comisai 1.0.42 → 1.0.44

package/node_modules/@comis/web/dist/assets/security-78aeYyN2.js

@@ -0,0 +1,1332 @@
+import{S as e,_ as t,a as n,d as r,g as i,h as a,l as o,m as s,n as c,o as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{a as h,i as g}from"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-array-editor-Ba7psX7q.js";import"./ic-data-table-c9pQCH_h.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-tabs-BsjznKoe.js";import"./ic-connection-dot-mggqNsPH.js";import"./ic-select-DY2apnK_.js";var _=class extends i{constructor(...e){super(...e),this.label=``,this.value=``,this.placeholder=`env:SECRET_NAME or file:/path`,this.disabled=!1,this.storageMode=`encrypted`,this._visible=!1}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .field-wrapper {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-xs);
+      }
+
+      label {
+        font-size: var(--ic-text-sm);
+        font-weight: 500;
+        color: var(--ic-text-muted);
+      }
+
+      .input-row {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-xs);
+      }
+
+      input {
+        flex: 1;
+        padding: 0.5rem 0.75rem;
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text);
+        font-family: inherit;
+        font-size: var(--ic-text-sm);
+        transition: border-color var(--ic-transition);
+      }
+
+      input:focus {
+        outline: none;
+        border-color: var(--ic-accent);
+      }
+
+      input::placeholder {
+        color: var(--ic-text-dim);
+      }
+
+      input:disabled {
+        opacity: 0.5;
+        cursor: not-allowed;
+      }
+
+      .toggle-btn {
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text-dim);
+        cursor: pointer;
+        padding: 0.5rem;
+        font-size: var(--ic-text-sm);
+        line-height: 1;
+        flex-shrink: 0;
+      }
+
+      .toggle-btn:hover {
+        color: var(--ic-text);
+      }
+
+      .hint {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        font-style: italic;
+      }
+    `]}_onInput(e){let t=e.target.value;this.dispatchEvent(new CustomEvent(`change`,{detail:t,bubbles:!0,composed:!0}))}_toggleVisibility(){this._visible=!this._visible}render(){return m`
+      <div class="field-wrapper">
+        ${this.label?m`<label>${this.label}</label>`:t}
+        <div class="input-row">
+          <input
+            type=${this._visible?`text`:`password`}
+            .value=${this.value}
+            placeholder=${this.placeholder}
+            ?disabled=${this.disabled}
+            @input=${this._onInput}
+          />
+          <button
+            class="toggle-btn"
+            type="button"
+            aria-label=${this._visible?`Hide value`:`Show value`}
+            @click=${this._toggleVisibility}
+          >${this._visible?`🙈`:`👁`}</button>
+        </div>
+        <span class="hint">${this.storageMode===`env`?`Format: env:VAR_NAME or file:/path/to/secret (env mode: store secrets in environment variables)`:`Format: env:VAR_NAME or file:/path/to/secret`}</span>
+      </div>
+    `}};f([s()],_.prototype,`label`,void 0),f([s()],_.prototype,`value`,void 0),f([s()],_.prototype,`placeholder`,void 0),f([s({type:Boolean})],_.prototype,`disabled`,void 0),f([s()],_.prototype,`storageMode`,void 0),f([u()],_.prototype,`_visible`,void 0),_=f([a(`ic-secret-input`)],_);var v=class extends i{constructor(...e){super(...e),this._tokens=[],this._newTokenScopes=[],this._newSecretDisplay=null}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .grid-table {
+        display: grid;
+        width: 100%;
+      }
+
+      .grid-table--tokens {
+        grid-template-columns: 1fr 1fr 10rem;
+      }
+
+      .grid-table .header-cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-xs);
+        font-weight: 600;
+        color: var(--ic-text-muted);
+        text-transform: uppercase;
+        letter-spacing: 0.05em;
+        border-bottom: 2px solid var(--ic-border);
+        background: var(--ic-surface);
+      }
+
+      .grid-table .data-cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+        display: flex;
+        align-items: center;
+        border-bottom: 1px solid var(--ic-border);
+        min-height: 2.25rem;
+      }
+
+      .scopes-cell {
+        display: flex;
+        gap: var(--ic-space-xs);
+        flex-wrap: wrap;
+      }
+
+      .create-form {
+        background: var(--ic-surface);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        padding: var(--ic-space-md);
+        margin-top: var(--ic-space-lg);
+        max-width: 32rem;
+      }
+
+      .create-form-title {
+        font-size: var(--ic-text-sm);
+        font-weight: 600;
+        color: var(--ic-text-muted);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .form-field {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-xs);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .form-label {
+        font-size: var(--ic-text-sm);
+        font-weight: 500;
+        color: var(--ic-text-muted);
+      }
+
+      .checkbox-row {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-xs);
+      }
+
+      .checkbox-row input[type="checkbox"] {
+        accent-color: var(--ic-accent);
+      }
+
+      .checkbox-row label {
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+        cursor: pointer;
+      }
+
+      .generate-btn {
+        padding: 0.5rem 1rem;
+        background: var(--ic-accent);
+        color: white;
+        border: none;
+        border-radius: var(--ic-radius-md);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .generate-btn:hover {
+        opacity: 0.9;
+      }
+
+      .revoke-btn {
+        padding: 0.25rem 0.5rem;
+        background: none;
+        border: 1px solid var(--ic-error);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-error);
+        font-size: var(--ic-text-xs);
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .revoke-btn:hover {
+        background: color-mix(in srgb, var(--ic-error) 10%, transparent);
+      }
+
+      .rotate-btn {
+        padding: 0.25rem 0.5rem;
+        background: none;
+        border: 1px solid var(--ic-accent);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-accent);
+        font-size: var(--ic-text-xs);
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .rotate-btn:hover {
+        background: color-mix(in srgb, var(--ic-accent) 10%, transparent);
+      }
+
+      .token-actions {
+        display: flex;
+        gap: var(--ic-space-xs);
+      }
+
+      .new-secret-banner {
+        background: color-mix(in srgb, var(--ic-success) 10%, transparent);
+        border: 1px solid var(--ic-success);
+        border-radius: var(--ic-radius-md);
+        padding: var(--ic-space-sm) var(--ic-space-md);
+        margin-top: var(--ic-space-md);
+        max-width: 32rem;
+      }
+
+      .new-secret-banner .secret-label {
+        font-size: var(--ic-text-xs);
+        font-weight: 600;
+        color: var(--ic-success);
+        margin-bottom: var(--ic-space-xs);
+      }
+
+      .new-secret-banner .secret-value {
+        font-family: ui-monospace, monospace;
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+        word-break: break-all;
+      }
+
+      .new-secret-banner .secret-warning {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        margin-top: var(--ic-space-xs);
+      }
+    `]}connectedCallback(){super.connectedCallback()}updated(e){e.has(`rpc`)&&this.rpc&&this._loadTokens()}async _loadTokens(){if(this.rpc)try{let e=await this.rpc.call(`tokens.list`);this._tokens=e.tokens??[]}catch{}}async _revokeToken(e){if(this.rpc)try{await this.rpc.call(`tokens.revoke`,{id:e}),this._tokens=this._tokens.filter(t=>t.id!==e),h.show(`Token "${e}" revoked`,`success`),this.dispatchEvent(new CustomEvent(`tokens-changed`,{bubbles:!0,composed:!0}))}catch(e){let t=e instanceof Error?e.message:`Failed to revoke token`;h.show(t,`error`)}}async _rotateToken(e){if(this.rpc)try{let t=await this.rpc.call(`tokens.rotate`,{id:e});this._newSecretDisplay=t.secret,h.show(`Token "${e}" rotated -- new secret shown below`,`success`),this.dispatchEvent(new CustomEvent(`tokens-changed`,{bubbles:!0,composed:!0}))}catch(e){let t=e instanceof Error?e.message:`Failed to rotate token`;h.show(t,`error`)}}_onScopeToggle(e,t){t?this._newTokenScopes=[...this._newTokenScopes,e]:this._newTokenScopes=this._newTokenScopes.filter(t=>t!==e)}async _generateToken(){if(this.rpc)try{let e=await this.rpc.call(`tokens.create`,{scopes:[...this._newTokenScopes]});this._tokens=[...this._tokens,{id:e.id,scopes:e.scopes}],this._newSecretDisplay=e.secret,this._newTokenScopes=[],h.show(`Token created -- secret shown below`,`success`),this.dispatchEvent(new CustomEvent(`tokens-changed`,{bubbles:!0,composed:!0}))}catch(e){let t=e instanceof Error?e.message:`Failed to create token`;h.show(t,`error`)}}_renderTokenRow(e){return m`
+      <div class="data-cell" role="cell">${e.id}</div>
+      <div class="data-cell scopes-cell" role="cell">
+        ${e.scopes.map(e=>m`<ic-tag variant="info">${e}</ic-tag>`)}
+      </div>
+      <div class="data-cell" role="cell">
+        <div class="token-actions">
+          <button class="rotate-btn" @click=${()=>this._rotateToken(e.id)}>Rotate</button>
+          <button class="revoke-btn" @click=${()=>this._revokeToken(e.id)}>Revoke</button>
+        </div>
+      </div>
+    `}render(){return m`
+      <div class="grid-table grid-table--tokens" role="table" aria-label="API tokens">
+        <div class="header-cell" role="columnheader">Token ID</div>
+        <div class="header-cell" role="columnheader">Scopes</div>
+        <div class="header-cell" role="columnheader">Actions</div>
+        ${this._tokens.map(e=>this._renderTokenRow(e))}
+      </div>
+
+      ${this._newSecretDisplay?m`
+            <div class="new-secret-banner">
+              <div class="secret-label">New Token Secret</div>
+              <div class="secret-value">${this._newSecretDisplay}</div>
+              <div class="secret-warning">Copy this secret now. It will not be shown again.</div>
+            </div>
+          `:t}
+
+      <div class="create-form">
+        <div class="create-form-title">Create Token</div>
+        <div class="form-field">
+          <label class="form-label">Scopes</label>
+          <div class="checkbox-row">
+            <input type="checkbox" id="scope-rpc"
+              .checked=${this._newTokenScopes.includes(`rpc`)}
+              @change=${e=>this._onScopeToggle(`rpc`,e.target.checked)}
+            /><label for="scope-rpc">rpc</label>
+          </div>
+          <div class="checkbox-row">
+            <input type="checkbox" id="scope-ws"
+              .checked=${this._newTokenScopes.includes(`ws`)}
+              @change=${e=>this._onScopeToggle(`ws`,e.target.checked)}
+            /><label for="scope-ws">ws</label>
+          </div>
+          <div class="checkbox-row">
+            <input type="checkbox" id="scope-admin"
+              .checked=${this._newTokenScopes.includes(`admin`)}
+              @change=${e=>this._onScopeToggle(`admin`,e.target.checked)}
+            /><label for="scope-admin">admin</label>
+          </div>
+          <div class="checkbox-row">
+            <input type="checkbox" id="scope-api"
+              .checked=${this._newTokenScopes.includes(`api`)}
+              @change=${e=>this._onScopeToggle(`api`,e.target.checked)}
+            /><label for="scope-api">api</label>
+          </div>
+          <div class="checkbox-row">
+            <input type="checkbox" id="scope-all"
+              .checked=${this._newTokenScopes.includes(`*`)}
+              @change=${e=>this._onScopeToggle(`*`,e.target.checked)}
+            /><label for="scope-all">* (all)</label>
+          </div>
+        </div>
+        <button class="generate-btn" @click=${()=>this._generateToken()}>Generate</button>
+      </div>
+    `}};f([s({attribute:!1})],v.prototype,`rpc`,void 0),f([u()],v.prototype,`_tokens`,void 0),f([u()],v.prototype,`_newTokenScopes`,void 0),f([u()],v.prototype,`_newSecretDisplay`,void 0),v=f([a(`ic-token-manager`)],v);var y={low:`success`,medium:`warning`,high:`error`,critical:`error`},b={low:`var(--ic-success)`,medium:`var(--ic-warning)`,high:`var(--ic-error)`,critical:`var(--ic-error)`},x=class extends i{constructor(...e){super(...e),this.approval=null,this._reason=``,this._expanded=!1}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+        width: 100%;
+      }
+
+      .card {
+        background: var(--ic-surface);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-lg);
+        padding: var(--ic-space-md);
+        border-left: 3px solid var(--ic-border);
+      }
+
+      .card-header {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        flex-wrap: wrap;
+        margin-bottom: var(--ic-space-xs);
+      }
+
+      .agent-id {
+        font-weight: 600;
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+      }
+
+      .action-name {
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text-muted);
+        font-family: ui-monospace, monospace;
+      }
+
+      .timestamp {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .user-row {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .user-label {
+        color: var(--ic-text-muted);
+      }
+
+      .context-toggle {
+        background: none;
+        border: none;
+        color: var(--ic-accent);
+        font-size: var(--ic-text-xs);
+        cursor: pointer;
+        padding: 0;
+        font-family: inherit;
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .context-toggle:hover {
+        text-decoration: underline;
+      }
+
+      .context-details {
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        padding: var(--ic-space-sm);
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-muted);
+        white-space: pre-wrap;
+        word-break: break-word;
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .reason-input {
+        width: 100%;
+        padding: 0.5rem 0.75rem;
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text);
+        font-family: inherit;
+        font-size: var(--ic-text-sm);
+        margin-bottom: var(--ic-space-sm);
+        box-sizing: border-box;
+      }
+
+      .reason-input:focus {
+        outline: none;
+        border-color: var(--ic-accent);
+      }
+
+      .action-buttons {
+        display: flex;
+        gap: var(--ic-space-sm);
+        flex-wrap: wrap;
+      }
+
+      .approve-btn {
+        padding: 0.375rem 0.75rem;
+        background: color-mix(in srgb, var(--ic-success) 15%, transparent);
+        border: 1px solid var(--ic-success);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-success);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+        font-weight: 500;
+      }
+
+      .approve-btn:hover {
+        background: color-mix(in srgb, var(--ic-success) 25%, transparent);
+      }
+
+      .deny-btn {
+        padding: 0.375rem 0.75rem;
+        background: color-mix(in srgb, var(--ic-error) 15%, transparent);
+        border: 1px solid var(--ic-error);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-error);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+        font-weight: 500;
+      }
+
+      .deny-btn:hover {
+        background: color-mix(in srgb, var(--ic-error) 25%, transparent);
+      }
+    `]}_onApprove(){this.approval&&this.dispatchEvent(new CustomEvent(`approve`,{detail:{id:this.approval.id,reason:this._reason},bubbles:!0,composed:!0}))}_onDeny(){this.approval&&this.dispatchEvent(new CustomEvent(`deny`,{detail:{id:this.approval.id,reason:this._reason},bubbles:!0,composed:!0}))}render(){if(!this.approval)return t;let e=this.approval,n=y[e.classification]??`default`,r=b[e.classification]??`var(--ic-border)`;return m`
+      <div
+        class="card"
+        role="article"
+        aria-label="${e.agentId} ${e.action} approval request"
+        style="border-left-color: ${r};"
+      >
+        <div class="card-header">
+          <span class="agent-id">${e.agentId}</span>
+          <span class="action-name">${e.action}</span>
+          <ic-tag variant=${n}>${e.classification}</ic-tag>
+        </div>
+        <div class="timestamp">
+          <ic-relative-time .timestamp=${e.requestedAt}></ic-relative-time>
+        </div>
+        ${e.user?m`<div class="user-row"><span class="user-label">Requested by:</span> ${e.user}</div>`:t}
+        <button
+          class="context-toggle"
+          @click=${()=>{this._expanded=!this._expanded}}
+        >${this._expanded?`Hide details`:`Show details`}</button>
+        ${this._expanded?m`<div class="context-details">${e.context}</div>`:t}
+        <input
+          class="reason-input"
+          type="text"
+          placeholder="Reason (optional)"
+          aria-label="Decision reason"
+          .value=${this._reason}
+          @input=${e=>{this._reason=e.target.value}}
+        />
+        <div class="action-buttons">
+          <button class="approve-btn" @click=${()=>this._onApprove()}>Approve</button>
+          <button class="deny-btn" @click=${()=>this._onDeny()}>Deny</button>
+        </div>
+      </div>
+    `}};f([s({type:Object})],x.prototype,`approval`,void 0),f([u()],x.prototype,`_reason`,void 0),f([u()],x.prototype,`_expanded`,void 0),x=f([a(`ic-approval-card`)],x);function S(e){return{id:e.requestId,agentId:e.agentId,action:e.action||e.toolName,classification:e.trustLevel===`admin`?`low`:e.trustLevel===`user`?`medium`:`high`,context:JSON.stringify(e.params,null,2),requestedAt:e.createdAt}}var C=`ic:approval-history`,w=10080*60*1e3;function T(){try{let e=localStorage.getItem(C);if(!e)return[];let t=JSON.parse(e),n=o()-w;return t.filter(e=>e.resolvedAt>n)}catch{return[]}}function E(e){try{let t=o()-w,n=e.filter(e=>e.resolvedAt>t);localStorage.setItem(C,JSON.stringify(n))}catch{}}var D=class extends i{constructor(...e){super(...e),this.securityConfig={},this.activeSubTab=`pending`,this._pendingApprovals=[],this._resolvedApprovals=[],this._approvalRules={defaultMode:`manual`,timeoutMs:0}}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .section-header {
+        font-size: var(--ic-text-base);
+        font-weight: 600;
+        color: var(--ic-text);
+        margin-top: var(--ic-space-lg);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .section-header:first-child {
+        margin-top: 0;
+      }
+
+      .policy-section {
+        margin-bottom: var(--ic-space-xl);
+        max-width: 40rem;
+      }
+
+      .queue-header {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-md);
+      }
+
+      .queue-count {
+        background: var(--ic-accent);
+        color: white;
+        font-size: var(--ic-text-xs);
+        font-weight: 600;
+        padding: 0.125rem 0.5rem;
+        border-radius: var(--ic-radius-md);
+        min-width: 1.25rem;
+        text-align: center;
+      }
+
+      .queue-list {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-md);
+      }
+
+      .history-divider {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        margin: var(--ic-space-xl) 0 var(--ic-space-md);
+        color: var(--ic-text-muted);
+        font-size: var(--ic-text-sm);
+        font-weight: 600;
+      }
+
+      .history-divider::after {
+        content: "";
+        flex: 1;
+        height: 1px;
+        background: var(--ic-border);
+      }
+
+      .history-grid {
+        display: grid;
+        grid-template-columns: 7rem 8rem 6rem 5rem 1fr 8rem 6rem;
+        width: 100%;
+      }
+
+      .history-grid .header-cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-xs);
+        font-weight: 600;
+        color: var(--ic-text-muted);
+        text-transform: uppercase;
+        letter-spacing: 0.05em;
+        border-bottom: 2px solid var(--ic-border);
+        background: var(--ic-surface);
+      }
+
+      .history-grid .data-cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+        display: flex;
+        align-items: center;
+        border-bottom: 1px solid var(--ic-border);
+        min-height: 2.25rem;
+      }
+
+      .history-grid .data-cell--muted {
+        color: var(--ic-text-muted);
+      }
+
+      .rules-form {
+        max-width: 32rem;
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-md);
+      }
+
+      .save-btn,
+      .action-btn {
+        padding: 0.5rem 1rem;
+        background: var(--ic-accent);
+        color: white;
+        border: none;
+        border-radius: var(--ic-radius-md);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+        align-self: flex-start;
+      }
+
+      .save-btn:hover,
+      .action-btn:hover {
+        opacity: 0.9;
+      }
+
+      .form-field {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-xs);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .form-label {
+        font-size: var(--ic-text-sm);
+        font-weight: 500;
+        color: var(--ic-text-muted);
+      }
+
+      .form-hint {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+      }
+
+      .number-input {
+        width: 8rem;
+        padding: 0.5rem 0.75rem;
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text);
+        font-family: inherit;
+        font-size: var(--ic-text-sm);
+      }
+
+      .number-input:focus {
+        outline: none;
+        border-color: var(--ic-accent);
+      }
+
+      .bulk-actions {
+        display: flex;
+        flex-direction: row;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-md);
+        flex-wrap: wrap;
+      }
+
+      .action-btn--success {
+        background: var(--ic-success, #22c55e);
+        color: white;
+      }
+
+      .action-btn--danger {
+        background: var(--ic-error, #ef4444);
+        color: white;
+      }
+
+      .action-btn:disabled,
+      .action-btn--success:disabled,
+      .action-btn--danger:disabled {
+        opacity: 0.5;
+        cursor: not-allowed;
+      }
+    `]}connectedCallback(){super.connectedCallback(),this._resolvedApprovals=T()}updated(e){e.has(`rpc`)&&this.rpc&&this._loadApprovals(),e.has(`securityConfig`)&&(this._approvalRules=this.securityConfig.approvalRules??{defaultMode:`manual`,timeoutMs:0})}async _loadApprovals(){if(this.rpc)try{let e=await this.rpc.call(`admin.approval.pending`);this._pendingApprovals=(e.requests??[]).map(S)}catch{}}onApprovalPending(e){let t=e;t?.requestId&&(this._pendingApprovals=[S(t),...this._pendingApprovals])}onApprovalResolved(e){let t=e,n=t?.requestId;if(!n)return;this._pendingApprovals=this._pendingApprovals.filter(e=>e.id!==n);let r={...S(t),outcome:t.approved?`approved`:`denied`,reason:t.reason??``,resolvedAt:t.resolvedAt??o(),resolvedBy:t.approvedBy??`system`};this._resolvedApprovals=[r,...this._resolvedApprovals],E(this._resolvedApprovals)}async _handleApprove(e){if(!this.rpc)return;let{id:t,reason:n}=e.detail;try{await this.rpc.call(`admin.approval.resolve`,{requestId:t,approved:!0,approvedBy:`operator`,reason:n});let e=this._pendingApprovals.find(e=>e.id===t);if(this._pendingApprovals=this._pendingApprovals.filter(e=>e.id!==t),e){let t={...e,outcome:`approved`,reason:n,resolvedAt:o(),resolvedBy:`operator`};this._resolvedApprovals=[t,...this._resolvedApprovals],E(this._resolvedApprovals)}h.show(`Approval granted`,`success`),this.dispatchEvent(new CustomEvent(`approvals-changed`,{bubbles:!0,composed:!0}))}catch(e){h.show(e instanceof Error?e.message:`Failed to approve request`,`error`)}}async _handleDeny(e){if(!this.rpc)return;let{id:t,reason:n}=e.detail;try{await this.rpc.call(`admin.approval.resolve`,{requestId:t,approved:!1,approvedBy:`operator`,reason:n});let e=this._pendingApprovals.find(e=>e.id===t);if(this._pendingApprovals=this._pendingApprovals.filter(e=>e.id!==t),e){let t={...e,outcome:`denied`,reason:n,resolvedAt:o(),resolvedBy:`operator`};this._resolvedApprovals=[t,...this._resolvedApprovals],E(this._resolvedApprovals)}h.show(`Approval denied`,`success`),this.dispatchEvent(new CustomEvent(`approvals-changed`,{bubbles:!0,composed:!0}))}catch(e){h.show(e instanceof Error?e.message:`Failed to deny request`,`error`)}}async _handleResolveAll(e){if(!(!this.rpc||this._pendingApprovals.length===0))try{let t=await this.rpc.call(`admin.approval.resolveAll`,{approved:e,approvedBy:`operator`,reason:e?`Bulk approved by operator`:`Bulk denied by operator`});for(let t of this._pendingApprovals){let n={...t,outcome:e?`approved`:`denied`,reason:e?`Bulk approved by operator`:`Bulk denied by operator`,resolvedAt:o(),resolvedBy:`operator`};this._resolvedApprovals=[n,...this._resolvedApprovals]}this._pendingApprovals=[],E(this._resolvedApprovals),h.show(`${t.resolved} approval(s) ${e?`approved`:`denied`}`,`success`),this.dispatchEvent(new CustomEvent(`approvals-changed`,{bubbles:!0,composed:!0}))}catch(e){h.show(e instanceof Error?e.message:`Bulk operation failed`,`error`)}}async _handleClearDenialCache(){if(this.rpc)try{await this.rpc.call(`admin.approval.clearDenialCache`,{}),h.show(`Denial cache cleared`,`success`)}catch(e){h.show(e instanceof Error?e.message:`Failed to clear denial cache`,`error`)}}async _patchConfig(e,t){if(!this.rpc)return!1;try{let n=e.indexOf(`.`),r=n>0?e.slice(0,n):e,i=n>0?e.slice(n+1):void 0;return await this.rpc.call(`config.patch`,{section:r,key:i,value:t}),h.show(`Configuration updated`,`success`),!0}catch(e){return h.show(e instanceof Error?e.message:`Failed to update configuration`,`error`),!1}}async _onActionConfirmationChange(e,t){let n={...this.securityConfig.actionConfirmation,[e]:t};await this._patchConfig(`security.actionConfirmation`,n)}async _onAgentToAgentEnabledChange(e){let t={...this.securityConfig.agentToAgent,enabled:e};await this._patchConfig(`security.agentToAgent`,t)}async _onAgentToAgentAllowChange(e){let t={...this.securityConfig.agentToAgent,allowAgents:e};await this._patchConfig(`security.agentToAgent`,t)}async _onPermissionToggleChange(e){let t={...this.securityConfig.permission,enableNodePermissions:e};await this._patchConfig(`security.permission`,t)}async _onPermissionPathsChange(e,t){let n={...this.securityConfig.permission,[e]:t};await this._patchConfig(`security.permission`,n)}async _saveApprovalRules(){if(this.rpc)try{await this.rpc.call(`config.patch`,{section:`security`,key:`approvalRules`,value:this._approvalRules}),h.show(`Approval rules updated`,`success`)}catch(e){h.show(e instanceof Error?e.message:`Failed to update approval rules`,`error`)}}_renderHistoryRow(e){let t=e.outcome===`approved`?`success`:`error`,n={low:`success`,medium:`warning`,high:`error`,critical:`error`}[e.classification]??`default`;return m`
+      <div class="data-cell" role="cell">${e.agentId}</div>
+      <div class="data-cell" role="cell">${e.action}</div>
+      <div class="data-cell" role="cell"><ic-tag variant=${n}>${e.classification}</ic-tag></div>
+      <div class="data-cell" role="cell"><ic-tag variant=${t}>${e.outcome}</ic-tag></div>
+      <div class="data-cell data-cell--muted" role="cell">${e.reason||`---`}</div>
+      <div class="data-cell data-cell--muted" role="cell"><ic-relative-time .timestamp=${e.resolvedAt}></ic-relative-time></div>
+      <div class="data-cell data-cell--muted" role="cell">${e.resolvedBy}</div>
+    `}_renderRulesContent(){let e=this.securityConfig.actionConfirmation??{},t=this.securityConfig.agentToAgent??{},n=this.securityConfig.permission??{};return m`
+      <div class="policy-section">
+        <div class="section-header">Action Confirmation</div>
+        <ic-toggle label="Require for destructive actions"
+          .checked=${e.requireForDestructive??!0}
+          @change=${e=>this._onActionConfirmationChange(`requireForDestructive`,e.detail)}
+        ></ic-toggle>
+        <div style="margin-top: var(--ic-space-sm);">
+          <ic-toggle label="Require for sensitive actions"
+            .checked=${e.requireForSensitive??!1}
+            @change=${e=>this._onActionConfirmationChange(`requireForSensitive`,e.detail)}
+          ></ic-toggle>
+        </div>
+        <div style="margin-top: var(--ic-space-md);">
+          <ic-array-editor label="Auto-approve list" .items=${e.autoApprove??[]} placeholder="Action name to auto-approve"
+            @change=${e=>this._onActionConfirmationChange(`autoApprove`,e.detail)}
+          ></ic-array-editor>
+        </div>
+      </div>
+
+      <div class="policy-section">
+        <div class="section-header">Agent-to-Agent Policy</div>
+        <ic-toggle label="Enable cross-agent messaging"
+          .checked=${t.enabled??!0}
+          @change=${e=>this._onAgentToAgentEnabledChange(e.detail)}
+        ></ic-toggle>
+        <div style="margin-top: var(--ic-space-md);">
+          <ic-array-editor label="Allowed agents" .items=${t.allowAgents??[]} placeholder="Agent ID"
+            @change=${e=>this._onAgentToAgentAllowChange(e.detail)}
+          ></ic-array-editor>
+        </div>
+      </div>
+
+      <div class="policy-section">
+        <div class="section-header">Permissions</div>
+        <ic-toggle label="Enable Node.js permission model"
+          .checked=${n.enableNodePermissions??!1}
+          @change=${e=>this._onPermissionToggleChange(e.detail)}
+        ></ic-toggle>
+        <div style="margin-top: var(--ic-space-md);">
+          <ic-array-editor label="Allowed filesystem paths" .items=${n.allowedFsPaths??[]} placeholder="/path/to/allow"
+            @change=${e=>this._onPermissionPathsChange(`allowedFsPaths`,e.detail)}
+          ></ic-array-editor>
+        </div>
+        <div style="margin-top: var(--ic-space-md);">
+          <ic-array-editor label="Allowed network hosts" .items=${n.allowedNetHosts??[]} placeholder="hostname or IP"
+            @change=${e=>this._onPermissionPathsChange(`allowedNetHosts`,e.detail)}
+          ></ic-array-editor>
+        </div>
+      </div>
+
+      <div class="policy-section">
+        <div class="section-header">Approval Mode</div>
+        <div class="rules-form">
+          <ic-select label="Default Mode" .value=${this._approvalRules.defaultMode} .options=${[{value:`manual`,label:`Manual (all require approval)`},{value:`auto-low`,label:`Auto-approve low risk`},{value:`auto-medium`,label:`Auto-approve low + medium risk`},{value:`auto-all`,label:`Auto-approve all (no approvals)`}]}
+            @change=${e=>{this._approvalRules={...this._approvalRules,defaultMode:e.detail}}}
+          ></ic-select>
+          <div class="form-field">
+            <label class="form-label">Timeout (seconds)</label>
+            <input class="number-input" type="number" min="0"
+              .value=${String(Math.round(this._approvalRules.timeoutMs/1e3))}
+              @change=${e=>{let t=parseInt(e.target.value,10);!isNaN(t)&&t>=0&&(this._approvalRules={...this._approvalRules,timeoutMs:t*1e3})}}
+            />
+            <span class="form-hint">0 = no timeout (request waits indefinitely)</span>
+          </div>
+          <button class="save-btn" @click=${()=>this._saveApprovalRules()}>Save Rules</button>
+        </div>
+      </div>
+    `}_renderPendingContent(){let e=[...this._pendingApprovals].sort((e,t)=>t.requestedAt-e.requestedAt);return m`
+      <div class="queue-header">
+        <span>Pending</span>
+        <span class="queue-count">${this._pendingApprovals.length}</span>
+      </div>
+      <div class="bulk-actions">
+        <button class="action-btn action-btn--success" ?disabled=${this._pendingApprovals.length===0}
+          @click=${()=>this._handleResolveAll(!0)}>Approve All (${this._pendingApprovals.length})</button>
+        <button class="action-btn action-btn--danger" ?disabled=${this._pendingApprovals.length===0}
+          @click=${()=>this._handleResolveAll(!1)}>Deny All (${this._pendingApprovals.length})</button>
+        <button class="action-btn" @click=${()=>this._handleClearDenialCache()}>Clear Denial Cache</button>
+      </div>
+      ${e.length===0?m`<ic-empty-state icon="security" message="No pending approvals" description="Approval requests will appear here as they arrive."></ic-empty-state>`:m`
+            <div class="queue-list">
+              ${e.map(e=>m`
+                <ic-approval-card .approval=${e}
+                  @approve=${e=>this._handleApprove(e)}
+                  @deny=${e=>this._handleDeny(e)}
+                ></ic-approval-card>
+              `)}
+            </div>
+          `}
+
+      <div class="history-divider">Recent History</div>
+      ${this._resolvedApprovals.length===0?m`<p style="font-size: var(--ic-text-sm); color: var(--ic-text-dim); font-style: italic;">No resolved approvals in the last 7 days.</p>`:m`
+            <div class="history-grid" role="table" aria-label="Resolved approvals">
+              <div class="header-cell" role="columnheader">Agent</div>
+              <div class="header-cell" role="columnheader">Action</div>
+              <div class="header-cell" role="columnheader">Risk</div>
+              <div class="header-cell" role="columnheader">Outcome</div>
+              <div class="header-cell" role="columnheader">Reason</div>
+              <div class="header-cell" role="columnheader">Resolved At</div>
+              <div class="header-cell" role="columnheader">Resolved By</div>
+              ${this._resolvedApprovals.map(e=>this._renderHistoryRow(e))}
+            </div>
+          `}
+    `}render(){return this.activeSubTab===`rules`?this._renderRulesContent():this._renderPendingContent()}};f([s({attribute:!1})],D.prototype,`rpc`,void 0),f([s({attribute:!1})],D.prototype,`securityConfig`,void 0),f([s({type:String})],D.prototype,`activeSubTab`,void 0),f([u()],D.prototype,`_pendingApprovals`,void 0),f([u()],D.prototype,`_resolvedApprovals`,void 0),f([u()],D.prototype,`_approvalRules`,void 0),D=f([a(`ic-approval-queue`)],D);var O={low:`success`,medium:`warning`,high:`error`,critical:`error`},k=class extends i{constructor(...e){super(...e),this.event=null}static{this.styles=[d,e`
+      :host {
+        display: contents;
+      }
+
+      .cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text);
+        display: flex;
+        align-items: center;
+        border-bottom: 1px solid var(--ic-border);
+        min-height: 2.25rem;
+      }
+
+      .cell--muted {
+        color: var(--ic-text-muted);
+      }
+
+      .cell--details {
+        color: var(--ic-text-dim);
+        font-size: var(--ic-text-xs);
+      }
+    `]}render(){if(!this.event)return m`
+        <div class="cell cell--muted" role="cell">---</div>
+        <div class="cell cell--muted" role="cell">---</div>
+        <div class="cell cell--muted" role="cell">---</div>
+        <div class="cell cell--muted" role="cell">---</div>
+        <div class="cell cell--muted" role="cell">---</div>
+      `;let e=this.event,n=O[e.classification]??`default`;return m`
+      <div class="cell cell--muted" role="cell">
+        <ic-relative-time .timestamp=${e.timestamp}></ic-relative-time>
+      </div>
+      <div class="cell" role="cell">${e.agentId||`---`}</div>
+      <div class="cell" role="cell">${e.action||`---`}</div>
+      <div class="cell" role="cell">
+        <ic-tag variant=${n}>${e.classification||`unknown`}</ic-tag>
+      </div>
+      <div class="cell cell--muted" role="cell">${e.user||`---`}</div>
+      ${e.details?m`<div class="cell cell--details" role="cell" style="grid-column: 1 / -1;">${e.details}</div>`:t}
+    `}};f([s({type:Object})],k.prototype,`event`,void 0),k=f([a(`ic-audit-row`)],k);var A=class extends i{constructor(...e){super(...e),this.activeSubTab=`events`,this.securityEvents=[],this.inputGuardSummary={blockedAttempts:0,patternsTriggered:[],period:`session`},this._auditEntries=[],this._paused=!1,this._pauseBuffer=[],this._expandedEvents=new Set}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .guard-summary {
+        display: flex;
+        gap: var(--ic-space-sm);
+        padding: var(--ic-space-sm) var(--ic-space-md);
+        background: var(--ic-surface-alt, var(--ic-surface-2));
+        border-radius: var(--ic-radius-md);
+        margin-bottom: var(--ic-space-md);
+        align-items: center;
+        flex-wrap: wrap;
+      }
+
+      .event-row {
+        display: flex;
+        gap: var(--ic-space-sm);
+        padding: var(--ic-space-sm) var(--ic-space-sm);
+        border-bottom: 1px solid var(--ic-border);
+        align-items: center;
+      }
+
+      .event-message {
+        flex: 1;
+        font-size: var(--ic-text-sm);
+      }
+
+      .event-details {
+        font-family: ui-monospace, monospace;
+        font-size: var(--ic-text-xs);
+        background: var(--ic-surface-alt, var(--ic-surface-2));
+        padding: var(--ic-space-sm);
+        border-radius: var(--ic-radius-md);
+        max-height: 200px;
+        overflow: auto;
+        white-space: pre-wrap;
+        margin-top: var(--ic-space-xs);
+      }
+
+      .event-details-toggle {
+        cursor: pointer;
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        background: none;
+        border: none;
+        font-family: inherit;
+        padding: 0;
+      }
+
+      .event-details-toggle:hover {
+        color: var(--ic-text-muted);
+      }
+
+      .audit-controls {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-md);
+      }
+
+      .pause-btn {
+        padding: 0.375rem 0.75rem;
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text-muted);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .pause-btn[data-active] {
+        background: var(--ic-warning);
+        color: var(--ic-bg);
+        border-color: var(--ic-warning);
+      }
+
+      .audit-grid {
+        display: grid;
+        grid-template-columns: 8rem 7rem 1fr 6rem 6rem;
+        overflow-y: auto;
+        max-height: 600px;
+      }
+
+      .audit-grid .header-cell {
+        padding: var(--ic-space-xs) var(--ic-space-sm);
+        font-size: var(--ic-text-xs);
+        font-weight: 600;
+        color: var(--ic-text-muted);
+        text-transform: uppercase;
+        letter-spacing: 0.05em;
+        border-bottom: 2px solid var(--ic-border);
+        background: var(--ic-surface);
+        position: sticky;
+        top: 0;
+        z-index: 1;
+      }
+    `]}onAuditEvent(e){let t=e;if(t){if(this._paused){this._pauseBuffer=[...this._pauseBuffer.slice(-199),t];return}this._auditEntries=[...this._auditEntries.slice(-199),t]}}get auditEntries(){return this._auditEntries}get paused(){return this._paused}get pauseBuffer(){return this._pauseBuffer}_severityVariant(e){switch(e){case`critical`:case`high`:return`error`;case`medium`:return`warning`;default:return`info`}}_toggleEventDetails(e){this._expandedEvents.has(e)?this._expandedEvents.delete(e):this._expandedEvents.add(e),this.requestUpdate()}_togglePause(){if(this._paused){let e=[...this._auditEntries,...this._pauseBuffer].slice(-200);this._auditEntries=e,this._pauseBuffer=[]}this._paused=!this._paused}_renderEventsContent(){return m`
+      <div class="guard-summary">
+        <span style="font-size: var(--ic-text-sm); font-weight: 500; color: var(--ic-text-muted);">Input Guard</span>
+        <ic-tag variant="error">${this.inputGuardSummary.blockedAttempts} blocked</ic-tag>
+        ${this.inputGuardSummary.patternsTriggered.length>0?m`<ic-tag variant="warning">${this.inputGuardSummary.patternsTriggered.join(`, `)}</ic-tag>`:t}
+      </div>
+      ${this.securityEvents.length===0?m`<ic-empty-state icon="security" message="No security events" description="Security events will appear here in real-time as they are detected."></ic-empty-state>`:m`
+            <div role="list" aria-label="Security events">
+              ${this.securityEvents.map(e=>m`
+                  <div class="event-row" role="listitem">
+                    <ic-tag variant=${this._severityVariant(e.severity)}>${e.severity}</ic-tag>
+                    <ic-tag variant="default">${e.type}</ic-tag>
+                    <span class="event-message">${e.message}</span>
+                    ${e.agentId?m`<ic-tag variant="info">${e.agentId}</ic-tag>`:t}
+                    <ic-relative-time .timestamp=${e.timestamp}></ic-relative-time>
+                    <button class="event-details-toggle"
+                      @click=${()=>this._toggleEventDetails(e.id)}
+                    >${this._expandedEvents.has(e.id)?`hide`:`details`}</button>
+                  </div>
+                  ${this._expandedEvents.has(e.id)?m`<pre class="event-details">${JSON.stringify(e.details,null,2)}</pre>`:t}
+                `)}
+            </div>
+          `}
+    `}_renderAuditContent(){return m`
+      <div class="audit-controls">
+        <button class="pause-btn" ?data-active=${this._paused}
+          @click=${()=>this._togglePause()}
+        >${this._paused?`Resume`:`Pause`}</button>
+        ${this._paused?m`<span style="font-size: var(--ic-text-xs); color: var(--ic-text-dim);">${this._pauseBuffer.length} buffered</span>`:t}
+      </div>
+      ${this._auditEntries.length===0?m`<ic-empty-state icon="security" message="No audit events" description="Events will appear here as they occur."></ic-empty-state>`:m`
+            <div class="audit-grid" role="table" aria-label="Audit log">
+              <div class="header-cell" role="columnheader">Time</div>
+              <div class="header-cell" role="columnheader">Agent</div>
+              <div class="header-cell" role="columnheader">Action</div>
+              <div class="header-cell" role="columnheader">Risk</div>
+              <div class="header-cell" role="columnheader">User</div>
+              ${this._auditEntries.map(e=>m`<ic-audit-row .event=${e} role="row"></ic-audit-row>`)}
+            </div>
+          `}
+    `}render(){return this.activeSubTab===`audit`?this._renderAuditContent():this._renderEventsContent()}};f([s({type:String})],A.prototype,`activeSubTab`,void 0),f([s({attribute:!1})],A.prototype,`securityEvents`,void 0),f([s({attribute:!1})],A.prototype,`inputGuardSummary`,void 0),f([u()],A.prototype,`_auditEntries`,void 0),f([u()],A.prototype,`_paused`,void 0),A=f([a(`ic-security-event-feed`)],A);var j=3e4,M=200,N=class extends i{constructor(...e){super(...e),this.rpcClient=null,this._loadState=`loading`,this._rows=[],this._kind=``,this._agentId=``,this._tenant=``,this._outcome=``,this._severity=``,this._refreshInterval=null,this._rpcStatusUnsub=null}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .header {
+        display: flex;
+        justify-content: space-between;
+        align-items: center;
+        margin-bottom: var(--ic-space-md);
+        flex-wrap: wrap;
+        gap: var(--ic-space-sm);
+      }
+
+      .header-title {
+        font-size: var(--ic-text-base);
+        font-weight: 600;
+        color: var(--ic-text);
+      }
+
+      .summary-bar {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-md);
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text-dim);
+      }
+
+      .filter-section {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-sm);
+        margin-bottom: var(--ic-space-md);
+      }
+
+      .filter-group {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+      }
+
+      .filter-label {
+        font-size: var(--ic-text-xs);
+        color: var(--ic-text-dim);
+        text-transform: uppercase;
+        letter-spacing: 0.05em;
+        min-width: 5rem;
+      }
+
+      .error-container {
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        gap: 0.75rem;
+        padding: 3rem;
+      }
+
+      .error-message {
+        color: var(--ic-error);
+        font-size: 0.875rem;
+      }
+
+      .retry-btn {
+        padding: 0.5rem 1rem;
+        background: var(--ic-surface);
+        border: 1px solid var(--ic-border);
+        border-radius: 0.375rem;
+        color: var(--ic-text);
+        font-size: 0.8125rem;
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .retry-btn:hover {
+        background: var(--ic-surface-alt, #374151);
+      }
+    `]}connectedCallback(){super.connectedCallback()}disconnectedCallback(){super.disconnectedCallback(),this._refreshInterval!==null&&(n(this._refreshInterval),this._refreshInterval=null),this._rpcStatusUnsub?.(),this._rpcStatusUnsub=null}willUpdate(e){e.has(`rpcClient`)&&this.rpcClient&&this._tryLoad()}_tryLoad(){if(!this.rpcClient){this._loadState=`loaded`;return}this._rpcStatusUnsub?.(),this.rpcClient.status===`connected`?this._startLoading():this._rpcStatusUnsub=this.rpcClient.onStatusChange(e=>{e===`connected`&&this._startLoading()})}_startLoading(){this._loadData(),this._refreshInterval===null&&(this._refreshInterval=p(()=>{this._loadData()},j))}_buildRequest(){return{...this._kind===``?{}:{kind:this._kind},...this._agentId===``?{}:{agentId:this._agentId},...this._tenant===``?{}:{tenant:this._tenant},...this._outcome===``?{}:{outcome:this._outcome},...this._severity===``?{}:{severity:this._severity},limit:M}}async _loadData(){if(!this.rpcClient||this.rpcClient.status!==`connected`){this._loadState=`loaded`;return}let e=this.rpcClient;try{let t=await e.call(`obs.audit.query`,this._buildRequest()),n=Array.isArray(t?.rows)?t.rows:[];this._rows=n.map(e=>this._narrowRow(e)),this._loadState=`loaded`}catch{this._loadState=`error`}}_narrowRow(e){return{id:String(e.id??``),tenantId:String(e.tenantId??``),agentId:e.agentId==null?null:String(e.agentId),ts:typeof e.ts==`number`?e.ts:0,kind:String(e.kind??``),classification:e.classification==null?null:String(e.classification),outcome:e.outcome==null?null:String(e.outcome),severity:e.severity==null?null:String(e.severity)}}_onFilterChange(e,t){switch(e){case`kind`:this._kind=t;break;case`agentId`:this._agentId=t;break;case`tenant`:this._tenant=t;break;case`outcome`:this._outcome=t;break;case`severity`:this._severity=t;break}this._loadData()}_onChipFilter(e,t){let n=[...t.detail.selected];this._onFilterChange(e,n.length>0?n[n.length-1]:``)}get _severityVariant(){return e=>{switch(e){case`critical`:case`high`:return`error`;case`medium`:return`warning`;default:return`info`}}}get _columns(){return[{key:`ts`,label:`Time`,render:(e,t)=>m`<ic-relative-time .timestamp=${t.ts}></ic-relative-time>`},{key:`kind`,label:`Kind`,render:(e,t)=>m`<ic-tag>${t.kind}</ic-tag>`},{key:`agentId`,label:`Agent`,render:(e,t)=>t.agentId?m`<ic-tag variant="info">${t.agentId}</ic-tag>`:m`<span>—</span>`},{key:`tenantId`,label:`Tenant`,render:(e,t)=>m`<span>${t.tenantId||`—`}</span>`},{key:`outcome`,label:`Outcome`,render:(e,t)=>m`<ic-tag variant=${t.outcome===`denied`||t.outcome===`failure`?`error`:`default`}>${t.outcome??`—`}</ic-tag>`},{key:`severity`,label:`Severity`,render:(e,t)=>m`<ic-tag variant=${this._severityVariant(t.severity)}>${t.severity??`—`}</ic-tag>`}]}_chipOptions(e){return[...new Set(this._rows.map({kind:e=>e.kind,agentId:e=>e.agentId,tenant:e=>e.tenantId,outcome:e=>e.outcome,severity:e=>e.severity}[e]).filter(e=>e!=null&&e!==``))].sort().map(e=>({value:e,label:e}))}_selectedSet(e){let t={kind:this._kind,agentId:this._agentId,tenant:this._tenant,outcome:this._outcome,severity:this._severity};return t[e]===``?new Set:new Set([t[e]])}_renderFilters(){return m`
+      <div class="filter-section">
+        ${[{field:`kind`,label:`Kind`},{field:`agentId`,label:`Agent`},{field:`tenant`,label:`Tenant`},{field:`outcome`,label:`Outcome`},{field:`severity`,label:`Severity`}].map(e=>m`
+            <div class="filter-group">
+              <span class="filter-label">${e.label}</span>
+              <ic-filter-chips
+                .options=${this._chipOptions(e.field)}
+                .selected=${this._selectedSet(e.field)}
+                @filter-change=${t=>this._onChipFilter(e.field,t)}
+              ></ic-filter-chips>
+            </div>
+          `)}
+      </div>
+    `}render(){return this._loadState===`loading`&&!this.rpcClient?m`<ic-skeleton-view variant="table"></ic-skeleton-view>`:this._loadState===`error`?m`
+        <div class="error-container">
+          <span class="error-message">Failed to load the durable audit log</span>
+          <button class="retry-btn" @click=${()=>this._tryLoad()}>Retry</button>
+        </div>
+      `:this._rows.length===0?m`<ic-empty-state
+        icon="security"
+        message="Audit persistence off (or no matching events)"
+        description="The durable security-audit log is empty. Enable audit persistence to retain decisions across restarts; with persistence on, events appear here as they are recorded."
+      ></ic-empty-state>`:m`
+      <div class="header">
+        <span class="header-title">Durable Audit Log</span>
+      </div>
+      ${this._renderFilters()}
+      <div class="summary-bar">${this._rows.length} audit event(s)</div>
+      <ic-data-table
+        .columns=${this._columns}
+        .rows=${this._rows}
+        emptyMessage="No matching audit events"
+      ></ic-data-table>
+    `}};f([s({attribute:!1})],N.prototype,`rpcClient`,void 0),f([u()],N.prototype,`_loadState`,void 0),f([u()],N.prototype,`_rows`,void 0),f([u()],N.prototype,`_kind`,void 0),f([u()],N.prototype,`_agentId`,void 0),f([u()],N.prototype,`_tenant`,void 0),f([u()],N.prototype,`_outcome`,void 0),f([u()],N.prototype,`_severity`,void 0),N=f([a(`ic-durable-audit-log`)],N);var P=200,F=100,I=[{id:`events`,label:`Security Events`},{id:`audit`,label:`Audit Log`},{id:`tokens`,label:`API Tokens`},{id:`secrets`,label:`Secrets`},{id:`rules`,label:`Approval Rules`},{id:`pending`,label:`Pending Approvals`},{id:`health`,label:`Provider Health`}],L=class extends i{constructor(...e){super(...e),this.rpcClient=null,this.apiClient=null,this.eventDispatcher=null,this.initialTab=`events`,this._sse=null,this._loadState=`loading`,this._error=``,this._activeTab=`events`,this._securityEvents=[],this._inputGuardSummary={blockedAttempts:0,patternsTriggered:[],period:`session`},this._securityConfig={},this._providerHealth=[],this._failoverLog=[],this._authCooldowns=[],this._healthReloadDebounce=null}static{this.styles=[d,c,e`
+      :host {
+        display: block;
+      }
+
+      .view-header {
+        margin-bottom: var(--ic-space-lg);
+      }
+
+      .view-title {
+        font-size: 1.125rem;
+        font-weight: 600;
+      }
+
+      .state-container {
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        padding: 3rem;
+      }
+
+      .error-container {
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        gap: 0.75rem;
+        padding: 3rem;
+      }
+
+      .error-message {
+        color: var(--ic-error);
+        font-size: var(--ic-text-sm);
+      }
+
+      .retry-btn {
+        padding: 0.5rem 1rem;
+        background: var(--ic-surface-2);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        color: var(--ic-text-muted);
+        font-size: var(--ic-text-sm);
+        cursor: pointer;
+        font-family: inherit;
+      }
+
+      .retry-btn:hover {
+        background: var(--ic-border);
+      }
+
+      .tab-content {
+        margin-top: var(--ic-space-md);
+      }
+
+      .section-header {
+        font-size: var(--ic-text-base);
+        font-weight: 600;
+        color: var(--ic-text);
+        margin-top: var(--ic-space-lg);
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .section-header:first-child {
+        margin-top: 0;
+      }
+
+      /* Secrets tab styles */
+      .policy-section {
+        margin-bottom: var(--ic-space-xl);
+        max-width: 40rem;
+      }
+
+      .tls-row {
+        display: flex;
+        align-items: center;
+        gap: var(--ic-space-sm);
+        font-size: var(--ic-text-sm);
+      }
+
+      .tls-label {
+        font-weight: 500;
+        color: var(--ic-text-muted);
+        min-width: 6rem;
+      }
+
+      .tls-value {
+        font-family: ui-monospace, monospace;
+        color: var(--ic-text);
+        font-size: var(--ic-text-xs);
+      }
+
+      /* Provider Health tab */
+      .health-grid {
+        display: grid;
+        grid-template-columns: 1fr;
+        gap: var(--ic-space-md);
+      }
+
+      @media (min-width: 768px) {
+        .health-grid {
+          grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+        }
+      }
+
+      .health-card {
+        background: var(--ic-surface);
+        border: 1px solid var(--ic-border);
+        border-radius: var(--ic-radius-md);
+        padding: var(--ic-space-md);
+      }
+
+      .health-card-header {
+        display: flex;
+        justify-content: space-between;
+        align-items: center;
+        margin-bottom: var(--ic-space-sm);
+      }
+
+      .health-card-header strong {
+        font-size: var(--ic-text-sm);
+      }
+
+      .health-card-stat {
+        font-size: var(--ic-text-sm);
+        color: var(--ic-text-muted);
+        margin-top: var(--ic-space-xs);
+      }
+
+      .failover-log {
+        max-height: 300px;
+        overflow-y: auto;
+        margin-top: var(--ic-space-md);
+      }
+
+      .failover-entry {
+        display: flex;
+        flex-direction: row;
+        gap: var(--ic-space-sm);
+        padding: var(--ic-space-sm);
+        border-bottom: 1px solid var(--ic-border);
+        font-size: var(--ic-text-sm);
+        align-items: center;
+        flex-wrap: wrap;
+      }
+
+      .cooldown-list {
+        display: flex;
+        flex-direction: column;
+        gap: var(--ic-space-sm);
+        margin-top: var(--ic-space-md);
+      }
+
+      .cooldown-entry {
+        display: flex;
+        gap: var(--ic-space-sm);
+        align-items: center;
+        font-size: var(--ic-text-sm);
+      }
+    `]}_scheduleHealthReload(e=300){this._healthReloadDebounce!==null&&l(this._healthReloadDebounce),this._healthReloadDebounce=r(()=>{this._healthReloadDebounce=null,this._loadProviderHealth()},e)}connectedCallback(){super.connectedCallback(),this._activeTab=this.initialTab,this._initSse()}willUpdate(e){this.hasUpdated&&e.has(`initialTab`)&&(this._activeTab=this.initialTab)}disconnectedCallback(){super.disconnectedCallback(),this._healthReloadDebounce!==null&&(l(this._healthReloadDebounce),this._healthReloadDebounce=null)}updated(e){e.has(`rpcClient`)&&this.rpcClient&&this._loadData(),e.has(`eventDispatcher`)&&this.eventDispatcher&&!this._sse&&this._initSse()}get _eventFeed(){return this.shadowRoot?.querySelector(`ic-security-event-feed`)??null}get _approvalQueue(){return this.shadowRoot?.querySelector(`ic-approval-queue`)??null}_initSse(){!this.eventDispatcher||this._sse||(this._sse=new g(this,this.eventDispatcher,{"audit:event":e=>{this._eventFeed?.onAuditEvent(e);let t=e;if(t.actionType===`output_guard`){let e=t.metadata??{},n=e.action,r=n===`redacted`?`high`:`medium`,i=e.findingCount??0,a={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`output_guard`,severity:r,message:`Output guard ${n??`scan`}: ${i} finding(s)`,details:{findingTypes:e.findingTypes,severities:e.severities,action:e.action,context:e.context},timestamp:t.timestamp??o(),agentId:t.agentId};this._securityEvents=[a,...this._securityEvents].slice(0,P)}},"approval:requested":e=>{this._approvalQueue?.onApprovalPending(e)},"approval:resolved":e=>{this._approvalQueue?.onApprovalResolved(e)},"security:injection_detected":e=>{let t=e,n={high:`high`,medium:`medium`,low:`low`}[t.riskLevel??`medium`]??`medium`,r=t.source??`unknown`,i=t.patterns??[],a={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`injection`,severity:n,message:`Injection detected from ${r}`,details:{patterns:i,source:r,sessionKey:t.sessionKey},timestamp:o(),agentId:t.agentId};this._securityEvents=[a,...this._securityEvents].slice(0,P);let s=[...new Set([...this._inputGuardSummary.patternsTriggered,...i])];this._inputGuardSummary={...this._inputGuardSummary,blockedAttempts:this._inputGuardSummary.blockedAttempts+1,patternsTriggered:s}},"security:injection_rate_exceeded":e=>{let t=e,n=t.count??0,r=t.threshold??0,i=t.action??`block`,a={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`input_guard`,severity:`critical`,message:`Rate limit exceeded: ${n}/${r} (action: ${i})`,details:{sessionKey:t.sessionKey,count:n,threshold:r,action:i},timestamp:o()};this._securityEvents=[a,...this._securityEvents].slice(0,P)},"security:memory_tainted":e=>{let t=e,n=t.blocked??!1,r=t.originalTrustLevel??`unknown`,i=t.adjustedTrustLevel??`unknown`,a={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`memory_tainted`,severity:n?`high`:`medium`,message:`Memory tainted for ${t.agentId??`unknown`}: ${r} -> ${i}`,details:{patterns:t.patterns,blocked:n,originalTrustLevel:r,adjustedTrustLevel:i},timestamp:o(),agentId:t.agentId};this._securityEvents=[a,...this._securityEvents].slice(0,P)},"security:warn":e=>{let t=e,n={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`warn`,severity:`medium`,message:t.message??`Security warning`,details:{category:t.category},timestamp:o(),agentId:t.agentId};this._securityEvents=[n,...this._securityEvents].slice(0,P)},"secret:accessed":e=>{let t=e,n=t.outcome??`unknown`,r={denied:`high`,not_found:`medium`,success:`low`}[n]??`medium`,i=t.secretName??`unknown`,a={id:`sec-${o()}-${Math.random().toString(36).slice(2,6)}`,type:`secret_access`,severity:r,message:`Secret '${i}' ${n} by ${t.agentId??`unknown`}`,details:{secretName:i,outcome:n},timestamp:o(),agentId:t.agentId};this._securityEvents=[a,...this._securityEvents].slice(0,P)},"provider:degraded":e=>{let t=e.provider??``;this._providerHealth=this._providerHealth.map(e=>e.providerId===t?{...e,status:`degraded`}:e),this._scheduleHealthReload()},"provider:recovered":e=>{let t=e.provider??``;this._providerHealth=this._providerHealth.map(e=>e.providerId===t?{...e,status:`healthy`}:e),this._scheduleHealthReload()},"model:auth_cooldown":e=>{let t=e,n={keyName:t.keyName,provider:t.provider,cooldownMs:t.cooldownMs,failureCount:t.failureCount,timestamp:t.timestamp};this._authCooldowns=[n,...this._authCooldowns].slice(0,50),this._scheduleHealthReload(500)},"model:fallback_attempt":e=>{let t=e,n={fromProvider:t.fromProvider,fromModel:t.fromModel,toProvider:t.toProvider,toModel:t.toModel,error:t.error,attemptNumber:t.attemptNumber,timestamp:t.timestamp};this._failoverLog=[n,...this._failoverLog].slice(0,F),this._scheduleHealthReload()},"model:fallback_exhausted":e=>{let t=e,n={provider:t.provider,model:t.model,totalAttempts:t.totalAttempts,timestamp:t.timestamp,exhausted:!0};this._failoverLog=[n,...this._failoverLog].slice(0,F),this._scheduleHealthReload()},"observability:token_usage":()=>{this._scheduleHealthReload(500)}}))}async _loadProviderHealth(){if(this.rpcClient)try{let e=await this.rpcClient.call(`agent.cacheStats`),t=o(),n=t-300*1e3,r=(e.providers??[]).map(e=>{let r=this._failoverLog.filter(t=>t.fromProvider===e.provider||t.provider===e.provider),i=r.length>0?Math.max(...r.map(e=>e.timestamp)):void 0,a=`healthy`,o=this._authCooldowns.find(n=>n.provider===e.provider&&n.timestamp+n.cooldownMs>t);return o&&(a=`degraded`),this._failoverLog.find(t=>t.exhausted===!0&&t.provider===e.provider&&t.timestamp>n)&&(a=`down`),{providerId:e.provider,name:e.provider,status:a,cacheHitRate:e.cacheHitRate,failoverCount:r.length,lastFailover:i,authCooldownUntil:o?o.timestamp+o.cooldownMs:void 0}});this._providerHealth=r}catch{}}async _loadData(){if(this.rpcClient){this._loadState=`loading`,this._error=``;try{let e=await this.rpcClient.call(`config.read`);this._securityConfig=e.config.security??{},this._loadState=`loaded`,this._loadProviderHealth()}catch(e){this._error=e instanceof Error?e.message:`Failed to load security configuration`,this._loadState=`error`}}}async _patchConfig(e,t){if(!this.rpcClient)return!1;try{let n=e.indexOf(`.`),r=n>0?e.slice(0,n):e,i=n>0?e.slice(n+1):void 0;return await this.rpcClient.call(`config.patch`,{section:r,key:i,value:t}),h.show(`Configuration updated`,`success`),!0}catch(e){let t=e instanceof Error?e.message:`Failed to update configuration`;return h.show(t,`error`),!1}}_renderSecretsTab(){return m`
+      <div class="policy-section">
+        <div class="section-header">Credential Storage</div>
+        <div style="margin-top: var(--ic-space-md);">
+          <div class="tls-row">
+            <span class="tls-label">Storage Mode</span>
+            <span class="tls-value">${this._securityConfig.storage??`encrypted`}</span>
+          </div>
+          <div class="tls-row">
+            <span class="tls-label">DB Path</span>
+            <span class="tls-value">&lt;dataDir&gt;/secrets.db</span>
+          </div>
+        </div>
+        <div style="margin-top: var(--ic-space-sm); font-size: 0.85em; color: var(--ic-color-text-secondary, #666);">
+          Storage mode is set in config.yaml (security.storage) and requires a daemon restart to change.
+        </div>
+      </div>
+    `}_statusToDotStatus(e){switch(e){case`healthy`:return`connected`;case`degraded`:return`reconnecting`;case`down`:return`disconnected`;default:return`disconnected`}}_renderHealthTab(){let e=o(),n=this._authCooldowns.filter(t=>t.timestamp+t.cooldownMs>e);return m`
+      <div class="section-header">Provider Status</div>
+      ${this._providerHealth.length===0?m`<ic-empty-state icon="cloud" message="No provider data" description="Provider health data will appear after LLM calls are made."></ic-empty-state>`:m`
+            <div class="health-grid">
+              ${this._providerHealth.map(n=>m`
+                  <div class="health-card">
+                    <div class="health-card-header">
+                      <strong>${n.name}</strong>
+                      <ic-connection-dot
+                        status=${this._statusToDotStatus(n.status)}
+                        size="8px"
+                      ></ic-connection-dot>
+                    </div>
+                    <ic-progress-bar
+                      .value=${Math.round(n.cacheHitRate*100)}
+                      label="Cache Hit Rate"
+                      .thresholds=${{green:101,yellow:102}}
+                    ></ic-progress-bar>
+                    <div class="health-card-stat">
+                      Failovers: ${n.failoverCount}
+                      ${n.lastFailover?m` &mdash; last <ic-relative-time .timestamp=${n.lastFailover}></ic-relative-time>`:t}
+                    </div>
+                    ${n.authCooldownUntil&&n.authCooldownUntil>e?m`
+                          <div class="health-card-stat">
+                            <ic-tag variant="warning">Auth cooldown</ic-tag>
+                            ${Math.ceil((n.authCooldownUntil-e)/1e3)}s remaining
+                          </div>
+                        `:t}
+                  </div>
+                `)}
+            </div>
+          `}
+
+      <div class="section-header" style="margin-top: var(--ic-space-xl);">Failover Event Log</div>
+      ${this._failoverLog.length===0?m`<p style="font-size: var(--ic-text-sm); color: var(--ic-text-dim); font-style: italic;">No failover events recorded</p>`:m`
+            <div class="failover-log">
+              ${this._failoverLog.map(e=>m`
+                  <div class="failover-entry">
+                    <ic-relative-time .timestamp=${e.timestamp}></ic-relative-time>
+                    ${e.exhausted?m`
+                          <span>${e.provider??`unknown`} exhausted after ${e.totalAttempts??`?`} attempts</span>
+                          <ic-tag variant="error">EXHAUSTED</ic-tag>
+                        `:m`
+                          <span>${e.fromProvider??`?`}/${e.fromModel??`?`} &rarr; ${e.toProvider??`?`}/${e.toModel??`?`}</span>
+                          ${e.attemptNumber==null?t:m`<ic-tag variant="info">#${e.attemptNumber}</ic-tag>`}
+                          ${e.error?m`<span style="color: var(--ic-text-dim);">${e.error}</span>`:t}
+                        `}
+                  </div>
+                `)}
+            </div>
+          `}
+
+      <div class="section-header" style="margin-top: var(--ic-space-xl);">Auth Cooldowns</div>
+      ${n.length===0?m`<p style="font-size: var(--ic-text-sm); color: var(--ic-text-dim); font-style: italic;">No active cooldowns</p>`:m`
+            <div class="cooldown-list">
+              ${n.map(t=>m`
+                  <div class="cooldown-entry">
+                    <ic-tag variant="warning">${t.provider}</ic-tag>
+                    <span>${t.keyName}</span>
+                    <span style="color: var(--ic-text-dim);">${t.failureCount} failures</span>
+                    <span>${Math.ceil((t.timestamp+t.cooldownMs-e)/1e3)}s remaining</span>
+                  </div>
+                `)}
+            </div>
+          `}
+    `}_renderTabContent(){switch(this._activeTab){case`events`:return m`<ic-security-event-feed
+          activeSubTab="events"
+          .securityEvents=${this._securityEvents}
+          .inputGuardSummary=${this._inputGuardSummary}
+        ></ic-security-event-feed>`;case`audit`:return m`<ic-durable-audit-log .rpcClient=${this.rpcClient}></ic-durable-audit-log>`;case`tokens`:return m`<ic-token-manager .rpc=${this.rpcClient}></ic-token-manager>`;case`secrets`:return this._renderSecretsTab();case`rules`:return m`<ic-approval-queue
+          activeSubTab="rules"
+          .rpc=${this.rpcClient}
+          .securityConfig=${this._securityConfig}
+        ></ic-approval-queue>`;case`pending`:return m`<ic-approval-queue
+          activeSubTab="pending"
+          .rpc=${this.rpcClient}
+          .securityConfig=${this._securityConfig}
+        ></ic-approval-queue>`;case`health`:return this._renderHealthTab();default:return t}}render(){return this._loadState===`loading`?m`<ic-skeleton-view variant="list"></ic-skeleton-view>`:this._loadState===`error`?m`
+        <div class="error-container">
+          <span class="error-message">${this._error}</span>
+          <button class="retry-btn" @click=${()=>this._loadData()}>Retry</button>
+        </div>
+      `:m`
+      <div class="view-header">
+        <div class="view-title">Security</div>
+      </div>
+      <ic-tabs
+        .tabs=${I}
+        .activeTab=${this._activeTab}
+        @tab-change=${e=>{this._activeTab=e.detail}}
+      ></ic-tabs>
+      <div class="tab-content">
+        ${this._renderTabContent()}
+      </div>
+    `}};f([s({attribute:!1})],L.prototype,`rpcClient`,void 0),f([s({attribute:!1})],L.prototype,`apiClient`,void 0),f([s({attribute:!1})],L.prototype,`eventDispatcher`,void 0),f([s()],L.prototype,`initialTab`,void 0),f([u()],L.prototype,`_loadState`,void 0),f([u()],L.prototype,`_error`,void 0),f([u()],L.prototype,`_activeTab`,void 0),f([u()],L.prototype,`_securityEvents`,void 0),f([u()],L.prototype,`_inputGuardSummary`,void 0),f([u()],L.prototype,`_securityConfig`,void 0),f([u()],L.prototype,`_providerHealth`,void 0),f([u()],L.prototype,`_failoverLog`,void 0),f([u()],L.prototype,`_authCooldowns`,void 0),L=f([a(`ic-security-view`)],L);export{L as IcSecurityView};