@shield-agent/kya 0.32.9 → 0.33.2

package/dist/map/heat.d.ts

@@ -0,0 +1,44 @@
+import type { TrailEventLike, Verdicts } from "./types.js";
+export interface HeatOptions {
+    /** Window end. Without it the latest valid row is used, so the builder reads no clock. */
+    now?: Date;
+    /** Calendar days ending on the day of `now`. Default 7. */
+    days?: number;
+    /** Offset east of UTC in minutes (EET is 120). Default 0. */
+    tzOffsetMinutes?: number;
+}
+export interface WhenHeat {
+    /** `YYYY-MM-DD`, oldest first. */
+    days: string[];
+    /** 0 to 23. */
+    hours: number[];
+    /** Counts: cells[dayIndex][hour]. */
+    cells: number[][];
+    /** Verdict buckets per cell: verdictCells[dayIndex][hour].deny is the deny count. */
+    verdictCells: Verdicts[][];
+    /** Largest single cell count, for the colour scale. */
+    max: number;
+}
+export interface WhereRow extends Verdicts {
+    class: string;
+    family: string;
+    total: number;
+    /** Members folded into an "other" row. Absent on shown rows. */
+    grouped?: number;
+}
+export interface WhereHeat {
+    rows: WhereRow[];
+    /** Largest single bucket count across rows, for the colour scale. */
+    max: number;
+}
+export interface Heat {
+    when: WhenHeat;
+    where: WhereHeat;
+}
+/**
+ * Two views from one trail. Pure: same rows and options give the same output.
+ * `when`: counts per calendar day and hour of day. `where`: counts per target class by verdict.
+ * Rows outside the window (after `now`, or before the first day) are excluded.
+ */
+export declare function buildHeat(events: Iterable<TrailEventLike>, opts?: HeatOptions): Heat;
+//# sourceMappingURL=heat.d.ts.map

package/dist/map/heat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heat.d.ts","sourceRoot":"","sources":["../../src/map/heat.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,eAAe;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qCAAqC;IACrC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;IAClB,qFAAqF;IACrF,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC3B,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;CAClB;AAeD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAE,WAAgB,GAAG,IAAI,CA4CxF"}

package/dist/map/heat.js

@@ -0,0 +1,96 @@
+import { bucketOf, isTrailRow, targetOf } from "./build.js";
+const DAY_MS = 86_400_000;
+const HOUR_MS = 3_600_000;
+/** Schema section 7: top 40 targets, plus always-shown deny, hold and secret. */
+const TOP_TARGETS = 40;
+function zeroVerdicts() {
+    return { allow: 0, deny: 0, hold: 0, observed: 0 };
+}
+function addTo(v, b) {
+    v[b] += 1;
+}
+/**
+ * Two views from one trail. Pure: same rows and options give the same output.
+ * `when`: counts per calendar day and hour of day. `where`: counts per target class by verdict.
+ * Rows outside the window (after `now`, or before the first day) are excluded.
+ */
+export function buildHeat(events, opts = {}) {
+    const days = opts.days ?? 7;
+    if (!Number.isInteger(days) || days < 1)
+        throw new Error("buildHeat: days must be a positive integer");
+    const off = (opts.tzOffsetMinutes ?? 0) * 60_000;
+    const hours = Array.from({ length: 24 }, (_, i) => i);
+    const rows = [...events].filter(isTrailRow);
+    const nowMs = opts.now !== undefined ? opts.now.getTime() : rows.reduce((m, e) => Math.max(m, Date.parse(e.ts)), -Infinity);
+    if (!Number.isFinite(nowMs))
+        return { when: { days: [], hours, cells: [], verdictCells: [], max: 0 }, where: { rows: [], max: 0 } };
+    // All day arithmetic runs on local-offset milliseconds, so it never reads the host time zone.
+    const lastStart = Math.floor((nowMs + off) / DAY_MS) * DAY_MS;
+    const firstStart = lastStart - (days - 1) * DAY_MS;
+    const windowStart = firstStart - off;
+    const dayList = Array.from({ length: days }, (_, i) => new Date(firstStart + i * DAY_MS).toISOString().slice(0, 10));
+    const cells = dayList.map(() => new Array(24).fill(0));
+    const verdictCells = dayList.map(() => Array.from({ length: 24 }, zeroVerdicts));
+    const targets = new Map();
+    for (const e of rows) {
+        const ms = Date.parse(e.ts);
+        if (ms < windowStart || ms > nowMs)
+            continue;
+        const local = ms + off;
+        const d = Math.floor((local - firstStart) / DAY_MS);
+        const h = Math.floor((((local % DAY_MS) + DAY_MS) % DAY_MS) / HOUR_MS);
+        const b = bucketOf(e);
+        cells[d][h] += 1;
+        addTo(verdictCells[d][h], b);
+        const t = targetOf(e);
+        let r = targets.get(t.cls);
+        if (!r) {
+            r = { family: t.family, v: zeroVerdicts() };
+            targets.set(t.cls, r);
+        }
+        addTo(r.v, b);
+    }
+    const when = {
+        days: dayList,
+        hours,
+        cells,
+        verdictCells,
+        max: Math.max(0, ...cells.flat()),
+    };
+    return { when, where: whereRows(targets) };
+}
+function total(v) {
+    return v.allow + v.deny + v.hold + v.observed;
+}
+function bySize(a, b) {
+    return b.total - a.total || (a.class < b.class ? -1 : a.class > b.class ? 1 : 0);
+}
+function whereRows(targets) {
+    const all = [...targets].map(([cls, r]) => ({ class: cls, family: r.family, ...r.v, total: total(r.v) }));
+    all.sort(bySize);
+    const rows = [];
+    const folded = new Map();
+    all.forEach((r, i) => {
+        const alwaysShown = r.deny > 0 || r.hold > 0 || r.family === "secret";
+        if (i < TOP_TARGETS || alwaysShown) {
+            rows.push(r);
+            return;
+        }
+        let g = folded.get(r.family);
+        if (!g) {
+            g = { class: `other:${r.family}`, family: r.family, allow: 0, deny: 0, hold: 0, observed: 0, total: 0, grouped: 0 };
+            folded.set(r.family, g);
+        }
+        g.allow += r.allow;
+        g.deny += r.deny;
+        g.hold += r.hold;
+        g.observed += r.observed;
+        g.total += r.total;
+        g.grouped = (g.grouped ?? 0) + 1;
+    });
+    rows.push(...folded.values());
+    rows.sort(bySize);
+    const max = Math.max(0, ...rows.flatMap((r) => [r.allow, r.deny, r.hold, r.observed]));
+    return { rows, max };
+}
+//# sourceMappingURL=heat.js.map

package/dist/map/heat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heat.js","sourceRoot":"","sources":["../../src/map/heat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA4C5D,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,iFAAiF;AACjF,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,SAAS,YAAY;IACnB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,KAAK,CAAC,CAAW,EAAE,CAAiB;IAC3C,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAgC,EAAE,OAAoB,EAAE;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5H,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEpI,8FAA8F;IAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,GAAG,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IAEnE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,EAAE,GAAG,WAAW,IAAI,EAAE,GAAG,KAAK;YAAE,SAAS;QAC7C,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAa;QACrB,IAAI,EAAE,OAAO;QACb,KAAK;QACL,KAAK;QACL,YAAY;QACZ,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;KAClC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,KAAK,CAAC,CAAW;IACxB,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,CAAW,EAAE,CAAW;IACtC,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAC,OAAqD;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAe,CAAC;IACxH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjB,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QACtE,IAAI,CAAC,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACpH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;QACjB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;QACjB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;QACzB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC"}

package/dist/map/load.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Loads the map for one trail: streams the file, filters one session, builds the graph and the heat views.
+ * Shared by `kya map` and the live report, so both show the same numbers.
+ */
+import { type TrailRead } from "./build.js";
+import { type Heat } from "./heat.js";
+import type { MapGraph, TrailEventLike } from "./types.js";
+/** The When view is always seven days, so the read covers at least seven. */
+export declare const HEAT_DAYS = 7;
+export interface LoadMapOptions {
+    readonly path: string;
+    /** Graph window in days. */
+    readonly days: number;
+    readonly now: Date;
+    /** Per-install salt for sessionHash. */
+    readonly salt: string;
+    readonly session?: string;
+    /** Offset east of UTC in minutes, for the When view. */
+    readonly tzOffsetMinutes: number;
+}
+export interface LoadedMap {
+    readonly graph: MapGraph;
+    readonly heat: Heat;
+    /** Events in the graph window (after the session filter). */
+    readonly windowEvents: number;
+}
+/** Rows of the last `days` days, one session when `session` is set. Shared by `kya map` and `kya export`. */
+export declare function loadTrailEvents(opts: {
+    path: string;
+    days: number;
+    now: Date;
+    session?: string;
+}): Promise<{
+    read: TrailRead;
+    events: TrailEventLike[];
+}>;
+export declare function loadMap(opts: LoadMapOptions): Promise<LoadedMap>;
+//# sourceMappingURL=load.d.ts.map

package/dist/map/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/map/load.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAA2B,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D,6EAA6E;AAC7E,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAcD,6GAA6G;AAC7G,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,EAAE,CAAA;CAAE,CAAC,CAG/J;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAWtE"}

package/dist/map/load.js

@@ -0,0 +1,38 @@
+/**
+ * Loads the map for one trail: streams the file, filters one session, builds the graph and the heat views.
+ * Shared by `kya map` and the live report, so both show the same numbers.
+ */
+import { buildMap, readTrailFile } from "./build.js";
+import { buildHeat } from "./heat.js";
+/** The When view is always seven days, so the read covers at least seven. */
+export const HEAT_DAYS = 7;
+const EMPTY_READ = { events: [], rowsRead: 0, rowsSkipped: 0, rowsOutOfWindow: 0 };
+/** A missing trail is an empty trail. Any other read error is thrown. */
+async function readOrEmpty(path, days, now) {
+    try {
+        return await readTrailFile(path, { days, now });
+    }
+    catch (err) {
+        if (err?.code === "ENOENT")
+            return EMPTY_READ;
+        throw err;
+    }
+}
+/** Rows of the last `days` days, one session when `session` is set. Shared by `kya map` and `kya export`. */
+export async function loadTrailEvents(opts) {
+    const read = await readOrEmpty(opts.path, opts.days, opts.now);
+    return { read, events: opts.session ? read.events.filter((e) => e.sessionId === opts.session) : read.events };
+}
+export async function loadMap(opts) {
+    const { read, events } = await loadTrailEvents({ path: opts.path, days: Math.max(opts.days, HEAT_DAYS), now: opts.now, session: opts.session });
+    const graph = buildMap(events, {
+        salt: opts.salt,
+        now: opts.now,
+        days: opts.days,
+        read: { rowsRead: read.rowsRead, rowsSkipped: read.rowsSkipped, rowsOutOfWindow: read.rowsOutOfWindow },
+    });
+    const heat = buildHeat(events, { now: opts.now, days: HEAT_DAYS, tzOffsetMinutes: opts.tzOffsetMinutes });
+    const windowEvents = graph.nodes.filter((n) => n.kind === "device").reduce((s, n) => s + n.count, 0);
+    return { graph, heat, windowEvents };
+}
+//# sourceMappingURL=load.js.map

package/dist/map/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/map/load.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAkB,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,SAAS,EAAa,MAAM,WAAW,CAAC;AAGjD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAqB3B,MAAM,UAAU,GAAc,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;AAE9F,yEAAyE;AACzE,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,GAAS;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAiE;IACrG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;AAChH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChJ,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;KACxG,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1G,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC"}

package/dist/map/page.d.ts

@@ -0,0 +1,90 @@
+import type { Heat } from "./heat.js";
+import type { MapGraph, Verdicts } from "./types.js";
+/** The one line that says what the map is not. Shown on every map page. */
+export declare const ADVISORY_LINE = "Recorded by KYA. The open source check is advisory; this map shows what was recorded, not what was enforced.";
+/** Edge colours by dominant verdict. Deny beats hold, hold beats observed, observed beats allow (schema section 3). */
+export declare const TONE_COLOUR: {
+    readonly deny: "#b42318";
+    readonly hold: "#b54708";
+    readonly observed: "#667085";
+    readonly allow: "#067647";
+};
+export type EdgeTone = keyof typeof TONE_COLOUR;
+/** Tone of an edge from its verdict counts. Any deny makes the edge red. */
+export declare function edgeTone(v: Verdicts): EdgeTone;
+/** Edge width grows with log(count): 1 for one event, about 3 for 10, about 5 for 100. */
+export declare function edgeWidth(count: number): number;
+/**
+ * JSON for a `<script type="application/json">` body. `<`, `>` and `&` and the two line separators become
+ * \u escapes, so the text can never close the script element or start a tag. JSON.parse reads them back unchanged.
+ */
+export declare function jsonForScript(value: unknown): string;
+export declare function scanMapOutput(text: string): void;
+/** HTML text and attribute escape. */
+export declare function esc(s: string): string;
+/** Data the draw script reads: nodes with a label and detail, edges with tone and width (computed here, not in the browser). */
+export declare function drawModel(graph: MapGraph): {
+    colours: {
+        readonly deny: "#b42318";
+        readonly hold: "#b54708";
+        readonly observed: "#667085";
+        readonly allow: "#067647";
+    };
+    nodes: {
+        id: string;
+        kind: "target" | "agent" | "device" | "tool";
+        label: string;
+        detail: string;
+        count: number;
+        verdicts: Verdicts;
+        firstTs: string;
+        lastTs: string;
+    }[];
+    edges: {
+        id: string;
+        source: string;
+        target: string;
+        kind: "runs" | "uses" | "touches";
+        tool: string | null;
+        tone: "hold" | "deny" | "allow" | "observed";
+        colour: "#b42318" | "#b54708" | "#667085" | "#067647";
+        width: number;
+        count: number;
+        verdicts: Verdicts;
+        firstTs: string;
+        lastTs: string;
+    }[];
+};
+/**
+ * The page body: summary, graph container, side panel, both heat tables, and the data. Used inside the standalone
+ * file and as the live report's Map fragment. The graph is drawn by MAP_SCRIPT from the data element.
+ */
+export declare function renderMapBody(graph: MapGraph, heat: Heat, days: number): string;
+/** The vendored Cytoscape.js (MIT, see vendor/cytoscape/LICENSE). `</script` is broken so it cannot end the element. */
+export declare function cytoscapeSource(): string;
+/** Content-Security-Policy for the standalone file. No network: default-src none. */
+export declare const MAP_CSP = "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; img-src data:";
+/**
+ * The browser part. Labels go to Cytoscape (canvas) or textContent. The live body is parsed with DOMParser (the body
+ * has no executable script), so this file never assigns innerHTML.
+ */
+export declare const MAP_SCRIPT = "(function () {\n  'use strict';\n  var cy = null;\n  var last = null;\n  var live = !!document.querySelector('main[data-live-token]');\n  function token() {\n    var m = /(?:^|[?&])t=([^&]*)/.exec(location.search);\n    if (!m) return '';\n    try { return decodeURIComponent(m[1]); } catch (e) { return m[1]; }\n  }\n  function model() {\n    var el = document.getElementById('kya-map-data');\n    if (!el) return null;\n    try { return JSON.parse(el.textContent || 'null'); } catch (e) { return null; }\n  }\n  function add(parent, tag, text) {\n    var n = document.createElement(tag);\n    n.textContent = String(text);\n    parent.appendChild(n);\n    return n;\n  }\n  function showNode(node) {\n    var panel = document.getElementById('kya-map-panel');\n    if (!panel) return;\n    while (panel.firstChild) panel.removeChild(panel.firstChild);\n    add(panel, 'h3', node.kind + ': ' + node.label);\n    add(panel, 'p', 'Class: ' + node.detail);\n    var list = document.createElement('dl');\n    panel.appendChild(list);\n    [['Events', node.count], ['Allow', node.verdicts.allow], ['Deny', node.verdicts.deny], ['Hold', node.verdicts.hold],\n     ['Observed', node.verdicts.observed], ['First seen', node.firstTs || '-'], ['Last seen', node.lastTs || '-']]\n      .forEach(function (r) { add(list, 'dt', r[0]); add(list, 'dd', r[1]); });\n  }\n  function style(d) {\n    var out = [\n      { selector: 'node', style: { 'label': 'data(label)', 'font-size': 10, 'text-wrap': 'ellipsis', 'text-max-width': 130, 'min-zoomed-font-size': 9,\n        'text-background-color': '#ffffff', 'text-background-opacity': 0.8, 'text-background-padding': 1,\n        'width': 18, 'height': 18, 'background-color': '#98a2b3', 'color': '#101828' } },\n      { selector: 'node[kind = \"device\"]', style: { 'background-color': '#344054', 'shape': 'round-rectangle', 'width': 34, 'height': 34 } },\n      { selector: 'node[kind = \"agent\"]', style: { 'background-color': '#1d4ed8' } },\n      { selector: 'node[kind = \"tool\"]', style: { 'background-color': '#7a5af8', 'shape': 'round-rectangle' } },\n      { selector: 'node[kind = \"target\"]', style: { 'background-color': '#0e9384' } },\n      { selector: 'edge', style: { 'width': 'data(width)', 'line-color': 'data(colour)', 'target-arrow-color': 'data(colour)',\n        'target-arrow-shape': 'triangle', 'curve-style': 'bezier', 'opacity': 0.9 } }\n    ];\n    return out;\n  }\n  var MAX_DRAW_NODES = 400;\n  function draw() {\n    var host = document.getElementById('kya-map-graph');\n    var d = model();\n    if (cy) { cy.destroy(); cy = null; }\n    if (!host || !d || !window.cytoscape || !d.nodes || !d.nodes.length) return;\n    // A force layout on thousands of nodes hangs the tab. The JSON and both heat views still hold everything.\n    if (d.nodes.length > MAX_DRAW_NODES) {\n      host.textContent = 'Graph not drawn: ' + d.nodes.length + ' nodes is too many for the page. Use a shorter window (kya map --days 1) or kya map --json.';\n      return;\n    }\n    cy = window.cytoscape({\n      container: host,\n      elements: {\n        nodes: d.nodes.map(function (n) { return { data: n }; }),\n        edges: d.edges.map(function (e) { return { data: e }; })\n      },\n      style: style(d),\n      layout: { name: 'cose', animate: false, randomize: true, fit: true, padding: 24, numIter: 900, nodeRepulsion: function () { return 9000; }, idealEdgeLength: function () { return 80; }, nodeOverlap: 14, gravity: 0.35 }\n    });\n    cy.on('tap', 'node', function (evt) { showNode(evt.target.data()); });\n    cy.fit();\n  }\n  function refresh() {\n    if (!live) return;\n    var host = document.getElementById('frag-map');\n    if (!host) return;\n    fetch('/fragments?t=' + encodeURIComponent(token()), {\n      method: 'POST', headers: { 'Content-Type': 'application/json' }, body: '{\"map\":true}'\n    })\n      .then(function (r) { if (!r.ok) throw new Error('HTTP ' + r.status); return r.json(); })\n      .then(function (j) {\n        if (!j || !j.ok || !j.fragments || typeof j.fragments.mapBody !== 'string') return;\n        if (j.fragments.mapBody === last) return;\n        last = j.fragments.mapBody;\n        var doc = new DOMParser().parseFromString(j.fragments.mapBody, 'text/html');\n        var nodes = Array.prototype.slice.call(doc.body.childNodes);\n        while (host.firstChild) host.removeChild(host.firstChild);\n        nodes.forEach(function (n) { host.appendChild(n); });\n        draw();\n      })\n      .catch(function (err) { console.error('KYA map refresh failed', err); });\n  }\n  // Live only: fetch the vendored library with the token from this page's URL, then run it as a script element.\n  function loadLibrary(next) {\n    if (window.cytoscape) { next(); return; }\n    fetch('/vendor/cytoscape.min.js?t=' + encodeURIComponent(token()))\n      .then(function (r) { if (!r.ok) throw new Error('HTTP ' + r.status); return r.text(); })\n      .then(function (text) {\n        var s = document.createElement('script');\n        s.id = 'kya-cytoscape';\n        s.textContent = text;\n        document.head.appendChild(s);\n        next();\n      })\n      .catch(function (err) { console.error('KYA map library failed', err); });\n  }\n  window.kyaMapRefresh = refresh;\n  window.addEventListener('hashchange', function () {\n    if (location.hash !== '#map') return;\n    refresh();\n    setTimeout(function () { if (cy) { cy.resize(); cy.fit(); } }, 0);\n  });\n  if (live) loadLibrary(refresh); else draw();\n})();";
+/**
+ * Live report: the draw script, in the page shell (not in the swapped fragment). The script reads the token from its
+ * own URL and fetches the library from /vendor/cytoscape.min.js, so the token never appears in the HTML.
+ */
+export declare function liveMapScripts(): string;
+/** Map components. Shared by the standalone file and the live report, so it uses the report's tokens (--line, --mute, --fg, --bg). */
+export declare const MAP_CSS = "\n  .map-body .map-advisory { border-left: 3px solid var(--line, #d0d5dd); padding: 4px 10px; font-weight: 600; }\n  .map-body .mute { color: var(--mute, #667085); }\n  .map-stats p { margin: 4px 0; }\n  .map-top { margin: 4px 0 12px 20px; padding: 0; }\n  .map-canvas { display: grid; grid-template-columns: minmax(0, 1fr) 260px; gap: 12px; margin: 12px 0; }\n  .map-graph { height: 60vh; min-height: 360px; border: 1px solid var(--line, #d0d5dd); border-radius: 6px; }\n  .map-panel { border: 1px solid var(--line, #d0d5dd); border-radius: 6px; padding: 8px 12px; overflow: auto; }\n  .map-panel dl { display: grid; grid-template-columns: auto 1fr; gap: 2px 10px; }\n  .map-panel dt { color: var(--mute, #667085); }\n  .map-panel dd { margin: 0; }\n  .map-scroll { overflow-x: auto; }\n  .map-heat { border-collapse: collapse; font-size: 12px; margin-bottom: 12px; }\n  .map-heat caption { text-align: left; color: var(--mute, #667085); padding: 4px 0; }\n  .map-heat th, .map-heat td { border: 1px solid var(--line, #d0d5dd); padding: 3px 5px; text-align: right; min-width: 22px; }\n  .map-heat th { text-align: left; font-weight: 600; }\n  .map-heat td.l0 { background: transparent; }\n  .map-heat td.l1 { background: #d1fadf; color: #101828; }\n  .map-heat td.l2 { background: #75e0a7; color: #101828; }\n  .map-heat td.l3 { background: #12b76a; color: #fff; }\n  .map-heat td.l4 { background: #027a48; color: #fff; }\n  .map-heat td.deny { outline: 2px solid #b42318; outline-offset: -2px; }\n  .map-empty { font-weight: 600; }\n  @media (max-width: 760px) { .map-canvas { grid-template-columns: 1fr; } }\n";
+/** Live report: the Map zone shows only on its tab (same :target rule as the other zones). */
+export declare const MAP_LIVE_ZONE_CSS = "\n  @supports selector(body:has(*)) {\n    #map { display: none; }\n    #map:target { display: block; }\n    body:has(#map:target) #overview { display: none; }\n    body:has(#map:target) .nav-link[href=\"#map\"] { color: var(--fg); background: var(--bg); border-color: var(--line); }\n  }\n";
+/** Standalone file only: its own tokens and page frame (the live report has its own). */
+export declare const MAP_PAGE_CSS = "\n  :root { --fg: #101828; --mute: #667085; --line: #d0d5dd; --bg: #ffffff; }\n  @media (prefers-color-scheme: dark) { :root:not([data-theme=\"light\"]) { --fg: #f2f4f7; --mute: #98a2b3; --line: #344054; --bg: #101828; } }\n  :root[data-theme=\"dark\"] { --fg: #f2f4f7; --mute: #98a2b3; --line: #344054; --bg: #101828; }\n  body { background: var(--bg); color: var(--fg); font: 14px/1.45 system-ui, sans-serif; margin: 0; }\n  .map-page { max-width: 1100px; margin: 0 auto; padding: 16px; }\n";
+/** Standalone file: one page, no network, CSP on. */
+export declare function renderMapPage(input: {
+    graph: MapGraph;
+    heat: Heat;
+    days: number;
+    title: string;
+}): string;
+//# sourceMappingURL=page.d.ts.map

package/dist/map/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../src/map/page.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAW,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE9D,2EAA2E;AAC3E,eAAO,MAAM,aAAa,iHACsF,CAAC;AAEjH,uHAAuH;AACvH,eAAO,MAAM,WAAW;;;;;CAAuF,CAAC;AAChH,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,WAAW,CAAC;AAEhD,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAK9C;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAOD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED,sCAAsC;AACtC,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAErC;AAED,gIAAgI;AAChI,wBAAgB,SAAS,CAAC,KAAK,EAAE,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+BxC;AAuED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAsB/E;AAKD,wHAAwH;AACxH,wBAAgB,eAAe,IAAI,MAAM,CAKxC;AAED,qFAAqF;AACrF,eAAO,MAAM,OAAO,6FAA6F,CAAC;AAElH;;;GAGG;AACH,eAAO,MAAM,UAAU,y5KA+GjB,CAAC;AAEP;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,sIAAsI;AACtI,eAAO,MAAM,OAAO,ilDAwBnB,CAAC;AAEF,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,uSAO7B,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,YAAY,ifAMxB,CAAC;AAEF,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAyBzG"}