@i4ctime/q-ring 0.17.5 → 0.18.0

package/dist/dashboard-ZN3FPR73.js

@@ -1,685 +0,0 @@
-#!/usr/bin/env node
-import {
-  PACKAGE_VERSION,
-  buildSessions,
-  checkDecay,
-  collapseEnvironment,
-  detectAnomalies,
-  getPolicySummary,
-  listApprovals,
-  listEntanglements,
-  listHooks,
-  listMemory,
-  listSecrets,
-  queryAudit,
-  readProjectConfig,
-  tunnelList,
-  verifyAuditChain
-} from "./chunk-5ZCQSBVS.js";
-
-// src/core/dashboard.ts
-import { createServer } from "http";
-import { randomBytes, timingSafeEqual } from "crypto";
-
-// src/core/dashboard-client.ts
-var DASHBOARD_CLIENT = '"use strict";(()=>{var J,b,Me,tt,N,be,Se,Ae,ae,W,I,Ee,le,ie,oe,nt,z={},Y=[],st=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Q=Array.isArray;function T(t,e){for(var n in e)t[n]=e[n];return t}function re(t){t&&t.parentNode&&t.parentNode.removeChild(t)}function ce(t,e,n){var s,i,a,l={};for(a in e)a=="key"?s=e[a]:a=="ref"?i=e[a]:l[a]=e[a];if(arguments.length>2&&(l.children=arguments.length>3?J.call(arguments,2):n),typeof t=="function"&&t.defaultProps!=null)for(a in t.defaultProps)l[a]===void 0&&(l[a]=t.defaultProps[a]);return K(t,l,s,i,null)}function K(t,e,n,s,i){var a={type:t,props:e,key:n,ref:s,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i==null?++Me:i,__i:-1,__u:0};return i==null&&b.vnode!=null&&b.vnode(a),a}function X(t){return t.children}function O(t,e){this.props=t,this.context=e}function D(t,e){if(e==null)return t.__?D(t.__,t.__i+1):null;for(var n;e<t.__k.length;e++)if((n=t.__k[e])!=null&&n.__e!=null)return n.__e;return typeof t.type=="function"?D(t):null}function at(t){if(t.__P&&t.__d){var e=t.__v,n=e.__e,s=[],i=[],a=T({},e);a.__v=e.__v+1,b.vnode&&b.vnode(a),de(t.__P,a,e,t.__n,t.__P.namespaceURI,32&e.__u?[n]:null,s,n==null?D(e):n,!!(32&e.__u),i),a.__v=e.__v,a.__.__k[a.__i]=a,Ne(s,a,i),e.__e=e.__=null,a.__e!=n&&Pe(a)}}function Pe(t){if((t=t.__)!=null&&t.__c!=null)return t.__e=t.__c.base=null,t.__k.some(function(e){if(e!=null&&e.__e!=null)return t.__e=t.__c.base=e.__e}),Pe(t)}function xe(t){(!t.__d&&(t.__d=!0)&&N.push(t)&&!G.__r++||be!=b.debounceRendering)&&((be=b.debounceRendering)||Se)(G)}function G(){try{for(var t,e=1;N.length;)N.length>e&&N.sort(Ae),t=N.shift(),e=N.length,at(t)}finally{N.length=G.__r=0}}function Re(t,e,n,s,i,a,l,r,u,d,c){var _,o,v,y,h,f,m=s&&s.__k||Y,$=e.length;for(u=it(n,e,m,u,$),_=0;_<$;_++)(v=n.__k[_])!=null&&(o=v.__i!=-1&&m[v.__i]||z,v.__i=_,f=de(t,v,o,i,a,l,r,u,d,c),y=v.__e,v.ref&&o.ref!=v.ref&&(o.ref&&pe(o.ref,null,v),c.push(v.ref,v.__c||y,v)),h==null&&y!=null&&(h=y),4&v.__u?(u=Te(v,u,t),o.__e&&(o.__e=null)):typeof v.type=="function"&&f!==void 0?u=f:y&&(u=y.nextSibling),v.__u&=-7);return n.__e=h,u}function it(t,e,n,s,i){var a,l,r,u,d,c=n.length,_=c,o=0;for(t.__k=new Array(i),a=0;a<i;a++)(l=e[a])!=null&&typeof l!="boolean"&&typeof l!="function"?(typeof l=="string"||typeof l=="number"||typeof l=="bigint"||l.constructor==String?l=t.__k[a]=K(null,l,null,null,null):Q(l)?l=t.__k[a]=K(X,{children:l},null,null,null):l.constructor===void 0&&l.__b>0?l=t.__k[a]=K(l.type,l.props,l.key,l.ref?l.ref:null,l.__v):t.__k[a]=l,u=a+o,l.__=t,l.__b=t.__b+1,r=null,(d=l.__i=ot(l,n,u,_))!=-1&&(_--,(r=n[d])&&(r.__u|=2)),r==null||r.__v==null?(d==-1&&(i>c?o--:i<c&&o++),typeof l.type!="function"&&(l.__u|=4)):d!=u&&(d==u-1?o--:d==u+1?o++:(d>u?o--:o++,l.__u|=4))):t.__k[a]=null;if(_)for(a=0;a<c;a++)(r=n[a])!=null&&(2&r.__u)==0&&(r.__e==s&&(s=D(r)),De(r,r));return s}function Te(t,e,n){var s,i;if(typeof t.type=="function"){for(s=t.__k,i=0;s&&i<s.length;i++)s[i]&&(s[i].__=t,e=Te(s[i],e,n));return e}t.__e!=e&&(e&&t.type&&!e.parentNode&&(e=D(t)),e=n.insertBefore(t.__e,e||null));do e=e&&e.nextSibling;while(e!=null&&e.nodeType==8);return e}function ot(t,e,n,s){var i,a,l,r=t.key,u=t.type,d=e[n],c=d!=null&&(2&d.__u)==0;if(d===null&&r==null||c&&r==d.key&&u==d.type)return n;if(s>(c?1:0)){for(i=n-1,a=n+1;i>=0||a<e.length;)if((d=e[l=i>=0?i--:a++])!=null&&(2&d.__u)==0&&r==d.key&&u==d.type)return l}return-1}function we(t,e,n){e[0]=="-"?t.setProperty(e,n==null?"":n):t[e]=n==null?"":typeof n!="number"||st.test(e)?n:n+"px"}function V(t,e,n,s,i){var a,l;e:if(e=="style")if(typeof n=="string")t.style.cssText=n;else{if(typeof s=="string"&&(t.style.cssText=s=""),s)for(e in s)n&&e in n||we(t.style,e,"");if(n)for(e in n)s&&n[e]==s[e]||we(t.style,e,n[e])}else if(e[0]=="o"&&e[1]=="n")a=e!=(e=e.replace(Ee,"$1")),l=e.toLowerCase(),e=l in t||e=="onFocusOut"||e=="onFocusIn"?l.slice(2):e.slice(2),t.l||(t.l={}),t.l[e+a]=n,n?s?n[I]=s[I]:(n[I]=le,t.addEventListener(e,a?oe:ie,a)):t.removeEventListener(e,a?oe:ie,a);else{if(i=="http://www.w3.org/2000/svg")e=e.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if(e!="width"&&e!="height"&&e!="href"&&e!="list"&&e!="form"&&e!="tabIndex"&&e!="download"&&e!="rowSpan"&&e!="colSpan"&&e!="role"&&e!="popover"&&e in t)try{t[e]=n==null?"":n;break e}catch{}typeof n=="function"||(n==null||n===!1&&e[4]!="-"?t.removeAttribute(e):t.setAttribute(e,e=="popover"&&n==1?"":n))}}function Ce(t){return function(e){if(this.l){var n=this.l[e.type+t];if(e[W]==null)e[W]=le++;else if(e[W]<n[I])return;return n(b.event?b.event(e):e)}}}function de(t,e,n,s,i,a,l,r,u,d){var c,_,o,v,y,h,f,m,$,g,w,P,H,ke,F,se,R=e.type;if(e.constructor!==void 0)return null;128&n.__u&&(u=!!(32&n.__u),a=[r=e.__e=n.__e]),(c=b.__b)&&c(e);e:if(typeof R=="function"){_=l.length;try{if($=e.props,g=R.prototype&&R.prototype.render,w=(c=R.contextType)&&s[c.__c],P=c?w?w.props.value:c.__:s,n.__c?m=(o=e.__c=n.__c).__=o.__E:(g?e.__c=o=new R($,P):(e.__c=o=new O($,P),o.constructor=R,o.render=rt),w&&w.sub(o),o.state||(o.state={}),o.__n=s,v=o.__d=!0,o.__h=[],o._sb=[]),g&&o.__s==null&&(o.__s=o.state),g&&R.getDerivedStateFromProps!=null&&(o.__s==o.state&&(o.__s=T({},o.__s)),T(o.__s,R.getDerivedStateFromProps($,o.__s))),y=o.props,h=o.state,o.__v=e,v)g&&R.getDerivedStateFromProps==null&&o.componentWillMount!=null&&o.componentWillMount(),g&&o.componentDidMount!=null&&o.__h.push(o.componentDidMount);else{if(g&&R.getDerivedStateFromProps==null&&$!==y&&o.componentWillReceiveProps!=null&&o.componentWillReceiveProps($,P),e.__v==n.__v||!o.__e&&o.shouldComponentUpdate!=null&&o.shouldComponentUpdate($,o.__s,P)===!1){e.__v!=n.__v&&(o.props=$,o.state=o.__s,o.__d=!1),e.__e=n.__e,e.__k=n.__k,e.__k.some(function(L){L&&(L.__=e)}),Y.push.apply(o.__h,o._sb),o._sb=[],o.__h.length&&l.push(o),r=D(n);break e}o.componentWillUpdate!=null&&o.componentWillUpdate($,o.__s,P),g&&o.componentDidUpdate!=null&&o.__h.push(function(){o.componentDidUpdate(y,h,f)})}if(o.context=P,o.props=$,o.__P=t,o.__e=!1,H=b.__r,ke=0,g)o.state=o.__s,o.__d=!1,H&&H(e),c=o.render(o.props,o.state,o.context),Y.push.apply(o.__h,o._sb),o._sb=[];else do o.__d=!1,H&&H(e),c=o.render(o.props,o.state,o.context),o.state=o.__s;while(o.__d&&++ke<25);o.state=o.__s,o.getChildContext!=null&&(s=T(T({},s),o.getChildContext())),g&&!v&&o.getSnapshotBeforeUpdate!=null&&(f=o.getSnapshotBeforeUpdate(y,h)),F=c!=null&&c.type===X&&c.key==null?He(c.props.children):c,r=Re(t,Q(F)?F:[F],e,n,s,i,a,l,r,u,d),o.base=e.__e,e.__u&=-161,o.__h.length&&l.push(o),m&&(o.__E=o.__=null)}catch(L){if(l.length=_,e.__v=null,u||a!=null){if(L.then){for(e.__u|=u?160:128;r&&r.nodeType==8&&r.nextSibling;)r=r.nextSibling;a!=null&&(a[a.indexOf(r)]=null),e.__e=r}else if(a!=null)for(se=a.length;se--;)re(a[se])}else e.__e=n.__e;e.__k==null&&(e.__k=n.__k||[]),L.then||qe(e),b.__e(L,e,n)}}else a==null&&e.__v==n.__v?(e.__k=n.__k,e.__e=n.__e):r=e.__e=lt(n.__e,e,n,s,i,a,l,u,d);return(c=b.diffed)&&c(e),128&e.__u?void 0:r}function qe(t){t&&(t.__c&&(t.__c.__e=!0),t.__k&&t.__k.some(qe))}function Ne(t,e,n){for(var s=0;s<n.length;s++)pe(n[s],n[++s],n[++s]);b.__c&&b.__c(e,t),t.some(function(i){try{t=i.__h,i.__h=[],t.some(function(a){a.call(i)})}catch(a){b.__e(a,i.__v)}})}function He(t){return typeof t!="object"||t==null||t.__b>0?t:Q(t)?t.map(He):t.constructor!==void 0?null:T({},t)}function lt(t,e,n,s,i,a,l,r,u){var d,c,_,o,v,y,h,f=n.props||z,m=e.props,$=e.type;if($=="svg"?i="http://www.w3.org/2000/svg":$=="math"?i="http://www.w3.org/1998/Math/MathML":i||(i="http://www.w3.org/1999/xhtml"),a!=null){for(d=0;d<a.length;d++)if((v=a[d])&&"setAttribute"in v==!!$&&($?v.localName==$:v.nodeType==3)){t=v,a[d]=null;break}}if(t==null){if($==null)return document.createTextNode(m);t=document.createElementNS(i,$,m.is&&m),r&&(b.__m&&b.__m(e,a),r=!1),a=null}if($==null)f===m||r&&t.data==m||(t.data=m);else{if(a=$=="textarea"&&m.defaultValue!=null?null:a&&J.call(t.childNodes),!r&&a!=null)for(f={},d=0;d<t.attributes.length;d++)f[(v=t.attributes[d]).name]=v.value;for(d in f)v=f[d],d=="dangerouslySetInnerHTML"?_=v:d=="children"||d in m||d=="value"&&"defaultValue"in m||d=="checked"&&"defaultChecked"in m||V(t,d,null,v,i);for(d in m)v=m[d],d=="children"?o=v:d=="dangerouslySetInnerHTML"?c=v:d=="value"?y=v:d=="checked"?h=v:r&&typeof v!="function"||f[d]===v||V(t,d,v,f[d],i);if(c)r||_&&(c.__html==_.__html||c.__html==t.innerHTML)||(t.innerHTML=c.__html),e.__k=[];else if(_&&(t.innerHTML=""),Re(e.type=="template"?t.content:t,Q(o)?o:[o],e,n,s,$=="foreignObject"?"http://www.w3.org/1999/xhtml":i,a,l,a?a[0]:n.__k&&D(n,0),r,u),a!=null)for(d=a.length;d--;)re(a[d]);r&&$!="textarea"||(d="value",$=="progress"&&y==null?t.removeAttribute("value"):y!=null&&(y!==t[d]||$=="progress"&&!y||$=="option"&&y!=f[d])&&V(t,d,y,f[d],i),d="checked",h!=null&&h!=t[d]&&V(t,d,h,f[d],i))}return t}function pe(t,e,n){try{if(typeof t=="function"){var s=typeof t.__u=="function";s&&t.__u(),s&&e==null||(t.__u=t(e))}else t.current=e}catch(i){b.__e(i,n)}}function De(t,e,n){var s,i;if(b.unmount&&b.unmount(t),(s=t.ref)&&(s.current&&s.current!=t.__e||pe(s,null,e)),(s=t.__c)!=null){if(s.componentWillUnmount)try{s.componentWillUnmount()}catch(a){b.__e(a,e)}s.base=s.__P=s.__n=null}if(s=t.__k)for(i=0;i<s.length;i++)s[i]&&De(s[i],e,n||typeof t.type!="function");n||re(t.__e),t.__c=t.__=t.__e=void 0}function rt(t,e,n){return this.constructor(t,n)}function Le(t,e,n){var s,i,a,l;e==document&&(e=document.documentElement),b.__&&b.__(t,e),i=(s=typeof n=="function")?null:n&&n.__k||e.__k,a=[],l=[],de(e,t=(!s&&n||e).__k=ce(X,null,[t]),i||z,z,e.namespaceURI,!s&&n?[n]:i?null:e.firstChild?J.call(e.childNodes):null,a,!s&&n?n:i?i.__e:e.firstChild,s,l),Ne(a,t,l),t.props.children=null}J=Y.slice,b={__e:function(t,e,n,s){for(var i,a,l;e=e.__;)if((i=e.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(t)),l=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(t,s||{}),l=i.__d),l)return i.__E=i}catch(r){t=r}throw t}},Me=0,tt=function(t){return t!=null&&t.constructor===void 0},O.prototype.setState=function(t,e){var n;n=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=T({},this.state),typeof t=="function"&&(t=t(T({},n),this.props)),t&&T(n,t),t!=null&&this.__v&&(e&&this._sb.push(e),xe(this))},O.prototype.forceUpdate=function(t){this.__v&&(this.__e=!0,t&&this.__h.push(t),xe(this))},O.prototype.render=X,N=[],Se=typeof Promise=="function"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,Ae=function(t,e){return t.__v.__b-e.__v.__b},G.__r=0,ae=Math.random().toString(8),W="__d"+ae,I="__a"+ae,Ee=/(PointerCapture)$|Capture$/i,le=0,ie=Ce(!1),oe=Ce(!0),nt=0;var U,x,ue,je,B=0,Oe=[],C=b,Ie=C.__b,Ue=C.__r,Be=C.diffed,Fe=C.__c,Ve=C.unmount,We=C.__;function ve(t,e){C.__h&&C.__h(x,t,B||e),B=0;var n=x.__H||(x.__H={__:[],__h:[]});return t>=n.__.length&&n.__.push({}),n.__[t]}function q(t){return B=1,ct(Ye,t)}function ct(t,e,n){var s=ve(U++,2);if(s.t=t,!s.__c&&(s.__=[n?n(e):Ye(void 0,e),function(r){var u=s.__N?s.__N[0]:s.__[0],d=s.t(u,r);u!==d&&(s.__N=[d,s.__[1]],s.__c.setState({}))}],s.__c=x,!x.__f)){var i=function(r,u,d){if(!s.__c.__H)return!0;var c=!1,_=s.__c.props!==r;if(s.__c.__H.__.some(function(v){if(v.__N){c=!0;var y=v.__[0];v.__=v.__N,v.__N=void 0,y!==v.__[0]&&(_=!0)}}),a){var o=a.call(this,r,u,d);return c?o||_:o}return!c||_};x.__f=!0;var a=x.shouldComponentUpdate,l=x.componentWillUpdate;x.componentWillUpdate=function(r,u,d){if(this.__e){var c=a;a=void 0,i(r,u,d),a=c}l&&l.call(this,r,u,d)},x.shouldComponentUpdate=i}return s.__N||s.__}function ee(t,e){var n=ve(U++,3);!C.__s&&ze(n.__H,e)&&(n.__=t,n.u=e,x.__H.__h.push(n))}function he(t){return B=5,te(function(){return{current:t}},[])}function te(t,e){var n=ve(U++,7);return ze(n.__H,e)&&(n.__=t(),n.__H=e,n.__h=t),n.__}function ye(t,e){return B=8,te(function(){return t},e)}function dt(){for(var t;t=Oe.shift();){var e=t.__H;if(t.__P&&e)try{e.__h.some(Z),e.__h.some(_e),e.__h=[]}catch(n){e.__h=[],C.__e(n,t.__v)}}}C.__b=function(t){x=null,Ie&&Ie(t)},C.__=function(t,e){t&&e.__k&&e.__k.__m&&(t.__m=e.__k.__m),We&&We(t,e)},C.__r=function(t){Ue&&Ue(t),U=0;var e=(x=t.__c).__H;e&&(ue===x?(e.__h=[],x.__h=[],e.__.some(function(n){n.__N&&(n.__=n.__N),n.u=n.__N=void 0})):(e.__h.some(Z),e.__h.some(_e),e.__h=[],U=0)),ue=x},C.diffed=function(t){Be&&Be(t);var e=t.__c;e&&e.__H&&(e.__H.__h.length&&(Oe.push(e)!==1&&je===C.requestAnimationFrame||((je=C.requestAnimationFrame)||pt)(dt)),e.__H.__.some(function(n){n.u&&(n.__H=n.u,n.u=void 0)})),ue=x=null},C.__c=function(t,e){e.some(function(n){try{n.__h.some(Z),n.__h=n.__h.filter(function(s){return!s.__||_e(s)})}catch(s){e.some(function(i){i.__h&&(i.__h=[])}),e=[],C.__e(s,n.__v)}}),Fe&&Fe(t,e)},C.unmount=function(t){Ve&&Ve(t);var e,n=t.__c;n&&n.__H&&(n.__H.__.some(function(s){try{Z(s)}catch(i){e=i}}),n.__H=void 0,e&&C.__e(e,n.__v))};var Ke=typeof requestAnimationFrame=="function";function pt(t){var e,n=function(){clearTimeout(s),Ke&&cancelAnimationFrame(e),setTimeout(t)},s=setTimeout(n,35);Ke&&(e=requestAnimationFrame(n))}function Z(t){var e=x,n=t.__c;typeof n=="function"&&(t.__c=void 0,n()),x=e}function _e(t){var e=x;t.__c=t.__(),x=e}function ze(t,e){return!t||t.length!==e.length||e.some(function(n,s){return n!==t[s]})}function Ye(t,e){return typeof e=="function"?e(t):e}var Je=function(t,e,n,s){var i;e[0]=0;for(var a=1;a<e.length;a++){var l=e[a++],r=e[a]?(e[0]|=l?1:2,n[e[a++]]):e[++a];l===3?s[0]=r:l===4?s[1]=Object.assign(s[1]||{},r):l===5?(s[1]=s[1]||{})[e[++a]]=r:l===6?s[1][e[++a]]+=r+"":l?(i=t.apply(r,Je(t,r,n,["",null])),s.push(i),r[0]?e[0]|=2:(e[a-2]=0,e[a]=i)):s.push(r)}return s},Ge=new Map;function Qe(t){var e=Ge.get(this);return e||(e=new Map,Ge.set(this,e)),(e=Je(this,e.get(t)||(e.set(t,e=(function(n){for(var s,i,a=1,l="",r="",u=[0],d=function(o){a===1&&(o||(l=l.replace(/^\\s*\\n\\s*|\\s*\\n\\s*$/g,"")))?u.push(0,o,l):a===3&&(o||l)?(u.push(3,o,l),a=2):a===2&&l==="..."&&o?u.push(4,o,0):a===2&&l&&!o?u.push(5,0,!0,l):a>=5&&((l||!o&&a===5)&&(u.push(a,0,l,i),a=6),o&&(u.push(a,o,0,i),a=6)),l=""},c=0;c<n.length;c++){c&&(a===1&&d(),d(c));for(var _=0;_<n[c].length;_++)s=n[c][_],a===1?s==="<"?(d(),u=[u],a=3):l+=s:a===4?l==="--"&&s===">"?(a=1,l=""):l=s+l[0]:r?s===r?r="":l+=s:s===\'"\'||s==="\'"?r=s:s===">"?(d(),a=1):a&&(s==="="?(a=5,i=l,l=""):s==="/"&&(a<5||n[c][_+1]===">")?(d(),a===3&&(u=u[0]),a=u,(u=u[0]).push(2,0,a),a=0):s===" "||s==="	"||s===`\n`||s==="\\r"?(d(),a=2):l+=s),a===3&&l==="!--"&&(a=4,u=u[0])}return d(),u})(t)),e),arguments,[])).length>1?e:e[0]}var p=Qe.bind(ce),Xe=window.__QRING__&&window.__QRING__.token||"",fe=Xe?"?token="+encodeURIComponent(Xe):"",A=t=>\'<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="url(#neon-grad)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">\'+t+"</svg>",k={health:A(\'<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/>\'),environment:A(\'<polyline points="22 12 18 12 15 21 9 3 6 12 2 12"/>\'),decay:A(\'<path d="M5 22h14"/><path d="M5 2h14"/><path d="M17 22v-4.172a2 2 0 0 0-.586-1.414L12 12l-4.414 4.414A2 2 0 0 0 7 17.828V22"/><path d="M7 2v4.172a2 2 0 0 0 .586 1.414L12 12l4.414-4.414A2 2 0 0 0 17 6.172V2"/>\'),superposition:A(\'<polygon points="12 2 2 7 12 12 22 7 12 2"/><polyline points="2 17 12 22 22 17"/><polyline points="2 12 12 17 22 12"/>\'),entangle:A(\'<path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/>\'),tunnel:A(\'<path d="M9 10h.01"/><path d="M15 10h.01"/><path d="M12 2a8 8 0 0 0-8 8v12l3-3 2.5 2.5L12 19l2.5 2.5L17 19l3 3V10a8 8 0 0 0-8-8z"/>\'),anomaly:A(\'<path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/>\'),audit:A(\'<circle cx="12" cy="12" r="10"/><circle cx="12" cy="12" r="6"/><circle cx="12" cy="12" r="2"/>\'),key:A(\'<path d="M21 2l-2 2m-7.61 7.61a5.5 5.5 0 1 1-7.778 7.778 5.5 5.5 0 0 1 7.777-7.777zm0 0L15.5 7.5m0 0l3 3L22 7l-3-3m-3.5 3.5L19 4"/>\'),hook:A(\'<path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/>\'),approve:A(\'<path d="M9 11l3 3L22 4"/><path d="M21 12v7a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h11"/>\'),manifest:A(\'<path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/><line x1="16" y1="13" x2="8" y2="13"/><line x1="16" y1="17" x2="8" y2="17"/>\'),policy:A(\'<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="M9 12l2 2 4-4"/>\'),memory:A(\'<rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><line x1="9" y1="2" x2="9" y2="4"/><line x1="15" y1="2" x2="15" y2="4"/><line x1="9" y1="20" x2="9" y2="22"/><line x1="15" y1="20" x2="15" y2="22"/><line x1="20" y1="9" x2="22" y2="9"/><line x1="20" y1="14" x2="22" y2="14"/><line x1="2" y1="9" x2="4" y2="9"/><line x1="2" y1="14" x2="4" y2="14"/>\'),folder:\'<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z"/></svg>\',search:\'<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>\',lock:\'<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>\'};function $e(t){if(!t)return"env-default";let e=t.toLowerCase();return e==="prod"||e==="production"?"env-prod":e==="staging"||e==="stage"?"env-staging":e==="dev"||e==="development"?"env-dev":e==="test"||e==="testing"?"env-test":"env-default"}function et(t,e){return e||t>=90?"var(--danger)":t>=75?"var(--warning)":"var(--accent)"}function me(t){let e=new Date(t);return String(e.getHours()).padStart(2,"0")+":"+String(e.getMinutes()).padStart(2,"0")+":"+String(e.getSeconds()).padStart(2,"0")}function ge(t){if(!t)return"\\u2014";let e=Math.floor((Date.now()-new Date(t).getTime())/1e3);return isNaN(e)?"\\u2014":e<5?"just now":e<60?e+"s ago":e<3600?Math.floor(e/60)+"m ago":e<86400?Math.floor(e/3600)+"h ago":Math.floor(e/86400)+"d ago"}function ne(t){return t==null?"\\u2014":t<0?"expired":t<60?t+"s":t<3600?Math.floor(t/60)+"m":t<86400?Math.floor(t/3600)+"h":Math.floor(t/86400)+"d"}var j=({svg:t})=>p`<span style="display:contents" dangerouslySetInnerHTML=${{__html:t}} />`;function M({icon:t,title:e,aside:n,asideStyle:s}){return p`<div class="card-title">\n    <${j} svg=${t} />${e}\n    ${n!=null?p`<span class="title-aside" style=${s||""}>${n}</span>`:null}\n  </div>`}function S({delay:t=0,wide:e=!1,style:n="",children:s}){let i="card"+(e?" grid-wide":""),a="animation-delay:"+t+"ms"+(n?";"+n:"");return p`<div class=${i} style=${a}>${s}</div>`}function E({children:t,cta:e}){return p`<div class="empty">${t}${e?p`<span class="empty-cta">${e}</span>`:null}</div>`}function Ze({snap:t,paused:e,connState:n,onPause:s,onRefresh:i,lastUpdate:a}){let l=e?"paused":n==="live"?"live":n==="reconnecting"?"reconnecting\\u2026":"connecting\\u2026",r="status-dot"+(e?" paused":n==="reconnecting"?" disconnected":"");return p`\n    <header class="header">\n      <div class="header-left">\n        <h1>\n          <span class="q-icon"><svg width="26" height="26" viewBox="0 0 24 24" fill="none" stroke="url(#neon-grad)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><circle cx="12" cy="12" r="10"/><circle cx="12" cy="12" r="6"/><circle cx="12" cy="12" r="2"/></svg></span>\n          <span class="brand">q-ring</span>\n          <span class="sub">quantum status</span>\n        </h1>\n        <span class="meta-chip" title="q-ring version">\n          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>\n          ${" v"+(t?t.version:"")}\n        </span>\n        <span class="meta-chip" title="Project working directory">\n          <${j} svg=${k.folder} /> ${t?t.projectPath:""}\n        </span>\n      </div>\n      <div class="header-right">\n        <span class="conn-label" title="Last update from the live stream"><span>${a}</span></span>\n        <button class="btn" type="button" title="Pause / resume the live stream (P)" onClick=${s}>\n          ${e?p`<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polygon points="5 3 19 12 5 21 5 3"/></svg>`:p`<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="6" y="4" width="4" height="16" rx="1"/><rect x="14" y="4" width="4" height="16" rx="1"/></svg>`}\n          <span>${e?"Resume":"Pause"}</span>\n        </button>\n        <button class="btn" type="button" title="Force-refresh now (R)" onClick=${i}>\n          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 1 1-3.5-7.1"/><polyline points="21 3 21 9 15 9"/></svg>\n          Refresh\n        </button>\n        <a class="btn" href=${"/api/status"+fe} target="_blank" rel="noopener" title="Open the raw JSON snapshot in a new tab">\n          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>\n          JSON\n        </a>\n        <span class="conn-label"><span class=${r}></span><span>${l}</span></span>\n      </div>\n    </header>\n  `}function ut({snap:t}){let e=t,n=e.auditMetrics||{total:0,byAction:{},topRead:[]},s=n.byAction.read||0,i=(n.byAction.write||0)+(n.byAction.delete||0)+(n.byAction.rotate||0),a=n.byAction.policy_deny||0,l=(e.hooks||[]).filter(c=>c.enabled).length,r=(e.approvals||[]).filter(c=>c.valid).length,u=(e.anomalies||[]).length,d=[{label:"Secrets",icon:k.key,value:e.health.total,sub:e.health.healthy+" healthy \\xB7 "+e.health.stale+" stale \\xB7 "+e.health.expired+" expired",cls:""},{label:"Environment",icon:k.environment,value:e.environment?e.environment.env:"none",sub:e.environment?"via "+e.environment.source:"no env detected",cls:e.environment?"":"dim"},{label:"Protected",icon:k.lock,value:e.protectedCount,sub:"require approval",cls:e.protectedCount>0?"warning":"dim"},{label:"Approvals",icon:k.approve,value:r,sub:"active grants",cls:r>0?"green":"dim"},{label:"Hooks",icon:k.hook,value:l,sub:"enabled / "+(e.hooks||[]).length+" total",cls:l>0?"":"dim"},{label:"Reads (24h)",icon:k.audit,value:s,sub:i+" writes \\xB7 "+a+" denied",cls:""},{label:"Anomalies",icon:k.anomaly,value:u,sub:u?"investigate now":"all clear",cls:u?"danger":"green"}];return p`<section class="kpi-strip">\n    ${d.map(c=>p`<div class="kpi" key=${c.label}>\n        <div class="kpi-label"><${j} svg=${c.icon} />${c.label}</div>\n        <div class="kpi-value ${c.cls}">${c.value}</div>\n        <div class="kpi-sub">${c.sub}</div>\n      </div>`)}\n  </section>`}function _t({snap:t,delay:e}){let n=t.health,s=n.total||1,i=42,a=2*Math.PI*i,l=[{v:n.healthy,c:"var(--accent)"},{v:n.stale,c:"var(--warning)"},{v:n.expired,c:"var(--danger)"},{v:n.noDecay,c:"var(--text-dim)"}],r=0,u=l.map((c,_)=>{let o=c.v/s*a,v=p`<circle key=${_} cx="50" cy="50" r=${i} fill="none" stroke=${c.c} stroke-width="12" stroke-dasharray=${o+" "+(a-o)} stroke-dashoffset=${-r} stroke-linecap="round" opacity="0.85" />`;return r+=o,v}),d=t.scopes||{global:0,project:0,team:0,org:0};return p`<${S} delay=${e}>\n    <${M} icon=${k.health} title="Health Summary" aside=${n.healthy+"/"+n.total+" healthy"} />\n    <div class="health-row">\n      <div class="donut-wrap">\n        <svg viewBox="0 0 100 100" width="100" height="100">${u}</svg>\n        <div class="donut-label">${n.total}<small>secrets</small></div>\n      </div>\n      <div class="health-legend">\n        <div class="legend-item"><span class="legend-dot" style="background:var(--accent)"></span>Healthy ${n.healthy}</div>\n        <div class="legend-item"><span class="legend-dot" style="background:var(--warning)"></span>Stale ${n.stale}</div>\n        <div class="legend-item"><span class="legend-dot" style="background:var(--danger)"></span>Expired ${n.expired}</div>\n        <div class="legend-item"><span class="legend-dot" style="background:var(--text-dim)"></span>No decay ${n.noDecay}</div>\n      </div>\n    </div>\n    <div class="scope-row">\n      ${["global","project","team","org"].filter(c=>d[c]).map(c=>p`<span class="scope-pill" key=${c}><strong>${d[c]}</strong>${c}</span>`)}\n    </div>\n  <//>`}function vt({snap:t,delay:e}){let n=t.environment;return p`<${S} delay=${e}>\n    <${M} icon=${k.environment} title="Environment" />\n    ${n?p`<div class="env-status"><span class="env-big env-pill ${$e(n.env)}">${n.env}</span><span class="env-source">detected via ${n.source}</span></div>`:p`<${E} cta="$ qring env --project-path .">No environment detected.<//>`}\n  <//>`}function ht({snap:t,delay:e}){let n=t.manifest;if(!n)return p`<${S} delay=${e}>\n      <${M} icon=${k.manifest} title="Manifest" />\n      <${E} cta=${p`$ qring wizard <name>`}>No <code>.q-ring.json</code> manifest in this project.<//>\n    <//>`;let s=n.required-n.missing.length-n.expired.length-n.stale.length,i=n.required?Math.max(0,Math.round(s/n.required*100)):100,a=n.missing.length?"var(--danger)":n.expired.length||n.stale.length?"var(--warning)":"var(--green)",l=(u,d,c)=>p`<div class="label">${u} (${d.length})</div><div>${d.map(_=>p`<span class="key-pill ${c}" key=${_}>${_}</span>`)}</div>`,r=n.missing.length||n.expired.length||n.stale.length;return p`<${S} delay=${e}>\n    <${M} icon=${k.manifest} title="Manifest" aside=${n.required+" required / "+n.declared+" declared"} />\n    <div class="manifest-bars">\n      <div class="manifest-row"><span style="min-width:54px">healthy</span><div class="manifest-bar"><div class="manifest-fill" style=${"width:"+i+"%;background:"+a}></div></div><span>${i}%</span></div>\n    </div>\n    <div class="manifest-list">\n      ${n.missing.length?l("Missing required",n.missing,"miss"):null}\n      ${n.expired.length?l("Expired",n.expired,"exp"):null}\n      ${n.stale.length?l("Stale",n.stale,"exp"):null}\n      ${r?null:p`<div class="label">All required keys present and healthy.</div>`}\n    </div>\n  <//>`}function yt({snap:t,delay:e}){let n=t.policy||{counts:{}},s=n.counts||{};if(!(n.hasMcpPolicy||n.hasExecPolicy||n.hasSecretPolicy))return p`<${S} delay=${e}>\n      <${M} icon=${k.policy} title="Policy" />\n      <${E} cta=${p`add <code>policy</code> to <code>.q-ring.json</code>`}>No governance policy declared.<//>\n    <//>`;let a=({label:r,value:u})=>p`<div class="policy-row"><span class="policy-label">${r}</span><span class="policy-value ${u?"":"zero"}">${u||"\\u2014"}</span></div>`,l=[n.hasMcpPolicy?"mcp":"",n.hasExecPolicy?"exec":"",n.hasSecretPolicy?"secrets":""].filter(Boolean).join(" \\xB7 ")||"none";return p`<${S} delay=${e}>\n    <${M} icon=${k.policy} title="Policy" aside=${l} />\n    <div class="policy-rows">\n      <${a} label="MCP allow tools" value=${s.allowTools} />\n      <${a} label="MCP deny tools" value=${s.denyTools} />\n      <${a} label="Denied keys" value=${s.deniedKeys} />\n      <${a} label="Denied tags" value=${s.deniedTags} />\n      <${a} label="Exec allow" value=${s.allowCommands} />\n      <${a} label="Exec deny" value=${s.denyCommands} />\n      <${a} label="Tag \u2192 approval" value=${s.requireApprovalForTags} />\n      <${a} label="Tag \u2192 rotation" value=${s.requireRotationFormatForTags} />\n      ${n.maxTtlSeconds?p`<${a} label="Max TTL" value=${ne(n.maxTtlSeconds)} />`:null}\n      ${n.maxRuntimeSeconds?p`<${a} label="Max exec runtime" value=${ne(n.maxRuntimeSeconds)} />`:null}\n    </div>\n  <//>`}function ft({snap:t,delay:e}){let n=(t.secrets||[]).filter(s=>s.decay&&s.decay.timeRemaining).sort((s,i)=>(s.decay.secondsRemaining||0)-(i.decay.secondsRemaining||0));return p`<${S} delay=${e}>\n    <${M} icon=${k.decay} title="Decay Timers" aside=${n.length+" tracked"} />\n    ${n.length?p`<div class="decay-list">${n.slice(0,12).map(s=>{let i=Math.min(s.decay.lifetimePercent,100),a=et(i,s.decay.isExpired),l=s.decay.isExpired?"expired":s.decay.timeRemaining||"";return p`<div class="decay-item" key=${s.scope+":"+s.key}>\n            <span class="decay-key" title=${s.key}>${s.key}</span>\n            <div class="decay-bar"><div class="decay-fill" style=${"width:"+i+"%;background:"+a}></div></div>\n            <span class="decay-time" style=${"color:"+a}>${l}</span>\n          </div>`})}</div>`:p`<${E} cta="$ qring set KEY --ttl 86400">No secrets with decay configured.<//>`}\n  <//>`}function $t({snap:t,delay:e}){let n=(t.secrets||[]).filter(s=>s.type==="superposition"&&s.environments&&s.environments.length);return p`<${S} delay=${e}>\n    <${M} icon=${k.superposition} title="Superposition" aside=${n.length+" multi-env"} />\n    ${n.length?p`<div class="super-list">${n.slice(0,14).map(s=>p`<div class="super-item" key=${s.scope+":"+s.key}>\n          <span class="super-key">${s.key}</span>\n          ${(s.environments||[]).map(i=>p`<span class="env-pill ${$e(i)}" key=${i}>${i}${i===s.defaultEnv?" \\u2713":""}</span>`)}\n        </div>`)}</div>`:p`<${E} cta="$ qring set KEY --env prod">No secrets in superposition.<//>`}\n  <//>`}function mt({snap:t,delay:e}){let n=t.entanglements||[],s=new Set,i=n.filter(h=>{let f=[h.source.service,h.source.key,h.target.service,h.target.key].sort().join("|");return s.has(f)?!1:(s.add(f),!0)}),a=[],l=new Map;for(let h of i)for(let f of[h.source.key,h.target.key])l.has(f)||(l.set(f,a.length),a.push(f));let r=i.length>0&&a.length<=14,u=320,d=210,c=u/2,_=d/2,o=Math.min(u,d)/2-34,v=a.map((h,f)=>{let m=2*Math.PI*f/a.length-Math.PI/2;return{x:c+o*Math.cos(m),y:_+o*Math.sin(m)}}),y=h=>h.length>14?h.slice(0,12)+"\\u2026":h;return p`<${S} delay=${e}>\n    <${M} icon=${k.entangle} title="Entanglement" aside=${i.length+" pair"+(i.length===1?"":"s")+" \\xB7 "+a.length+" keys"} />\n    ${i.length?r?p`<svg class="entangle-graph" viewBox="0 0 ${u} ${d}" role="img" aria-label="Entanglement graph: ${i.length} linked pairs">\n            ${i.map((h,f)=>{let m=v[l.get(h.source.key)],$=v[l.get(h.target.key)];return p`<line key=${"e"+f} x1=${m.x} y1=${m.y} x2=${$.x} y2=${$.y} class="entangle-edge" />`})}\n            ${a.map((h,f)=>{let m=v[f],$=m.x>=c;return p`<g key=${"n"+f}>\n                <circle cx=${m.x} cy=${m.y} r="5" class="entangle-node" />\n                <text x=${m.x+($?9:-9)} y=${m.y+3.5} text-anchor=${$?"start":"end"} class="entangle-label">${y(h)}<title>${h}</title></text>\n              </g>`})}\n          </svg>`:p`<div class="entangle-list">${i.slice(0,12).map((h,f)=>p`<div class="entangle-pair" key=${f}>\n            <span>${h.source.key}</span><span class="entangle-arrow">\u2194</span><span>${h.target.key}</span>\n          </div>`)}</div>`:p`<${E} cta="$ qring entangle KEY_A KEY_B">No entangled secrets.<//>`}\n  <//>`}function gt({snap:t,delay:e}){let n=t.tunnels||[];return p`<${S} delay=${e}>\n    <${M} icon=${k.tunnel} title="Quantum Tunnels" aside=${n.length+" live"} />\n    ${n.length?p`<div class="tunnel-list">${n.map(s=>{let i=s.expiresAt?Math.max(0,Math.floor((s.expiresAt-Date.now())/1e3)):null;return p`<div class="tunnel-card" key=${s.id}>${s.id}<div class="tunnel-meta">\n            <span>reads: ${s.accessCount}${s.maxReads?"/"+s.maxReads:""}</span>\n            ${i!==null?p`<span>expires: ${i}s</span>`:p`<span>no expiry</span>`}\n          </div></div>`})}</div>`:p`<${E} cta=${p`$ qring tunnel create <value>`}>No active tunnels.<//>`}\n  <//>`}function kt({snap:t,delay:e}){let n=t.approvals||[];return p`<${S} delay=${e}>\n    <${M} icon=${k.approve} title="Approvals" aside=${n.filter(s=>s.valid).length+" valid"} />\n    ${n.length?p`<div class="approval-list">${n.slice(0,8).map(s=>{let i=s.tampered?"tampered":s.secondsRemaining<300?"expiring":"";return p`<div class="approval-card ${i}" key=${s.id}>\n            <div class="approval-head"><span>${s.key}${s.tampered?" \\u26A0 TAMPERED":""}</span><span>${ne(s.secondsRemaining)} left</span></div>\n            <div class="approval-reason">${s.reason||"(no reason)"}</div>\n            <div class="approval-meta"><span>scope:${s.scope}</span><span>by:${s.grantedBy}</span></div>\n          </div>`})}</div>`:p`<${E} cta=${\'$ qring approve KEY --for 1800 --reason "..."\'}>No active approvals.<//>`}\n  <//>`}function bt({snap:t,delay:e}){let n=t.hooks||[];return p`<${S} delay=${e}>\n    <${M} icon=${k.hook} title="Hooks" aside=${n.filter(s=>s.enabled).length+" enabled / "+n.length} />\n    ${n.length?p`<div class="hooks-list">${n.slice(0,8).map(s=>p`<div class="hook-row ${s.enabled?"":"disabled"}" key=${s.id}>\n          <span class="hook-type ${s.type}">${s.type}</span>\n          <span class="hook-summary" title=${s.matchSummary}>${s.description||s.matchSummary}</span>\n          <span class="hook-id">${s.id}</span>\n        </div>`)}</div>`:p`<${E} cta=${\'$ qring hook add --tag payments --action rotate --exec "..."\'}>No hooks registered.<//>`}\n  <//>`}function xt({snap:t,delay:e}){return p`<${S} delay=${e}>\n    <${M} icon=${k.memory} title="Agent Memory" />\n    <div class="empty" style="display:flex;align-items:baseline;gap:8px;font-style:normal">\n      <span style="font-size:1.6rem;font-weight:700;color:var(--text-primary);font-family:var(--font-display)">${t.memoryKeys||0}</span>\n      <span>memory key${t.memoryKeys===1?"":"s"} encrypted at <code>~/.config/q-ring/agent-memory.enc</code></span>\n    </div>\n  <//>`}function wt({snap:t,delay:e}){let n=t.anomalies||[];if(!n.length)return p`<${S} delay=${e} wide=${!0}>\n      <${M} icon=${k.anomaly} title="Anomaly Alerts" aside="all clear" asideStyle="color:var(--green)" />\n      <${E}>No anomalies detected \u2014 quantum field is stable.<//>\n    <//>`;let s=i=>i==="tampered"?"$ qring audit:verify":i==="burst"?"$ qring audit --key \\u2026 --action read":i==="unusual-hour"?\'$ qring audit --action read --since "1am"\':"$ qring audit --limit 100";return p`<${S} delay=${e} wide=${!0}>\n    <${M} icon=${k.anomaly} title="Anomaly Alerts" aside=${n.length+" active"} asideStyle="color:var(--danger)" />\n    <div class="anomaly-list">${n.map((i,a)=>p`<div class="anomaly-card" key=${a}>\n      <div class="anomaly-type">${i.type}</div>\n      <div class="anomaly-desc">${i.description}</div>\n      <div class="anomaly-hint">${s(i.type)}</div>\n    </div>`)}</div>\n  <//>`}function Ct(t,e){let n=e.trim().toLowerCase();return n?n==="expired"?t.filter(s=>s.decay&&s.decay.isExpired):n==="stale"?t.filter(s=>s.decay&&s.decay.isStale&&!s.decay.isExpired):n==="protected"?t.filter(s=>s.requiresApproval):t.filter(s=>[s.key,s.scope,s.type,s.provider||"",s.defaultEnv||"",(s.environments||[]).join(" "),(s.tags||[]).join(" ")].join(" ").toLowerCase().indexOf(n)!==-1):t.slice()}function Mt(t,e){let n=e.dir==="asc"?1:-1;return t.sort((s,i)=>{let a,l;switch(e.col){case"key":a=s.key,l=i.key;break;case"scope":a=s.scope,l=i.scope;break;case"env":a=s.defaultEnv||(s.environments||[])[0]||"",l=i.defaultEnv||(i.environments||[])[0]||"";break;case"type":a=s.type,l=i.type;break;case"decay":a=s.decay&&s.decay.secondsRemaining!=null?s.decay.secondsRemaining:1/0,l=i.decay&&i.decay.secondsRemaining!=null?i.decay.secondsRemaining:1/0;break;case"tags":a=(s.tags||[]).join(","),l=(i.tags||[]).join(",");break;default:a=s.lastAccessedAt?new Date(s.lastAccessedAt).getTime():0,l=i.lastAccessedAt?new Date(i.lastAccessedAt).getTime():0}return a<l?-1*n:a>l?1*n:0})}function St({snap:t,query:e,setQuery:n,sort:s,setSort:i,searchRef:a}){let l=t.secrets||[],r=te(()=>Mt(Ct(l,e),s),[l,e,s]),u=[{id:"key",label:"Key"},{id:"scope",label:"Scope"},{id:"env",label:"Env"},{id:"type",label:"Type"},{id:"decay",label:"Decay"},{id:"tags",label:"Tags"},{id:"lastAccessedAt",label:"Last read"}],d=c=>{s.col===c?i({col:c,dir:s.dir==="asc"?"desc":"asc"}):i({col:c,dir:c==="key"?"asc":"desc"})};return p`<section><${S} wide=${!0} style="margin-bottom:16px">\n    <${M} icon=${k.key} title="Secrets" aside=${r.length+" of "+l.length} />\n    <div class="secrets-toolbar">\n      <label class="search"><${j} svg=${k.search} /><input ref=${a} id="secretsSearch" type="search" placeholder="Filter by key, scope, env, tag, provider\u2026" autocomplete="off" value=${e} onInput=${c=>n(c.target.value)} /></label>\n      <button class="btn" type="button" onClick=${()=>n("expired")}>${t.health.expired||0} expired</button>\n      <button class="btn" type="button" onClick=${()=>n("stale")}>${t.health.stale||0} stale</button>\n      <button class="btn" type="button" onClick=${()=>n("protected")}>${t.protectedCount||0} protected</button>\n      <button class="btn" type="button" onClick=${()=>n("")}>clear</button>\n    </div>\n    <div class="secrets-table-wrap">\n      ${r.length?p`<table class="secrets-table">\n            <thead><tr>${u.map(c=>p`<th key=${c.id} class=${s.col===c.id?"sorted":""} onClick=${()=>d(c.id)}>${c.label}<span class="sort-arrow">${s.dir==="asc"?"\\u25B2":"\\u25BC"}</span></th>`)}</tr></thead>\n            <tbody>${r.map(c=>{let _=c.type==="superposition"?(c.environments||[]).map(y=>p`<span class="env-pill ${$e(y)}" style="margin-right:3px" key=${y}>${y}${y===c.defaultEnv?" \\u2713":""}</span>`):p`<span class="env-pill env-default">\u2014</span>`,o=c.decay&&c.decay.timeRemaining?(()=>{let y=Math.min(c.decay.lifetimePercent,100),h=et(y,c.decay.isExpired);return p`<span class="mini-decay"><span class="mini-decay-bar"><span class="mini-decay-fill" style=${"width:"+y+"%;background:"+h}></span></span><span class="mini-decay-time" style=${"color:"+h}>${c.decay.isExpired?"expired":c.decay.timeRemaining}</span></span>`})():p`<span class="mini-decay-time">\u2014</span>`,v=c.tags||[];return p`<tr key=${c.scope+":"+c.key}>\n                <td class="col-key" title=${c.key}>${c.key}${c.requiresApproval?p`<span class="protected-icon" title="requires approval for MCP read"><${j} svg=${k.lock} /></span>`:null}</td>\n                <td><span class="scope-tag ${c.scope}">${c.scope}</span></td>\n                <td>${_}</td>\n                <td><span class="type-tag ${c.type}">${c.type}</span></td>\n                <td class="col-decay">${o}</td>\n                <td class="col-tags">${v.slice(0,3).map(y=>p`<span class="tag-pill" key=${y}>${y}</span>`)}${v.length>3?"+"+(v.length-3):""}</td>\n                <td>${ge(c.lastAccessedAt)}</td>\n              </tr>`})}</tbody>\n          </table>`:p`<div class="empty" style="padding:18px;text-align:center">No secrets match the filter.</div>`}\n    </div>\n  <//></section>`}function At({snap:t,delay:e}){let n=t.sessions||[],[s,i]=q({}),a=r=>i(u=>({...u,[r]:!u[r]})),l=r=>{let u=Math.max(0,Math.round((new Date(r.endedAt)-new Date(r.startedAt))/1e3));return ne(u)};return p`<${S} delay=${e} wide=${!0}>\n    <${M} icon=${k.audit} title="Agent Sessions (24h)" aside=${n.length+" session"+(n.length===1?"":"s")} />\n    ${n.length?p`<div class="sessions-list">${n.slice(0,12).map(r=>p`<div class="session ${s[r.id]?"open":""}" key=${r.id}>\n          <button type="button" class="session-row" onClick=${()=>a(r.id)} title=${"session "+r.id}>\n            <span class="session-caret">${s[r.id]?"\\u25BE":"\\u25B8"}</span>\n            <span class="session-agent">${r.wrapLabel?"airlock":r.agent}</span>\n            <span class="hook-type ${r.source==="mcp"?"http":r.source==="agent"?"shell":"signal"}">${r.source}</span>\n            ${r.wrapLabel?p`<span class="session-wrap" title=${r.wrapLabel}>${r.wrapLabel}</span>`:null}\n            <span class="session-meta">${ge(r.endedAt)} \xB7 ${l(r)} \xB7 ${r.eventCount} events</span>\n            <span class="session-denials ${r.denials?"bad":""}">${r.denials?r.denials+" denied":"0 denied"}</span>\n            ${r.countsByAction&&r.countsByAction.canary?p`<span class="session-denials bad">${r.countsByAction.canary} canary</span>`:null}\n          </button>\n          ${s[r.id]?p`<div class="session-detail">\n                <div class="session-keys">${r.keys.length?"keys: "+r.keys.join(", "):"no keys touched"}</div>\n                <div class="audit-feed">${(r.recent||[]).map((u,d)=>p`<div class="audit-row" key=${d}>\n                  <span class="audit-ts" title=${u.timestamp}>${me(u.timestamp)}</span>\n                  <span class="audit-action ${u.action}">${u.action}</span>\n                  <span></span>\n                  <span><span class="audit-key">${u.key||"\\u2014"}</span> <span class="audit-detail">${u.detail||""}</span></span>\n                </div>`)}</div>\n              </div>`:null}\n        </div>`)}</div>`:p`<${E} cta=${"$ qring audit:sessions"}>No agent activity in the last 24h. Sessions appear once an MCP client or airlock touches the ring.<//>`}\n  <//>`}function Et({snap:t,delay:e,filter:n,setFilter:s}){let i=t.audit||[],a=t.auditMetrics||{byAction:{},bySource:{}},l=i.filter(_=>{if(n.action&&_.action!==n.action||n.source&&_.source!==n.source)return!1;let o=n.text.trim().toLowerCase();return!(o&&[_.key||"",_.action,_.source,_.detail||"",_.scope||"",_.env||""].join(" ").toLowerCase().indexOf(o)===-1)}),r=["read","write","delete","rotate","generate","entangle","tunnel","teleport","approve","revoke","policy_deny","collapse","export"],u=["cli","mcp","agent","ci","hook","api"],d=(_,o)=>s({...n,[_]:n[_]===o?"":o}),c=t.auditChain;return p`<${S} delay=${e} wide=${!0}>\n    <${M} icon=${k.audit} title="Audit Log (24h)" aside=${l.length+" of "+i.length+" shown \\xB7 window "+(a.windowSeconds||86400)/3600+"h"} />\n    ${c&&c.totalEvents>0?p`<div class="chain-badge ${c.intact?"ok":"broken"}" title="Hash-chain integrity \u2014 same check as qring audit:verify">\n          ${c.intact?p`\u26D3 chain intact \xB7 ${c.totalEvents} events verified`:p`\u26D3 chain BROKEN at event #${c.brokenAt} \xB7 ${c.validEvents}/${c.totalEvents} valid \u2014 run $ qring audit:verify`}\n        </div>`:null}\n    <div class="audit-actions-strip">\n      ${r.filter(_=>a.byAction[_]).length?r.filter(_=>a.byAction[_]).map(_=>p`<span class="audit-chip ${n.action===_?"active":""}" key=${_} onClick=${()=>d("action",_)}>${_}<strong>${a.byAction[_]}</strong></span>`):p`<span class="empty" style="padding:0">no actions</span>`}\n    </div>\n    ${u.filter(_=>a.bySource[_]).length?p`<div class="audit-actions-strip">${u.filter(_=>a.bySource[_]).map(_=>p`<span class="audit-chip ${n.source===_?"active":""}" key=${_} onClick=${()=>d("source",_)}>${_}<strong>${a.bySource[_]}</strong></span>`)}</div>`:null}\n    <div class="audit-toolbar">\n      <label class="search"><${j} svg=${k.search} /><input id="auditSearch" type="search" placeholder="Filter by key, detail, scope\u2026" autocomplete="off" value=${n.text} onInput=${_=>s({...n,text:_.target.value})} /></label>\n      <button class="btn" type="button" onClick=${()=>s({action:"",source:"",text:""})}>clear</button>\n    </div>\n    ${l.length?p`<div class="audit-feed">${l.slice(0,80).map((_,o)=>p`<div class="audit-row" key=${o}>\n          <span class="audit-ts" title=${_.timestamp}>${me(_.timestamp)}</span>\n          <span class="audit-action ${_.action}">${_.action}</span>\n          <span class="audit-source">${_.source}</span>\n          <span><span class="audit-key">${_.key||"\\u2014"}</span> <span class="audit-detail">${_.detail||""}</span></span>\n        </div>`)}</div>`:p`<${E}>No audit events match the filter.<//>`}\n  <//>`}function Pt(){let[t,e]=q(null),[n,s]=q(!1),[i,a]=q("connecting"),[l,r]=q(""),[u,d]=q({col:"lastAccessedAt",dir:"desc"}),[c,_]=q({action:"",source:"",text:""}),[,o]=q(0),v=he(n);v.current=n;let y=he(null),h=ye(g=>{try{e(typeof g=="string"?JSON.parse(g):g)}catch{}},[]),f=ye(()=>{fetch("/api/status"+fe,{cache:"no-store"}).then(g=>g.json()).then(h).catch(()=>{})},[h]);ee(()=>{let g=new EventSource("/events"+fe);return g.onopen=()=>a("live"),g.onmessage=w=>{v.current||h(w.data)},g.onerror=()=>a("reconnecting"),()=>g.close()},[h]),ee(()=>{let g=setInterval(()=>o(w=>w+1),5e3);return()=>clearInterval(g)},[]),ee(()=>{let g=w=>{let P=w.target&&w.target.tagName;if(P==="INPUT"||P==="TEXTAREA"){w.key==="Escape"&&w.target.blur();return}w.key==="/"?(w.preventDefault(),y.current&&y.current.focus()):w.key==="p"||w.key==="P"?s(H=>!H):(w.key==="r"||w.key==="R")&&f()};return document.addEventListener("keydown",g),()=>document.removeEventListener("keydown",g)},[f]);let m=t?"updated "+ge(t.timestamp):"\\u2014";if(!t)return p`<div class="container">\n      <${Ze} snap=${null} paused=${n} connState=${i} onPause=${()=>s(g=>!g)} onRefresh=${f} lastUpdate=${m} />\n      <p class="foot"><span>Connecting to the live quantum stream\u2026</span></p>\n    </div>`;let $=t.auditMetrics||{total:0};return p`<div class="container">\n    <${Ze} snap=${t} paused=${n} connState=${i} onPause=${()=>s(g=>!g)} onRefresh=${f} lastUpdate=${m} />\n    <${ut} snap=${t} />\n    <section class="grid">\n      <${_t} snap=${t} delay=${0} />\n      <${vt} snap=${t} delay=${60} />\n      <${ht} snap=${t} delay=${120} />\n      <${yt} snap=${t} delay=${180} />\n    </section>\n    <${St} snap=${t} query=${l} setQuery=${r} sort=${u} setSort=${d} searchRef=${y} />\n    <section class="grid">\n      <${ft} snap=${t} delay=${0} />\n      <${$t} snap=${t} delay=${60} />\n      <${mt} snap=${t} delay=${120} />\n      <${gt} snap=${t} delay=${180} />\n    </section>\n    <section class="grid">\n      <${kt} snap=${t} delay=${0} />\n      <${bt} snap=${t} delay=${60} />\n      <${xt} snap=${t} delay=${120} />\n    </section>\n    <section class="grid">\n      <${At} snap=${t} delay=${0} />\n    </section>\n    <section class="grid">\n      <${wt} snap=${t} delay=${0} />\n      <${Et} snap=${t} delay=${60} filter=${c} setFilter=${_} />\n    </section>\n    <p class="foot">\n      <span>${"q-ring v"+t.version+" \\xB7 snapshot "+me(t.timestamp)+" \\xB7 "+($.total||0)+" audit events in last 24h"}</span>\n      \xB7 keyboard: <span class="kbd">/</span> search \xB7 <span class="kbd">P</span> pause \xB7 <span class="kbd">R</span> refresh\n    </p>\n  </div>`}Le(p`<${Pt} />`,document.getElementById("app"));})();';
-
-// src/core/dashboard-html.ts
-function jsString(value) {
-  return JSON.stringify(value).replace(/</g, "\\u003c");
-}
-function getDashboardHtml(token) {
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="utf-8"/>
-<meta name="viewport" content="width=device-width, initial-scale=1"/>
-<title>q-ring \u2014 quantum status</title>
-<style>
-*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}
-:root{
-  --bg-deep:#04080f;
-  --bg-section:#080e18;
-  --bg-card:#0f1a2e;
-  --bg-card-hover:#142240;
-  --border:#1a2d4a;
-  --border-glow:#0ea5e9;
-
-  --text-primary:#f8f8ff;
-  --text-secondary:#c8cfe0;
-  --text-dim:#8899b4;
-
-  --accent:#0ea5e9;
-  --accent-bright:#38bdf8;
-  --accent-dim:rgba(14,165,233,0.15);
-  --accent-glow:rgba(14,165,233,0.4);
-
-  --danger:#ff5e5b;
-  --warning:#fbbf24;
-  --green:#22c55e;
-  --violet:#a855f7;
-  --pink:#ff0055;
-
-  --font-display:system-ui,-apple-system,'Segoe UI',Roboto,sans-serif;
-  --font-mono:'SF Mono','Cascadia Code','Fira Code',Consolas,'Liberation Mono',monospace;
-
-  --radius:12px;
-  --radius-sm:8px;
-  --radius-lg:20px;
-
-  --glass-bg:rgba(15,26,46,0.65);
-  --glass-border:rgba(26,45,74,0.8);
-  --shadow-card:0 4px 24px -1px rgba(0,0,0,0.4),0 0 1px rgba(255,255,255,0.04);
-  --shadow-glow:0 0 20px rgba(14,165,233,0.12),0 0 40px rgba(168,85,247,0.08);
-}
-html{background:var(--bg-deep);color:var(--text-primary);font-family:var(--font-display);font-size:16px;line-height:1.5}
-body{min-height:100vh;overflow-x:hidden;position:relative}
-
-/* Hidden SVG defs for gradient icons */
-.svg-defs{position:absolute;width:0;height:0;overflow:hidden}
-
-/* Mesh blobs */
-.blob{position:fixed;border-radius:50%;filter:blur(100px);opacity:.12;pointer-events:none;z-index:0}
-.blob-1{width:600px;height:600px;top:-120px;left:-100px;background:radial-gradient(circle,var(--accent),transparent 70%);animation:drift1 22s ease-in-out infinite}
-.blob-2{width:500px;height:500px;bottom:-80px;right:-60px;background:radial-gradient(circle,var(--violet),transparent 70%);animation:drift2 26s ease-in-out infinite}
-.blob-3{width:350px;height:350px;top:40%;left:50%;background:radial-gradient(circle,var(--green),transparent 70%);animation:drift3 30s ease-in-out infinite;opacity:.06}
-@keyframes drift1{0%,100%{transform:translate(0,0) scale(1)}33%{transform:translate(60px,-40px) scale(1.08)}66%{transform:translate(-30px,50px) scale(.95)}}
-@keyframes drift2{0%,100%{transform:translate(0,0) scale(1)}33%{transform:translate(-50px,30px) scale(1.05)}66%{transform:translate(40px,-60px) scale(.92)}}
-@keyframes drift3{0%,100%{transform:translate(-50%,-50%) scale(1)}50%{transform:translate(-40%,-60%) scale(1.1)}}
-
-.container{position:relative;z-index:1;max-width:1320px;margin:0 auto;padding:20px 20px 48px}
-
-/* Header */
-.header{position:sticky;top:0;z-index:5;display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:14px;margin-bottom:20px;padding:14px 18px;background:rgba(4,8,15,0.85);backdrop-filter:blur(16px) saturate(1.2);-webkit-backdrop-filter:blur(16px) saturate(1.2);border:1px solid var(--border);border-radius:var(--radius)}
-.header-left{display:flex;align-items:center;gap:14px;flex-wrap:wrap;min-width:0}
-.header h1{font-family:var(--font-display);font-size:1.45rem;font-weight:700;letter-spacing:-.02em;display:flex;align-items:center;gap:10px}
-.header h1 .q-icon{display:flex;filter:drop-shadow(0 0 6px rgba(14,165,233,0.6))}
-.header h1 .brand{background:linear-gradient(135deg,#00D1FF,var(--violet));-webkit-background-clip:text;background-clip:text;-webkit-text-fill-color:transparent}
-.header h1 .sub{color:var(--text-dim);font-weight:400;font-size:1rem;-webkit-text-fill-color:var(--text-dim)}
-.meta-chip{font-family:var(--font-mono);font-size:.72rem;color:var(--text-dim);background:rgba(255,255,255,.04);border:1px solid var(--border);padding:3px 8px;border-radius:99px;display:inline-flex;align-items:center;gap:6px;max-width:340px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.meta-chip svg{width:11px;height:11px;flex-shrink:0;opacity:.7}
-.header-right{display:flex;align-items:center;gap:10px;flex-wrap:wrap}
-.status-dot{width:8px;height:8px;border-radius:50%;background:var(--green);box-shadow:0 0 8px var(--green);display:inline-block;animation:pulse 2s ease-in-out infinite}
-.status-dot.disconnected{background:var(--danger);box-shadow:0 0 8px var(--danger);animation:none}
-.status-dot.paused{background:var(--warning);box-shadow:0 0 8px var(--warning);animation:none}
-@keyframes pulse{0%,100%{opacity:1}50%{opacity:.4}}
-.conn-label{font-size:.78rem;color:var(--text-dim);display:flex;align-items:center;gap:6px;font-family:var(--font-mono)}
-.btn{font-family:var(--font-display);font-size:.78rem;font-weight:500;color:var(--text-secondary);background:rgba(255,255,255,.04);border:1px solid var(--border);padding:5px 11px;border-radius:var(--radius-sm);cursor:pointer;display:inline-flex;align-items:center;gap:5px;transition:background .2s,border-color .2s,color .2s}
-.btn:hover{background:rgba(14,165,233,.08);border-color:var(--accent);color:var(--text-primary)}
-.btn svg{width:13px;height:13px}
-.btn.active{background:var(--accent-dim);color:var(--accent-bright);border-color:rgba(14,165,233,.4)}
-.kbd{font-family:var(--font-mono);font-size:.65rem;color:var(--text-dim);background:rgba(255,255,255,.06);border:1px solid var(--border);border-bottom-width:2px;padding:1px 5px;border-radius:4px;margin-left:4px}
-
-/* KPI strip */
-.kpi-strip{display:grid;grid-template-columns:repeat(auto-fit,minmax(140px,1fr));gap:10px;margin-bottom:20px}
-.kpi{background:var(--glass-bg);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px);border:1px solid var(--glass-border);border-radius:var(--radius);padding:12px 14px;display:flex;flex-direction:column;gap:2px;transition:border-color .25s,transform .25s}
-.kpi:hover{border-color:var(--border-glow);transform:translateY(-2px)}
-.kpi-label{font-size:.66rem;text-transform:uppercase;letter-spacing:.1em;color:var(--text-dim);font-weight:600;display:flex;align-items:center;gap:6px}
-.kpi-label svg{width:12px;height:12px;flex-shrink:0}
-.kpi-value{font-family:var(--font-display);font-size:1.5rem;font-weight:700;line-height:1.1;color:var(--text-primary)}
-.kpi-value.warning{color:var(--warning)}
-.kpi-value.danger{color:var(--danger)}
-.kpi-value.green{color:var(--green)}
-.kpi-value.dim{color:var(--text-dim)}
-.kpi-sub{font-size:.7rem;color:var(--text-dim);font-family:var(--font-mono)}
-
-/* Grid */
-.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(360px,1fr));gap:16px;margin-bottom:16px}
-.grid-wide{grid-column:1/-1}
-
-/* Cards \u2014 reveal animation */
-.card{background:var(--glass-bg);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px);border:1px solid var(--glass-border);border-radius:var(--radius);padding:18px 20px;box-shadow:var(--shadow-card);transition:border-color .3s,box-shadow .3s,transform .3s;opacity:0;transform:translateY(16px);animation:cardReveal .5s cubic-bezier(0.16,1,0.3,1) forwards}
-.card:hover{border-color:var(--border-glow);box-shadow:var(--shadow-card),var(--shadow-glow)}
-@keyframes cardReveal{to{opacity:1;transform:translateY(0)}}
-
-.card-title{font-family:var(--font-display);font-size:.78rem;text-transform:uppercase;letter-spacing:.1em;color:var(--text-dim);margin-bottom:14px;display:flex;align-items:center;gap:8px;font-weight:600}
-.card-title svg{width:16px;height:16px;flex-shrink:0;filter:drop-shadow(0 0 4px rgba(14,165,233,0.4))}
-.card-title .title-aside{margin-left:auto;font-size:.7rem;color:var(--text-dim);font-weight:400;letter-spacing:.04em;text-transform:none;display:flex;align-items:center;gap:6px}
-
-/* Health donut */
-.health-row{display:flex;align-items:center;gap:24px}
-.donut-wrap{position:relative;width:100px;height:100px;flex-shrink:0}
-.donut-wrap svg{transform:rotate(-90deg)}
-.donut-wrap .donut-label{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;flex-direction:column;font-size:1.5rem;font-weight:700;line-height:1;font-family:var(--font-display)}
-.donut-wrap .donut-label small{font-size:.7rem;color:var(--text-dim);font-weight:400;margin-top:2px;letter-spacing:.04em}
-.health-legend{display:flex;flex-direction:column;gap:6px;font-family:var(--font-mono)}
-.legend-item{display:flex;align-items:center;gap:8px;font-size:.82rem}
-.legend-dot{width:8px;height:8px;border-radius:50%;flex-shrink:0}
-.scope-row{display:flex;gap:6px;margin-top:14px;flex-wrap:wrap;font-family:var(--font-mono);font-size:.72rem;color:var(--text-dim)}
-.scope-pill{padding:2px 8px;border-radius:99px;background:rgba(255,255,255,.04);border:1px solid var(--border)}
-.scope-pill strong{color:var(--text-primary);margin-right:4px;font-weight:600}
-
-/* Decay bars */
-.decay-list{display:flex;flex-direction:column;gap:8px;max-height:280px;overflow-y:auto}
-.decay-item{display:flex;align-items:center;gap:10px}
-.decay-key{font-family:var(--font-mono);font-size:.85rem;min-width:120px;max-width:180px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.decay-bar{flex:1;height:6px;border-radius:3px;background:rgba(255,255,255,0.06);overflow:hidden;position:relative}
-.decay-fill{height:100%;border-radius:3px;transition:width .6s ease}
-.decay-time{font-size:.8rem;color:var(--text-dim);min-width:60px;text-align:right;font-family:var(--font-mono)}
-
-/* Superposition pills */
-.super-list{display:flex;flex-direction:column;gap:8px;max-height:280px;overflow-y:auto}
-.super-item{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-.super-key{font-family:var(--font-mono);font-size:.85rem;min-width:100px}
-.env-pill{font-size:.72rem;padding:2px 8px;border-radius:99px;font-weight:600;letter-spacing:.03em;font-family:var(--font-mono)}
-.env-prod{background:rgba(255,0,85,0.2);color:var(--pink);border:1px solid rgba(255,0,85,0.3)}
-.env-staging{background:rgba(251,191,36,0.15);color:var(--warning);border:1px solid rgba(251,191,36,0.25)}
-.env-dev{background:rgba(34,197,94,0.15);color:var(--green);border:1px solid rgba(34,197,94,0.25)}
-.env-default{background:rgba(168,85,247,0.15);color:var(--violet);border:1px solid rgba(168,85,247,0.25)}
-.env-test{background:rgba(14,165,233,0.15);color:var(--accent-bright);border:1px solid rgba(14,165,233,0.25)}
-
-/* Entanglement */
-.entangle-list{display:flex;flex-direction:column;gap:6px;max-height:240px;overflow-y:auto}
-.entangle-pair{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.83rem}
-.entangle-arrow{color:var(--accent-bright)}
-.entangle-graph{display:block;width:100%;height:auto;max-height:260px}
-.entangle-edge{stroke:var(--accent);stroke-opacity:.45;stroke-width:1.2}
-.entangle-node{fill:var(--accent-bright);stroke:var(--accent-glow);stroke-width:3;paint-order:stroke}
-.entangle-label{fill:var(--text-secondary);font-family:var(--font-mono);font-size:9px}
-
-/* Audit chain badge */
-.chain-badge{display:inline-flex;align-items:center;gap:6px;font-family:var(--font-mono);font-size:.78rem;padding:4px 10px;border-radius:999px;margin-bottom:10px}
-.chain-badge.ok{color:var(--green);background:rgba(34,197,94,.1);border:1px solid rgba(34,197,94,.25)}
-.chain-badge.broken{color:var(--danger);background:rgba(255,94,91,.12);border:1px solid rgba(255,94,91,.3)}
-
-/* Tunnels */
-.tunnel-list{display:flex;flex-direction:column;gap:8px;max-height:240px;overflow-y:auto}
-.tunnel-card{background:rgba(168,85,247,0.06);border:1px solid rgba(168,85,247,0.15);border-radius:var(--radius-sm);padding:10px 12px;font-size:.83rem;font-family:var(--font-mono)}
-.tunnel-meta{display:flex;gap:12px;margin-top:4px;font-size:.78rem;color:var(--text-dim)}
-
-/* Audit feed */
-.audit-toolbar{display:flex;flex-wrap:wrap;gap:6px;margin-bottom:10px;align-items:center}
-.audit-actions-strip{display:flex;flex-wrap:wrap;gap:6px;margin-bottom:10px}
-.audit-chip{font-family:var(--font-mono);font-size:.7rem;padding:2px 9px;border-radius:99px;background:rgba(255,255,255,.04);border:1px solid var(--border);color:var(--text-secondary);cursor:pointer;transition:all .2s}
-.audit-chip:hover{border-color:var(--accent);color:var(--text-primary)}
-.audit-chip.active{background:var(--accent-dim);color:var(--accent-bright);border-color:rgba(14,165,233,.4)}
-.audit-chip strong{color:var(--text-primary);margin-left:5px;font-weight:600}
-.audit-feed{display:flex;flex-direction:column;gap:2px;max-height:340px;overflow-y:auto;font-size:.82rem;font-family:var(--font-mono)}
-.audit-row{display:grid;grid-template-columns:78px 76px 56px 1fr;gap:8px;padding:4px 0;border-bottom:1px solid rgba(255,255,255,0.03);align-items:baseline}
-.audit-ts{color:var(--text-dim)}
-.audit-action{font-weight:600}
-.audit-action.read{color:var(--accent)}.audit-action.write{color:var(--green)}.audit-action.delete{color:var(--danger)}
-.audit-action.entangle{color:var(--violet)}.audit-action.tunnel{color:var(--violet)}.audit-action.teleport{color:var(--warning)}
-.audit-action.generate{color:var(--warning)}.audit-action.list{color:var(--text-dim)}.audit-action.export{color:var(--text-dim)}
-.audit-action.collapse{color:var(--accent)}.audit-action.approve{color:var(--green)}.audit-action.revoke{color:var(--danger)}
-.audit-action.policy_deny{color:var(--danger)}.audit-action.rotate{color:var(--violet)}
-.audit-source{color:var(--text-dim);font-size:.72rem;text-transform:uppercase;letter-spacing:.04em}
-.audit-detail{color:var(--text-dim);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.audit-key{color:var(--text-secondary)}
-
-/* Anomalies */
-.anomaly-list{display:flex;flex-direction:column;gap:8px}
-.anomaly-card{background:rgba(255,94,91,0.06);border:1px solid rgba(255,94,91,0.15);border-radius:var(--radius-sm);padding:10px 14px;animation:anomaly-pulse 3s ease-in-out infinite}
-@keyframes anomaly-pulse{0%,100%{border-color:rgba(255,94,91,0.15)}50%{border-color:rgba(255,94,91,0.4)}}
-.anomaly-type{font-size:.7rem;text-transform:uppercase;letter-spacing:.06em;color:var(--danger);font-weight:700;margin-bottom:2px;font-family:var(--font-display)}
-.anomaly-desc{font-size:.86rem;color:var(--text-primary)}
-.anomaly-hint{font-size:.74rem;color:var(--text-dim);margin-top:4px;font-family:var(--font-mono)}
-
-/* Environment badge */
-.env-status{display:flex;align-items:center;gap:12px;flex-wrap:wrap}
-.env-big{font-size:1rem;font-weight:700;padding:4px 14px;border-radius:var(--radius-sm)}
-.env-source{font-size:.78rem;color:var(--text-dim);font-family:var(--font-mono)}
-
-/* Manifest */
-.manifest-bars{display:flex;flex-direction:column;gap:8px}
-.manifest-row{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.78rem}
-.manifest-bar{flex:1;height:6px;border-radius:3px;background:rgba(255,255,255,.06);overflow:hidden}
-.manifest-fill{height:100%;border-radius:3px}
-.manifest-list{margin-top:10px;display:flex;flex-direction:column;gap:3px;font-family:var(--font-mono);font-size:.78rem;color:var(--text-secondary)}
-.manifest-list .label{color:var(--text-dim);text-transform:uppercase;font-size:.66rem;letter-spacing:.08em;margin-top:6px}
-.manifest-list .key-pill{display:inline-block;padding:1px 6px;background:rgba(255,255,255,.04);border:1px solid var(--border);border-radius:4px;margin:1px 3px 1px 0;font-size:.74rem}
-.manifest-list .key-pill.miss{color:var(--danger);border-color:rgba(255,94,91,.3)}
-.manifest-list .key-pill.exp{color:var(--warning);border-color:rgba(251,191,36,.3)}
-
-/* Policy */
-.policy-rows{display:flex;flex-direction:column;gap:6px;font-family:var(--font-mono);font-size:.78rem;color:var(--text-secondary)}
-.policy-row{display:flex;justify-content:space-between;padding:2px 0;border-bottom:1px solid rgba(255,255,255,.04)}
-.policy-label{color:var(--text-dim)}
-.policy-value{color:var(--text-primary)}
-.policy-value.zero{color:var(--text-dim)}
-
-/* Approvals */
-.approval-list{display:flex;flex-direction:column;gap:8px;max-height:240px;overflow-y:auto}
-.approval-card{background:rgba(34,197,94,.05);border:1px solid rgba(34,197,94,.2);border-radius:var(--radius-sm);padding:10px 12px;font-size:.82rem}
-.approval-card.tampered{background:rgba(255,94,91,.06);border-color:rgba(255,94,91,.4)}
-.approval-card.expiring{background:rgba(251,191,36,.06);border-color:rgba(251,191,36,.3)}
-.approval-head{display:flex;justify-content:space-between;gap:8px;font-family:var(--font-mono);font-weight:600}
-.approval-reason{color:var(--text-dim);font-size:.76rem;margin-top:3px}
-.approval-meta{display:flex;gap:12px;margin-top:4px;font-size:.72rem;color:var(--text-dim);font-family:var(--font-mono)}
-
-/* Hooks */
-.hooks-list{display:flex;flex-direction:column;gap:6px;max-height:240px;overflow-y:auto}
-.hook-row{display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:.8rem;padding:6px 10px;background:rgba(255,255,255,.03);border:1px solid var(--border);border-radius:var(--radius-sm)}
-.hook-row.disabled{opacity:.5}
-.hook-type{font-size:.7rem;text-transform:uppercase;font-weight:600;padding:1px 6px;border-radius:99px;letter-spacing:.04em}
-.hook-type.shell{background:rgba(168,85,247,.15);color:var(--violet)}
-.hook-type.http{background:rgba(14,165,233,.15);color:var(--accent-bright)}
-.hook-type.signal{background:rgba(251,191,36,.15);color:var(--warning)}
-.hook-summary{flex:1;color:var(--text-secondary);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.hook-id{color:var(--text-dim);font-size:.72rem}
-
-/* Agent sessions */
-.sessions-list{display:flex;flex-direction:column;gap:6px;max-height:420px;overflow-y:auto}
-.session{background:rgba(255,255,255,.03);border:1px solid var(--border);border-radius:var(--radius-sm)}
-.session.open{border-color:rgba(14,165,233,.35)}
-.session-row{display:flex;align-items:center;gap:8px;width:100%;padding:6px 10px;background:none;border:0;color:inherit;font:inherit;font-family:var(--font-mono);font-size:.8rem;text-align:left;cursor:pointer}
-.session-row:hover{background:rgba(255,255,255,.03)}
-.session-caret{color:var(--text-dim);width:10px}
-.session-agent{color:var(--accent-bright);font-weight:600}
-.session-wrap{color:var(--text-secondary);max-width:28ch;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.session-meta{flex:1;color:var(--text-dim);font-size:.74rem;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.session-denials{font-size:.7rem;padding:1px 6px;border-radius:99px;background:rgba(34,197,94,.1);color:var(--green)}
-.session-denials.bad{background:rgba(255,94,91,.12);color:var(--danger)}
-.session-detail{padding:4px 10px 8px 28px;border-top:1px solid var(--border)}
-.session-keys{color:var(--text-secondary);font-family:var(--font-mono);font-size:.74rem;padding:4px 0 6px}
-
-/* Secrets table */
-.secrets-toolbar{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:10px;align-items:center}
-.search{flex:1;min-width:180px;display:flex;align-items:center;gap:6px;background:rgba(255,255,255,.04);border:1px solid var(--border);border-radius:var(--radius-sm);padding:5px 10px;transition:border-color .2s}
-.search:focus-within{border-color:var(--accent);box-shadow:0 0 0 3px rgba(14,165,233,.12)}
-.search svg{width:13px;height:13px;color:var(--text-dim);flex-shrink:0}
-.search input{flex:1;background:transparent;border:none;outline:none;color:var(--text-primary);font-family:var(--font-mono);font-size:.82rem}
-.search input::placeholder{color:var(--text-dim)}
-.secrets-table-wrap{max-height:380px;overflow:auto;border:1px solid var(--border);border-radius:var(--radius-sm);background:rgba(4,8,15,.4)}
-.secrets-table{width:100%;border-collapse:collapse;font-family:var(--font-mono);font-size:.78rem}
-.secrets-table thead th{position:sticky;top:0;background:rgba(8,14,24,.95);backdrop-filter:blur(8px);text-align:left;padding:8px 10px;color:var(--text-dim);font-weight:600;font-size:.7rem;text-transform:uppercase;letter-spacing:.05em;border-bottom:1px solid var(--border);cursor:pointer;user-select:none;white-space:nowrap}
-.secrets-table thead th:hover{color:var(--text-primary)}
-.secrets-table thead th .sort-arrow{display:inline-block;margin-left:4px;color:var(--accent-bright);opacity:0;font-size:.7rem}
-.secrets-table thead th.sorted .sort-arrow{opacity:1}
-.secrets-table tbody td{padding:6px 10px;border-bottom:1px solid rgba(255,255,255,.03);color:var(--text-secondary);vertical-align:middle}
-.secrets-table tbody tr:hover td{background:rgba(14,165,233,.05);color:var(--text-primary)}
-.secrets-table .col-key{color:var(--text-primary);font-weight:500;max-width:240px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.secrets-table .col-decay{min-width:90px}
-.secrets-table .col-tags{max-width:200px;overflow:hidden}
-.tag-pill{display:inline-block;font-size:.68rem;padding:1px 6px;background:rgba(168,85,247,.1);color:var(--violet);border:1px solid rgba(168,85,247,.2);border-radius:99px;margin-right:3px;font-family:var(--font-mono)}
-.scope-tag{display:inline-block;font-size:.68rem;padding:1px 6px;border-radius:4px;letter-spacing:.04em;font-weight:600;text-transform:uppercase}
-.scope-tag.global{background:rgba(14,165,233,.15);color:var(--accent-bright)}
-.scope-tag.project{background:rgba(34,197,94,.15);color:var(--green)}
-.scope-tag.team{background:rgba(168,85,247,.15);color:var(--violet)}
-.scope-tag.org{background:rgba(251,191,36,.15);color:var(--warning)}
-.type-tag{display:inline-block;font-size:.68rem;padding:1px 6px;border-radius:4px;letter-spacing:.04em;text-transform:uppercase;background:rgba(255,255,255,.05);color:var(--text-dim)}
-.type-tag.superposition{background:rgba(168,85,247,.12);color:var(--violet)}
-.protected-icon{color:var(--warning);margin-left:4px;display:inline-flex;vertical-align:middle}
-.mini-decay{display:inline-flex;align-items:center;gap:6px;width:100%}
-.mini-decay-bar{flex:1;height:4px;border-radius:2px;background:rgba(255,255,255,.06);overflow:hidden;min-width:30px}
-.mini-decay-fill{height:100%;border-radius:2px}
-.mini-decay-time{color:var(--text-dim);font-size:.7rem;min-width:38px;text-align:right}
-
-/* Empty states */
-.empty{color:var(--text-dim);font-size:.86rem;font-style:italic;padding:8px 0}
-.empty-cta{margin-top:6px;display:block;font-style:normal;font-family:var(--font-mono);font-size:.78rem;color:var(--accent-bright)}
-
-/* Footer */
-.foot{margin-top:24px;text-align:center;color:var(--text-dim);font-size:.72rem;font-family:var(--font-mono)}
-.foot a{color:var(--accent-bright);text-decoration:none}
-.foot a:hover{text-decoration:underline}
-
-/* Scrollbar */
-::-webkit-scrollbar{width:6px;height:6px}
-::-webkit-scrollbar-track{background:transparent}
-::-webkit-scrollbar-thumb{background:rgba(255,255,255,0.08);border-radius:3px}
-::-webkit-scrollbar-thumb:hover{background:rgba(255,255,255,0.15)}
-
-/* Print */
-@media print{
-  .blob,.header-right{display:none}
-  .header{position:static}
-  body{background:#fff;color:#000}
-}
-</style>
-</head>
-<body>
-
-<!-- Shared SVG gradient definition (referenced by the neon icons) -->
-<svg class="svg-defs" aria-hidden="true" focusable="false">
-  <defs>
-    <linearGradient id="neon-grad" x1="0%" y1="0%" x2="100%" y2="100%">
-      <stop offset="0%" stop-color="#00D1FF"/>
-      <stop offset="100%" stop-color="#a855f7"/>
-    </linearGradient>
-  </defs>
-</svg>
-
-<div class="blob blob-1"></div>
-<div class="blob blob-2"></div>
-<div class="blob blob-3"></div>
-
-<!-- Preact mounts the entire UI here; see src/dashboard-client/main.js -->
-<div id="app"></div>
-
-<script>window.__QRING__=Object.freeze({token:${jsString(token)}});</script>
-<script>${DASHBOARD_CLIENT}</script>
-</body>
-</html>`;
-}
-
-// src/core/dashboard.ts
-var SESSION_RECENT_EVENTS = 10;
-var AUDIT_WINDOW_SECONDS = 24 * 60 * 60;
-function toSecretSnapshot(entry) {
-  const envelope = entry.envelope;
-  const decay = envelope ? checkDecay(envelope) : {
-    isExpired: false,
-    isStale: false,
-    lifetimePercent: 0,
-    secondsRemaining: null,
-    timeRemaining: null
-  };
-  return {
-    key: entry.key,
-    scope: entry.scope,
-    type: envelope?.states ? "superposition" : "collapsed",
-    environments: envelope?.states ? Object.keys(envelope.states) : void 0,
-    defaultEnv: envelope?.defaultEnv,
-    decay,
-    accessCount: envelope?.meta.accessCount ?? 0,
-    lastAccessedAt: envelope?.meta.lastAccessedAt,
-    createdAt: envelope?.meta.createdAt ?? "",
-    updatedAt: envelope?.meta.updatedAt ?? "",
-    description: envelope?.meta.description,
-    tags: envelope?.meta.tags,
-    entangled: envelope?.meta.entangled,
-    provider: envelope?.meta.provider,
-    requiresApproval: envelope?.meta.requiresApproval,
-    jitProvider: envelope?.meta.jitProvider,
-    hasRotationFormat: !!envelope?.meta.rotationFormat
-  };
-}
-function summariseHookMatch(match) {
-  const parts = [];
-  if (match.key) parts.push(`key=${match.key}`);
-  if (match.keyPattern) parts.push(`pattern=${match.keyPattern}`);
-  if (match.tag) parts.push(`tag=${match.tag}`);
-  if (match.scope) parts.push(`scope=${match.scope}`);
-  if (match.action?.length) parts.push(`on=${match.action.join("|")}`);
-  return parts.length ? parts.join(" \xB7 ") : "any change";
-}
-function buildManifest(projectPath, secrets) {
-  const config = readProjectConfig(projectPath);
-  if (!config?.secrets) return null;
-  const declared = Object.keys(config.secrets);
-  const projectSecrets = new Map(
-    secrets.filter((s) => s.scope === "project").map((s) => [s.key, s])
-  );
-  const required = [];
-  const missing = [];
-  const expired = [];
-  const stale = [];
-  for (const key of declared) {
-    const entry = config.secrets[key];
-    if (entry.required) required.push(key);
-    const present = projectSecrets.get(key);
-    if (!present) {
-      if (entry.required) missing.push(key);
-      continue;
-    }
-    if (present.decay.isExpired) expired.push(key);
-    else if (present.decay.isStale) stale.push(key);
-  }
-  return {
-    declared: declared.length,
-    required: required.length,
-    missing,
-    expired,
-    stale
-  };
-}
-function buildPolicySnapshot(projectPath) {
-  const summary = getPolicySummary(projectPath);
-  const mcp = summary.details.mcp ?? {};
-  const exec = summary.details.exec ?? {};
-  const sec = summary.details.secrets ?? {};
-  return {
-    hasMcpPolicy: summary.hasMcpPolicy,
-    hasExecPolicy: summary.hasExecPolicy,
-    hasSecretPolicy: summary.hasSecretPolicy,
-    counts: {
-      allowTools: mcp.allowTools?.length ?? 0,
-      denyTools: mcp.denyTools?.length ?? 0,
-      deniedKeys: mcp.deniedKeys?.length ?? 0,
-      deniedTags: mcp.deniedTags?.length ?? 0,
-      allowCommands: exec.allowCommands?.length ?? 0,
-      denyCommands: exec.denyCommands?.length ?? 0,
-      requireApprovalForTags: sec.requireApprovalForTags?.length ?? 0,
-      requireRotationFormatForTags: sec.requireRotationFormatForTags?.length ?? 0
-    },
-    maxTtlSeconds: sec.maxTtlSeconds,
-    maxRuntimeSeconds: exec.maxRuntimeSeconds
-  };
-}
-function buildAuditMetrics(events) {
-  const byAction = {};
-  const bySource = {};
-  const readCounts = /* @__PURE__ */ new Map();
-  for (const e of events) {
-    byAction[e.action] = (byAction[e.action] ?? 0) + 1;
-    bySource[e.source] = (bySource[e.source] ?? 0) + 1;
-    if (e.action === "read" && e.key) {
-      readCounts.set(e.key, (readCounts.get(e.key) ?? 0) + 1);
-    }
-  }
-  const topRead = [...readCounts.entries()].map(([key, reads]) => ({ key, reads })).sort((a, b) => b.reads - a.reads).slice(0, 10);
-  return {
-    byAction,
-    bySource,
-    topRead,
-    total: events.length,
-    windowSeconds: AUDIT_WINDOW_SECONDS
-  };
-}
-function collectSnapshot() {
-  const projectPath = process.cwd();
-  const entries = listSecrets({ source: "api", silent: true, projectPath });
-  const secrets = entries.map(toSecretSnapshot);
-  let healthy = 0;
-  let stale = 0;
-  let expired = 0;
-  let noDecay = 0;
-  let protectedCount = 0;
-  const scopes = { global: 0, project: 0, team: 0, org: 0 };
-  for (const s of secrets) {
-    if (!s.decay.timeRemaining) noDecay++;
-    else if (s.decay.isExpired) expired++;
-    else if (s.decay.isStale) stale++;
-    else healthy++;
-    if (s.requiresApproval) protectedCount++;
-    if (s.scope === "global") scopes.global++;
-    else if (s.scope === "project") scopes.project++;
-    else if (s.scope === "team") scopes.team++;
-    else if (s.scope === "org") scopes.org++;
-  }
-  const auditWindow = queryAudit({
-    since: new Date(Date.now() - AUDIT_WINDOW_SECONDS * 1e3).toISOString()
-  }).filter((e) => e.action !== "list");
-  const recent = auditWindow.slice(0, 80);
-  const sessions = buildSessions(auditWindow, SESSION_RECENT_EVENTS).map(
-    ({ events, ...summary }) => ({
-      ...summary,
-      recent: events.map((e) => ({
-        timestamp: e.timestamp,
-        action: e.action,
-        ...e.key ? { key: e.key } : {},
-        ...e.detail ? { detail: e.detail } : {}
-      }))
-    })
-  );
-  const approvals = listApprovals().map((a) => ({
-    id: a.id,
-    key: a.key,
-    scope: a.scope,
-    reason: a.reason,
-    grantedBy: a.grantedBy,
-    grantedAt: a.grantedAt,
-    expiresAt: a.expiresAt,
-    secondsRemaining: Math.floor((new Date(a.expiresAt).getTime() - Date.now()) / 1e3),
-    valid: a.valid && !a.tampered,
-    tampered: a.tampered
-  }));
-  const hookEntries = listHooks().map((h) => ({
-    id: h.id,
-    type: h.type,
-    description: h.description,
-    enabled: h.enabled,
-    match: h.match,
-    matchSummary: summariseHookMatch(h.match)
-  }));
-  return {
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    version: PACKAGE_VERSION,
-    projectPath,
-    secrets,
-    health: { healthy, stale, expired, noDecay, total: secrets.length },
-    scopes,
-    protectedCount,
-    entanglements: listEntanglements(),
-    tunnels: tunnelList(),
-    audit: recent,
-    auditMetrics: buildAuditMetrics(auditWindow),
-    anomalies: detectAnomalies(),
-    sessions,
-    environment: collapseEnvironment({ projectPath }),
-    manifest: buildManifest(projectPath, secrets),
-    policy: buildPolicySnapshot(projectPath),
-    approvals,
-    hooks: hookEntries,
-    memoryKeys: listMemory().length,
-    auditChain: (() => {
-      const chain = verifyAuditChain();
-      return {
-        intact: chain.intact,
-        totalEvents: chain.totalEvents,
-        validEvents: chain.validEvents,
-        ...chain.brokenAt != null ? { brokenAt: chain.brokenAt } : {}
-      };
-    })()
-  };
-}
-var SECURITY_HEADERS = {
-  "Content-Security-Policy": "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'",
-  "X-Frame-Options": "DENY",
-  "X-Content-Type-Options": "nosniff",
-  "Referrer-Policy": "no-referrer",
-  "Cache-Control": "no-store"
-};
-function timingSafeStringEqual(a, b) {
-  const ab = Buffer.from(a, "utf8");
-  const bb = Buffer.from(b, "utf8");
-  if (ab.length !== bb.length) return false;
-  return timingSafeEqual(ab, bb);
-}
-function startDashboardServer(options = {}) {
-  const port = options.port ?? 9876;
-  const clients = /* @__PURE__ */ new Set();
-  let intervalHandle = null;
-  const token = randomBytes(24).toString("base64url");
-  const html = getDashboardHtml(token);
-  function broadcast() {
-    const snapshot = collectSnapshot();
-    const data = `data: ${JSON.stringify(snapshot)}
-
-`;
-    for (const res of clients) {
-      if (res.writableEnded || res.destroyed) {
-        clients.delete(res);
-        continue;
-      }
-      try {
-        const ok = res.write(data);
-        if (!ok) {
-          clients.delete(res);
-          try {
-            res.end();
-          } catch {
-            try {
-              res.destroy();
-            } catch {
-            }
-          }
-        }
-      } catch {
-        clients.delete(res);
-        try {
-          res.end();
-        } catch {
-          try {
-            res.destroy();
-          } catch {
-          }
-        }
-      }
-    }
-  }
-  const server = createServer((req, res) => {
-    let pathname;
-    let query;
-    try {
-      const parsed = new URL(req.url ?? "/", "http://127.0.0.1");
-      pathname = parsed.pathname;
-      query = parsed.searchParams;
-    } catch {
-      res.writeHead(400, { ...SECURITY_HEADERS, "Content-Type": "text/plain; charset=utf-8" });
-      res.end("Bad Request: invalid URL");
-      return;
-    }
-    const provided = query.get("token") ?? "";
-    if (!timingSafeStringEqual(provided, token)) {
-      res.writeHead(403, { ...SECURITY_HEADERS, "Content-Type": "text/plain; charset=utf-8" });
-      res.end("Forbidden: missing or invalid token");
-      return;
-    }
-    if (pathname === "/events") {
-      res.writeHead(200, {
-        ...SECURITY_HEADERS,
-        "Content-Type": "text/event-stream",
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive"
-      });
-      const snapshot = collectSnapshot();
-      res.write(`data: ${JSON.stringify(snapshot)}
-
-`);
-      clients.add(res);
-      req.on("close", () => clients.delete(res));
-      return;
-    }
-    if (pathname === "/api/status") {
-      const snapshot = collectSnapshot();
-      res.writeHead(200, {
-        ...SECURITY_HEADERS,
-        "Content-Type": "application/json"
-      });
-      res.end(JSON.stringify(snapshot, null, 2));
-      return;
-    }
-    res.writeHead(200, { ...SECURITY_HEADERS, "Content-Type": "text/html; charset=utf-8" });
-    res.end(html);
-  });
-  server.listen(port, "127.0.0.1", () => {
-    intervalHandle = setInterval(broadcast, 5e3);
-    if (intervalHandle && typeof intervalHandle === "object" && "unref" in intervalHandle) {
-      intervalHandle.unref();
-    }
-  });
-  return {
-    port,
-    token,
-    url: `http://127.0.0.1:${port}/?token=${token}`,
-    close: () => {
-      if (intervalHandle) clearInterval(intervalHandle);
-      for (const res of clients) {
-        try {
-          res.end();
-        } catch {
-        }
-      }
-      clients.clear();
-      server.close();
-    },
-    server
-  };
-}
-export {
-  collectSnapshot,
-  startDashboardServer
-};
-//# sourceMappingURL=dashboard-ZN3FPR73.js.map