@iris-eval/mcp-server 0.4.5 → 0.5.0

package/dist/dashboard/assets/index-UffZ-aEJ.css

@@ -0,0 +1 @@
+@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-cyrillic-ext.woff2)format("woff2");unicode-range:U+460-52F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-cyrillic.woff2)format("woff2");unicode-range:U+301,U+400-45F,U+490-491,U+4B0-4B1,U+2116}@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-greek.woff2)format("woff2");unicode-range:U+370-377,U+37A-37F,U+384-38A,U+38C,U+38E-3A1,U+3A3-3FF}@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-vietnamese.woff2)format("woff2");unicode-range:U+102-103,U+110-111,U+128-129,U+168-169,U+1A0-1A1,U+1AF-1B0,U+300-301,U+303-304,U+308-309,U+323,U+329,U+1EA0-1EF9,U+20AB}@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:JetBrains Mono;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/jetbrains-mono-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-cyrillic-ext.woff2)format("woff2");unicode-range:U+460-52F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-cyrillic.woff2)format("woff2");unicode-range:U+301,U+400-45F,U+490-491,U+4B0-4B1,U+2116}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-greek.woff2)format("woff2");unicode-range:U+370-377,U+37A-37F,U+384-38A,U+38C,U+38E-3A1,U+3A3-3FF}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-vietnamese.woff2)format("woff2");unicode-range:U+102-103,U+110-111,U+128-129,U+168-169,U+1A0-1A1,U+1AF-1B0,U+300-301,U+303-304,U+308-309,U+323,U+329,U+1EA0-1EF9,U+20AB}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Manrope;font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/manrope-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Space Grotesk;font-style:normal;font-weight:500 700;font-display:swap;src:url(/fonts/space-grotesk-vietnamese.woff2)format("woff2");unicode-range:U+102-103,U+110-111,U+128-129,U+168-169,U+1A0-1A1,U+1AF-1B0,U+300-301,U+303-304,U+308-309,U+323,U+329,U+1EA0-1EF9,U+20AB}@font-face{font-family:Space Grotesk;font-style:normal;font-weight:500 700;font-display:swap;src:url(/fonts/space-grotesk-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Space Grotesk;font-style:normal;font-weight:500 700;font-display:swap;src:url(/fonts/space-grotesk-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}:root{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light dark;--iris-50:#f0fdfa;--iris-100:#ccfbf1;--iris-200:#99f6e4;--iris-300:#5eead4;--iris-400:#2dd4bf;--iris-500:#14b8a6;--iris-600:#0d9488;--iris-700:#0f766e;--iris-800:#115e59;--iris-900:#134e4a;--iris-950:#042f2e;--eval-pass:#22c55e;--eval-warn:#eab308;--eval-fail:#ef4444;--eval-tool:#3b82f6;--eval-llm:#a855f7;--eval-skipped:#71717a}@media (prefers-color-scheme:dark){:root{--lightningcss-light: ;--lightningcss-dark:initial}}:root,[data-theme=dark]{--bg-base:#050508;--bg-raised:#08080e;--bg-surface:#0d0d15;--bg-card:#101018;--bg-card-hover:#16161f;--border-subtle:#ffffff0d;--border-default:#ffffff14;--border-strong:#ffffff24;--border-glow:#14b8a680;--text-primary:#f0f0f5;--text-secondary:#9494a8;--text-muted:#5e5e72;--text-accent:var(--iris-400);--glow-primary:#14b8a61f;--glow-strong:#14b8a640;--shadow-sm:0 1px 2px #0000004d;--shadow-md:0 4px 6px #0006;--shadow-lg:0 10px 15px #00000080}[data-theme=light]{--bg-base:#fafcfc;--bg-raised:#f1f5f5;--bg-surface:#e8eded;--bg-card:#fff;--bg-card-hover:#f4f8f8;--border-subtle:#0000000a;--border-default:#00000014;--border-strong:#00000024;--border-glow:#0d948859;--text-primary:#0a0f0e;--text-secondary:#3d5250;--text-muted:#7a908e;--text-accent:var(--iris-700);--glow-primary:#0d94880f;--glow-strong:#0d94881f;--shadow-sm:0 1px 2px #0000000f;--shadow-md:0 4px 6px #00000014;--shadow-lg:0 10px 15px #0000001a}:root{--font-display:"Space Grotesk", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;--font-body:"Manrope", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;--font-mono:"JetBrains Mono", "Fira Code", ui-monospace, monospace;--font-sans:var(--font-body);--text-caption-xs:11px;--text-caption:12px;--text-body-sm:13px;--text-body:14px;--text-body-lg:15px;--text-heading-sm:16px;--text-heading:20px;--text-display-sm:28px;--text-display:40px;--font-size-xs:var(--text-caption);--font-size-sm:var(--text-body-sm);--font-size-base:var(--text-body);--font-size-lg:var(--text-body-lg);--font-size-xl:var(--text-heading-sm);--font-size-2xl:var(--text-heading);--font-size-3xl:var(--text-display-sm);--leading-body:1.5;--leading-heading:1.2;--leading-display:1.1;--leading-mono:1.4;--space-0_5:2px;--space-1:4px;--space-1_5:6px;--space-2:8px;--space-2_5:10px;--space-3:12px;--space-4:16px;--space-5:20px;--space-6:24px;--space-8:32px;--space-10:40px;--space-12:48px;--space-16:64px;--space-20:80px;--space-24:96px}:root,[data-density=compact]{--density-row:32px;--density-padding:var(--space-3);--density-body:var(--text-body-sm)}[data-density=comfortable]{--density-row:44px;--density-padding:var(--space-4);--density-body:var(--text-body)}:root{--sidebar-width-expanded:256px;--sidebar-width-collapsed:64px;--header-height:56px;--page-toolbar-height:40px;--radius-xs:4px;--radius-sm:6px;--radius:8px;--radius-lg:12px;--radius-xl:16px;--radius-pill:999px;--border-radius:var(--radius);--border-radius-sm:var(--radius-xs);--border-radius-lg:var(--radius-lg);--transition-instant:.1s ease;--transition-fast:.15s ease;--transition-base:.2s ease;--transition-slow:.3s ease;--ease-iris:cubic-bezier(.25, .4, .25, 1);--bg-primary:var(--bg-base);--bg-secondary:var(--bg-raised);--bg-tertiary:var(--bg-surface);--bg-hover:var(--bg-card-hover);--border-color:var(--border-default);--accent-primary:var(--iris-500);--accent-primary-hover:var(--iris-400);--accent-success:var(--eval-pass);--accent-error:var(--eval-fail);--accent-warning:var(--eval-warn);--accent-tool:var(--eval-tool);--accent-llm:var(--eval-llm)}html{transition:background-color var(--transition-base), color var(--transition-base)}.iris-btn{appearance:none;justify-content:center;align-items:center;gap:var(--space-1_5);border-radius:var(--radius-sm);font-family:inherit;font-size:var(--text-body-sm);font-weight:500;line-height:var(--leading-body);padding:var(--space-1_5) var(--space-3);cursor:pointer;-webkit-user-select:none;user-select:none;transition:background-color var(--transition-instant), border-color var(--transition-instant), color var(--transition-instant), transform var(--transition-instant);border:1px solid #0000;text-decoration:none;display:inline-flex}.iris-btn:disabled,.iris-btn[aria-busy=true]{opacity:.5;cursor:default}.iris-btn:not(:disabled):active{transform:translateY(1px)}.iris-btn--ghost{border-color:var(--border-default);color:var(--text-secondary);background:0 0}.iris-btn--ghost:not(:disabled):hover{background:var(--bg-card-hover);border-color:var(--border-strong);color:var(--text-primary)}.iris-btn--primary{background:var(--iris-600);border-color:var(--iris-600);color:#fff;font-weight:600}.iris-btn--primary:not(:disabled):hover{background:var(--iris-500);border-color:var(--iris-500)}.iris-btn--danger{border-color:var(--border-default);color:var(--eval-fail);background:0 0}.iris-btn--danger:not(:disabled):hover{border-color:var(--eval-fail);background:color-mix(in srgb, var(--eval-fail) 10%, transparent)}.iris-btn--danger-solid{background:var(--eval-fail);border-color:var(--eval-fail);color:#fff;font-weight:600}.iris-btn--danger-solid:not(:disabled):hover{background:#dc2626;border-color:#dc2626}.iris-btn--sm{padding:var(--space-0_5) var(--space-2_5);font-size:var(--text-caption)}.iris-btn--mono{font-family:var(--font-mono)}.iris-kbd{font-size:var(--text-caption);font-family:var(--font-mono);background:var(--bg-surface);border:1px solid var(--border-default);border-radius:var(--radius-xs);padding:2px var(--space-2);color:var(--text-muted)}.iris-card{background:var(--bg-card);border:1px solid var(--border-default);border-radius:var(--radius-lg);transition:background-color var(--transition-fast), border-color var(--transition-fast)}.iris-card--hover:hover,.iris-card--hover:focus-within{border-color:var(--border-strong)}.iris-stack{gap:var(--space-3);flex-direction:column;display:flex}.iris-stack--lg{gap:var(--space-6)}.iris-row{align-items:center;gap:var(--space-3);display:flex}.iris-grid-kpis{gap:var(--space-3);grid-template-columns:repeat(auto-fit,minmax(180px,1fr));display:grid}.iris-grid-split{gap:var(--space-3);grid-template-columns:repeat(auto-fit,minmax(340px,1fr));display:grid}.iris-grid-gauge{gap:var(--space-3);grid-template-columns:minmax(280px,1fr) minmax(0,1.8fr);align-items:stretch;display:grid}@media (width<=960px){.iris-grid-gauge{grid-template-columns:1fr}}.iris-num{font-variant-numeric:tabular-nums}.iris-num--right{text-align:right}.iris-error-box{background:color-mix(in srgb, var(--eval-fail) 12%, transparent);border:1px solid var(--eval-fail);border-radius:var(--radius);padding:var(--space-4);color:var(--eval-fail);gap:var(--space-2);flex-direction:column;display:flex}.iris-backdrop{z-index:110;background:oklch(0% 0 0/.55);justify-content:center;align-items:flex-start;display:flex;position:fixed;inset:0}.iris-modal{background:var(--bg-card);border:1px solid var(--border-default);border-radius:var(--radius-lg);box-shadow:var(--shadow-lg);flex-direction:column;display:flex;overflow:hidden}.moment-card{gap:var(--space-3);padding:var(--space-4);color:var(--text-primary);border-left:3px solid var(--moment-sig-color,transparent);grid-template-columns:24px 48px 1fr auto;align-items:start;display:grid}.moment-card:hover,.moment-card:focus-within{background:var(--bg-card-hover);border-left-color:var(--moment-sig-color,transparent)}.moment-card--archived{opacity:.5}.moment-card--selected{background:var(--bg-card-hover);border-color:var(--iris-500);border-left-color:var(--moment-sig-color,transparent)}.moment-card__checkbox-wrap{padding-top:var(--space-1);justify-content:center;align-items:center;display:flex}.moment-card__checkbox{cursor:pointer;width:16px;height:16px;accent-color:var(--iris-500)}.moment-card__rail{align-items:center;gap:var(--space-1);flex-direction:column;display:flex}.moment-card__glyph{width:32px;height:32px;font-size:var(--text-body);font-family:var(--font-mono);color:var(--bg-base);border-radius:50%;justify-content:center;align-items:center;font-weight:700;display:flex}.moment-card__body-link{color:inherit;gap:var(--space-2);flex-direction:column;min-width:0;text-decoration:none;display:flex}.moment-card__body-link:hover{color:inherit}.moment-card__header{align-items:center;gap:var(--space-2);flex-wrap:wrap;display:flex}.moment-card__agent{font-size:var(--text-body-sm);color:var(--text-primary);font-weight:600}.moment-card__sig{font-size:var(--text-caption);font-family:var(--font-mono);color:var(--text-secondary);text-overflow:ellipsis;white-space:nowrap;font-weight:500;overflow:hidden}.moment-card__verdict{font-size:var(--text-caption);font-family:var(--font-mono);letter-spacing:.05em;font-weight:700}.moment-card__tag{font-size:var(--text-caption);font-family:var(--font-mono);color:var(--text-muted);background:var(--bg-surface);border:1px solid var(--border-default);padding:0 var(--space-2);border-radius:var(--radius-xs)}.moment-card__tag--new{letter-spacing:.05em;color:var(--text-accent);background:var(--glow-primary);border-color:var(--iris-500);font-weight:700}.moment-card__preview{font-size:var(--text-caption);font-family:var(--font-mono);color:var(--text-muted);text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.moment-card__chips{gap:var(--space-1);flex-wrap:wrap;display:flex}.moment-card__chip{font-size:var(--text-caption);font-family:var(--font-mono);padding:1px var(--space-1_5);border-radius:var(--radius-xs);background:color-mix(in srgb, var(--eval-fail) 12%, transparent);color:var(--eval-fail)}.moment-card__meta{align-items:flex-end;gap:var(--space-1);font-size:var(--text-caption);font-family:var(--font-mono);color:var(--text-muted);flex-direction:column;display:flex}.view-tabs{align-items:center;gap:var(--space-1);border-bottom:1px solid var(--border-subtle);margin-bottom:var(--space-5);display:flex}.view-tabs__tab{align-items:center;gap:var(--space-2);padding:var(--space-2) var(--space-3);font-family:var(--font-display);font-size:var(--text-body-sm);letter-spacing:-.01em;color:var(--text-muted);cursor:pointer;transition:color var(--transition-fast), border-color var(--transition-fast);border-bottom:2px solid #0000;margin-bottom:-1px;font-weight:600;text-decoration:none;display:inline-flex}.view-tabs__tab:hover{color:var(--text-primary)}.view-tabs__tab[aria-selected=true]{color:var(--text-primary);border-bottom-color:var(--iris-500)}.view-tabs__hint{font-size:var(--text-caption-xs);color:var(--text-muted);font-family:var(--font-mono);padding-left:var(--space-3);margin-left:auto}.cmdk-backdrop{padding-top:15vh}.cmdk__panel{width:min(640px,100% - 32px);max-height:70vh}.cmdk__input-wrap{padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--border-default);align-items:center;gap:var(--space-2);display:flex}.cmdk__prompt{font-family:var(--font-mono);color:var(--text-muted);font-size:var(--text-body-sm)}.cmdk__input{color:var(--text-primary);font-size:var(--text-body);background:0 0;border:none;outline:none;flex:1;font-family:inherit}.cmdk__list{padding:var(--space-2);flex:1;overflow:auto}.cmdk__section-title{font-size:var(--text-caption);font-family:var(--font-mono);color:var(--text-muted);text-transform:uppercase;letter-spacing:.05em;padding:var(--space-2) var(--space-3)}.cmdk__item{justify-content:space-between;align-items:center;gap:var(--space-3);padding:var(--space-2) var(--space-3);border-radius:var(--radius-sm);cursor:pointer;color:var(--text-secondary);display:flex}.cmdk__item:hover,.cmdk__item[aria-selected=true]{background:var(--bg-card-hover);color:var(--text-primary)}.cmdk__item-body{flex-direction:column;gap:2px;min-width:0;display:flex}.cmdk__item-title{font-size:var(--text-body-sm);font-weight:500}.cmdk__item-subtitle{font-size:var(--text-caption);color:var(--text-muted);font-family:var(--font-mono);text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.cmdk__empty{padding:var(--space-6);text-align:center;color:var(--text-muted);font-size:var(--text-body-sm)}.cmdk__empty-clear{color:var(--text-accent);cursor:pointer;font-size:inherit;background:0 0;border:none;font-family:inherit;text-decoration:underline}.cmdk__footer{gap:var(--space-3);font-size:var(--text-caption);color:var(--text-muted);font-family:var(--font-mono);padding:var(--space-2) var(--space-4);border-top:1px solid var(--border-default);background:var(--bg-surface);display:flex}.cmdk__footer-count{margin-left:auto}.confirm-dialog__panel{width:min(440px,100% - 32px);padding:var(--space-5);gap:var(--space-3);margin-top:20vh}.confirm-dialog__title{font-family:var(--font-display);font-size:var(--text-heading-sm);letter-spacing:-.01em;color:var(--text-primary);margin:0;font-weight:600}.confirm-dialog__body{font-size:var(--text-body-sm);color:var(--text-secondary);line-height:var(--leading-body);margin:0}.confirm-dialog__error{font-size:var(--text-body-sm);color:var(--eval-fail);margin:0}.confirm-dialog__actions{justify-content:flex-end;gap:var(--space-2);margin-top:var(--space-2);display:flex}.stat-tile{padding:var(--space-4) var(--space-5);gap:var(--space-2);flex-direction:column;min-height:110px;display:flex}.stat-tile__header{align-items:center;gap:var(--space-2);font-size:var(--text-caption-xs);font-weight:600;font-family:var(--font-body);text-transform:uppercase;letter-spacing:.08em;color:var(--text-muted);display:flex}.stat-tile__value-row{align-items:baseline;gap:var(--space-2);display:flex}.stat-tile__value{font-family:var(--font-display);font-size:var(--text-display-sm);font-weight:700;line-height:var(--leading-display);letter-spacing:-.02em;font-variant-numeric:tabular-nums}.stat-tile__delta{font-family:var(--font-mono);font-size:var(--text-caption);font-weight:500}.stat-tile__sub{font-size:var(--text-caption);color:var(--text-secondary)}.section-header{padding-top:var(--space-3);margin-bottom:var(--space-1);flex-direction:column;gap:2px;display:flex}.section-header__top{justify-content:space-between;align-items:baseline;gap:var(--space-3);flex-wrap:wrap;display:flex}.section-header__title{font-family:var(--font-display);font-size:var(--text-heading-sm);letter-spacing:-.015em;color:var(--text-primary);margin:0;font-weight:600}.section-header__trailing{font-family:var(--font-mono);font-size:var(--text-caption);color:var(--text-muted)}.section-header__question{font-size:var(--text-caption);color:var(--text-muted);margin:0}.detail-back{color:var(--text-muted);font-size:var(--text-body-sm);align-items:center;gap:var(--space-1);width:fit-content;transition:color var(--transition-instant);text-decoration:none;display:inline-flex}.detail-back:hover{color:var(--text-primary)}.detail-card{padding:var(--space-5)}.detail-card__grid{gap:var(--space-4);font-size:var(--text-body-sm);grid-template-columns:repeat(auto-fit,minmax(200px,1fr));display:grid}.detail-card__label{color:var(--text-muted);font-size:var(--text-caption);font-family:var(--font-mono);text-transform:uppercase;letter-spacing:.05em}.detail-section{gap:var(--space-3);flex-direction:column;display:flex}.detail-section__title{font-family:var(--font-display);font-size:var(--text-heading-sm);color:var(--text-primary);letter-spacing:-.01em;font-weight:600;line-height:var(--leading-heading);margin:0}.eval-card{padding:var(--space-4);gap:var(--space-3);flex-direction:column;display:flex}.eval-card__badges{align-items:center;gap:var(--space-3);display:flex}.eval-card__rules{gap:var(--space-2);flex-direction:column;display:flex}.eval-card__rule{align-items:center;gap:var(--space-2);font-size:var(--text-body-sm);padding:var(--space-1) var(--space-2);background:var(--bg-base);border-radius:var(--radius-xs);display:flex}.eval-card__rule-mark{width:16px}.eval-card__rule-name{color:var(--text-secondary);font-size:var(--text-caption)}.eval-card__rule-message{color:var(--text-muted);font-size:var(--text-caption);flex:1}.eval-card__suggestions{font-size:var(--text-body-sm)}.eval-card__suggestions-label{color:var(--text-muted);margin-bottom:var(--space-1)}.eval-card__suggestions-list{padding-left:var(--space-5);color:var(--text-secondary);margin:0}.rule-card{padding:var(--space-4);gap:var(--space-3);grid-template-columns:1fr auto;align-items:start;display:grid}.rule-card__body{gap:var(--space-2);flex-direction:column;min-width:0;display:flex}.rule-card__name-row{gap:var(--space-2);flex-wrap:wrap;align-items:baseline;display:flex}.rule-card__name{font-size:var(--text-body);font-weight:600;font-family:var(--font-mono);color:var(--text-primary)}.rule-card__description{font-size:var(--text-body-sm);color:var(--text-secondary);margin:0}.rule-card__meta{gap:var(--space-3);font-size:var(--text-caption);color:var(--text-muted);font-family:var(--font-mono);flex-wrap:wrap;display:flex}.rule-card__badge{font-size:var(--text-caption);font-family:var(--font-mono);padding:1px var(--space-1_5);border-radius:var(--radius-xs);background:var(--bg-surface);color:var(--text-secondary)}.rule-card__source-link{color:var(--text-accent);font-size:var(--text-caption);font-family:var(--font-mono);text-decoration:underline}*,:before,:after{box-sizing:border-box;margin:0;padding:0}html,body,#root{width:100%;height:100%}body{font-family:var(--font-body);font-size:var(--text-body);color:var(--text-primary);background-color:var(--bg-base);line-height:var(--leading-body);-webkit-font-smoothing:antialiased;font-feature-settings:"cv11", "ss01";font-variant-numeric:tabular-nums}h1,h2,h3,h4,.display{font-family:var(--font-display);letter-spacing:-.01em;font-weight:600}a{color:var(--text-accent);text-decoration:none}a:hover{color:var(--iris-300)}button{cursor:pointer;font-family:inherit}input,select{font-family:inherit;font-size:inherit}code,pre{font-family:var(--font-mono)}a:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,[role=button]:focus-visible{outline:2px solid var(--iris-500);outline-offset:2px;border-radius:var(--radius-xs)}.iris-sr-reveal{clip:rect(0, 0, 0, 0);white-space:nowrap;border:0;width:1px;height:1px;margin:-1px;padding:0;position:absolute;overflow:hidden}.iris-sr-reveal:focus-within{width:auto;height:auto;margin:var(--space-3) 0 0 0;padding:var(--space-3) var(--space-4);clip:auto;white-space:normal;background:var(--bg-card);color:var(--text-primary);border:1px solid var(--iris-500);border-radius:var(--radius-sm);position:static;overflow:visible}.iris-sr-reveal:focus-within>li{padding:var(--space-1) 0;list-style:none}::selection{background:var(--iris-600);color:#fff}::-webkit-scrollbar{width:8px;height:8px}::-webkit-scrollbar-track{background:var(--bg-base)}::-webkit-scrollbar-thumb{background:var(--border-strong);border-radius:var(--radius-xs)}::-webkit-scrollbar-thumb:hover{background:var(--text-muted)}html{scrollbar-color:var(--border-strong) transparent;scrollbar-width:thin}@keyframes pulse-ring{0%{opacity:.5;transform:scale(1)}to{opacity:0;transform:scale(2.5)}}.pulse-dot{position:relative}.pulse-dot:after{content:"";background:var(--iris-500);border-radius:50%;animation:2s ease-out infinite pulse-ring;position:absolute;inset:-2px}@media (prefers-reduced-motion:reduce){*,:before,:after{scroll-behavior:auto!important;transition-duration:.01ms!important;animation-duration:.01ms!important;animation-iteration-count:1!important}}@media (width<=767px){aside[aria-label=Main\ navigation]{width:160px}main{overflow-x:auto}}@media print{body{color:#000!important;background:#fff!important}aside[aria-label=Main\ navigation],header,[role=region][aria-label=Welcome],[role=region][aria-label=Bulk\ actions],[role=status],[role=dialog]{display:none!important}body,#root,main{height:auto!important;overflow:visible!important}main{padding:0!important}tr,pre,code{page-break-inside:avoid}h1,h2,h3{page-break-after:avoid}[aria-label*=violation],[aria-label*=spike],[aria-label*=collision],[aria-label*=Pass],[aria-label*=Fail]{border:1px solid #000!important}a{color:#000!important;text-decoration:underline!important}a[href^=http]:after{content:" (" attr(href) ")";color:#555;font-size:80%}}

package/dist/dashboard/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <title>Iris — Agent Eval & Observability</title>
-    <script type="module" crossorigin src="/assets/index-CIKsbEhq.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-B4Aw6ozt.css">
+    <script type="module" crossorigin src="/assets/index-BZZt8bVh.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-UffZ-aEJ.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/dashboard/routes/failures.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+import type { IStorageAdapter } from '../../types/query.js';
+export declare function registerFailureRoutes(router: Router, storage: IStorageAdapter): void;

package/dist/dashboard/routes/failures.js

@@ -0,0 +1,76 @@
+import { requireTenant } from '../../middleware/tenant.js';
+import { deriveMoment } from '../../eval/decision-moment.js';
+import { isFailureMoment, rankFailureScore } from '../../eval/failure-rank.js';
+import { failuresQuerySchema } from '../validation.js';
+/*
+ * How many recent traces to scan when building the failure list. On a
+ * mostly-passing fleet failures are sparse, so the scan window must be
+ * wider than the returned list — a hard cap of `limit` traces would miss
+ * every failure older than the last `limit` runs. 500 is bounded work
+ * for local SQLite (same hydration loop the moments route already runs
+ * at 200) and reaches far enough back for a single-user install.
+ */
+const FAILURE_SCAN_CAP = 500;
+export function registerFailureRoutes(router, storage) {
+    /**
+     * GET /failures
+     * Ranked failure list — the dashboard's landing surface. Recent
+     * failed/flagged moments ranked by severity × recency decay
+     * (see src/eval/failure-rank.ts). Unlike /moments this filters and
+     * ranks server-side, so a failure buried behind hundreds of passing
+     * traces still surfaces.
+     */
+    router.get('/failures', async (req, res) => {
+        try {
+            const tenantId = requireTenant(req);
+            const query = failuresQuerySchema.parse(req.query);
+            const traceResult = await storage.queryTraces(tenantId, {
+                filter: {
+                    agent_name: query.agent_name,
+                    since: query.since,
+                    until: query.until,
+                },
+                limit: FAILURE_SCAN_CAP,
+                offset: 0,
+                sort_by: 'timestamp',
+                sort_order: 'desc',
+            });
+            // Hydrate + classify each scanned trace, keep only failures.
+            // Sequential per-trace eval fetches match the moments route's
+            // approach — acceptable at this cap; batching is a later
+            // optimization once we have volume data.
+            const nowMs = Date.now();
+            const failures = [];
+            for (const trace of traceResult.traces) {
+                const evals = await storage.getEvalsByTraceId(tenantId, trace.trace_id);
+                const moment = deriveMoment(trace, evals);
+                if (!isFailureMoment(moment))
+                    continue;
+                failures.push({ ...moment, rankScore: rankFailureScore(moment, nowMs) });
+            }
+            // Rank: severity × recency blend first, newest first on exact ties.
+            failures.sort((a, b) => {
+                if (b.rankScore !== a.rankScore)
+                    return b.rankScore - a.rankScore;
+                return new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime();
+            });
+            const result = {
+                failures: failures.slice(0, query.limit),
+                scanned: traceResult.traces.length,
+                total: traceResult.total,
+                limit: query.limit,
+            };
+            res.json(result);
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === 'ZodError') {
+                res.status(400).json({
+                    error: 'Invalid query parameters',
+                    details: err.issues,
+                });
+                return;
+            }
+            throw err;
+        }
+    });
+}

package/dist/dashboard/routes/index.d.ts

@@ -5,6 +5,7 @@ export { registerEvalStatsRoutes } from './eval-stats.js';
 export { registerFilterRoutes } from './filters.js';
 export { registerHealthRoutes } from './health.js';
 export { registerMomentRoutes } from './moments.js';
+export { registerFailureRoutes } from './failures.js';
 export { registerRuleRoutes } from './rules.js';
 export { registerPreferencesRoutes } from './preferences.js';
 export { registerAuditRoutes } from './audit.js';

package/dist/dashboard/routes/index.js

@@ -5,6 +5,7 @@ export { registerEvalStatsRoutes } from './eval-stats.js';
 export { registerFilterRoutes } from './filters.js';
 export { registerHealthRoutes } from './health.js';
 export { registerMomentRoutes } from './moments.js';
+export { registerFailureRoutes } from './failures.js';
 export { registerRuleRoutes } from './rules.js';
 export { registerPreferencesRoutes } from './preferences.js';
 export { registerAuditRoutes } from './audit.js';

package/dist/dashboard/routes/preferences.js

@@ -32,14 +32,19 @@ const PatchSchema = z
 })
     .strict();
 export function registerPreferencesRoutes(router, store) {
+    /*
+     * Responses deliberately omit store.path: the absolute path embeds the
+     * OS username (install-path disclosure, CWE-209 — same class as PR
+     * #286) and the frontend never read it.
+     */
     router.get('/preferences', (_req, res) => {
-        res.json({ preferences: store.read(), path: store.path });
+        res.json({ preferences: store.read() });
     });
     router.patch('/preferences', (req, res) => {
         try {
             const patch = PatchSchema.parse(req.body);
             const updated = store.patch(patch);
-            res.json({ preferences: updated, path: store.path });
+            res.json({ preferences: updated });
         }
         catch (err) {
             if (err instanceof z.ZodError) {

package/dist/dashboard/routes/rules.js

@@ -69,10 +69,12 @@ export function registerRuleRoutes(router, storage, opts) {
                 sourceMomentId: input.sourceMomentId,
             });
             // Register the new rule with the live engine so it fires on subsequent
-            // evaluate_output calls without requiring a server restart. The engine
+            // evaluate_output calls without requiring a server restart. Registered
+            // under its rule id so the delete paths can hot-remove it. The engine
             // is process-global in v0.4 — Cloud multi-tenant engine wiring is a
-            // v0.5 architectural item.
-            opts.evalEngine.registerRule(rule.evalType, createCustomRule(rule.definition));
+            // v0.5 architectural item. Severity rides along: high/critical makes
+            // the rule hard-failing (same as the MCP deploy path and boot loading).
+            opts.evalEngine.registerRule(rule.evalType, createCustomRule(rule.definition, rule.severity), rule.id);
             res.status(201).json({ rule });
         }
         catch (err) {
@@ -90,10 +92,11 @@ export function registerRuleRoutes(router, storage, opts) {
             res.status(404).json({ error: 'Rule not found' });
             return;
         }
-        // Note: removing from the live engine requires a registry reset, which
-        // the engine doesn't expose in v0.4. The deleted rule continues to fire
-        // until the next iris-mcp restart. Documented behavior; v0.4.1 adds
-        // engine.unregisterRule for hot-removal.
+        // Hot-remove from the live engine too, so the deleted rule stops firing
+        // on the very next evaluate_output call — no restart needed. No-op when
+        // the rule was never registered in this process (e.g. deployed under a
+        // different tenant, or the id predates id-tracked registration).
+        opts.evalEngine.unregisterRule(req.params.id);
         res.status(204).end();
     });
     router.post('/rules/custom/preview', async (req, res) => {
@@ -126,14 +129,16 @@ async function previewRule(tenantId, input, storage) {
         sort_order: 'desc',
     });
     const rule = createCustomRule(input.definition);
-    // Sanity-probe the rule against an empty input. Compile-time errors
-    // (invalid regex, pattern too long, ReDoS rejection) surface here as a
-    // failed result with a recognizable error prefix. Surface as a 422 so
-    // the UI can show the error instead of a misleading "5 traces fail."
+    // Sanity-probe the rule against an empty input. A broken DEFINITION —
+    // invalid regex, pattern too long, ReDoS rejection, missing required
+    // config — comes back marked configInvalid (custom.ts routes every
+    // compile/config failure through configError, which also sets skipped,
+    // so probing passed/message here would never fire). Config errors depend
+    // only on the definition, never the trace, so one probe hit means every
+    // trace would "skip" identically. Surface as a 422 so the UI can show
+    // the error instead of a misleading "N traces would skip."
     const probe = rule.evaluate({ output: '' });
-    if (!probe.skipped &&
-        !probe.passed &&
-        /^(?:Invalid regex|Regex pattern (?:too long|rejected))/.test(probe.message)) {
+    if (probe.configInvalid) {
         const err = new Error(probe.message);
         err.status = 422;
         throw err;
@@ -142,6 +147,18 @@ async function previewRule(tenantId, input, storage) {
     let wouldFail = 0;
     let wouldSkip = 0;
     const examples = [];
+    /*
+     * ONE regex budget for the whole preview, not one per trace. This loop
+     * runs a caller-supplied pattern against up to maxTraces (cap 5000)
+     * seedable outputs on the main thread — with no shared breaker, a
+     * sandbox-defeating pattern×output pair cost ~142ms per trace, ~12
+     * minutes of server freeze at the cap, from one self-serve request
+     * (the deploy probe guesses payloads and cannot catch every such
+     * pattern). Sharing the breaker means at most 3 traces pay the budget;
+     * the rest report wouldSkip instantly — and "this pattern gets
+     * defeated" is exactly the answer the rule author needs from a preview.
+     */
+    const regexBudget = { breaches: 0 };
     for (const trace of traceResult.traces) {
         if (trace.output === undefined) {
             wouldSkip++;
@@ -152,6 +169,7 @@ async function previewRule(tenantId, input, storage) {
             input: trace.input,
             costUsd: trace.cost_usd,
             tokenUsage: trace.token_usage,
+            regexBudget,
         });
         if (result.skipped) {
             wouldSkip++;

package/dist/dashboard/routes/traces.d.ts

@@ -1,3 +1,14 @@
 import { Router } from 'express';
 import type { IStorageAdapter } from '../../types/query.js';
-export declare function registerTraceRoutes(router: Router, storage: IStorageAdapter): void;
+import type { EvalEngine } from '../../eval/engine.js';
+export interface TraceRouteOptions {
+    /**
+     * Live engine for the `evaluate: true` opt-in on POST /traces. When
+     * absent (an embedder that wired storage but no engine), an evaluate
+     * request is refused with 501 BEFORE the trace is stored — silently
+     * storing without the requested eval would be a skipped gate dressed
+     * as a success.
+     */
+    evalEngine?: EvalEngine;
+}
+export declare function registerTraceRoutes(router: Router, storage: IStorageAdapter, options?: TraceRouteOptions): void;

package/dist/dashboard/routes/traces.js

@@ -1,6 +1,94 @@
 import { requireTenant } from '../../middleware/tenant.js';
-import { traceQuerySchema } from '../validation.js';
-export function registerTraceRoutes(router, storage) {
+import { generateTraceId, generateSpanId } from '../../utils/ids.js';
+import { bestEffortExport } from '../../otel/lazy.js';
+import { traceQuerySchema, ingestTraceSchema } from '../validation.js';
+export function registerTraceRoutes(router, storage, options) {
+    /*
+     * Deterministic capture over HTTP. MCP tool calls are model-
+     * discretionary — a trace lands only if the model chooses to call
+     * log_trace — so builders get a path that doesn't depend on the model:
+     * POST the same body the log_trace tool accepts (ingestTraceSchema IS
+     * that schema) and the row is stored unconditionally. Sits behind the
+     * full middleware stack: loopback bind + DNS-rebinding guard + auth +
+     * tenant resolution + the shared API rate limiter.
+     */
+    router.post('/traces', async (req, res) => {
+        try {
+            const tenantId = requireTenant(req);
+            const body = ingestTraceSchema.parse(req.body);
+            if (body.evaluate && !options?.evalEngine) {
+                res.status(501).json({
+                    error: 'Evaluation is not available on this server — trace was NOT stored. Retry without "evaluate", or start the dashboard via iris-mcp so the eval engine is wired.',
+                });
+                return;
+            }
+            // Server-minted, exactly like log_trace — a client-supplied
+            // trace_id was already stripped by the schema.
+            const traceId = generateTraceId();
+            const timestamp = body.timestamp ?? new Date().toISOString();
+            const trace = {
+                trace_id: traceId,
+                agent_name: body.agent_name,
+                framework: body.framework,
+                input: body.input,
+                output: body.output,
+                tool_calls: body.tool_calls,
+                latency_ms: body.latency_ms,
+                token_usage: body.token_usage,
+                cost_usd: body.cost_usd,
+                metadata: body.metadata,
+                timestamp,
+                spans: body.spans?.map((s) => ({
+                    ...s,
+                    span_id: s.span_id ?? generateSpanId(),
+                    trace_id: traceId,
+                })),
+            };
+            await storage.insertTrace(tenantId, trace);
+            // Same best-effort OTel fan-out as log_trace: switching capture
+            // paths must not silently drop the operator's collector feed.
+            bestEffortExport(trace, (err) => {
+                // eslint-disable-next-line no-console
+                console.warn(`[iris.otel] ${err.message}`);
+            });
+            if (!body.evaluate || !options?.evalEngine) {
+                res.status(201).json({ trace_id: traceId, status: 'stored' });
+                return;
+            }
+            // Deterministic engine, same context evaluate_output builds. The
+            // superRefine on ingestTraceSchema guarantees output is present.
+            const evaluation = options.evalEngine.evaluate(body.eval_type, {
+                output: body.output,
+                input: body.input,
+                costUsd: body.cost_usd,
+                tokenUsage: body.token_usage,
+            });
+            evaluation.trace_id = traceId;
+            await storage.insertEvalResult(tenantId, evaluation);
+            res.status(201).json({
+                trace_id: traceId,
+                status: 'stored',
+                evaluation: {
+                    id: evaluation.id,
+                    eval_type: evaluation.eval_type,
+                    score: evaluation.score,
+                    passed: evaluation.passed,
+                    rule_results: evaluation.rule_results,
+                    suggestions: evaluation.suggestions,
+                    rules_evaluated: evaluation.rules_evaluated,
+                    rules_skipped: evaluation.rules_skipped,
+                    insufficient_data: evaluation.insufficient_data,
+                },
+            });
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === 'ZodError') {
+                res.status(400).json({ error: 'Invalid trace payload', details: err.issues });
+                return;
+            }
+            throw err;
+        }
+    });
     router.get('/traces', async (req, res) => {
         try {
             const tenantId = requireTenant(req);

package/dist/dashboard/seed-demo-data.d.ts

@@ -0,0 +1,49 @@
+export declare const DEFAULT_DEMO_TRACE_COUNT = 250;
+/** The demo trace database. Never the same file as the real iris.db. */
+export declare function demoDbPath(): string;
+/** Demo-scoped dashboard preferences — keeps demo mode out of the real preferences.json. */
+export declare function demoPreferencesPath(): string;
+/** Demo-scoped custom rules — a rule deployed while exploring the demo never lands in custom-rules.json. */
+export declare function demoCustomRulesPath(): string;
+/** Demo-scoped audit log — rule deploy/delete audit entries from demo mode stay out of audit.log. */
+export declare function demoAuditLogPath(): string;
+export interface SeedDemoDataOptions {
+    /** Database file to seed. Defaults to demoDbPath() (demo.db under irisHome()). */
+    dbPath?: string;
+    /** Approximate number of traces to generate. */
+    count?: number;
+}
+export interface SeedDemoDataSummary {
+    dbPath: string;
+    /** True when the database already held traces and was left untouched. */
+    alreadySeeded: boolean;
+    traceCount: number;
+    spanCount: number;
+    evalCount: number;
+    passedEvalCount: number;
+    failedEvalCount: number;
+    totalCostUsd: number;
+    piiDetectionCount: number;
+    injectionDetectionCount: number;
+    hallucinationDetectionCount: number;
+    costViolationCount: number;
+    judgeFailureCount: number;
+    agents: Array<{
+        name: string;
+        traceCount: number;
+        evalPassRatePct: number | null;
+    }>;
+    /** Trace count per day, index 0 = 6 days ago … index 6 = today. */
+    dailyTraceCounts: number[];
+}
+/** Delete the entire demo surface. Returns the paths actually removed. */
+export declare function clearDemoData(): {
+    removed: string[];
+};
+/**
+ * Seed the demo database. Idempotent: when the database already holds
+ * traces, nothing is written and the summary reports alreadySeeded. The
+ * demo database is a separate file from the real store — this function
+ * never opens iris.db (or whatever IRIS_DB_PATH points at).
+ */
+export declare function seedDemoData(options?: SeedDemoDataOptions): Promise<SeedDemoDataSummary>;