watch-tail 0.6.1 → 0.7.1

package/README.md

@@ -2,100 +2,111 @@
 
 # watch-tail
 
-**Your CloudWatch logs, in a real window, in one command.**
+**CloudWatch logs. One command. A clearer picture.**
 
-`npx watch-tail` starts a local UI, lists the log groups in your AWS account, and streams whichever one
-you pick - live, or across any historic window. No config file, no credentials to paste, no browser
-tab fighting the AWS console.
+Tail live logs, investigate an incident across services, and keep what you find in a local archive.
+Uses your existing AWS credentials. Runs on your machine.
 
 [![npm version](https://img.shields.io/npm/v/watch-tail?color=blue)](https://www.npmjs.com/package/watch-tail)
-[![CI](https://github.com/antstanley/watch-stream/actions/workflows/ci.yml/badge.svg)](https://github.com/antstanley/watch-stream/actions/workflows/ci.yml)
+[![CI](https://github.com/antstanley/watch-tail/actions/workflows/ci.yml/badge.svg)](https://github.com/antstanley/watch-tail/actions/workflows/ci.yml)
 [![license](https://img.shields.io/npm/l/watch-tail)](./LICENSE)
 [![node](https://img.shields.io/node/v/watch-tail)](package.json)
 
-<img src="./docs/screenshot.png" alt="watch-tail streaming CloudWatch Logs" width="900">
+<img src="https://raw.githubusercontent.com/antstanley/watch-tail/v0.7.1/docs/watch-tail-overview.png" alt="watch-tail: historic logs from multiple groups, with severity chart and request grouping" width="1200">
 
 </div>
 
+## Start here
+
 ```bash
-npx watch-tail                                              # uses your ambient AWS credentials
-npx watch-tail --profile my-profile --region af-south-1      # or a specific profile and region
-npx watch-tail --floci                                      # or a local emulator, no AWS account
+npx watch-tail                                          # use your existing AWS credentials
+npx watch-tail --profile my-profile --region af-south-1  # choose a profile and region
+npx watch-tail --floci                                  # use a local emulator
 ```
 
-## Why watch-tail?
-
-Because the two things you have today are the AWS console and `aws logs tail`, and both make you
-work for every line.
-
-- **The console is a form-filling exercise.** Region dropdown, log-group dropdown, sometimes a stream
-  dropdown, then a text-only event viewer that forgets where you were. `watch-tail` opens on your
-  region, lists every group with its size, and starts streaming the moment you click one.
-- **`aws logs tail` is a wall of text.** `watch-tail` gives you pause with buffering, client-side
-  filtering, clear, auto-scroll, a 5 000-line ring buffer, and a stream-name column that is truncated
-  with the full value on hover - so a 95-character Lambda stream name cannot push your message off
-  screen.
-- **Logs arrive as payloads, not prose.** JSON entries are pretty-printed with syntax colouring by
-  default, and one toggle shows the raw line when you need the wire format. With that toggle off,
-  **click a line that carries JSON** and just that payload opens beneath it - indented, coloured, and
-  without losing the raw line - and clicking again closes it.
-- **"What happened an hour ago?" is the normal question.** Flip to **Historic** and scan 15 min, 1 h,
-  3 h, 12 h, 24 h, 5 days - or pick a custom `from`/`to` window. The scan finishes on its own and the
-  window lives in the URL, so `…&mode=historic&range=24h` is a shareable view of an incident.
-- **Your credentials never move.** No keys to paste into a SaaS, no CLI to install into your CI, no
-  vendor account: it uses the ambient AWS profile you already use, needs only two read-only IAM
-  actions, and binds to loopback. Throwaway keys are used for a local emulator and only there.
-- **It is one command and it goes away.** `npx watch-tail`, Ctrl+C. Nothing is deployed, nothing is
-  sent anywhere, and there is no agent, sidecar or daemon to clean up.
-- **You keep what you have seen.** Logs you stream are appended to a local DuckDB file, so the incident
-  you looked at last week is still there - no re-scanning AWS, no 14-day cliff, no credentials needed
-  to read it back. Switch the source to **Local archive** in the UI and the same window controls work
-  against that file.
-
-Use it when you are debugging a Lambda, chasing an API Gateway 5xx, watching a worker drain a queue,
-or handing a teammate a link that shows exactly the window you are staring at.
+Requires **Node.js 22+**. Prefer a global install? `npm install -g watch-tail` gives you both
+`watch-tail` and the shorter `wt`. Press **Ctrl+C** to stop, including during a live stream or login prompt.
 
 ## What you get
 
-- **Region-first UI** - pick a region, see its log groups (with stored size), click one to stream.
-- **Live and historic** - follow new events over SSE, or scan a fixed window up to the 14 days
-  CloudWatch Logs keeps.
-- **A log window built for real logs** - horizontal scrolling or wrapping, JSON pretty-printing with
-  click-to-open payloads, drag-resizable stream-name column and group-list pane, level colouring,
-  pause/clear/auto-scroll.
-- **Shareable views** - region, group, mode and window all live in the URL.
-- **Local emulation friendly** - `--floci` points at [floci](https://floci.io) on port 4566 for
-  development without an AWS account.
-- **History that outlives the window** - everything you stream is archived to a local
-  [DuckDB](https://duckdb.org) file, so you can come back to it later - after the 14-day CloudWatch
-  limit, with no AWS credentials at all - and query it with plain SQL.
-- **See the shape of an incident before you read it.** A scatter chart above the log view plots events
-  over time, coloured by level, so a spike is visible in one glance. Drag across it to zoom into that
-  moment - the log view follows the brush, and a click clears it.
-- **Follow more than one group at once.** Tick extra groups in the sidebar and the chart and the log
-  view cover all of them, with a group column and a merged stream; the selection lives in the URL.
-- **One request, one row.** Lines that share a request id are grouped - in the log view and in the
-  chart - and coloured by the most critical line in the request, so you read requests instead of the
-  twenty lines each one wrote. Toggle it off to see every line.
-- **Severity you can filter on.** Every archived line is tagged `error`, `warn`, `info` or `debug`,
-  and the viewer has chips to narrow to one level. A level the log itself declares
-  (`{"level":"error"}`) is trusted; otherwise it is read from the line, and a line that carries no
-  level at all stays unclassified instead of being called `info`.
-
-## Install
+- **Live tail and historic scans.** Follow new events or select a preset (15 minutes to 5 days) or
+  custom window. Pause with buffering, filter text, clear the view, and toggle auto-scroll.
+- **Several groups, one view.** Select groups in the sidebar to merge their logs and chart. A group
+  column keeps each line's source visible.
+- **Requests, not just lines.** **By request** groups matching request IDs into one expandable row,
+  showing line count, elapsed span, and highest severity. Lines without an ID stay visible.
+- **Spot the spike.** In Historic mode, the chart shows request counts over time, coloured by severity.
+  Drag to zoom into an incident; severity chips filter both chart and logs. Switch off **By request**
+  to count individual events. Collapse the chart when you want the space back.
+- **Readable payloads.** Syntax-coloured JSON, expandable payloads, wrapping, horizontal scrolling,
+  and resizable sidebar and stream-name columns. The viewer keeps a 5,000-line buffer.
+- **Offline history.** Streamed events are saved to a local DuckDB archive. Browse them later without
+  AWS credentials, or query them with SQL.
+- **Reopen the same view.** Region, groups, source, mode, and time window live in the URL. A teammate
+  needs their own AWS access or a copy of the archive; the link does not include logs or credentials.
+
+## Follow a request
+
+Grouping is on by default. Click a request row to expand its lines; use **By request** to return to
+individual events. IDs are detected from `requestId`, `request_id`, `awsRequestId`, `x-request-id`,
+and Lambda's `RequestId:` lines. Each request takes the severity of its most critical line.
+
+<img src="https://raw.githubusercontent.com/antstanley/watch-tail/v0.7.1/docs/watch-tail-requests.png" alt="watch-tail: an expanded checkout request showing its JSON payloads and Lambda log lines" width="1200">
+
+In **Historic**, drag across the chart to narrow the window. Click to clear the brush, or use
+**Reset zoom** to restore the preset. CloudWatch charts reflect the events loaded into the viewer;
+archive charts query the whole selected window.
+
+Switch the chart from **Count** to **Duration (ms)** to see one point per request: X is its first
+observed event timestamp; Y is `(last timestamp + last event duration) − first timestamp` in
+milliseconds. The last event's JSON `duration` (or `durationMs`) is used when present; otherwise it
+adds zero. Hover for the request ID and duration. Severity filters and chart zoom work in both modes.
+Only events with request IDs contribute; incomplete windows can show partial durations.
+
+## Keep your history
+
+Choose **Local archive** to browse events already captured on this machine, even offline or with an
+expired SSO session. Only events received while streaming are archived; it does not back up your
+whole AWS account.
 
 ```bash
-npx watch-tail              # no install
-pnpm add -g watch-tail      # or install once; `wt` is installed as a shorthand
+watch-tail --db ./logs.duckdb   # choose an archive file
+watch-tail --no-archive        # disable archiving
 ```
 
-Installed globally, the command is available as both `watch-tail` and the shorter `wt`:
+<img src="https://raw.githubusercontent.com/antstanley/watch-tail/v0.7.1/docs/watch-tail-archive.png" alt="watch-tail: local archive replay with stored event counts and a severity chart" width="1200">
 
-```bash
-wt --profile my-profile --region af-south-1
+Each AWS account and region gets its own `<account-id>/<region>/archive.duckdb` beneath:
+
+| Platform | Directory                                      |
+| -------- | ---------------------------------------------- |
+| macOS    | `~/Library/Application Support/watch-tail/`    |
+| Linux    | `${XDG_DATA_HOME:-~/.local/share}/watch-tail/` |
+| Windows  | `%LOCALAPPDATA%\watch-tail\`                   |
+
+Account IDs come from AWS STS, so two profiles for the same account share its regional archive.
+Changing regions switches files automatically. Emulator endpoints have a separate namespace.
+Account mappings are cached locally for offline reads; a new CloudWatch stream verifies its account
+before archiving. If verification fails, logs still stream but are not archived.
+
+Existing `archive.duckdb` files stay untouched. Open a legacy archive with `--db /path/to/archive.duckdb`.
+`--db` deliberately overrides automatic account/region separation: use it to inspect an existing file
+or manage a file yourself. For offline access on another machine, copy the regional database and
+open it with `--db`.
+
+DuckDB is optional: if its native driver cannot load, the viewer runs without archiving. One process
+can own an archive file at a time; use separate `--db` paths for concurrent instances. To inspect it
+with a DuckDB client, stop the app first:
+
+```sql
+SELECT log_group, level, count(*) AS events
+FROM log_events
+GROUP BY log_group, level
+ORDER BY events DESC;
 ```
 
-Requires Node 22 or newer (developed and tested on Node 24).
+CloudWatch scans in this app are limited to the last 14 days; actual AWS retention depends on the
+log group's settings. The local archive can retain events beyond that window.
 
 ## CLI
 
@@ -112,47 +123,30 @@ watch-tail [options]
       --print            Print the environment that would be used, then exit
       --list             List the AWS profiles found on disk, then exit
       --verbose          Log the server's own output
-      --db <path>        Database file for local history (default: app data dir)
+      --db <path>        Explicit archive file (default: per account and region)
       --no-archive       Do not keep a local history archive
   -h, --help             Show this help
   -v, --version          Show the version
 ```
 
-The CLI keeps the terminal while it runs: `Ctrl+C` stops the server and exits - whether it is idle,
-whether it is waiting at one of its questions (the login offer, the profile picker, where cancelling is a
-stop rather than a "no"), and whether a browser is streaming from it. An open live tail never ends on its
-own, so the app ends its own streams when it is asked to stop instead of letting them hold the shutdown
-open.
-
-Shell completions come from [`@bomb.sh/tab`](https://bomb.sh): flags, `--region` values from the
-CloudWatch Logs region list, and `--profile` values from your own `~/.aws/config`. zsh, bash, fish and
-powershell are supported.
+Shell completions support zsh, bash, fish, and PowerShell, including your AWS profile names and
+available regions:
 
 ```bash
-source <(watch-tail complete zsh)                       # this shell, now
-watch-tail complete zsh > ~/.watch-tail-completion.zsh  # or install it permanently
-echo 'source ~/.watch-tail-completion.zsh' >> ~/.zshrc
+source <(watch-tail complete zsh)
 ```
 
-The generated script re-invokes `watch-tail complete -- <words>`, so completions keep working after
-you upgrade. Install the [`@bomb.sh/tab`](https://www.npmjs.com/package/@bomb.sh/tab) CLI globally if
-you also want completions for a locally installed copy through your package manager
-(`pnpm watch-tail <TAB>`).
-
-`--profile` sets `AWS_PROFILE` for the server process only. Nothing is written to disk, and any local
-emulator settings are neutralized for that run, so a stray `.env.local` cannot redirect a real AWS run.
-
 ## AWS access
 
-Credentials are **ambient**: resolved by the AWS SDK provider chain - SSO, shared config, environment
-variables or an instance role.
+Uses the AWS SDK credential chain: SSO, shared config, environment variables, or an instance role.
+The server binds to loopback by default. No vendor account or deployed agent is needed.
 
 ```bash
 aws sso login --profile my-profile
-watch-tail --profile my-profile
+wt --profile my-profile
 ```
 
-Two read-only actions are enough; the app never writes logs:
+The app reads logs using these IAM actions:
 
 ```json
 {
@@ -167,273 +161,40 @@ Two read-only actions are enough; the app never writes logs:
 }
 ```
 
-Scope `Resource` down with a log-group ARN pattern if you only need a subset.
-
-### When credentials are missing
-
-On startup the CLI asks the running app for one log group. If AWS refuses because of credentials, it
-works out which login command fixes it - from how your profile is configured, not from guesswork -
-and offers to run it:
-
-```text
-warning: AWS credentials are not usable: ... The SSO session token associated with
-         profile=my-profile was not found or is invalid.
-? Sign in to the SSO session for my-profile. Run `aws sso login --profile my-profile` now? › yes
-running aws sso login --profile my-profile
-signed in - credentials work now
-```
-
-If you did not name a profile and you have more than one, it asks which one first. The answer decides
-both the login and the profile the app runs with, so a chosen profile is applied by restarting the
-server with it (and with that profile's own region). **A profile that already works is never sent to a
-login prompt**: the CLI asks `sts:GetCallerIdentity` about the chosen profile first, and only offers a
-login when that profile really has nothing usable.
-
-```text
-? Which AWS profile should watch-tail use?  (type to search, then Enter)
-using profile beyond-mzansi
-restarting with profile beyond-mzansi
-profile beyond-mzansi already works (AWSReservedSSO_AWSAdministratorAccess) - using it
-```
-
-```text
-? Which AWS profile should watch-tail use?  (type to search, then Enter)
-using profile beyond-mzansi
-? Sign in to the SSO session for beyond-mzansi. Run `aws sso login --profile beyond-mzansi` now? › yes
-restarting with profile beyond-mzansi
-signed in as beyond-mzansi - credentials work now
-```
-
-| Your profile                           | What it runs                                                                               |
-| -------------------------------------- | ------------------------------------------------------------------------------------------ |
-| `sso_session` / `sso_start_url`        | `aws sso login --profile <name>`                                                           |
-| `login_session` (console sign-in)      | `aws login --profile <name>`                                                               |
-| nothing configured yet                 | `aws login` (which creates the session)                                                    |
-| static keys, or a `credential_process` | no login is offered - those are fixed with `aws configure` or where the process is defined |
-
-The login runs with your terminal attached, so the browser flow works. `--remote` is added when there
-is no browser (SSH, headless). Decline, or run non-interactively, and the CLI prints the exact command
-instead and keeps the app up - log in elsewhere, then press Refresh. Emulator runs (`--endpoint`,
-`--floci`) skip the check, because those use throwaway credentials by design.
-
-**The region is optional.** Precedence is `--region`, then `AWS_REGION`/`AWS_DEFAULT_REGION`, then the
-profile's own region, then `[default]` in `~/.aws/config`. Nothing resolvable produces a clear
-`missing-region` message instead of a silent guess. Log groups, retention and events are per region,
-so a group in `eu-west-1` will not appear under `us-east-2`.
-
-### Local emulator
-
-```bash
-curl -fsSL https://floci.io/install.sh | sh
-floci start
-npx watch-tail --floci             # throwaway credentials are supplied automatically
-```
-
-`--floci` is the only thing that points the CLI at an emulator. If an `.env.local` next to the app
-sets `AWS_ENDPOINT_URL` - as this repository's `pnpm floci:up` writes for the dev server - the CLI
-ignores it, says so, and runs against real AWS; your own exported variables always win over that file.
+If credentials fail, the CLI can help you choose a profile and offer `aws sso login` or `aws login`
+as appropriate. Working profiles are checked before offering login. In a non-interactive session it
+prints the command to run instead.
 
-## Local history
+Region precedence: `--region`, `AWS_REGION` / `AWS_DEFAULT_REGION`, the chosen profile, then the
+default profile. Use `--floci` or `--endpoint` to select an emulator explicitly; emulator settings
+from the checkout's `.env.local` do not silently redirect a normal CLI run.
 
-While a stream is open, every event that arrives is appended to a local DuckDB file. Nothing else
-changes: the live tail, the historic scan and the UI work exactly as before. What the archive adds is
-a **second source** you can read later.
+## Local development
 
-In the UI, a **Local archive** toggle appears next to the mode controls whenever the archive is
-available. Choosing it:
-
-- lists the log groups the archive holds for the current region, with how many events are stored
-  locally,
-- replays a window from the file instead of calling CloudWatch - instant, and **no credentials
-  needed**, so it works with an expired SSO session, offline, or on a machine that never had AWS
-  access,
-- keeps the same range controls (`15m` … `5d`, or a custom `from`/`to`), and puts the source in the URL
-  so `…&source=archive&range=24h` is a shareable view of the archive.
-
-```bash
-watch-tail                            # archive on, file in your app data directory
-watch-tail --db ./logs.duckdb         # keep the archive next to the project instead
-watch-tail --no-archive               # do not archive anything
-```
-
-The default file is `archive.duckdb` inside your platform's data directory:
-
-| Platform | Path                                                         |
-| -------- | ------------------------------------------------------------ |
-| macOS    | `~/Library/Application Support/watch-tail/archive.duckdb`    |
-| Linux    | `${XDG_DATA_HOME:-~/.local/share}/watch-tail/archive.duckdb` |
-| Windows  | `%LOCALAPPDATA%\watch-tail\archive.duckdb`                   |
-
-`WATCH_STREAM_ARCHIVE=off` turns the archive off for the server, and `WATCH_STREAM_ARCHIVE_DB` sets the
-file, for people who drive the server directly.
-
-Because it is a DuckDB database, you can point any DuckDB client at the same file - with the app
-stopped, since DuckDB allows one writer:
-
-```bash
-duckdb ~/Library/Application\ Support/watch-tail/archive.duckdb
-```
-
-```sql
-SELECT log_group, count(*) AS events, max(timestamp_ms) AS newest
-FROM log_events
-GROUP BY log_group
-ORDER BY events DESC;
-
-SELECT to_timestamp(timestamp_ms / 1000) AS at, message
-FROM log_events
-WHERE log_group = '/aws/lambda/checkout' AND message ILIKE '%timeout%'
-ORDER BY timestamp_ms;
-
--- how many errors per group, ignoring levels that were never detected
-SELECT log_group, level, count(*) AS events
-FROM log_events
-WHERE level = 'error'
-GROUP BY log_group, level
-ORDER BY events DESC;
-```
-
-Three things worth knowing:
-
-- **DuckDB is an optional dependency.** It is a native module (roughly 114 MB installed, prebuilt for
-  every supported platform - no compiler needed). If it cannot be installed or loaded, `watch-tail`
-  runs exactly as it did before, without history, and says so in the startup banner. To skip it
-  deliberately: `npm install -g watch-tail --no-optional`.
-- **One process owns the file.** DuckDB takes an exclusive lock, so a second `watch-tail` on the same
-  archive runs without history while the first is up; `--db` is the way to keep two instances
-  separate.
-- Levels are detected, not received: CloudWatch Logs does not report a severity, so `error`/`warn`/
-  `info`/`debug` come from the line itself, and `NULL` means nothing could be read from it.
-- **The archive is as wide as what you watched.** Events are recorded as they stream, so history covers
-  the windows you have actually visited. It is also local, unencrypted and outside your AWS account -
-  treat the file like the logs themselves.
-
-## Requests, not lines
-
-Log lines that belong to the same request are one thing, not twenty. watch-tail reads a request id out
-of each line - a declared `requestId` (also `request_id`, `awsRequestId`, an `x-request-id`) or the
-`RequestId: ...` that a Lambda prints - and groups the lines that share it:
-
-- **The log view** collapses each request into a single row: its request id, how many lines it wrote,
-  how long it took, and the level of its **most critical line**, so a request with one error among
-  twenty info lines reads as an error. Click the row to open it and see every line, indented, in order.
-- **The chart** counts **one mark per request**, placed at the request's first line and coloured by
-  that same most critical level, so a spike of failing requests is a spike of marks rather than a spike
-  of log volume.
-- **By request** in the log view's toolbar turns it off, and the view goes back to one row per line
-  (and the chart back to one mark per line). Your choice is remembered.
-
-Grouping is on by default. Lines with no request id are never grouped: each keeps its own row and its
-own mark, so nothing is hidden by a request id the log did not have. A request whose lines span more
-than one bucket is counted once, where it started, which is why the chart's total can be lower than
-the number of lines.
-
-## The chart
-
-In **Historic** mode (and for the local archive) a scatter chart sits above the log view: X is time, Y
-is the number of requests in a bucket, and each level is its own colour. Drag across it to brush a
-range - the log view, the window chip and the URL all follow, so a brush is a shareable view of the
-spike you just found. Click the chart to clear the brush, or press **Reset zoom** to go back to the
-preset window. The level chips filter the chart and the log view together.
-
-A drag only counts as a zoom when it is a real drag: a click, or a pointer that slips a couple of
-pixels, clears the brush instead of zooming into a sliver of a window, and the view is re-scoped when
-you release rather than while you drag - so the stream is not restarted mid-gesture.
-
-With several groups selected, the counts cover all of them and the chart's legend splits the totals by
-level. The level chips filter requests by their most critical level, which is the level the marks are
-drawn in, so the legend and the filter never disagree. The archive answers the chart with one SQL query over the whole window; a CloudWatch view has no
-aggregate API, so there the chart counts the events already in the view.
-
-The panel has a header you can click to collapse it, and it remembers that choice: collapsed, it is
-just one line of totals and per-level counts, and the space goes back to the log view.
-
-The chart is drawn with [layerchart](https://www.layerchart.com), which is **loaded on demand**: the
-charting code is fetched in the browser only once the panel is open, so it never delays the log view's
-first paint. Measured on the production build, an open panel pulls about 235 KiB of chart code after
-the page has started, and a collapsed one pulls none at all.
-
-## Development
+With [floci](https://floci.io) installed:
 
 ```bash
 pnpm install
-pnpm dev                                  # SvelteKit dev server on http://localhost:5173
-                                          #   (its history archive lives in .watch-tail/)
-pnpm seed                                 # fixtures in the local emulator (--watch for live traffic)
-pnpm dev:aws --profile my-profile         # dev server against a real profile
-pnpm build                                # adapter-node build + the CLI in dist/
-pnpm start                                # run the built CLI
+pnpm floci:up       # start the emulator and write its dev environment
+pnpm seed          # demo logs; use pnpm seed:watch for live traffic
+pnpm dev           # http://localhost:5173
 ```
 
-| Command                     | What it does                                                |
-| --------------------------- | ----------------------------------------------------------- |
-| `pnpm check`                | `svelte-check` types                                        |
-| `pnpm test:unit`            | vitest unit, component and integration projects             |
-| `pnpm test:e2e`             | floci integration suite (`WATCH_STREAM_E2E=1`)              |
-| `pnpm test:cli`             | the built CLI serves and stops cleanly (`WATCH_TAIL_E2E=1`) |
-| `pnpm test:ui`              | Playwright smoke check of the UI against a running app      |
-| `pnpm lint` / `pnpm format` | oxlint / oxfmt                                              |
-| `pnpm knip`                 | unused files, exports and dependencies                      |
-| `pnpm verify`               | all of the above plus the build                             |
-| `pnpm publish:check`        | publint plus the exact tarball contents                     |
-
-## Releasing
-
-Releases use [changesets](https://github.com/changesets/changesets): a changeset is a small file
-that records _what changed and how much it matters_, reviewed with the code. Pending changesets are
-folded into one "Release: version packages" PR; merging it bumps the version and writes
-`CHANGELOG.md`; the release workflow then stages that version to npm and tags the commit.
+Use `pnpm dev:aws --profile my-profile` to develop against AWS instead.
 
-```bash
-pnpm changeset        # describe the change; the Version PR does the rest
-pnpm changeset status # preview the next version
-```
-
-Publishing is **staged**, not direct: the tarball lands in npm's staging area and a human approves it
-before it goes live, so no npm token exists in the repository - authentication is GitHub OIDC trusted
-publishing, scoped to the publish job. See [RELEASING.md](./RELEASING.md) for the concept, the
-one-time setup and the approval flow.
-
-## Architecture
-
-```
-Browser (SvelteKit client)
-  |  GET /api/log-groups        group list for a region
-  |  GET /api/stream            SSE: ready, log, ping, error, end
-  v
-SvelteKit server routes (Node)
-  |  @aws-sdk/client-cloudwatch-logs   DescribeLogGroups + FilterLogEvents polling
-  v
-CloudWatch Logs API   -- ambient AWS credentials
-  or floci on http://localhost:4566
-
-Everything streamed is also appended to a local archive,
-which the UI can read back without AWS:
-
-  SvelteKit server ---- @duckdb/node-api ----> archive.duckdb (DuckDB file)
-                                             ^
-  Browser  -- GET /api/stream?source=archive -+
-```
+| Command                     | Purpose                                                       |
+| --------------------------- | ------------------------------------------------------------- |
+| `pnpm verify`               | Types, lint, formatting, tests, unused-code checks, and build |
+| `pnpm test:e2e`             | Emulator integration tests (requires floci)                   |
+| `pnpm test:cli`             | Built CLI startup and shutdown checks                         |
+| `pnpm test:ui`              | Browser smoke checks against the running app                  |
+| `pnpm build` / `pnpm start` | Build and run the production CLI                              |
+| `pnpm publish:check`        | Validate package metadata and tarball contents                |
 
-The CLI (`src/cli/`) boots the packaged adapter-node server, waits for `/api/health` and opens a
-browser. Full details, including the HTTP and SSE contract, are in [ARCHITECTURE.md](./ARCHITECTURE.md).
-
-## Notes and limits
-
-- CloudWatch Logs has no push API for reading, so the app polls `FilterLogEvents` (1 s by default,
-  250 ms - 15 s configurable). Expect roughly a second of latency and one API call per second per open
-  stream.
-- `FilterLogEvents` only returns events from the last 14 days.
-- The local server has no authentication: it binds to loopback and inherits your AWS permissions.
-  Binding elsewhere prints a warning - only do it on a trusted network.
-- floci omits `logStreamName` in `FilterLogEvents`, so the stream column stays empty locally; real AWS
-  fills it.
-- The archive is written from the same process that serves the UI, so it only grows while something is
-  streaming. A window you never opened is not in it, and events dropped by the 10 000-event cap of a
-  historic scan are not archived either.
-- Archived events are de-duplicated by CloudWatch event id (or by a hash of timestamp, stream and
-  message when an emulator omits ids), so re-scanning the same window does not duplicate rows.
+See [ARCHITECTURE.md](./ARCHITECTURE.md) for internals,
+[CHANGELOG.md](./CHANGELOG.md) for release history, and [RELEASING.md](./RELEASING.md) for the
+Changesets and npm staged-publishing workflow.
 
 ## License
 
-MIT - see [LICENSE](./LICENSE).
+[MIT](./LICENSE)

package/build/client/_app/immutable/assets/0.DKleCc0-.css

@@ -0,0 +1,2 @@
+/*! tailwindcss v4.3.3 | MIT License | https://tailwindcss.com */
+@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial}}}@layer theme{:root,:host{--font-sans:-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-red-300:oklch(80.8% .114 19.571);--color-red-400:oklch(70.4% .191 22.216);--color-red-800:oklch(44.4% .177 26.899);--color-red-900:oklch(39.6% .141 25.723);--color-red-950:oklch(25.8% .092 26.042);--color-amber-200:oklch(92.4% .12 95.746);--color-amber-300:oklch(87.9% .169 91.605);--color-amber-400:oklch(82.8% .189 84.429);--color-amber-700:oklch(55.5% .163 48.998);--color-amber-800:oklch(47.3% .137 46.201);--color-amber-900:oklch(41.4% .112 45.904);--color-amber-950:oklch(27.9% .077 45.635);--color-emerald-300:oklch(84.5% .143 164.978);--color-emerald-400:oklch(76.5% .177 163.223);--color-emerald-900:oklch(37.8% .077 168.94);--color-emerald-950:oklch(26.2% .051 172.552);--color-teal-300:oklch(85.5% .138 181.071);--color-teal-400:oklch(77.7% .152 181.912);--color-teal-700:oklch(51.1% .096 186.391);--color-teal-900:oklch(38.6% .063 188.416);--color-teal-950:oklch(27.7% .046 192.524);--color-sky-200:oklch(90.1% .058 230.902);--color-sky-300:oklch(82.8% .111 230.318);--color-sky-400:oklch(74.6% .16 232.661);--color-sky-500:oklch(68.5% .169 237.323);--color-sky-600:oklch(58.8% .158 241.966);--color-sky-700:oklch(50% .134 242.749);--color-sky-800:oklch(44.3% .11 240.79);--color-sky-900:oklch(39.1% .09 240.876);--color-sky-950:oklch(29.3% .066 243.157);--color-violet-300:oklch(81.1% .111 293.571);--color-violet-900:oklch(38% .189 293.745);--color-violet-950:oklch(28.3% .141 291.089);--color-fuchsia-300:oklch(83.3% .145 321.434);--color-neutral-100:oklch(97% 0 none);--color-neutral-200:oklch(92.2% 0 none);--color-neutral-300:oklch(87% 0 none);--color-neutral-400:oklch(70.8% 0 none);--color-neutral-500:oklch(55.6% 0 none);--color-neutral-600:oklch(43.9% 0 none);--color-neutral-700:oklch(37.1% 0 none);--color-neutral-800:oklch(26.9% 0 none);--color-neutral-900:oklch(20.5% 0 none);--color-neutral-950:oklch(14.5% 0 none);--spacing:.25rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--font-weight-medium:500;--font-weight-semibold:600;--tracking-tight:-.025em;--tracking-wider:.05em;--radius-md:.375rem;--radius-lg:.5rem;--animate-pulse:pulse 2s cubic-bezier(.4, 0, .6, 1) infinite;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono)}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring:where(:not(iframe)){outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.collapse{visibility:collapse}.visible{visibility:visible}.sr-only{clip-path:inset(50%);white-space:nowrap;border-width:0;width:1px;height:1px;margin:-1px;padding:0;position:absolute;overflow:hidden}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.inset-y-0{inset-block:0}.isolate{isolation:isolate}.container{width:100%}@media (width>=40rem){.container{max-width:40rem}}@media (width>=48rem){.container{max-width:48rem}}@media (width>=64rem){.container{max-width:64rem}}@media (width>=80rem){.container{max-width:80rem}}@media (width>=96rem){.container{max-width:96rem}}.ml-1{margin-left:var(--spacing)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.size-1\.5{width:calc(var(--spacing) * 1.5);height:calc(var(--spacing) * 1.5)}.size-3\.5{width:calc(var(--spacing) * 3.5);height:calc(var(--spacing) * 3.5)}.h-2{height:calc(var(--spacing) * 2)}.h-5{height:calc(var(--spacing) * 5)}.h-dvh{height:100dvh}.min-h-0{min-height:0}.min-h-\[30rem\]{min-height:30rem}.min-h-full{min-height:100%}.w-2{width:calc(var(--spacing) * 2)}.w-40{width:calc(var(--spacing) * 40)}.w-\[7\.5rem\]{width:7.5rem}.w-\[9rem\]{width:9rem}.w-full{width:100%}.w-max{width:max-content}.max-w-\[22rem\]{max-width:22rem}.min-w-0{min-width:0}.min-w-full{min-width:100%}.flex-1{flex:1}.flex-none{flex:none}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.animate-pulse{animation:var(--animate-pulse)}.cursor-col-resize{cursor:col-resize}.cursor-pointer{cursor:pointer}.touch-none{touch-action:none}.resize{resize:both}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-baseline{align-items:baseline}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-1{gap:var(--spacing)}.gap-1\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-y-1{row-gap:var(--spacing)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-y-auto{overflow-y:auto}.rounded{border-radius:.25rem}.rounded-full{border-radius:2147483647px}.rounded-lg{border-radius:var(--radius-lg)}.rounded-md{border-radius:var(--radius-md)}.border{border-style:var(--tw-border-style);border-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-amber-700{border-color:var(--color-amber-700)}.border-amber-800{border-color:var(--color-amber-800)}.border-amber-900{border-color:var(--color-amber-900)}.border-emerald-900{border-color:var(--color-emerald-900)}.border-neutral-700{border-color:var(--color-neutral-700)}.border-neutral-800{border-color:var(--color-neutral-800)}.border-neutral-900{border-color:var(--color-neutral-900)}.border-red-800{border-color:var(--color-red-800)}.border-red-900{border-color:var(--color-red-900)}.border-sky-700{border-color:var(--color-sky-700)}.border-sky-800{border-color:var(--color-sky-800)}.border-sky-900{border-color:var(--color-sky-900)}.border-teal-700{border-color:var(--color-teal-700)}.border-teal-900{border-color:var(--color-teal-900)}.border-transparent{border-color:#0000}.border-violet-900{border-color:var(--color-violet-900)}.bg-amber-400{background-color:var(--color-amber-400)}.bg-amber-950\/40{background-color:#46190166}@supports (color:color-mix(in lab, red, red)){.bg-amber-950\/40{background-color:color-mix(in oklab, var(--color-amber-950) 40%, transparent)}}.bg-amber-950\/50{background-color:#46190180}@supports (color:color-mix(in lab, red, red)){.bg-amber-950\/50{background-color:color-mix(in oklab, var(--color-amber-950) 50%, transparent)}}.bg-amber-950\/70{background-color:#461901b3}@supports (color:color-mix(in lab, red, red)){.bg-amber-950\/70{background-color:color-mix(in oklab, var(--color-amber-950) 70%, transparent)}}.bg-emerald-400{background-color:var(--color-emerald-400)}.bg-emerald-950\/70{background-color:#002c22b3}@supports (color:color-mix(in lab, red, red)){.bg-emerald-950\/70{background-color:color-mix(in oklab, var(--color-emerald-950) 70%, transparent)}}.bg-neutral-500{background-color:var(--color-neutral-500)}.bg-neutral-800{background-color:var(--color-neutral-800)}.bg-neutral-800\/60{background-color:#26262699}@supports (color:color-mix(in lab, red, red)){.bg-neutral-800\/60{background-color:color-mix(in oklab, var(--color-neutral-800) 60%, transparent)}}.bg-neutral-800\/80{background-color:#262626cc}@supports (color:color-mix(in lab, red, red)){.bg-neutral-800\/80{background-color:color-mix(in oklab, var(--color-neutral-800) 80%, transparent)}}.bg-neutral-900{background-color:var(--color-neutral-900)}.bg-neutral-900\/40{background-color:#17171766}@supports (color:color-mix(in lab, red, red)){.bg-neutral-900\/40{background-color:color-mix(in oklab, var(--color-neutral-900) 40%, transparent)}}.bg-neutral-900\/60{background-color:#17171799}@supports (color:color-mix(in lab, red, red)){.bg-neutral-900\/60{background-color:color-mix(in oklab, var(--color-neutral-900) 60%, transparent)}}.bg-neutral-900\/70{background-color:#171717b3}@supports (color:color-mix(in lab, red, red)){.bg-neutral-900\/70{background-color:color-mix(in oklab, var(--color-neutral-900) 70%, transparent)}}.bg-neutral-950{background-color:var(--color-neutral-950)}.bg-neutral-950\/60{background-color:#0a0a0a99}@supports (color:color-mix(in lab, red, red)){.bg-neutral-950\/60{background-color:color-mix(in oklab, var(--color-neutral-950) 60%, transparent)}}.bg-neutral-950\/90{background-color:#0a0a0ae6}@supports (color:color-mix(in lab, red, red)){.bg-neutral-950\/90{background-color:color-mix(in oklab, var(--color-neutral-950) 90%, transparent)}}.bg-red-400{background-color:var(--color-red-400)}.bg-red-950\/50{background-color:#46080980}@supports (color:color-mix(in lab, red, red)){.bg-red-950\/50{background-color:color-mix(in oklab, var(--color-red-950) 50%, transparent)}}.bg-red-950\/70{background-color:#460809b3}@supports (color:color-mix(in lab, red, red)){.bg-red-950\/70{background-color:color-mix(in oklab, var(--color-red-950) 70%, transparent)}}.bg-sky-400{background-color:var(--color-sky-400)}.bg-sky-950{background-color:var(--color-sky-950)}.bg-sky-950\/50{background-color:#052f4a80}@supports (color:color-mix(in lab, red, red)){.bg-sky-950\/50{background-color:color-mix(in oklab, var(--color-sky-950) 50%, transparent)}}.bg-sky-950\/60{background-color:#052f4a99}@supports (color:color-mix(in lab, red, red)){.bg-sky-950\/60{background-color:color-mix(in oklab, var(--color-sky-950) 60%, transparent)}}.bg-sky-950\/70{background-color:#052f4ab3}@supports (color:color-mix(in lab, red, red)){.bg-sky-950\/70{background-color:color-mix(in oklab, var(--color-sky-950) 70%, transparent)}}.bg-teal-950\/50{background-color:#022f2e80}@supports (color:color-mix(in lab, red, red)){.bg-teal-950\/50{background-color:color-mix(in oklab, var(--color-teal-950) 50%, transparent)}}.bg-teal-950\/60{background-color:#022f2e99}@supports (color:color-mix(in lab, red, red)){.bg-teal-950\/60{background-color:color-mix(in oklab, var(--color-teal-950) 60%, transparent)}}.bg-transparent{background-color:#0000}.bg-violet-950\/60{background-color:#2f0d6899}@supports (color:color-mix(in lab, red, red)){.bg-violet-950\/60{background-color:color-mix(in oklab, var(--color-violet-950) 60%, transparent)}}.p-0\.5{padding:calc(var(--spacing) * .5)}.p-2{padding:calc(var(--spacing) * 2)}.p-3{padding:calc(var(--spacing) * 3)}.px-1{padding-inline:var(--spacing)}.px-1\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-2\.5{padding-inline:calc(var(--spacing) * 2.5)}.px-3{padding-inline:calc(var(--spacing) * 3)}.py-0\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:var(--spacing)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-6{padding-block:calc(var(--spacing) * 6)}.pr-1{padding-right:var(--spacing)}.pl-8{padding-left:calc(var(--spacing) * 8)}.text-left{text-align:left}.font-mono{font-family:var(--font-mono)}.font-sans{font-family:var(--font-sans)}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.text-\[0\.625rem\]{font-size:.625rem}.text-\[0\.6875rem\]{font-size:.6875rem}.leading-4{--tw-leading:calc(var(--spacing) * 4);line-height:calc(var(--spacing) * 4)}.leading-5{--tw-leading:calc(var(--spacing) * 5);line-height:calc(var(--spacing) * 5)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.tracking-wider{--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider)}.break-words{overflow-wrap:break-word}.whitespace-pre{white-space:pre}.whitespace-pre-wrap{white-space:pre-wrap}.text-amber-200{color:var(--color-amber-200)}.text-amber-300{color:var(--color-amber-300)}.text-amber-300\/80{color:#ffd236cc}@supports (color:color-mix(in lab, red, red)){.text-amber-300\/80{color:color-mix(in oklab, var(--color-amber-300) 80%, transparent)}}.text-amber-400\/80{color:#fcbb00cc}@supports (color:color-mix(in lab, red, red)){.text-amber-400\/80{color:color-mix(in oklab, var(--color-amber-400) 80%, transparent)}}.text-emerald-300{color:var(--color-emerald-300)}.text-emerald-400\/80{color:#00d294cc}@supports (color:color-mix(in lab, red, red)){.text-emerald-400\/80{color:color-mix(in oklab, var(--color-emerald-400) 80%, transparent)}}.text-fuchsia-300{color:var(--color-fuchsia-300)}.text-neutral-100{color:var(--color-neutral-100)}.text-neutral-200{color:var(--color-neutral-200)}.text-neutral-300{color:var(--color-neutral-300)}.text-neutral-400{color:var(--color-neutral-400)}.text-neutral-500{color:var(--color-neutral-500)}.text-neutral-600{color:var(--color-neutral-600)}.text-red-300{color:var(--color-red-300)}.text-red-400{color:var(--color-red-400)}.text-sky-200{color:var(--color-sky-200)}.text-sky-300{color:var(--color-sky-300)}.text-sky-400{color:var(--color-sky-400)}.text-sky-400\/80{color:#00bcfecc}@supports (color:color-mix(in lab, red, red)){.text-sky-400\/80{color:color-mix(in oklab, var(--color-sky-400) 80%, transparent)}}.text-teal-300{color:var(--color-teal-300)}.text-teal-300\/80{color:#46ecd5cc}@supports (color:color-mix(in lab, red, red)){.text-teal-300\/80{color:color-mix(in oklab, var(--color-teal-300) 80%, transparent)}}.text-teal-400\/80{color:#00d3bdcc}@supports (color:color-mix(in lab, red, red)){.text-teal-400\/80{color:color-mix(in oklab, var(--color-teal-400) 80%, transparent)}}.text-violet-300{color:var(--color-violet-300)}.lowercase{text-transform:lowercase}.uppercase{text-transform:uppercase}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.accent-sky-500{accent-color:var(--color-sky-500)}.opacity-70{opacity:.7}.shadow-lg{--tw-shadow:0 10px 15px -3px var(--tw-shadow-color,#0000001a), 0 4px 6px -4px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.ring{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.outline-none{--tw-outline-style:none;outline-style:none}.selection\:bg-sky-900\/60 ::selection{background-color:#024a7099}@supports (color:color-mix(in lab, red, red)){.selection\:bg-sky-900\/60 ::selection{background-color:color-mix(in oklab, var(--color-sky-900) 60%, transparent)}}.selection\:bg-sky-900\/60::selection{background-color:#024a7099}@supports (color:color-mix(in lab, red, red)){.selection\:bg-sky-900\/60::selection{background-color:color-mix(in oklab, var(--color-sky-900) 60%, transparent)}}.placeholder\:text-neutral-600::placeholder{color:var(--color-neutral-600)}@media (hover:hover){.hover\:border-neutral-700:hover{border-color:var(--color-neutral-700)}.hover\:border-neutral-800:hover{border-color:var(--color-neutral-800)}.hover\:border-sky-600:hover{border-color:var(--color-sky-600)}.hover\:bg-neutral-900\/60:hover{background-color:#17171799}@supports (color:color-mix(in lab, red, red)){.hover\:bg-neutral-900\/60:hover{background-color:color-mix(in oklab, var(--color-neutral-900) 60%, transparent)}}.hover\:bg-sky-500\/30:hover{background-color:#00a5ef4d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-sky-500\/30:hover{background-color:color-mix(in oklab, var(--color-sky-500) 30%, transparent)}}.hover\:text-neutral-100:hover{color:var(--color-neutral-100)}.hover\:text-neutral-200:hover{color:var(--color-neutral-200)}}.focus\:border-sky-600:focus{border-color:var(--color-sky-600)}.focus\:bg-sky-500\/50:focus{background-color:#00a5ef80}@supports (color:color-mix(in lab, red, red)){.focus\:bg-sky-500\/50:focus{background-color:color-mix(in oklab, var(--color-sky-500) 50%, transparent)}}.focus\:outline-none:focus{--tw-outline-style:none;outline-style:none}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-40:disabled{opacity:.4}.disabled\:opacity-50:disabled{opacity:.5}@media (width>=40rem){.sm\:inline{display:inline}.sm\:px-4{padding-inline:calc(var(--spacing) * 4)}}@media (width>=64rem){.lg\:block{display:block}.lg\:w-2{width:calc(var(--spacing) * 2)}.lg\:shrink-0{flex-shrink:0}.lg\:flex-row{flex-direction:row}}@media (width>=80rem){.xl\:inline{display:inline}}}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}@keyframes pulse{50%{opacity:.5}}