failproofai 1.0.4-beta.4 → 1.0.4-beta.6

package/src/hooks/fp-config.ts

@@ -308,22 +308,15 @@ export interface FpConfig {
   };
   audit: {
     /**
-     * Scan this machine on a schedule, and mail a digest when a scan finds
-     * something harmful.
+     * Scan this machine on a schedule. Delivery is deliberately separate:
+     * desktop notifications are controlled by `notify`, while a verified local
+     * email identity adds email alerts without changing the timer.
      *
-     * ONE switch, not two. An earlier revision split this into `auto` (scan
-     * locally, no account) and `email_enabled` (mail me, sign in), and the two
-     * could only ever disagree — a machine scanning on a timer with nothing to
-     * report it to is a feature that looks on and does nothing visible. The
-     * reason to put a scan on a timer is to be TOLD, so scheduling and mailing
-     * are the same decision and take the same switch.
-     *
-     * A signed-out machine with this on is therefore a real, expected state
-     * rather than a contradiction: it keeps scanning and keeps its local
-     * dashboard current, and the UI says "signed out" until somebody signs back
-     * in. Auth gates SETTING it up, never the machine's ongoing work — a
-     * refresh token expiring must not silently switch off a background feature
-     * somebody configured months ago.
+     * A signed-out machine with this on is therefore the normal local-only
+     * state rather than a contradiction: it keeps scanning, keeps its local
+     * dashboard current, and raises desktop notifications for credential leaks.
+     * A refresh token expiring must not silently switch off a background
+     * security feature.
      *
      * ON for a configured machine that has never stated an opinion, OFF for
      * every machine we could not read an opinion from — which is not the same
@@ -345,9 +338,9 @@ export interface FpConfig {
      * agree, or the settings page describes a machine that is doing something
      * else.
      *
-     * Turning it on sends NOTHING on its own: the digest is gated on
-     * `reportsConsentedAt` below, not on this switch, so a machine that flips
-     * on at upgrade scans locally and mails nobody.
+     * Turning it on sends nothing remotely on its own. Email requires a valid
+     * identity in `audit/session.json`; without one, scans and notifications
+     * remain fully local.
      */
     auto: boolean;
     /**
@@ -358,40 +351,22 @@ export interface FpConfig {
      * wants the scan and not the banner is a coherent person, and without this
      * their only way to stop the banner is to stop the scan.
      *
-     * ON by default, and the direction is the point: this fires at most once
-     * per distinct credential ever (`leak-notice.ts` claims each finding with
-     * an O_EXCL marker), so the volume it can reach is bounded by how many
-     * secrets are actually leaking. A silent default would make the common
-     * case — a user who never opens the dashboard and never gave an email —
-     * a machine that finds the key and tells nobody.
+     * ON by default. Every scheduled scan that still sees a leak may notify,
+     * which keeps a credential that remains exposed from disappearing after
+     * its first alert. A silent default would make the common case — a user who
+     * never opens the dashboard and never gave an email — a machine that finds
+     * the key and tells nobody.
      *
-     * It does NOT silence the in-CLI notice. That one appears inside a session
-     * the user is already driving, costs two lines, and is the only channel
-     * left when there is no desktop to notify — a headless box, a container, an
-     * SSH session. Turning off every channel at once is not an option this
-     * offers, because the resulting state is indistinguishable from broken.
+     * On a headless box, container or SSH-only session there may be no desktop
+     * server to receive the banner. The scheduled scan still completes and
+     * records its result; notification failure never changes the scan outcome.
      */
     notify: boolean;
     /**
-     * When this machine's owner agreed that a scheduled scan may send what it
-     * finds off the box, as epoch ms. Absent means they never did.
-     *
-     * This does NOT reintroduce the second switch the comment above rejects,
-     * and it is never drawn as one. `auto` is what a person sets; this is a
-     * record of the disclosure they were shown when they set it. The two cannot
-     * drift, because every path that turns `auto` on stamps this in the same
-     * call and nothing stamps it alone.
-     *
-     * It exists because `auto` CHANGED MEANING. Through 1.0.0 it meant "scan
-     * this machine on a timer" and nothing more — no account, no network, and
-     * the toggle that wrote it said as much in as many words. Harm digests gave
-     * the same stored bit a second job: uploading redacted transcript excerpts
-     * to the api-server and mailing them. Without a separate record, every
-     * machine that opted into the old meaning would have started sending on
-     * upgrade, having agreed to nothing of the kind, with the only notice a
-     * line in the journal. Gating on the stamp rather than the switch is what
-     * keeps that upgrade silent in the safe direction: those machines keep
-     * scanning locally and send nothing until somebody opts in again.
+     * Legacy migration marker from the earlier harm-digest consent model.
+     * Retained when reading and writing old configs so upgrades are lossless,
+     * but it no longer gates scheduling or credential-alert email. A verified
+     * email identity is now the delivery opt-in.
      */
     reportsConsentedAt?: number;
     /** Days between scheduled runs. Wall clock, so it survives suspend. */
@@ -587,8 +562,8 @@ export function projectConfig(parsed: Record<string, unknown>): FpConfig {
         // question is only whether to speak.
         notify: audit.notify !== false,
         intervalDays: readIntervalDays(audit.interval_days),
-        // A finite number or nothing. A garbage value reads as absent, which is
-        // the direction that sends nothing.
+        // Preserve the legacy marker when it is valid; current behavior does
+        // not consult it.
         reportsConsentedAt:
           typeof audit.reports_consented_at === "number" &&
           Number.isFinite(audit.reports_consented_at)
@@ -738,7 +713,8 @@ export function writeConfig(config: FpConfig, raw?: Record<string, unknown>): vo
     ...(config.telemetry.enabled ? {} : { telemetry: { enabled: false } }),
     // Written ALWAYS, unlike telemetry directly above — the two are opposites
     // on purpose. Telemetry ships on and is deliberately not advertised;
-    // the scheduled audit ships off and is meant to be FOUND, and a switch
+    // the scheduled audit is configured during setup and is meant to be FOUND,
+    // and a switch
     // nobody can see is the same as a switch that does not exist. Emitting both
     // keys unconditionally also makes "a user's setting survives a rewrite"
     // total rather than conditional.
@@ -749,9 +725,8 @@ export function writeConfig(config: FpConfig, raw?: Record<string, unknown>): vo
       // exists to be found by somebody the banner annoyed.
       notify: config.audit.notify,
       interval_days: config.audit.intervalDays,
-      // Written only once there IS consent, so an untouched machine's config
-      // does not grow a key implying it was asked. It is in
-      // `OWNED_CONFIG_KEYS`, so omitting it here really removes it.
+      // Preserve the legacy consent marker when present. It is not used by the
+      // current local-schedule + optional-email model.
       ...(config.audit.reportsConsentedAt === undefined
         ? {}
         : { reports_consented_at: config.audit.reportsConsentedAt }),

package/src/hooks/handler.ts

@@ -35,8 +35,6 @@ import { loadAllCustomHooks } from "./custom-hooks-loader";
 import type { CustomHook } from "./policy-types";
 import { persistHookActivity } from "./hook-activity-store";
 import { deliveryHealth, deliveryHealthLine } from "./delivery-health";
-import { shapeNotice, canDeliverNotice, leakNoticeText } from "./notice";
-import { sessionNoticePending, markSessionNoticed } from "../audit/leak-notice";
 import { trackHookEvent, flushHookTelemetry } from "./hook-telemetry";
 import { resolveCwd } from "./resolve-cwd";
 import { resolvePermissionMode } from "./resolve-permission-mode";
@@ -106,67 +104,6 @@ export interface HookEventOutcome {
   stderr: string;
 }
 
-/**
- * Merge a pending leak notice into an outcome, once.
- *
- * Anchored on Stop wherever the host renders there, and SessionStart only where
- * it does not: Stop fires once per turn, AFTER the answer, so it never
- * interrupts what the user was reading — and at session open the background
- * scan may not have produced the finding yet.
- *
- * Every failure is swallowed. A courtesy message must never be the reason a
- * hook misbehaves, and the finding is on disk either way.
- */
-function attachLeakNotice(
-  eventType: string,
-  cli: IntegrationType | undefined,
-  outcome: HookEventOutcome,
-  sessionId: string | undefined,
-): HookEventOutcome {
-  try {
-    if (!canDeliverNotice(cli)) return outcome;
-    // canDeliverNotice() above already proved cli is set; narrow for the call.
-    if (!cli) return outcome;
-    const canonical = canonicalizeEventType(eventType, cli);
-    // STOP ONLY, and the narrowing is the fix for a measured failure rather
-    // than caution. `notice.ts` derived each host's channel from a live probe
-    // on **Stop**; SessionStart was allowed here on the assumption that a
-    // channel proven on one event works on another. It does not. On a real
-    // machine 499 findings were CLAIMED and the user saw nothing: SessionStart
-    // fires first in a session, consumed every claim, and the host dropped the
-    // field — Claude Code documents `hookSpecificOutput.additionalContext` for
-    // SessionStart, not `systemMessage`.
-    //
-    // That is the worst outcome this design has: a finding recorded as
-    // delivered that reached nobody, and never retried. Stop fires at the end
-    // of every assistant turn, so nothing is lost by waiting for it — the user
-    // is reading output at that moment anyway. Add SessionStart back only with
-    // a probe showing the notice actually rendered there.
-    if (canonical !== "Stop") return outcome;
-
-    // Keyed on the SESSION and on whether the user has opened the report, not
-    // on a per-finding "we emitted this once" marker — see
-    // `sessionNoticePending` for the two ways that marker lost the alert
-    // permanently. A dropped notice now costs one session's silence instead.
-    const pending = sessionNoticePending(sessionId ?? "");
-    if (pending.count === 0) return outcome;
-
-    const shaped = shapeNotice(cli, leakNoticeText(pending.count), outcome.stdout);
-    if (shaped.stdout === outcome.stdout && !shaped.stderr) return outcome;
-
-    // Claimed only once the notice is actually on the stream, so a crash
-    // between the two re-notifies rather than silently swallowing the alert.
-    markSessionNoticed(sessionId ?? "");
-    return {
-      exitCode: outcome.exitCode,
-      stdout: shaped.stdout,
-      stderr: outcome.stderr + shaped.stderr,
-    };
-  } catch {
-    return outcome;
-  }
-}
-
 export interface EvaluateHookEventOptions {
   /**
    * Await pending telemetry POSTs before returning. Defaults to `true`,
@@ -820,22 +757,7 @@ export async function evaluateHookEvent(
       }
     }
 
-    // Attach a pending leak notice, if this event is one that can carry it.
-    //
-    // Emitted HERE rather than in `handleHookEvent`, which is what fixes the
-    // bug this replaced: `bin/failproofai.mjs`'s `isDaemonConfigured()` branch
-    // writes `result.stdout`/`result.stderr` and EXITS INSIDE THAT BRANCH — it
-    // never falls through to `handleHookEvent`. Setup requires the daemon, so
-    // the previous notice was dead code on every configured machine, and had
-    // been since it shipped. Both paths return this object, so producing the
-    // notice here reaches both with no change to either caller.
-    const withNotice = attachLeakNotice(
-      eventType,
-      cli,
-      { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr },
-      sessionId,
-    );
-    return withNotice;
+    return { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr };
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
       // Await any un-awaited (`void trackHookEvent(...)`) events fired during

package/src/hooks/integrations.ts

@@ -784,7 +784,6 @@ export const cursor: Integration = {
 //   • exit 2 OR `permissionDecision: "deny"` → `throw new Error(reason)`
 //     (which OpenCode surfaces as a tool-call failure to the agent)
 //   • `additionalContext` → `client.session.prompt(...)` (fire-and-forget)
-//   • `failproofaiNotice` → `client.tui.showToast(...)` (user-visible)
 //   • everything else → no-op (allow)
 //
 // Settings paths:
@@ -957,19 +956,6 @@ async function applyDecision(result, ctx, eventName) {
   if (out && out.decision && out.decision.behavior === "deny") {
     throw new Error((out.decision.message) || "Blocked by failproofai");
   }
-  const notice = parsed.failproofaiNotice;
-  if (typeof notice === "string" && notice && ctx && ctx.client && ctx.client.tui) {
-    try {
-      await ctx.client.tui.showToast({
-        body: {
-          title: "failproofai audit",
-          message: notice,
-          variant: "warning",
-          duration: 12_000,
-        },
-      });
-    } catch { /* a courtesy notice must never break the host hook */ }
-  }
   // Forward additional context as a prompt to the session. For Stop /
   // SubagentStop the prompt is the only force-retry channel (session.idle
   // already fired), so AWAIT to ensure the SDK round-trip completes before
@@ -1025,7 +1011,10 @@ export default async function failproofaiPlugin({ client, directory }) {
       const claudeEvent = BUS_EVENT_MAP[event.type];
       if (!claudeEvent) return;
       const props = event.properties || {};
-      const sessionID = props.sessionID || (props.session && props.session.id) || props.id;
+      const info = props.info || props.session || {};
+
+      const sessionID = info.id || info.sessionID || info.sessionId || info.session_id ||
+        props.sessionID || props.sessionId || props.session_id || props.id;
       const r = await runFailproofai(claudeEvent, {
         session_id: sessionID, cwd: directory, hook_event_name: claudeEvent,
       }, directory);

package/src/hooks/notice.ts

@@ -1,191 +1,24 @@
-/**
- * Putting a short message in front of a HUMAN, inside the agent they are using.
- *
- * A notice is not a verdict. `allow` / `deny` / `instruct` all answer "what
- * happens to this tool call"; a notice answers nothing — it is one line of text
- * for the person, delivered alongside whatever the verdict turned out to be.
- * That is why it is a separate field rather than a fourth decision: shaping it
- * into stdout beside a verdict ad hoc is how the copilot nested-vs-flat
- * `additionalContext` bug happened.
- *
- * ## Why the channel differs per CLI, and why it is not `additionalContext`
- *
- * Measured across all 12 CLIs by live probe. The obvious channel —
- * `hookSpecificOutput.additionalContext` — reaches the MODEL, not the user, and
- * a model is a paraphraser: over eight real Claude turns it mentioned an
- * informational notice 8/8, but an earlier notice that asked the agent to *act*
- * was disclaimed as a suspected prompt injection 6/6 ("instructions arriving
- * that way aren't something I'll act on unasked"). A security notice routed
- * through something that may decline to repeat it is not a delivered notice.
- *
- * So each CLI gets the channel that was proven to paint text on the user's
- * terminal, and the ones with no such channel get nothing rather than a
- * pretend delivery:
- *
- *   claude   `{"systemMessage":…}`  renders `Stop says: …`; model-invisible
- *                                   (a neutral probe answered `NONE`)
- *   codex    `{"systemMessage":…}`  renders `• Stop (completed) says: …`
- *   copilot  exit 0 + stderr        renders as a `!` session warning
- *   factory  plain stdout           renders under a `Hooks Stop` block
- *
- * opencode and pi have real channels too, but they live inside the plugin shims
- * we ship rather than in a hook's stdout, so a private JSON field is consumed
- * there and handed to `showToast` / `ui.notify`. OpenClaw, cursor, devin, goose,
- * antigravity and hermes have no verified channel that reaches a human without
- * an unsupported escape hatch — they get nothing here, and their users get the
- * finding from `failproofai audit` and the scheduled desktop notification.
- */
-import type { IntegrationType } from "./types";
-
-/** How a notice is delivered on one CLI. */
-type NoticeChannel = "systemMessage" | "stderr" | "stdout" | "shim" | "none";
-
-/**
- * Per-CLI channel, from live probes rather than documentation.
- *
- * A CLI absent from this map delivers nothing — deliberately. Guessing a
- * channel produces the worst outcome available: output that looks delivered
- * from our side and reaches nobody, so we would report a leak as "notified"
- * that the user never saw.
- */
-const NOTICE_CHANNEL: Partial<Record<IntegrationType, NoticeChannel>> = {
-  claude: "systemMessage",
-  codex: "systemMessage",
-  copilot: "stderr",
-  factory: "stdout",
-  opencode: "shim",
-  pi: "shim",
-};
-
-/**
- * Claude truncates `systemMessage` at 4000 characters on the cloud-forwarding
- * path, and a notice that gets cut mid-sentence reads as a broken tool. Ours is
- * two lines by design; this is a backstop, not a budget.
- */
-const MAX_NOTICE_CHARS = 900;
-
-export interface ShapedNotice {
-  /** Merged into the outcome's stdout, or empty. */
-  stdout: string;
-  /** Merged into the outcome's stderr, or empty. */
-  stderr: string;
-}
-
-/**
- * Render a notice for one CLI, merging it into any verdict JSON already bound
- * for stdout.
- *
- * `existingStdout` matters: a Stop-gate deny already emits a JSON object on
- * several CLIs, and emitting a second object would produce two JSON documents
- * on one stream — which every host parses as a syntax error and drops, taking
- * the deny with it. So the notice is merged INTO that object when there is one.
- */
-export function shapeNotice(
-  cli: IntegrationType | undefined,
-  notice: string,
-  existingStdout = "",
-): ShapedNotice {
-  const empty: ShapedNotice = { stdout: existingStdout, stderr: "" };
-  if (!notice.trim() || !cli) return empty;
-
-  const channel = NOTICE_CHANNEL[cli] ?? "none";
-  const text = notice.length > MAX_NOTICE_CHARS
-    ? notice.slice(0, MAX_NOTICE_CHARS - 1) + "…"
-    : notice;
-
-  switch (channel) {
-    case "systemMessage": {
-      // Merge into the verdict object when one exists, so the stream stays a
-      // single JSON document.
-      if (existingStdout.trim().startsWith("{")) {
-        try {
-          const parsed = JSON.parse(existingStdout) as Record<string, unknown>;
-          parsed.systemMessage = text;
-          return { stdout: JSON.stringify(parsed), stderr: "" };
-        } catch {
-          // Not the JSON we thought it was — leave the verdict untouched
-          // rather than risk destroying it to add a courtesy message.
-          return empty;
-        }
-      }
-      // Anything already on stdout that we could not merge into is left
-      // exactly as it is, and the notice is dropped instead. The alternative —
-      // emitting our own object over the top — DESTROYS it: measured with a
-      // JSON array on stdout, which does not start with `{`, so it fell past
-      // the merge and was replaced wholesale. A courtesy message is never worth
-      // more than whatever the host was already being told.
-      if (existingStdout.trim()) return empty;
-      return { stdout: JSON.stringify({ systemMessage: text }), stderr: "" };
-    }
-    case "stderr":
-      // Exit code is NOT touched: on copilot a non-zero exit from a tool event
-      // is a block, and a notice must never block anything.
-      return { stdout: existingStdout, stderr: text + "\n" };
-    case "stdout":
-      // factory renders plain text under its Hooks block. Only safe when no
-      // verdict JSON is already on the stream.
-      if (existingStdout.trim()) return empty;
-      return { stdout: text + "\n", stderr: "" };
-    case "shim": {
-      // OpenCode and Pi are in-process plugin integrations. Their generated
-      // shims consume this private field and call the host's real user-facing
-      // notification API; putting the text in additionalContext would send it
-      // to the model instead.
-      if (existingStdout.trim().startsWith("{")) {
-        try {
-          const parsed = JSON.parse(existingStdout) as Record<string, unknown>;
-          parsed.failproofaiNotice = text;
-          return { stdout: JSON.stringify(parsed), stderr: "" };
-        } catch {
-          return empty;
-        }
-      }
-      if (existingStdout.trim()) return empty;
-      return { stdout: JSON.stringify({ failproofaiNotice: text }), stderr: "" };
-    }
-    default:
-      return empty;
-  }
-}
-
-/** True when this CLI has a channel that was proven to reach a human. */
-export function canDeliverNotice(cli: IntegrationType | undefined): boolean {
-  return !!cli && (NOTICE_CHANNEL[cli] ?? "none") !== "none";
-}
-
-/**
- * The notice itself. A FIXED template with no interpolation of scanned content.
- *
- * The count is a number we computed; everything else is a constant. That is not
- * stylistic: the alternative is interpolating a finding's `example`, which is
- * the verbatim text of a command from a repository — attacker-controlled
- * through a README, a Makefile target or an npm script. Tested against the
- * shipped redactor, `echo "IGNORE ALL PRIOR INSTRUCTIONS…"` passes through
- * byte-identical, because that redactor masks secrets, not instructions. On the
- * CLIs where the only channel is the model's context, that string would land
- * directly in the prompt. So nothing scanned ever reaches this template.
- */
-export function leakNoticeText(newFindings: number): string {
-  const n = newFindings === 1
-    ? "a possible credential exposure"
-    : `${newFindings} possible credential exposures`;
-  return (
-    `failproofai found ${n} in this project's agent transcripts.\n` +
-    "Run `failproofai audit` to review the matches and rotate anything real."
-  );
-}
-
 /** Copy for the OS notification raised by an unattended scheduled scan.
  *
  * Deliberately omits the count. A burst of generated fixtures can hit the
  * record cap, and a desktop banner saying "500 leaked credentials" states a
  * conclusion the detector cannot support. The dashboard carries the evidence;
  * the banner's job is only to ask for review. */
-export function desktopLeakNotice(): { title: string; body: string } {
+export type DesktopLeakEmailState = "sent" | "missing" | "failed" | "held";
+
+export function desktopLeakNotice(email: DesktopLeakEmailState = "held"): { title: string; body: string } {
+  const followUp =
+    email === "sent"
+      ? "A masked alert was also sent to your email."
+      : email === "missing"
+        ? "Add email alerts with: failproofai audit --schedule --email you@example.com"
+        : email === "failed"
+          ? "Email delivery failed this time; the local result is still available."
+          : "Email was not sent for this run.";
   return {
     title: "failproofai audit needs review",
     body:
       "Possible credential exposure was found in your agent transcripts. " +
-      "Run failproofai audit to verify the matches and rotate anything real.",
+      `Run failproofai audit to verify the matches and rotate anything real. ${followUp}`,
   };
 }

package/.next/standalone/.next/server/chunks/ssr/_0oq1dh6._.js

@@ -1,3 +0,0 @@
-module.exports=[74863,a=>{"use strict";var b=a.i(36359),c=a.i(37936),d=a.i(15501),e=a.i(13095);async function f(){let a=(0,d.readDashboardCache)();if(!a){let a=(0,d.readDashboardCacheMeta)();return{status:"empty",expired:null!==a,expiredAt:a?.cachedAt??null}}return{status:"cached",cachedAt:a.cachedAt,params:a.params,result:a.result}}(0,e.ensureServerEntryExports)([f]),(0,c.registerServerReference)(f,"0048814305f7563284b0e6413ac4ea842889a1d6eb",null);var g=a.i(66680),h=a.i(2157),i=a.i(50227),j=a.i(75818),k=a.i(8674);function l(a){try{if(!(0,h.existsSync)(a))return null;return JSON.parse((0,h.readFileSync)(a,"utf8"))}catch{return null}}function m(a){let b=l((0,j.auditLeakIdentityFile)(a));if(b&&"string"==typeof b.salt&&b.salt.length>=32)return{salt:b.salt,dismissed:b.dismissed??[],reportViewedAt:"number"==typeof b.reportViewedAt&&Number.isFinite(b.reportViewedAt)?b.reportViewedAt:void 0};let c={salt:(0,g.randomBytes)(32).toString("hex"),dismissed:[]};return n(c,a),c}function n(a,b){let c=(0,j.auditLeakIdentityFile)(b);try{return(0,h.mkdirSync)((0,i.dirname)(c),{recursive:!0}),(0,k.writeJsonAtomically)(c,a,{mode:384}),!0}catch{return!1}}function o(a){var b;if(!a||"object"!=typeof a||Array.isArray(a)||"string"!=typeof a.id||(b=a.id,!/^[0-9a-f]{16}$/.test(b)))return null;let c=a.fingerprint;if(!c||"object"!=typeof c||"string"!=typeof c.display||"string"!=typeof c.label)return null;let d=Array.isArray(a.sightings)?a.sightings.filter(a=>{if(!a||"object"!=typeof a)return!1;let b=a.mechanism;return!!b&&"object"==typeof b&&"string"==typeof b.summary}):[];return{...a,fingerprint:{display:c.display,label:c.label,length:"number"==typeof c.length&&Number.isFinite(c.length)?c.length:0,attributed:!0===c.attributed},name:"string"==typeof a.name?a.name:null,firstSeen:"string"==typeof a.firstSeen?a.firstSeen:"",lastSeen:"string"==typeof a.lastSeen?a.lastSeen:"",occurrences:"number"==typeof a.occurrences&&Number.isFinite(a.occurrences)?a.occurrences:d.length,sightings:d}}var p=a.i(21572);async function q(){var a;let b,c=(a=function(){let a=m(void 0),b=l((0,j.auditLeaksFile)(void 0));if(!b||1!==b.schemaVersion||!Array.isArray(b.findings))return{schemaVersion:1,salt:a.salt,updatedAt:new Date().toISOString(),findings:[]};let c=b.findings.map(o).filter(a=>null!==a);return{...b,findings:c,salt:a.salt}}(),b=new Set(m(void 0).dismissed),a.findings.filter(a=>!b.has(a.id)).sort((a,b)=>a.lastSeen<b.lastSeen?1:a.lastSeen>b.lastSeen?-1:0));!function(a=Date.now()){try{let b=m(void 0);(0,k.writeJsonAtomically)((0,j.auditLeakIdentityFile)(void 0),{...b,reportViewedAt:a},{mode:384})}catch{}}();let d=c.map(a=>{let b=a.sightings?.[a.sightings.length-1];return{id:a.id,display:a.fingerprint?.display??"[credential]",label:a.fingerprint?.label??"secret",length:a.fingerprint?.length??0,attributed:a.fingerprint?.attributed===!0,name:a.name,cli:b?.cli??"unknown",project:b?.cwd??"unknown",lastSeen:a.lastSeen,firstSeen:a.firstSeen,mechanism:b?.mechanism?.summary??"seen in a transcript",direction:b?.mechanism?.direction??"result",occurrences:a.occurrences,sessions:new Set((a.sightings??[]).map(a=>a.sessionId)).size}});return d.sort((a,b)=>Date.parse(b.lastSeen)-Date.parse(a.lastSeen)),{rows:d,notify:(0,p.readConfig)().audit.notify}}async function r(a){let b;return!!(b=m(void 0)).dismissed.includes(a)||(b.dismissed.push(a),n(b,void 0))}async function s(a){try{return(0,p.updateConfig)({audit:{notify:a}}),!0}catch{return!1}}(0,e.ensureServerEntryExports)([q,r,s]),(0,c.registerServerReference)(q,"00fd330814bcefc936e301ec49d66099ed614ecf67",null),(0,c.registerServerReference)(r,"4097c062c6b1d13b1d6f2a64af27881249bbf9d989",null),(0,c.registerServerReference)(s,"409ed106c4be852cd917c107309fc8fd09d79a0beb",null),a.s([],37550),a.i(37550),a.s(["000c85ddbcc0c76485115f8fdbd1792f16d26c97bb",()=>b.getTelemetryConfig,"0048814305f7563284b0e6413ac4ea842889a1d6eb",0,f,"00fd330814bcefc936e301ec49d66099ed614ecf67",0,q,"4097c062c6b1d13b1d6f2a64af27881249bbf9d989",0,r,"409ed106c4be852cd917c107309fc8fd09d79a0beb",0,s],74863)},2726,a=>{a.v(b=>Promise.all(["server/chunks/ssr/[externals]__0vmspq5._.js","server/chunks/ssr/node_modules_posthog-node_dist_entrypoints_index_node_mjs_11bnuzn._.js"].map(b=>a.l(b))).then(()=>b(74493)))}];
-
-//# sourceMappingURL=_0oq1dh6._.js.map

package/.next/standalone/.next/static/chunks/04o5zfl7p5lhx.js

@@ -1 +0,0 @@
-(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,86616,29054,e=>{"use strict";function t(e,a={},s=15e3){let n=AbortSignal.timeout(s),i=a.signal?AbortSignal.any([a.signal,n]):n;return fetch(e,{...a,signal:i})}function a(e){if(null===e||"object"!=typeof e)return!1;let t=e.name;return"AbortError"===t||"TimeoutError"===t}e.s(["fetchWithTimeout",0,t,"isAbortError",0,a],29054);class s extends Error{kind;constructor(e,t){super(t),this.kind=e,this.name="RerunError"}}async function n(e){try{let a=await t("/api/audit/run",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({cli:e.cli.length>0?e.cli:void 0,since:"all"===e.since?void 0:e.since,noCache:!!e.noCache||void 0})});if(!a.ok&&409!==a.status){let e=await a.text().catch(()=>"");throw console.error("audit run failed:",a.status,e),new s("post_failed",`audit run failed (${a.status})`)}}catch(e){if(e instanceof s)throw e;throw console.error("audit run request failed:",e),new s(a(e)?"timeout":"network","audit run request failed")}let n=0;for(;;){await new Promise(e=>setTimeout(e,1e3));let e=null;try{let a=await t("/api/audit/status",{cache:"no-store"});a.ok&&(e=await a.json())}catch{}if(null===e){if(++n>=10)throw new s("network","audit status poll lost the server");continue}if(n=0,!e.running){if(e.error)throw new s("post_failed",e.error);return}}}e.s(["RerunError",0,s,"triggerRun",0,n],86616)},93237,e=>{"use strict";var t=e.i(43476),a=e.i(71645),s=e.i(95187);let n=(0,s.createServerReference)("00d97410f220c9506cdadd420812b2c7ab41b6dee8",s.callServer,void 0,s.findSourceMapURL,"getScheduledAuditAction"),i=(0,s.createServerReference)("4070638273d8ce919cc1cb3a9c56f9581269fad56d",s.callServer,void 0,s.findSourceMapURL,"setAutoAuditAction"),r=(0,s.createServerReference)("40b2805baae56152c00aa41d8f14da989078e7227d",s.callServer,void 0,s.findSourceMapURL,"setAuditIntervalAction");var l=e.i(86616),o=e.i(12344),c=e.i(29054);let d=/^[^\s@]+@[^\s@]+\.[^\s@]+$/;function u(e){if((0,c.isAbortError)(e))return"request timed out. check your network and try again.";let t=e instanceof Error?e.message:String(e);return`network error: ${t}`}function h({open:e,headline:s="where to route the reminder?",subhead:n="we'll send a one-time code to confirm.",onClose:i,onAuthed:r,source:l="unknown"}){let{capture:m}=(0,o.usePostHog)(),[f,b]=(0,a.useState)({kind:"email",error:null}),[p,x]=(0,a.useState)(!1),v=(0,a.useRef)(!1),g=(0,a.useRef)(null),y=(0,a.useRef)(null);(0,a.useEffect)(()=>{e&&(b({kind:"email",error:null}),x(!1),v.current=!1,m("audit_auth_dialog_opened",{source:l}))},[m,e,l]);let w=(0,a.useRef)(!1);(0,a.useEffect)(()=>{if(e){w.current=!0;return}w.current&&!v.current&&m("audit_auth_dialog_dismissed",{source:l,step:f.kind}),w.current=!1},[m,e,l,f.kind]),(0,a.useEffect)(()=>{if(!e)return;let t=setTimeout(()=>{"email"===f.kind?g.current?.focus():"code"===f.kind&&y.current?.focus()},50);return()=>clearTimeout(t)},[e,f.kind]),(0,a.useEffect)(()=>{if(!e)return;let t=e=>{"Escape"!==e.key||p||i()};return window.addEventListener("keydown",t),()=>window.removeEventListener("keydown",t)},[e,p,i]);let j="code"===f.kind&&f.resendIn>0;(0,a.useEffect)(()=>{if(!j)return;let e=setInterval(()=>{b(e=>"code"===e.kind?{...e,resendIn:Math.max(0,e.resendIn-1)}:e)},1e3);return()=>clearInterval(e)},[j]);let k=(0,a.useCallback)(async(e,t={})=>{let{isResend:a=!1}=t,s=e=>{a?b(t=>"code"===t.kind?{...t,error:e}:t):b({kind:"email",error:e})};x(!0);try{let t=await (0,c.fetchWithTimeout)("/api/auth/login-request",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({email:e})}),a=await t.json().catch(()=>({}));if(!t.ok){let e=a.message??"could not send code.";"rate_limited"===a.code&&void 0!==a.retry_after_secs?e=`too many tries. wait ${a.retry_after_secs}s and try again.`:"upstream_unreachable"===a.code&&(e="api-server unreachable. check your network."),s(e);return}b({kind:"code",email:e,error:null,expiresIn:a.expires_in??600,resendIn:a.resend_available_in??30})}catch(e){s(u(e))}finally{x(!1)}},[]),N=(0,a.useCallback)(async(e,t)=>{x(!0);try{let a=await (0,c.fetchWithTimeout)("/api/auth/login-verify",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({email:e,code:t})}),s=await a.json().catch(()=>({}));if(!a.ok||!s.authenticated||!s.user){let e=s.message??"invalid code.";"invalid_code"===s.code&&(e="wrong code, or it expired. try again."),b(t=>"code"===t.kind?{...t,error:e}:t);return}v.current=!0,m("audit_auth_dialog_succeeded",{source:l}),b({kind:"done",user:s.user}),r(s.user)}catch(t){let e=u(t);b(t=>"code"===t.kind?{...t,error:e}:t)}finally{x(!1)}},[m,r,l]),S=(0,a.useCallback)(async e=>{if(e.preventDefault(),p||"email"!==f.kind)return;let t=String(new FormData(e.currentTarget).get("email")??"").trim().toLowerCase();d.test(t)?await k(t):b({kind:"email",error:"that doesn't look like an email."})},[p,f,k]),C=(0,a.useCallback)(async e=>{if(e.preventDefault(),p||"code"!==f.kind)return;let t=String(new FormData(e.currentTarget).get("code")??"").trim();t.length<4||t.length>12?b(e=>"code"===e.kind?{...e,error:"code is 4–12 characters."}:e):await N(f.email,t)},[p,f,N]),M=(0,a.useCallback)(async()=>{"code"!==f.kind||f.resendIn>0||p||await k(f.email,{isResend:!0})},[f,p,k]);return e?(0,t.jsx)("div",{className:"auth-dialog-backdrop",role:"dialog","aria-modal":"true","aria-labelledby":"auth-dialog-title",onClick:e=>{p||e.target!==e.currentTarget||i()},children:(0,t.jsxs)("div",{className:"auth-dialog",children:[(0,t.jsx)("button",{type:"button",className:"auth-close",onClick:i,disabled:p,"aria-label":"close",children:"×"}),(0,t.jsx)("h2",{id:"auth-dialog-title",className:"auth-headline",children:s}),"email"===f.kind&&(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)("p",{className:"auth-sub",children:n}),(0,t.jsxs)("form",{onSubmit:S,className:"auth-form",children:[(0,t.jsx)("input",{ref:g,id:"auth-dialog-email",name:"email",type:"email",autoComplete:"email",inputMode:"email",spellCheck:!1,placeholder:"you@yourdomain.com",disabled:p,className:"auth-input",required:!0}),f.error&&(0,t.jsx)("div",{className:"auth-error",children:f.error}),(0,t.jsxs)("div",{className:"auth-actions",children:[(0,t.jsx)("button",{type:"submit",className:"auth-btn primary",disabled:p,children:p?"sending…":"send code"}),(0,t.jsx)("button",{type:"button",className:"auth-btn",onClick:i,disabled:p,children:"cancel"})]})]})]}),"code"===f.kind&&(0,t.jsxs)(t.Fragment,{children:[(0,t.jsxs)("p",{className:"auth-sub",children:["code sent to ",(0,t.jsx)("span",{className:"auth-email",children:f.email}),". expires in ",Math.ceil(f.expiresIn/60)," min."]}),(0,t.jsxs)("form",{onSubmit:C,className:"auth-form",children:[(0,t.jsx)("input",{ref:y,id:"auth-dialog-code",name:"code",type:"text",inputMode:"numeric",autoComplete:"one-time-code",spellCheck:!1,placeholder:"123456",disabled:p,className:"auth-input auth-input-code",maxLength:12,required:!0}),f.error&&(0,t.jsx)("div",{className:"auth-error",children:f.error}),(0,t.jsxs)("div",{className:"auth-actions",children:[(0,t.jsx)("button",{type:"submit",className:"auth-btn primary",disabled:p,children:p?"verifying…":"verify"}),(0,t.jsx)("button",{type:"button",className:"auth-btn",onClick:M,disabled:p||f.resendIn>0,children:f.resendIn>0?`resend in ${f.resendIn}s`:"resend code"})]}),(0,t.jsx)("button",{type:"button",className:"auth-back",onClick:()=>b({kind:"email",error:null}),disabled:p,children:"← use a different email"})]})]}),"done"===f.kind&&(0,t.jsxs)(t.Fragment,{children:[(0,t.jsxs)("p",{className:"auth-sub",children:[(0,t.jsx)("span",{className:"auth-ok",children:"✓"})," signed in as"," ",(0,t.jsx)("span",{className:"auth-email",children:f.user.email}),"."]}),(0,t.jsx)("div",{className:"auth-actions",children:(0,t.jsx)("button",{type:"button",className:"auth-btn primary",onClick:i,children:"continue"})})]})]})}):null}var m=e.i(55574),f=e.i(34713);function b(e){return new Date(e).toLocaleString(void 0,{month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"})}function p(e,t){let a=e-t;if(a<=0)return"now";let s=Math.floor(a/864e5),n=Math.floor(a%864e5/36e5);return s>0?n>0?`${s}d ${n}h`:`${s}d`:n>0?`${n}h`:`${Math.max(1,Math.floor(a/6e4))}m`}function x(e){return e.toLocaleString("en-US")}function v({label:e,value:a,sub:s,tone:n}){return(0,t.jsxs)("div",{className:"set-stat",children:[(0,t.jsx)("div",{className:"set-stat-label",children:e}),(0,t.jsx)("div",{className:`set-stat-value${n?` ${n}`:""}`,children:a}),(0,t.jsx)("div",{className:"set-stat-sub",children:s??" "})]})}function g({lastRunAtMs:e,nextDueAtMs:a,now:s}){if(null==e||null==a||a<=e)return null;let n=Math.min(100,Math.max(0,(s-e)/(a-e)*100));return(0,t.jsxs)("div",{className:"tape","aria-hidden":"true",children:[(0,t.jsxs)("div",{className:"tape-rail",children:[(0,t.jsx)("div",{className:"tape-fill",style:{width:`${n}%`}}),(0,t.jsx)("div",{className:"tape-now",style:{left:`${n}%`}})]}),(0,t.jsxs)("div",{className:"tape-ends",children:[(0,t.jsxs)("span",{children:["last scan · ",b(e)]}),(0,t.jsxs)("span",{className:"tape-next",children:["next · ",p(a,s)]})]})]})}function y({enabled:e,onChange:a,disabled:s,label:n}){return(0,t.jsx)("button",{type:"button",role:"switch","aria-checked":e,"aria-label":n,disabled:s,onClick:a,className:"sw","data-on":e?"true":"false",children:(0,t.jsx)("span",{className:"sw-knob"})})}let w=[{label:"reads",body:"every session transcript on disk — your prompts, the files your agents read and wrote, and command output."},{label:"runs",body:"entirely on this machine. the transcripts never leave it."},{label:"sends",body:"counts, redacted examples, and this machine's name — and only when a scan finds something harmful."}];e.s(["default",0,function({initial:e}){let[s,o]=(0,a.useState)(e),[c,d]=(0,a.useState)(e?.auto??!1),[u,j]=(0,a.useState)(e?.intervalDays??7),[k,N]=(0,a.useState)(!1),[S,C]=(0,a.useState)(!1),[M,$]=(0,a.useState)(!1),[E,A]=(0,a.useState)(null===e),[D,R]=(0,a.useState)(0),_=(0,a.useRef)(!0),T=(0,a.useRef)(null!==e),I=(0,a.useCallback)(async()=>{try{let e=await n();if(!_.current)return;o(e),T.current=!0,d(e.auto),j(e.intervalDays),R(Date.now()),A(!1)}catch{_.current&&!T.current&&A(!0)}},[]);(0,a.useEffect)(()=>(_.current=!0,I(),()=>{_.current=!1}),[I]),(0,a.useEffect)(()=>{let e=()=>void I();return window.addEventListener("focus",e),document.addEventListener("visibilitychange",e),()=>{window.removeEventListener("focus",e),document.removeEventListener("visibilitychange",e)}},[I]);let L=s?.signedInAs??null,F=s?.daemon==="running",O=s?.daemon==="unsupported-platform",P=s?.schedule??null,q=s?.lastScan??null,U=P?.lastExitCode!=null&&0!==P.lastExitCode&&75!==P.lastExitCode,B=(0,a.useCallback)(async()=>{N(!0);try{let e=await i(!0);if(!e.ok){if(d(!1),"unreachable"===e.reason)return void(0,m.toast)("could not reach the server. check your connection and try again.");await I(),$(!0),(0,m.toast)("that sign-in expired. one more code and it's on.");return}d(e.auto),(0,m.toast)("scheduled audits on."),await I()}catch{d(!1),(0,m.toast)("could not turn that on.")}finally{N(!1)}},[I]),J=(0,a.useCallback)(async()=>{if(c){N(!0);try{let e=await i(!1);e.ok&&d(e.auto),(0,m.toast)("scheduled audits off."),await I()}catch{(0,m.toast)("could not turn that off.")}finally{N(!1)}return}L?await B():$(!0)},[c,B,I,L]),W=(0,a.useCallback)(async e=>{N(!0);try{let t=await r(e);j(t.intervalDays),o(e=>e?{...e,intervalDays:t.intervalDays}:e),(0,m.toast)(`scanning every ${t.intervalDays} day${1===t.intervalDays?"":"s"}.`)}catch{j(s?.intervalDays??7),(0,m.toast)("could not save that.")}finally{N(!1)}},[s?.intervalDays]),K=(0,a.useCallback)(async()=>{N(!0);try{await fetch("/api/auth/logout",{method:"POST"}),(0,m.toast)("signed out. scans continue; digests pause."),await I()}catch{(0,m.toast)("could not sign out.")}finally{N(!1)}},[I]),H=(0,a.useCallback)(async()=>{if(!S){C(!0);try{await (0,l.triggerRun)({cli:[],since:"all",noCache:!1}),(0,m.toast)("scan complete."),await I()}catch(e){(0,m.toast)(e instanceof l.RerunError&&"timeout"===e.kind?"the scan is taking a while — it will finish in the background.":"the scan could not be completed.")}finally{C(!1)}}},[I,S]),z=(0,a.useCallback)(async e=>{$(!1),await I(),await B()},[B,I]),G=s?F?{value:"running",sub:null!=s.daemonStartedAtMs&&D>0?`up ${function(e){let t=Math.floor(e/864e5);if(t>0)return`${t}d`;let a=Math.floor(e/36e5);return a>0?`${a}h`:`${Math.max(1,Math.floor(e/6e4))}m`}(Math.max(0,D-s.daemonStartedAtMs))}`:"",tone:"ok"}:O?{value:"unavailable",sub:"not on this platform"}:"not-installed"===s.daemon?{value:"not installed",sub:"run failproofai config",tone:"warn"}:"unknown"===s.daemon?{value:"unknown",sub:"could not read it"}:{value:"stopped",sub:"run failproofai config",tone:"warn"}:{value:"…",sub:"reading"},Q=c?P?.nextDueAtMs==null?{value:"pending",sub:"after the next scan"}:{value:D>0?p(P.nextDueAtMs,D):"—",sub:b(P.nextDueAtMs)}:{value:"off",sub:"nothing scheduled"},V=q?{value:(0,f.formatRelativeTime)(Date.parse(q.finishedAt)),sub:null!=q.sessionsScanned?`${x(q.sessionsScanned)} sessions`:"scanned"}:{value:"none yet",sub:"run one below"},X=q?null==q.findings?{value:"—",sub:"unreadable"}:{value:x(q.findings),sub:"this scan",...q.findings>0?{tone:"warn"}:{}}:{value:"—",sub:"no scan yet"};return(0,t.jsxs)("main",{className:"report",children:[(0,t.jsxs)("section",{className:"section set-sec",children:[(0,t.jsxs)("div",{className:"set-mast",children:[(0,t.jsx)("h1",{className:"set-title",children:"settings"}),(0,t.jsx)("p",{className:"set-lede",children:"keeping watch, so you don't have to."})]}),E?(0,t.jsx)("div",{className:"set-console",children:(0,t.jsx)("div",{className:"set-cell",children:(0,t.jsxs)("p",{className:"set-warn",children:["could not read this machine's settings. check that the dashboard can reach ",(0,t.jsx)("code",{children:"~/.failproofai/config.json"}),"."]})})}):(0,t.jsxs)("div",{className:"set-console",children:[(0,t.jsxs)("div",{className:"set-stats",children:[(0,t.jsx)(v,{label:"daemon",...G}),(0,t.jsx)(v,{label:"next scan",...Q}),(0,t.jsx)(v,{label:"last scan",...V}),(0,t.jsx)(v,{label:"findings",...X})]}),(0,t.jsxs)("div",{className:"set-cols",children:[(0,t.jsxs)("div",{className:"set-cell set-config",children:[(0,t.jsx)("h2",{className:"set-cell-title",children:"scheduled audit"}),(0,t.jsxs)("div",{className:"set-row set-row-main",children:[(0,t.jsx)(y,{enabled:c,disabled:k||null===s,onChange:()=>void J(),label:c?"turn off scheduled audits":"turn on scheduled audits"}),(0,t.jsxs)("div",{className:"set-row-copy",children:[(0,t.jsx)("span",{className:"set-strong",children:c?"scanning on a schedule.":"scan on a schedule."}),(0,t.jsx)("span",{className:"set-dim",children:c?"you'll get an email only when a scan finds something.":"off. nothing runs and nothing is sent."})]})]}),(0,t.jsxs)("div",{className:"set-row set-row-interval",children:[(0,t.jsx)("span",{className:"set-dim",children:"scan every"}),(0,t.jsx)("input",{type:"number",className:"set-num",min:1,max:90,value:u,disabled:k||null===s,"aria-label":"days between scheduled scans",onChange:e=>j(Number(e.target.value)),onBlur:e=>{let t=Number(e.target.value);Number.isFinite(t)?t!==s?.intervalDays&&W(t):j(s?.intervalDays??7)}}),(0,t.jsx)("span",{className:"set-dim",children:"days"}),(0,t.jsxs)("span",{className:"set-hint",children:[1,"–",90]})]}),(0,t.jsx)("div",{className:"set-rule"}),(0,t.jsx)("div",{className:"set-row set-row-identity",children:L?(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)("span",{className:"set-dim",children:"reports go to"}),(0,t.jsx)("span",{className:"set-email",children:L.email}),(0,t.jsx)("button",{type:"button",className:"set-link",disabled:k,onClick:()=>void K(),children:"sign out"})]}):c?(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)("span",{className:"set-warn",children:"signed out — scans continue, digests are paused."}),(0,t.jsx)("button",{type:"button",className:"set-link",disabled:k,onClick:()=>$(!0),children:"sign in to resume"})]}):(0,t.jsx)("span",{className:"set-dim",children:"turning this on asks for an email, so there is somewhere to send the report."})}),c&&s&&!F&&(0,t.jsx)("p",{className:"set-warn",children:O?"the background service isn't available on this platform, so scheduled scans can't run here. you can still run one now.":"not-installed"===s.daemon?"the background service isn't installed, so nothing will run on the timer. install it with `failproofai config`.":"the background service is stopped, so nothing will run until it starts. repair it with `failproofai config`."}),U&&(0,t.jsxs)("p",{className:"set-warn",children:["the last scheduled scan exited ",P?.lastExitCode,". the next one will still run."]}),(0,t.jsx)("div",{className:"set-actions",children:(0,t.jsx)("button",{type:"button",className:"btn btn-press",disabled:S,onClick:()=>void H(),children:S?"[ scanning… ]":"[ run a scan now ]"})})]}),(0,t.jsxs)("div",{className:"set-cell set-how",children:[(0,t.jsx)("h2",{className:"set-cell-title",children:"how it works"}),(0,t.jsx)("dl",{className:"set-how-list",children:w.map(e=>(0,t.jsxs)("div",{className:"set-how-row",children:[(0,t.jsx)("dt",{className:"set-how-label",children:e.label}),(0,t.jsx)("dd",{className:"set-how-body",children:e.body})]},e.label))})]})]})]}),c&&D>0&&(0,t.jsx)(g,{lastRunAtMs:P?.lastRunAtMs??null,nextDueAtMs:P?.nextDueAtMs??null,now:D})]}),(0,t.jsx)(h,{open:M,source:"settings_scheduled_audit",headline:"where should the report go?",subhead:"we'll send a one-time code to confirm.",onClose:()=>$(!1),onAuthed:e=>void z(e)})]})}],93237)},34713,e=>{"use strict";e.s(["formatDuration",0,function(e){if(e<1e3)return`${e}ms`;let t=Math.round(e/100);if(t<600)return`${(t/10).toFixed(1)}s`;let a=Math.round(e/1e3);if(a<3600){let e=Math.floor(a/60);return`${e}m ${a%60}s`}let s=Math.round(e/6e4),n=Math.floor(s/60);return`${n}h ${s%60}m`},"formatRelativeTime",0,function(e){let t=Date.now()-e;return t<6e4?`${Math.max(1,Math.floor(t/1e3))}s ago`:t<36e5?`${Math.floor(t/6e4)}m ago`:t<864e5?`${Math.floor(t/36e5)}h ago`:`${Math.floor(t/864e5)}d ago`}])}]);