@iris-eval/mcp-server 0.4.0 → 0.4.2

package/README.md

@@ -126,8 +126,8 @@ Iris registers nine tools that any MCP-compatible agent can invoke — full rule
 - **`deploy_rule`** — Register a new custom eval rule so it fires on every `evaluate_output` of that category
 - **`delete_rule`** — Remove a deployed custom rule (destructive, idempotent)
 - **`delete_trace`** — Remove a single stored trace by ID (destructive, tenant-scoped)
-- **`evaluate_with_llm_judge`** — Semantic eval via LLM (Anthropic or OpenAI). Five templates: accuracy, helpfulness, safety, correctness, faithfulness. Cost-capped, per-eval pricing disclosed.
-- **`verify_citations`** — Extract citations from output (numbered, author-year, URLs, DOIs), fetch sources behind an SSRF-guarded + domain-allowlisted resolver, and use an LLM judge to check whether each source actually supports the cited claim. Opt-in outbound HTTP.
+- **`evaluate_with_llm_judge`** — Semantic eval via LLM (Anthropic or OpenAI). Five templates: accuracy, helpfulness, safety, correctness, faithfulness. Cost-capped, per-eval pricing disclosed. **Bring your own API key** (`IRIS_ANTHROPIC_API_KEY` or `IRIS_OPENAI_API_KEY`) — Iris doesn't proxy or relay LLM calls.
+- **`verify_citations`** — Extract citations from output (numbered, author-year, URLs, DOIs), fetch sources behind an SSRF-guarded + domain-allowlisted resolver, and use an LLM judge to check whether each source actually supports the cited claim. Opt-in outbound HTTP. Same BYOK requirement as `evaluate_with_llm_judge`.
 
 When `IRIS_OTEL_ENDPOINT` is configured, `log_trace` calls also emit a best-effort OTLP/HTTP JSON export to any OpenTelemetry collector (Jaeger, Grafana Tempo, Datadog OTLP, Honeycomb, etc). See [docs/otel-integration.md](docs/otel-integration.md).
 

package/dist/custom-rule-store.d.ts

@@ -1,15 +1,16 @@
 import type { DeployedCustomRule, RuleSeverity } from './types/custom-rule.js';
 import type { CustomRuleDefinition, EvalType } from './types/eval.js';
+import { type TenantId } from './types/tenant.js';
 export interface CustomRuleStore {
-    list(): DeployedCustomRule[];
-    get(id: string): DeployedCustomRule | undefined;
-    deploy(input: DeployRuleInput): DeployedCustomRule;
-    delete(id: string, user?: string): boolean;
-    setEnabled(id: string, enabled: boolean, user?: string): DeployedCustomRule | undefined;
-    /** All ENABLED rules in deploy order — what the engine should register. */
-    enabledRules(): DeployedCustomRule[];
-    /** Path on disk for diagnostics. */
-    filePath: string;
+    list(tenantId: TenantId): DeployedCustomRule[];
+    get(tenantId: TenantId, id: string): DeployedCustomRule | undefined;
+    deploy(tenantId: TenantId, input: DeployRuleInput): DeployedCustomRule;
+    delete(tenantId: TenantId, id: string, user?: string): boolean;
+    setEnabled(tenantId: TenantId, id: string, enabled: boolean, user?: string): DeployedCustomRule | undefined;
+    /** All ENABLED rules for a tenant in deploy order — what the engine should register. */
+    enabledRules(tenantId: TenantId): DeployedCustomRule[];
+    /** Path on disk for diagnostics. Different per tenant. */
+    pathFor(tenantId: TenantId): string;
     auditPath: string;
 }
 export interface DeployRuleInput {
@@ -22,6 +23,13 @@ export interface DeployRuleInput {
     user?: string;
 }
 export declare function createCustomRuleStore(opts?: {
-    rulesPath?: string;
+    /**
+     * Returns the file path for a tenant's rules. Defaults to
+     * `~/.iris/custom-rules.json` for LOCAL_TENANT (zero migration for OSS)
+     * and `~/.iris/custom-rules-<sanitized-tenantId>.json` for others.
+     * Cloud orchestrators can inject their own factory to e.g. write into
+     * a per-tenant data dir.
+     */
+    pathFor?: (tenantId: TenantId) => string;
     auditPath?: string;
 }): CustomRuleStore;

package/dist/custom-rule-store.js

@@ -1,20 +1,34 @@
 /*
  * custom-rule-store — file-based persistence for deployed custom rules.
  *
- * Lives at ~/.iris/custom-rules.json with the schema in
- * src/types/custom-rule.ts. Audit log lives at ~/.iris/audit.log
- * (append-only JSONL). Both files are created on first write.
+ * Per-tenant file partition: each tenant's rules live in their own
+ * file. OSS single-tenant installs continue to use
+ * ~/.iris/custom-rules.json (the LOCAL_TENANT path) — zero migration
+ * for existing users. Cloud tenants get
+ * ~/.iris/custom-rules-<tenantId>.json (or whatever path the
+ * `pathFor` factory returns).
+ *
+ * Why per-file rather than top-level keys in one file or a tenant
+ * column on each rule:
+ *   - Zero migration: LOCAL_TENANT keeps the v0.4 file path/schema.
+ *   - Smallest blast radius for a corrupt write: one tenant's data
+ *     can't poison another's.
+ *   - Mirrors the existing audit-log per-file convention.
+ *
+ * Audit log stays SHARED across tenants: every entry already carries
+ * `tenantId` so readers can scope at query time.
  *
  * The v0.4 cut is single-user local. Concurrent writes from multiple
- * iris-mcp instances are not protected — that's a v0.5 concern when
- * multi-tenancy lands. For now we use atomic write-via-rename so a
- * crashed write doesn't leave a half-file.
+ * iris-mcp instances against the same tenant file are not protected.
+ * For now we use atomic write-via-rename so a crashed write doesn't
+ * leave a half-file.
  */
 import { mkdirSync, readFileSync, writeFileSync, existsSync, renameSync, appendFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
 import { randomBytes } from 'node:crypto';
 import { z } from 'zod';
+import { LOCAL_TENANT } from './types/tenant.js';
 const SEVERITY_VALUES = ['low', 'medium', 'high', 'critical'];
 const EVAL_TYPE_VALUES = ['completeness', 'relevance', 'safety', 'cost', 'custom'];
 const RULE_TYPE_VALUES = [
@@ -50,8 +64,19 @@ const FileSchema = z.object({
     version: z.literal(1),
     rules: z.array(DeployedRuleSchema),
 });
-function defaultRulesPath() {
-    return join(homedir(), '.iris', 'custom-rules.json');
+/**
+ * Default file path for a tenant. LOCAL_TENANT keeps the v0.4 path
+ * (zero migration); others get a per-tenant suffix.
+ */
+function defaultPathFor(tenantId) {
+    if (tenantId === LOCAL_TENANT) {
+        return join(homedir(), '.iris', 'custom-rules.json');
+    }
+    // Sanitize tenant id for filesystem safety. TenantId is branded but
+    // could in principle contain odd chars on Cloud — limit to a known-safe
+    // alphabet so we never write outside the .iris directory.
+    const safe = String(tenantId).replace(/[^a-zA-Z0-9._-]/g, '_');
+    return join(homedir(), '.iris', `custom-rules-${safe}.json`);
 }
 function defaultAuditPath() {
     return join(homedir(), '.iris', 'audit.log');
@@ -75,42 +100,54 @@ function writeAtomic(targetPath, contents) {
     writeFileSync(tmp, contents, 'utf-8');
     renameSync(tmp, targetPath);
 }
+function loadRulesFromDisk(rulesPath) {
+    if (!existsSync(rulesPath))
+        return [];
+    try {
+        const raw = readFileSync(rulesPath, 'utf-8');
+        const parsed = FileSchema.safeParse(JSON.parse(raw));
+        if (parsed.success)
+            return parsed.data.rules;
+        // Malformed: leave rules empty; do NOT overwrite the file.
+        return [];
+    }
+    catch {
+        // Unreadable: leave rules empty.
+        return [];
+    }
+}
 export function createCustomRuleStore(opts) {
-    const rulesPath = opts?.rulesPath ?? defaultRulesPath();
+    const pathFor = opts?.pathFor ?? defaultPathFor;
     const auditPath = opts?.auditPath ?? defaultAuditPath();
-    // In-memory copy that mirrors the file. Writes update both.
-    let rules = [];
-    // Initial load
-    if (existsSync(rulesPath)) {
-        try {
-            const raw = readFileSync(rulesPath, 'utf-8');
-            const parsed = FileSchema.safeParse(JSON.parse(raw));
-            if (parsed.success) {
-                rules = parsed.data.rules;
-            }
-            // Malformed: leave rules empty; do NOT overwrite the file.
-        }
-        catch {
-            // Unreadable: leave rules empty.
+    // In-memory cache keyed by tenant. Lazy-loaded on first access per
+    // tenant; subsequent calls hit the cache.
+    const tenantRules = new Map();
+    function load(tenantId) {
+        let rules = tenantRules.get(tenantId);
+        if (rules === undefined) {
+            rules = loadRulesFromDisk(pathFor(tenantId));
+            tenantRules.set(tenantId, rules);
         }
+        return rules;
     }
-    function persist() {
+    function persist(tenantId) {
+        const rules = tenantRules.get(tenantId) ?? [];
         const file = { version: 1, rules };
-        writeAtomic(rulesPath, JSON.stringify(file, null, 2));
+        writeAtomic(pathFor(tenantId), JSON.stringify(file, null, 2));
     }
     return {
-        filePath: rulesPath,
         auditPath,
-        list() {
-            return [...rules];
+        pathFor,
+        list(tenantId) {
+            return [...load(tenantId)];
         },
-        get(id) {
-            return rules.find((r) => r.id === id);
+        get(tenantId, id) {
+            return load(tenantId).find((r) => r.id === id);
         },
-        enabledRules() {
-            return rules.filter((r) => r.enabled);
+        enabledRules(tenantId) {
+            return load(tenantId).filter((r) => r.enabled);
         },
-        deploy(input) {
+        deploy(tenantId, input) {
             const now = new Date().toISOString();
             const id = generateRuleId();
             const rule = {
@@ -128,15 +165,12 @@ export function createCustomRuleStore(opts) {
             };
             // Validate before persisting.
             const validated = DeployedRuleSchema.parse(rule);
+            const rules = load(tenantId);
             rules.push(validated);
-            persist();
-            /* Tenant scoping: OSS single-tenant emits 'local'. Cloud replaces
-             * the entire custom-rule-store with a DB-backed service that reads
-             * the tenant from the authenticated session; that service will
-             * compute tenantId per-call. Hard-coded here for OSS. */
+            persist(tenantId);
             appendAudit(auditPath, {
                 ts: now,
-                tenantId: 'local',
+                tenantId,
                 action: 'rule.deploy',
                 user: input.user ?? 'local',
                 ruleId: id,
@@ -147,16 +181,17 @@ export function createCustomRuleStore(opts) {
             });
             return validated;
         },
-        delete(id, user = 'local') {
+        delete(tenantId, id, user = 'local') {
+            const rules = load(tenantId);
             const idx = rules.findIndex((r) => r.id === id);
             if (idx === -1)
                 return false;
             const removed = rules[idx];
             rules.splice(idx, 1);
-            persist();
+            persist(tenantId);
             appendAudit(auditPath, {
                 ts: new Date().toISOString(),
-                tenantId: 'local',
+                tenantId,
                 action: 'rule.delete',
                 user,
                 ruleId: id,
@@ -164,7 +199,8 @@ export function createCustomRuleStore(opts) {
             });
             return true;
         },
-        setEnabled(id, enabled, user = 'local') {
+        setEnabled(tenantId, id, enabled, user = 'local') {
+            const rules = load(tenantId);
             const rule = rules.find((r) => r.id === id);
             if (!rule)
                 return undefined;
@@ -172,10 +208,10 @@ export function createCustomRuleStore(opts) {
                 return rule;
             rule.enabled = enabled;
             rule.updatedAt = new Date().toISOString();
-            persist();
+            persist(tenantId);
             appendAudit(auditPath, {
                 ts: rule.updatedAt,
-                tenantId: 'local',
+                tenantId,
                 action: 'rule.toggle',
                 user,
                 ruleId: id,

package/dist/dashboard/assets/{index-BEG5FYWH.css → index-B4Aw6ozt.css}

@@ -1 +1 @@
-@import "https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500..700&family=Manrope:wght@400..700&family=JetBrains+Mono:wght@400..700&display=swap";:root{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light dark;--iris-50:#f0fdfa;--iris-100:#ccfbf1;--iris-200:#99f6e4;--iris-300:#5eead4;--iris-400:#2dd4bf;--iris-500:#14b8a6;--iris-600:#0d9488;--iris-700:#0f766e;--iris-800:#115e59;--iris-900:#134e4a;--iris-950:#042f2e;--eval-pass:#22c55e;--eval-warn:#eab308;--eval-fail:#ef4444;--eval-tool:#3b82f6;--eval-llm:#a855f7;--eval-skipped:#71717a}@media (prefers-color-scheme:dark){:root{--lightningcss-light: ;--lightningcss-dark:initial}}:root,[data-theme=dark]{--bg-base:#050508;--bg-raised:#08080e;--bg-surface:#0d0d15;--bg-card:#101018;--bg-card-hover:#16161f;--border-subtle:#ffffff0d;--border-default:#ffffff14;--border-strong:#ffffff24;--border-glow:#14b8a680;--text-primary:#f0f0f5;--text-secondary:#9494a8;--text-muted:#5e5e72;--text-accent:var(--iris-400);--glow-primary:#14b8a61f;--glow-strong:#14b8a640;--shadow-sm:0 1px 2px #0000004d;--shadow-md:0 4px 6px #0006;--shadow-lg:0 10px 15px #00000080}[data-theme=light]{--bg-base:#fafcfc;--bg-raised:#f1f5f5;--bg-surface:#e8eded;--bg-card:#fff;--bg-card-hover:#f4f8f8;--border-subtle:#0000000a;--border-default:#00000014;--border-strong:#00000024;--border-glow:#0d948859;--text-primary:#0a0f0e;--text-secondary:#3d5250;--text-muted:#7a908e;--text-accent:var(--iris-700);--glow-primary:#0d94880f;--glow-strong:#0d94881f;--shadow-sm:0 1px 2px #0000000f;--shadow-md:0 4px 6px #00000014;--shadow-lg:0 10px 15px #0000001a}:root{--font-display:"Space Grotesk", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;--font-body:"Manrope", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;--font-mono:"JetBrains Mono", "Fira Code", ui-monospace, monospace;--font-sans:var(--font-body);--text-caption-xs:11px;--text-caption:12px;--text-body-sm:13px;--text-body:14px;--text-body-lg:15px;--text-heading-sm:16px;--text-heading:20px;--text-display-sm:28px;--text-display:40px;--font-size-xs:var(--text-caption);--font-size-sm:var(--text-body-sm);--font-size-base:var(--text-body);--font-size-lg:var(--text-body-lg);--font-size-xl:var(--text-heading-sm);--font-size-2xl:var(--text-heading);--font-size-3xl:var(--text-display-sm);--leading-body:1.5;--leading-heading:1.2;--leading-display:1.1;--leading-mono:1.4;--space-0_5:2px;--space-1:4px;--space-1_5:6px;--space-2:8px;--space-2_5:10px;--space-3:12px;--space-4:16px;--space-5:20px;--space-6:24px;--space-8:32px;--space-10:40px;--space-12:48px;--space-16:64px;--space-20:80px;--space-24:96px}:root,[data-density=compact]{--density-row:32px;--density-padding:var(--space-3);--density-body:var(--text-body-sm)}[data-density=comfortable]{--density-row:44px;--density-padding:var(--space-4);--density-body:var(--text-body)}:root{--sidebar-width-expanded:256px;--sidebar-width-collapsed:64px;--header-height:56px;--page-toolbar-height:40px;--radius-xs:4px;--radius-sm:6px;--radius:8px;--radius-lg:12px;--radius-xl:16px;--radius-pill:999px;--border-radius:var(--radius);--border-radius-sm:var(--radius-xs);--border-radius-lg:var(--radius-lg);--transition-instant:.1s ease;--transition-fast:.15s ease;--transition-base:.2s ease;--transition-slow:.3s ease;--ease-iris:cubic-bezier(.25, .4, .25, 1);--bg-primary:var(--bg-base);--bg-secondary:var(--bg-raised);--bg-tertiary:var(--bg-surface);--bg-hover:var(--bg-card-hover);--border-color:var(--border-default);--accent-primary:var(--iris-500);--accent-primary-hover:var(--iris-400);--accent-success:var(--eval-pass);--accent-error:var(--eval-fail);--accent-warning:var(--eval-warn);--accent-tool:var(--eval-tool);--accent-llm:var(--eval-llm)}html{transition:background-color var(--transition-base), color var(--transition-base)}*,:before,:after{box-sizing:border-box;margin:0;padding:0}html,body,#root{width:100%;height:100%}body{font-family:var(--font-body);font-size:var(--text-body);color:var(--text-primary);background-color:var(--bg-base);line-height:var(--leading-body);-webkit-font-smoothing:antialiased;font-feature-settings:"cv11", "ss01"}h1,h2,h3,h4,.display{font-family:var(--font-display);letter-spacing:-.01em;font-weight:600}a{color:var(--text-accent);text-decoration:none}a:hover{color:var(--iris-300)}button{cursor:pointer;font-family:inherit}input,select{font-family:inherit;font-size:inherit}code,pre{font-family:var(--font-mono)}a:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,[role=button]:focus-visible{outline:2px solid var(--iris-500);outline-offset:2px;border-radius:var(--radius-xs)}::selection{background:var(--iris-600);color:#fff}::-webkit-scrollbar{width:8px;height:8px}::-webkit-scrollbar-track{background:var(--bg-base)}::-webkit-scrollbar-thumb{background:var(--border-strong);border-radius:var(--radius-xs)}::-webkit-scrollbar-thumb:hover{background:var(--text-muted)}html{scrollbar-color:var(--border-strong) transparent;scrollbar-width:thin}@keyframes pulse-ring{0%{opacity:.5;transform:scale(1)}to{opacity:0;transform:scale(2.5)}}.pulse-dot{position:relative}.pulse-dot:after{content:"";background:var(--iris-500);border-radius:50%;animation:2s ease-out infinite pulse-ring;position:absolute;inset:-2px}@media (prefers-reduced-motion:reduce){*,:before,:after{scroll-behavior:auto!important;transition-duration:.01ms!important;animation-duration:.01ms!important;animation-iteration-count:1!important}}@media (width<=767px){aside[aria-label=Main\ navigation]{width:160px}main{overflow-x:auto}}@media print{body{color:#000!important;background:#fff!important}aside[aria-label=Main\ navigation],header,[role=region][aria-label=Welcome],[role=region][aria-label=Bulk\ actions],[role=status],[role=dialog]{display:none!important}body,#root,main{height:auto!important;overflow:visible!important}main{padding:0!important}tr,pre,code{page-break-inside:avoid}h1,h2,h3{page-break-after:avoid}[aria-label*=violation],[aria-label*=spike],[aria-label*=collision],[aria-label*=Pass],[aria-label*=Fail]{border:1px solid #000!important}a{color:#000!important;text-decoration:underline!important}a[href^=http]:after{content:" (" attr(href) ")";color:#555;font-size:80%}}
+@import "https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500..700&family=Manrope:wght@400..700&family=JetBrains+Mono:wght@400..700&display=swap";:root{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light dark;--iris-50:#f0fdfa;--iris-100:#ccfbf1;--iris-200:#99f6e4;--iris-300:#5eead4;--iris-400:#2dd4bf;--iris-500:#14b8a6;--iris-600:#0d9488;--iris-700:#0f766e;--iris-800:#115e59;--iris-900:#134e4a;--iris-950:#042f2e;--eval-pass:#22c55e;--eval-warn:#eab308;--eval-fail:#ef4444;--eval-tool:#3b82f6;--eval-llm:#a855f7;--eval-skipped:#71717a}@media (prefers-color-scheme:dark){:root{--lightningcss-light: ;--lightningcss-dark:initial}}:root,[data-theme=dark]{--bg-base:#050508;--bg-raised:#08080e;--bg-surface:#0d0d15;--bg-card:#101018;--bg-card-hover:#16161f;--border-subtle:#ffffff0d;--border-default:#ffffff14;--border-strong:#ffffff24;--border-glow:#14b8a680;--text-primary:#f0f0f5;--text-secondary:#9494a8;--text-muted:#5e5e72;--text-accent:var(--iris-400);--glow-primary:#14b8a61f;--glow-strong:#14b8a640;--shadow-sm:0 1px 2px #0000004d;--shadow-md:0 4px 6px #0006;--shadow-lg:0 10px 15px #00000080}[data-theme=light]{--bg-base:#fafcfc;--bg-raised:#f1f5f5;--bg-surface:#e8eded;--bg-card:#fff;--bg-card-hover:#f4f8f8;--border-subtle:#0000000a;--border-default:#00000014;--border-strong:#00000024;--border-glow:#0d948859;--text-primary:#0a0f0e;--text-secondary:#3d5250;--text-muted:#7a908e;--text-accent:var(--iris-700);--glow-primary:#0d94880f;--glow-strong:#0d94881f;--shadow-sm:0 1px 2px #0000000f;--shadow-md:0 4px 6px #00000014;--shadow-lg:0 10px 15px #0000001a}:root{--font-display:"Space Grotesk", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;--font-body:"Manrope", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;--font-mono:"JetBrains Mono", "Fira Code", ui-monospace, monospace;--font-sans:var(--font-body);--text-caption-xs:11px;--text-caption:12px;--text-body-sm:13px;--text-body:14px;--text-body-lg:15px;--text-heading-sm:16px;--text-heading:20px;--text-display-sm:28px;--text-display:40px;--font-size-xs:var(--text-caption);--font-size-sm:var(--text-body-sm);--font-size-base:var(--text-body);--font-size-lg:var(--text-body-lg);--font-size-xl:var(--text-heading-sm);--font-size-2xl:var(--text-heading);--font-size-3xl:var(--text-display-sm);--leading-body:1.5;--leading-heading:1.2;--leading-display:1.1;--leading-mono:1.4;--space-0_5:2px;--space-1:4px;--space-1_5:6px;--space-2:8px;--space-2_5:10px;--space-3:12px;--space-4:16px;--space-5:20px;--space-6:24px;--space-8:32px;--space-10:40px;--space-12:48px;--space-16:64px;--space-20:80px;--space-24:96px}:root,[data-density=compact]{--density-row:32px;--density-padding:var(--space-3);--density-body:var(--text-body-sm)}[data-density=comfortable]{--density-row:44px;--density-padding:var(--space-4);--density-body:var(--text-body)}:root{--sidebar-width-expanded:256px;--sidebar-width-collapsed:64px;--header-height:56px;--page-toolbar-height:40px;--radius-xs:4px;--radius-sm:6px;--radius:8px;--radius-lg:12px;--radius-xl:16px;--radius-pill:999px;--border-radius:var(--radius);--border-radius-sm:var(--radius-xs);--border-radius-lg:var(--radius-lg);--transition-instant:.1s ease;--transition-fast:.15s ease;--transition-base:.2s ease;--transition-slow:.3s ease;--ease-iris:cubic-bezier(.25, .4, .25, 1);--bg-primary:var(--bg-base);--bg-secondary:var(--bg-raised);--bg-tertiary:var(--bg-surface);--bg-hover:var(--bg-card-hover);--border-color:var(--border-default);--accent-primary:var(--iris-500);--accent-primary-hover:var(--iris-400);--accent-success:var(--eval-pass);--accent-error:var(--eval-fail);--accent-warning:var(--eval-warn);--accent-tool:var(--eval-tool);--accent-llm:var(--eval-llm)}html{transition:background-color var(--transition-base), color var(--transition-base)}*,:before,:after{box-sizing:border-box;margin:0;padding:0}html,body,#root{width:100%;height:100%}body{font-family:var(--font-body);font-size:var(--text-body);color:var(--text-primary);background-color:var(--bg-base);line-height:var(--leading-body);-webkit-font-smoothing:antialiased;font-feature-settings:"cv11", "ss01"}h1,h2,h3,h4,.display{font-family:var(--font-display);letter-spacing:-.01em;font-weight:600}a{color:var(--text-accent);text-decoration:none}a:hover{color:var(--iris-300)}button{cursor:pointer;font-family:inherit}input,select{font-family:inherit;font-size:inherit}code,pre{font-family:var(--font-mono)}a:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,[role=button]:focus-visible{outline:2px solid var(--iris-500);outline-offset:2px;border-radius:var(--radius-xs)}.iris-sr-reveal{clip:rect(0, 0, 0, 0);white-space:nowrap;border:0;width:1px;height:1px;margin:-1px;padding:0;position:absolute;overflow:hidden}.iris-sr-reveal:focus-within{width:auto;height:auto;margin:var(--space-3) 0 0 0;padding:var(--space-3) var(--space-4);clip:auto;white-space:normal;background:var(--bg-card);color:var(--text-primary);border:1px solid var(--iris-500);border-radius:var(--radius-sm);position:static;overflow:visible}.iris-sr-reveal:focus-within>li{padding:var(--space-1) 0;list-style:none}::selection{background:var(--iris-600);color:#fff}::-webkit-scrollbar{width:8px;height:8px}::-webkit-scrollbar-track{background:var(--bg-base)}::-webkit-scrollbar-thumb{background:var(--border-strong);border-radius:var(--radius-xs)}::-webkit-scrollbar-thumb:hover{background:var(--text-muted)}html{scrollbar-color:var(--border-strong) transparent;scrollbar-width:thin}@keyframes pulse-ring{0%{opacity:.5;transform:scale(1)}to{opacity:0;transform:scale(2.5)}}.pulse-dot{position:relative}.pulse-dot:after{content:"";background:var(--iris-500);border-radius:50%;animation:2s ease-out infinite pulse-ring;position:absolute;inset:-2px}@media (prefers-reduced-motion:reduce){*,:before,:after{scroll-behavior:auto!important;transition-duration:.01ms!important;animation-duration:.01ms!important;animation-iteration-count:1!important}}@media (width<=767px){aside[aria-label=Main\ navigation]{width:160px}main{overflow-x:auto}}@media print{body{color:#000!important;background:#fff!important}aside[aria-label=Main\ navigation],header,[role=region][aria-label=Welcome],[role=region][aria-label=Bulk\ actions],[role=status],[role=dialog]{display:none!important}body,#root,main{height:auto!important;overflow:visible!important}main{padding:0!important}tr,pre,code{page-break-inside:avoid}h1,h2,h3{page-break-after:avoid}[aria-label*=violation],[aria-label*=spike],[aria-label*=collision],[aria-label*=Pass],[aria-label*=Fail]{border:1px solid #000!important}a{color:#000!important;text-decoration:underline!important}a[href^=http]:after{content:" (" attr(href) ")";color:#555;font-size:80%}}