@testsmith/api-spector 0.3.5 → 0.3.6

package/out/renderer/assets/{index-BFxRlU1d.js → index-htBErIFG.js}

@@ -13460,10 +13460,12 @@ const createRecorderSlice = (set2) => ({
 });
 const createContractSlice = (set2) => ({
   lastContractReport: null,
+  lastContractRunMeta: null,
   contractSnapshots: {},
   activeContractSnapshotRelPath: null,
-  setLastContractReport: (r) => set2((s) => {
+  setLastContractReport: (r, meta2) => set2((s) => {
     s.lastContractReport = r;
+    s.lastContractRunMeta = r ? meta2 ?? null : null;
   }),
   loadContractSnapshot: (relPath, snapshot) => set2((s) => {
     s.contractSnapshots[relPath] = snapshot;
@@ -14242,7 +14244,7 @@ const useStore = create()(
     })
   }))
 );
-const { electron: electron$q } = window;
+const { electron: electron$r } = window;
 function useAutoSave() {
   const collections = useStore((s) => s.collections);
   useStore((s) => s.environments);
@@ -14258,7 +14260,7 @@ function useAutoSave() {
       for (const { relPath, data, dirty } of dirtyCollections) {
         if (!dirty) continue;
         try {
-          await electron$q.saveCollection(relPath, data);
+          await electron$r.saveCollection(relPath, data);
           markCollectionClean(data.id);
         } catch (e) {
           console.error("Auto-save failed for", relPath, e);
@@ -14274,7 +14276,7 @@ function useAutoSave() {
     if (wsTimerRef.current) clearTimeout(wsTimerRef.current);
     wsTimerRef.current = setTimeout(async () => {
       try {
-        await electron$q.saveWorkspace(workspace);
+        await electron$r.saveWorkspace(workspace);
       } catch {
       }
     }, 300);
@@ -14283,7 +14285,7 @@ function useAutoSave() {
     };
   }, [workspace]);
 }
-const { electron: electron$p } = window;
+const { electron: electron$q } = window;
 function useWorkspaceLoader() {
   const loadCollection = useStore((s) => s.loadCollection);
   const loadEnvironment = useStore((s) => s.loadEnvironment);
@@ -14307,33 +14309,45 @@ function useWorkspaceLoader() {
     if (typeof ws2.settings?.zoom === "number") setZoom(ws2.settings.zoom);
     for (const colPath of ws2.collections) {
       try {
-        const col = await electron$p.loadCollection(colPath);
+        const col = await electron$q.loadCollection(colPath);
         loadCollection(colPath, col);
       } catch {
       }
     }
     for (const envPath of ws2.environments) {
       try {
-        const env = await electron$p.loadEnvironment(envPath);
+        const env = await electron$q.loadEnvironment(envPath);
         loadEnvironment(envPath, env);
       } catch {
       }
     }
+    {
+      const state = useStore.getState();
+      const activeId = state.activeEnvironmentId;
+      const activeIsValid = activeId !== null && Boolean(state.environments[activeId]);
+      const defaultName = ws2.settings?.defaultEnvironment;
+      if (!activeIsValid && defaultName) {
+        const match = Object.values(state.environments).find(
+          (e) => e.data.name.toLowerCase() === defaultName.toLowerCase()
+        );
+        if (match) state.setActiveEnvironment(match.data.id);
+      }
+    }
     for (const relPath of ws2.mocks ?? []) {
       try {
-        const mockData = await electron$p.loadMock(relPath);
+        const mockData = await electron$q.loadMock(relPath);
         loadMock(relPath, mockData);
       } catch {
       }
     }
     try {
-      const snapshots = await electron$p.listContractSnapshots(ws2.contracts ?? []);
+      const snapshots = await electron$q.listContractSnapshots(ws2.contracts ?? []);
       for (const { relPath, snapshot } of snapshots) loadContractSnapshot(relPath, snapshot);
     } catch {
     }
     if (ws2.collections.length > 0) {
       try {
-        const firstCol = await electron$p.loadCollection(ws2.collections[0]);
+        const firstCol = await electron$q.loadCollection(ws2.collections[0]);
         setActiveCollection(firstCol.id);
       } catch {
       }
@@ -14341,6 +14355,40 @@ function useWorkspaceLoader() {
   }, [loadCollection, loadEnvironment, loadMock, loadContractSnapshot, setActiveCollection, setTheme, setZoom]);
   return { applyWorkspace };
 }
+function resolveEnvironmentChain(env, all) {
+  if (!env.extends) return env;
+  const chain = [env];
+  const seen = /* @__PURE__ */ new Set([env.name]);
+  let parentName = env.extends;
+  while (parentName && !seen.has(parentName)) {
+    const parent = all.find((e) => e.name === parentName);
+    if (!parent) break;
+    chain.push(parent);
+    seen.add(parent.name);
+    parentName = parent.extends;
+  }
+  if (chain.length === 1) return env;
+  const merged = /* @__PURE__ */ new Map();
+  for (const link of [...chain].reverse()) {
+    for (const v of link.variables) merged.set(v.key, v);
+  }
+  return { ...env, variables: [...merged.values()] };
+}
+function resolveEnvironmentById(environments, id2) {
+  if (!id2) return null;
+  const env = environments[id2]?.data;
+  if (!env) return null;
+  const all = Object.values(environments).map((e) => e.data);
+  return resolveEnvironmentChain(env, all);
+}
+function useActiveEnvironment() {
+  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
+  const environments = useStore((s) => s.environments);
+  return reactExports.useMemo(
+    () => resolveEnvironmentById(environments, activeEnvironmentId),
+    [environments, activeEnvironmentId]
+  );
+}
 let rangeFrom = [], rangeTo = [];
 (() => {
   let numbers = "lc,34,7n,7,7b,19,,,,2,,2,,,20,b,1c,l,g,,2t,7,2,6,2,2,,4,z,,u,r,2j,b,1m,9,9,,o,4,,9,,3,,5,17,3,3b,f,,w,1j,,,,4,8,4,,3,7,a,2,t,,1m,,,,2,4,8,,9,,a,2,q,,2,2,1l,,4,2,4,2,2,3,3,,u,2,3,,b,2,1l,,4,5,,2,4,,k,2,m,6,,,1m,,,2,,4,8,,7,3,a,2,u,,1n,,,,c,,9,,14,,3,,1l,3,5,3,,4,7,2,b,2,t,,1m,,2,,2,,3,,5,2,7,2,b,2,s,2,1l,2,,,2,4,8,,9,,a,2,t,,20,,4,,2,3,,,8,,29,,2,7,c,8,2q,,2,9,b,6,22,2,r,,,,,,1j,e,,5,,2,5,b,,10,9,,2u,4,,6,,2,2,2,p,2,4,3,g,4,d,,2,2,6,,f,,jj,3,qa,3,t,3,t,2,u,2,1s,2,,7,8,,2,b,9,,19,3,3b,2,y,,3a,3,4,2,9,,6,3,63,2,2,,1m,,,7,,,,,2,8,6,a,2,,1c,h,1r,4,1c,7,,,5,,14,9,c,2,w,4,2,2,,3,1k,,,2,3,,,3,1m,8,2,2,48,3,,d,,7,4,,6,,3,2,5i,1m,,5,ek,,5f,x,2da,3,3x,,2o,w,fe,6,2x,2,n9w,4,,a,w,2,28,2,7k,,3,,4,,p,2,5,,47,2,q,i,d,,12,8,p,b,1a,3,1c,,2,4,2,2,13,,1v,6,2,2,2,2,c,,8,,1b,,1f,,,3,2,2,5,2,,,16,2,8,,6m,,2,,4,,fn4,,kh,g,g,g,a6,2,gt,,6a,,45,5,1ae,3,,2,5,4,14,3,4,,4l,2,fx,4,ar,2,49,b,4w,,1i,f,1k,3,1d,4,2,2,1x,3,10,5,,8,1q,,c,2,1g,9,a,4,2,,2n,3,2,,,2,6,,4g,,3,8,l,2,1l,2,,,,,m,,e,7,3,5,5f,8,2,3,,,n,,29,,2,6,,,2,,,2,,2,6j,,2,4,6,2,,2,r,2,2d,8,2,,,2,2y,,,,2,6,,,2t,3,2,4,,5,77,9,,2,6t,,a,2,,,4,,40,4,2,2,4,,w,a,14,6,2,4,8,,9,6,2,3,1a,d,,2,ba,7,,6,,,2a,m,2,7,,2,,2,3e,6,3,,,2,,7,,,20,2,3,,,,9n,2,f0b,5,1n,7,t4,,1r,4,29,,f5k,2,43q,,,3,4,5,8,8,2,7,u,4,44,3,1iz,1j,4,1e,8,,e,,m,5,,f,11s,7,,h,2,7,,2,,5,79,7,c5,4,15s,7,31,7,240,5,gx7k,2o,3k,6o".split(",").map((s) => s ? parseInt(s, 36) : 1);
@@ -34301,7 +34349,7 @@ const DYNAMIC_VAR_NAMES = [
   "$randomHexColor"
 ];
 const DYNAMIC_VAR_INFO = {
-  $uuid: "Random UUID v4 — generated fresh each send",
+  $uuid: "Random UUID v4 - generated fresh each send",
   $timestamp: "Current Unix timestamp in milliseconds",
   $isoTimestamp: "Current date/time as ISO 8601 string",
   $randomInt: "Random integer between 0 and 1000",
@@ -34341,7 +34389,7 @@ const SP_RESPONSE_MEMBERS = [
   { label: "statusText", type: "property", detail: "string", info: "Status text only" },
   { label: "responseTime", type: "property", detail: "number", info: "Request duration in ms" },
   { label: "responseSize", type: "property", detail: "number", info: "Body size in bytes" },
-  { label: "headers", type: "property", info: "Response headers — use .get(name) or .toObject()" },
+  { label: "headers", type: "property", info: "Response headers - use .get(name) or .toObject()" },
   { label: "json", type: "function", detail: "()", info: "Parse body as JSON and return it" },
   { label: "text", type: "function", detail: "()", info: "Return body as a raw string" }
 ];
@@ -34727,7 +34775,7 @@ function mockBodyCompletionExtension(pathParamNames = [], varNames = []) {
 const RESPONSE_MEMBERS = [
   { label: "statusCode", type: "property", detail: "number", info: "HTTP status code to send" },
   { label: "body", type: "property", detail: "string", info: "Response body string (overrides template)" },
-  { label: "headers", type: "property", detail: "object", info: 'Response headers — modify with response.headers["X-Foo"] = "bar"' }
+  { label: "headers", type: "property", detail: "object", info: 'Response headers - modify with response.headers["X-Foo"] = "bar"' }
 ];
 const REQUEST_SCRIPT_MEMBERS = [
   { label: "params", type: "property", info: "URL path params { id, slug, … }" },
@@ -34785,12 +34833,11 @@ function extractScriptVarNames(script) {
   return names2;
 }
 function useVarNames() {
-  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
   const activeCollectionId = useStore((s) => s.activeCollectionId);
-  const environments = useStore((s) => s.environments);
   const collections = useStore((s) => s.collections);
   const globals = useStore((s) => s.globals);
   const sessionVars = useStore((s) => s.sessionVars);
+  const activeEnv = useActiveEnvironment();
   return reactExports.useMemo(() => {
     const names2 = /* @__PURE__ */ new Set();
     Object.keys(globals).forEach((k) => names2.add(k));
@@ -34805,41 +34852,35 @@ function useVarNames() {
         }
       }
     }
-    if (activeEnvironmentId) {
-      const envVars = environments[activeEnvironmentId]?.data.variables ?? [];
-      envVars.filter((v) => v.enabled && v.key).forEach((v) => names2.add(v.key));
-    }
+    const envVars = activeEnv?.variables ?? [];
+    envVars.filter((v) => v.enabled && v.key).forEach((v) => names2.add(v.key));
     return [...DYNAMIC_VAR_NAMES, ...Array.from(names2).sort()];
   }, [
-    activeEnvironmentId,
+    activeEnv,
     activeCollectionId,
-    environments,
     collections,
     globals,
     sessionVars
   ]);
 }
 function useVarValues() {
-  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
   const activeCollectionId = useStore((s) => s.activeCollectionId);
-  const environments = useStore((s) => s.environments);
   const collections = useStore((s) => s.collections);
   const globals = useStore((s) => s.globals);
+  const activeEnv = useActiveEnvironment();
   const result = { ...globals };
   if (activeCollectionId) {
     const colVars = collections[activeCollectionId]?.data.collectionVariables ?? {};
     Object.assign(result, colVars);
   }
-  if (activeEnvironmentId) {
-    for (const v of environments[activeEnvironmentId]?.data.variables ?? []) {
-      if (!v.enabled || !v.key) continue;
-      if (v.secret && v.secretEncrypted) {
-        result[v.key] = "••••••••";
-      } else if (v.envRef) {
-        result[v.key] = `$${v.envRef}`;
-      } else {
-        result[v.key] = v.value;
-      }
+  for (const v of activeEnv?.variables ?? []) {
+    if (!v.enabled || !v.key) continue;
+    if (v.secret && v.secretEncrypted) {
+      result[v.key] = "••••••••";
+    } else if (v.envRef) {
+      result[v.key] = `$${v.envRef}`;
+    } else {
+      result[v.key] = v.value;
     }
   }
   return result;
@@ -35181,7 +35222,7 @@ function KVTable({ rows, onChange, keyPlaceholder = "Key", valuePlaceholder = "V
           {
             value: row.paramType ?? "query",
             onChange: (e) => update(idx, { paramType: e.target.value }),
-            title: (row.paramType ?? "query") === "path" ? "Path variable — substituted into the URL via {{name}}" : "Query string parameter — appended as ?key=value",
+            title: (row.paramType ?? "query") === "path" ? "Path variable - substituted into the URL via {{name}}" : "Query string parameter - appended as ?key=value",
             className: `flex-shrink-0 text-[10px] bg-surface-800 border border-surface-700 rounded px-1.5 py-1 focus:outline-none focus:border-blue-500 font-mono ${(row.paramType ?? "query") === "path" ? "text-violet-400" : "text-surface-400"}`,
             children: [
               /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "query", children: "query" }),
@@ -35624,7 +35665,7 @@ function BearerPanel({
         "Token",
         " ",
         /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-500 text-[10px]", children: [
-          "— supports ",
+          "- supports ",
           "{{variables}}"
         ] })
       ] }),
@@ -35707,7 +35748,7 @@ function FolderSettingsModal({ collectionId, folder, onClose }) {
             /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-sm font-semibold", children: "Folder settings" }),
             /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] text-surface-600 mt-0.5", children: [
               folder.name,
-              " — auth and headers inherited by all requests in this folder"
+              " - auth and headers inherited by all requests in this folder"
             ] })
           ] }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-surface-400 hover:text-white text-lg leading-none", children: "×" })
@@ -35800,7 +35841,7 @@ function CollectionSettingsModal({ collection, onClose }) {
             /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-sm font-semibold", children: "Collection settings" }),
             /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] text-surface-600 mt-0.5", children: [
               collection.name,
-              " — auth and headers inherited by all requests in this collection"
+              " - auth and headers inherited by all requests in this collection"
             ] })
           ] }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-surface-400 hover:text-white text-lg leading-none", children: "×" })
@@ -35907,7 +35948,7 @@ function CollectionSettingsModal({ collection, onClose }) {
     }
   );
 }
-const { electron: electron$o } = window;
+const { electron: electron$p } = window;
 function normalisePath(url) {
   let path = url.replace(/^\{\{[^}]+\}\}/, "").replace(/^https?:\/\/[^/]+/, "");
   if (!path.startsWith("/")) path = "/" + path;
@@ -35994,7 +36035,7 @@ function SchemaSyncModal({
     setLoading(true);
     setError(null);
     try {
-      const entries = await electron$o.extractOpenApiSchemas();
+      const entries = await electron$p.extractOpenApiSchemas();
       if (!entries) {
         setLoading(false);
         return;
@@ -36013,7 +36054,7 @@ function SchemaSyncModal({
     setLoading(true);
     setError(null);
     try {
-      const entries = await electron$o.extractOpenApiSchemasFromUrl(trimmed);
+      const entries = await electron$p.extractOpenApiSchemasFromUrl(trimmed);
       setSpecEntries(entries);
       autoSelectChanged(entries);
     } catch (err) {
@@ -36046,7 +36087,7 @@ function SchemaSyncModal({
       }
       const entry = useStore.getState().collections[collectionId];
       if (entry) {
-        await electron$o.saveCollection(entry.relPath, entry.data);
+        await electron$p.saveCollection(entry.relPath, entry.data);
         markCollectionClean(collectionId);
       }
       onClose();
@@ -36065,7 +36106,7 @@ function SchemaSyncModal({
         children: [
           /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs("h2", { className: "text-sm font-semibold text-surface-100", children: [
-              "Sync schemas — ",
+              "Sync schemas - ",
               scopeLabel
             ] }),
             /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-surface-500 hover:text-surface-300 text-lg leading-none", children: "×" })
@@ -36184,7 +36225,7 @@ function SchemaSyncModal({
           /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-sm font-semibold text-surface-100", children: "Sync schemas from OpenAPI" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-surface-500 hover:text-surface-300 text-lg leading-none", children: "×" })
         ] }),
-        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-400", children: "Load an OpenAPI spec to update response schemas on existing requests. Matching uses HTTP method + URL path. Only schemas are touched — URLs, params, headers, auth, and scripts are preserved." }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-400", children: "Load an OpenAPI spec to update response schemas on existing requests. Matching uses HTTP method + URL path. Only schemas are touched - URLs, params, headers, auth, and scripts are preserved." }),
         /* @__PURE__ */ jsxRuntimeExports.jsx(
           "button",
           {
@@ -36260,7 +36301,7 @@ const METHOD_COLORS$1 = {
   DELETE: "text-red-400",
   HEAD: "text-purple-400",
   OPTIONS: "text-surface-400",
-  QUERY: "text-teal-400",
+  QUERY: "text-fuchsia-400",
   ANY: "text-surface-400"
 };
 function getMethodColor(method) {
@@ -54698,9 +54739,8 @@ function GraphQLEditor({ request, onChange }) {
     () => request.body.graphql ?? EMPTY_GQL,
     [request.body.graphql]
   );
-  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
   const activeCollectionId = useStore((s) => s.activeCollectionId);
-  const envData = useStore((s) => activeEnvironmentId ? s.environments[activeEnvironmentId]?.data : null);
+  const envData = useActiveEnvironment();
   const colVarsData = useStore((s) => activeCollectionId ? s.collections[activeCollectionId]?.data.collectionVariables : null);
   const globals = useStore((s) => s.globals);
   const hookVars = reactExports.useMemo(() => {
@@ -55303,7 +55343,7 @@ function withContentType(headers, value) {
   if (idx === -1) return [...headers, next];
   return headers.map((h, i) => i === idx ? { ...h, value, enabled: true } : h);
 }
-const { electron: electron$n } = window;
+const { electron: electron$o } = window;
 function ParamTree({ params, depth = 0 }) {
   if (params.length === 0) {
     return /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 italic", children: "No parameters declared in WSDL." });
@@ -55329,7 +55369,7 @@ function SoapEditor({ request, onChange }) {
     let cancelled = false;
     (async () => {
       try {
-        const result = await electron$n.wsdlFetch(url);
+        const result = await electron$o.wsdlFetch(url);
         if (cancelled) return;
         setOperations(result.operations);
         setEndpoints(result.endpoints);
@@ -55366,7 +55406,7 @@ function SoapEditor({ request, onChange }) {
     setFetching(true);
     setFetchError(null);
     try {
-      const result = await electron$n.wsdlFetch(soap.wsdlUrl.trim());
+      const result = await electron$o.wsdlFetch(soap.wsdlUrl.trim());
       setOperations(result.operations);
       setEndpoints(result.endpoints);
       setTargetNs(result.targetNamespace);
@@ -55507,7 +55547,7 @@ function SoapEditor({ request, onChange }) {
             "SOAPAction: ",
             soap.soapAction
           ] }),
-          !soap.operationName && !soap.soapAction && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "text-[10px] text-surface-500", children: soap.wsdlUrl?.trim() ? "WSDL not loaded — the saved envelope below is still sent on Send." : "No WSDL — hand-crafted SOAP envelope." })
+          !soap.operationName && !soap.soapAction && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "text-[10px] text-surface-500", children: soap.wsdlUrl?.trim() ? "WSDL not loaded - the saved envelope below is still sent on Send." : "No WSDL - hand-crafted SOAP envelope." })
         ] }),
         soap.wsdlUrl?.trim() && /* @__PURE__ */ jsxRuntimeExports.jsx(
           "button",
@@ -55537,7 +55577,7 @@ function SoapEditor({ request, onChange }) {
         /* @__PURE__ */ jsxRuntimeExports.jsx("em", { children: "Fetch WSDL" }),
         "."
       ] }),
-      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 max-w-sm", children: "The endpoint, SOAP version, Content-Type header, and per-operation envelope are derived from the WSDL — you only pick the operation and fill the parameters." })
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 max-w-sm", children: "The endpoint, SOAP version, Content-Type header, and per-operation envelope are derived from the WSDL - you only pick the operation and fill the parameters." })
     ] })
   ] });
 }
@@ -55636,7 +55676,7 @@ function BodyTab({ request, onChange }) {
     mode === "soap" && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0", children: /* @__PURE__ */ jsxRuntimeExports.jsx(SoapEditor, { request, onChange }) })
   ] });
 }
-const { electron: electron$m } = window;
+const { electron: electron$n } = window;
 const AUTH_TYPES = ["none", "bearer", "basic", "digest", "ntlm", "apikey", "oauth2"];
 function AuthTab({ request, onChange }) {
   const auth = request.auth;
@@ -55650,7 +55690,7 @@ function AuthTab({ request, onChange }) {
   }
   async function saveSecret(ref2) {
     if (!secretValue || !ref2) return;
-    await electron$m.setSecret(ref2, secretValue);
+    await electron$n.setSecret(ref2, secretValue);
     setSaved(true);
     setSecretValue("");
     setTimeout(() => setSaved(false), 2e3);
@@ -55662,7 +55702,7 @@ function AuthTab({ request, onChange }) {
     setOauth2Error("");
     try {
       const vars = {};
-      const result = await electron$m.oauth2StartFlow(oauth2Auth, vars);
+      const result = await electron$n.oauth2StartFlow(oauth2Auth, vars);
       setAuth({
         oauth2CachedToken: result.accessToken,
         oauth2TokenExpiry: result.expiresAt
@@ -55680,7 +55720,7 @@ function AuthTab({ request, onChange }) {
     setOauth2Status("fetching");
     setOauth2Error("");
     try {
-      const result = await electron$m.oauth2RefreshToken(oauth2Auth, {}, oauth2RefreshToken);
+      const result = await electron$n.oauth2RefreshToken(oauth2Auth, {}, oauth2RefreshToken);
       setAuth({
         oauth2CachedToken: result.accessToken,
         oauth2TokenExpiry: result.expiresAt
@@ -56453,7 +56493,7 @@ const SNIPPET_GROUPS = [
     ]
   },
   {
-    group: "Variables — Get",
+    group: "Variables - Get",
     items: [
       {
         label: "Get variable",
@@ -56474,7 +56514,7 @@ const SNIPPET_GROUPS = [
     ]
   },
   {
-    group: "Variables — Set",
+    group: "Variables - Set",
     items: [
       {
         label: "Save token from response (use in next requests)",
@@ -56500,7 +56540,7 @@ sp.collectionVariables.set("token", json.access_token);`
     ]
   },
   {
-    group: "Variables — Clear",
+    group: "Variables - Clear",
     items: [
       {
         label: "Clear variable",
@@ -62943,7 +62983,7 @@ function SchemaTab({ request, onChange }) {
         )
       ] })
     ] }),
-    /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600", children: "Standalone schema for ad-hoc validation. Independent of the contract — edits here don't affect it." }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600", children: "Standalone schema for ad-hoc validation. Independent of the contract - edits here don't affect it." }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "border border-surface-700 rounded overflow-hidden", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex justify-end px-2 py-0.5 bg-surface-800/50 border-b border-surface-700", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
         "button",
@@ -62974,9 +63014,9 @@ function SchemaTab({ request, onChange }) {
       )
     ] }),
     error2 && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "text-xs text-red-400 bg-red-950/50 border border-red-800 rounded px-3 py-2", children: error2 }),
-    result && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: `rounded border px-3 py-2 text-xs ${result.valid ? "bg-emerald-900/20 border-emerald-700" : "bg-red-900/20 border-red-700"}`, children: result.valid ? /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-emerald-400 font-semibold", children: "Valid — response matches the schema." }) : /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1.5", children: [
+    result && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: `rounded border px-3 py-2 text-xs ${result.valid ? "bg-emerald-900/20 border-emerald-700" : "bg-red-900/20 border-red-700"}`, children: result.valid ? /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-emerald-400 font-semibold", children: "Valid: response matches the schema." }) : /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1.5", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-red-400 font-semibold", children: [
-        "Invalid — ",
+        "Invalid: ",
         result.errors.length,
         " error",
         result.errors.length !== 1 ? "s" : ""
@@ -62988,7 +63028,7 @@ function SchemaTab({ request, onChange }) {
     ] }) })
   ] });
 }
-const { electron: electron$l } = window;
+const { electron: electron$m } = window;
 const EMPTY = { statusCode: 200, headers: [], bodySchema: "" };
 function ContractTab({ request, onChange }) {
   const activeTab = useStore((s) => s.tabs.find((t2) => t2.id === s.activeTabId));
@@ -63002,7 +63042,7 @@ function ContractTab({ request, onChange }) {
     if (!lastResponse?.body) return;
     setInferring(true);
     try {
-      const schema = await electron$l.inferContractSchema(lastResponse.body);
+      const schema = await electron$m.inferContractSchema(lastResponse.body);
       if (schema) update({ bodySchema: schema });
     } finally {
       setInferring(false);
@@ -63023,7 +63063,7 @@ function ContractTab({ request, onChange }) {
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-4 h-full min-h-0", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-2 px-3 py-2 rounded-lg text-xs border ${hasContract ? "bg-blue-950/40 border-blue-700 text-blue-300" : "bg-surface-800 border-surface-700 text-surface-500"}`, children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `w-2 h-2 rounded-full ${hasContract ? "bg-blue-400" : "bg-surface-600"}` }),
-      hasContract ? "Contract defined — will be verified in Contract panel" : "No contract defined yet"
+      hasContract ? "Contract defined - will be verified in Contract panel" : "No contract defined yet"
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1.5", children: "Expected Status Code" }),
@@ -63128,7 +63168,7 @@ function ContractTab({ request, onChange }) {
     ] })
   ] });
 }
-const { electron: electron$k } = window;
+const { electron: electron$l } = window;
 function formatTime$1(ts) {
   const d = new Date(ts);
   const hh = String(d.getHours()).padStart(2, "0");
@@ -63148,14 +63188,14 @@ function WebSocketPanel({ request }) {
   const [sendText, setSendText] = reactExports.useState("");
   const logEndRef = reactExports.useRef(null);
   reactExports.useEffect(() => {
-    electron$k.onWsMessage(({ requestId, message }) => {
+    electron$l.onWsMessage(({ requestId, message }) => {
       addWsMessage(requestId, message);
     });
-    electron$k.onWsStatus(({ requestId, status, error: error2 }) => {
+    electron$l.onWsStatus(({ requestId, status, error: error2 }) => {
       setWsStatus(requestId, status, error2);
     });
     return () => {
-      electron$k.offWsEvents();
+      electron$l.offWsEvents();
     };
   }, [addWsMessage, setWsStatus]);
   reactExports.useEffect(() => {
@@ -63168,19 +63208,19 @@ function WebSocketPanel({ request }) {
       if (h.enabled && h.key) headers[h.key] = h.value;
     }
     try {
-      await electron$k.wsConnect(request.id, request.url, headers);
+      await electron$l.wsConnect(request.id, request.url, headers);
     } catch (err) {
       setWsStatus(request.id, "error", err instanceof Error ? err.message : String(err));
     }
   }
   async function disconnect() {
-    await electron$k.wsDisconnect(request.id);
+    await electron$l.wsDisconnect(request.id);
   }
   async function sendMessage() {
     const text = sendText.trim();
     if (!text || !isConnected) return;
     try {
-      await electron$k.wsSend(request.id, text);
+      await electron$l.wsSend(request.id, text);
       const msg = {
         id: crypto.randomUUID(),
         direction: "sent",
@@ -63283,6 +63323,393 @@ function WebSocketPanel({ request }) {
     ] })
   ] });
 }
+function useToast(durationMs = 3e3) {
+  const [toast, setToast] = reactExports.useState(null);
+  const timer = reactExports.useRef(null);
+  function show(msg, ok) {
+    if (timer.current) clearTimeout(timer.current);
+    setToast({ msg, ok });
+    timer.current = setTimeout(() => setToast(null), durationMs);
+  }
+  return { toast, show };
+}
+function Toast({ toast }) {
+  if (!toast) return null;
+  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: `mx-3 mb-2 px-2 py-1.5 rounded text-[11px] flex-shrink-0 ${toast.ok ? "bg-emerald-900/50 text-emerald-300 border border-emerald-800/50" : "bg-red-900/50 text-red-300 border border-red-800/50"}`, children: toast.msg });
+}
+function statusColor$3(code2) {
+  const d = String(code2)[0];
+  return d === "2" ? "text-emerald-400" : d === "3" ? "text-amber-400" : "text-red-400";
+}
+const ORACLE_META = {
+  "never-5xx": { label: "Server crash", badge: "bg-red-900/50 text-red-400", border: "border-red-600" },
+  "accepted-invalid": { label: "Accepted invalid", badge: "bg-amber-900/50 text-amber-400", border: "border-amber-500" },
+  "undocumented-status": { label: "Undocumented status", badge: "bg-blue-900/50 text-blue-400", border: "border-blue-500" },
+  "response-schema": { label: "Response schema", badge: "bg-orange-900/50 text-orange-400", border: "border-orange-500" }
+};
+function FindingRow({ finding, onCopy }) {
+  const [open, setOpen] = reactExports.useState(false);
+  const meta2 = ORACLE_META[finding.oracle];
+  const req = finding.request;
+  const sentText = `${req.method} ${req.url}
+` + Object.entries(req.headers).map(([k, v]) => `${k}: ${v}`).join("\n") + (req.body ? `
+
+${req.body}` : "");
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex flex-col gap-1.5 px-4 py-2.5 border-l-2 ${meta2.border} bg-red-950/20 rounded-r`, children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-[10px] font-bold px-1.5 py-0.5 rounded uppercase tracking-wide ${meta2.badge}`, children: meta2.label }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-xs font-mono font-bold ${statusColor$3(finding.status)}`, children: finding.status === 0 ? "ERR" : finding.status }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-mono text-surface-500 bg-surface-800 px-1.5 py-0.5 rounded", children: finding.mutation.target }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-mono text-surface-400 bg-surface-800 px-1.5 py-0.5 rounded", children: finding.mutation.kind })
+    ] }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-red-200", children: finding.message }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[11px] text-surface-400", children: finding.mutation.description }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx(
+      "button",
+      {
+        onClick: () => setOpen((v) => !v),
+        className: "text-[10px] text-surface-500 hover:text-surface-300 transition-colors self-start",
+        children: open ? "▲ Hide sent request" : "▼ Show sent request"
+      }
+    ),
+    open && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2 mt-0.5", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded border border-surface-800 bg-surface-900 overflow-hidden", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 px-2.5 py-1.5 border-b border-surface-800", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-[11px] font-bold font-mono ${getMethodColor(req.method)}`, children: req.method }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[11px] font-mono text-surface-400 truncate flex-1", children: req.url }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "button",
+            {
+              onClick: () => onCopy(sentText),
+              className: "text-[10px] text-surface-500 hover:text-surface-200 transition-colors shrink-0",
+              title: "Copy the sent request",
+              children: "Copy"
+            }
+          )
+        ] }),
+        req.body && /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[11px] font-mono text-surface-300 px-2.5 py-2 overflow-x-auto whitespace-pre-wrap break-words", children: req.body })
+      ] }),
+      finding.responseSample && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded border border-surface-800 bg-surface-900 overflow-hidden", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "px-2.5 py-1.5 border-b border-surface-800 text-[10px] uppercase tracking-wider text-surface-500 font-medium", children: "Response sample" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[11px] font-mono text-surface-300 px-2.5 py-2 overflow-x-auto whitespace-pre-wrap break-words", children: finding.responseSample })
+      ] })
+    ] })
+  ] });
+}
+function OperationCard({ result, onCopy }) {
+  const [open, setOpen] = reactExports.useState(true);
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded-lg border border-red-800/60 overflow-hidden", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs(
+      "button",
+      {
+        onClick: () => setOpen((v) => !v),
+        className: "w-full flex items-center gap-3 px-4 py-3 text-left bg-red-950/30 hover:bg-red-950/50 transition-colors",
+        children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-xs font-bold font-mono w-14 ${getMethodColor(result.method)}`, children: result.method }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "flex-1 text-sm text-white truncate", children: result.requestName }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "hidden lg:block text-[11px] text-surface-500 font-mono truncate max-w-[260px]", children: result.url }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "shrink-0 text-[10px] bg-red-900/50 text-red-300 rounded px-1.5 py-0.5 font-medium", children: [
+            result.findings.length,
+            " ",
+            result.findings.length === 1 ? "finding" : "findings"
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "shrink-0 text-[11px] text-surface-500", children: [
+            result.cases,
+            " cases"
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "shrink-0 text-surface-600 text-xs ml-1", children: open ? "▲" : "▼" })
+        ]
+      }
+    ),
+    open && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "px-4 py-3 bg-surface-900 border-t border-surface-800 flex flex-col gap-2", children: result.findings.map((f, i) => /* @__PURE__ */ jsxRuntimeExports.jsx(FindingRow, { finding: f, onCopy }, i)) })
+  ] });
+}
+function statusTone(status, finding) {
+  if (finding) return "text-red-400";
+  if (status === 0) return "text-surface-500";
+  if (status >= 200 && status < 300) return "text-emerald-400";
+  if (status >= 400) return "text-amber-400";
+  return "text-surface-300";
+}
+function TraceRow({ trace, onCopy }) {
+  const [open, setOpen] = reactExports.useState(false);
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "border-t border-surface-800 first:border-t-0", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs(
+      "button",
+      {
+        onClick: () => setOpen((v) => !v),
+        className: "w-full flex items-center gap-3 px-3 py-1.5 text-left hover:bg-surface-800/60 transition-colors font-mono text-[11px]",
+        children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "shrink-0 text-surface-600 w-3", children: open ? "▾" : "▸" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 font-bold w-9 ${statusTone(trace.status, trace.finding)}`, children: trace.status || "ERR" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "shrink-0 text-surface-300", children: trace.mutation.target }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-500 truncate", children: trace.mutation.kind }),
+          trace.finding && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "ml-auto shrink-0 text-[10px] bg-red-900/50 text-red-300 rounded px-1.5 py-0.5", children: "finding" })
+        ]
+      }
+    ),
+    open && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-3 pb-3 pt-1 flex flex-col gap-2 bg-surface-950/40", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[11px] text-surface-400", children: trace.mutation.description }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Request" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "button",
+            {
+              onClick: () => onCopy(`${trace.request.method} ${trace.request.url}
+
+${trace.request.body ?? ""}`),
+              className: "text-[10px] text-surface-500 hover:text-surface-200 transition-colors",
+              children: "copy"
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] font-mono text-surface-500 break-all", children: [
+          trace.request.method,
+          " ",
+          trace.request.url
+        ] }),
+        trace.request.body && /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[11px] font-mono text-surface-300 bg-surface-900 border border-surface-800 rounded px-2.5 py-2 overflow-x-auto whitespace-pre-wrap break-words", children: trace.request.body })
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: [
+          "Response (",
+          trace.status || "no response",
+          ")"
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[11px] font-mono text-surface-300 bg-surface-900 border border-surface-800 rounded px-2.5 py-2 overflow-x-auto whitespace-pre-wrap break-words", children: trace.responseSample || "(empty)" })
+      ] })
+    ] })
+  ] });
+}
+function TraceCard({ result, onCopy }) {
+  const [open, setOpen] = reactExports.useState(false);
+  if (!result.trace?.length) return null;
+  const findingCount = result.trace.filter((t2) => t2.finding).length;
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded-lg border border-surface-700 overflow-hidden", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs(
+      "button",
+      {
+        onClick: () => setOpen((v) => !v),
+        className: "w-full flex items-center gap-3 px-4 py-2.5 text-left bg-surface-800 hover:bg-surface-700/60 transition-colors",
+        children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-xs font-bold font-mono w-14 ${getMethodColor(result.method)}`, children: result.method }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "flex-1 text-xs text-surface-200 truncate", children: result.requestName }),
+          findingCount > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "shrink-0 text-[10px] bg-red-900/50 text-red-300 rounded px-1.5 py-0.5", children: findingCount }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "shrink-0 text-[11px] text-surface-500", children: [
+            result.trace.length,
+            " cases sent"
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "shrink-0 text-surface-600 text-xs", children: open ? "▲" : "▼" })
+        ]
+      }
+    ),
+    open && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "bg-surface-900 border-t border-surface-800", children: result.trace.map((t2, i) => /* @__PURE__ */ jsxRuntimeExports.jsx(TraceRow, { trace: t2, onCopy }, i)) })
+  ] });
+}
+function FuzzResultsPanel({ report, onClear }) {
+  const { toast, show: showToast } = useToast();
+  async function copy(text) {
+    try {
+      await navigator.clipboard.writeText(text);
+      showToast("Sent request copied to clipboard.", true);
+    } catch (e) {
+      showToast(e instanceof Error ? e.message : "Copy failed.", false);
+    }
+  }
+  const withFindings = report.results.filter((r) => r.findings.length > 0);
+  const clean = report.results.filter((r) => r.findings.length === 0);
+  const clean5xx = report.totalFindings === 0;
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col h-full overflow-hidden", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-4 px-6 py-3 border-b flex-shrink-0 ${clean5xx ? "bg-emerald-950/30 border-emerald-800/50" : "bg-red-950/30 border-red-800/50"}`, children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-base font-bold ${clean5xx ? "text-emerald-400" : "text-red-400"}`, children: clean5xx ? "✓ No findings" : `✗ ${report.totalFindings} finding${report.totalFindings !== 1 ? "s" : ""}` }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-sm text-surface-400", children: [
+        report.totalCases,
+        " case",
+        report.totalCases !== 1 ? "s" : "",
+        " across ",
+        report.results.length,
+        " operation",
+        report.results.length !== 1 ? "s" : ""
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[11px] bg-surface-800 text-surface-400 px-2 py-0.5 rounded font-mono", children: report.inputSource === "spec" ? "spec" : "request body" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-[11px] bg-surface-800 text-surface-400 px-2 py-0.5 rounded font-mono", children: [
+        "seed ",
+        report.seed
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-xs text-surface-500 ml-auto", children: [
+        report.durationMs,
+        "ms"
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "button",
+        {
+          onClick: onClear,
+          className: "text-[11px] text-surface-600 hover:text-surface-300 transition-colors",
+          title: "Clear results",
+          children: "Clear"
+        }
+      )
+    ] }),
+    (report.skippedWrites > 0 || report.skippedNoBody > 0) && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1 px-6 py-2 border-b border-surface-800 bg-surface-900/60 flex-shrink-0", children: [
+      report.skippedWrites > 0 && /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[11px] text-amber-400", children: [
+        report.skippedWrites,
+        " write-method request",
+        report.skippedWrites !== 1 ? "s" : "",
+        " skipped (enable Include write methods)."
+      ] }),
+      report.skippedNoBody > 0 && /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[11px] text-surface-500", children: [
+        report.skippedNoBody,
+        " request",
+        report.skippedNoBody !== 1 ? "s" : "",
+        " had no body to fuzz."
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx(Toast, { toast }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 overflow-y-auto min-h-0 p-6", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 max-w-4xl mx-auto", children: [
+      withFindings.map((r) => /* @__PURE__ */ jsxRuntimeExports.jsx(OperationCard, { result: r, onCopy: copy }, r.requestId)),
+      clean.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded-lg border border-surface-700 bg-surface-800 px-4 py-3", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-xs text-emerald-400 font-medium mb-1.5", children: [
+          clean.length,
+          " operation",
+          clean.length !== 1 ? "s" : "",
+          " clean"
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex flex-col gap-0.5", children: clean.map((r) => /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 text-[11px]", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `font-bold font-mono w-12 shrink-0 ${getMethodColor(r.method)}`, children: r.method }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-300 truncate", children: r.requestName }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-600 ml-auto shrink-0", children: [
+            r.cases,
+            " cases"
+          ] })
+        ] }, r.requestId)) })
+      ] }),
+      report.results.some((r) => r.trace?.length) && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium mt-2", children: "All cases sent" }),
+        report.results.filter((r) => r.trace?.length).map((r) => /* @__PURE__ */ jsxRuntimeExports.jsx(TraceCard, { result: r, onCopy: copy }, r.requestId))
+      ] }),
+      report.results.length === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500 text-center mt-4", children: "No operations were fuzzed. Check that requests have a body or a matching spec operation." })
+    ] }) })
+  ] });
+}
+const { electron: electron$k } = window;
+const WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+function FuzzModal({ request, onClose }) {
+  const environments = useStore((s) => s.environments);
+  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
+  const activeCollectionId = useStore((s) => s.activeCollectionId);
+  const collections = useStore((s) => s.collections);
+  const snapshots = useStore((s) => s.contractSnapshots);
+  const activeSnapshotRelPath = useStore((s) => s.activeContractSnapshotRelPath);
+  const [cases, setCases] = reactExports.useState(40);
+  const [seed, setSeed] = reactExports.useState(1);
+  const [trace, setTrace] = reactExports.useState(true);
+  const [running, setRunning] = reactExports.useState(false);
+  const [error2, setError] = reactExports.useState(null);
+  const [report, setReport] = reactExports.useState(null);
+  const isWrite = WRITE_METHODS.has(request.method);
+  const snapshotList = Object.entries(snapshots).map(([relPath, s]) => ({ relPath, snapshot: s }));
+  const [snapshotRelPath, setSnapshotRelPath] = reactExports.useState(activeSnapshotRelPath ?? "");
+  async function run() {
+    setRunning(true);
+    setError(null);
+    setReport(null);
+    try {
+      const env = resolveEnvironmentById(environments, activeEnvironmentId);
+      const envVars = env ? Object.fromEntries(env.variables.filter((v) => v.enabled).map((v) => [v.key, v.value])) : {};
+      const collectionVars = activeCollectionId ? collections[activeCollectionId]?.data.collectionVariables ?? {} : {};
+      const result = await electron$k.fuzzContracts({
+        requests: [request],
+        envVars,
+        collectionVars,
+        specSnapshotRelPath: snapshotRelPath || void 0,
+        // No providerBaseUrl: the request is fuzzed against its own URL.
+        casesPerOperation: cases,
+        seed,
+        trace,
+        includeWrites: true
+        // a per-request run is an explicit choice to fuzz this request
+      });
+      setReport(result);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    } finally {
+      setRunning(false);
+    }
+  }
+  return /* @__PURE__ */ jsxRuntimeExports.jsx(
+    Modal,
+    {
+      onClose,
+      title: `Fuzz: ${request.name}`,
+      subtitle: `${request.method} ${request.url}`,
+      panelClassName: "bg-surface-900 border border-surface-800 rounded-lg shadow-2xl w-[720px] flex flex-col max-h-[85vh]",
+      children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col min-h-0 flex-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-end gap-3 px-4 py-3 border-b border-surface-800 flex-shrink-0 flex-wrap", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex flex-col gap-1", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Cases" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx(
+              "input",
+              {
+                type: "number",
+                min: 1,
+                value: cases,
+                onChange: (e) => setCases(Math.max(1, Number(e.target.value))),
+                className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs w-20 focus:outline-none focus:border-blue-500"
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex flex-col gap-1", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Seed" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx(
+              "input",
+              {
+                type: "number",
+                value: seed,
+                onChange: (e) => setSeed(Number(e.target.value)),
+                className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs w-20 focus:outline-none focus:border-blue-500"
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex flex-col gap-1 flex-1 min-w-[180px]", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Spec (optional)" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsxs(
+              "select",
+              {
+                value: snapshotRelPath,
+                onChange: (e) => setSnapshotRelPath(e.target.value),
+                className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs focus:outline-none focus:border-blue-500",
+                children: [
+                  /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "Request body (no spec)" }),
+                  snapshotList.map(({ relPath, snapshot }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: relPath, children: snapshot.name }, relPath))
+                ]
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-center gap-1.5 text-[11px] text-surface-400 select-none", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("input", { type: "checkbox", checked: trace, onChange: (e) => setTrace(e.target.checked) }),
+            "Record all cases"
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "button",
+            {
+              onClick: run,
+              disabled: running || !request.url,
+              className: "px-4 py-1.5 bg-blue-600 hover:bg-blue-500 disabled:bg-surface-800 disabled:text-surface-400 rounded text-sm font-medium transition-colors",
+              children: running ? "Fuzzing..." : "Run fuzz"
+            }
+          )
+        ] }),
+        isWrite && /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[11px] text-amber-400 px-4 py-2 border-b border-surface-800 flex-shrink-0", children: [
+          request.method,
+          " sends malformed writes. Point this request at a staging environment or a mock, not production."
+        ] }),
+        error2 && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[11px] text-red-400 px-4 py-2 border-b border-surface-800 flex-shrink-0", children: error2 }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 flex flex-col", children: report ? /* @__PURE__ */ jsxRuntimeExports.jsx(FuzzResultsPanel, { report, onClear: () => setReport(null) }) : /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 flex items-center justify-center text-center p-8", children: /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500", children: running ? "Sending malformed inputs..." : "Generates malformed variants of this request body and flags responses that crash (5xx) or accept invalid input. Pick a pinned spec for richer inputs, or fuzz the request body as-is." }) }) })
+      ] })
+    }
+  );
+}
 const { electron: electron$j } = window;
 const METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS", "QUERY"];
 const METHOD_COLORS = {
@@ -63293,7 +63720,7 @@ const METHOD_COLORS = {
   DELETE: "text-red-400",
   HEAD: "text-purple-400",
   OPTIONS: "text-gray-400",
-  QUERY: "text-teal-400"
+  QUERY: "text-fuchsia-400"
 };
 function deriveHookStatus(r) {
   if (r.scriptResult.postScriptError) return "error";
@@ -63325,6 +63752,7 @@ function RequestBuilder({ request }) {
     if (activeTabId) setTabRequestTab(activeTabId, t2);
   }
   const [editingName, setEditingName] = reactExports.useState(false);
+  const [showFuzz, setShowFuzz] = reactExports.useState(false);
   const [runHooks, setRunHooks] = reactExports.useState(() => localStorage.getItem("runHooks") !== "false");
   function toggleRunHooks() {
     setRunHooks((prev) => {
@@ -63343,7 +63771,7 @@ function RequestBuilder({ request }) {
     setTabHookResults(activeTabId, null);
     const collectedHookResults = [];
     try {
-      const activeEnv = activeEnvironmentId ? environments[activeEnvironmentId]?.data ?? null : null;
+      const activeEnv = resolveEnvironmentById(environments, activeEnvironmentId);
       const sessionVars = useStore.getState().sessionVars;
       const tls = collectionTls ? { ...workspaceSettings?.tls, ...collectionTls } : workspaceSettings?.tls;
       const basePayload = {
@@ -63369,7 +63797,10 @@ function RequestBuilder({ request }) {
       for (const hook of hooks.before) {
         const start = Date.now();
         try {
-          const hookEnv = activeEnvironmentId ? useStore.getState().environments[activeEnvironmentId]?.data ?? null : null;
+          const hookEnv = resolveEnvironmentById(
+            useStore.getState().environments,
+            activeEnvironmentId
+          );
           const hookSessionVars = useStore.getState().sessionVars;
           const r = await electron$j.sendRequest({
             ...basePayload,
@@ -63410,7 +63841,10 @@ function RequestBuilder({ request }) {
           });
         }
       }
-      const freshEnv = activeEnvironmentId ? useStore.getState().environments[activeEnvironmentId]?.data ?? null : null;
+      const freshEnv = resolveEnvironmentById(
+        useStore.getState().environments,
+        activeEnvironmentId
+      );
       const freshSessionVars = useStore.getState().sessionVars;
       const result = await electron$j.sendRequest({
         ...basePayload,
@@ -63435,7 +63869,10 @@ function RequestBuilder({ request }) {
       for (const hook of hooks.after) {
         const start = Date.now();
         try {
-          const hookEnv = activeEnvironmentId ? useStore.getState().environments[activeEnvironmentId]?.data ?? null : null;
+          const hookEnv = resolveEnvironmentById(
+            useStore.getState().environments,
+            activeEnvironmentId
+          );
           const hookSessionVars = useStore.getState().sessionVars;
           const r = await electron$j.sendRequest({
             ...basePayload,
@@ -63550,7 +63987,7 @@ function RequestBuilder({ request }) {
               if (activeTabId) setTabRequestTab(activeTabId, "body");
             },
             className: `px-2 py-1.5 transition-colors ${isSoap ? "bg-amber-700 text-amber-100" : "text-surface-500 hover:text-white"}`,
-            title: "SOAP — endpoint and method are derived from the WSDL",
+            title: "SOAP - endpoint and method are derived from the WSDL",
             children: "SOAP"
           }
         )
@@ -63587,7 +64024,7 @@ function RequestBuilder({ request }) {
           "button",
           {
             onClick: toggleRunHooks,
-            title: runHooks ? "Hooks enabled — click to disable" : "Hooks disabled — click to enable",
+            title: runHooks ? "Hooks enabled - click to disable" : "Hooks disabled - click to enable",
             className: `px-2 py-1.5 rounded text-xs font-medium transition-colors border ${runHooks ? "border-violet-500 text-violet-400 hover:bg-violet-500/10" : "border-surface-700 text-surface-500 hover:text-surface-300"}`,
             children: "hooks"
           }
@@ -63603,19 +64040,32 @@ function RequestBuilder({ request }) {
         )
       ] })
     ] }),
+    showFuzz && /* @__PURE__ */ jsxRuntimeExports.jsx(FuzzModal, { request, onClose: () => setShowFuzz(false) }),
     isWs ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 overflow-hidden", children: /* @__PURE__ */ jsxRuntimeExports.jsx(WebSocketPanel, { request }) }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex border-b border-surface-800 px-4 gap-0 flex-shrink-0", children: tabs.map((tab) => /* @__PURE__ */ jsxRuntimeExports.jsxs(
-        "button",
-        {
-          onClick: () => setActiveTab(tab.id),
-          className: `px-3 py-1.5 text-xs transition-colors border-b-2 -mb-px ${activeTab === tab.id ? "border-blue-500 text-white" : "border-transparent text-surface-400 hover:text-white"}`,
-          children: [
-            tab.label,
-            tab.count > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "ml-1 text-[10px] bg-surface-600 text-white rounded px-1 font-medium", children: tab.count })
-          ]
-        },
-        tab.id
-      )) }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex border-b border-surface-800 px-4 gap-0 flex-shrink-0", children: [
+        tabs.map((tab) => /* @__PURE__ */ jsxRuntimeExports.jsxs(
+          "button",
+          {
+            onClick: () => setActiveTab(tab.id),
+            className: `px-3 py-1.5 text-xs transition-colors border-b-2 -mb-px ${activeTab === tab.id ? "border-blue-500 text-white" : "border-transparent text-surface-400 hover:text-white"}`,
+            children: [
+              tab.label,
+              tab.count > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "ml-1 text-[10px] bg-surface-600 text-white rounded px-1 font-medium", children: tab.count })
+            ]
+          },
+          tab.id
+        )),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "button",
+          {
+            onClick: () => setShowFuzz(true),
+            disabled: !request.url,
+            title: "Fuzz this request with malformed inputs (opens a dialog; nothing is sent until you confirm)",
+            className: "ml-auto my-1 self-center px-2 py-0.5 rounded text-[11px] border border-surface-700 text-surface-500 hover:text-fuchsia-400 hover:border-fuchsia-500 transition-colors disabled:opacity-40",
+            children: "fuzz"
+          }
+        )
+      ] }),
       /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-4 py-3 flex-1 overflow-y-auto min-h-0", children: [
         activeTab === "params" && /* @__PURE__ */ jsxRuntimeExports.jsx(ParamsTab, { request, onChange: update }),
         activeTab === "headers" && /* @__PURE__ */ jsxRuntimeExports.jsx(HeadersTab, { request, onChange: update }),
@@ -64190,7 +64640,7 @@ function HookResultsPanel({ results }) {
             /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: t2.passed ? "✓" : "✗" }),
             /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: t2.name }),
             t2.error && /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-500 text-[10px]", children: [
-              "— ",
+              "- ",
               t2.error
             ] })
           ] }, ti)),
@@ -64593,20 +65043,6 @@ function ConsolePanel({ scriptResult }) {
     )) })
   ] });
 }
-function useToast(durationMs = 3e3) {
-  const [toast, setToast] = reactExports.useState(null);
-  const timer = reactExports.useRef(null);
-  function show(msg, ok) {
-    if (timer.current) clearTimeout(timer.current);
-    setToast({ msg, ok });
-    timer.current = setTimeout(() => setToast(null), durationMs);
-  }
-  return { toast, show };
-}
-function Toast({ toast }) {
-  if (!toast) return null;
-  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: `mx-3 mb-2 px-2 py-1.5 rounded text-[11px] flex-shrink-0 ${toast.ok ? "bg-emerald-900/50 text-emerald-300 border border-emerald-800/50" : "bg-red-900/50 text-red-300 border border-red-800/50"}`, children: toast.msg });
-}
 const { electron: electron$h } = window;
 function ResponseViewer() {
   const activeTab = useStore((s) => s.tabs.find((t2) => t2.id === s.activeTabId));
@@ -64727,7 +65163,7 @@ function ResponseViewer() {
             {
               onClick: () => setBodyView("tree"),
               className: `px-2 py-0.5 text-[10px] transition-colors ${bodyView === "tree" ? "bg-surface-700 text-white" : "text-surface-600 hover:text-white"}`,
-              title: "Interactive tree view — click values to add assertions",
+              title: "Interactive tree view - click values to add assertions",
               children: "Tree"
             }
           ),
@@ -64841,7 +65277,7 @@ function GeneratorPanel() {
     setSelectedFile(null);
     try {
       const col = collections[selectedCollectionId]?.data;
-      const env = activeEnvironmentId ? environments[activeEnvironmentId]?.data ?? null : null;
+      const env = resolveEnvironmentById(environments, activeEnvironmentId);
       const generated = await electron$g.generateCode({ collection: col, environment: env, target });
       setFiles(generated);
       setSelectedFile(generated[0]?.path ?? null);
@@ -65134,7 +65570,7 @@ function WelcomeScreen() {
     /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-surface-400 text-xs max-w-xs", children: [
       "A workspace is a ",
       /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "text-surface-500", children: ".spector" }),
-      " file. Commit it and your collections to Git — secrets are stored in your OS keychain, never on disk."
+      " file. Commit it and your collections to Git - secrets are stored in your OS keychain, never on disk."
     ] })
   ] });
 }
@@ -65145,11 +65581,11 @@ const EXAMPLES = [
     code: (pw) => `export API_SPECTOR_MASTER_KEY="${pw || "<your-password>"}"`
   },
   {
-    label: "Windows — PowerShell profile",
+    label: "Windows - PowerShell profile",
     code: (pw) => `$env:API_SPECTOR_MASTER_KEY = "${pw || "<your-password>"}"`
   },
   {
-    label: "Windows — Command Prompt (permanent)",
+    label: "Windows - Command Prompt (permanent)",
     code: (pw) => `setx API_SPECTOR_MASTER_KEY "${pw || "<your-password>"}"`
   }
 ];
@@ -65295,6 +65731,26 @@ function EnvironmentEditor({ onClose }) {
   const duplicateEnvironment = useStore((s) => s.duplicateEnvironment);
   const envList = Object.values(environments);
   const env = selectedId ? environments[selectedId]?.data ?? null : null;
+  const allEnvDatas = envList.map((e) => e.data);
+  let inheritSummary = null;
+  if (env?.extends) {
+    const parentNames = [];
+    const seen = /* @__PURE__ */ new Set([env.name]);
+    let parentName = env.extends;
+    while (parentName && !seen.has(parentName)) {
+      const parent = allEnvDatas.find((e) => e.name === parentName);
+      if (!parent) break;
+      parentNames.push(parent.name);
+      seen.add(parent.name);
+      parentName = parent.extends;
+    }
+    if (parentNames.length > 0) {
+      const ownKeys = new Set(env.variables.map((v) => v.key));
+      const resolved = resolveEnvironmentChain(env, allEnvDatas);
+      const inheritedCount = resolved.variables.filter((v) => !ownKeys.has(v.key)).length;
+      inheritSummary = `Inherits ${inheritedCount} variable${inheritedCount === 1 ? "" : "s"} from ${parentNames.join(", ")}`;
+    }
+  }
   function handleDelete(id2) {
     deleteEnvironment(id2);
     const remaining = Object.keys(environments).filter((k) => k !== id2);
@@ -65480,7 +65936,23 @@ function EnvironmentEditor({ onClose }) {
                 ),
                 /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onClose, className: "text-surface-400 hover:text-white text-lg leading-none", children: "×" })
               ] }),
-              nameError && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-red-400 mt-1", children: nameError })
+              nameError && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-red-400 mt-1", children: nameError }),
+              /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 mt-2", children: [
+                /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] uppercase tracking-wider text-surface-400 font-medium shrink-0", children: "Extends" }),
+                /* @__PURE__ */ jsxRuntimeExports.jsxs(
+                  "select",
+                  {
+                    value: env.extends ?? "",
+                    onChange: (e) => updateEnvironment(env.id, { ...env, extends: e.target.value || void 0 }),
+                    className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs focus:outline-none focus:border-blue-500",
+                    children: [
+                      /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "(none)" }),
+                      envList.filter(({ data: other }) => other.id !== env.id).map(({ data: other }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: other.name, children: other.name }, other.id))
+                    ]
+                  }
+                )
+              ] }),
+              inheritSummary && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-400 mt-1", children: inheritSummary })
             ] }),
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto", children: [
               /* @__PURE__ */ jsxRuntimeExports.jsxs("table", { className: "w-full text-xs", children: [
@@ -65601,7 +66073,7 @@ function EnvironmentEditor({ onClose }) {
                           "button",
                           {
                             onClick: () => cycleSource(idx),
-                            title: mode === "plain" ? "Plain text — click to switch to encrypted secret" : mode === "encrypted" ? "Encrypted secret — click to switch to env var ref" : "OS env var reference — click to switch to plain text",
+                            title: mode === "plain" ? "Plain text - click to switch to encrypted secret" : mode === "encrypted" ? "Encrypted secret - click to switch to env var ref" : "OS env var reference - click to switch to plain text",
                             className: "flex items-center justify-center gap-1 px-1.5 py-0.5 rounded border transition-colors text-[10px] font-medium w-16 shrink-0 border-surface-700 hover:border-surface-500",
                             children: [
                               mode === "plain" && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: "abc" }),
@@ -65639,14 +66111,14 @@ function EnvironmentEditor({ onClose }) {
               ] }),
               /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] text-surface-400", children: [
                 /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-amber-400", children: "🔒 Encrypted" }),
-                " — AES-256-GCM, key from",
+                ": AES-256-GCM, key from",
                 " ",
                 /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "text-surface-200", children: "API_SPECTOR_MASTER_KEY" }),
                 "."
               ] }),
               /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] text-surface-400", children: [
                 /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-blue-400", children: "$ Env var" }),
-                " — read from",
+                ": read from",
                 " ",
                 /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "text-surface-200", children: "process.env" }),
                 " at send-time. Ideal for CI/CD."
@@ -65693,8 +66165,9 @@ function EnvironmentBar({ inline = false }) {
   const setActiveEnvironment = useStore((s) => s.setActiveEnvironment);
   const [showEditor, setShowEditor] = reactExports.useState(false);
   const [pendingEnvId, setPendingEnvId] = reactExports.useState(null);
+  const defaultEnvName = useStore((s) => s.workspace?.settings?.defaultEnvironment);
   const envList = Object.values(environments);
-  const activeEnv = activeEnvironmentId ? environments[activeEnvironmentId]?.data : null;
+  const activeEnv = useActiveEnvironment();
   const varCount = activeEnv?.variables.filter((v) => v.enabled).length ?? 0;
   async function handleEnvChange(id2) {
     if (id2) {
@@ -65729,7 +66202,7 @@ function EnvironmentBar({ inline = false }) {
         style: { color: "var(--text-primary)" },
         children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "No env" }),
-          envList.map(({ data: env }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: env.id, children: env.name }, env.id))
+          envList.map(({ data: env }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: env.id, children: defaultEnvName && env.name.toLowerCase() === defaultEnvName.toLowerCase() ? `${env.name} (default)` : env.name }, env.id))
         ]
       }
     ),
@@ -65760,12 +66233,14 @@ const ZOOM_STEPS = [0.75, 0.9, 1, 1.1, 1.25, 1.5];
 function WorkspaceSettingsModal({ onClose }) {
   const workspace = useStore((s) => s.workspace);
   const updateWorkspaceSettings = useStore((s) => s.updateWorkspaceSettings);
+  const environments = useStore((s) => s.environments);
   const theme2 = useStore((s) => s.theme);
   const zoom = useStore((s) => s.zoom);
   const setTheme = useStore((s) => s.setTheme);
   const setZoom = useStore((s) => s.setZoom);
   const existing = workspace?.settings ?? {};
-  const [activeTab, setActiveTab] = reactExports.useState("appearance");
+  const [activeTab, setActiveTab] = reactExports.useState("general");
+  const [defaultEnvironment, setDefaultEnvironment] = reactExports.useState(existing.defaultEnvironment ?? "");
   const [proxyUrl, setProxyUrl] = reactExports.useState(existing.proxy?.url ?? "");
   const [proxyUser, setProxyUser] = reactExports.useState(existing.proxy?.auth?.username ?? "");
   const [proxyPass, setProxyPass] = reactExports.useState(existing.proxy?.auth?.password ?? "");
@@ -65776,6 +66251,7 @@ function WorkspaceSettingsModal({ onClose }) {
     existing.tls?.rejectUnauthorized !== false
     // default true
   );
+  const [dashboardUrl, setDashboardUrl] = reactExports.useState(existing.dashboardUrl ?? "");
   const [patterns, setPatterns] = reactExports.useState(
     existing.piiMaskPatterns ?? DEFAULT_PII_PATTERNS
   );
@@ -65807,6 +66283,10 @@ function WorkspaceSettingsModal({ onClose }) {
       rejectUnauthorized
     };
     settings.piiMaskPatterns = patterns;
+    if (dashboardUrl.trim()) settings.dashboardUrl = dashboardUrl.trim();
+    else delete settings.dashboardUrl;
+    if (defaultEnvironment) settings.defaultEnvironment = defaultEnvironment;
+    else delete settings.defaultEnvironment;
     updateWorkspaceSettings(settings);
     const updated = useStore.getState().workspace;
     if (updated) await electron$b.saveWorkspace(updated);
@@ -65818,10 +66298,12 @@ function WorkspaceSettingsModal({ onClose }) {
     setZoom(next);
   }
   const tabs = [
+    { id: "general", label: "General" },
     { id: "appearance", label: "Appearance" },
     { id: "proxy", label: "Proxy" },
     { id: "tls", label: "TLS / Certificates" },
-    { id: "privacy", label: "Privacy" }
+    { id: "privacy", label: "Privacy" },
+    { id: "contracts", label: "Contracts" }
   ];
   return /* @__PURE__ */ jsxRuntimeExports.jsxs(
     Modal,
@@ -65841,6 +66323,24 @@ function WorkspaceSettingsModal({ onClose }) {
           t2.id
         )) }),
         /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto px-4 py-4 text-xs flex flex-col gap-4", children: [
+          activeTab === "general" && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
+              /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Default environment" }),
+              /* @__PURE__ */ jsxRuntimeExports.jsxs(
+                "select",
+                {
+                  value: defaultEnvironment,
+                  onChange: (e) => setDefaultEnvironment(e.target.value),
+                  className: "bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 focus:outline-none focus:border-blue-500",
+                  children: [
+                    /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "(none)" }),
+                    Object.values(environments).map(({ data: env }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: env.name, children: env.name }, env.id))
+                  ]
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-600 text-[11px]", children: "CLI runs without --environment use this environment, and the app selects it when no environment is active." })
+          ] }),
           activeTab === "appearance" && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
               /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Theme" }),
@@ -65930,6 +66430,21 @@ function WorkspaceSettingsModal({ onClose }) {
               ] })
             ] })
           ] }),
+          activeTab === "contracts" && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
+              /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Dashboard URL (optional)" }),
+              /* @__PURE__ */ jsxRuntimeExports.jsx(
+                "input",
+                {
+                  value: dashboardUrl,
+                  onChange: (e) => setDashboardUrl(e.target.value),
+                  placeholder: "http://localhost:8080",
+                  className: "bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 focus:outline-none focus:border-blue-500 font-mono placeholder-surface-600"
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-600 text-[11px]", children: 'Where your contract dashboard is served (api-spector contract report --serve, locally or as a docker container). Adds an "Open dashboard" link to the contract results panel. The link is view-only: recorded results reach the dashboard through the workspace files, not through this URL.' })
+          ] }),
           activeTab === "tls" && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
               /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "CA Certificate path" }),
@@ -66467,7 +66982,7 @@ function ImportModal({ onImport, onClose }) {
         children: [
           /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs("h2", { className: "text-sm font-semibold text-surface-100", children: [
-              "Import OpenAPI — ",
+              "Import OpenAPI - ",
               previewCol.name
             ] }),
             /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -67515,7 +68030,7 @@ function RunnerModal() {
         return { ...item, request: req };
       });
     }
-    const env = selectedEnvId ? environments[selectedEnvId]?.data ?? null : null;
+    const env = resolveEnvironmentById(environments, selectedEnvId || null);
     setRunnerResults(items2.map((item) => ({
       requestId: item.request.id,
       name: item.request.name,
@@ -67582,7 +68097,7 @@ function RunnerModal() {
                   onChange: (e) => setSelectedEnvId(e.target.value),
                   className: "text-xs bg-surface-800 border border-surface-700 rounded px-2 py-1 focus:outline-none focus:border-blue-500",
                   children: [
-                    /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "— No environment —" }),
+                    /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "(no environment)" }),
                     Object.values(environments).map(({ data: env }) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: env.id, children: env.name }, env.id))
                   ]
                 }
@@ -67909,7 +68424,7 @@ function CollectionPanel() {
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto px-6 py-4", children: [
       activeTab === "data" && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 text-xs", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-surface-600 text-[11px]", children: [
-          "Define variables here — each row runs the entire collection once with those values injected. Columns become ",
+          "Define variables here - each row runs the entire collection once with those values injected. Columns become ",
           /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "text-surface-500", children: "{{variable}}" }),
           " placeholders."
         ] }),
@@ -67922,14 +68437,14 @@ function CollectionPanel() {
             {
               onClick: () => csvFileRef.current?.click(),
               className: "px-2.5 py-1 bg-surface-700 hover:bg-surface-600 rounded transition-colors",
-              title: "Import CSV — first row is column headers",
+              title: "Import CSV - first row is column headers",
               children: "↑ Import CSV"
             }
           ),
           hasColumns && iterCount > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: exportCSV, className: "px-2.5 py-1 bg-surface-700 hover:bg-surface-600 rounded transition-colors", children: "↓ Export CSV" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("input", { ref: csvFileRef, type: "file", accept: ".csv,text/csv", className: "hidden", onChange: importCSV })
         ] }),
-        hasColumns && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-500", children: iterCount === 0 ? "No rows yet — add rows or import a CSV." : `${iterCount} iteration${iterCount !== 1 ? "s" : ""} · columns: ${ds.columns.join(", ")}` }),
+        hasColumns && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-500", children: iterCount === 0 ? "No rows yet - add rows or import a CSV." : `${iterCount} iteration${iterCount !== 1 ? "s" : ""} · columns: ${ds.columns.join(", ")}` }),
         hasColumns ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "overflow-x-auto", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("table", { className: "w-full border-collapse text-xs", children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("thead", { children: /* @__PURE__ */ jsxRuntimeExports.jsxs("tr", { className: "border-b border-surface-700", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "w-8 px-2 py-1 text-surface-600 font-normal text-left", children: "#" }),
@@ -67960,7 +68475,7 @@ function CollectionPanel() {
               ) }, ci)),
               /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "px-1 py-1", children: /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: () => removeRow(ri), className: "text-surface-400 hover:text-red-400 opacity-0 group-hover:opacity-100 transition-all", children: "×" }) })
             ] }, ri)),
-            iterCount === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("tr", { children: /* @__PURE__ */ jsxRuntimeExports.jsx("td", { colSpan: ds.columns.length + 2, className: "px-2 py-3 text-surface-600 text-center", children: 'No rows — click "+ Row" or import a CSV' }) })
+            iterCount === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("tr", { children: /* @__PURE__ */ jsxRuntimeExports.jsx("td", { colSpan: ds.columns.length + 2, className: "px-2 py-3 text-surface-600 text-center", children: 'No rows - click "+ Row" or import a CSV' }) })
           ] })
         ] }) }) : /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-8 text-surface-600", children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { children: "No columns defined." }),
@@ -68570,7 +69085,7 @@ function HitRow({ hit, matched }) {
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-600 text-[10px] w-3 shrink-0", children: open ? "▾" : "▸" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `font-bold w-16 shrink-0 text-xs ${getMethodColor(hit.method)}`, children: hit.method }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "flex-1 truncate text-surface-200", title: hit.path, children: hit.path }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "w-32 shrink-0 truncate text-surface-600 text-xs font-sans", title: matched?.description ?? matched?.path ?? "", children: unmatched ? /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-red-400", children: "no match" }) : matched?.description || matched?.path || "—" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "w-32 shrink-0 truncate text-surface-600 text-xs font-sans", title: matched?.description ?? matched?.path ?? "", children: unmatched ? /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-red-400", children: "no match" }) : matched?.description || matched?.path || "-" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `w-12 text-right shrink-0 text-xs ${hit.status < 300 ? "text-emerald-400" : hit.status < 400 ? "text-amber-400" : "text-red-400"}`, children: hit.status }),
           /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "w-14 text-right shrink-0 text-surface-600 text-xs", children: [
             hit.durationMs,
@@ -68951,7 +69466,7 @@ function RecorderPanel({ onImportMock, onClose, defaultTargetMockId }) {
               onChange: (e) => setImportTarget(e.target.value),
               className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-[11px] text-surface-200 focus:outline-none focus:border-blue-500",
               children: [
-                /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "new", children: "— New mock server —" }),
+                /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "new", children: "(new mock server)" }),
                 mockList.map((entry) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: entry.data.id, children: entry.data.name }, entry.data.id))
               ]
             }
@@ -69040,7 +69555,7 @@ function EntryDetail({ entry }) {
   const sc = statusColor$1(entry.response.status);
   const prettyBody = (raw) => {
     if (!raw) return "";
-    if (raw.startsWith("base64:")) return "[binary content — base64 encoded]";
+    if (raw.startsWith("base64:")) return "[binary content - base64 encoded]";
     try {
       return JSON.stringify(JSON.parse(raw), null, 2);
     } catch {
@@ -69082,7 +69597,7 @@ function EntryDetail({ entry }) {
     tab === "response" && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx(Section, { label: "Headers", children: /* @__PURE__ */ jsxRuntimeExports.jsx(HeadersTable, { headers: entry.response.headers }) }),
       entry.response.body && /* @__PURE__ */ jsxRuntimeExports.jsx(Section, { label: "Body", children: /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "font-mono text-[11px] whitespace-pre-wrap break-all text-surface-200 bg-surface-900 border border-surface-700 rounded p-3 max-h-72 overflow-y-auto", children: prettyBody(entry.response.body) }) }),
-      entry.response.binary && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-yellow-400", children: "Binary response — body stored as base64" })
+      entry.response.binary && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-yellow-400", children: "Binary response - body stored as base64" })
     ] })
   ] });
 }
@@ -69104,7 +69619,7 @@ function HeadersTable({ headers }) {
   ] }, k)) });
 }
 const { electron: electron$3 } = window;
-function ContractPanel() {
+function ContractPanel({ fuzzReport, setFuzzReport }) {
   const collections = useStore((s) => s.collections);
   const environments = useStore((s) => s.environments);
   const activeEnvId = useStore((s) => s.activeEnvironmentId);
@@ -69125,18 +69640,28 @@ function ContractPanel() {
   const [running, setRunning] = reactExports.useState(false);
   const [capturing, setCapturing] = reactExports.useState(false);
   const [error2, setError] = reactExports.useState(null);
+  const [casesPerOperation, setCasesPerOperation] = reactExports.useState(40);
+  const [seed, setSeed] = reactExports.useState(1);
+  const [includeWrites, setIncludeWrites] = reactExports.useState(false);
+  const [strictStatus, setStrictStatus] = reactExports.useState(false);
+  const [checkResponses, setCheckResponses] = reactExports.useState(false);
+  const [trace, setTrace] = reactExports.useState(false);
   const snapshotList = Object.entries(snapshots).map(([relPath, snapshot]) => ({ relPath, snapshot })).sort((a, b) => b.snapshot.capturedAt.localeCompare(a.snapshot.capturedAt));
   const activeSnapshot = activeSnapshotRelPath ? snapshots[activeSnapshotRelPath] ?? null : null;
   const allRequests = Object.values(collections).flatMap((c) => Object.values(c.data.requests));
   const contractRequests = allRequests.filter(
     (r) => r.contract && (r.contract.statusCode !== void 0 || r.contract.bodySchema || r.contract.bodyMatcher || r.contract.headers?.length)
   );
+  const isFuzz = mode === "fuzz";
   const needsSpec = mode === "provider" || mode === "bidirectional";
+  const showSpec = needsSpec || isFuzz;
   const collectionVars = activeCollId ? collections[activeCollId]?.data.collectionVariables ?? {} : {};
-  const envVars = activeEnvId ? Object.fromEntries(
-    (environments[activeEnvId]?.data.variables ?? []).filter((v) => v.enabled).map((v) => [v.key, v.value])
+  const resolvedEnv = resolveEnvironmentById(environments, activeEnvId);
+  const envVars = resolvedEnv ? Object.fromEntries(
+    resolvedEnv.variables.filter((v) => v.enabled).map((v) => [v.key, v.value])
   ) : {};
   async function runContracts() {
+    if (mode === "fuzz") return;
     if (needsSpec && !specUrl.trim() && !activeSnapshotRelPath) {
       setError("Provide an OpenAPI spec URL or pick a pinned snapshot for provider / bi-directional mode.");
       return;
@@ -69161,7 +69686,44 @@ function ContractPanel() {
         providerBaseUrl: providerBaseUrl.trim() || void 0,
         stateHandlerUrl: stateHandlerUrl.trim() || void 0
       });
-      setReport(result);
+      const activeSnap = activeSnapshotRelPath ? snapshots[activeSnapshotRelPath] : void 0;
+      const specLabel = activeSnap ? `${activeSnap.name}${activeSnap.specVersion ? ` v${activeSnap.specVersion}` : ""} (pinned)` : specUrl.trim() || void 0;
+      setReport(result, {
+        spec: needsSpec ? specLabel : void 0,
+        provider: providerBaseUrl.trim() || void 0
+      });
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    } finally {
+      setRunning(false);
+    }
+  }
+  async function runFuzz() {
+    if (!providerBaseUrl.trim()) {
+      setError("Provide a provider base URL (e.g. http://localhost:3000) to fuzz against.");
+      return;
+    }
+    setRunning(true);
+    setError(null);
+    setFuzzReport(null);
+    try {
+      const result = await electron$3.fuzzContracts({
+        requests: allRequests,
+        // fuzz every request in the workspace, like provider mode
+        envVars,
+        collectionVars,
+        specUrl: specUrl.trim() || void 0,
+        specSnapshotRelPath: activeSnapshotRelPath ?? void 0,
+        providerBaseUrl: providerBaseUrl.trim(),
+        requestBaseUrl: requestBaseUrl.trim() || void 0,
+        casesPerOperation,
+        seed,
+        includeWrites,
+        strictStatus,
+        checkResponses,
+        trace
+      });
+      setFuzzReport(result);
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
     } finally {
@@ -69205,21 +69767,23 @@ function ContractPanel() {
         ["consumer", "Consumer"],
         ["provider", "Provider"],
         ["provider-live", "Live"],
-        ["bidirectional", "Bi-dir"]
+        ["bidirectional", "Bi-dir"],
+        ["fuzz", "Fuzz"]
       ].map(([m, label]) => /* @__PURE__ */ jsxRuntimeExports.jsx(
         "button",
         {
           onClick: () => {
             setMode(m);
             setReport(null);
+            setFuzzReport(null);
           },
           className: `flex-1 py-1 text-[10px] font-semibold rounded transition-colors ${mode === m ? "bg-blue-600 text-white" : "text-surface-400 hover:text-surface-200"}`,
           children: label
         },
         m
       )) }),
-      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-500 leading-relaxed", children: mode === "consumer" ? "Sends requests to the real provider and validates each response against the contract defined in the Contract tab." : mode === "provider" ? "Static analysis — validates that your requests conform to the provider's published OpenAPI spec (no HTTP calls)." : mode === "provider-live" ? "Replays each contract against a running provider, seeding provider states first. The real provider verification." : "Checks static schema compatibility between consumer contracts and provider spec, then verifies live responses." }),
-      mode === "provider-live" && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-500 leading-relaxed", children: mode === "consumer" ? "Sends requests to the real provider and validates each response against the contract defined in the Contract tab." : mode === "provider" ? "Static analysis: validates that your requests conform to the provider's published OpenAPI spec (no HTTP calls)." : mode === "provider-live" ? "Replays each contract against a running provider, seeding provider states first. The real provider verification." : mode === "fuzz" ? "Sends malformed inputs generated from the spec (or, with no spec, the request body) and flags responses that crash (5xx) or accept invalid input." : "Checks static schema compatibility between consumer contracts and provider spec, then verifies live responses." }),
+      (mode === "provider-live" || isFuzz) && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: "Provider base URL" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -69231,9 +69795,9 @@ function ContractPanel() {
               className: "w-full text-xs bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 focus:outline-none focus:border-blue-500 font-mono placeholder-surface-600"
             }
           ),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 mt-1 leading-relaxed", children: "Each request is rebased onto this origin before being replayed against the live provider." })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 mt-1 leading-relaxed", children: isFuzz ? "Required. Each fuzzed request is rebased onto this origin before it is sent." : "Each request is rebased onto this origin before being replayed against the live provider." })
         ] }),
-        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
+        mode === "provider-live" && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: [
             "State handler URL ",
             /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "normal-case text-surface-600", children: "(optional)" })
@@ -69256,9 +69820,12 @@ function ContractPanel() {
           ] })
         ] })
       ] }),
-      needsSpec && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
+      showSpec && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: "Spec version" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: [
+            "Spec version ",
+            isFuzz && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "normal-case text-surface-600", children: "(optional)" })
+          ] }),
           /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex gap-1", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs(
               "select",
@@ -69271,7 +69838,7 @@ function ContractPanel() {
                   /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "Live URL (latest from provider)" }),
                   snapshotList.map(({ relPath, snapshot }) => /* @__PURE__ */ jsxRuntimeExports.jsxs("option", { value: relPath, children: [
                     snapshot.name,
-                    snapshot.specVersion ? "" : ` — ${snapshot.capturedAt.slice(0, 10)}`
+                    snapshot.specVersion ? "" : ` - ${snapshot.capturedAt.slice(0, 10)}`
                   ] }, relPath))
                 ]
               }
@@ -69289,7 +69856,7 @@ function ContractPanel() {
           activeSnapshot && /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[10px] text-surface-600 mt-1 font-mono truncate", children: [
             "Captured ",
             activeSnapshot.capturedAt.slice(0, 19).replace("T", " "),
-            " — sha ",
+            " - sha ",
             activeSnapshot.sha256.slice(0, 8)
           ] })
         ] }),
@@ -69335,15 +69902,93 @@ function ContractPanel() {
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 mt-1 leading-relaxed", children: "If your requests point at a different host than the spec, enter that host here so paths match correctly." })
         ] })
       ] }),
+      isFuzz && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex gap-2", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: "Cases per operation" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx(
+              "input",
+              {
+                type: "number",
+                min: 1,
+                value: casesPerOperation,
+                onChange: (e) => setCasesPerOperation(Math.max(1, Number(e.target.value) || 1)),
+                className: "w-full text-xs bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 focus:outline-none focus:border-blue-500 font-mono"
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("label", { className: "text-[10px] text-surface-500 uppercase tracking-wider font-medium block mb-1", children: "Seed" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx(
+              "input",
+              {
+                type: "number",
+                value: seed,
+                onChange: (e) => setSeed(Number(e.target.value) || 0),
+                className: "w-full text-xs bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 focus:outline-none focus:border-blue-500 font-mono"
+              }
+            )
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-center gap-2 text-[11px] text-surface-300 cursor-pointer", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "input",
+            {
+              type: "checkbox",
+              checked: includeWrites,
+              onChange: (e) => setIncludeWrites(e.target.checked),
+              className: "accent-blue-600"
+            }
+          ),
+          "Include write methods (POST/PUT/PATCH/DELETE)"
+        ] }),
+        includeWrites && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-amber-400 leading-relaxed -mt-1 ml-6", children: "This sends malformed writes to the provider. Target staging or a mock, not production." }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-center gap-2 text-[11px] text-surface-300 cursor-pointer", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "input",
+            {
+              type: "checkbox",
+              checked: strictStatus,
+              onChange: (e) => setStrictStatus(e.target.checked),
+              className: "accent-blue-600"
+            }
+          ),
+          "Strict status"
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-center gap-2 text-[11px] text-surface-300 cursor-pointer", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "input",
+            {
+              type: "checkbox",
+              checked: checkResponses,
+              onChange: (e) => setCheckResponses(e.target.checked),
+              className: "accent-blue-600"
+            }
+          ),
+          "Check response schemas"
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-center gap-2 text-[11px] text-surface-300 cursor-pointer", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "input",
+            {
+              type: "checkbox",
+              checked: trace,
+              onChange: (e) => setTrace(e.target.checked),
+              className: "accent-blue-600"
+            }
+          ),
+          "Record all cases"
+        ] })
+      ] }),
       /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between", children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] text-surface-500", children: mode === "provider" ? `${allRequests.length} request${allRequests.length !== 1 ? "s" : ""}` : `${contractRequests.length} contract${contractRequests.length !== 1 ? "s" : ""} defined` }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] text-surface-500", children: mode === "provider" || isFuzz ? `${allRequests.length} request${allRequests.length !== 1 ? "s" : ""}` : `${contractRequests.length} contract${contractRequests.length !== 1 ? "s" : ""} defined` }),
         /* @__PURE__ */ jsxRuntimeExports.jsx(
           "button",
           {
-            onClick: runContracts,
-            disabled: running || needsSpec && !specUrl.trim() && !activeSnapshotRelPath || mode === "provider-live" && !providerBaseUrl.trim(),
+            onClick: isFuzz ? runFuzz : runContracts,
+            disabled: running || needsSpec && !specUrl.trim() && !activeSnapshotRelPath || (mode === "provider-live" || isFuzz) && !providerBaseUrl.trim(),
             className: "px-3 py-1 text-xs bg-blue-700 hover:bg-blue-600 disabled:bg-surface-800 disabled:text-surface-600 rounded transition-colors font-medium",
-            children: running ? "Running…" : "Run"
+            children: running ? "Running…" : isFuzz ? "Run fuzz" : "Run"
           }
         )
       ] }),
@@ -69351,30 +69996,33 @@ function ContractPanel() {
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto min-h-0 p-3", children: [
       running && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500 text-center mt-4", children: "Running…" }),
-      !report && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center h-full gap-2 text-center", children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500", children: "Configure a mode above and click Run." }),
-        mode !== "provider" && contractRequests.length === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 max-w-[180px]", children: "Define a contract on a request via the Contract tab first." })
+      isFuzz ? !fuzzReport && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center h-full gap-2 text-center", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500", children: "Configure fuzzing above and click Run fuzz." }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 max-w-[180px]", children: "Fuzzing needs a provider base URL. A spec is optional: without one, request bodies are mutated." })
+      ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+        !report && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center h-full gap-2 text-center", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500", children: "Configure a mode above and click Run." }),
+          mode !== "provider" && contractRequests.length === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 max-w-[180px]", children: "Define a contract on a request via the Contract tab first." })
+        ] }),
+        report && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-2 px-3 py-2 rounded-lg border text-xs ${report.failed === 0 ? "bg-emerald-800/30 border-emerald-400/50 text-emerald-400" : "bg-red-900/30 border-red-700 text-red-300"}`, children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-semibold", children: report.failed === 0 ? "✓ All passed" : `✗ ${report.failed} failed` }),
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-500 ml-auto", children: [
+            report.passed,
+            "/",
+            report.total
+          ] })
+        ] })
       ] }),
-      report && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-2 px-3 py-2 rounded-lg border text-xs ${report.failed === 0 ? "bg-emerald-800/30 border-emerald-400/50 text-emerald-400" : "bg-red-900/30 border-red-700 text-red-300"}`, children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-semibold", children: report.failed === 0 ? "✓ All passed" : `✗ ${report.failed} failed` }),
+      isFuzz && fuzzReport && !running && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-2 px-3 py-2 rounded-lg border text-xs ${fuzzReport.totalFindings === 0 ? "bg-emerald-800/30 border-emerald-400/50 text-emerald-400" : "bg-red-900/30 border-red-700 text-red-300"}`, children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-semibold", children: fuzzReport.totalFindings === 0 ? "✓ No findings" : `✗ ${fuzzReport.totalFindings} finding${fuzzReport.totalFindings !== 1 ? "s" : ""}` }),
         /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-500 ml-auto", children: [
-          report.passed,
-          "/",
-          report.total
+          fuzzReport.totalCases,
+          " cases"
         ] })
       ] })
     ] })
   ] });
 }
-const METHOD_COLOR = {
-  GET: "text-emerald-400",
-  POST: "text-blue-400",
-  PUT: "text-amber-400",
-  PATCH: "text-orange-400",
-  DELETE: "text-red-400",
-  HEAD: "text-purple-400",
-  OPTIONS: "text-gray-400"
-};
 function statusColor(code2) {
   const d = String(code2)[0];
   return d === "2" ? "text-emerald-400" : d === "3" ? "text-amber-400" : "text-red-400";
@@ -69408,7 +70056,7 @@ function ResultCard({ result }) {
         className: `w-full flex items-center gap-3 px-4 py-3 text-left transition-colors ${result.passed ? "bg-surface-800 hover:bg-surface-750" : "bg-red-950/30 hover:bg-red-950/50"}`,
         children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-[10px] font-bold px-2 py-0.5 rounded ${result.passed ? "bg-emerald-900/50 text-emerald-400" : "bg-red-900/50 text-red-400"}`, children: result.passed ? "PASS" : "FAIL" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-xs font-bold font-mono w-14 ${METHOD_COLOR[result.method] ?? "text-gray-400"}`, children: result.method }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-xs font-bold font-mono w-14 ${getMethodColor(result.method)}`, children: result.method }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "flex-1 text-sm text-white truncate", children: result.requestName }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "hidden lg:block text-[11px] text-surface-500 font-mono truncate max-w-[260px]", children: result.url }),
           result.actualStatus !== void 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `shrink-0 text-xs font-mono font-bold ${statusColor(result.actualStatus)}`, children: result.actualStatus }),
@@ -69430,7 +70078,37 @@ function ResultCard({ result }) {
 }
 function ContractResultsPanel() {
   const report = useStore((s) => s.lastContractReport);
+  const runMeta = useStore((s) => s.lastContractRunMeta);
   const clearReport = useStore((s) => s.setLastContractReport);
+  const activeCollId = useStore((s) => s.activeCollectionId);
+  const collections = useStore((s) => s.collections);
+  const dashboardUrl = useStore((s) => s.workspace?.settings?.dashboardUrl);
+  const [recordOpen, setRecordOpen] = reactExports.useState(false);
+  const [pacticipant, setPacticipant] = reactExports.useState("");
+  const [version, setVersion] = reactExports.useState("");
+  const [saving, setSaving] = reactExports.useState(false);
+  const { toast, show: showToast } = useToast();
+  async function recordRun() {
+    if (!report) return;
+    if (!pacticipant.trim() || !version.trim()) {
+      showToast("Pacticipant and version are required to record.", false);
+      return;
+    }
+    setSaving(true);
+    try {
+      await window.electron.recordContractResult({
+        pacticipant: pacticipant.trim(),
+        version: version.trim(),
+        report
+      });
+      showToast(`Recorded ${pacticipant.trim()}@${version.trim()} for the dashboard and can-i-deploy.`, true);
+      setRecordOpen(false);
+    } catch (e) {
+      showToast(e instanceof Error ? e.message : String(e), false);
+    } finally {
+      setSaving(false);
+    }
+  }
   if (!report) {
     return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center h-full gap-3 text-center", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-4xl opacity-30", children: "🔬" }),
@@ -69453,10 +70131,36 @@ function ContractResultsPanel() {
         report.durationMs,
         "ms"
       ] }),
+      dashboardUrl && /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "button",
+        {
+          onClick: () => window.electron.openExternal(dashboardUrl),
+          className: "text-[11px] text-surface-500 hover:text-surface-200 transition-colors",
+          title: `Open the contract dashboard (${dashboardUrl})`,
+          children: "Open dashboard"
+        }
+      ),
       /* @__PURE__ */ jsxRuntimeExports.jsx(
         "button",
         {
-          onClick: () => window.electron.exportContractReportHtml(report),
+          onClick: () => {
+            if (!recordOpen && !pacticipant) {
+              setPacticipant(activeCollId ? collections[activeCollId]?.data.name ?? "" : "");
+            }
+            setRecordOpen((o) => !o);
+          },
+          className: "text-[11px] text-surface-500 hover:text-surface-200 transition-colors",
+          title: "Record this run for the contract dashboard and can-i-deploy gate",
+          children: "Record"
+        }
+      ),
+      /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "button",
+        {
+          onClick: () => window.electron.exportContractReportHtml(report, {
+            spec: runMeta?.spec,
+            provider: runMeta?.provider
+          }),
           className: "text-[11px] text-surface-500 hover:text-surface-200 transition-colors",
           title: "Export a self-contained HTML report",
           children: "Export HTML"
@@ -69472,6 +70176,37 @@ function ContractResultsPanel() {
         }
       )
     ] }),
+    recordOpen && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 px-6 py-2 border-b border-surface-800 bg-surface-900/60 flex-shrink-0", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "input",
+        {
+          value: pacticipant,
+          onChange: (e) => setPacticipant(e.target.value),
+          placeholder: "pacticipant (e.g. web-app)",
+          className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs w-48 focus:outline-none focus:border-blue-500"
+        }
+      ),
+      /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "input",
+        {
+          value: version,
+          onChange: (e) => setVersion(e.target.value),
+          placeholder: "version (e.g. 1.4.0)",
+          className: "bg-surface-800 border border-surface-700 rounded px-2 py-1 text-xs w-32 focus:outline-none focus:border-blue-500"
+        }
+      ),
+      /* @__PURE__ */ jsxRuntimeExports.jsx(
+        "button",
+        {
+          onClick: recordRun,
+          disabled: saving,
+          className: "text-[11px] px-3 py-1 rounded bg-blue-600 hover:bg-blue-500 text-white font-semibold disabled:opacity-50 transition-colors",
+          children: saving ? "Recording..." : "Record result"
+        }
+      ),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] text-surface-500", children: "Writes to contracts/results/ in the workspace; the dashboard picks it up on refresh." })
+    ] }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx(Toast, { toast }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 overflow-y-auto min-h-0 p-6", children: (() => {
       const failed = report.results.filter((r) => !r.passed);
       const passed = report.results.filter((r) => r.passed);
@@ -69571,7 +70306,7 @@ ${secretHint}  - script: ${runCmd}
     condition: always()
 `;
   }
-  return `# Unsupported platform — adapt as needed
+  return `# Unsupported platform - adapt as needed
 # ${runCmd}
 `;
 }
@@ -69749,7 +70484,7 @@ function ChangesTab({ status, onRefresh }) {
       status.conflicted.length,
       " merge conflict",
       status.conflicted.length !== 1 ? "s" : "",
-      " — resolve below before committing"
+      " - resolve below before committing"
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsx(Toast, { toast }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 min-h-0 overflow-y-auto", children: [
@@ -70144,7 +70879,7 @@ function BranchesTab({ onRefresh }) {
         {
           onClick: () => checkout(b.name, false),
           className: "w-full flex items-center gap-2 px-3 py-1.5 text-left text-xs text-surface-400 hover:bg-surface-800/50 hover:text-surface-200 transition-colors",
-          title: "Click to check out — creates a local tracking branch if needed",
+          title: "Click to check out - creates a local tracking branch if needed",
           children: [
             /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "w-3" }),
             /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-mono truncate", children: b.name })
@@ -70305,7 +71040,7 @@ function CiTab() {
             onChange: (e) => setEnvId(e.target.value),
             className: "bg-surface-800 border border-surface-700 rounded px-2 py-1.5 text-xs focus:outline-none focus:border-blue-500",
             children: [
-              /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "— none —" }),
+              /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: "", children: "(none)" }),
               envList.map((e) => /* @__PURE__ */ jsxRuntimeExports.jsx("option", { value: e.data.id, children: e.data.name }, e.data.id))
             ]
           }
@@ -70662,7 +71397,8 @@ const TAB_METHOD_COLORS = {
   PATCH: "text-orange-400",
   DELETE: "text-red-400",
   HEAD: "text-purple-400",
-  OPTIONS: "text-gray-400"
+  OPTIONS: "text-gray-400",
+  QUERY: "text-fuchsia-400"
 };
 const TabRow = React$2.memo(function TabRow2({
   tabId,
@@ -70730,6 +71466,7 @@ function App() {
   const setCommandPaletteOpen = useStore((s) => s.setCommandPaletteOpen);
   const setWsStatus = useStore((s) => s.setWsStatus);
   const addWsMessage = useStore((s) => s.addWsMessage);
+  const [fuzzReport, setFuzzReport] = reactExports.useState(null);
   const [sidebarOpen, setSidebarOpen] = reactExports.useState(true);
   const [responseOpen, setResponseOpen] = reactExports.useState(false);
   const [docsModalOpen, setDocsModalOpen] = reactExports.useState(false);
@@ -70831,7 +71568,7 @@ function App() {
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { style: { color: "#6aa3c8" }, children: "Spector" }),
       /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "ml-2 text-[10px] font-normal opacity-50", children: [
         "v",
-        "0.3.5"
+        "0.3.6"
       ] }),
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "mx-2 opacity-30", children: "·" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -70920,7 +71657,7 @@ function App() {
               )
             ] })
           ] }),
-          sidebarTab === "collections" ? /* @__PURE__ */ jsxRuntimeExports.jsx(CollectionTree, {}) : sidebarTab === "history" ? /* @__PURE__ */ jsxRuntimeExports.jsx(HistoryPanel, {}) : sidebarTab === "mocks" ? /* @__PURE__ */ jsxRuntimeExports.jsx(MockPanel, {}) : sidebarTab === "git" ? /* @__PURE__ */ jsxRuntimeExports.jsx(GitPanel, {}) : /* @__PURE__ */ jsxRuntimeExports.jsx(ContractPanel, {})
+          sidebarTab === "collections" ? /* @__PURE__ */ jsxRuntimeExports.jsx(CollectionTree, {}) : sidebarTab === "history" ? /* @__PURE__ */ jsxRuntimeExports.jsx(HistoryPanel, {}) : sidebarTab === "mocks" ? /* @__PURE__ */ jsxRuntimeExports.jsx(MockPanel, {}) : sidebarTab === "git" ? /* @__PURE__ */ jsxRuntimeExports.jsx(GitPanel, {}) : /* @__PURE__ */ jsxRuntimeExports.jsx(ContractPanel, { fuzzReport, setFuzzReport })
         ] }),
         /* @__PURE__ */ jsxRuntimeExports.jsx(
           "div",
@@ -71028,13 +71765,13 @@ function App() {
             }
           )
         ] }),
-        sidebarTab === "git" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 flex flex-col", children: /* @__PURE__ */ jsxRuntimeExports.jsx(GitDiffPane, {}) }) : sidebarTab === "contracts" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0", children: /* @__PURE__ */ jsxRuntimeExports.jsx(ContractResultsPanel, {}) }) : sidebarTab === "mocks" && recorderRunning ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
+        sidebarTab === "git" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 flex flex-col", children: /* @__PURE__ */ jsxRuntimeExports.jsx(GitDiffPane, {}) }) : sidebarTab === "contracts" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 flex flex-col", children: fuzzReport ? /* @__PURE__ */ jsxRuntimeExports.jsx(FuzzResultsPanel, { report: fuzzReport, onClear: () => setFuzzReport(null) }) : /* @__PURE__ */ jsxRuntimeExports.jsx(ContractResultsPanel, {}) }) : sidebarTab === "mocks" && recorderRunning ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
           RecorderPanel,
           {
             defaultTargetMockId: recorderTargetMockId,
             onClose: () => setRecorderRunning(false),
             onImportMock: async (session, targetMockId) => {
-              const name2 = `Recorded — ${new URL(session.upstream).hostname}`;
+              const name2 = `Recorded - ${new URL(session.upstream).hostname}`;
               const newRoutes = await electron.recordToMock(session.entries, session.upstream, name2, session.port);
               if (targetMockId) {
                 const existing = useStore.getState().mocks[targetMockId];