agent-device-lab 0.0.0-stage → 0.3.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,10 @@
+Agent Device Lab
+Copyright 2026 Colony Innovations
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).
+
+It depends on, and does not include, the following software, installed by npm
+under their own licences:
+
+  Playwright (Apache-2.0), Copyright (c) Microsoft Corporation
+  Model Context Protocol TypeScript SDK (MIT), Copyright (c) Anthropic, PBC

package/README.md

@@ -1,3 +1,143 @@
-# Temporary Holding Version
+# Agent Device Lab
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Agent Device Lab lets a coding agent start your web app, use it on a phone-sized screen, and report what breaks, while you watch.
+
+- **It runs your project.** The lab starts the services your app needs, in order, or attaches to ones already running. When it finishes it stops only what it started.
+- **It gives the agent a small, exact view.** The agent gets a short list of the controls on screen, each with a ref (`e1`, `e2`, ...). After every click or keystroke it gets only what changed.
+- **It finds layout defects.** It records problems a person would hit on a small screen, such as a button pushed off the edge, each with measurements and the steps to reproduce it.
+- **You stay in charge.** A local dashboard shows the agent's screen live. You can pause the agent, take over the browser, hand it back, or stop the run.
+
+The same commands work from a terminal (`agentlab`), from an MCP server for Claude Code and Codex, and in CI with predictable exit codes.
+
+![The dashboard after a run on the demo app: the live viewport in the centre, the timeline of actions on the left, and the findings on the right with one selected to show its evidence and reproduction steps](docs/images/dashboard.png)
+
+**Status:** Web V1 (`0.3.0`). It is tested on Linux x64 (Debian 12 and Ubuntu 24.04) with Node.js 22 and 24. macOS, Windows and arm64 are untested, and Alpine does not work. See [Limitations](#limitations).
+
+## Install
+
+You need **Node.js 22 or newer**.
+
+```bash
+npm install -g agent-device-lab     # the command it installs is `agentlab`
+agentlab install-browser                 # the Chromium build the lab needs (add --with-deps on a bare Debian or Ubuntu image)
+agentlab doctor                          # checks Node, the browser and your environment
+```
+
+To build it from source instead:
+
+```bash
+git clone https://github.com/Colony-Innovations/agent-device-lab.git && cd agent-device-lab
+npm ci && npm pack                       # builds and writes agent-device-lab-<version>.tgz
+npm install -g ./agent-device-lab-*.tgz
+```
+
+Per-project installs, `npx`, upgrading and uninstalling are in [docs/install.md](docs/install.md).
+
+## Try it
+
+The fastest way to learn the lab is the [getting-started guide](docs/getting-started.md). It takes about ten minutes, uses a small demo app with a defect planted in it, and shows the real output of every command.
+
+In your own project the short version is:
+
+```bash
+cd /path/to/your-app
+
+agentlab init          # shows what it detected and the agentlab.json it proposes; writes nothing until you confirm
+agentlab start         # starts your app, opens a phone-sized browser, prints the first observation
+agentlab ui            # opens the dashboard so you can watch
+
+agentlab observe       # the controls on screen, with refs
+agentlab click e3      # by ref; or: agentlab click --name "Save" --role button
+agentlab fill e6 "Acme Ltd"
+agentlab inspect       # the findings recorded so far, with evidence and reproduction steps
+
+agentlab sweep /reports   # one page at 320, 390, 768 and 1440 px
+agentlab stop          # closes the browser and stops only the services the lab started
+```
+
+The browser has no window of its own. You watch it in the dashboard, so nothing covers your screen. Pass `--headed` to `start` if you also want a browser window.
+
+The lab reads one file in your project, `agentlab.json`. A minimal one:
+
+```json
+{
+  "schemaVersion": 2,
+  "name": "my-app",
+  "services": { "web": { "command": "npm run dev", "url": "http://127.0.0.1:5173", "readiness": { "path": "/" } } },
+  "app": { "service": "web" },
+  "device": "mobile-390"
+}
+```
+
+The lab runs only the commands written there, so committing the file is how you approve them. Every setting is in [docs/configuration.md](docs/configuration.md).
+
+## Use it from your coding agent
+
+`agentlab mcp` is an MCP server with 25 tools that mirror the terminal commands. Register it once:
+
+```bash
+claude mcp add --scope user agentlab -- "$(command -v agentlab)" mcp --headless     # Claude Code
+codex mcp add agentlab -- "$(command -v agentlab)" mcp --headless                   # Codex CLI
+```
+
+Then ask your agent, for example: "Start the lab on this project, open the Reports page and tell me what breaks at phone width." The agent calls `start` with your project's path, then observes and acts. Setup details, the tool list and what the agent should do on each error are in [docs/mcp.md](docs/mcp.md).
+
+## Watch and step in
+
+Every session serves a dashboard on `127.0.0.1`. Run `agentlab ui` in the project directory to open it.
+
+- The centre shows the agent's screen live. During a sweep or scan it follows the width being measured, and a line above it says what you are looking at.
+- The left shows each action and what it changed. The right shows the findings.
+- The buttons let you **pause** the agent, **take over** the browser, **return** control, **stop** the run, or use the **emergency stop**.
+
+The link the agent receives is view-only. Only the link from `agentlab ui` has the controls. While you have control the agent's actions are refused with a clear message, and it must look at the page again before it continues. See [docs/dashboard.md](docs/dashboard.md).
+
+## Run it in CI
+
+```bash
+agentlab test --validate-only      # check the profile and environment; start nothing
+agentlab test --out agentlab-results
+```
+
+`agentlab test` starts the project, runs the flows, sweeps and scans your profile selects, stops what it started, and exits **0** for pass, **1** when the policy failed, **2** when it could not run and **3** on a timeout. It writes a JSON result, a JUnit file, an HTML report, evidence and failure bundles, and keeps secrets out of all of them. A failure bundle can be re-run later with `agentlab replay`. See [docs/ci.md](docs/ci.md) and the [GitHub Actions example](examples/ci/github-actions.yml).
+
+## How findings work
+
+Each finding has an id, a device, a severity, a confidence, measurements in CSS pixels and the steps to reproduce it from the start of the session. A finding stays recorded even when a later action succeeds.
+
+A finding is **confirmed** only when a measurement shows a person is affected: a hit test, an interaction, clipping, a WCAG rule or the browser's layout-shift metric. Everything else is **heuristic**, and a heuristic is never high severity without such a measurement. The detectors and the scan rules are described in [docs/web-v1-m2.md](docs/web-v1-m2.md).
+
+## Limitations
+
+- Linux x64 with glibc only. macOS, Windows and arm64 are untested, and Alpine does not work.
+- The devices are Chromium emulation, not real phones: no iOS Safari, no on-screen keyboard.
+- Supervision is cooperative, not a sandbox. It stops an agent that uses the lab's commands; it does not contain an agent that has a shell.
+- The findings are only as good as the detectors, and a sweep sees a page only as it first loads. Use scans for drawers, dialogs and other states.
+
+The full list and the roadmap are in [docs/limitations.md](docs/limitations.md).
+
+## Documentation
+
+Start with the [documentation index](docs/README.md). The pages people need most:
+
+| to | read |
+| --- | --- |
+| learn the tool step by step | [docs/getting-started.md](docs/getting-started.md) |
+| install, upgrade or uninstall | [docs/install.md](docs/install.md) |
+| write `agentlab.json` | [docs/configuration.md](docs/configuration.md) |
+| look up a command or flag | [docs/cli.md](docs/cli.md) |
+| connect an agent over MCP | [docs/mcp.md](docs/mcp.md) |
+| watch and supervise a session | [docs/dashboard.md](docs/dashboard.md) |
+| gate a pipeline | [docs/ci.md](docs/ci.md) |
+| fix a problem | [docs/troubleshooting.md](docs/troubleshooting.md) |
+| understand what is and is not protected | [docs/security.md](docs/security.md) |
+
+Measurements of the lab, including a benchmark against Playwright MCP and runs on four independent apps, are listed under [Evidence](docs/README.md#evidence) in the index. Each states its method and its caveats.
+
+## Contributing and security
+
+Building, testing and the project's rules are in [CONTRIBUTING.md](CONTRIBUTING.md). Report a security issue privately as described in [SECURITY.md](SECURITY.md), not in a public issue. Changes by release are in [CHANGELOG.md](CHANGELOG.md).
+
+## Licence
+
+Apache License 2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE). Copyright 2026 Colony Innovations.

package/assets/dashboard/app.css

@@ -0,0 +1,238 @@
+:root {
+  --bg: #f4f5f7; --panel: #ffffff; --ink: #1b1f24; --muted: #667085; --line: #e2e5ea;
+  --ok: #117a43; --ok-bg: #e7f6ee; --err: #b42318; --err-bg: #fdecea; --warn: #9a5b00; --warn-bg: #fff4e0;
+  --high: #b42318; --medium: #b25e00; --low: #52606d; --accent: #2462d6; --sel: #eaf1ff;
+  color-scheme: light dark;
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg: #111418; --panel: #1a1e24; --ink: #e6e9ee; --muted: #8b95a3; --line: #2b313a;
+    --ok: #4cc38a; --ok-bg: #16281f; --err: #ff7b72; --err-bg: #2d1717; --warn: #f0b64d; --warn-bg: #2c2312;
+    --high: #ff7b72; --medium: #f0a24d; --low: #9aa6b2; --accent: #6ea0ff; --sel: #1d2a40;
+  }
+}
+* { box-sizing: border-box; }
+[hidden] { display: none !important; }
+body { margin: 0; background: var(--bg); color: var(--ink); font: 14px/1.45 system-ui, -apple-system, "Segoe UI", Roboto, sans-serif; }
+.mono { font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace; font-size: 12.5px; }
+.muted { color: var(--muted); }
+.small { font-size: 12px; font-weight: 400; }
+.grow { flex: 1; }
+.num { font-variant-numeric: tabular-nums; font-weight: 600; }
+
+.top { display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: var(--panel); border-bottom: 1px solid var(--line); position: sticky; top: 0; z-index: 2; }
+.brand { font-weight: 700; }
+.pill { padding: 2px 10px; border-radius: 999px; font-size: 12px; font-weight: 600; background: var(--line); }
+.pill[data-state="active"] { background: var(--ok-bg); color: var(--ok); }
+.pill[data-state="starting"] { background: var(--warn-bg); color: var(--warn); }
+.pill[data-state="failed"] { background: var(--err-bg); color: var(--err); }
+.conn { font-size: 12px; color: var(--muted); }
+.conn::before { content: "●"; margin-right: 5px; }
+.conn[data-conn="live"]::before { color: var(--ok); }
+.conn[data-conn="reconnecting"]::before, .conn[data-conn="connecting"]::before { color: var(--warn); }
+.conn[data-conn="closed"]::before { color: var(--muted); }
+.conn[data-conn="denied"]::before { color: var(--err); }
+
+.status { display: grid; grid-template-columns: repeat(auto-fill, minmax(170px, 1fr)); gap: 8px 20px; padding: 10px 16px; background: var(--panel); border-bottom: 1px solid var(--line); }
+.status > div { display: flex; flex-direction: column; min-width: 0; }
+.status .wide { grid-column: span 2; }
+.status span:not(.k) { overflow-wrap: anywhere; }
+.k { font-size: 11px; text-transform: uppercase; letter-spacing: .04em; color: var(--muted); }
+.status .num.bad { color: var(--err); }
+
+.notice { margin: 12px 16px 0; padding: 10px 12px; border-radius: 8px; background: var(--warn-bg); color: var(--warn); }
+.start-error { margin: 12px 16px 0; padding: 12px 14px; border-radius: 8px; background: var(--err-bg); color: var(--err); }
+.start-error h3 { margin: 0 0 4px; font-size: 14px; }
+.start-error pre { margin: 8px 0 0; color: var(--ink); background: var(--panel); padding: 8px; border-radius: 6px; overflow: auto; max-height: 240px; }
+
+.grid { display: grid; grid-template-columns: minmax(260px, 340px) minmax(0, 1fr) minmax(280px, 360px); gap: 12px; padding: 12px 16px 24px; align-items: start; }
+.panel { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 12px; min-width: 0; }
+.panel h2 { font-size: 13px; margin: 0 0 10px; text-transform: uppercase; letter-spacing: .05em; }
+@media (max-width: 1100px) { .grid { grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); } .grid > .viewport-panel { grid-column: 1 / -1; order: 0; position: static; } }
+@media (max-width: 720px) { .grid { grid-template-columns: minmax(0, 1fr); } .timeline-panel, .findings-panel { grid-column: 1 / -1; } .status .wide { grid-column: auto; } }
+
+/* The viewport is the stage in the middle; the timeline sits to its left and findings to its right. */
+.timeline-panel { order: 1; }
+.viewport-panel { order: 2; position: sticky; top: 64px; }
+.findings-panel { order: 3; }
+.vp-now { margin: 0 0 10px; text-align: center; font-size: 13px; }
+.vp-now strong { font-weight: 600; }
+/* Sized to the device on screen (--vp-w × --vp-h in CSS pixels), shrunk to fit the column and the window. */
+.device { position: relative; box-sizing: border-box; margin: 0 auto; width: min(100%, calc(var(--vp-w, 390) * 1px + 16px), calc(max(420px, 100vh - 330px) * var(--vp-w, 390) / var(--vp-h, 844))); border: 8px solid #20252c; border-radius: 22px; overflow: hidden; background: #000; aspect-ratio: var(--vp-w, 390) / var(--vp-h, 844); transition: width .25s ease; }
+@media (prefers-reduced-motion: reduce) { .device { transition: none; } }
+.device img { position: absolute; inset: 0; display: block; width: 100%; height: 100%; object-fit: contain; background: #fff; }
+.device img:not([src]) { visibility: hidden; }
+/* The frame on screen is still the previous width's: fade it until this width's first frame arrives. */
+.device.switching img { opacity: .25; }
+.device.switching::after { content: 'loading this width…'; position: absolute; inset: 0; pointer-events: none; display: grid; place-items: center; color: #20252c; font-size: 13px; }
+.vp-empty { position: absolute; inset: 0; display: grid; place-items: center; color: #9aa4b2; font-size: 13px; }
+
+.timeline { list-style: none; margin: 0; padding: 0; max-height: 70vh; overflow: auto; }
+.entry { border-left: 3px solid var(--line); padding: 6px 10px 8px; margin: 0 0 8px; border-radius: 0 6px 6px 0; }
+.entry.success { border-left-color: var(--ok); }
+.entry.error { border-left-color: var(--err); background: var(--err-bg); }
+.entry.pan { border-left-color: var(--warn); background: var(--warn-bg); }
+.entry.meta { border-left-color: var(--line); color: var(--muted); }
+.entry .head { display: flex; flex-wrap: wrap; gap: 6px 10px; align-items: baseline; }
+.entry .time { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
+.entry .what { font-weight: 600; }
+.entry .outcome { font-size: 12px; font-weight: 700; }
+.entry.success .outcome { color: var(--ok); }
+.entry.error .outcome { color: var(--err); }
+.entry .dur { font-size: 12px; color: var(--muted); font-variant-numeric: tabular-nums; }
+.chip { display: inline-block; padding: 0 7px; border-radius: 999px; font-size: 11.5px; background: var(--line); }
+.chip.timeout { background: var(--warn-bg); color: var(--warn); font-weight: 600; }
+.entry ul { margin: 4px 0 0; padding-left: 18px; }
+.entry li { margin: 1px 0; }
+.entry details { margin-top: 4px; color: var(--muted); }
+.entry details summary { cursor: pointer; }
+.entry .notes { margin-top: 4px; font-style: italic; color: var(--muted); }
+.entry .banner { margin-top: 6px; font-weight: 600; color: var(--warn); }
+.entry .err { margin-top: 4px; }
+.entry .settle { margin-top: 4px; color: var(--warn); }
+/* 24 px tall and spaced so neighbours are not hit by mistake (WCAG 2.2 SC 2.5.8): found by sweeping this page with the lab. */
+.fchip { border: 0; cursor: pointer; font: inherit; font-size: 11.5px; min-height: 24px; padding: 3px 10px; border-radius: 999px; margin: 6px 6px 0 0; color: #fff; }
+.sev-high { background: var(--high); }
+.sev-medium { background: var(--medium); }
+.sev-low { background: var(--low); }
+
+.serverlog { margin-top: 10px; }
+.serverlog pre { max-height: 220px; overflow: auto; margin: 6px 0 0; padding: 8px; background: var(--bg); border-radius: 6px; font-size: 12px; white-space: pre-wrap; }
+
+.findings { list-style: none; margin: 0; padding: 0; }
+.findings li.item { display: grid; grid-template-columns: auto 1fr; gap: 2px 8px; padding: 8px; border-radius: 6px; cursor: pointer; border: 1px solid transparent; }
+.findings li.item:hover { border-color: var(--line); }
+.findings li.item[aria-selected="true"] { background: var(--sel); border-color: var(--accent); }
+.findings li.item.fresh { animation: flash 1.6s ease-out; }
+@keyframes flash { from { background: var(--warn-bg); } to { background: transparent; } }
+.findings .sev { grid-row: span 2; align-self: start; font-size: 11px; font-weight: 700; color: #fff; padding: 1px 7px; border-radius: 4px; text-transform: uppercase; }
+.findings .kind { font-weight: 600; }
+.findings .msg { color: var(--muted); font-size: 12.5px; }
+.chips { display: flex; flex-wrap: wrap; gap: 6px; margin: 0 0 8px; }
+.chips button { font: inherit; font-size: 12px; min-height: 24px; padding: 2px 10px; border-radius: 999px; border: 1px solid var(--line); background: transparent; color: var(--ink); cursor: pointer; }
+.chips button[aria-pressed="true"] { background: var(--accent); border-color: var(--accent); color: #fff; }
+.conf { font-size: 10.5px; font-weight: 700; text-transform: uppercase; letter-spacing: .03em; padding: 0 6px; border-radius: 4px; margin-left: 4px; }
+.conf-confirmed { background: var(--err-bg); color: var(--err); }
+.conf-heuristic { background: var(--line); color: var(--muted); }
+.sweep { margin-top: 14px; border-top: 1px solid var(--line); padding-top: 10px; }
+.sweep-devices { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 8px; }
+.sweep-devices button { width: 100%; text-align: left; font: inherit; font-size: 12px; color: var(--ink); background: transparent; border: 1px solid var(--line); border-radius: 8px; padding: 6px; cursor: pointer; }
+.sweep-devices button[aria-pressed="true"] { border-color: var(--accent); background: var(--sel); }
+.sweep-devices .state { font-weight: 700; }
+.sweep-devices .state.running { color: var(--warn); }
+.sweep-devices .state.error { color: var(--err); }
+.sweep-devices .state.bad { color: var(--err); }
+.sweep-devices .state.clean { color: var(--ok); }
+.sweep-devices img { display: block; width: 100%; max-height: 140px; object-fit: cover; object-position: top; margin-top: 4px; border-radius: 4px; border: 1px solid var(--line); }
+.finding-detail { margin-top: 10px; border-top: 1px solid var(--line); padding-top: 10px; }
+.finding-detail h3 { margin: 0 0 6px; font-size: 15px; }
+.finding-detail table { border-collapse: collapse; width: 100%; font-size: 12.5px; margin: 6px 0; }
+.finding-detail td { border-top: 1px solid var(--line); padding: 3px 6px; vertical-align: top; }
+.finding-detail td:first-child { color: var(--muted); white-space: nowrap; }
+.finding-detail ol { margin: 4px 0; padding-left: 20px; }
+.finding-detail figure { margin: 8px 0 0; }
+.finding-detail figure img { width: 100%; max-width: 260px; border: 1px solid var(--line); border-radius: 8px; display: block; }
+.finding-detail figcaption { font-size: 12px; color: var(--muted); margin-top: 4px; }
+
+/* stateful scan */
+.scan { margin: 12px 16px 0; }
+.scan-verdict { display: flex; flex-wrap: wrap; align-items: center; gap: 4px 12px; margin-bottom: 8px; }
+.verdict { padding: 2px 12px; border-radius: 999px; font-size: 12px; font-weight: 700; letter-spacing: .04em; }
+.verdict.pass { background: var(--ok-bg); color: var(--ok); }
+.verdict.fail { background: var(--err-bg); color: var(--err); }
+.reasons { flex-basis: 100%; margin: 2px 0 0; padding-left: 18px; font-size: 12.5px; color: var(--muted); }
+.scan-matrix-wrap { overflow-x: auto; }
+.scan-matrix { border-collapse: separate; border-spacing: 6px; width: 100%; }
+.scan-matrix th { font-size: 12px; text-align: left; font-weight: 600; padding: 2px 4px; vertical-align: bottom; }
+.scan-matrix td { vertical-align: top; min-width: 150px; }
+.cell { display: block; width: 100%; text-align: left; font: inherit; font-size: 12.5px; color: var(--ink); background: transparent; border: 1px solid var(--line); border-radius: 8px; padding: 6px 8px; cursor: pointer; }
+.cell[aria-pressed="true"] { border-color: var(--accent); background: var(--sel); }
+.cell span { display: block; }
+.cell-state { font-weight: 600; }
+.cell-pending { color: var(--muted); }
+.cell-running .cell-state { color: var(--warn); }
+.cell-ok .cell-state { color: var(--ok); }
+.cell-failed { border-color: var(--err); background: var(--err-bg); }
+.cell-failed .cell-state { color: var(--err); }
+.cell-failed.cell-before { border-style: dashed; border-color: var(--warn); background: var(--warn-bg); }
+.cell-failed.cell-before .cell-state { color: var(--warn); }
+.cell-error { font-size: 11.5px; color: var(--muted); margin-top: 2px; overflow-wrap: anywhere; }
+.scan-run { margin-top: 10px; border-top: 1px solid var(--line); padding-top: 10px; }
+.scan-run h3 { margin: 0 0 6px; font-size: 15px; }
+.scan-run .k { margin: 10px 0 4px; }
+.run-error { padding: 6px 8px; border-radius: 6px; background: var(--err-bg); color: var(--err); font-size: 12.5px; }
+.run-error.before { background: var(--warn-bg); color: var(--warn); }
+.states { list-style: none; margin: 0; padding: 0; display: grid; gap: 8px; grid-template-columns: repeat(auto-fill, minmax(320px, 1fr)); }
+.state { display: flex; gap: 10px; padding: 8px; border: 1px solid var(--line); border-radius: 8px; min-width: 0; }
+.state-body { min-width: 0; overflow-wrap: anywhere; }
+.thumb { flex: none; width: 88px; height: 120px; object-fit: cover; object-position: top; border: 1px solid var(--line); border-radius: 4px; background: var(--bg); }
+.thumb.ph { display: grid; place-items: center; text-align: center; }
+.chip.state-failed, .chip.state-blocked { background: var(--err-bg); color: var(--err); }
+.err-text { color: var(--err); }
+.skipped { border-collapse: collapse; width: 100%; font-size: 12.5px; }
+.skipped th { text-align: left; color: var(--muted); font-weight: 600; padding: 3px 6px; }
+.skipped td { border-top: 1px solid var(--line); padding: 3px 6px; vertical-align: top; overflow-wrap: anywhere; }
+.explored, .limits { margin: 0; padding-left: 18px; }
+
+.run-filter { margin: 0 0 8px; color: var(--muted); }
+button.link { border: 0; background: none; padding: 0; font: inherit; color: var(--accent); cursor: pointer; text-decoration: underline; }
+.findings li.group { list-style: none; margin: 0 0 4px; }
+.group-head { display: grid; grid-template-columns: auto 1fr; gap: 2px 8px; width: 100%; text-align: left; font: inherit; color: var(--ink); background: transparent; border: 1px solid var(--line); border-radius: 6px; padding: 8px; cursor: pointer; }
+.group-head[aria-expanded="true"] { background: var(--sel); border-color: var(--accent); }
+.group-head .sev { grid-row: span 2; align-self: start; font-size: 11px; font-weight: 700; color: #fff; padding: 1px 7px; border-radius: 4px; text-transform: uppercase; }
+.group-head .kind { font-weight: 600; }
+.group-head .msg { color: var(--muted); font-size: 12.5px; }
+.members { list-style: none; margin: 4px 0 0 10px; padding: 0; }
+.findings .why { grid-column: 2; }
+.suppressed { margin-top: 10px; }
+.suppressed summary { cursor: pointer; font-size: 12px; text-transform: uppercase; letter-spacing: .05em; color: var(--muted); }
+.pair { display: flex; flex-wrap: wrap; gap: 8px; align-items: flex-start; }
+.pair figure.ev { margin: 4px 0 0; flex: 1 1 140px; min-width: 0; max-width: 200px; }
+.pair figure.ev img { width: 100%; max-width: none; }
+.pair.widths figure.ev { flex-basis: 100px; max-width: 140px; }
+.pair.before-after figure.ev:first-child img { border-color: var(--warn); }
+.finding-detail table.measure th { text-align: left; color: var(--muted); font-weight: 600; font-size: 12px; padding: 3px 6px; }
+.finding-detail table.measure td:first-child { color: var(--ink); }
+.harm-functional, .harm-expectation { color: var(--err); font-weight: 600; }
+.harm-cosmetic { color: var(--warn); }
+
+/* supervision */
+.supervision { margin: 12px 16px 0; padding: 10px 12px; border-radius: 10px; border: 1px solid var(--line); background: var(--panel); }
+.sup-main { display: flex; flex-wrap: wrap; align-items: center; gap: 8px 12px; }
+.mode-badge { padding: 3px 12px; border-radius: 999px; font-size: 13px; font-weight: 700; background: var(--ok-bg); color: var(--ok); }
+.mode-badge[data-mode="pausing"], .mode-badge[data-mode="paused"] { background: var(--warn-bg); color: var(--warn); }
+.mode-badge[data-mode="human"] { background: var(--accent); color: #fff; }
+.mode-badge[data-mode="stopping"], .mode-badge[data-mode="stopped"] { background: var(--err-bg); color: var(--err); }
+.ctl-buttons { display: flex; flex-wrap: wrap; gap: 6px; margin-left: auto; }
+.ctl-buttons button, .human-keys button, .human-row button { font: inherit; font-size: 12.5px; padding: 4px 12px; border-radius: 6px; border: 1px solid var(--line); background: transparent; color: var(--ink); cursor: pointer; }
+.ctl-buttons button:hover:not([aria-disabled="true"]), .human-keys button:hover, .human-row button:hover { border-color: var(--accent); }
+.ctl-buttons button[aria-pressed="true"] { background: var(--accent); border-color: var(--accent); color: #fff; }
+.ctl-buttons button[aria-disabled="true"] { opacity: .45; cursor: not-allowed; }
+.ctl-buttons button.danger { color: var(--err); border-color: var(--err); }
+.ctl-buttons button.strong { font-weight: 700; }
+.ctl-buttons button.confirming { background: var(--err); border-color: var(--err); color: #fff; }
+.ctl-buttons button:focus-visible, .human-keys button:focus-visible, .human-row button:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.ctl-error { margin-top: 8px; padding: 6px 10px; border-radius: 6px; background: var(--err-bg); color: var(--err); font-size: 12.5px; }
+.viewonly { margin: 8px 16px 0; }
+
+.human-panel { margin-top: 12px; border-top: 1px solid var(--line); padding-top: 10px; }
+.human-banner { margin: 0 0 6px; padding: 8px 10px; border-radius: 8px; background: var(--sel); border: 1px solid var(--accent); }
+.human-form { display: grid; gap: 4px; margin: 8px 0; }
+.human-row { display: flex; gap: 6px; }
+.human-row input[type="text"], .human-row input[type="password"] { flex: 1; min-width: 0; font: inherit; padding: 4px 8px; border-radius: 6px; border: 1px solid var(--line); background: var(--bg); color: var(--ink); }
+.human-keys { display: flex; flex-wrap: wrap; gap: 6px; }
+.device.human { border-color: var(--accent); }
+.device.human img { cursor: crosshair; }
+
+/* supervision entries in the timeline */
+.entry.marker { display: flex; align-items: center; gap: 8px; border-left: 0; padding: 4px 0; margin: 4px 0 10px; background: none; color: var(--warn); font-weight: 600; }
+.entry.marker::before, .entry.marker::after { content: ""; flex: 1; border-top: 2px solid currentColor; opacity: .4; }
+.entry.marker .marker-text { flex: 0 1 auto; text-align: center; overflow-wrap: anywhere; }
+.entry.marker.stopped { color: var(--err); }
+.entry.human { border-left-color: var(--accent); background: var(--sel); }
+.entry.human .what { color: var(--accent); }
+.pico { display: inline-block; position: relative; width: 14px; height: 14px; vertical-align: -2px; margin-right: 4px; }
+.pico::before { content: ""; position: absolute; left: 4px; top: 0; width: 6px; height: 6px; border-radius: 50%; background: var(--accent); }
+.pico::after { content: ""; position: absolute; left: 1px; top: 8px; width: 12px; height: 6px; border-radius: 6px 6px 0 0; background: var(--accent); }
+.entry.refused { border-left-style: dashed; border-left-color: var(--err); }
+.chip.refused { background: var(--err-bg); color: var(--err); font-weight: 600; }