dexterm-cli 0.2.0 → 0.2.2

package/dist/packages/classifier/src/questions.js

@@ -0,0 +1,97 @@
+// The built-in question sets (task-1822). Question text is first-party and frozen per set id: changing a wording
+// means a new id, so recorded results and calibration maps stay tied to the exact question they were fitted on.
+// Validation mirrors the System One API limits (choice: 1-255 options, score: 2-10 levels).
+import { ClassifierError } from "./types.js";
+/** Rug / drain risk and the 6 h outcome class. Labels match the task-1734 winner-recall classes. */
+export const COIN_RISK = {
+    id: 'coin-risk/1',
+    questions: [
+        {
+            id: 'drain_6h',
+            type: 'noul',
+            instructions: 'Within the next 6 hours, will this token be drained: its pool liquidity pulled, or its price collapsing below a fifth of the current price?',
+            criteria: { true: 'drained within 6 hours (rug pull or collapse)', false: 'liquidity and price hold above those floors for 6 hours' },
+        },
+        {
+            id: 'outcome_6h',
+            type: 'choice',
+            instructions: 'Which outcome is most likely for this token over the next 6 hours?',
+            criteria: {
+                RUG: 'drained (liquidity pulled or price below a fifth) without first doubling',
+                WIN: 'price reaches at least 3x the current price while the pool still holds at least $10k of liquidity',
+                DUD: 'neither: it drifts, fades or stalls',
+            },
+        },
+    ],
+};
+/** The LARP eval question: does the coin go bad (rug or dead) within 72 h. Matches the task-1401 eval label. */
+export const LARP_BAD = {
+    id: 'larp-bad/1',
+    questions: [
+        {
+            id: 'bad_72h',
+            type: 'noul',
+            instructions: 'Within 72 hours, will this token be rugged or dead (liquidity pulled, or trading stopped)?',
+            criteria: { true: 'rugged or dead within 72 hours', false: 'still trading after 72 hours (flat, fading or running)' },
+        },
+    ],
+};
+/** Narrative category of a coin (task-1818's tracker). Options are the tracker's coarse buckets. */
+export const NARRATIVE = {
+    id: 'narrative/1',
+    questions: [
+        {
+            id: 'category',
+            type: 'choice',
+            instructions: 'Which narrative category best describes this token, judging only from its name, symbol and description?',
+            criteria: {
+                animal: 'an animal or pet meme (dogs, cats, frogs, ...)',
+                ai: 'AI, agents or robots',
+                politics: 'politicians, elections or news figures',
+                celebrity: 'a celebrity, influencer or brand',
+                culture: 'an internet meme, joke or cultural moment',
+                tech: 'a product, utility, protocol or tool',
+                other: 'none of these',
+            },
+        },
+    ],
+};
+export const QUESTION_SETS = {
+    [COIN_RISK.id]: COIN_RISK,
+    [LARP_BAD.id]: LARP_BAD,
+    [NARRATIVE.id]: NARRATIVE,
+};
+const ID_RE = /^[a-z][a-z0-9_]{0,39}$/;
+/** Throws ClassifierError('invalid') on a malformed set. Returns the set for chaining. */
+export function validateQuestionSet(set) {
+    if (!set || typeof set.id !== 'string' || !set.id)
+        throw new ClassifierError('invalid', 'question set needs an id');
+    if (!Array.isArray(set.questions) || set.questions.length === 0)
+        throw new ClassifierError('invalid', `${set.id}: no questions`);
+    const seen = new Set();
+    for (const q of set.questions) {
+        if (!ID_RE.test(q.id))
+            throw new ClassifierError('invalid', `${set.id}: bad question id ${JSON.stringify(q.id)}`);
+        if (seen.has(q.id))
+            throw new ClassifierError('invalid', `${set.id}: duplicate question id ${q.id}`);
+        seen.add(q.id);
+        if (typeof q.instructions !== 'string' || !q.instructions.trim())
+            throw new ClassifierError('invalid', `${set.id}/${q.id}: empty instructions`);
+        const n = labelsOf(q).length;
+        if (q.type === 'choice' && (n < 1 || n > 255))
+            throw new ClassifierError('invalid', `${set.id}/${q.id}: choice needs 1-255 options`);
+        if (q.type === 'score' && (n < 2 || n > 10))
+            throw new ClassifierError('invalid', `${set.id}/${q.id}: score needs 2-10 levels`);
+        if (q.type !== 'choice' && q.type !== 'noul' && q.type !== 'score')
+            throw new ClassifierError('invalid', `${set.id}/${q.id}: unknown type`);
+    }
+    return set;
+}
+/** The labels an answer to `q` carries probabilities for. noul: ['yes','no']; score: '0'..'n-1'. */
+export function labelsOf(q) {
+    if (q.type === 'noul')
+        return ['yes', 'no'];
+    if (q.type === 'score')
+        return Array.isArray(q.criteria) ? q.criteria.map((_, i) => String(i)) : [];
+    return q.criteria && !Array.isArray(q.criteria) ? Object.keys(q.criteria) : [];
+}

package/dist/packages/classifier/src/registry.js

@@ -0,0 +1,42 @@
+// Config -> Provider. The CLI and MCP server call `providerFromConfig`; the LLM runners (Claude CLI, local Ollama)
+// are injected by the caller so this package never spawns a model process or opens a socket on its own.
+import fs from 'node:fs';
+import { fileUsage, readTypesafeKey } from "./config.js";
+import { heuristicProvider } from "./providers/heuristic.js";
+import { jevOpenProvider } from "./providers/jev-open.js";
+import { llmProvider } from "./providers/llm.js";
+import { jevHostedProvider, kevLocalProvider } from "./providers/systemone-http.js";
+import { ClassifierError } from "./types.js";
+export const PROVIDERS = [
+    { id: 'heuristic', title: 'Built-in scores (H1 p(rug) + LARP link score)', network: 'none', needs: 'nothing' },
+    { id: 'kev-local', title: 'Kev decision model via llama.cpp (open, Apache-2.0)', network: 'local', needs: 'a downloaded Kev GGUF + llama-server' },
+    { id: 'jev-hosted', title: "TypeSafe's hosted Jev (flagship, your own API key)", network: 'remote', needs: 'your TypeSafe API key' },
+    { id: 'jev-open', title: 'JEV open students (autotrust/JEV-*) via vLLM', network: 'local', needs: 'a vLLM server with the JEV decision adapter (>= 24 GB GPU)' },
+    { id: 'claude', title: 'Claude zero-shot (comparison baseline)', network: 'remote', needs: 'the Claude CLI, signed in' },
+    { id: 'ollama-llm', title: 'Ollama chat model zero-shot (comparison baseline)', network: 'local', needs: 'Ollama with a chat model' },
+];
+export function providerFromConfig(c, id = c.provider, d = {}) {
+    switch (id) {
+        case 'heuristic': return heuristicProvider();
+        case 'kev-local': return kevLocalProvider({ endpoint: c.kev.endpoint, modelId: c.kev.model, fetch: d.fetch });
+        case 'jev-hosted': return jevHostedProvider({
+            endpoint: c.jev.endpoint, model: c.jev.model, apiKey: () => readTypesafeKey(d.env), pricePerMTokUsd: c.jev.pricePerMTokUsd,
+            maxCallsPerDay: c.jev.maxCallsPerDay, usage: fileUsage(d.env), fetch: d.fetch,
+        });
+        case 'jev-open': {
+            if (!c.jevOpen.headPath || !c.jevOpen.calibrationPath)
+                throw new ClassifierError('not_ready', 'jev-open needs jevOpen.headPath (adapter_vllm/decision_head.json) and jevOpen.calibrationPath (calibration.json) from the model repo');
+            const head = JSON.parse(fs.readFileSync(c.jevOpen.headPath, 'utf8'));
+            const calibration = JSON.parse(fs.readFileSync(c.jevOpen.calibrationPath, 'utf8'));
+            return jevOpenProvider({ endpoint: c.jevOpen.endpoint, modelId: c.jevOpen.model, head, calibration, fetch: d.fetch });
+        }
+        case 'claude':
+            if (!d.claudeRunner)
+                throw new ClassifierError('not_ready', 'claude baseline: no Claude runner wired');
+            return llmProvider({ id: 'claude', model: c.llm.claudeModel, run: d.claudeRunner });
+        case 'ollama-llm':
+            if (!d.ollamaRunner || !c.llm.ollamaModel)
+                throw new ClassifierError('not_ready', 'ollama-llm baseline: set llm.ollamaModel and have Ollama running');
+            return llmProvider({ id: 'ollama-llm', model: c.llm.ollamaModel, run: d.ollamaRunner });
+    }
+}

package/dist/packages/classifier/src/snapshot.js

@@ -0,0 +1,31 @@
+// The app's live token row (@dexterm/data TokenSnapshot: token + pair + stats + audit) -> CoinInput, so the screener,
+// the MCP tools and watch rules all build the same dossier the benchmark scored.
+import { coinDossier } from "./dossier.js";
+const n = (v) => (typeof v === 'number' && Number.isFinite(v) ? v : null);
+export function coinInputFromSnapshot(s, now = Date.now()) {
+    const p = s.pair, st = s.stats, a = s.audit;
+    const created = n(s.token.createdAt) ?? n(p?.createdAt);
+    const h1 = st?.perWindow?.h1 ?? null;
+    return {
+        mint: s.mint ?? s.token.mint,
+        symbol: s.token.symbol ?? null,
+        name: s.token.name ?? null,
+        age_min: created === null ? null : Math.max(0, (now - created) / 60_000),
+        liquidity_usd: n(p?.liquidityUsd),
+        mcap_usd: n(p?.mcap) ?? n(p?.fdv),
+        vol5m_usd: n(p?.volume?.m5),
+        vol1h_usd: n(p?.volume?.h1),
+        buys5m: n(p?.txns?.m5?.buys), sells5m: n(p?.txns?.m5?.sells),
+        buys1h: n(p?.txns?.h1?.buys), sells1h: n(p?.txns?.h1?.sells),
+        change5m_pct: n(p?.priceChange?.m5), change1h_pct: n(p?.priceChange?.h1),
+        holders: n(st?.holderCount), organic_score: n(st?.organicScore),
+        traders1h: n(h1?.numTraders), net_buyers1h: n(h1?.numNetBuyers),
+        top10_pct: n(a?.top10Pct), dev_pct: n(a?.devPct), dev_other_mints: n(a?.devMints),
+        mint_authority: a?.mintAuthority ?? null, freeze_authority: a?.freezeAuthority ?? null,
+        launchpad: typeof s.token.launchpad === 'string' ? s.token.launchpad : null,
+        dex: p?.dex ?? null,
+    };
+}
+export function dossierFromSnapshot(s, now = Date.now()) {
+    return coinDossier(coinInputFromSnapshot(s, now));
+}

package/dist/packages/classifier/src/systemone.js

@@ -0,0 +1,88 @@
+// The System One wire protocol (`POST /v1/systemone`): TypeSafe's public API, which llama.cpp's llama-server
+// (PR #29818, 2026-10-02) and the Kev reference server also implement. One request = one state + named questions.
+//
+// Request : { model?, state, questions: { id: { type, instructions, criteria? } } }
+// Response: { model, answers: { id: { type, choice?|noul?|score?, probabilities?, confidence?, legend? } }, usage }
+//
+// Normalised here into `Answer` (probs per label + ln-p logits + top + confidence). Anything malformed raises
+// ClassifierError('bad_response') rather than guessing.
+import { labelsOf } from "./questions.js";
+import { ClassifierError } from "./types.js";
+export function buildRequest(set, state, model) {
+    const questions = {};
+    for (const q of set.questions) {
+        const entry = { type: q.type, instructions: q.instructions };
+        if (q.criteria !== undefined)
+            entry.criteria = q.criteria;
+        questions[q.id] = entry;
+    }
+    return model ? { model, state, questions } : { state, questions };
+}
+const EPS = 1e-12;
+/** Entropy-based confidence (1 - H/ln n): 0 for a uniform answer, 1 for a certain one. */
+export function entropyConfidence(probs) {
+    const ps = Object.values(probs);
+    if (ps.length < 2)
+        return 1;
+    const h = -ps.reduce((s, p) => s + (p > 0 ? p * Math.log(p) : 0), 0);
+    return Math.max(0, Math.min(1, 1 - h / Math.log(ps.length)));
+}
+export function finishAnswer(type, probs, confidence) {
+    const sum = Object.values(probs).reduce((a, b) => a + b, 0);
+    if (!(sum > 0))
+        throw new ClassifierError('bad_response', 'answer has no probability mass');
+    const norm = {};
+    const logits = {};
+    let top = '';
+    let best = -1;
+    for (const [k, v] of Object.entries(probs)) {
+        const p = v / sum;
+        norm[k] = p;
+        logits[k] = Math.log(Math.max(p, EPS));
+        if (p > best) {
+            best = p;
+            top = k;
+        }
+    }
+    const conf = typeof confidence === 'number' && Number.isFinite(confidence) ? Math.max(0, Math.min(1, confidence)) : entropyConfidence(norm);
+    return { type, probs: norm, logits, top, confidence: conf };
+}
+function num(v) {
+    return typeof v === 'number' && Number.isFinite(v) && v >= 0 ? v : null;
+}
+/** Parse a /v1/systemone response body against the question set that was asked. */
+export function parseResponse(set, body) {
+    if (!body || typeof body !== 'object')
+        throw new ClassifierError('bad_response', 'response is not an object');
+    const b = body;
+    if (!b.answers || typeof b.answers !== 'object')
+        throw new ClassifierError('bad_response', 'response has no answers');
+    const raw = b.answers;
+    const answers = {};
+    for (const q of set.questions) {
+        const a = raw[q.id];
+        if (!a || typeof a !== 'object')
+            throw new ClassifierError('bad_response', `no answer for ${q.id}`);
+        if (q.type === 'noul') {
+            const p = num(a.noul);
+            if (p === null || p > 1)
+                throw new ClassifierError('bad_response', `${q.id}: noul is not a probability`);
+            answers[q.id] = finishAnswer('noul', { yes: p, no: 1 - p }, null);
+            continue;
+        }
+        const pr = a.probabilities;
+        if (!pr || typeof pr !== 'object')
+            throw new ClassifierError('bad_response', `${q.id}: no probabilities`);
+        const labels = labelsOf(q);
+        const probs = {};
+        for (const l of labels) {
+            const p = num(pr[l]);
+            if (p === null)
+                throw new ClassifierError('bad_response', `${q.id}: missing probability for ${l}`);
+            probs[l] = p;
+        }
+        answers[q.id] = finishAnswer(q.type, probs, num(a.confidence));
+    }
+    const tokens = num(b.usage?.input_tokens);
+    return { model: typeof b.model === 'string' ? b.model : '', answers, inputTokens: tokens };
+}

package/dist/packages/classifier/src/types.js

@@ -0,0 +1,18 @@
+// Shared types for @dexterm/classifier (task-1822).
+//
+// A classifier answers TYPED QUESTIONS about ONE DOCUMENT (the coin dossier) with a probability per label. The
+// question shapes follow the System One API (`POST /v1/systemone`, TypeSafe's public API, also served by llama.cpp
+// for Kev GGUFs): `choice` (one of named options), `noul` (yes/no, probability of yes), `score` (ordered levels).
+// Every result names the provider, model id/version and how its probabilities were calibrated, and is labelled a
+// model estimate. Nothing here signs, trades, arms anything or raises a cap.
+export const PROVIDER_IDS = ['heuristic', 'kev-local', 'jev-hosted', 'jev-open', 'claude', 'ollama-llm'];
+export class ClassifierError extends Error {
+    code;
+    retryAfterMs;
+    constructor(code, message, retryAfterMs = null) {
+        super(message);
+        this.name = 'ClassifierError';
+        this.code = code;
+        this.retryAfterMs = retryAfterMs;
+    }
+}

package/dist/packages/classifier/src/win-acl.js

@@ -0,0 +1,71 @@
+// task-2147: owner-only secret files on Windows. NTFS has no POSIX mode bits (chmod only toggles read-only and
+// stat reports 0666), so the mode cannot say who may read a file; its DACL can. Writes lock the file to the current
+// user with icacls, by SID (account names are localized); reads check the DACL as SDDL (locale-free). Any probe
+// failure refuses the file: the caller names the TYPESAFE_API_KEY env var as the way out.
+import { execFileSync } from 'node:child_process';
+import path from 'node:path';
+/**
+ * Well-known principals that may hold a key file besides its user (the set Windows OpenSSH accepts). `LA` is the
+ * built-in Administrator (RID 500), always a member of BA: SDDL writes that account's own SID in this alias form.
+ */
+const ALLOWED_WELL_KNOWN = new Set(['SY', 'S-1-5-18', 'BA', 'S-1-5-32-544', 'LA']);
+/** The SDDL aliases that can stand for `sid` itself (task-2155: SDDL never spells RID 500 / 501 as S-1-…). */
+const selfAliases = (sid) => (/-500$/.test(sid) ? ['LA'] : /-501$/.test(sid) ? ['LG'] : []);
+const SID_RE = /^S-1-\d+(-\d+)+$/i;
+const system32 = (...p) => path.win32.join(process.env.SystemRoot || process.env.windir || 'C:\\Windows', 'System32', ...p);
+const defaultRun = (exe, args, env) => execFileSync(exe, args, { env, encoding: 'utf8', windowsHide: true, timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'] });
+/** The current user's SID (`whoami /user`, CSV: "host\user","S-1-5-21-..."). */
+export function currentUserSid(deps = {}) {
+    const out = (deps.run ?? defaultRun)(system32('whoami.exe'), ['/user', '/fo', 'csv', '/nh'], process.env);
+    const sid = out.trim().split(/\r?\n/).pop()?.split(',').pop()?.replace(/"/g, '').trim() ?? '';
+    if (!SID_RE.test(sid))
+        throw new Error('could not read the current Windows account SID');
+    return sid;
+}
+/** Remove inherited access and grant only `sid` full control (icacls, no shell). */
+export function lockOwnerOnly(p, sid, deps = {}) {
+    if (!SID_RE.test(sid))
+        throw new Error('bad SID');
+    (deps.run ?? defaultRun)(system32('icacls.exe'), [p, '/inheritance:r', '/grant:r', `*${sid}:(F)`], process.env);
+}
+/** The file's security descriptor as SDDL. The path goes through the environment, never into the command text. */
+export function readSddl(p, deps = {}) {
+    const ps = system32('WindowsPowerShell', 'v1.0', 'powershell.exe');
+    return (deps.run ?? defaultRun)(ps, ['-NoProfile', '-NonInteractive', '-Command', '(Get-Acl -LiteralPath $env:DEXTERM_ACL_PATH).Sddl'], { ...process.env, DEXTERM_ACL_PATH: p }).replace(/\s+/g, ''); // SDDL has no whitespace: undo any console wrap
+}
+/**
+ * Is this DACL owner-only? Every ACE that grants anything must name `sid` (as S-1-… or its alias), SYSTEM or
+ * Administrators. A missing or
+ * null DACL (everyone has access) and any ACE kind this parser does not know (e.g. conditional) are refused.
+ */
+export function sddlOwnerOnly(sddl, sid) {
+    const m = /D:([A-Z_]*)((?:\([^()]*\))*)(?:S:|$)/.exec(sddl.trim());
+    if (!m)
+        return { ok: false, reason: 'no readable access list' };
+    if (/NO_ACCESS_CONTROL/.test(m[1]))
+        return { ok: false, reason: 'no access list (everyone has access)' };
+    const others = new Set();
+    const self = new Set([sid.toUpperCase(), ...selfAliases(sid)]);
+    for (const ace of m[2].match(/\(([^()]*)\)/g) ?? []) {
+        const [type, flags = '', , , , who = ''] = ace.slice(1, -1).split(';');
+        if (type === 'D' || type === 'OD')
+            continue; // deny entries only take access away
+        if (type !== 'A' && type !== 'OA')
+            return { ok: false, reason: `unsupported access entry ${type}` };
+        if ((flags.match(/../g) ?? []).some((f) => f === 'IO'))
+            continue; // inherit-only (2-letter flags): not the file itself
+        const w = who.toUpperCase();
+        if (!self.has(w) && !ALLOWED_WELL_KNOWN.has(w))
+            others.add(w);
+    }
+    return others.size ? { ok: false, reason: `other accounts can access it (${[...others].join(', ')})` } : { ok: true };
+}
+/** Check a file's ACL: owner-only or a reason. Never throws. */
+export function checkOwnerOnly(p, deps = {}) {
+    try {
+        return sddlOwnerOnly(readSddl(p, deps), currentUserSid(deps));
+    }
+    catch (e) {
+        return { ok: false, reason: `its Windows access list could not be checked (${e instanceof Error ? e.message.split(/\r?\n/)[0] : String(e)})` };
+    }
+}

package/dist/packages/cli/assets/dash/dash.css

@@ -0,0 +1,139 @@
+/* dexterm dash (task-1749): the strategy performance dashboard. dexterm's terminal look (site/src/css/site.css tokens) in
+   dark, a paper-white counterpart in light. Mobile first; no web fonts, no external URL. */
+:root {
+  color-scheme: light;
+  --bg: #f6f7f4; --panel: #ffffff; --panel-2: #eef1ec; --text: #0b120e; --muted: #47524b; --line: #d5dbd4; --line-2: #b9c3ba;
+  --accent: #006b78; --series: #0f7a34; --series-soft: rgba(15, 122, 52, .14); --dd: #b4233f; --dd-soft: rgba(180, 35, 63, .14);
+  --up: #0b6e2e; --down: #b0173d; --warn: #7a5a00; --ok-bg: #e2f3e6; --warn-bg: #fbf0cf; --down-bg: #f9e0e5; --idle-bg: #ebedea;
+  --focus: #006b78; --badge: #5a4300; --badge-bg: #fdf3c6;
+  --mono: ui-monospace, 'SF Mono', Menlo, Monaco, 'Cascadia Code', 'DejaVu Sans Mono', monospace;
+  --sans: system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif;
+  --r: 10px; --s1: 4px; --s2: 8px; --s3: 12px; --s4: 16px; --s5: 24px;
+}
+@media (prefers-color-scheme: dark) {
+  :root:where(:not([data-theme="light"])) {
+    color-scheme: dark;
+    --bg: #020507; --panel: #04090c; --panel-2: #071114; --text: #eafff0; --muted: #9fd8b2; --line: #0c3a24; --line-2: #1b5a3a;
+    --accent: #00f0ff; --series: #39ff14; --series-soft: rgba(57, 255, 20, .14); --dd: #ff5c82; --dd-soft: rgba(255, 92, 130, .16);
+    --up: #5dff6e; --down: #ff6b8b; --warn: #f5ff2d; --ok-bg: #062512; --warn-bg: #2a2a05; --down-bg: #2d0812; --idle-bg: #0b1512;
+    --focus: #00f0ff; --badge: #f5ff2d; --badge-bg: #22230a;
+  }
+}
+:root[data-theme="dark"] {
+  color-scheme: dark;
+  --bg: #020507; --panel: #04090c; --panel-2: #071114; --text: #eafff0; --muted: #9fd8b2; --line: #0c3a24; --line-2: #1b5a3a;
+  --accent: #00f0ff; --series: #39ff14; --series-soft: rgba(57, 255, 20, .14); --dd: #ff5c82; --dd-soft: rgba(255, 92, 130, .16);
+  --up: #5dff6e; --down: #ff6b8b; --warn: #f5ff2d; --ok-bg: #062512; --warn-bg: #2a2a05; --down-bg: #2d0812; --idle-bg: #0b1512;
+  --focus: #00f0ff; --badge: #f5ff2d; --badge-bg: #22230a;
+}
+* { box-sizing: border-box; }
+html { -webkit-text-size-adjust: 100%; }
+body { margin: 0; background: var(--bg); color: var(--text); font: 15px/1.45 var(--sans); }
+a { color: var(--accent); }
+:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: 4px; }
+main:focus, main:focus-visible { outline: none; } /* the route target (tabindex -1), focused for screen readers only */
+.skip { position: absolute; left: -999px; top: 0; }
+.skip:focus { left: 8px; top: 8px; background: var(--panel); padding: 8px; z-index: 10; }
+.mono, .num, table, .tile .v, .brand { font-family: var(--mono); }
+.num { font-variant-numeric: tabular-nums; white-space: nowrap; }
+.up { color: var(--up); } .down { color: var(--down); } .muted { color: var(--muted); }
+
+header.top { position: sticky; top: 0; z-index: 5; background: var(--bg); border-bottom: 1px solid var(--line); }
+.bar { display: flex; align-items: center; gap: var(--s3); padding: var(--s2) var(--s4); max-width: 1440px; margin: 0 auto; }
+.brand { font-weight: 700; letter-spacing: .02em; font-size: 16px; white-space: nowrap; }
+.brand b { color: var(--series); }
+.paper { display: inline-block; border: 1px solid var(--line-2); border-radius: 999px; padding: 2px 10px; font: 600 12px/1.6 var(--mono); color: var(--text); background: var(--panel-2); }
+.updated { margin-left: auto; font-size: 12px; color: var(--muted); text-align: right; }
+.updated .dot { display: inline-block; width: 8px; height: 8px; border-radius: 50%; background: var(--series); margin-right: 6px; vertical-align: 1px; }
+.updated.stale .dot { background: var(--down); }
+button.theme { background: var(--panel-2); color: var(--text); border: 1px solid var(--line-2); border-radius: 8px; padding: 6px 10px; font: 13px var(--mono); min-height: 36px; cursor: pointer; }
+nav.tabs { display: flex; gap: 2px; overflow-x: auto; padding: 0 var(--s3); max-width: 1440px; margin: 0 auto; scrollbar-width: none; }
+nav.tabs a { flex: none; padding: 10px 12px; min-height: 44px; display: inline-flex; align-items: center; color: var(--muted); text-decoration: none; border-bottom: 2px solid transparent; font: 600 14px var(--sans); }
+nav.tabs a[aria-current="page"] { color: var(--text); border-bottom-color: var(--series); }
+
+main { max-width: 1440px; margin: 0 auto; padding: var(--s4); }
+h1 { font-size: 20px; margin: 4px 0 4px; } h2 { font-size: 16px; margin: var(--s5) 0 var(--s2); } h3 { font-size: 14px; margin: 0 0 6px; }
+p.lead { margin: 0 0 var(--s3); color: var(--muted); font-size: 14px; }
+.disclaimer { border: 1px dashed var(--line-2); border-radius: var(--r); padding: var(--s2) var(--s3); font-size: 13px; color: var(--muted); margin: 0 0 var(--s4); }
+.disclaimer strong { color: var(--text); }
+
+.grid { display: grid; gap: var(--s3); grid-template-columns: 1fr; }
+@media (min-width: 640px) { .grid { grid-template-columns: repeat(2, 1fr); } }
+@media (min-width: 1080px) { .grid { grid-template-columns: repeat(3, 1fr); } }
+@media (min-width: 1360px) { .grid.g4 { grid-template-columns: repeat(4, 1fr); } }
+.card { background: var(--panel); border: 1px solid var(--line); border-radius: var(--r); padding: var(--s3); min-width: 0; }
+.card.base { border-color: var(--series); box-shadow: inset 0 0 0 1px var(--series); }
+a.card { color: inherit; text-decoration: none; display: block; }
+a.card:hover { border-color: var(--line-2); }
+.card .head { display: flex; align-items: baseline; gap: var(--s2); flex-wrap: wrap; }
+.card .id { font: 700 15px var(--mono); overflow-wrap: anywhere; }
+.card .grp { font-size: 12px; color: var(--muted); }
+.card .label { font-size: 13px; color: var(--muted); margin: 2px 0 6px; }
+.kv { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 6px 10px; margin: 8px 0; }
+.kv div { min-width: 0; } .kv .v.sm { font-size: 12px; } .kv .v.md { font-size: 13px; }
+p.note { font-size: 12px; margin: 8px 0 0; }
+ .kv .k { font-size: 11.5px; color: var(--muted); } .kv .v { font: 600 14px var(--mono); font-variant-numeric: tabular-nums; }
+.badge { display: inline-block; font: 600 11.5px/1.5 var(--mono); padding: 0 7px; border-radius: 999px; border: 1px solid currentColor; }
+.badge.expl { color: var(--badge); background: var(--badge-bg); }
+.badge.ok { color: var(--up); }
+.badge.base { color: var(--series); }
+.badge.none { color: var(--muted); }
+.spark { display: block; width: 100%; height: 40px; }
+.spark .ln { fill: none; stroke: var(--series); stroke-width: 2; stroke-linejoin: round; stroke-linecap: round; }
+.spark .ref { stroke: var(--line-2); stroke-width: 1; stroke-dasharray: 3 3; }
+
+.tiles { display: grid; gap: var(--s2); grid-template-columns: repeat(2, minmax(0, 1fr)); margin: var(--s3) 0; }
+@media (min-width: 760px) { .tiles { grid-template-columns: repeat(4, minmax(0, 1fr)); } }
+@media (min-width: 1200px) { .tiles { grid-template-columns: repeat(6, minmax(0, 1fr)); } }
+.tile { background: var(--panel); border: 1px solid var(--line); border-radius: var(--r); padding: 10px 12px; min-width: 0; }
+.tile .k { font-size: 12px; color: var(--muted); } .tile .v { font-size: 20px; font-weight: 700; font-variant-numeric: tabular-nums; } .tile .s { font-size: 12px; color: var(--muted); font-family: var(--mono); }
+
+.chart { width: 100%; height: auto; display: block; touch-action: pan-y; }
+.chart .grid line { stroke: var(--line); stroke-width: 1; }
+.chart .axis text, .chart .tick { fill: var(--muted); font: 11px var(--mono); }
+.chart .ln { fill: none; stroke: var(--series); stroke-width: 2; stroke-linejoin: round; stroke-linecap: round; }
+.chart .area { fill: var(--series-soft); }
+.chart .dd-area { fill: var(--dd-soft); }
+.chart .dd { fill: none; stroke: var(--dd); stroke-width: 2; stroke-linejoin: round; }
+.chart .ref { stroke: var(--muted); stroke-width: 1; stroke-dasharray: 4 4; }
+.chart .zero { stroke: var(--muted); stroke-width: 1.5; }
+.chart .dot { fill: var(--series); stroke: var(--panel); stroke-width: 2; }
+.chart .ci { stroke: var(--text); stroke-width: 2; stroke-linecap: round; }
+.chart .mean { fill: var(--accent); stroke: var(--panel); stroke-width: 2; }
+.chart .bar { fill: var(--series); }
+.chart .bar.neg { fill: var(--dd); }
+.chart .lbl { fill: var(--text); font: 12px var(--mono); }
+.chart .xh { stroke: var(--muted); stroke-width: 1; }
+.chart .hit { fill: transparent; }
+.chartbox { position: relative; background: var(--panel); border: 1px solid var(--line); border-radius: var(--r); padding: var(--s2); }
+.tip { position: absolute; pointer-events: none; background: var(--panel-2); color: var(--text); border: 1px solid var(--line-2); border-radius: 6px; padding: 4px 8px; font: 12px var(--mono); white-space: nowrap; transform: translate(-50%, -110%); display: none; z-index: 3; }
+
+.tw { overflow-x: auto; border: 1px solid var(--line); border-radius: var(--r); background: var(--panel); -webkit-overflow-scrolling: touch; }
+table { border-collapse: collapse; width: 100%; font-size: 13px; }
+th, td { text-align: left; padding: 7px 10px; border-bottom: 1px solid var(--line); white-space: nowrap; vertical-align: top; }
+td.wrap { white-space: normal; min-width: 220px; }
+th { color: var(--muted); font-weight: 600; position: sticky; top: 0; background: var(--panel); }
+th.r, td.r { text-align: right; }
+tr.base td { background: var(--panel-2); }
+tbody tr:last-child td { border-bottom: 0; }
+caption { text-align: left; padding: 8px 10px; color: var(--muted); font-size: 12px; }
+
+select { font: 14px var(--mono); padding: 8px; min-height: 44px; background: var(--panel); color: var(--text); border: 1px solid var(--line-2); border-radius: 8px; max-width: 100%; }
+label.pick { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; font-size: 13px; color: var(--muted); }
+.rule { border-left: 3px solid var(--accent); padding: 6px 10px; background: var(--panel); font-size: 13.5px; margin: var(--s2) 0 var(--s3); }
+.status { border-left: 4px solid var(--line-2); }
+.status.ok { border-left-color: var(--up); } .status.warn { border-left-color: var(--warn); } .status.down { border-left-color: var(--down); }
+.st { font: 700 12px var(--mono); padding: 1px 8px; border-radius: 999px; }
+.st.ok { background: var(--ok-bg); color: var(--up); } .st.warn { background: var(--warn-bg); color: var(--warn); } .st.down { background: var(--down-bg); color: var(--down); } .st.idle { background: var(--idle-bg); color: var(--muted); }
+dl.items { display: grid; grid-template-columns: minmax(110px, 40%) 1fr; gap: 4px 10px; margin: 8px 0 0; font-size: 13px; }
+dl.items dt { color: var(--muted); } dl.items dd { margin: 0; overflow-wrap: anywhere; }
+footer { max-width: 1440px; margin: 0 auto; padding: var(--s4); color: var(--muted); font-size: 12.5px; border-top: 1px solid var(--line); }
+footer ul { padding-left: 18px; margin: 6px 0; }
+.empty { padding: var(--s4); color: var(--muted); }
+@media (max-width: 480px) { .updated .long { display: none; } .bar { gap: 8px; } nav.tabs { padding: 0 4px; } nav.tabs a { padding: 10px 7px; font-size: 13px; } nav.tabs .wide { display: none; } }
+@media (prefers-reduced-motion: reduce) { * { transition: none !important; animation: none !important; } }
+@media (forced-colors: active) { .chart .ln, .chart .dd, .spark .ln { stroke: CanvasText; } }
+
+.only-wide { display: none; } .only-narrow { display: grid; gap: var(--s2); }
+@media (min-width: 640px) { .only-wide { display: block; } .only-narrow { display: none; } }
+.card.rug .head .r { margin-left: auto; font: 700 15px var(--mono); }