" key=${f}>${f}${f===i.defaultEnv?\\\" \\\\u2713\\\":\\\"\\\"}</span>`):u`<span class=\\\"env-pill env-default\\\">—</span>`,p=i.decay&&i.decay.timeRemaining?(()=>{let f=Math.min(i.decay.lifetimePercent,100),C=Qe(f,i.decay.isExpired);return u`<span class=\\\"mini-decay\\\"><span class=\\\"mini-decay-bar\\\"><span class=\\\"mini-decay-fill\\\" style=${\\\"width:\\\"+f+\\\"%;background:\\\"+C}></span></span><span class=\\\"mini-decay-time\\\" style=${\\\"color:\\\"+C}>${i.decay.isExpired?\\\"expired\\\":i.decay.timeRemaining}</span></span>`})():u`<span class=\\\"mini-decay-time\\\">—</span>`,v=i.tags||[];return u`<tr key=${i.scope+\\\":\\\"+i.key}>\\n                <td class=\\\"col-key\\\" title=${i.key}>${i.key}${i.requiresApproval?u`<span class=\\\"protected-icon\\\" title=\\\"requires approval for MCP read\\\"><${j} svg=${m.lock} /></span>`:null}</td>\\n                <td><span class=\\\"scope-tag ${i.scope}\\\">${i.scope}</span></td>\\n                <td>${r}</td>\\n                <td><span class=\\\"type-tag ${i.type}\\\">${i.type}</span></td>\\n                <td class=\\\"col-decay\\\">${p}</td>\\n                <td class=\\\"col-tags\\\">${v.slice(0,3).map(f=>u`<span class=\\\"tag-pill\\\" key=${f}>${f}</span>`)}${v.length>3?\\\"+\\\"+(v.length-3):\\\"\\\"}</td>\\n                <td>${Ze(i.lastAccessedAt)}</td>\\n              </tr>`})}</tbody>\\n          </table>`:u`<div class=\\\"empty\\\" style=\\\"padding:18px;text-align:center\\\">No secrets match the filter.</div>`}\\n    </div>\\n  <//></section>`}function Mt({snap:t,delay:e,filter:n,setFilter:s}){let o=t.audit||[],a=t.auditMetrics||{byAction:{},bySource:{}},l=o.filter(i=>{if(n.action&&i.action!==n.action||n.source&&i.source!==n.source)return!1;let r=n.text.trim().toLowerCase();return!(r&&[i.key||\\\"\\\",i.action,i.source,i.detail||\\\"\\\",i.scope||\\\"\\\",i.env||\\\"\\\"].join(\\\" \\\").toLowerCase().indexOf(r)===-1)}),d=[\\\"read\\\",\\\"write\\\",\\\"delete\\\",\\\"rotate\\\",\\\"generate\\\",\\\"entangle\\\",\\\"tunnel\\\",\\\"teleport\\\",\\\"approve\\\",\\\"revoke\\\",\\\"policy_deny\\\",\\\"collapse\\\",\\\"export\\\"],_=[\\\"cli\\\",\\\"mcp\\\",\\\"agent\\\",\\\"ci\\\",\\\"hook\\\",\\\"api\\\"],c=(i,r)=>s({...n,[i]:n[i]===r?\\\"\\\":r});return u`<${M} delay=${e} wide=${!0}>\\n    <${S} icon=${m.audit} title=\\\"Audit Log (24h)\\\" aside=${l.length+\\\" of \\\"+o.length+\\\" shown \\\\xB7 window \\\"+(a.windowSeconds||86400)/3600+\\\"h\\\"} />\\n    <div class=\\\"audit-actions-strip\\\">\\n      ${d.filter(i=>a.byAction[i]).length?d.filter(i=>a.byAction[i]).map(i=>u`<span class=\\\"audit-chip ${n.action===i?\\\"active\\\":\\\"\\\"}\\\" key=${i} onClick=${()=>c(\\\"action\\\",i)}>${i}<strong>${a.byAction[i]}</strong></span>`):u`<span class=\\\"empty\\\" style=\\\"padding:0\\\">no actions</span>`}\\n    </div>\\n    ${_.filter(i=>a.bySource[i]).length?u`<div class=\\\"audit-actions-strip\\\">${_.filter(i=>a.bySource[i]).map(i=>u`<span class=\\\"audit-chip ${n.source===i?\\\"active\\\":\\\"\\\"}\\\" key=${i} onClick=${()=>c(\\\"source\\\",i)}>${i}<strong>${a.bySource[i]}</strong></span>`)}</div>`:null}\\n    <div class=\\\"audit-toolbar\\\">\\n      <label class=\\\"search\\\"><${j} svg=${m.search} /><input id=\\\"auditSearch\\\" type=\\\"search\\\" placeholder=\\\"Filter by key, detail, scope…\\\" autocomplete=\\\"off\\\" value=${n.text} onInput=${i=>s({...n,text:i.target.value})} /></label>\\n      <button class=\\\"btn\\\" type=\\\"button\\\" onClick=${()=>s({action:\\\"\\\",source:\\\"\\\",text:\\\"\\\"})}>clear</button>\\n    </div>\\n    ${l.length?u`<div class=\\\"audit-feed\\\">${l.slice(0,80).map((i,r)=>u`<div class=\\\"audit-row\\\" key=${r}>\\n          <span class=\\\"audit-ts\\\" title=${i.timestamp}>${Xe(i.timestamp)}</span>\\n          <span class=\\\"audit-action ${i.action}\\\">${i.action}</span>\\n          <span class=\\\"audit-source\\\">${i.source}</span>\\n          <span><span class=\\\"audit-key\\\">${i.key||\\\"\\\\u2014\\\"}</span> <span class=\\\"audit-detail\\\">${i.detail||\\\"\\\"}</span></span>\\n        </div>`)}</div>`:u`<${E}>No audit events match the filter.<//>`}\\n  <//>`}function At(){let[t,e]=q(null),[n,s]=q(!1),[o,a]=q(\\\"connecting\\\"),[l,d]=q(\\\"\\\"),[_,c]=q({col:\\\"lastAccessedAt\\\",dir:\\\"desc\\\"}),[i,r]=q({action:\\\"\\\",source:\\\"\\\",text:\\\"\\\"}),[,p]=q(0),v=fe(n);v.current=n;let f=fe(null),C=ye($=>{try{e(typeof $==\\\"string\\\"?JSON.parse($):$)}catch{}},[]),k=ye(()=>{fetch(\\\"/api/status\\\"+he,{cache:\\\"no-store\\\"}).then($=>$.json()).then(C).catch(()=>{})},[C]);ee(()=>{let $=new EventSource(\\\"/events\\\"+he);return $.onopen=()=>a(\\\"live\\\"),$.onmessage=b=>{v.current||C(b.data)},$.onerror=()=>a(\\\"reconnecting\\\"),()=>$.close()},[C]),ee(()=>{let $=setInterval(()=>p(b=>b+1),5e3);return()=>clearInterval($)},[]),ee(()=>{let $=b=>{let T=b.target&&b.target.tagName;if(T===\\\"INPUT\\\"||T===\\\"TEXTAREA\\\"){b.key===\\\"Escape\\\"&&b.target.blur();return}b.key===\\\"/\\\"?(b.preventDefault(),f.current&&f.current.focus()):b.key===\\\"p\\\"||b.key===\\\"P\\\"?s(F=>!F):(b.key===\\\"r\\\"||b.key===\\\"R\\\")&&k()};return document.addEventListener(\\\"keydown\\\",$),()=>document.removeEventListener(\\\"keydown\\\",$)},[k]);let y=t?\\\"updated \\\"+Ze(t.timestamp):\\\"\\\\u2014\\\";if(!t)return u`<div class=\\\"container\\\">\\n      <${Ge} snap=${null} paused=${n} connState=${o} onPause=${()=>s($=>!$)} onRefresh=${k} lastUpdate=${y} />\\n      <p class=\\\"foot\\\"><span>Connecting to the live quantum stream…</span></p>\\n    </div>`;let h=t.auditMetrics||{total:0};return u`<div class=\\\"container\\\">\\n    <${Ge} snap=${t} paused=${n} connState=${o} onPause=${()=>s($=>!$)} onRefresh=${k} lastUpdate=${y} />\\n    <${ut} snap=${t} />\\n    <section class=\\\"grid\\\">\\n      <${_t} snap=${t} delay=${0} />\\n      <${pt} snap=${t} delay=${60} />\\n      <${vt} snap=${t} delay=${120} />\\n      <${ft} snap=${t} delay=${180} />\\n    </section>\\n    <${St} snap=${t} query=${l} setQuery=${d} sort=${_} setSort=${c} searchRef=${f} />\\n    <section class=\\\"grid\\\">\\n      <${yt} snap=${t} delay=${0} />\\n      <${ht} snap=${t} delay=${60} />\\n      <${$t} snap=${t} delay=${120} />\\n      <${mt} snap=${t} delay=${180} />\\n    </section>\\n    <section class=\\\"grid\\\">\\n      <${gt} snap=${t} delay=${0} />\\n      <${kt} snap=${t} delay=${60} />\\n      <${bt} snap=${t} delay=${120} />\\n    </section>\\n    <section class=\\\"grid\\\">\\n      <${xt} snap=${t} delay=${0} />\\n      <${Mt} snap=${t} delay=${60} filter=${i} setFilter=${r} />\\n    </section>\\n    <p class=\\\"foot\\\">\\n      <span>${\\\"q-ring v\\\"+t.version+\\\" \\\\xB7 snapshot \\\"+Xe(t.timestamp)+\\\" \\\\xB7 \\\"+(h.total||0)+\\\" audit events in last 24h\\\"}</span>\\n      · keyboard: <span class=\\\"kbd\\\">/</span> search · <span class=\\\"kbd\\\">P</span> pause · <span class=\\\"kbd\\\">R</span> refresh\\n    </p>\\n  </div>`}qe(u`<${At} />`,document.getElementById(\\\"app\\\"));})();\";\n","/**\n * Self-contained HTML dashboard for q-ring quantum status.\n *\n * Matches the gh-pages site design system: deep-navy palette, neon cyan→violet\n * SVG icons, glassmorphism cards. The page is fully self-contained and offline:\n * inline CSS plus an inlined Preact + htm client bundle (see DASHBOARD_CLIENT,\n * generated from src/dashboard-client/main.js). Rendering is VDOM-diffed so the\n * SSE stream updates data in place — entrance animations run once on mount\n * instead of replaying on every tick.\n *\n * Layout:\n *   1. Sticky header with brand, version, project path, live/paused state,\n *      pause+refresh controls, last-update timestamp.\n *   2. KPI strip — at-a-glance counters (total, healthy, stale/expired,\n *      protected, hooks, approvals, anomalies, audit-24h).\n *   3. Health donut + Environment + Manifest + Policy summary cards.\n *   4. Searchable + sortable secrets table (key, scope, env, type, decay,\n *      tags, last accessed).\n *   5. Quantum side panels — Decay, Superposition, Entanglement, Tunnels.\n *   6. Governance — Approvals, Hooks, Memory.\n *   7. Anomalies (full-width).\n *   8. Audit log with action+source+text filters and an action-count strip.\n */\n\nimport { DASHBOARD_CLIENT } from \"./dashboard-client.js\";\n\n/** Escape a value for safe embedding inside an inline <script> string literal. */\nfunction jsString(value: string): string {\n  return JSON.stringify(value).replace(/</g, \"\\\\u003c\");\n}\n\nexport function getDashboardHtml(token: string): string {\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\"/>\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/>\n<title>q-ring — quantum status</title>\n<style>\n*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}\n:root{\n  --bg-deep:#04080f;\n  --bg-section:#080e18;\n  --bg-card:#0f1a2e;\n  --bg-card-hover:#142240;\n  --border:#1a2d4a;\n  --border-glow:#0ea5e9;\n\n  --text-primary:#f8f8ff;\n  --text-secondary:#c8cfe0;\n  --text-dim:#8899b4;\n\n  --accent:#0ea5e9;\n  --accent-bright:#38bdf8;\n  --accent-dim:rgba(14,165,233,0.15);\n  --accent-glow:rgba(14,165,233,0.4);\n\n  --danger:#ff5e5b;\n  --warning:#fbbf24;\n  --green:#22c55e;\n  --violet:#a855f7;\n  --pink:#ff0055;\n\n  --font-display:system-ui,-apple-system,'Segoe UI',Roboto,sans-serif;\n  --font-mono:'SF Mono','Cascadia Code','Fira Code',Consolas,'Liberation Mono',monospace;\n\n  --radius:12px;\n  --radius-sm:8px;\n  --radius-lg:20px;\n\n  --glass-bg:rgba(15,26,46,0.65);\n  --glass-border:rgba(26,45,74,0.8);\n  --shadow-card:0 4px 24px -1px rgba(0,0,0,0.4),0 0 1px rgba(255,255,255,0.04);\n  --shadow-glow:0 0 20px rgba(14,165,233,0.12),0 0 40px rgba(168,85,247,0.08);\n}\nhtml{background:var(--bg-deep);color:var(--text-primary);font-family:var(--font-display);font-size:16px;line-height:1.5}\nbody{min-height:100vh;overflow-x:hidden;position:relative}\n\n/* Hidden SVG defs for gradient icons */\n.svg-defs{position:absolute;width:0;height:0;overflow:hidden}\n\n/* Mesh blobs */\n.blob{position:fixed;border-radius:50%;filter:blur(100px);opacity:.12;pointer-events:none;z-index:0}\n.blob-1{width:600px;height:600px;top:-120px;left:-100px;background:radial-gradient(circle,var(--accent),transparent 70%);animation:drift1 22s ease-in-out infinite}\n.blob-2{width:500px;height:500px;bottom:-80px;right:-60px;background:radial-gradient(circle,var(--violet),transparent 70%);animation:drift2 26s ease-in-out infinite}\n.blob-3{width:350px;height:350px;top:40%;left:50%;background:radial-gradient(circle,var(--green),transparent 70%);animation:drift3 30s ease-in-out infinite;opacity:.06}\n@keyframes drift1{0%,100%{transform:translate(0,0) scale(1)}33%{transform:translate(60px,-40px) scale(1.08)}66%{transform:translate(-30px,50px) scale(.95)}}\n@keyframes drift2{0%,100%{transform:translate(0,0) scale(1)}33%{transform:translate(-50px,30px) scale(1.05)}66%{transform:translate(40px,-60px) scale(.92)}}\n@keyframes drift3{0%,100%{transform:translate(-50%,-50%) scale(1)}50%{transform:translate(-40%,-60%) scale(1.1)}}\n\n.container{position:relative;z-index:1;max-width:1320px;margin:0 auto;padding:20px 20px 48px}\n\n/* Header */\n.header{position:sticky;top:0;z-index:5;display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:14px;margin-bottom:20px;padding:14px 18px;background:rgba(4,8,15,0.85);backdrop-filter:blur(16px) saturate(1.2);-webkit-backdrop-filter:blur(16px) saturate(1.2);border:1px solid var(--border);border-radius:var(--radius)}\n.header-left{display:flex;align-items:center;gap:14px;flex-wrap:wrap;min-width:0}\n.header h1{font-family:var(--font-display);font-size:1.45rem;font-weight:700;letter-spacing:-.02em;display:flex;align-items:center;gap:10px}\n.header h1 .q-icon{display:flex;filter:drop-shadow(0 0 6px rgba(14,165,233,0.6))}\n.header h1 .brand{background:linear-gradient(135deg,#00D1FF,var(--violet));-webkit-background-clip:text;background-clip:text;-webkit-text-fill-color:transparent}\n.header h1 .sub{color:var(--text-dim);font-weight:400;font-size:1rem;-webkit-text-fill-color:var(--text-dim)}\n.meta-chip{font-family:var(--font-mono);font-size:.72rem;color:var(--text-dim);background:rgba(255,255,255,.04);border:1px solid var(--border);padding:3px 8px;border-radius:99px;display:inline-flex;align-items:center;gap:6px;max-width:340px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.meta-chip svg{width:11px;height:11px;flex-shrink:0;opacity:.7}\n.header-right{display:flex;align-items:center;gap:10px;flex-wrap:wrap}\n.status-dot{width:8px;height:8px;border-radius:50%;background:var(--green);box-shadow:0 0 8px var(--green);display:inline-block;animation:pulse 2s ease-in-out infinite}\n.status-dot.disconnected{background:var(--danger);box-shadow:0 0 8px var(--danger);animation:none}\n.status-dot.paused{background:var(--warning);box-shadow:0 0 8px var(--warning);animation:none}\n@keyframes pulse{0%,100%{opacity:1}50%{opacity:.4}}\n.conn-label{font-size:.78rem;color:var(--text-dim);display:flex;align-items:center;gap:6px;font-family:var(--font-mono)}\n.btn{font-family:var(--font-display);font-size:.78rem;font-weight:500;color:var(--text-secondary);background:rgba(255,255,255,.04);border:1px solid var(--border);padding:5px 11px;border-radius:var(--radius-sm);cursor:pointer;display:inline-flex;align-items:center;gap:5px;transition:background .2s,border-color .2s,color .2s}\n.btn:hover{background:rgba(14,165,233,.08);border-color:var(--accent);color:var(--text-primary)}\n.btn svg{width:13px;height:13px}\n.btn.active{background:var(--accent-dim);color:var(--accent-bright);border-color:rgba(14,165,233,.4)}\n.kbd{font-family:var(--font-mono);font-size:.65rem;color:var(--text-dim);background:rgba(255,255,255,.06);border:1px solid var(--border);border-bottom-width:2px;padding:1px 5px;border-radius:4px;margin-left:4px}\n\n/* KPI strip */\n.kpi-strip{display:grid;grid-template-columns:repeat(auto-fit,minmax(140px,1fr));gap:10px;margin-bottom:20px}\n.kpi{background:var(--glass-bg);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px);border:1px solid var(--glass-border);border-radius:var(--radius);padding:12px 14px;display:flex;flex-direction:column;gap:2px;transition:border-color .25s,transform .25s}\n.kpi:hover{border-color:var(--border-glow);transform:translateY(-2px)}\n.kpi-label{font-size:.66rem;text-transform:uppercase;letter-spacing:.1em;color:var(--text-dim);font-weight:600;display:flex;align-items:center;gap:6px}\n.kpi-label svg{width:12px;height:12px;flex-shrink:0}\n.kpi-value{font-family:var(--font-display);font-size:1.5rem;font-weight:700;line-height:1.1;color:var(--text-primary)}\n.kpi-value.warning{color:var(--warning)}\n.kpi-value.danger{color:var(--danger)}\n.kpi-value.green{color:var(--green)}\n.kpi-value.dim{color:var(--text-dim)}\n.kpi-sub{font-size:.7rem;color:var(--text-dim);font-family:var(--font-mono)}\n\n/* Grid */\n.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(360px,1fr));gap:16px;margin-bottom:16px}\n.grid-wide{grid-column:1/-1}\n\n/* Cards — reveal animation */\n.card{background:var(--glass-bg);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px);border:1px solid var(--glass-border);border-radius:var(--radius);padding:18px 20px;box-shadow:var(--shadow-card);transition:border-color .3s,box-shadow .3s,transform .3s;opacity:0;transform:translateY(16px);animation:cardReveal .5s cubic-bezier(0.16,1,0.3,1) forwards}\n.card:hover{border-color:var(--border-glow);box-shadow:var(--shadow-card),var(--shadow-glow)}\n@keyframes cardReveal{to{opacity:1;transform:translateY(0)}}\n\n.card-title{font-family:var(--font-display);font-size:.78rem;text-transform:uppercase;letter-spacing:.1em;color:var(--text-dim);margin-bottom:14px;display:flex;align-items:center;gap:8px;font-weight:600}\n.card-title svg{width:16px;height:16px;flex-shrink:0;filter:drop-shadow(0 0 4px rgba(14,165,233,0.4))}\n.card-title .title-aside{margin-left:auto;font-size:.7rem;color:var(--text-dim);font-weight:400;letter-spacing:.04em;text-transform:none;display:flex;align-items:center;gap:6px}\n\n/* Health donut */\n.health-row{display:flex;align-items:center;gap:24px}\n.donut-wrap{position:relative;width:100px;height:100px;flex-shrink:0}\n.donut-wrap svg{transform:rotate(-90deg)}\n.donut-wrap .donut-label{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;flex-direction:column;font-size:1.5rem;font-weight:700;line-height:1;font-family:var(--font-display)}\n.donut-wrap .donut-label small{font-size:.7rem;color:var(--text-dim);font-weight:400;margin-top:2px;letter-spacing:.04em}\n.health-legend{display:flex;flex-direction:column;gap:6px;font-family:var(--font-mono)}\n.legend-item{display:flex;align-items:center;gap:8px;font-size:.82rem}\n.legend-dot{width:8px;height:8px;border-radius:50%;flex-shrink:0}\n.scope-row{display:flex;gap:6px;margin-top:14px;flex-wrap:wrap;font-family:var(--font-mono);font-size:.72rem;color:var(--text-dim)}\n.scope-pill{padding:2px 8px;border-radius:99px;background:rgba(255,255,255,.04);border:1px solid var(--border)}\n.scope-pill strong{color:var(--text-primary);margin-right:4px;font-weight:600}\n\n/* Decay bars */\n.decay-list{display:flex;flex-direction:column;gap:8px;max-height:280px;overflow-y:auto}\n.decay-item{display:flex;align-items:center;gap:10px}\n.decay-key{font-family:var(--font-mono);font-size:.85rem;min-width:120px;max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.decay-bar{flex:1;height:6px;border-radius:3px;background:rgba(255,255,255,0.06);overflow:hidden;position:relative}\n.decay-fill{height:100%;border-radius:3px;transition:width .6s ease}\n.decay-time{font-size:.8rem;color:var(--text-dim);min-width:60px;text-align:right;font-family:var(--font-mono)}\n\n/* Superposition pills */\n.super-list{display:flex;flex-direction:column;gap:8px;max-height:280px;overflow-y:auto}\n.super-item{display:flex;align-items:center;gap:8px;flex-wrap:wrap}\n.super-key{font-family:var(--font-mono);font-size:.85rem;min-width:100px}\n.env-pill{font-size:.72rem;padding:2px 8px;border-radius:99px;font-weight:600;letter-spacing:.03em;font-family:var(--font-mono)}\n.env-prod{background:rgba(255,0,85,0.2);color:var(--pink);border:1px solid rgba(255,0,85,0.3)}\n.env-staging{background:rgba(251,191,36,0.15);color:var(--warning);border:1px solid rgba(251,191,36,0.25)}\n.env-dev{background:rgba(34,197,94,0.15);color:var(--green);border:1px solid rgba(34,197,94,0.25)}\n.env-default{background:rgba(168,85,247,0.15);color:var(--violet);border:1px solid rgba(168,85,247,0.25)}\n.env-test{background:rgba(14,165,233,0.15);color:var(--accent-bright);border:1px solid rgba(14,165,233,0.25)}\n\n/* Entanglement */\n.entangle-list{display:flex;flex-direction:column;gap:6px;max-height:240px;overflow-y:auto}\n.entangle-pair{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.83rem}\n.entangle-arrow{color:var(--accent-bright)}\n\n/* Tunnels */\n.tunnel-list{display:flex;flex-direction:column;gap:8px;max-height:240px;overflow-y:auto}\n.tunnel-card{background:rgba(168,85,247,0.06);border:1px solid rgba(168,85,247,0.15);border-radius:var(--radius-sm);padding:10px 12px;font-size:.83rem;font-family:var(--font-mono)}\n.tunnel-meta{display:flex;gap:12px;margin-top:4px;font-size:.78rem;color:var(--text-dim)}\n\n/* Audit feed */\n.audit-toolbar{display:flex;flex-wrap:wrap;gap:6px;margin-bottom:10px;align-items:center}\n.audit-actions-strip{display:flex;flex-wrap:wrap;gap:6px;margin-bottom:10px}\n.audit-chip{font-family:var(--font-mono);font-size:.7rem;padding:2px 9px;border-radius:99px;background:rgba(255,255,255,.04);border:1px solid var(--border);color:var(--text-secondary);cursor:pointer;transition:all .2s}\n.audit-chip:hover{border-color:var(--accent);color:var(--text-primary)}\n.audit-chip.active{background:var(--accent-dim);color:var(--accent-bright);border-color:rgba(14,165,233,.4)}\n.audit-chip strong{color:var(--text-primary);margin-left:5px;font-weight:600}\n.audit-feed{display:flex;flex-direction:column;gap:2px;max-height:340px;overflow-y:auto;font-size:.82rem;font-family:var(--font-mono)}\n.audit-row{display:grid;grid-template-columns:78px 76px 56px 1fr;gap:8px;padding:4px 0;border-bottom:1px solid rgba(255,255,255,0.03);align-items:baseline}\n.audit-ts{color:var(--text-dim)}\n.audit-action{font-weight:600}\n.audit-action.read{color:var(--accent)}.audit-action.write{color:var(--green)}.audit-action.delete{color:var(--danger)}\n.audit-action.entangle{color:var(--violet)}.audit-action.tunnel{color:var(--violet)}.audit-action.teleport{color:var(--warning)}\n.audit-action.generate{color:var(--warning)}.audit-action.list{color:var(--text-dim)}.audit-action.export{color:var(--text-dim)}\n.audit-action.collapse{color:var(--accent)}.audit-action.approve{color:var(--green)}.audit-action.revoke{color:var(--danger)}\n.audit-action.policy_deny{color:var(--danger)}.audit-action.rotate{color:var(--violet)}\n.audit-source{color:var(--text-dim);font-size:.72rem;text-transform:uppercase;letter-spacing:.04em}\n.audit-detail{color:var(--text-dim);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.audit-key{color:var(--text-secondary)}\n\n/* Anomalies */\n.anomaly-list{display:flex;flex-direction:column;gap:8px}\n.anomaly-card{background:rgba(255,94,91,0.06);border:1px solid rgba(255,94,91,0.15);border-radius:var(--radius-sm);padding:10px 14px;animation:anomaly-pulse 3s ease-in-out infinite}\n@keyframes anomaly-pulse{0%,100%{border-color:rgba(255,94,91,0.15)}50%{border-color:rgba(255,94,91,0.4)}}\n.anomaly-type{font-size:.7rem;text-transform:uppercase;letter-spacing:.06em;color:var(--danger);font-weight:700;margin-bottom:2px;font-family:var(--font-display)}\n.anomaly-desc{font-size:.86rem;color:var(--text-primary)}\n.anomaly-hint{font-size:.74rem;color:var(--text-dim);margin-top:4px;font-family:var(--font-mono)}\n\n/* Environment badge */\n.env-status{display:flex;align-items:center;gap:12px;flex-wrap:wrap}\n.env-big{font-size:1rem;font-weight:700;padding:4px 14px;border-radius:var(--radius-sm)}\n.env-source{font-size:.78rem;color:var(--text-dim);font-family:var(--font-mono)}\n\n/* Manifest */\n.manifest-bars{display:flex;flex-direction:column;gap:8px}\n.manifest-row{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.78rem}\n.manifest-bar{flex:1;height:6px;border-radius:3px;background:rgba(255,255,255,.06);overflow:hidden}\n.manifest-fill{height:100%;border-radius:3px}\n.manifest-list{margin-top:10px;display:flex;flex-direction:column;gap:3px;font-family:var(--font-mono);font-size:.78rem;color:var(--text-secondary)}\n.manifest-list .label{color:var(--text-dim);text-transform:uppercase;font-size:.66rem;letter-spacing:.08em;margin-top:6px}\n.manifest-list .key-pill{display:inline-block;padding:1px 6px;background:rgba(255,255,255,.04);border:1px solid var(--border);border-radius:4px;margin:1px 3px 1px 0;font-size:.74rem}\n.manifest-list .key-pill.miss{color:var(--danger);border-color:rgba(255,94,91,.3)}\n.manifest-list .key-pill.exp{color:var(--warning);border-color:rgba(251,191,36,.3)}\n\n/* Policy */\n.policy-rows{display:flex;flex-direction:column;gap:6px;font-family:var(--font-mono);font-size:.78rem;color:var(--text-secondary)}\n.policy-row{display:flex;justify-content:space-between;padding:2px 0;border-bottom:1px solid rgba(255,255,255,.04)}\n.policy-label{color:var(--text-dim)}\n.policy-value{color:var(--text-primary)}\n.policy-value.zero{color:var(--text-dim)}\n\n/* Approvals */\n.approval-list{display:flex;flex-direction:column;gap:8px;max-height:240px;overflow-y:auto}\n.approval-card{background:rgba(34,197,94,.05);border:1px solid rgba(34,197,94,.2);border-radius:var(--radius-sm);padding:10px 12px;font-size:.82rem}\n.approval-card.tampered{background:rgba(255,94,91,.06);border-color:rgba(255,94,91,.4)}\n.approval-card.expiring{background:rgba(251,191,36,.06);border-color:rgba(251,191,36,.3)}\n.approval-head{display:flex;justify-content:space-between;gap:8px;font-family:var(--font-mono);font-weight:600}\n.approval-reason{color:var(--text-dim);font-size:.76rem;margin-top:3px}\n.approval-meta{display:flex;gap:12px;margin-top:4px;font-size:.72rem;color:var(--text-dim);font-family:var(--font-mono)}\n\n/* Hooks */\n.hooks-list{display:flex;flex-direction:column;gap:6px;max-height:240px;overflow-y:auto}\n.hook-row{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.8rem;padding:6px 10px;background:rgba(255,255,255,.03);border:1px solid var(--border);border-radius:var(--radius-sm)}\n.hook-row.disabled{opacity:.5}\n.hook-type{font-size:.7rem;text-transform:uppercase;font-weight:600;padding:1px 6px;border-radius:99px;letter-spacing:.04em}\n.hook-type.shell{background:rgba(168,85,247,.15);color:var(--violet)}\n.hook-type.http{background:rgba(14,165,233,.15);color:var(--accent-bright)}\n.hook-type.signal{background:rgba(251,191,36,.15);color:var(--warning)}\n.hook-summary{flex:1;color:var(--text-secondary);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.hook-id{color:var(--text-dim);font-size:.72rem}\n\n/* Secrets table */\n.secrets-toolbar{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:10px;align-items:center}\n.search{flex:1;min-width:180px;display:flex;align-items:center;gap:6px;background:rgba(255,255,255,.04);border:1px solid var(--border);border-radius:var(--radius-sm);padding:5px 10px;transition:border-color .2s}\n.search:focus-within{border-color:var(--accent);box-shadow:0 0 0 3px rgba(14,165,233,.12)}\n.search svg{width:13px;height:13px;color:var(--text-dim);flex-shrink:0}\n.search input{flex:1;background:transparent;border:none;outline:none;color:var(--text-primary);font-family:var(--font-mono);font-size:.82rem}\n.search input::placeholder{color:var(--text-dim)}\n.secrets-table-wrap{max-height:380px;overflow:auto;border:1px solid var(--border);border-radius:var(--radius-sm);background:rgba(4,8,15,.4)}\n.secrets-table{width:100%;border-collapse:collapse;font-family:var(--font-mono);font-size:.78rem}\n.secrets-table thead th{position:sticky;top:0;background:rgba(8,14,24,.95);backdrop-filter:blur(8px);text-align:left;padding:8px 10px;color:var(--text-dim);font-weight:600;font-size:.7rem;text-transform:uppercase;letter-spacing:.05em;border-bottom:1px solid var(--border);cursor:pointer;user-select:none;white-space:nowrap}\n.secrets-table thead th:hover{color:var(--text-primary)}\n.secrets-table thead th .sort-arrow{display:inline-block;margin-left:4px;color:var(--accent-bright);opacity:0;font-size:.7rem}\n.secrets-table thead th.sorted .sort-arrow{opacity:1}\n.secrets-table tbody td{padding:6px 10px;border-bottom:1px solid rgba(255,255,255,.03);color:var(--text-secondary);vertical-align:middle}\n.secrets-table tbody tr:hover td{background:rgba(14,165,233,.05);color:var(--text-primary)}\n.secrets-table .col-key{color:var(--text-primary);font-weight:500;max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.secrets-table .col-decay{min-width:90px}\n.secrets-table .col-tags{max-width:200px;overflow:hidden}\n.tag-pill{display:inline-block;font-size:.68rem;padding:1px 6px;background:rgba(168,85,247,.1);color:var(--violet);border:1px solid rgba(168,85,247,.2);border-radius:99px;margin-right:3px;font-family:var(--font-mono)}\n.scope-tag{display:inline-block;font-size:.68rem;padding:1px 6px;border-radius:4px;letter-spacing:.04em;font-weight:600;text-transform:uppercase}\n.scope-tag.global{background:rgba(14,165,233,.15);color:var(--accent-bright)}\n.scope-tag.project{background:rgba(34,197,94,.15);color:var(--green)}\n.scope-tag.team{background:rgba(168,85,247,.15);color:var(--violet)}\n.scope-tag.org{background:rgba(251,191,36,.15);color:var(--warning)}\n.type-tag{display:inline-block;font-size:.68rem;padding:1px 6px;border-radius:4px;letter-spacing:.04em;text-transform:uppercase;background:rgba(255,255,255,.05);color:var(--text-dim)}\n.type-tag.superposition{background:rgba(168,85,247,.12);color:var(--violet)}\n.protected-icon{color:var(--warning);margin-left:4px;display:inline-flex;vertical-align:middle}\n.mini-decay{display:inline-flex;align-items:center;gap:6px;width:100%}\n.mini-decay-bar{flex:1;height:4px;border-radius:2px;background:rgba(255,255,255,.06);overflow:hidden;min-width:30px}\n.mini-decay-fill{height:100%;border-radius:2px}\n.mini-decay-time{color:var(--text-dim);font-size:.7rem;min-width:38px;text-align:right}\n\n/* Empty states */\n.empty{color:var(--text-dim);font-size:.86rem;font-style:italic;padding:8px 0}\n.empty-cta{margin-top:6px;display:block;font-style:normal;font-family:var(--font-mono);font-size:.78rem;color:var(--accent-bright)}\n\n/* Footer */\n.foot{margin-top:24px;text-align:center;color:var(--text-dim);font-size:.72rem;font-family:var(--font-mono)}\n.foot a{color:var(--accent-bright);text-decoration:none}\n.foot a:hover{text-decoration:underline}\n\n/* Scrollbar */\n::-webkit-scrollbar{width:6px;height:6px}\n::-webkit-scrollbar-track{background:transparent}\n::-webkit-scrollbar-thumb{background:rgba(255,255,255,0.08);border-radius:3px}\n::-webkit-scrollbar-thumb:hover{background:rgba(255,255,255,0.15)}\n\n/* Print */\n@media print{\n  .blob,.header-right{display:none}\n  .header{position:static}\n  body{background:#fff;color:#000}\n}\n</style>\n</head>\n<body>\n\n<!-- Shared SVG gradient definition (referenced by the neon icons) -->\n<svg class=\"svg-defs\" aria-hidden=\"true\" focusable=\"false\">\n  <defs>\n    <linearGradient id=\"neon-grad\" x1=\"0%\" y1=\"0%\" x2=\"100%\" y2=\"100%\">\n      <stop offset=\"0%\" stop-color=\"#00D1FF\"/>\n      <stop offset=\"100%\" stop-color=\"#a855f7\"/>\n    </linearGradient>\n  </defs>\n</svg>\n\n<div class=\"blob blob-1\"></div>\n<div class=\"blob blob-2\"></div>\n<div class=\"blob blob-3\"></div>\n\n<!-- Preact mounts the entire UI here; see src/dashboard-client/main.js -->\n<div id=\"app\"></div>\n\n<script>window.__QRING__=Object.freeze({token:${jsString(token)}});</script>\n<script>${DASHBOARD_CLIENT}</script>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAOA,SAAS,oBAA4E;AACrF,SAAS,aAAa,uBAAuB;;;ACJtC,IAAM,mBAAmB;;;ACuBhC,SAAS,SAAS,OAAuB;AACvC,SAAO,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,SAAS;AACtD;AAEO,SAAS,iBAAiB,OAAuB;AACtD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gDAsSuC,SAAS,KAAK,CAAC;AAAA,UACrD,gBAAgB;AAAA;AAAA;AAG1B;;;AF/JA,IAAM,uBAAuB,KAAK,KAAK;AAEvC,SAAS,iBAAiB,OAKP;AACjB,QAAM,WAAW,MAAM;AACvB,QAAM,QAAQ,WAAW,WAAW,QAAQ,IAAI;AAAA,IAC9C,WAAW;AAAA,IACX,SAAS;AAAA,IACT,iBAAiB;AAAA,IACjB,kBAAkB;AAAA,IAClB,eAAe;AAAA,EACjB;AAEA,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,OAAO,MAAM;AAAA,IACb,MAAM,UAAU,SAAS,kBAAkB;AAAA,IAC3C,cAAc,UAAU,SAAS,OAAO,KAAK,SAAS,MAAM,IAAI;AAAA,IAChE,YAAY,UAAU;AAAA,IACtB;AAAA,IACA,aAAa,UAAU,KAAK,eAAe;AAAA,IAC3C,gBAAgB,UAAU,KAAK;AAAA,IAC/B,WAAW,UAAU,KAAK,aAAa;AAAA,IACvC,WAAW,UAAU,KAAK,aAAa;AAAA,IACvC,aAAa,UAAU,KAAK;AAAA,IAC5B,MAAM,UAAU,KAAK;AAAA,IACrB,WAAW,UAAU,KAAK;AAAA,IAC1B,UAAU,UAAU,KAAK;AAAA,IACzB,kBAAkB,UAAU,KAAK;AAAA,IACjC,aAAa,UAAU,KAAK;AAAA,IAC5B,mBAAmB,CAAC,CAAC,UAAU,KAAK;AAAA,EACtC;AACF;AAEA,SAAS,mBAAmB,OAAmC;AAC7D,QAAM,QAAkB,CAAC;AACzB,MAAI,MAAM,IAAK,OAAM,KAAK,OAAO,MAAM,GAAG,EAAE;AAC5C,MAAI,MAAM,WAAY,OAAM,KAAK,WAAW,MAAM,UAAU,EAAE;AAC9D,MAAI,MAAM,IAAK,OAAM,KAAK,OAAO,MAAM,GAAG,EAAE;AAC5C,MAAI,MAAM,MAAO,OAAM,KAAK,SAAS,MAAM,KAAK,EAAE;AAClD,MAAI,MAAM,QAAQ,OAAQ,OAAM,KAAK,MAAM,MAAM,OAAO,KAAK,GAAG,CAAC,EAAE;AACnE,SAAO,MAAM,SAAS,MAAM,KAAK,QAAK,IAAI;AAC5C;AAEA,SAAS,cACP,aACA,SACyB;AACzB,QAAM,SAAS,kBAAkB,WAAW;AAC5C,MAAI,CAAC,QAAQ,QAAS,QAAO;AAC7B,QAAM,WAAW,OAAO,KAAK,OAAO,OAAO;AAC3C,QAAM,iBAAiB,IAAI;AAAA,IACzB,QAAQ,OAAO,CAAC,MAAM,EAAE,UAAU,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAAA,EACpE;AAEA,QAAM,WAAqB,CAAC;AAC5B,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAC3B,QAAM,QAAkB,CAAC;AAEzB,aAAW,OAAO,UAAU;AAC1B,UAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,QAAI,MAAM,SAAU,UAAS,KAAK,GAAG;AACrC,UAAM,UAAU,eAAe,IAAI,GAAG;AACtC,QAAI,CAAC,SAAS;AACZ,UAAI,MAAM,SAAU,SAAQ,KAAK,GAAG;AACpC;AAAA,IACF;AACA,QAAI,QAAQ,MAAM,UAAW,SAAQ,KAAK,GAAG;AAAA,aACpC,QAAQ,MAAM,QAAS,OAAM,KAAK,GAAG;AAAA,EAChD;AAEA,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB,UAAU,SAAS;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,aAAqC;AAChE,QAAM,UAAU,iBAAiB,WAAW;AAC5C,QAAM,MAAM,QAAQ,QAAQ,OAAO,CAAC;AACpC,QAAM,OAAO,QAAQ,QAAQ,QAAQ,CAAC;AACtC,QAAM,MAAM,QAAQ,QAAQ,WAAW,CAAC;AACxC,SAAO;AAAA,IACL,cAAc,QAAQ;AAAA,IACtB,eAAe,QAAQ;AAAA,IACvB,iBAAiB,QAAQ;AAAA,IACzB,QAAQ;AAAA,MACN,YAAY,IAAI,YAAY,UAAU;AAAA,MACtC,WAAW,IAAI,WAAW,UAAU;AAAA,MACpC,YAAY,IAAI,YAAY,UAAU;AAAA,MACtC,YAAY,IAAI,YAAY,UAAU;AAAA,MACtC,eAAe,KAAK,eAAe,UAAU;AAAA,MAC7C,cAAc,KAAK,cAAc,UAAU;AAAA,MAC3C,wBAAwB,IAAI,wBAAwB,UAAU;AAAA,MAC9D,8BAA8B,IAAI,8BAA8B,UAAU;AAAA,IAC5E;AAAA,IACA,eAAe,IAAI;AAAA,IACnB,mBAAmB,KAAK;AAAA,EAC1B;AACF;AAEA,SAAS,kBAAkB,QAAoC;AAC7D,QAAM,WAAW,CAAC;AAClB,QAAM,WAAmC,CAAC;AAC1C,QAAM,aAAa,oBAAI,IAAoB;AAE3C,aAAW,KAAK,QAAQ;AACtB,aAAS,EAAE,MAAM,KAAK,SAAS,EAAE,MAAM,KAAK,KAAK;AACjD,aAAS,EAAE,MAAM,KAAK,SAAS,EAAE,MAAM,KAAK,KAAK;AACjD,QAAI,EAAE,WAAW,UAAU,EAAE,KAAK;AAChC,iBAAW,IAAI,EAAE,MAAM,WAAW,IAAI,EAAE,GAAG,KAAK,KAAK,CAAC;AAAA,IACxD;AAAA,EACF;AAEA,QAAM,UAAU,CAAC,GAAG,WAAW,QAAQ,CAAC,EACrC,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,EACtC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,EAAE;AAEd,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,eAAe;AAAA,EACjB;AACF;AAEO,SAAS,kBAAqC;AACnD,QAAM,cAAc,QAAQ,IAAI;AAChC,QAAM,UAAU,YAAY,EAAE,QAAQ,OAAO,QAAQ,MAAM,YAAY,CAAC;AAExE,QAAM,UAAU,QAAQ,IAAI,gBAAgB;AAE5C,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,MAAI,UAAU;AACd,MAAI,iBAAiB;AACrB,QAAM,SAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,EAAE;AAExE,aAAW,KAAK,SAAS;AACvB,QAAI,CAAC,EAAE,MAAM,cAAe;AAAA,aACnB,EAAE,MAAM,UAAW;AAAA,aACnB,EAAE,MAAM,QAAS;AAAA,QACrB;AACL,QAAI,EAAE,iBAAkB;AACxB,QAAI,EAAE,UAAU,SAAU,QAAO;AAAA,aACxB,EAAE,UAAU,UAAW,QAAO;AAAA,aAC9B,EAAE,UAAU,OAAQ,QAAO;AAAA,aAC3B,EAAE,UAAU,MAAO,QAAO;AAAA,EACrC;AAEA,QAAM,cAAc,WAAW;AAAA,IAC7B,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,uBAAuB,GAAI,EAAE,YAAY;AAAA,EACxE,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM;AAEpC,QAAM,SAAS,YAAY,MAAM,GAAG,EAAE;AAEtC,QAAM,YAAY,cAAc,EAAE,IAAsB,CAAC,OAAO;AAAA,IAC9D,IAAI,EAAE;AAAA,IACN,KAAK,EAAE;AAAA,IACP,OAAO,EAAE;AAAA,IACT,QAAQ,EAAE;AAAA,IACV,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,IACb,kBAAkB,KAAK;AAAA,OACpB,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI,KAAK;AAAA,IACnD;AAAA,IACA,OAAO,EAAE,SAAS,CAAC,EAAE;AAAA,IACrB,UAAU,EAAE;AAAA,EACd,EAAE;AAEF,QAAM,cAAc,UAAU,EAAE,IAAkB,CAAC,OAAO;AAAA,IACxD,IAAI,EAAE;AAAA,IACN,MAAM,EAAE;AAAA,IACR,aAAa,EAAE;AAAA,IACf,SAAS,EAAE;AAAA,IACX,OAAO,EAAE;AAAA,IACT,cAAc,mBAAmB,EAAE,KAAK;AAAA,EAC1C,EAAE;AAEF,SAAO;AAAA,IACL,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,SAAS,OAAO,SAAS,SAAS,OAAO,QAAQ,OAAO;AAAA,IAClE;AAAA,IACA;AAAA,IACA,eAAe,kBAAkB;AAAA,IACjC,SAAS,WAAW;AAAA,IACpB,OAAO;AAAA,IACP,cAAc,kBAAkB,WAAW;AAAA,IAC3C,WAAW,gBAAgB;AAAA,IAC3B,aAAa,oBAAoB,EAAE,YAAY,CAAC;AAAA,IAChD,UAAU,cAAc,aAAa,OAAO;AAAA,IAC5C,QAAQ,oBAAoB,WAAW;AAAA,IACvC;AAAA,IACA,OAAO;AAAA,IACP,YAAY,WAAW,EAAE;AAAA,EAC3B;AACF;AAMA,SAAS,sBAAsB,GAAW,GAAoB;AAC5D,QAAM,KAAK,OAAO,KAAK,GAAG,MAAM;AAChC,QAAM,KAAK,OAAO,KAAK,GAAG,MAAM;AAChC,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,SAAO,gBAAgB,IAAI,EAAE;AAC/B;AAEO,SAAS,qBACd,UAAkC,CAAC,GAC8C;AACjF,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,UAAU,oBAAI,IAAoB;AACxC,MAAI,iBAAwD;AAK5D,QAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,WAAW;AAClD,QAAM,OAAO,iBAAiB,KAAK;AAEnC,WAAS,YAAY;AACnB,UAAM,WAAW,gBAAgB;AACjC,UAAM,OAAO,SAAS,KAAK,UAAU,QAAQ,CAAC;AAAA;AAAA;AAC9C,eAAW,OAAO,SAAS;AACzB,UAAI,IAAI,iBAAiB,IAAI,WAAW;AACtC,gBAAQ,OAAO,GAAG;AAClB;AAAA,MACF;AACA,UAAI;AACF,cAAM,KAAK,IAAI,MAAM,IAAI;AACzB,YAAI,CAAC,IAAI;AACP,kBAAQ,OAAO,GAAG;AAClB,cAAI;AAAE,gBAAI,IAAI;AAAA,UAAG,QAAQ;AAAE,gBAAI;AAAE,kBAAI,QAAQ;AAAA,YAAG,QAAQ;AAAA,YAAa;AAAA,UAAE;AAAA,QACzE;AAAA,MACF,QAAQ;AACN,gBAAQ,OAAO,GAAG;AAClB,YAAI;AAAE,cAAI,IAAI;AAAA,QAAG,QAAQ;AAAE,cAAI;AAAE,gBAAI,QAAQ;AAAA,UAAG,QAAQ;AAAA,UAAa;AAAA,QAAE;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,CAAC,KAAsB,QAAwB;AACzE,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACzD,iBAAW,OAAO;AAClB,cAAQ,OAAO;AAAA,IACjB,QAAQ;AACN,UAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,UAAI,IAAI,0BAA0B;AAClC;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,IAAI,OAAO,KAAK;AACvC,QAAI,CAAC,sBAAsB,UAAU,KAAK,GAAG;AAC3C,UAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,UAAI,IAAI,qCAAqC;AAC7C;AAAA,IACF;AAEA,QAAI,aAAa,WAAW;AAC1B,UAAI,UAAU,KAAK;AAAA,QACjB,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,YAAY;AAAA,MACd,CAAC;AAED,YAAM,WAAW,gBAAgB;AACjC,UAAI,MAAM,SAAS,KAAK,UAAU,QAAQ,CAAC;AAAA;AAAA,CAAM;AAEjD,cAAQ,IAAI,GAAG;AACf,UAAI,GAAG,SAAS,MAAM,QAAQ,OAAO,GAAG,CAAC;AACzC;AAAA,IACF;AAEA,QAAI,aAAa,eAAe;AAC9B,YAAM,WAAW,gBAAgB;AACjC,UAAI,UAAU,KAAK;AAAA,QACjB,gBAAgB;AAAA,MAClB,CAAC;AACD,UAAI,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AACzC;AAAA,IACF;AAEA,QAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;AACjE,QAAI,IAAI,IAAI;AAAA,EACd,CAAC;AAED,SAAO,OAAO,MAAM,aAAa,MAAM;AACrC,qBAAiB,YAAY,WAAW,GAAI;AAC5C,QAAI,kBAAkB,OAAO,mBAAmB,YAAY,WAAW,gBAAgB;AACrF,qBAAe,MAAM;AAAA,IACvB;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,KAAK,oBAAoB,IAAI,WAAW,KAAK;AAAA,IAC7C,OAAO,MAAM;AACX,UAAI,eAAgB,eAAc,cAAc;AAChD,iBAAW,OAAO,SAAS;AACzB,YAAI;AAAE,cAAI,IAAI;AAAA,QAAG,QAAQ;AAAA,QAAa;AAAA,MACxC;AACA,cAAQ,MAAM;AACd,aAAO,MAAM;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/index.js

@@ -42,7 +42,7 @@ import {
   tunnelList,
   tunnelRead,
   verifyAuditChain
-} from "./chunk-A4RZVP3P.js";
+} from "./chunk-5TQNDJT3.js";
 
 // src/cli/commands.ts
 import { Command, Help } from "commander";
@@ -137,8 +137,11 @@ function parseDotenv(content) {
       '"': '"'
     };
     value = value.replace(/\\([nrt"\\])/g, (_, ch) => escapeMap[ch] ?? ch);
-    if (value.includes("#") && !line.includes('"') && !line.includes("'")) {
-      value = value.split("#")[0].trim();
+    if (!line.includes('"') && !line.includes("'")) {
+      const commentMatch = value.match(/\s#/);
+      if (commentMatch && commentMatch.index !== void 0) {
+        value = value.slice(0, commentMatch.index).trim();
+      }
     }
     if (key) result.set(key, value);
   }
@@ -146,9 +149,14 @@ function parseDotenv(content) {
 }
 function importDotenv(filePathOrContent, options = {}) {
   let content;
-  try {
-    content = readFileSync(filePathOrContent, "utf8");
-  } catch {
+  const source = options.source ?? "cli";
+  if (source === "cli") {
+    try {
+      content = readFileSync(filePathOrContent, "utf8");
+    } catch {
+      content = filePathOrContent;
+    }
+  } else {
     content = filePathOrContent;
   }
   const pairs = parseDotenv(content);
@@ -594,24 +602,28 @@ function generateSecret(opts = {}) {
     }
     case "password": {
       const len = opts.length ?? 24;
-      let pw = randomString(PASSWORD_CHARS, len);
-      const hasUpper = /[A-Z]/.test(pw);
-      const hasLower = /[a-z]/.test(pw);
-      const hasDigit = /[0-9]/.test(pw);
-      const hasSpecial = /[^A-Za-z0-9]/.test(pw);
-      if (!hasUpper) pw = replaceAt(pw, randomInt(len), randomString("ABCDEFGHIJKLMNOPQRSTUVWXYZ", 1));
-      if (!hasLower) pw = replaceAt(pw, randomInt(len), randomString("abcdefghijklmnopqrstuvwxyz", 1));
-      if (!hasDigit) pw = replaceAt(pw, randomInt(len), randomString("0123456789", 1));
-      if (!hasSpecial) pw = replaceAt(pw, randomInt(len), randomString("!@#$%^&*()-_=+", 1));
-      return pw;
+      const classCharsets = [
+        "ABCDEFGHIJKLMNOPQRSTUVWXYZ",
+        "abcdefghijklmnopqrstuvwxyz",
+        "0123456789",
+        "!@#$%^&*()-_=+"
+      ];
+      const guaranteed = classCharsets.slice(0, Math.min(classCharsets.length, len)).map((cs) => randomString(cs, 1));
+      const remaining = Math.max(0, len - guaranteed.length);
+      const chars = [
+        ...guaranteed,
+        ...remaining > 0 ? randomString(PASSWORD_CHARS, remaining).split("") : []
+      ];
+      for (let i = chars.length - 1; i > 0; i--) {
+        const j = randomInt(i + 1);
+        [chars[i], chars[j]] = [chars[j], chars[i]];
+      }
+      return chars.join("");
     }
     default:
       return randomBytes(32).toString("hex");
   }
 }
-function replaceAt(str, index, char) {
-  return str.slice(0, index) + char + str.slice(index + 1);
-}
 function estimateEntropy(secret) {
   const charsets = [
     { regex: /[a-z]/, size: 26 },
@@ -1225,7 +1237,8 @@ var ALGORITHM = "aes-256-gcm";
 var KEY_LENGTH = 32;
 var IV_LENGTH = 12;
 var SALT_LENGTH = 32;
-var PBKDF2_ITERATIONS = 1e5;
+var PBKDF2_ITERATIONS = 21e4;
+var LEGACY_PBKDF2_ITERATIONS = 1e5;
 var TeleportBundleSchema = z.object({
   v: z.literal(1),
   data: z.string(),
@@ -1233,7 +1246,8 @@ var TeleportBundleSchema = z.object({
   iv: z.string(),
   tag: z.string(),
   createdAt: z.string(),
-  count: z.number()
+  count: z.number(),
+  iter: z.number().optional()
 });
 var TeleportPayloadSchema = z.object({
   secrets: z.array(
@@ -1246,8 +1260,8 @@ var TeleportPayloadSchema = z.object({
   exportedAt: z.string(),
   exportedBy: z.string().optional()
 });
-function deriveKey(passphrase, salt) {
-  return pbkdf2Sync(passphrase, salt, PBKDF2_ITERATIONS, KEY_LENGTH, "sha512");
+function deriveKey(passphrase, salt, iterations = PBKDF2_ITERATIONS) {
+  return pbkdf2Sync(passphrase, salt, iterations, KEY_LENGTH, "sha512");
 }
 function teleportPack(secrets, passphrase) {
   const payload = {
@@ -1257,7 +1271,7 @@ function teleportPack(secrets, passphrase) {
   const plaintext = JSON.stringify(payload);
   const salt = randomBytes2(SALT_LENGTH);
   const iv = randomBytes2(IV_LENGTH);
-  const key = deriveKey(passphrase, salt);
+  const key = deriveKey(passphrase, salt, PBKDF2_ITERATIONS);
   const cipher = createCipheriv(ALGORITHM, key, iv);
   const encrypted = Buffer.concat([
     cipher.update(plaintext, "utf8"),
@@ -1271,7 +1285,8 @@ function teleportPack(secrets, passphrase) {
     iv: iv.toString("base64"),
     tag: tag.toString("base64"),
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-    count: secrets.length
+    count: secrets.length,
+    iter: PBKDF2_ITERATIONS
   };
   return Buffer.from(JSON.stringify(bundle)).toString("base64");
 }
@@ -1299,7 +1314,7 @@ function teleportUnpack(encoded, passphrase) {
   const iv = Buffer.from(bundle.iv, "base64");
   const tag = Buffer.from(bundle.tag, "base64");
   const encrypted = Buffer.from(bundle.data, "base64");
-  const key = deriveKey(passphrase, salt);
+  const key = deriveKey(passphrase, salt, bundle.iter ?? LEGACY_PBKDF2_ITERATIONS);
   const decipher = createDecipheriv(ALGORITHM, key, iv);
   decipher.setAuthTag(tag);
   let decrypted;
@@ -1846,7 +1861,8 @@ async function execCommand(opts) {
       "dig",
       "nslookup"
     ]);
-    if (profile.allowNetwork === false && networkTools.has(opts.command)) {
+    const commandBase = opts.command.split(/[\\/]/).pop() ?? opts.command;
+    if (profile.allowNetwork === false && networkTools.has(commandBase)) {
       const msg = `[QRING] Execution blocked: network access is disabled for profile "${profile.name}", command "${opts.command}" is considered network-related`;
       if (opts.captureOutput) {
         return resolve({ code: 126, stdout: "", stderr: msg });
@@ -2251,12 +2267,11 @@ function registerToolingCommands(program2) {
     }
   });
   program2.command("status").description("Launch the quantum status dashboard in your browser").option("--port <port>", "Port to serve on", "9876").option("--no-open", "Don't auto-open the browser").action(async (cmd) => {
-    const { startDashboardServer } = await import("./dashboard-OXUD62RV.js");
+    const { startDashboardServer } = await import("./dashboard-6XKC5BL4.js");
     const { exec } = await import("child_process");
     const { platform } = await import("os");
     const port = Number(cmd.port);
-    const { close } = startDashboardServer({ port });
-    const url = `http://127.0.0.1:${port}`;
+    const { close, url } = startDashboardServer({ port });
     console.log(
       `
   ${SYMBOLS.zap} ${c.bold("q-ring quantum status dashboard")}